Thanks for instruction.

It almost works - however, while 2g guest network works fine (tested by IoT devices and smartphone), 5g guest network rejects WAN request, so smartphone could not connect to internet. Mikrotik hap AC^2, 7.15.3

After upgrade to 7.15 old instruction not working due to packages separation for wifi My goal is to have guest wifi networks completely unreachable in both ways and guest wifi have internet access only. Also, prevent to set static IP on guest networks. The best is to have some instruction for this c...

Yeah, adding to interface list LAN fix the issue. Am I introducing any security issue with such solution? Why Wireguard not added to LAN by default?

1. Mikrotik hap AC^2
2. Wireguard installed, Mikrotik has wg IP 174.16.0.1
3. IP address pool 174.16.0.0/24
4. Peers could comunicate with each other but when I try to open Winbox (174.16.0.1) got connection refused

Solution found in this server - disable firewall (in my case ufw) before starting netinstall-cli as it blocks PXE server (maybe it is possible to write some rule for ufw, but I have no time for this exercise)

Used linux netinstall-cli

netinstall-cli shows Waiting for ROUTERBOARD

1. Disconnected all
2. Press reset
3. Plug power
4. Waited till usr stoped blink
5. Put ethternet cable to 1st (WAN) port

nothing

I have started upgrade form 7.13.0 to 7.14.2

As a result, hap AC^2 could not start anymore

Reset not work

Netinstall also not work

0. Working 7.11
1. Created backup on 7.11
2. Press download and install 7.12
3. No answer
4. Reset (netinstall could not install)
5. Restore backup on 7.12
6. Press download and install 7.13
7. No answer

Another LAN has "gray" (private) IP - behind provider's NAT (something like 10.20.30.40)

So, the idea is to connect from this another LAN to Mikrotik router (over Wireguard or other VPN), and than on Mikrotik allow traffic redirect from "wild" Internet to PC's in another LAN

white ip - real (not private) IP address. A lot of IP in Ukraine is "gray" (over provider's NAT), so not reacheble from Internet

I want to RDP from WAN (internet) to my server with non-white IP

The plan is:
* server with non-white IP make wireguard connection to Mikrotik router (which has white IP address)
* Mikrotik setup the rule to forward traffic from WAN to wireguard peer

Schema: 1. Mikrotik router with Wireguard server 172.16.1.1 2. Wireguard peer with address 172.16.1.2 3. Peer has RDP port 3389 I have added rule dstmap protocol tcp port 23389 with action netmap To address 172.16.1.2 To ports 3389 Whenever I am trying to access to my_white_ip:23389 port I got timeo...