Code: Select all
# sep/18/2022 20:56:14 by RouterOS 7.6beta6
# software id = C0G8-ZJRZ
#
# model = RouterBOARD D52G-5HacD2HnD-TC
# serial number = ...
/interface wireguard
add listen-port=51820 mtu=1420 name=myvpn
/interface wireguard peers
add allowed-address=fd07:a3d6:156f:1::/64 comment=wrench interface=myvpn public-key=\
"..."
add allowed-address=fd07:a3d6:156f:3::2/128 comment=sixty-four endpoint-address="" interface=myvpn public-key=\
"..."
add allowed-address=fd07:a3d6:156f:3::3/128 comment=sweet interface=myvpn public-key=\
"..."
I made this conclusion because whenever I try to send a packet to fd07:a3d61::/96, tx counter for sweet increases, as if MikroTik tries to do a handshake with that peer. Handshake eventually fails though, and WireGuard interface tx drop counter increases.
Also, disabling sweet "fixes" the problem, and packets start to get routed to wrench correctly for all destination addresses.
I had this problem with 7.5, and 7.6beta6 hasn't changed anything.