wireguard - client windows

RouterOS General
1

I have configured wireguard on RouterOS 7.6

/interface/wireguard> print
Flags: X - disabled; R-running
  0 R name="VPN_Remote" mtu=1420 listen-port=13231 private-key="CCG...8=" public-key="HHe...M="

/interface/wireguard/peers> print
Columns: INTERFACE, PUBLIC-KEY, ENDPOINT-PORT, ALLOWED-ADDRESS
# INTERFACE PUBLIC-KEY ENDPOINT-PORT ALLOWED-ADDRESS
0 VPN_Remote v8A...g= 0 10.10.100.2/32

/ip/firewall/filter> print
Flags: X - disabled, I - invalid; D-dynamic
  0 ;;; Wireguard
       chain=input action=accept protocol=udp dst-port=13231 log=no log-prefix=""

/ip/address> print
7 10.10.100.1/24   10.10.100.0   VPN_Remote

Also configure the windows client

[Interface]
PrivateKey = G...s=
Address = 10.10.100.2/24
DNS=8.8.8.8

[Peer]
PublicKey = HHe...M=
Allowed IPs = 192.168.30.0/24, 192.168.40.0/24
Endpoint = X.X.X.X:13231
Persistent Keepalive = 10

I have already made this configuration in other mikrotik and they work perfectly, but in this one it does not establish a connection

the windows client gets this error

2022-10-20 21:24:18.943: [TUN] [Coo] Sending handshake initiation to peer 1 (x.x.x.x:13231)
2022-10-20 21:24:24.100: [TUN] [Coo] Handshake for peer 1 (x.x.x.x:13231) did not complete after 5 seconds, retrying (try 11)

I hope you can help me solve this

2

You did not provide the full config on Mikrotik side but on the windows client, I would add subnet for WG interface in the section allowed address as well.
Allowed IPs = 192.168.30.0/24, 192.168.40.0/24**, 10.10.100.0/24**
That will not cause this error though.

You are 100% sure your keys are correct ?

  • Public key of Mikrotik Wireguard INTERFACE as public key of peer on Windows client
  • Public key of Windows client (on top of edit window) as public key of peer on Mikrotik side