Wireguard handshake but no traffic

RouterOS RouterOS beta
1

Hi,

Im using zerotier and wireguard on two sites. Zerotier is working fine, but wireguard is not working. The wireguard has handshake but no traffic i think there is problem in routes.
Could you please help?

please see /interface/wireguard export

site1
/interface wireguard
add listen-port=443 mtu=1420 name=wireguard1
/interface wireguard peers
add allowed-address=10.1.168.101/24 endpoint-address=185.5.225.240
endpoint-port=443 interface=wireguard1 public-key=
“xxx”

site2
/interface wireguard
add listen-port=443 mtu=1420 name=wireguard1
/interface wireguard peers
add allowed-address=192.168.144.22/24 endpoint-address=185.16.81.156
endpoint-port=443 interface=wireguard1 public-key=
“xxx”
site1.png
site2.png

2

Would need to see both configs.

Which end acts as server and which as client for the initial connection?
I would not use port 433, unless its the only way to get traffic through niggly ISPs…

3

sorry, which config do you need to see?

sorry, but I do not know how to check which is server or clinet..

4

All the *number gateways are broken. The occur when WG settings are delete and recreated.

You can ping from the router but no traffic will be directed into tunnel.

5

Okay clearly you are not the admin, I need to speak with the person that setup the sites.

6

Im admin, in mikrotik there is no option to see which is server or client…both sites are setup the same way according to mikrotik wiki even the firewall setting,there is handshake but no trafffic

7

And what exactly are you trying to do? Typically you connect LAN to LAN, but here it looks like you want to access WAN subnets on both routers, but not any LAN at all.

8

is it possible to have working zerotier and wireguard on one network? I like zerotier but I have slow speed. Thats why im trying the wireguard I have HAP AC3 on both sides.

9

Make a network drawing indicating all subnets.
If known, also the bandwidth limits of the outgoing isp links.

A picture says more then a thousand words…

10

What should I draw? you have 2 sites and 2 wireguard config export above. Is there anything wrong with the routes?

11

ZeroTier & Wireguard can happily co-exist together. Obviously NOT using the same IP’s !
192.168.1.x could be ZeroTier (and participants on your cloud-network) and 192.168.2.x could be for WireGuard.
Works fine here. (but not in a “site-to-site” topology, more hub-spoke alike)

12

No offense intended but a couple of people have asked you some questions where each time you seem to try to dodge the bullet not revealing the complete setup.
If you do not provide the info which is requested, that’s your good right.
But don’t expect us to have a crystal ball about your situation if you are not providing all info which might be relevant (maybe not to you).

You have a problem, that’s clear.
We do not.

You need help.
There are enough here willing to help but we need … info.

13

Hello,

as you can see from the routes,
wireguard is using subnet 192.168.144.0/24 and the zerotier is using 192.168.192.0/24. Wchich is obviously NOT using the same IP’s

14

Why do you think so? This is dynamic route for zerotier and zeroties is working fine.