

This is called Network address translation or NAT. Only when your device initiates a connection to a remote service such as (a TCP connection), do all of the routers on the way establish a connection path back to your device.


In practice, most consumer devices today are on some kind of private ISP network and can’t be addressed from the public internet which is good for security reasons. With WireGuard everything is a “peer” which often causes confusion about how to configure each device on the network. Mikrotik added official support for WireGuard in version 7 of RouterOS. All other setups are outside the scope of this document and can be designed by following this awesome WireGuard documentation. This post focuses on enabling remote access to Mikrotik routers and the attached networks. Connecting several networks over the public internet.Connecting to your home network while on the road for home automation and safe internet access.Managing router configuration remotely behind NATed networks such as mobile connections.WireGuard can be used for a lot of things:
