General • Re: how to route multiple WANs to CHR over the Wireguard tunnel.

/ip addressadd address=10.243.10.10/30 comment=wireguard-client interface=\    wireguard10-client network=10.243.10.8add address=10.243.20.10/30 comment=wireguard-client interface=\    wireguard20-client network=10.243.20.8add address=10.243.30.10/30 comment=wireguard-client interface=\    wireguard30-client network=10.243.30.8add address=10.243.40.10/30 comment=wireguard-client interface=\    wireguard40-client network=10.243.40.8add address=10.243.50.10/30 comment=wireguard-client interface=\    wireguard50-client network=10.243.50.8add address=10.243.60.10/30 comment=wireguard-client interface=\    wireguard60-client network=10.243.60.8/ip routeadd check-gateway=ping comment=WG disabled=no distance=1 dst-address=\    0.0.0.0/0 gateway=10.243.10.9 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG disabled=no distance=1 dst-address=\    0.0.0.0/0 gateway=10.243.20.9 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG disabled=no distance=1 dst-address=\    0.0.0.0/0 gateway=10.243.30.9 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG disabled=no distance=1 dst-address=\    0.0.0.0/0 gateway=10.243.40.9 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG disabled=no distance=1 dst-address=\    0.0.0.0/0 gateway=10.243.50.9 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG disabled=no distance=1 dst-address=\    0.0.0.0/0 gateway=10.243.60.9 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add blackhole comment=WG disabled=no distance=1 dst-address=\    134.122.100.126/32 gateway="" routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add comment=WG-CHR disabled=no distance=1 dst-address=134.122.100.126/32 \    gateway=1_WAN1 routing-table=use-WAN1 scope=30 suppress-hw-offload=no \    target-scope=10add comment=WG-CHR disabled=no distance=1 dst-address=134.122.100.126/32 \    gateway=2_WAN2 routing-table=use-WAN2 scope=30 suppress-hw-offload=no \    target-scope=10add comment=WG-CHR disabled=no distance=1 dst-address=134.122.100.126/32 \    gateway=3_WAN3 routing-table=use-WAN3 scope=30 suppress-hw-offload=no \    target-scope=10add comment=WG-CHR disabled=no distance=1 dst-address=134.122.100.126/32 \    gateway=4_WAN4 routing-table=use-WAN4 scope=30 suppress-hw-offload=no \    target-scope=10add comment=WG-CHR disabled=no distance=1 dst-address=134.122.100.126/32 \    gateway=5_WAN5 routing-table=use-WAN5 scope=30 suppress-hw-offload=no \    target-scope=10add comment=WG-CHR disabled=no distance=1 dst-address=134.122.100.126/32 \    gateway=6_WAN6 routing-table=use-WAN6 scope=30 suppress-hw-offload=no \    target-scope=10/ip firewall mangleadd action=mark-routing chain=output comment=wireguard dst-address=\    134.122.100.126 dst-port=23411 new-routing-mark=use-WAN1 passthrough=no \    protocol=udpadd action=mark-routing chain=output dst-address=134.122.100.126 dst-port=\    23412 new-routing-mark=use-WAN2 passthrough=no protocol=udpadd action=mark-routing chain=output dst-address=134.122.100.126 dst-port=\    23413 new-routing-mark=use-WAN3 passthrough=no protocol=udpadd action=mark-routing chain=output dst-address=134.122.100.126 dst-port=\    23414 new-routing-mark=use-WAN4 passthrough=no protocol=udpadd action=mark-routing chain=output dst-address=134.122.100.126 dst-port=\    23416 new-routing-mark=use-WAN6 passthrough=no protocol=udpadd action=mark-routing chain=output dst-address=134.122.100.126 dst-port=\    23415 new-routing-mark=use-WAN5 passthrough=no protocol=udp/interface wireguardadd listen-port=23411 mtu=1420 name=wireguard10-clientadd listen-port=23412 mtu=1420 name=wireguard20-clientadd listen-port=23413 mtu=1420 name=wireguard30-clientadd listen-port=23414 mtu=1420 name=wireguard40-clientadd listen-port=23415 mtu=1420 name=wireguard50-clientadd listen-port=23416 mtu=1420 name=wireguard60-client/interface wireguard peersadd allowed-address=0.0.0.0/0 endpoint-address=134.122.100.126 endpoint-port=\    23411 interface=wireguard10-client name=wireguard10-chr \    persistent-keepalive=25s public-key=\    "GtoC5c5JeSa8DEZ0iZEVz7z5FbcMsU382A="add allowed-address=0.0.0.0/0 endpoint-address=134.122.100.126 endpoint-port=\    23412 interface=wireguard20-client name=wireguard20-chr \    persistent-keepalive=30s public-key=\    "8rjVxmjWx4ylsxBlSkr3jGfuR7XxP5dBFeyY="add allowed-address=0.0.0.0/0 endpoint-address=134.122.100.126 endpoint-port=\    23413 interface=wireguard30-client name=wireguard30-chr \    persistent-keepalive=35s public-key=\    "vOpoR36OQuIZHZmmmn+6bZdXrRXJBAgL4Hcr+W0="add allowed-address=0.0.0.0/0 endpoint-address=134.122.100.126 endpoint-port=\    23414 interface=wireguard40-client name=wireguard40-chr \    persistent-keepalive=40s public-key=\    "zZXcMwC8YKgvdUUjrgiNcgxTV9oU2jBpds/2Y="add allowed-address=0.0.0.0/0 endpoint-address=134.122.100.126 endpoint-port=\    23415 interface=wireguard50-client name=wireguard50-chr \    persistent-keepalive=45s public-key=\    "rxxWp9us/Kd6vwgNsLQVHGIIkWsAiAzfNi0="add allowed-address=0.0.0.0/0 endpoint-address=134.122.100.126 endpoint-port=\    23416 interface=wireguard60-client name=wireguard60-chr \    persistent-keepalive=50s public-key=\    "53uIdijve5hhZgi1TdNkbeBGZJ4SxJz5j1U="

/ip addressadd address=10.243.10.9/30 interface=wireguard10-chr network=10.243.10.8add address=10.243.20.9/30 interface=wireguard20-chr network=10.243.20.8add address=10.243.30.9/30 interface=wireguard30-chr network=10.243.30.8add address=10.243.40.9/30 interface=wireguard40-chr network=10.243.40.8add address=10.243.50.9/30 interface=wireguard50-chr network=10.243.50.8add address=10.243.60.9/30 interface=wireguard60-chr network=10.243.60.8/ip routeadd check-gateway=ping comment=WG10 disabled=no distance=1 dst-address=\    172.30.30.0/24 gateway=10.243.10.10 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG20 disabled=no distance=1 dst-address=\    172.30.30.0/24 gateway=10.243.20.10 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG30 disabled=no distance=1 dst-address=\    172.30.30.0/24 gateway=10.243.30.10 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG40 disabled=no distance=1 dst-address=\    172.30.30.0/24 gateway=10.243.40.10 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG50 disabled=no distance=1 dst-address=\    172.30.30.0/24 gateway=10.243.50.10 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10add check-gateway=ping comment=WG60 disabled=no distance=1 dst-address=\    172.30.30.0/24 gateway=10.243.60.10 routing-table=main scope=30 \    suppress-hw-offload=no target-scope=10        /interface wireguardadd listen-port=13231 mtu=1420 name=wireguard-serveradd listen-port=23411 mtu=1420 name=wireguard10-chradd listen-port=23412 mtu=1420 name=wireguard20-chradd listen-port=23413 mtu=1420 name=wireguard30-chradd listen-port=23414 mtu=1420 name=wireguard40-chradd listen-port=23415 mtu=1420 name=wireguard50-chradd listen-port=23416 mtu=1420 name=wireguard60-chr/interface wireguard peersadd allowed-address=0.0.0.0/0 interface=wireguard10-chr name=\    wireguard10-client public-key=\    "1K5Q2xfjlocXFNZfkTGFEHp6gvq8IOfAV9SOHQ="add allowed-address=0.0.0.0/0 interface=wireguard20-chr name=\    wireguard20-client public-key=\    "TgZJNLm9CF7U/fSalOQOPL5koMZ6jCheEStOGI="add allowed-address=0.0.0.0/0 interface=wireguard30-chr name=\    wireguard30-client public-key=\    "5MYs/2FaZc456uPtStyNjeC+p9ydi6RWO9kRggo="add allowed-address=0.0.0.0/0 interface=wireguard40-chr name=\    wireguard40-client public-key=\    "SG3+jX2iwulUvQMXmSghaOf3azaSNYyxq8thXSs="add allowed-address=0.0.0.0/0 interface=wireguard50-chr name=\    wireguard50-client public-key=\    "fIPcPB+H+B1dF7ZwcGvPoL1QRid0yD/STI1BC8="add allowed-address=0.0.0.0/0 interface=wireguard60-chr name=\    wireguard60-client public-key=\    "6hmUfw1UKvcIC3Q3YC+x1fcpOzmTozYopmI="