Installation and configuration guide
- Setup (install/update)
- License Activation
- Mikrotik preparation and configuration
- Add server (Mikrotik) in WISECP
- Service/Product configuration
Setup (install/update)
Mikrotik WireGuard Business-VPN module WISECP
Order now | Download | FAQ
To install and update a module, you must perform one and the same action.
1. Download the latest version of the module.
wget https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN-latest.zip
All versions are available: https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/
2. Unzip the archive with the module.
unzip PUQ_WISECP-Mikrotik-WireGuard-VPN-latest.zip
3. Copy and Replace "puqMikrotikWireGuardBusinessVPN" from "PUQ_WISECP-Mikrotik-WireGuard-Business-VPN" to "WISECP_WEB_DIR/coremio/modules/Product/"
License Activation
Mikrotik WireGuard Business-VPN module WISECP
Order now | Download | FAQ
1. Log in to the administrative area of your WISECP.
2. Go to module configuration.
Services -> Service Management -> Module Settings -> Other -> All Modules -> PUQ Mikrotik WireGuard Business-VPN
3. On the open page, enter the purchased license key for this product and click the 'Check and Save' button to validate the key and save it.
Mikrotik preparation and configuration
Mikrotik WireGuard Business-VPN module WISECP
Order now | Download | FAQ
Note: Enter the following commands one by one and wait for the command to complete.
Check RouterOS version
Make sure that the version of RouterOS is 7+
system/package/print
Enabling HTTPS Create your own root CA on your router
/certificate
add name=LocalCA common-name=LocalCA key-usage=key-cert-sign,crl-sign
Sign the newly created CA certificate
/certificate
sign LocalCA
Create a new certificate for Webfig (non-root certificate)
Note: as common-name=XXX.XXX.XXX.XXX You enter public IP adddress of the router.
/certificate
add name=Webfig common-name=XXX.XXX.XXX.XXX
Sign the newly created certificate for Webfig
/certificate
sign Webfig ca=LocalCA
Enable SSL (www-ssl) and specify to use the newly created certificate for Webfig
/ip service
set www-ssl certificate=Webfig disabled=no
Enable api-ssl and specify to use the newly created certificate for Webfig
/ip service
set api-ssl certificate=Webfig disabled=no
Add server (Mikrotik) in WISECP
Mikrotik WireGuard Business-VPN module WISECP
Order now | Download | FAQ
1. Log in to the administrative area of your WISECP.
2. Go to module configuration.
Services -> Service Management -> Module Settings -> Other -> All Modules -> PUQ Mikrotik WireGuard Business-VPN
3. In the opened page, click the 'Add Server' button.
4. On the opened page, enter all the necessary information:
- Name: Displayed name of the server.
- Maximum Number of Accounts: The number of services that can be on this server.
- Server Group: Optionally, choose the server group.
- DNS 1 and DNS 2: are DNS servers that will be specified in the configuration of WireGuard clients.
- Assigned IP Addresses: a list of Interface fot public IP, Public IP, Private Net that will be assigned to WireGuard VPN clients, with each address on a new line. Format:
<interface>|<public_ip>/<mask>|<private_network>/<mask>
- IP Address or Domain: The address of the MikroTik router you are connecting to.
- Username: is the username for the account on MikroTik.
- Password: is the password for the account on MikroTik.
- Check the SSL box if you want to use SSL-encrypted connection. If necessary, specify the port and perform a connection test.
Service/Product configuration
Mikrotik WireGuard Business-VPN module WISECP
Order now | Download | FAQ
If you do not have a Service Group where you want to place the new service, you need to create a new Service Group
1. Log in to the administrative area of your WISECP.
2. Create New Service Group
Go to
Services -> Service Management -> Add Group
Enter all the necessary data and click the 'Create Group' button.
3. Adding a New Service
Go to
Services -> our service group where you need to add the new service.
In the opened window, click the 'Create New Service' button.
On the opened page, enter all the necessary details for your new service and navigate to the 'Core' tab.
Select the 'PUQ Mikrotik WireGuard Business-VPN' module from the drop-down list of modules.
4. Fill in the configuration options according to your preferences.
- Server Group is the group of servers from which a server will be chosen for provisioning the service
- Number of VPN Accounts: the quantity of VPN user accounts a client can create within this package
- Bandwidth Download and Bandwidth Upload represent the connection speed that will be restricted by these parameters, in megabits per second, respectively.
- Comment Prefix will be added at the comment in MikroTik
- Port Forwarding: If the checkbox is selected, it means the client will have the ability to redirect ports from the main public address to internal addresses.
- Internal Traffic: If the checkbox is selected, it indicates that internal traffic between VPN clients of the client will be allowed.
- NAT Rules on Public IP: If the checkbox is selected, firewall rules, specifically NAT (Network Address Translation) to the public IP address, will be created during the service deployment.
- Persistent Keepalive/AllowedIPs: parameters of configuration WireGuard clients
-
Interface MTU: This parameter will be set during the creation of the WireGuard interface.
- Link to Instruction Provide the link to the instruction for the service, and it will be displayed in the client area as a separate button
- Link to VPN Clients Provide the link to the page for downloading VPN clients for the service, and it will be displayed in the client area as a separate button