![RouterOS 7:設定Wireguard伺服器以支援不同WAN存取IP的連接](https://rvso.com/image/789296/RouterOS%207%EF%BC%9A%E8%A8%AD%E5%AE%9AWireguard%E4%BC%BA%E6%9C%8D%E5%99%A8%E4%BB%A5%E6%94%AF%E6%8F%B4%E4%B8%8D%E5%90%8CWAN%E5%AD%98%E5%8F%96IP%E7%9A%84%E9%80%A3%E6%8E%A5.png)
RouterOS 7 路由器有兩個 WAN 連接埠,WAN2 和 WAN3(我可以使用這兩個 WAN IP 存取 Winbox,沒有任何問題),並設定 Wireguard (WG) 服務。我可以透過 WAN3 IP 成功連線到 WG,但無法透過 WAN2 IP 成功連線到 WG,這是我的設定:
/interface ethernet
set [ find default-name=ether3 ] comment="wan2" disable-running-check=no
set [ find default-name=ether4 ] comment="wan3" disable-running-check=no
/interface wireguard
add listen-port=13231 mtu=1420 name=wireguard1
/interface wireguard peers
add allowed-address=0.0.0.0/0 interface=wireguard1 public-key="7dUlL*****axiT0="
/ip address
add address=8.1.1.169/26 comment="wan2" interface=ether3 network=8.1.1.128
add address=9.1.1.149/25 comment="wan3" interface=ether4 network=9.1.1.128
add address=10.15.8.1/24 interface=wireguard1 network=10.15.8.0
/ip firewall nat
add action=masquerade chain=srcnat comment="wan2" out-interface=ether3
add action=masquerade chain=srcnat comment="wan3" out-interface=ether4
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=8.1.1.128/26 in-interface=ether3 new-connection-mark=wan2conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=9.1.1.128/25 in-interface=ether4 new-connection-mark=wan3conn passthrough=yes
add action=mark-routing chain=output connection-mark=wan2conn new-routing-mark=vrf2 passthrough=no
add action=mark-routing chain=output connection-mark=wan3conn new-routing-mark=main passthrough=no
/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=8.1.1.129 pref-src="" routing-table=vrf2 scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=9.1.1.145 pref-src="" routing-table=main scope=30 suppress-hw-offload=no target-scope=10
嘗試抓包,結果如下:
1 5.132 ether3 wgclientip:50923 8.1.1.169:13231 udp 190 0
2 5.132 ether4 9.1.1.149:13231 wgclientip:50923 udp 134 0
資料包 2 應該通過 eth3,但是卻通過 eth4?感謝任何幫助。