WireGuard mesh config generator for MikroTik & more

Generate ready-to-use WireGuard configs for a full mesh between your MikroTik routers and any other device. Keys are created in your browser and never leave it.

Network settings

Nodes

Public endpoint is the IP or hostname other nodes use to reach this one. Leave it blank for a node behind NAT — it still connects outbound via keepalive.
Advanced

How to apply

MikroTik: paste the block into the terminal (WinBox → New Terminal, or SSH). RouterOS v7 syntax.

WireGuard config — works on Windows, macOS, Linux, iOS and Android. Import it into the WireGuard app, or save it as a .conf file.

About MeshTik

MeshTik is a free WireGuard mesh configuration generator. Instead of hand-writing peers, addresses, allowed IPs, routes and firewall rules on every MikroTik router, you describe your sites once and get ready-to-paste RouterOS commands for each one, plus universal wg-quick config files for Windows, macOS, Linux, iOS and Android devices in the same mesh.

Every private and public key is generated locally in your browser with Curve25519 and never leaves your device. You can download each config, grab them all as a zip, or scan a QR code to import a config straight into the WireGuard mobile app.

FAQ

Are my private keys safe?

Yes. Every keypair is generated in your browser with Curve25519, the same curve WireGuard uses. Nothing is uploaded — the tool even works offline.

Does it work with devices other than MikroTik?

Yes. Set a node's device to WireGuard config and you get a universal wg-quick file that runs on Windows, macOS, Linux, and phones — all in one mesh with your MikroTik routers.

Which RouterOS version do I need?

RouterOS v7 or newer, where WireGuard is built in.