Problem Solved. Wrong public key at the wrong place. Thank you everyone. Sorry I should have paid more attention.

Hello, Now the fiber ONT is connect directly to my MT. No more additional router between MT and ISP The public ip under dhcp client is the same that ip/cloud and i can use ddns or public ip outside the house to reach MT. I can port forward ftp server on my computer but can't port forward service on ...

After the capsman default rule in the input chain is where you put add chain=input action=accept dst-port=13231 protocol=udp comment="wireguard handshake" Done Add your wireguard interface.... and peers ( generate public key for your client, and get public key generated by client etc.) Don...

You want to start with a clean version WITH default rules........ if thats what you mean by without any rules, aka rules that you made/changed.

Done with default ip 192.168.88.1

netinstall a clean version of software and dont monkey with any rules you are not sure of, add wireguard and we can go from there to get wireguard working.

Tank you. I already started with clean version without any rules
I hope this diagram will help:

Port 13231 was already fowarded on my isp router. But don't know verry well how to port foward 13231 since it's a double nat. Please can you give me a script to foward 13231 on Mikrotik ?

Why are you here.............. shouldnt you complain to or ask for support from the authors of your demise systemzone!!

So you're not going to help me ?

I hope it is not too late by then, your router being hacked and/or your provider having disconnected you for having an open DNS resolver...

Ok. But have you solution for me ? Do you know why i can't connect to the wireguard server?

This is a trial router. It's not my main router. I did not put a firewall to be sure that nothing was blocking wireguard. Once the problem is solved I will do the firewall as it should be.

Cannot reach wireguard server. Good morning. I can't connect to the newly created wireguard server. Should we make a port forward of 13231? If yes, how ? I followed this tutorial: https://systemzone.net/wireguard-vpn-setup-in-mikrotik-routeros7-with-windows-os/ # feb/23/2023 19:57:15 by RouterOS 7.7...

Tank for reply . May i know what configuration i should do in RADIUS server -> Usermanager side ? What about Radius and dot1X tab? https://ibb.co/tbDC0Mr On the RADIUS client side (=AP) I use Nanostation M2 https://ibb.co/qgSz3rT My Mikrotik setup: /interface wireless set [ find default-name=wlan1 ]...

https://wiki.mikrotik.com/wiki/Manual:User_Manager
https://help.mikrotik.com/docs/display/ ... terOS+user

I'm not talking about user manager. I'm talking about how to use Radius server for EAP

Please can you give us step by step or tutorial for Radius server (802.1X) on Routeros7 ?

Hello. As the title says I am looking for a way to port foward servers and services through a vpn install on vps and its public ip in order to get rid of this CGNAT nightmare that ISP provide to their clients. Many people are in this situation and are looking for a solution. Please take a look at th...

Okay. It's understood. if i choose to go with beta 7 (it doesn't bother me at all) can you help me with commands to complete the configuration?

Hello, I would like to have help setting up Dot x1 with a radius server built-in into Mikrotik. What I'm trying to do is to connect a wifi router to ethernet port of mikrotik and have EAP authentication username and password when connecting to the wifi network. I couldn't find any tutorials. I read ...

Code: Select all /ip pool add name=dhcp_pool0 ranges=10.5.8.10-10.5.8.250 /ip dhcp-server add address-pool=dhcp_pool0 disabled=no interface=ether3 name=dhcp1 /ip address add address=10.5.8.254/24 interface=ether3 network=10.5.8.0 Seeing Ether3 but you screen shot says nordvpn-eth5 Yeah i change rou...

Hello, I'am in the same situation: Devices does get the VPN ip and are able to ping websites but cannot browse the internet: # apr/28/2020 10:35:35 by RouterOS 6.46.5 # software id = FQAZ-Y0T5 # # model = RB760iGS # serial number = ************** /interface wireless security-profiles set [ find defa...

Hello, Please I am in same situation . A lot of problems to block soft such as Angry ip scan, Advanced ip scan. Please Help.