PUQ Mautic

Installation and configuration guide

Setup (install/update)

Mikrotik WireGuard VPN module WISECP 

Order now | Download | FAQ

To install and update a module, you must perform one and the same action.

 
1. Download the latest version of the module.
wget https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-VPN/PUQ_WISECP-Mikrotik-WireGuard-VPN-latest.zip

All versions are available: https://download.puqcloud.com/WISECP/Product/PUQ_WISECP-Mikrotik-WireGuard-VPN/

 
2. Unzip the archive with the module.
unzip PUQ_WISECP-Mikrotik-WireGuard-VPN-latest.zip
 
3. Copy and Replace "puqMikrotikWireGuardVPN" from "PUQ_WISECP-Mikrotik-WireGuard-VPN" to "WISECP_WEB_DIR/coremio/modules/Product/"

License Activation

Mikrotik WireGuard VPN module WISECP 

Order now | Download | FAQ
1. Log in to the administrative area of your WISECP.

2. Go to module configuration.
Services -> Service Management -> Module Settings -> Other -> All Modules -> PUQ Mikrotik WireGuard VPN

image-1700485721333.png

image-1700485726951.png

image-1700485737918.png

image-1700908237215.png

 

3. On the open page, enter the purchased license key for this product and click the 'Check and Save' button to validate the key and save it.

image-1700908330652.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Mikrotik preparation and configuration

Mikrotik WireGuard VPN module WISECP 

Order now | Download | FAQ

Note: Enter the following commands one by one and wait for the command to complete.

Check RouterOS version

Make sure that the version of RouterOS is 7+

system/package/print 
 
Enabling HTTPS Create your own root CA on your router
/certificate
add name=LocalCA common-name=LocalCA key-usage=key-cert-sign,crl-sign
 
Sign the newly created CA certificate
/certificate
sign LocalCA

 

Create a new certificate for Webfig (non-root certificate)

Note: as common-name=XXX.XXX.XXX.XXX You enter public IP adddress of the router.

/certificate
add name=Webfig common-name=XXX.XXX.XXX.XXX
 
Sign the newly created certificate for Webfig
/certificate
sign Webfig ca=LocalCA 
 
Enable SSL (www-ssl) and specify to use the newly created certificate for Webfig
/ip service
set www-ssl certificate=Webfig disabled=no
 
Enable api-ssl and specify to use the newly created certificate for Webfig
 /ip service 
 set api-ssl certificate=Webfig disabled=no 
 
Enable WireGuard VPN server

image-1700908664667.png


Add IP address on Wireguard interface

image-1700908821470.png

 

Configuring NAT rules on the firewall

 

image-1700908941106.png

 

 

Add server (Mikrotik) in WISECP

Mikrotik WireGuard VPN module WISECP 

Order now | Download | FAQ
1. Log in to the administrative area of your WISECP.

2. Go to module configuration.
Services -> Service Management -> Module Settings -> Other -> All Modules -> PUQ Mikrotik WireGuard VPN

image-1700485721333.png

image-1700485726951.png

image-1700485737918.png

image-1700908237215.png

 
3. In the opened page, click the 'Add Server' button.

image-1700912374796.png

 

4. On the opened page, enter all the necessary information:

image-1700912532762.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Service/Product configuration

Mikrotik WireGuard VPN module WISECP 

Order now | Download | FAQ

If you do not have a Service Group where you want to place the new service, you need to create a new Service Group

1. Log in to the administrative area of your WISECP.
2. Create New Service Group


Go to

Services -> Service Management -> Add Group

image-1700487270737.png

Enter all the necessary data and click the 'Create Group' button.
image-1700487384497.png

3. Adding a New Service

Go to

Services -> our service group where you need to add the new service.

image-1700487595449.png

In the opened window, click the 'Create New Service' button.

image-1700487653237.png

On the opened page, enter all the necessary details for your new service and navigate to the 'Core' tab.

Select the 'PUQ Mikrotik WireGuard VPN' module from the drop-down list of modules.

image-1700914172218.png

 

4. Fill in the configuration options according to your preferences.

Attention:
The WireGuard Server field is updated only after saving or adding the service.
You will need to revisit this section to select the WireGuard Server and save the service.
Additionally, the WireGuard Server must be created on all servers within the group.