WireGuard VPN with MikroTik and Windows Setup Guide

Contents:

In this guide, I’ll show you how to easily set up a VPN tunnel using WireGuard between a Windows PC and a MikroTik router. Whether you need to manage your router remotely or access hosts on your network from anywhere, this tutorial will covers each aspect and aims to simplify the steps to make it easy for anyone at any skill level.

Continue reading

Mikrotik DHCP Lease Exclusions

Adding a DHCP lease exclusion is typically a simple task on most routers—just a few clicks to add the desired IP to an exclusion list. However, on RouterOS, the process is quite manual and requires a bit more effort. This guide will walk you through the steps to create a DHCP exclusion in RouterOS, leveraging its granular configuration capabilities.

Lets take a look at two different approaches to achieve the same end result.

Continue reading

Mikrotik Site To Site WireGuard VPN Setup

The steps below aim to illustrate how to setup a site to site VPN between two Mikrotik devices using WireGuard. Pre-existing local networks and firewalls exist on both R1 and R2. Between R1 and R2 the WireGuard tunnel will use 172.17.0.0/30. R2 has 172.17.0.1 assigned to its WireGuard interface, while R1 has 172.17.0.2 assigned to its WireGuard interface. The network used, or the order in which IP addresses are assigned is not important, however it is considered best practice to use a point to point subnet between peers.

Continue reading

How ARP Works

ARP or Address Resolution Protocol is the mechanism used by hosts in a network to map IP addresses to MAC addresses of other hosts within the same network segment. It is also used for next hop resolution between edge devices to enable routing between networks.

When a packet is created by a host intended for another host on that network, an ARP request is broadcast out out from the sender. Since this ARP request is a broadcast message it will be sent to every

Continue reading