Disable windows firewall then try to ping.

Yes, mikrotik will accept the subnet.

@Anav
I want to revisit this issue. Let me know how we can connect and maybe schedule a session we go through the setup. Would like also to know how to connect link wireguard via CGNAT.

Thanks

Update:
@anav the solutions did not work, was forced to revert back to using ipsec since I don't have enough time to troubleshoot the issue.

Thanks for taking your time to have a look at my issue and for trying to help me out. Totally appreciated.

Actually you didnt, the listening port was NOT supposed to change on R1, just on R2. The input chain rule for wireguard port in concert was NOT supposed to change on R1, just on R2 ( In both cases above it was supposed to stay at 13231 ). The only thing that was supposed to change was a. the peer s...

@anav, Have done as you have recommended but still no traffic between subnets: Below are the current configs: # jun/10/2023 12:50:46 by RouterOS 7.9.2 # software id = 141B-TTYI # # model = RB951G-2HnD # serial number = xxxxx /interface bridge add admin-mac=18:FD:74:2F:82:xx auto-mac=no comment=defco...

1. Do both have publicly accessible IP addresses? 2. Did you want both to be clients and servers or just one has client and one as server for initial handshake? The reason I ask is both have input chain rules for wireguard whereas normally only one needs it to establish a connection. Below are the ...

Hi all, I have setup site2site VPN via wireguard, here is what i can achieve: 1. I can only ping router 2 from router1's interface and vice versa. What i have been unable to achieve: 1. Cannot reach internal LAN devices from either side i.e from router1, i cannot reach devices in the LAN of router 2...

Has anyone been able to implement wireguard for site to site VPN. I have done my config as per the blog post https://grzegorzkowalik.com/konfiguracja-mikrotik-wireguard-site-to-site/ and honestly it does not connect. Also followed the video post on youtube https://youtu.be/P6f8Qc4EItc but still my r...

There is even an "upgrade" channel, for ROS 6 , to look for 7. ("test" also gives 7 )

Thanks man. I had no idea there was an "upgrade" option.

Already upgraded!

Thanks everyone who has commented. I technically now have an idea on how to go about plus have received more information from client that not all sites need to talk to HQ just a few branches that need to talk to each other exclusively, maybe much later is when they will need to all talk to the HQ. O...

If you want to upgrade to v7, please select test instead of stable. Or download the package manually, place it in the root and reboot. Why do you want to upgrade?

It can't pick 7.x automatically? Want to upgrade to 7.x because of wireguard and Ipsec

6.49.7 is the latest stable 6.x
so nothing wrong for me here

Shouldn't it see 7.x?

I have a router does not detect new version.what could be the issue? or the device is not supported? [xxxx@xxx] > system routerboard print routerboard: yes model: RB2011UiAS-2HnD revision: r3 serial-number: D5AB0E277E10 firmware-type: ar9344 factory-firmware: 6.46.8 current-firmware: 6.49.7 upgrade-...

Yes, 58, while local networks are typically private IP, every working Internet site has at least one dynamic or static public IP. VPN can work with dynamic IP but not without public IP otherwise a connection to public Internet just doesn't work. IMO 58 sites is potentially complicated. Study carefu...

Am looking at using mikrotik devices to do some site to site VPN(branch to branch) but from all the tutorials/blogs that am looking at it seems that i need static public IP's to perform the configurations. I have 58 branches spread across, does it ideally mean i need 58 public IP's? Am just looking ...

Because you are dropping it in input chain. Add rules to accept ICMP and any other protocol to make it work or add rule to accept established connections. Mind sharing the exact rule that am missing/ or that i need to add? Update: Found the rule that i need to add. For anyone else with the same iss...

Do you have Internet access at all on the MikroTik?
Does a ping 8.8.8.8 give a response?

Yes, i can browse and ping easily from PC connected to the mikrotik but cannot ping inside mikrotik itself.

Trying to update(check for updates) but am facing the error "Could not resolve dns name". Just to add on, i cannot even perform "ping" from the device. Below is my config: # jan/05/2023 21:22:14 by RouterOS 6.49.6 # software id = MXWL-FJNR # # model = 951Ui-2HnD /interface bridge...

Hi all, Have a RB2011-2HND with the LAN config as subnet 192.168.1.x with DHCP being handled by the mikrotik, we only have a dumb switch so all routing is happening at mikrotik level. We have internal systems on the server(same subnet) that i would like to prioritize traffic for. I.e any traffic mea...

Have you checked the lease time of the PFsense DHCP config? Could be the Mikrotik is receiving a different IP after the said period of time. Also check for loops in your connection.

HELP! Mikrotik router is accessible from outside but there are no rules to allow the same. How is this possible? Network description: So we have a PPOE modem connection from ISP with a Public IP assigned to us. When you browse the public IP, the mikrotik page shows up. How do i remove this from the ...

Mmh i exactly understand how hairpin-nat is helping, maybe i dont understand it correct^^ My network: address-pool=dhcp-local authoritative=after-2sec-delay disabled=no interface=bridge1 lease-time=1d name=dhcp-local address=192.168.1.0/24 dns-server=192.168.1.2,192.168.1.3 gateway=192.168.1.1 netm...

Folks,
Can the routerOS currently do the above? I.e. If i have blocked the keyword "porn", anyone who uses the any search engine, the RouterOs will perform "man in the middle" operations and block the search.

Regards,
DataNav