This article will help you learn how to install and configure WireGuard on a router, using the MikroTik router as an example.
The configuration of WireGuard consists of two stages:
- WireGuard component installation.
- The configuration file uploading to the MikroTik router settings.
Download the .conf configuration file from the provided link: http://server_IP:port/xxxxxxxxxx/, you have received this link via email after activating the service.
You can also find VPN access information in your client area.
In your client area, find the VPN Servers tab.
In the Access section, find the WireGuard settings.
Download access information there.
WireGuard Component Installation on Router
To install WireGuard on MikroTik router, follow the steps:
Open the MikroTik configuration panel (command line) and enter:
- To create a new WireGuard interface, enter the following text in a command line and press Enter:
add listen-port=13231 mtu=1420 name=wireguard-inet private-key=”your private key”
- Add an IP address to the interface you just created:
add address=10.2.0.2/30 interface=wireguard-inet network=10.2.0.0
Configuration File Uploading to MikroTik Router Settings
Add a WireGuard server as a peer:
Add the endpoint address and endpoint port from the WireGuard config file (Endpoint=). If the config says Endpoint=126.96.36.199:51820, enter endpoint-address=188.8.131.52 and endpoint-port=51820.
Add the public key from the WireGuard config file (PublicKey=).
/interface wireguard peers
add allowed-address=0.0.0.0/0 endpoint-address=x.x.x.x endpoint-port=xxxxx interface=wireguard-inet persistent-keepalive=25s public-key="your public key"
- Enable masquerade for that interface.
This setup assumes that you are using the default local network address used by MikroTik. If you have changed this, use that address for scr-address=.
/ip firewall nat
add action=masquerade chain=srcnat out-interface=wireguard-inet src-address=192.168.88.0/24
- Redirect all internet traffic through WireGuard:
add disabled=no distance=1 dst-address=0.0.0.0/1 gateway=10.2.0.1 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=184.108.40.206/1 gateway=10.2.0.1 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
- Configure DNS settings:
set 0 use-peer-dns=no
- To redirect the WireGuard IP address through main provider’s gateway, replace x.x.x.x with the endpoint address from the config file (Endpoint=):
add disabled=no dst-address=x.x.x.x/32 gateway=[/ip dhcp-client get [find interface=ether1] gateway] routing-table=main suppress-hw-offload=no
- Restart your router.
If you have any questions, you can ask them in the online chat in the lower right corner of the site or by ticketing the Techsupport Department.
To order the Personal VPN and Socks5 Proxy service, please proceed with the order.