Wireguard. How can i seen peer ip in Mikrotik?

RouterOS RouterOS beta
1

My mikrotik setting up like wireguard server. Some peers connecting to my mikrotik. But how i can see client(peer) ip , wich connected to wireguard?

2

/interface/wireguard/peers/print detail

does that show what you want?

3

Only the peer IP addresses you identify are allowed to exit the tunnel to hit the MT device.
Only the peer IP addresses you allow in firewall rules will be allowed to enter local subnets or go out local WAN.

USE LOG function for example.
add action=log chain=forward in-interface=wireguard dst-address=local_subnet
add action=accept chain=forward in-interface=wireguard dst-address=local_subnet

Even better…
add action=add-src-to-address-list in-interface=wireguard dst-address=LAN_subnet address-list=TRACKING
add action=accept chain=forward in-interface=wireguard dst-address=local_subnet

4

YES! Thanks!

5

This doesn’t show who is currently connected. It shows all configured peers. How can I see who is currently connected?

6

WG on itself is not really based on peer IP.
You can do without (but not recommended).

Check last handshake for peers.
The ones frequently moving to zero, are connected one way or the other.

If they send real traffic, that’s something else.

7

This will show active peers.
/interface/wireguard/peers/print detail where last-handshake < [:totime “3m”]

8

And how to check if Mikrotik AS CLIENT itself connects to the remote server? (as in 3rd party VPN service) ?