Community discussions

MikroTik App
 
McKajVah
just joined
Topic Author
Posts: 23
Joined: Sun Jun 05, 2022 10:43 pm

Mikrotik CHR as 2nd router for Wireguard tunnel

Sat Jul 09, 2022 3:03 pm

Hi.

I currently have a RB5009 on order and will eventually migrate the router over to that and dump the ISP provided one.

Now I'm currently running the default router from my ISP with a port forwarding to a Mikrotik CHR Routeros V7 running on Proxmox. I'm running Wireguard on the CHR Routeros v7 and can connect to it from outside. Problem is I cannot connect to anything else on the network. I want to connect out to the Internet via the Wireguard and connect to other "machines" on my home network.
Seems I'm missing some "routing" rules on the Mikrotik CHR, but I'm not sure.

|-----------Wireguard tunnel ----------|
Internet --> ISP router --> Mikrotik CHR routeros v7 --> Home network
.................................................................................... \ --> Internet

How can I achieve what I want?

Thanks.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 23832
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Mikrotik CHR as 2nd router for Wireguard tunnel

Sat Jul 09, 2022 4:28 pm

Post your config from the CHR.
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: Mikrotik CHR as 2nd router for Wireguard tunnel

Sat Jul 09, 2022 6:05 pm

If other devices don't have CHR as gateway, they don't know that they should send responses to WG clients there. You can either add route to WG client on main router, to point to CHR. Or quick fix, if you don't care about devices seeing addresses of WG clients, add srcnat on CHR, to make all their connections appear as if they are from CHR itself.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 23832
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Mikrotik CHR as 2nd router for Wireguard tunnel

Sat Jul 09, 2022 7:06 pm

Covered in Para 8................
viewtopic.php?t=182340