PS: Part of the household may have their MikroTik router behind another router provided by the internet provider. Now set up the client according to the type of phone or computer. Click + and add wireguard to local network, named 'LAN' in this case. Go to IP → Firewalland add a new rule again using the + icon, see the example below:Īnd if you want to access local network from your WireGuard (probably yes), you should add wireguard interface in interface list.This can be done under Interfaces -> Interface List. If you have a default firewall -> you are using predefined firewall from Quick Setup in your MikroTik, you need to allow the UDP port for WireGuard. Copy the Public Key and assign it an address allowed for the WireGuard network, which should have a unique range: Here, you need to know the Public Key of the client device (for example, phone, computer, tablet - look in your client's app, see instructions in the left menu). In the final step, we will add the other side, called ' Peer'. We will choose a unique range and start with a one, for example: Next, we must add a new address for the WireGuard interface in the IP → Addresses by clicking on the + icon. wireguard and copy the Public Key somewhere:

Go to the WireGuardtab and the + icon to add a new WireGuard connection. We recommend not using the web interface and using WinBox. Internet connection and public IPv4 address (if you don't have it, ask your internet provider) It is ideal for secure access to your home NAS or smart home when you are not at home.Īny MikroTik router (Router OS 7 version, if you have an older one, upgrade the firmware) If you are a home user and thinking about how to access your home network from the internet, WireGuard is currently one of the easiest choices. This phenomenal VPN is very fast, secure and easily configurable in a home environment. (Not available in lower RouterOS versions, you must upgrade RouterOS).

The article describes the self setup of VPN on WireGuard on MikroTik devices with version RouterOS 7 and higher.

Mikrotik wireguard firewall