Router Setup
Step-by-step guide to configure WireGuard VPN on MikroTik RouterOS v7+ using Winbox.
WireGuard Connection Details
Log in to velavpn.com/account, find your server in the server list, and click Download Config to get the .conf file. Open it in a text editor to note the private key, server public key, endpoint, and tunnel address.
Open Winbox and connect to your MikroTik router.
Go to WireGuard → + (Add). In the Name field enter wg-vela. Paste your Private Key from the Vela config. Click OK.
Go to WireGuard → Peers → + (Add). Set: Interface = wg-vela, Public Key = server public key from config, Endpoint = auto.velavpn.com:51820, Allowed Address = 0.0.0.0/0, Persistent Keepalive = 25. Click OK.
Go to IP → Addresses → + (Add). Set Address to the tunnel IP from your Vela config (e.g., 10.x.x.x/32) and Interface to wg-vela.
Go to IP → Routes → + (Add). Set Dst. Address = 0.0.0.0/0, Gateway = wg-vela. This routes all internet traffic through Vela.
Go to IP → Firewall → NAT → + (Add). Set Chain = srcnat, Out. Interface = wg-vela, Action = masquerade. Click OK.
Test connectivity from a LAN client. The WireGuard peer status in Winbox should show a recent Last Handshake timestamp.
MikroTik Winbox — WireGuard interface and peer configured