Answer the question
In order to leave comments, you need to log in
How to give access to the local network from the tunnel in mikrotik?
I'm experimenting with wireguard tunnels on RouterOS 7. The network already has information on raising it once and twice . But in both cases, a tunnel is set up between two microworlds with white addresses. In my situation, on the one hand, microcurrent is behind the nat of the provider, on the other hand, VDS on centos / debian and with a white IP.
It was not a problem to raise the tunnel, both peers are pinged. (From server 10.7.0.1, ping goes to Mikrotik 10.7.0.2. As well as in the opposite direction)
--> wg-quick up wg0
ip link add wg0 type wireguard
wg setconf wg0 /dev/fd/63
ip -4 address add 10.7.0.1/24 dev wg0
ip link set mtu 1420 up dev wg0
ip -4 route add 192.168.88.0/24 dev wg0
--> wg show
interface: wg0
public key: eBdhB6J2pXPTZqwiuEDKNbK9swZTETGnrjF111D0axNB8=
private key: (hidden)
listening port: 51820
peer: nXpsVv4yTtOsB1/qcvzGnOIeeY+/jrUu0w00HsNp9vg=
preshared key: (hidden)
endpoint: Серый_IP_Провайдера:54467
allowed ips: 10.7.0.2/32, 192.168.88.0/24
latest handshake: 38 seconds ago
transfer: 5.23 KiB received, 2.22 KiB sent
--> iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -p udp -m udp --dport 51820 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.7.0.0/24 -j ACCEPT
Answer the question
In order to leave comments, you need to log in
Found in my notes with a solution tag. Isn't it?
VPN routes to the internal network proxy-arp
Quick and easy. For a peer-to-peer network.
1. Create a VPN profile. ppp-profile.
2. Specify the internal network pool in the Remote Address profile.
3. Specify -proxy-arp in the bridge interface in ARP
4. done
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question