For both routers.
Mikrotik 1 (Client)
/interface bridgehttps://my.zerotier.com/ ”
add action=accept chain=input comment=“accept ipsec connection” dst-port=
add action=accept chain=input comment=“accept ipsec connection” dst-port=
add action=accept chain=input comment=“accept ipsec connection” dst-port=
add action=accept chain=input comment=“accept ipsec connection” dst-port=
add action=accept chain=input comment=“accept ipsec connection” dst-port=
add action=drop chain=input comment=“drop everything except from Management”
add action=drop chain=input comment=“drop everything except from Management”
add action=drop chain=input comment=“drop everything except from Management”
add action=accept chain=prerouting in-interface=TIME-1Gbps
add action=accept chain=prerouting in-interface=TIME-1Gbps-2
add action=accept chain=prerouting in-interface=TIME-1Gbps-3
add action=accept chain=prerouting in-interface=TIME-1Gbps-4
add action=masquerade chain=srcnat comment=
add action=masquerade chain=srcnat comment=
add action=masquerade chain=srcnat comment=
add action=masquerade chain=srcnat comment=
add action=masquerade chain=srcnat comment=content=speedtest.net content=fast.com
>
Mikrotik 2 (DC)
> ```text
# 2024-07-22 20:17:55 by RouterOS 7.15.2
# software id = redacted
#
# model = CCR2004-1G-12S+2XS
# serial number = redacted
/interface bridge
add name=lan
/interface ethernet
set [ find default-name=sfp-sfpplus2 ] auto-negotiation=no speed=1G-baseX
/interface wireguard
add comment=back-to-home-vpn listen-port=4368 mtu=1420 name=back-to-home-vpn
add listen-port=13234 mtu=1420 name=wg-bintang
add listen-port=13233 mtu=1420 name=wg-chambers
add listen-port=13231 mtu=1420 name=wg-mvertica
add listen-port=13235 mtu=1420 name=wg-trion1
add listen-port=13236 mtu=1420 name=wg-trion2
add listen-port=13232 mtu=1420 name=wg-youthcity
/ip pool
add name=dhcp_pool0 ranges=172.255.0.10-172.255.0.15
/ip dhcp-server
add address-pool=dhcp_pool0 interface=lan name=dhcp1
/port
set 0 name=serial0
set 1 name=serial1
/routing ospf instance
add disabled=no name=ospf-instance-1
/routing ospf area
add disabled=no instance=ospf-instance-1 name=backbone
/interface bridge port
add bridge=lan interface=ether1
add bridge=lan interface=sfp-sfpplus12
/ip firewall connection tracking
set udp-timeout=10s
/interface wireguard peers
add allowed-address=0.0.0.0/0 interface=wg-mvertica is-responder=yes name=\
Mvertica<>CJ1 public-key="zNNiAKHkr4ilR+YlswYQ/2yzVj4R5Sut+0txtNOcqUw="
add allowed-address=0.0.0.0/0 interface=wg-youthcity is-responder=yes name=\
YouthCity<>CJ1 public-key="nP0+2K+p4sJW2eKH0M+Fb4fGVRnJNqccom5tE/U7lkQ="
add allowed-address=0.0.0.0/0 interface=wg-chambers is-responder=yes name=\
Chambers<>CJ1 public-key="RX7krlOq+jvUCmTgk0PKTlPbQkeosmq1ZLGWJc4GTWg="
add allowed-address=0.0.0.0/0 interface=wg-bintang is-responder=yes name=\
Bintang<>CJ1 public-key="nlq2Xpk69LypsJde9Qce1p0rERPakTRanD4/Yo0o/AQ="
add allowed-address=0.0.0.0/0 interface=wg-trion1 is-responder=yes name=\
Trion1<>CJ1 public-key="PNiiHXsE72ujLVxrAviLqgayZGOKFFkEJTlwx3N+M38="
add allowed-address=0.0.0.0/0 interface=wg-trion2 is-responder=yes name=\
Trion2<>CJ1 public-key="ROjuTdblIzPaXo8ko8qxemLNEXAMi0fofe29Ixgze2Q="
/ip address
add address=172.255.0.1/24 comment=defconf interface=lan network=172.255.0.0
add address=redacted interface=sfp-sfpplus1 network=redacted
add address=172.254.0.1/30 interface=wg-mvertica network=172.254.0.0
add address=172.254.0.5/30 interface=wg-youthcity network=172.254.0.4
add address=172.254.0.9/30 interface=wg-chambers network=172.254.0.8
add address=172.254.0.13/30 interface=wg-bintang network=172.254.0.12
add address=172.254.0.17/30 interface=wg-trion1 network=172.254.0.16
add address=172.254.0.21/30 interface=wg-trion2 network=172.254.0.20
/ip cloud
set back-to-home-vpn=enabled ddns-enabled=yes
/ip cloud back-to-home-users
add allow-lan=yes name=fizo private-key=\
redacted public-key=\
"Ssnvcx/np5AeZhwBlygsr6epgpymgyzQKiy38iDM5wc="
add allow-lan=yes name=wilson private-key=\
redacted public-key=\
"VhGrSrbNflE9q+M57saeGcjpYL8G+9nMEgxJUODlMRs="
/ip dhcp-server network
add address=172.255.0.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=172.255.0.1
/ip dns
set servers=8.8.8.8,8.8.4.4
/ip firewall address-list
add address=redacted list=CJ1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=sfp-sfpplus1
add action=dst-nat chain=dstnat comment="SSH tcp/22 dst-nat to Splynx Server" \
dst-port=22 in-interface=sfp-sfpplus1 protocol=tcp to-addresses=\
172.255.0.254 to-ports=22
add action=dst-nat chain=dstnat comment=\
"HTTP tcp/80 dst-nat to Splynx Server" dst-port=80 in-interface=\
sfp-sfpplus1 protocol=tcp to-addresses=172.255.0.254 to-ports=80
add action=dst-nat chain=dstnat comment=\
"HTTP tcp/443 dst-nat to Splynx Server" dst-port=443 in-interface=\
sfp-sfpplus1 protocol=tcp to-addresses=172.255.0.254 to-ports=443
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=redacted routing-table=\
main suppress-hw-offload=no
add disabled=no dst-address=172.16.252.0/22 gateway=172.254.0.2 \
routing-table=main suppress-hw-offload=no
add disabled=no distance=1 dst-address=172.16.248.0/22 gateway=172.254.0.6 \
routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=172.16.244.0/22 gateway=172.254.0.10 \
routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=172.16.240.0/22 gateway=172.254.0.14 \
routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=172.16.236.0/22 gateway=172.254.0.18 \
routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=172.16.232.0/22 gateway=172.254.0.22 \
routing-table=main scope=30 suppress-hw-offload=no target-scope=10
/ipv6 route
add disabled=no dst-address=::/0 gateway=redacted routing-table=\
main
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ipv6 address
add address=redacted interface=sfp-sfpplus1
/routing ospf interface-template
add area=backbone disabled=no interfaces=wg-mvertica type=ptp
add area=backbone disabled=no interfaces=wg-youthcity type=ptp
add area=backbone disabled=no interfaces=wg-chambers type=ptp
add area=backbone disabled=no interfaces=wg-bintang type=ptp
add area=backbone disabled=no interfaces=wg-trion1 type=ptp
add area=backbone disabled=no interfaces=wg-trion2 type=ptp
add area=backbone disabled=no interfaces=lan
/system clock
set time-zone-name=Asia/Kuala_Lumpur
/system identity
set name=OriginTechLab-CJ1
/system note
set show-at-login=no
/system routerboard settings
set enter-setup-on=delete-key
I want to route all of the users and all of the traffic to the specific WAN link. Basically I want to do PCC load balance but through the wireguard tunnel. I want to create a tunnel for each WAN links and redirect all traffic thru the tunnels
Also answer,
