good morning everyone, I would like to connect two mikrotik routers via wireguard VPN, once connected, two IPs of the local network of site A will have to go through the router of site B so as to exit with the public IP of site B. what do you recommend me to do? thanks
https://help.mikrotik.com/docs/display/ROS/WireGuard
https://www.youtube.com/watch?v=P6f8Qc4EItc&t=1291s
https://www.youtube.com/watch?v=vn9ky7p5ESM&t=8s&pp=ygUJd2lyZWd1YXJk
thanks for the wireguard server ok, but for forward only two ip of local traffic to other site ?
For a limited number of IPs, or whole subnets, one can use Routing Rules to direct traffic from local router A to enter the tunnel for RouterB
For that you will need:
a. routing table
b. an IP route with routing table of above
c. Routing rule for each IP, plus likely above that, order counts, a routing rule in case those IPs need local access to something else on router A, like a printer for example.
Would it be simpler if the two IPs of the site A don’t need to see the site A local network? in this case it wouldn’t be a problem. Can you show me some example configurations? thanks
No real difference, its simply the addition of one routing rule, dst-address=local subnet table=main for routing rule etc..
Config is up to you… One doesnt learn by copy and paste,…
@Mesquite - remember Your kind words the next time you ask for help at a car repair shop, or at a birthday present, or when painting your room…
Your post makes no sense, suspect language barrier, try google translate next time.
Two mikrotik routers should use different LAN network address, as Site A use 192.168.88 and another one Site B
use 192.168.89, and Wireguard nodes use 192.168.90.1 and 192.168.90.2.
And then, the AllowedIPs are:
Site A: allowed-ips=192.168.90.2/32,192.168.89.0/24
Site B: allowed-ips=192.168.90.1/32,192.168.88.0/24