RouterOS v7.7 [Stable] - Wireguard Setup

RouterOS Beginner Basics
1

Hello,

I am trying to setup VPN connections from multiple remote servers all running Wireguard. These connections should be directed to certain devices only, such that, for example, device X is directed through tunnel A while device Y is directed through tunnel B. I think something like iptables could do the job of filtering and redirecting each client to the correct endpoint (I’m happy to be corrected if there is a better/more efficient way to do it too).

The VPN provider is supplying config files in the form below:

[Interface]
PrivateKey = PRIVATE_KEY_XXXXXXXX
Address = 11.22.33.44/24
DNS = 1.1.1.1, 1.0.0.1

[Peer]
PublicKey = PUBLIC_KEY_YYYYYYYYYY
PresharedKey = PRESHARED_KEY_ZZZZZZZZZZZ
Endpoint = 12.34.56.78:51820
AllowedIPs = 0.0.0.0/0, ::0/0

I have updated my RouterBoard RB2011UiAS-RM to the latest RouterOS, and I have installed the WireGuard package on the OS.

Thank you for any help you can provide.

2

So how many accounts do you have with this third party provider.
How many tunnels will you be creating ( assuming they are multiple to address different geographical endpoints? )

Then you need to detail specifically
which user/devices or groups of user/device on the 2011 need to access the tunnel.

Read up here - https://forum.mikrotik.com/viewtopic.php?t=182340

Once you have a config done up and need some tweaking, return
and provide your config…
/export file=anynameyouwish ( minus router serial # and any public WANIP info etc.. )

3

And make a drawing of what you are planning to do. It might help for yourself as well.