Wed Jan 05, 2022 1:37 am
Ok, do you have a Wireguard 'server' already running on your Mikrotik router? If you do, does it work with Android or Windows Wireguard clients?
I'm just trying to establish if it is just the MacOS specific part that is giving trouble, or if you want someone to talk you through the whole thing.
At it's most basic, you create a Wireguard interface on the Mikrotik, and give it an IP address. You make sure that the port you are listening on is opened in the WAN firewall.
Take a note of the public key for this interface, as you will need to use it in the client setup.
Install the client software and configure a tunnel. This requires creating the interface and giving it an IP address. The client keypair will probably be created for you, take a note of the client's public key as you'll need this later.
In the peer section of the client tunnel config, set up the Mikrotik as a peer, using the Mikrotik's public key, the Mikrotik's IP (endpoint) and port, and the IPs that you want to route over the tunnel (use 0.0.0.0/0 if you want to send all traffic over the tunnel).
Finally, on the Mikrotik, add a peer using the client's public key and the IP address of the client as an allowed address.
This is a very basic simple road-warrior type setup, which should then just work. If it doesn't, you need to check the handshake completes correctly, which is sometimes easier to do from the client end, and then look at all your firewall rules in case they may be blocking things for you.