On the macos and android client, the allowed addresses are automatically installed into the routing table.
On the mikrotik, this doesn’t happen. The /32 address that I have assigned to the session doesn’t get installed into the IP route table, and I have to add a static route. I would expect this to automatically appear in the routing table when the tunnel is active.
Is there a mikrotikian reason why this isn’t the case?
Short answer, MT only creates routes automatically for local subnets./interfaces, not unknown remote subnets.
I suppose one could look at any subnets in allowed IPs or individual IPs and do the same, assuming they are not part of the wireguard subnet already.
Stating the obvious…
if an address is created on the router it would be routed automatically…
AKA Any interface with an address on the router gets a DAC routing…
More to the point regarding wireguard..
any subnet you have in allowed IPs, if not local on the router must have a routing.
Another subtle point, is that wireguard interface can have multiple subnets assigned to it.
One example might be three routers, RA - server, RB and RC and client routers.
The wireguard subnet on A are 10.10.10.0/24, 10.20.20.0/24, 10.30.30.0/24
The wireguard subnet on B is 10.20.20.0/24
The wireguard subnet on C is 10.30.30.0/24
Or they could all have the same subnet 10.10.10.0/24