Thanks again anav, see attached.

Thanks anav, appreciate you taking the time. Forgive my ignorance, but I'm not sure I fully understand the first point. I'm not really interested in these devices accessing devices/resources on the primary VLAN. I've implemented the suggested points and still not able to get out to the internet via ...

Hi anav,

Thanks for the reply. Sorry about the mess - I've done another export.

Hi all, Not sure if anyone else has ran into similar issues, but about a month or so ago, the Wireguard connections I had out to Proton VPN for clients in a particular subnet (10.10.20.0/24) suddenly stopped working. I can only presume this is due to an update as it was working fine for a couple of ...

Oops, I misunderstood the order. I've updated those, and still no luck. ..From my client devices in SiteA/Router A (10.13.38.200/10.13.38.2/10.0.70.11), I still can't ping the alternate sites (can ping the WG IPs though). Strangely, it's still not an issue from the Mikrotik routers themselves ..and ...

Thanks for spending some serious time on this, I've made the changes. Don't think I've missed anything..

Everything is similar to how it is now, but it's certainly a lot cleaner. Still not able to ping from clients in Site A to Site B etc.

Update: so things are a bit weird.. I can ping/access resources on 10.13.37.0/24 in Site B from 10.0.70.0/24 in Site A. Yet, I can't ping/access resources on 10.0.80.0/24 in Site B from 10.0.70.0/24 in Site A. I'll see if I can get some testing done in the opposite direction to see what happens there.

See attached, thanks!

Apologies for my misunderstanding, I did think you were referring to the initial handshake which is what I meant when I said I'd removed the endpoint address (from Site B) I would consider Site A best to initiate the handshake, so I've went in already and removed the endpoint address from Site B so ...

Thanks for the reply! I'm trying more than ping, but I'm just trying to validate basic connectivity with ping. I have some servers on both sides that I'm ideally trying to access over the tunnel within each VLAN of each site, I'm also trying to access those but having no luck. Just seems a bit weird...

Hi all, hoping someone can help me with this as I've been pulling my hair out for a few weeks now. Long story short, I have 2x sites (imaginatively named SiteA + SiteB) and I'm having some issues getting Wireguard/Mikrotik to obey the rules I've setup. As an example, I can ping the Site B LAN IPs fr...