**Requirements** WISECP: v3.1.5+, php: v8.x, Ioncube: V12+ MikroTik: v7+
##### Supports protocols: - WireGuard ##### Module Functions: - Auto create and deploy VPN account/accounts - Suspend/Unsuspend/Delete/Change Package - Port forwarding - Requires a [MikroTik](https://mikrotik.com/) device or [MikroTik](https://mikrotik.com/) CHR. - Possibility to set Bandwidth speed limits per client VPN account - Module supports multilingualism (**Arabic, Azerbaijani, Catalan, Chinese, Croatian, Czech, Danish, Dutch, English, Estonian, Farsi, French, German, Hebrew, Hungarian, Italian, Macedonian, Norwegian, Polish, Romanian, Russian, Spanish, Swedish, Turkish, Ukrainian**) - Link to instructions for setting up the service in the client area. - Mechanism for working with servers and server groups ##### Available options in the admin panel: - Create users - Suspend users - Unsuspend users - Delete users - Change Package - VPN connection status ##### Available options in the client panel: - Links in the form of buttons to the instruction and VPN clients - General information about the service - Option to download WireGuard configuration as a file - QR code for WireGuard configuration - VPN connection status ##### Screenshot of the client area [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700922685060.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700922690995.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700922706424.png) ##### Screenshot of the Admin area [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700922768869.png)To install and update a module, you must perform one and the same action.
##### ##### 1. Download the latest version of the module. ```Powershell wget https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/php81/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN-latest.zip ```All versions are available: [https://download.puqcloud.com/WISECP/Product/PUQ\_WISECP-Mikrotik-WireGuard-Business-VPN/](https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/)
##### ##### 2. Unzip the archive with the module. ```Powershell unzip PUQ_WISECP-Mikrotik-WireGuard-VPN-latest.zip ``` ##### ##### 3. Copy and Replace "puqMikrotikWireGuardBusinessVPN" from "PUQ\_WISECP-Mikrotik-WireGuard-Business-VPN" to "WISECP\_WEB\_DIR/coremio/modules/Product/" # License Activation ### Mikrotik WireGuard Business-VPN module **[WISECP](https://puqcloud.com/link.php?id=78)** ##### [Order now](https://puqcloud.com/index.php?rp=/store/wisecp-module-mikrotik-wireguard-business-vpn) | [Download](https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/) | [FAQ](https://faq.puqcloud.com/) ##### 1. Log in to the administrative area of your **[WISECP](https://puqcloud.com/link.php?id=78)**. ##### 2. Go to module configuration. ``` Services -> Service Management -> Module Settings -> Other -> All Modules -> PUQ Mikrotik WireGuard Business-VPN ``` [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700485721333.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700485726951.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700485737918.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700923806126.png) ##### 3. On the open page, enter the purchased license key for this product and click the '**Check and Save**' button to validate the key and save it. [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700923838633.png) # Mikrotik preparation and configuration ### Mikrotik WireGuard Business-VPN module **[WISECP](https://puqcloud.com/link.php?id=78)** ##### [Order now](https://puqcloud.com/index.php?rp=/store/wisecp-module-mikrotik-wireguard-business-vpn) | [Download](https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/) | [FAQ](https://faq.puqcloud.com/)Note: **Enter the following commands one by one and wait for the command to complete.**
##### Check RouterOS version**Make sure that the version of RouterOS is 7+**
```shell system/package/print ``` ##### ##### Enabling HTTPS Create your own root CA on your router ``` /certificate add name=LocalCA common-name=LocalCA key-usage=key-cert-sign,crl-sign ``` ##### ##### Sign the newly created CA certificate ``` /certificate sign LocalCA ``` ##### Create a new certificate for Webfig (non-root certificate)Note: as common-name=XXX.XXX.XXX.XXX You enter public IP adddress of the router.
``` /certificate add name=Webfig common-name=XXX.XXX.XXX.XXX ``` ##### ##### Sign the newly created certificate for Webfig ``` /certificate sign Webfig ca=LocalCA ``` ##### ##### Enable SSL (*www-ssl)* and specify to use the newly created certificate for Webfig ``` /ip service set www-ssl certificate=Webfig disabled=no ``` ##### ##### Enable api-ssl and specify to use the newly created certificate for Webfig ``` /ip service set api-ssl certificate=Webfig disabled=no ``` # Add server (Mikrotik) in WISECP ### Mikrotik WireGuard Business-VPN module **[WISECP](https://puqcloud.com/link.php?id=78)** ##### [Order now](https://puqcloud.com/index.php?rp=/store/wisecp-module-mikrotik-wireguard-business-vpn) | [Download](https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/) | [FAQ](https://faq.puqcloud.com/) ##### 1. Log in to the administrative area of your **[WISECP](https://puqcloud.com/link.php?id=78)**. ##### 2. Go to module configuration. ``` Services -> Service Management -> Module Settings -> Other -> All Modules -> PUQ Mikrotik WireGuard Business-VPN ``` [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700485721333.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700485726951.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700485737918.png) [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700908237215.png) ##### ##### 3. In the opened page, click the '**Add Server**' button. [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700924292215.png) ##### 4. On the opened page, enter all the necessary information: - **Name**: Displayed name of the server. - **Maximum Number of Accounts**: The number of services that can be on this server. - **Server Group**: Optionally, choose the server group. - **DNS 1 and DNS 2**: are DNS servers that will be specified in the configuration of WireGuard clients. - **Assigned IP Addresses**: a list of Interface fot public IP, Public IP, Private Net that will be assigned to WireGuard VPN clients, with each address on a new line. Format:If you do not have a **Service Group** where you want to place the new service, you need to create a new **Service Group**
##### 1. Log in to the administrative area of your **[WISECP](https://puqcloud.com/link.php?id=78)**. ##### 2. Create New Service Group Go to ``` Services -> Service Management -> Add Group ``` [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700487270737.png) Enter all the necessary data and click the '**Create Group**' button. [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700487384497.png) ##### 3. Adding a New Service Go to ``` Services -> our service group where you need to add the new service. ``` [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700487595449.png) In the opened window, click the '**Create New Service**' button. [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700487653237.png) On the opened page, enter all the necessary details for your new service and navigate to the '**Core**' tab. Select the '**PUQ Mikrotik WireGuard Business-VPN**' module from the drop-down list of modules. [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700924994747.png) ##### 4. Fill in the configuration options according to your preferences. - **Server Group** is the group of servers from which a server will be chosen for provisioning the service - **Number of VPN Accounts:** the quantity of VPN user accounts a client can create within this package - **Bandwidth Download** and **Bandwidth Upload** represent the connection speed that will be restricted by these parameters, in megabits per second, respectively. - **Comment Prefix** will be added at the comment in **[MikroTik](https://mikrotik.com/)** - **Port Forwarding:** If the checkbox is selected, it means the client will have the ability to redirect ports from the main public address to internal addresses. - **Internal Traffic**: If the checkbox is selected, it indicates that internal traffic between VPN clients of the client will be allowed. - **NAT Rules on Public IP**: If the checkbox is selected, firewall rules, specifically NAT (Network Address Translation) to the public IP address, will be created during the service deployment. - **Persistent Keepalive**/**AllowedIPs:** parameters of configuration WireGuard clients - **Interface MTU**: This parameter will be set during the creation of the WireGuard interface. - **Link to Instruction** Provide the link to the instruction for the service, and it will be displayed in the client area as a separate button - **Link to VPN Clients** Provide the link to the page for downloading VPN clients for the service, and it will be displayed in the client area as a separate button # WireGuard Clients configuring # WireGuard Official clients ### Mikrotik WireGuard Business-VPN module **[WISECP](https://puqcloud.com/link.php?id=78)** ##### [Order now](https://puqcloud.com/index.php?rp=/store/wisecp-module-mikrotik-wireguard-business-vpn) | [Download](https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/) | [FAQ](https://faq.puqcloud.com/) ##### [](https://www.wireguard.com/ "https://www.wireguard.com/") #### You can download from the [https://www.wireguard.com/install/](https://www.wireguard.com/install/) Please always download latest versions. The following list is intended as a general direction only. - - - - - - #### Windows \[7, 8.1, 10, 11, 2008R2, 2012R2, 2016, 2019, 2022 – v0.5.3\] [Download Windows Installer](https://download.wireguard.com/windows-client/wireguard-installer.exe) [Browse MSIs](https://download.wireguard.com/windows-client/) - - - - - - #### macOS \[[app store](https://itunes.apple.com/us/app/wireguard/id1451685025?ls=1&mt=12) – v1.0.15\] [Download from App Store](https://itunes.apple.com/us/app/wireguard/id1451685025?ls=1&mt=12) - - - - - - #### Android \[[play store](https://play.google.com/store/apps/details?id=com.wireguard.android) – vunknown – out of date & [f-droid](https://f-droid.org/en/packages/com.wireguard.android/) – v1.0.20220516\] [Download from Play Store](https://play.google.com/store/apps/details?id=com.wireguard.android) [Download from F-Droid](https://f-droid.org/en/packages/com.wireguard.android/) - - - - - - #### iOS \[[app store](https://itunes.apple.com/us/app/wireguard/id1441195209?ls=1&mt=8) – v1.0.15\] [Download from App Store](https://itunes.apple.com/us/app/wireguard/id1441195209?ls=1&mt=8) - - - - - - #### Debian/UbuntuYou also need to configure the traffic routes you need at your discretion.
# Admin Area # Order Detail ### Mikrotik WireGuard Business-VPN module **[WISECP](https://puqcloud.com/link.php?id=78)** ##### [Order now](https://puqcloud.com/index.php?rp=/store/wisecp-module-mikrotik-wireguard-business-vpn) | [Download](https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/) | [FAQ](https://faq.puqcloud.com/) ##### Navigate to the service you want to manage, then go to the '**Core**' tab. [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700928964135.png) In the opened tab, you have a view of the online status of the service. The available online information includes: - Connection status to the API - Information about the VPN account on the **[MikroTik](https://mikrotik.com/)** router - Information about the account Also, below are fields with the client's personal data. You can also individually override package options for the client by checking the '**Overwrite package settings**' box.After modifying the configuration options, check the '**Send changes to server**' box to save the data to the [**MikroTik** ](https://mikrotik.com/)server.
[](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700929130269.png) # Client Area # Product Home Screen ### Mikrotik WireGuard Business-VPN module **[WISECP](https://puqcloud.com/link.php?id=78)** ##### [Order now](https://puqcloud.com/index.php?rp=/store/wisecp-module-mikrotik-wireguard-business-vpn) | [Download](https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-Business-VPN/) | [FAQ](https://faq.puqcloud.com/) ##### Available options in the client panel: - VPN Account Creation Button - Port Forwarding Management Button - Links in the form of buttons to the instruction and VPN clients - General information about the service - List of VPN Users Encrypted by the Client with Status and Edit Button ##### Screenshot of the client area [](https://doc.puq.info/uploads/images/gallery/2023-11/image-1700926025317.png)