MikroTik WireGuard VPN & Client Studio

# ==================================================================
# ISP SECTOR - MikroTik RouterOS v7 WireGuard Server Setup
# Interface: wireguard1 (Port 13231)
# VPN Subnet: 10.50.50.1/24
# Generated at: 2026-09-12 03:33:18
# ==================================================================

# 1. Create WireGuard Interface
/interface wireguard
add name="wireguard1" listen-port=13231 private-key="tSZM+5MJJ5ofr0AFDuye1q3h52CaZiTwokQLzQ7Yt9c=" comment="WireGuard VPN Server"

# 2. Assign VPN Gateway IP
/ip address
add address=10.50.50.1/24 interface="wireguard1" comment="WireGuard VPN Gateway"

# 3. Add Client Peer
/interface wireguard peers
add interface="wireguard1" public-key="dCQM8sLp7SnSsuKMQpePOWIsVqCSaBR+ItFQqYv6fOk=" allowed-address=10.50.50.2/32 comment="Remote Client #1"

# 4. Firewall Rules (Allow VPN Port & NAT Access)
/ip firewall filter
add chain=input action=accept protocol=udp dst-port=13231 comment="Allow WireGuard Inbound (Port 13231)"
/ip firewall nat
add chain=srcnat src-address=10.50.50.1/24 action=masquerade comment="NAT for WireGuard VPN Clients"

# ==================================================================
# Paste directly into MikroTik WinBox Terminal
# ==================================================================

# ==================================================================
# WireGuard Client Configuration (Import into Windows/Mac/iOS/Android)
# ==================================================================

[Interface]
PrivateKey = dau+0W1Kb+r13TNs1RhewpEtF+JDKimwsubnTAmMV3g=
Address = 10.50.50.2/24
DNS = 1.1.1.1,8.8.8.8

[Peer]
PublicKey = JlOg4MZuiAtKZUFQBZ4JY1rMj75+DnjRrK0TIiSa3tk=
Endpoint = 103.100.200.5:13231
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 25