P
P
piboho48572020-09-28 11:38:09
Computer networks
piboho4857, 2020-09-28 11:38:09

How to give access to the local network from the tunnel in mikrotik?

I'm experimenting with wireguard tunnels on RouterOS 7. The network already has information on raising it once and twice . But in both cases, a tunnel is set up between two microworlds with white addresses. In my situation, on the one hand, microcurrent is behind the nat of the provider, on the other hand, VDS on centos / debian and with a white IP.
It was not a problem to raise the tunnel, both peers are pinged. (From server 10.7.0.1, ping goes to Mikrotik 10.7.0.2. As well as in the opposite direction)

--> wg-quick up wg0
  ip link add wg0 type wireguard
  wg setconf wg0 /dev/fd/63
  ip -4 address add 10.7.0.1/24 dev wg0
  ip link set mtu 1420 up dev wg0
  ip -4 route add 192.168.88.0/24 dev wg0

--> wg show
interface: wg0
  public key: eBdhB6J2pXPTZqwiuEDKNbK9swZTETGnrjF111D0axNB8=
  private key: (hidden)
  listening port: 51820

peer: nXpsVv4yTtOsB1/qcvzGnOIeeY+/jrUu0w00HsNp9vg=
  preshared key: (hidden)
  endpoint: Серый_IP_Провайдера:54467
  allowed ips: 10.7.0.2/32, 192.168.88.0/24
  latest handshake: 38 seconds ago
  transfer: 5.23 KiB received, 2.22 KiB sent

--> iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -p udp -m udp --dport 51820 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 10.7.0.0/24 -j ACCEPT

Ping to 192.168.88.1 fails. How to access local network 192.168.88.0/24 behind mikrotik? (To simplify the setup, I turned off all the firewall rules on mikrotik)
Thanks for the answers

Answer the question

In order to leave comments, you need to log in

2 answer(s)
N
Nird, 2020-10-01
@Nird_o

Found in my notes with a solution tag. Isn't it?
VPN routes to the internal network proxy-arp
Quick and easy. For a peer-to-peer network.
1. Create a VPN profile. ppp-profile.
2. Specify the internal network pool in the Remote Address profile.
3. Specify -proxy-arp in the bridge interface in ARP
4. done

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question