View Categories

WireGuard Remote VPN Users

2 min read

Tabela de conteúdos (Índice)

👤 WireGuard Remote VPN Users #

MikroTik SD-WAN makes it easy to deploy secure Client-to-Site WireGuard VPN connections for employees, contractors and remote workers. Create VPN users in seconds and automatically generate everything needed for the connection without manually configuring RouterOS.

🚀 Creating a Remote VPN User #

  • Navigate to VPN → WireGuard → Client-to-Site.
  • Enter a friendly Access Name for the remote user.
  • Select the DNS server that will be used by the VPN client.
  • Enable Redirect All Traffic if you want all Internet traffic to pass through the VPN tunnel.
  • Click Add Client.

⚙️ Automatic Provisioning #

Once the client is created, MikroTik SD-WAN automatically generates:

  • WireGuard Private Key
  • WireGuard Public Key
  • Preshared Key
  • VPN Address
  • DNS Configuration
  • Allowed IPs
  • Persistent Keepalive
  • Complete Client Configuration

📱 QR Code Provisioning #

  • Open the client’s credentials.
  • Scan the generated QR Code using the official WireGuard application.
  • The VPN tunnel is configured automatically on Android and iOS devices.
  • No manual configuration is required.

💻 Configuration Options #

  • View the complete WireGuard configuration.
  • Copy the configuration directly to the clipboard.
  • Download a ready-to-use .conf file.
  • Email the VPN configuration directly to the remote user.

🔄 User Management #

  • Enable or disable VPN access instantly.
  • Edit existing client settings.
  • Delete users when VPN access is no longer required.
  • All changes are managed centrally from the MikroTik SD-WAN dashboard.

🌐 Redirect All Traffic #

The Redirect All Traffic option determines how the remote user accesses the Internet.

  • Enabled: All traffic is securely routed through the corporate VPN (Full Tunnel).
  • Disabled: Only traffic destined for corporate networks uses the VPN while Internet traffic continues through the user’s local ISP (Split Tunnel).

🔒 Security #

  • Each VPN client receives unique cryptographic keys.
  • Every user has an independent WireGuard peer.
  • VPN credentials are automatically generated by the platform.
  • Connections are encrypted using the WireGuard protocol.

✅ Supported Platforms #

  • Windows
  • Linux
  • macOS
  • Android
  • iPhone & iPad (iOS)
  • ChromeOS
📌 MikroTik SD-WAN automates the complete WireGuard Client-to-Site deployment process, including key generation, QR Code provisioning, downloadable configuration files, centralized management, and secure remote access for your users.
Explore MikroTik SD-WAN