Community discussions

MikroTik App

Search found 2280 matches: zerotier

Searched query: zerotier

  • 1
  • 2
  • 3
  • 4
  • 5
  • 8
by fabio
Tue Feb 20, 2024 11:00 am
Forum: Wireless Networking
Topic: CAPsMAN not working on 7.13.4 [SOLVED]
Replies: 26
Views: 851

Re: CAPsMAN not working on 7.13.4 [SOLVED]

... disabled=no name=datapath1 AP1: # 2024-02-20 09:57:37 by RouterOS 7.13.5 # # model = C53UiG+5HPaxD2HPaxD /interface bridge add name=bridge1 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ disabled=yes disabled=yes name=zt1 port=9993 /interface ...
by gabacho4
Tue Feb 20, 2024 12:26 am
Forum: General
Topic: RB4011 / hEX routers upgrade & VPN connections
Replies: 28
Views: 970

Re: RB4011 / hEX routers upgrade & VPN connections

... (i.e. Road warrior setup). There is no way to do that via a standard Wireguard config due to the CGNAT. Thus he needs a device capable or running zerotier or similar technology. At least that was one of the requirements that I understood from his initial and a subsequent posting. He wasn't just ...
by fabio
Mon Feb 19, 2024 2:55 pm
Forum: Wireless Networking
Topic: CAPsMAN not working on 7.13.4 [SOLVED]
Replies: 26
Views: 851

Re: CAPsMAN not working on 7.13.4 [SOLVED]

... add channel=channel1 country=Switzerland datapath=datapath1 disabled=no mode=\ ap name=cfg1 security=sec1 ssid=Test1234 /port set 0 name=serial0 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ disabled=yes disabled=yes name=zt1 port=9993 /interface ...
by gabacho4
Mon Feb 19, 2024 6:07 am
Forum: General
Topic: RB4011 / hEX routers upgrade & VPN connections
Replies: 28
Views: 970

Re: RB4011 / hEX routers upgrade & VPN connections

... As for Site B, due to CG NAT, a standard Wireguard set up will not work. You need to either request/pay for a static IP, or use something like zerotier. As for the IPs you asked about, the IP beginning with 104 belongs to Rethem Hosting LLC ( might be a CDN for streaming services) and the other ...
by Amm0
Sun Feb 18, 2024 4:19 am
Forum: General
Topic: MikroTik LHG LTE18 and Zerotier
Replies: 6
Views: 506

Re: MikroTik LHG LTE18 and Zerotier

If you go to files and remove any files under /flash, it should fit when trying upgrade. You shouldn't need the wireless or wifi-qc-comm on LHG LTE18 – so if present in /system/package uninstall them.

Or you try, "testing" channel in /system/package, perhaps 7.14rc will work.
by Willi
Sat Feb 17, 2024 9:20 pm
Forum: General
Topic: Bug? Simple queue causes reboot failure
Replies: 4
Views: 287

Bug? Simple queue causes reboot failure

... policy="read,test,api,!local,!telnet,!ssh,!ftp,!reboot,\ !write,!policy,!winbox,!password,!web,!sniff,!sensitive,!romon,!rest-api" /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ name=zt1 port=9993 /zerotier interface add allow-default=no ...
by atj15
Sat Feb 17, 2024 6:04 pm
Forum: General
Topic: MikroTik LHG LTE18 and Zerotier
Replies: 6
Views: 506

Re: MikroTik LHG LTE18 and Zerotier

i know about Wireguard ! Probably i will use this!

I start using zerotier and i have connected there all my mikrotik devices!

Anyway.

Thanks for your quick response!
by holvoetn
Sat Feb 17, 2024 3:28 pm
Forum: General
Topic: MikroTik LHG LTE18 and Zerotier
Replies: 6
Views: 506

Re: MikroTik LHG LTE18 and Zerotier

Try netinstall, sometimes it clears out space which is left behind from earlier versions.
If that doesn't help, try 7.14rc1, it should be a bit smaller (maybe just enough to have zerotier added).

But why zerotier ? Wireguard is also an option and default available in ROS7.
by holvoetn
Sat Feb 17, 2024 3:19 pm
Forum: General
Topic: Transport layer 2 over Internet?
Replies: 4
Views: 248

Re: Transport layer 2 over Internet?

Both :lol: Advantage of zerotier is that it is rather simple and even works behind CGNAT. No public IP needed. Disadvantage is that you need a device which is supported by MT (arm/arm64). And it passes somehow 3th party servers (they ...
by Mesquite
Sat Feb 17, 2024 2:51 pm
Forum: General
Topic: Transport layer 2 over Internet?
Replies: 4
Views: 248

Re: Transport layer 2 over Internet?

Zerotier?
by atj15
Sat Feb 17, 2024 2:29 pm
Forum: General
Topic: MikroTik LHG LTE18 and Zerotier
Replies: 6
Views: 506

Re: MikroTik LHG LTE18 and Zerotier

Hi again.

i late to replay. i see to logs that says = (system, error upgrade failed, free 289 kB disk space for a (null)upgrade.

What can i do to have zerotier to this antenna?

Thanks
by markonitogen
Fri Feb 16, 2024 12:28 pm
Forum: General
Topic: RouterOS Virtual Private Networks, which one to choose?
Replies: 7
Views: 640

Re: RouterOS Virtual Private Networks, which one to choose?

Ok, so I should focus on Wireguard and it's features. It's a start...thank you As I can understand, Wireguard and ZeroTier are newest additions to Mikrotik technology. Already, I don't like ZeroTier since I read there is a big deendency on exernal third party services which are ...
by resca
Fri Feb 16, 2024 9:51 am
Forum: General
Topic: Wireguard from Linux not working [SOLVED]
Replies: 36
Views: 1620

Re: Wireguard from Linux not working [SOLVED]

... packet coming in. If the Linux machine's interface isn't directly connected to the internet, I suggest you deactivate any firewall, ZeroTier, Tailscale, Docker or anything else that might affect the network traffic. After that's sorted out, check that iptables are completely empty ...
by Larsa
Thu Feb 15, 2024 10:13 pm
Forum: General
Topic: Wireguard from Linux not working [SOLVED]
Replies: 36
Views: 1620

Re: Wireguard from Linux not working [SOLVED]

... ingress/egress traffic. If the Linux machine's interface isn't directly connected to the internet, I suggest you deactivate any firewall, ZeroTier, Tailscale, Docker or anything else that might affect the network traffic. After that's sorted out, check that iptables are completely empty ...
by CrunchPL
Thu Feb 15, 2024 11:45 am
Forum: Containers
Topic: Container links on hAP ax^3
Replies: 0
Views: 173

Container links on hAP ax^3

... add dst=/etc/dnsmasq.d name=dnsmasq_pihole src=/usb1/pihole/dnsmasq.d add dst=/etc/pihole name=etc_pihole src=/usb1/pihole/etc add dst=/var/lib/zerotier-one name=controller_zero-ui src=/usb1/zero-ui/zerotier-one add dst=/app/backend/data name=main_zero-ui src=/usb1/zero-ui/data /container add ...
by und3rd06012
Tue Feb 13, 2024 8:20 pm
Forum: Beginner Basics
Topic: Help with configuration of a port.
Replies: 27
Views: 2382

Re: Help with configuration of a port.

... /ip dhcp-server add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf /port set 0 name=serial0 set 1 name=serial1 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ disabled=yes disabled=yes name=zt1 port=9993 /interface ...
by Amm0
Sun Feb 11, 2024 8:52 pm
Forum: General
Topic: MikroTik LHG LTE18 and Zerotier
Replies: 6
Views: 506

Re: MikroTik LHG LTE18 and Zerotier

Yeah the logs should show what the issue is. Could be a mismatched version — the version of zerotier.npk copied MUST match the version of RouterOS installed (now, once installed the package will get automatically upgraded in future). Or, more likely, it's out of disk ...
by holvoetn
Sun Feb 11, 2024 8:44 pm
Forum: General
Topic: MikroTik LHG LTE18 and Zerotier
Replies: 6
Views: 506

Re: MikroTik LHG LTE18 and Zerotier

What does log show after reboot ?

Are you sure there is enough free space on that device to host zerotier package ?
by atj15
Sun Feb 11, 2024 7:55 pm
Forum: General
Topic: MikroTik LHG LTE18 and Zerotier
Replies: 6
Views: 506

MikroTik LHG LTE18 and Zerotier

Hi everyone. i Just bought the MikroTik LHG LTE18. I try to use the zerotier as i use it to my other mikrotik routers with 32 bit and 64 bit CPUs. I notice that when i upload the zerotier package in Files on the LHG LTE18 and make reboot, i do not see the ...
by Amm0
Sun Feb 11, 2024 6:01 pm
Forum: Wireless Networking
Topic: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]
Replies: 11
Views: 662

Re: new capsman client works on hAP ac2 but not on wAP ac [SOLVED]

I have not tested the wAPac with capsman2 (e.g. new drivers with ZeroTier don't fit). There were changes in the default configuration for the hAPac2 in some recent release that fixed this problem. They might not have fixed the defconf on the wAPac, dunno. ...
by TeWe
Sun Feb 11, 2024 12:11 pm
Forum: General
Topic: ROS not updating ZeroTier managed routes anymore
Replies: 0
Views: 303

ROS not updating ZeroTier managed routes anymore

7.13.4 and ZeroTier 1.10.3 Is it just me or is ZeroTier not updating its managed routes in ROS anymore? (Yes, 'Allow Managed' is enabled) When I change something in ZeroTier Settings (e.g. add a managed route or delte an existing ...
by holvoetn
Sat Feb 10, 2024 3:33 pm
Forum: General
Topic: L009UiGS-RM low transfer and high CPU usage [SOLVED]
Replies: 14
Views: 683

Re: L009UiGS-RM low transfer and high CPU usage [SOLVED]

True but it's not arm so e.g. no zerotier, no containers and whatelse they will bring out.
For future safety, I would choose at least arm, preferably arm64 platform.

Hex is a nice device (was my first Tik and still use it) but it can become a problem in future.
by holvoetn
Fri Feb 09, 2024 8:54 pm
Forum: RouterBOARD hardware
Topic: hAP ax lite LTE - issues after modem FW upgrade to 16121.1034.00.01.01.05
Replies: 44
Views: 2641

Re: hAP ax lite LTE - issues after modem FW upgrade to 16121.1034.00.01.01.05

Looking good so far.
Relocated the device to location with better reception.
Scheduled a script with bandwidth test over zerotier to home RB5009.
Running stable for 20 minutes already.

I will let it run overnight.
by holvoetn
Fri Feb 09, 2024 4:50 pm
Forum: RouterBOARD hardware
Topic: hAP ax lite LTE - issues after modem FW upgrade to 16121.1034.00.01.01.05
Replies: 44
Views: 2641

Re: hAP ax lite LTE - issues after modem FW upgrade to 16121.1034.00.01.01.05

Hmm ... was thinking about zerotier but indeed, bth makes more sense.
Let them use their own product :D
by Larsa
Fri Feb 09, 2024 12:10 am
Forum: General
Topic: RouterOS Virtual Private Networks, which one to choose?
Replies: 7
Views: 640

Re: RouterOS Virtual Private Networks, which one to choose?

2. Zerotier: Allows one to stitch together all your subnets as if they were on the same subnet, L2 connection. Great for multicasting etc but harder to separate out users from each other as its one happy LAN. Note; Relies on ...
by UpRunTech
Thu Feb 08, 2024 12:08 pm
Forum: Useful user articles
Topic: HOW TO: mDNS and SSDP over Wireguard
Replies: 13
Views: 8310

Re: HOW TO: mDNS and SSDP over Wireguard

I'll try Zerotier next. One approach for ZeroTier is to use the flow rules to restrict the network to ONLY multicast discovery (e.g. 224.0.0.0/24) & then bridge ZT interfaces to the desired VLAN. More conceptual here, I haven't ...
by Maggiore81
Thu Feb 08, 2024 8:49 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13.4 [stable] is released!

... some basic tools (traceroute ip scan etc). The we add separately: a) wireless (the biggest package) b) dynamic routing (BGP, OSPF, MPLS etc) c) zerotier etc, are already in separate packages. d) storage sytems, they should be in separate packages, they have NO relationship to a basic router ...
by mkx
Wed Feb 07, 2024 8:37 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13.3 [stable] is released!

... installed on a space-constrained device. If we're talking about hAP ac2, then the most likely combination will be wifi (either type) and perhaps zerotier. Not dynamic routing protocols. So if splitting routing into two parts (static + protocols) means that 1.4MB monolithic binary gets split into ...
by Mesquite
Wed Feb 07, 2024 2:01 am
Forum: General
Topic: RouterOS Virtual Private Networks, which one to choose?
Replies: 7
Views: 640

Re: RouterOS Virtual Private Networks, which one to choose?

... be able to have the two routers see each other and for road warriors to connect to the routers for config purposes or to visit subnets, etc... 2. Zerotier: Allows one to stitch together all your subnets as if they were on the same subnet, L2 connection. Great for multicasting etc but harder to ...
by bratislav
Tue Feb 06, 2024 3:26 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13.3 [stable] is released!

... 2MB free space on 16MB flash devices. And fun facts: The main package even contain files not relevant for them. e.g. under "/home/web/help/zerotier.txt" is lying around a license textfile for zerotier. com'on - zerotier is a separate package. put that license file to that package. ...
by infabo
Mon Feb 05, 2024 11:50 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13.3 [stable] is released!

... 2MB free space on 16MB flash devices. And fun facts: The main package even contain files not relevant for them. e.g. under "/home/web/help/zerotier.txt" is lying around a license textfile for zerotier. com'on - zerotier is a separate package. put that license file to that package. ...
by mkx
Fri Feb 02, 2024 9:46 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... a few (tens? hundreds?) of kB more free space for all those who never used SMB would be very welcome. It might be enough to allow to install e.g. zerotier package?
by L0crian
Thu Feb 01, 2024 10:13 pm
Forum: General
Topic: ARTICLE: Multipoint VPN with ZeroTier and MikroTik
Replies: 1
Views: 311

Re: ARTICLE: Multipoint VPN with ZeroTier and MikroTik

Here is part 2 where I go over scaling the design using Regions.
https://lev-0.com/2024/02/01/multipoint ... al-design/
by mindio
Thu Feb 01, 2024 11:51 am
Forum: General
Topic: UDP Access to LAN from Zerotier network
Replies: 0
Views: 148

UDP Access to LAN from Zerotier network

Dear All, I set up Zerotier on Chateau LTE6 (ros 7.12.1) to give outside access to engineers to configure our production robots. Everything is working fine, except I can't ping some LAN devices from zerotier and therefore access those ...
by gotsprings
Thu Feb 01, 2024 1:10 am
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Thank you, but it looks like a rather old post from Sep '23. I can't find any statement from ZeroTier regarding a new license model and it seems more like two customers have complained about incorrect license quotes.
Notice the links I posted are now broken.
by Amm0
Thu Feb 01, 2024 12:40 am
Forum: RouterBOARD hardware
Topic: Everything but hAP ax2 is pointless?
Replies: 23
Views: 1455

Re: Everything but hAP ax2 is pointless?

... no wireless...and in 7.13+ versions, wireless is a seperate package ... SO the 16MB should have more room than earlier versions. Since container/zerotier/etc packages aren't support on MIPSBE devices like hHEX-S — the 16MB I unlikely to get full. And solvable with an SD card. While hAPax2 has ...
by infabo
Wed Jan 31, 2024 7:41 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 74
Views: 15433

Re: 7.13 wireless package split question

... the difference between "wireless" and "wifi". Not mentioning the topics recently about the free flash space and users cant fit zerotier package anymore and so on. So what I proposed: Keep running systems untouched. The default "MAIN PACKAGE" should have remained the ...
by Larsa
Wed Jan 31, 2024 7:23 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Thank you, but it looks like a rather old post from Sep '23. I can't find any statement from ZeroTier regarding a new license model and it seems more like two customers have complained about incorrect license quotes.
by Amm0
Wed Jan 31, 2024 6:30 pm
Forum: General
Topic: 7.13 wireless package split question
Replies: 74
Views: 15433

Re: 7.13 wireless package split question

... but some do. And monolithic package with all features possible won't fit in 16MB flash devices... So issue comes up say you TR069 to setup a zerotier-enabled IoT gateway but don't need BGP/OSPF & other wacky combo since Mikrotik are used in a lot application outside someone home.
by Larsa
Wed Jan 31, 2024 5:21 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

@gotsprings, I noticed the Reddit discussion speculating about a possible new licensing model but haven't seen any official statement regarding this. Do you know where to find it?
by Amm0
Wed Jan 31, 2024 5:17 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Enter Mikrotik BTH ... (or setup your own WG server and work from there) Maybe. But you'd need EoIP with WG to mimic ZeroTier. Since more generally BTH/WireGuard has no multicast or Layer2 stuff like RoMON... while ZeroTier does. But if the BTH desktop clients supported terminating ...
by L0crian
Wed Jan 31, 2024 5:16 pm
Forum: General
Topic: ARTICLE: Multipoint VPN with ZeroTier and MikroTik
Replies: 1
Views: 311

ARTICLE: Multipoint VPN with ZeroTier and MikroTik

I previously created a Multipoint VPN design using ZeroTier and VyOS. I was asked if I could port it to MikroTik, so here is the start of this series. I hope you find it useful.

https://lev-0.com/2024/01/31/multipoint ... al-design/
by holvoetn
Wed Jan 31, 2024 3:57 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Enter Mikrotik BTH ...
(or setup your own WG server and work from there)
by gotsprings
Wed Jan 31, 2024 3:56 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

I got a message from Zerotier a while ago that they are changing the pricing model pretty severely. More than tripling the price. Have not put anything new on Zerotier since. Waiting to see if they kill my subscription at renewal in ...
by Danielcj
Wed Jan 31, 2024 3:12 pm
Forum: General
Topic: WireGuard not working with IPV6 ULA addresses on LAN.
Replies: 0
Views: 173

WireGuard not working with IPV6 ULA addresses on LAN.

... /interface list member add interface=ether1 list=WAN add interface=bridge list=LAN add interface=WireGuard list=LAN add interface=ZeroTier list=LAN /ip address add address=10.0.0.1/24 comment=LAN interface=bridge network=10.0.0.0 add address=10.0.3.1/24 comment=Docker interface=docker ...
by guajojo
Tue Jan 30, 2024 10:24 pm
Forum: Beginner Basics
Topic: Force all devices to use local Adguard DNS
Replies: 23
Views: 9278

Re: Force all devices to use local Adguard DNS

... is quite complex maybes this case will not apply for everyone. I run 2 local subnets (10.10.1.0 & 10.10.2.0) to seperate lan devices, have a zerotier devices subnet on 10.10.3.0, have one pppoe as wan1 and a wan failover on another network on 10.10.4.1 a glimpse of my network: /ip route add ...
by Amm0
Tue Jan 30, 2024 7:35 pm
Forum: RouterBOARD hardware
Topic: Everything but hAP ax2 is pointless?
Replies: 23
Views: 1455

Re: Everything but hAP ax2 is pointless?

hEX S is not that much slower. The other different is the hEX S does NOT run zerotier, BTH, container, or some other newer V7 features. So that's a disqualification in my book as it does not seem very "future proof". But hEX S does have PoE IN and OUT ...
by Ullinator
Tue Jan 30, 2024 2:59 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13.3 [stable] is released!

... spontanious reboots since 7.13.x (also in 7.14x until Beta8, which seems to be stable) without using OpenVPN. (SUP-136647) In use is WireGuard and Zerotier on my router, but the instability is also seen on my ARM-based CAP AX.
by normis
Tue Jan 30, 2024 9:34 am
Forum: Announcements
Topic: NEW FEATURE: Back to Home VPN
Replies: 285
Views: 202060

Re: NEW FEATURE: Back to Home VPN

... bad if relayed, things do route/connect. I see ping times in the 600-800ms range using BTH with relay from phone to router. This router also has ZeroTier, so if disconnect from BTH and use ZT as VPN instead, latency is about 150-250ms in same ping test. I'd imagine difference is ZT roots are ...
by JimKusz
Tue Jan 30, 2024 1:15 am
Forum: Announcements
Topic: NEW FEATURE: Back to Home VPN
Replies: 285
Views: 202060

Re: NEW FEATURE: Back to Home VPN

... bad if relayed, things do route/connect. I see ping times in the 600-800ms range using BTH with relay from phone to router. This router also has ZeroTier, so if disconnect from BTH and use ZT as VPN instead, latency is about 150-250ms in same ping test. I'd imagine difference is ZT roots are ...
by ghostinthenet
Tue Jan 30, 2024 12:00 am
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

As far as encryption/ciphers goes including ZeroTier and many others, please correct me if I'm wrong, but isn't 64-Bit CPU/Kernel/Host OS the De facto industry standard across the board? Mikrotik marches to their own beat. I'd like to think they ...
by ghostinthenet
Mon Jan 29, 2024 11:55 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Then their faq page is inconsistent. https://docs.zerotier.com/faq/ While ZeroTier will operate on very low-power hardware (e.g. a single core 32-Bit ARM running at 600Mhz without AES hardware acceleration (AES-NI)), its performance will suffer. ...
by Amm0
Mon Jan 29, 2024 4:22 am
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... MIPSBE, MMIPS devices; While this is true: Starting from netinstall'ed 7.12.1, it was able to do a /system/package upgrade to 7.14beta8 with zerotier, gps, routeros, and wireless (automatically since started at 7.12.1). That was going from 7.12.1 directly to 7.14beta8. HOWEVER... I just noticed ...
by Amm0
Sun Jan 28, 2024 8:23 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

As far as encryption/ciphers goes including ZeroTier and many others, please correct me if I'm wrong, but isn't 64-Bit CPU/Kernel/Host OS the De facto industry standard across the board? Mikrotik marches to their own beat. I'd like to think they ...
by DarkNate
Sun Jan 28, 2024 7:17 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

As far as encryption/ciphers goes including ZeroTier and many others, please correct me if I'm wrong, but isn't 64-Bit CPU/Kernel/Host OS the De facto industry standard across the board?
by Amm0
Sun Jan 28, 2024 7:12 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

... the HW encryption stuff with ZT. The ZT docs suggest there were issues with 32-bit ARM to @DarkNate's point: ARM If you're planning on embedding ZeroTier in a product such as a router, network attached storage or some other IoT application we see that our partners have a better experience with ...
by DarkNate
Sun Jan 28, 2024 6:50 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

That's a question unanswered from the very first time this device was releases. EDIT: or was it ? https://forum.mikrotik.com/viewtopic.php?p=1026097#p1026097 But given that reply, why 64 bit on RB5009, AX2, AX3, ... ? They don't have 2Gb RAM. That reply from Normis is confusing, we regularly use 64...
by holvoetn
Sun Jan 28, 2024 6:40 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Since the L009 has an arm64 CPU, why would they not be using 64-Bit RouterOS on it to begin with? That's a question unanswered from the very first time this device was releases. EDIT: or was it ? https://forum.mikrotik.com/viewtopic.php?p=1026097#p1026097 But given that reply, why 64 bit on RB5009,...
by holvoetn
Sun Jan 28, 2024 6:39 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Then their faq page is inconsistent.

https://docs.zerotier.com/faq/
While ZeroTier will operate on very low-power hardware (e.g. a single core 32-Bit ARM running at 600Mhz without AES hardware acceleration (AES-NI)), its performance will suffer.
by DarkNate
Sun Jan 28, 2024 6:39 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Since the L009 has an arm64 CPU, why would they not be using 64-Bit RouterOS on it to begin with?
by ghostinthenet
Sun Jan 28, 2024 6:24 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Only AES-NI.

Nope. From the 1.6 release notes:

AES hardware acceleration is not yet supported on 32-bit ARM, PowerPC (32 or 64), or MIPS (32 or 64) systems. Currently supported are X86-64 and ARM64/AARCH64 with crypto extensions.
by holvoetn
Sun Jan 28, 2024 5:52 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Hm. ZeroTier has had hardware acceleration on the ARM64 platform since version 1.6. RouterOS’ package is currently at 1.10.
Only AES-NI.
Did MikroTik actively disable this on their build?
And why would they do that ? If it can be done, they will add it.
by und3rd06012
Sun Jan 28, 2024 5:10 pm
Forum: Beginner Basics
Topic: Help with configuration of a port.
Replies: 27
Views: 2382

Help with configuration of a port.

... protocol=UDP add address=au1.cloud.thethings.network name="TTN V3 (au1)" protocol=UDP /port set 0 name=serial0 set 1 name=serial1 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ disabled=yes disabled=yes name=zt1 port=9993 /interface ...
by ghostinthenet
Sun Jan 28, 2024 5:09 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Hm. ZeroTier has had hardware acceleration on the ARM64 platform since version 1.6. RouterOS’ package is currently at 1.10. Did MikroTik actively disable this on their build?
by R4istlin
Sat Jan 27, 2024 1:24 pm
Forum: Beginner Basics
Topic: VPN Client on MikroTik hEX-S
Replies: 11
Views: 965

Re: VPN Client on MikroTik hEX-S

ZeroTier doesn't have to be on your HexS. I have mine running on 2 different hAP AC3 used as access-points, but can run on NAS, RPi or any other device. The hAP ax lite might make a good/cheap standalone ZeroTier VPN devices. ...
by DeadStik
Fri Jan 26, 2024 9:55 pm
Forum: Beginner Basics
Topic: VPN Client on MikroTik hEX-S
Replies: 11
Views: 965

Re: VPN Client on MikroTik hEX-S

ZeroTier doesn't have to be on your HexS. I have mine running on 2 different hAP AC3 used as access-points, but can run on NAS, RPi or any other device.

The hAP ax lite might make a good/cheap standalone ZeroTier VPN devices.
by R4istlin
Fri Jan 26, 2024 7:15 pm
Forum: Beginner Basics
Topic: VPN Client on MikroTik hEX-S
Replies: 11
Views: 965

Re: VPN Client on MikroTik hEX-S

My hEX-S is MMIPS architecture and was not released ZeroTier for it.
by Amm0
Fri Jan 26, 2024 4:34 pm
Forum: RouterBOARD hardware
Topic: Chateau LTE12 D53G-5HacD2HnD - Lack of storage space
Replies: 9
Views: 3139

Re: Chateau LTE12 D53G-5HacD2HnD - Lack of storage space

... 16MB, it's just dumb but also not "fixable" — other than Mikrotik keeping package sizes small. And it is fair point: they advertise ZeroTier and container and MQTT – but you can't use all three because of the way they broken things up (or rather didn't break things up).
by R4istlin
Fri Jan 26, 2024 9:41 am
Forum: Beginner Basics
Topic: VPN Client on MikroTik hEX-S
Replies: 11
Views: 965

Re: VPN Client on MikroTik hEX-S

Thanks for the reply, so with ZeroTier I don't need to rely on a VPN server to access my home network? Well. I'll immediately do some research to find out more and hope to find some time to do some tests.

Thanks again, if I need help I'll try to be more accurate!
by mkx
Fri Jan 26, 2024 9:13 am
Forum: RouterBOARD hardware
Topic: Chateau LTE12 D53G-5HacD2HnD - Lack of storage space
Replies: 9
Views: 3139

Re: Chateau LTE12 D53G-5HacD2HnD - Lack of storage space

... on the device. Part of a problem we're seeing today is that ROS v6 ran pretty comfortably on these devices. v7 brought new features (wireguard and zerotier to name a couple) which consume additional flash space ... and space requirements for base package also grew slightly. With 7.13 the later ...
by cainos
Fri Jan 26, 2024 2:25 am
Forum: RouterBOARD hardware
Topic: Chateau LTE12 D53G-5HacD2HnD - Lack of storage space
Replies: 9
Views: 3139

Re: Chateau LTE12 D53G-5HacD2HnD - Lack of storage space

... mipsbe mikrotik a had plenty of packages installed, but here, on the new Chateau LTE12 D53G-5HacD2HnD, I installed only 2 packages, routeros and zerotier and have 98% used space. I don't want to remove zerotier to free space. I'm also using graphs for stats. What else can I do to free some space ...
by DeadStik
Fri Jan 26, 2024 1:17 am
Forum: Beginner Basics
Topic: VPN Client on MikroTik hEX-S
Replies: 11
Views: 965

Re: VPN Client on MikroTik hEX-S

I use both ZeroTier and WireGuard with SL without issue. ZeroTier is the easiest to configure for remote access, but I use WireGuard to a CHR on DigitalOcean to NAT it's Public IP. Infact, I have 2 ZeroTier one going out Starlink ...
by tom3f
Thu Jan 25, 2024 9:12 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... .ko necessary to drive actually present hardware. Is there any way how to clean it manually after package was installed? I would like to add zerotier package but i need at least 300kB of space. I would be hapy to remove this .ko files manualy as i need only firmware for hap ac2 hardware but ...
by tom3f
Thu Jan 25, 2024 6:48 pm
Forum: General
Topic: Use USB storage to expand Internal Storage?
Replies: 2
Views: 1276

Re: Use USB storage to expand Internal Storage?

I am interested in same. I have Hap ac2 with base package and wifi-qcom-ac and i want to install zerotier but i have not enough space left on device. I would like to install zerotier package on usb drive but i don’t know how.
by Amm0
Sun Jan 21, 2024 5:56 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... At least specifically on 16MB ARM-based wAPacR's. In 7.12.1 (and before), the wAPacR's had no issues running 4 packages: routeros, iot, zerotier, gps. To upgrade to 7.13.2, it fails due to space (from logs). Removing "iot" package allows upgrade to 7.13.2, but then MQTT is ...
by anav
Sun Jan 21, 2024 4:51 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

My bad, I thought you were wanting how to setup zerotier.............. If you mean you need to learn how to setup containers ?? https://help.mikrotik.com/docs/display/ROS/Container?searchId=5FV4ZUOBG https://help.mikrotik.com/docs/display/ROS/Container+-+mosquitto+MQTT+server ...
by Rihards9229
Sun Jan 21, 2024 12:26 am
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

The package also needed to MATCH the version install, so zerotier.npk that needs to copied to root of the disk (and rebooted after) should be here: https://download.mikrotik.com/routeros/7.12.1/all_packages-arm64-7.12.1.zip Technically 7.13 is current, ...
by Rihards9229
Sun Jan 21, 2024 12:05 am
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

can not install zerotier-7.12.1: it is not made for arm, but for arm64, it shows me this error. EDITED: i fixed it
by Larsa
Sat Jan 20, 2024 5:22 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

Re: L009 and ZeroTier

Unfortunately still software encryption on all platforms. Hopefully it will be addressed in future releases of ROS.
by ghostinthenet
Sat Jan 20, 2024 4:53 pm
Forum: RouterBOARD hardware
Topic: L009 and ZeroTier
Replies: 20
Views: 1618

L009 and ZeroTier

... 64-bit version that should be native to the platform. For the most part, it doesn’t matter, except for encryption acceleration. Does the 32-bit ZeroTier package take advantage of the hardware acceleration provided by the 64-bit processor, or is it reduced to software encryption only?
by sergiobeltrao
Fri Jan 19, 2024 12:08 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13.2 [stable] is released!

... and I really hope that MikroTik decides to split some functions into different packages so we can have a smaller main one. I was able to get ZeroTier for now by using "wireless" instead of "wifi-qcom-ac," but the free space left is barely enough to make a single backup ...
by sergiobeltrao
Thu Jan 18, 2024 7:27 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13.2 [stable] is released!

Hi, I upgraded my hAP ac2 from ROS v7.11 to version 7.13.2, but now I cannot install the ZeroTier package because the device lacks free space, even though I don't have any files or any other packages but the main and the wireless ones. Can something still be done about ...
by Amm0
Thu Jan 18, 2024 4:25 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... due to space have me worried here... And I'm not sure all are attributable to using the new qcom drivers... which I can live without... but zerotier and iot fitting are important but still need some space for a few files from scripts and/or RIF files (which are also getting bigger).
by infabo
Thu Jan 18, 2024 4:02 pm
Forum: RouterBOARD hardware
Topic: ros 7.13.* and zerotier and wireless pkg's [SOLVED]
Replies: 7
Views: 1561

Re: ros 7.13.* and zerotier and wireless pkg's [SOLVED]

The thanks go to MT. They bundled all device firmware in a single wifi-qcom-ac package. Now forum and possibly support ticket systems get all these "no disk space left help help but before I had plenty of it!!!!" complaints. MT opened the can of pandora with 7.13. They had the free choice ...
by holvoetn
Thu Jan 18, 2024 8:32 am
Forum: RouterBOARD hardware
Topic: ros 7.13.* and zerotier and wireless pkg's [SOLVED]
Replies: 7
Views: 1561

Re: ros 7.13.* and zerotire and wireless pkg's [SOLVED]

... And then you can keep that cAP AC. I use that WG/EOIP combo for ROMON purposes. Most devices via MPLS, a bit via EOIP over Wireguard, a couple via zerotier. But everything visible from one central router and that's what I need. You can use that EOIP also via bridge to "bridge" networks ...
by maigonis
Tue Jan 16, 2024 5:38 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... be happy on my IPQ4019 devices not wasting space for QCA9984 firmware. Seems like 710kb just for QCA9984 firmware. Space that could be used for zerotier, container or other packages way more useful than just a pure waste of diskspace. It not about NAND flash storage, its about SOCes used on ...
by infabo
Tue Jan 16, 2024 12:17 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... be happy on my IPQ4019 devices not wasting space for QCA9984 firmware. Seems like 710kb just for QCA9984 firmware. Space that could be used for zerotier, container or other packages way more useful than just a pure waste of diskspace.
by Peayeon
Tue Jan 16, 2024 11:36 am
Forum: Beginner Basics
Topic: Help i couldn't Login page
Replies: 4
Views: 794

Re: Help i couldn't Login page

... action add disk-file-count=65535 disk-file-name=disk5/Log disk-lines-per-file=65000 \ name=USBLog target=disk /system ntp key add key-id=1 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ identity="a43baae2e0:0:474197496110b7db0e3f3ff777aa1af862fb0160b3421a3f248\ ...
by holvoetn
Mon Jan 15, 2024 1:11 pm
Forum: RouterBOARD hardware
Topic: ros 7.13.* and zerotier and wireless pkg's [SOLVED]
Replies: 7
Views: 1561

Re: ros 7.13.* and zerotire and wireless pkg's [SOLVED]

... I certainly hope you did not use some auto-update script on your device ? It was not needed to upgrade. You could have kept everything on 7.12 if zerotier is a necessity for you on that device. Or use wireguard as alternative ? And yes, cAP AX is the logical next step (would it be such a big problem
by jwa
Sun Jan 14, 2024 7:18 pm
Forum: Beginner Basics
Topic: DDoS help
Replies: 42
Views: 2303

Re: DDoS help

... not a container, too much overhead and learning) c. use wireguard to let users access to LAN and then through firwall rules to server d. use zerotier to connect all needing access to servers ( needs arm device) a) this i have from very beginning. b) interesting, i will check it c) already ...
by anav
Sun Jan 14, 2024 6:20 pm
Forum: Beginner Basics
Topic: DDoS help
Replies: 42
Views: 2303

Re: DDoS help

... not a container, too much overhead and learning) c. use wireguard to let users access to LAN and then through firwall rules to server d. use zerotier to connect all needing access to servers ( needs arm device)
by Amm0
Sun Jan 14, 2024 4:37 pm
Forum: Beginner Basics
Topic: EoIP
Replies: 19
Views: 1149

Re: EoIP

... always best to start with the problem and sites/map/diagram... There are many ways to connect two routers, EoIP being just one. In most cases, ZeroTier be better option if you need a "fake" ethernet cable. But ZT isn't always an option, and EoIP doesn't require a controller sometime, ...
by holvoetn
Sun Jan 14, 2024 4:32 pm
Forum: Beginner Basics
Topic: EoIP
Replies: 19
Views: 1149

Re: EoIP

Work ROMON. There are 68 entries there.

I start with zerotier or wireguard to that main router (whatever), and then it's all ROMON or over EOIP.
by Amm0
Sun Jan 14, 2024 3:09 am
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

The package also needed to MATCH the version install, so zerotier.npk that needs to copied to root of the disk (and rebooted after) should be here: https://download.mikrotik.com/routeros/7.12.1/all_packages-arm64-7.12.1.zip Technically 7.13 is current, ...
by anav
Sun Jan 14, 2024 2:48 am
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

Thats the beauty of zerotier, its free and available for all platforms, so EVERYONE can access your server from anywhere on anything ( as long as they have your permission ). If I recall you need to drag and DROP the package into the ...
by Rihards9229
Sat Jan 13, 2024 10:39 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

but how do i port forward with zerotier? i watched the vid multiple times, is it just that and thats all or i still need to run the port forward thing in my router for it to work Exactly same as above in "dst-nat", again just the ...
by Rihards9229
Sat Jan 13, 2024 10:19 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

but how do i port forward with zerotier? i watched the vid multiple times, is it just that and thats all or i still need to run the port forward thing in my router for it to work Exactly same as above in "dst-nat", again just the ...
by Amm0
Sat Jan 13, 2024 10:12 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... because I've never set it up, but that is likely the best plan (outside getting an public IP from the LTE carrier). but how do i port forward with zerotier? i watched the vid multiple times, is it just that and thats all or i still need to run the port forward thing in my router for it to work ...
by Rihards9229
Sat Jan 13, 2024 10:10 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... because I've never set it up, but that is likely the best plan (outside getting an public IP from the LTE carrier). but how do i port forward with zerotier? i watched the vid multiple times, is it just that and thats all or i still need to run the port forward thing in my router for it to work
by Rihards9229
Sat Jan 13, 2024 9:42 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... config, because I've never set it up, but that is likely the best plan (outside getting an public IP from the LTE carrier). i would use zerotier, but everyone needs to have a account and the app
by Amm0
Sat Jan 13, 2024 9:38 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... a port exposed is a dangerous game, you will be hacked or ddossed for sure. Best bet is cloudflare as that doesnt expose your public IP. Even the zerotier option is good because you control who has access to your server and again public iP not exposed. The cloud option looks promising but note ...
by Rihards9229
Sat Jan 13, 2024 9:16 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... a port exposed is a dangerous game, you will be hacked or ddossed for sure. Best bet is cloudflare as that doesnt expose your public IP. Even the zerotier option is good because you control who has access to your server and again public iP not exposed. The cloud option looks promising but note ...
by anav
Sat Jan 13, 2024 9:12 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... a port exposed is a dangerous game, you will be hacked or ddossed for sure. Best bet is cloudflare as that doesnt expose your public IP. Even the zerotier option is good because you control who has access to your server and again public iP not exposed. The cloud option looks promising but note ...
by Rihards9229
Sat Jan 13, 2024 9:00 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... and see what a public IP costs, it may be pretty minimal dunno. That's the easiest. Everything else below is a fair amount of work... WG and/or ZeroTier do not alone give you a public IP or anything to help with port forwarding. But if everyone using your server is on the same VPN, you can use ...
by Amm0
Sat Jan 13, 2024 8:55 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... and see what a public IP costs, it may be pretty minimal dunno. That's the easiest. Everything else below is a fair amount of work... WG and/or ZeroTier do not alone give you a public IP or anything to help with port forwarding. But if everyone using your server is on the same VPN, you can use ...
by Rihards9229
Sat Jan 13, 2024 8:48 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

Anyone with a zerotier account on their PC (windows, linux, mac) or smartphone/ipad android or iphone can connect to the server.......... Whats your problem, an inabilty to do basic research? first hit on google--> https://www.zerotier.com/blog/zerotier-review/ ...
by anav
Sat Jan 13, 2024 8:42 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

Anyone with a zerotier account on their PC (windows, linux, mac) or smartphone/ipad android or iphone can connect to the server.......... Whats your problem, an inabilty to do basic research? first hit on google--> https://www.zerotier.com/blog/zerotier-review/ ...
by Rihards9229
Sat Jan 13, 2024 8:26 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... be accessible 24/7 I would imagine so. Probably easy to add a script where its only available from time X to time Y Others are more conversant in zerotier setup.. https://forum.mikrotik.com/viewtopic.php?t=195492 https://forum.mikrotik.com/viewtopic.php?t=183424 thanks for the fast response, but ...
by anav
Sat Jan 13, 2024 8:19 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

If you want the device to be accessible 24/7 I would imagine so.
Probably easy to add a script where its only available from time X to time Y
Others are more conversant in zerotier setup..

viewtopic.php?t=195492
viewtopic.php?t=183424
by Rihards9229
Sat Jan 13, 2024 8:15 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... (since you have an ARM processorl. 2. The above might not be practical if you have many users etc..................... Another option is to use zerotier which connects folks at L2 to whatever you decide on your router be it a server for example. Your IP need not be public. 3. ANother option ...
by Rihards9229
Sat Jan 13, 2024 8:10 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... (since you have an ARM processorl. 2. The above might not be practical if you have many users etc..................... Another option is to use zerotier which connects folks at L2 to whatever you decide on your router be it a server for example. Your IP need not be public. 3. ANother option ...
by Rihards9229
Sat Jan 13, 2024 8:09 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... (since you have an ARM processorl. 2. The above might not be practical if you have many users etc..................... Another option is to use zerotier which connects folks at L2 to whatever you decide on your router be it a server for example. Your IP need not be public. 3. ANother option ...
by anav
Sat Jan 13, 2024 8:00 pm
Forum: Beginner Basics
Topic: port forwarding
Replies: 61
Views: 3881

Re: port forwarding

... (since you have an ARM processorl. 2. The above might not be practical if you have many users etc..................... Another option is to use zerotier which connects folks at L2 to whatever you decide on your router be it a server for example. Your IP need not be public. 3. ANother option ...
by anav
Sat Jan 13, 2024 5:28 pm
Forum: General
Topic: Firewall-dynamic firewall rules
Replies: 9
Views: 634

Re: Firewall-dynamic firewall rules

... some devices NTP Access to the router (input) or the LANs (forward) via secure means is best done via VPN, wireguard, l2tp ipsec, openvpn, or zerotier etc.... Allowing access to winbox port from the external WANIP directly is plain stupid. /ip firewall address-list { using mostly static DHCP ...
by Amm0
Sat Jan 13, 2024 4:24 pm
Forum: Beginner Basics
Topic: EOIP over Wireguard (For RoMon purposes only) [SOLVED]
Replies: 33
Views: 3621

Re: EOIP over Wireguard (For RoMon purposes only) [SOLVED]

... without having to select one with the right password and then hit ROMON. That be nice, but not how it works. RoMON is a poor mans substitute for Zerotier, which get you all your neighbors showing up on the "normal" winbox list. But RoMON require the two-step "Connect to RoMON" ...
by mkx
Thu Jan 11, 2024 6:59 pm
Forum: General
Topic: MikroTik forum - http error 500
Replies: 7
Views: 816

Re: MikroTik forum - http error 500

Yesterday indeed it was a pita............ They must have hooked up an hapac lite as their main weblink to the internet ;-P
Yup. Testing zerotier package for obscure platforms ...
by anav
Thu Jan 11, 2024 3:31 pm
Forum: Beginner Basics
Topic: Microtik RB750gr3 and VPN without public IP address
Replies: 2
Views: 581

Re: Microtik RB750gr3 and VPN without public IP address

The new BTH is a perfect fig. Another option is zerotier.
by erlinden
Wed Jan 10, 2024 5:12 pm
Forum: RouterBOARD hardware
Topic: ros 7.13.* and zerotier and wireless pkg's [SOLVED]
Replies: 7
Views: 1561

Re: ros 7.13.* and zerotire and wireless pkg's [SOLVED]

You might want to consider using Wireguard (instead of Zerotier) as an alternative VPN solution. It is already available in the default package.

Are you using the cAP ac as router or is there anything in front (as router) of that can also do VPN?
by dakobg
Wed Jan 10, 2024 3:17 pm
Forum: RouterBOARD hardware
Topic: ros 7.13.* and zerotier and wireless pkg's [SOLVED]
Replies: 7
Views: 1561

ros 7.13.* and zerotier and wireless pkg's [SOLVED]

Hello everyone, I upgrade cAP ac to 7.13.1 however in order to do that I remove zerotier pkg (no space) .. after upgrade look like no more zerotier for cAC_ac (no space !!) I think the only option is to remove "wireless" pkg but I'm not sure if cAP_ac ...
by anav
Tue Jan 09, 2024 1:48 pm
Forum: Beginner Basics
Topic: EOIP over Wireguard (For RoMon purposes only) [SOLVED]
Replies: 33
Views: 3621

Re: EOIP over Wireguard (For RoMon purposes only) [SOLVED]

... IP access anymore. Romon will still allow you to access those devices then via EOIP over wireguard (provided that channel is still operational). Zerotier will work as well for the same reason (L2 access). I have a different fear, that ROMON will allow me to connect even though my setup is wrong ...
by holvoetn
Tue Jan 09, 2024 1:30 pm
Forum: Beginner Basics
Topic: EOIP over Wireguard (For RoMon purposes only) [SOLVED]
Replies: 33
Views: 3621

Re: EOIP over Wireguard (For RoMon purposes only) [SOLVED]

Yeah but ... if your IP setup is somehow bust, you're a dead fish too.
No IP access anymore.

Romon will still allow you to access those devices then via EOIP over wireguard (provided that channel is still operational).
Zerotier will work as well for the same reason (L2 access).
by anav
Mon Jan 08, 2024 8:51 pm
Forum: Beginner Basics
Topic: Wireguard Triangle
Replies: 7
Views: 1915

Re: Wireguard Triangle

... one other wireguard interface/network and it can be up all the time ready to pitch in. If you are willing to rely on a third party, you can run Zerotier network joining all three LANS such that they are on the same L2 subnet, whereas Wireguard connects them at L3. The connection is from each ...
by VincentL
Mon Jan 08, 2024 1:28 pm
Forum: Virtualization
Topic: Zerotier packages for CHR ? [SOLVED]
Replies: 3
Views: 13798

Re: Zerotier packages for CHR ? [SOLVED]

Hello,

We 'd like to use ZeroTier on CHR without need to use a container.
One year after the original post, did you have a plan to release a native package for this plateform ?

Regards,

Vincent
by amb1s1
Sat Jan 06, 2024 6:42 pm
Forum: RouterBOARD hardware
Topic: Zerotier version on RB5009UG+S+IN and L009UiGS-RM.
Replies: 3
Views: 1258

Re: Zerotier version on RB5009UG+S+IN and L009UiGS-RM.

1.10 has some speed improvements from my current 1.8.4 which is a good new. I ordered the RB5009. Thanks.
by JohnConnett
Sat Jan 06, 2024 6:21 pm
Forum: Beginner Basics
Topic: Port forwarding through Proton VPN?
Replies: 10
Views: 1478

Re: Port forwarding through Proton VPN?

... something to do with NAT-PMP ? As noted elsewhere, NAT PMP on RouterOS Official documentation missing . There is a brief mention of NAT-PMP under ZeroTier in the RouterOS Documentation. There is a Home Assistant Community Add-on: ZeroTier One which might offer another remote access option. For ...
by jvanhambelgium
Sat Jan 06, 2024 11:35 am
Forum: RouterBOARD hardware
Topic: Zerotier version on RB5009UG+S+IN and L009UiGS-RM.
Replies: 3
Views: 1258

Re: Zerotier version on RB5009UG+S+IN and L009UiGS-RM.

Current version on the 7.13-stable is 1.10.3
by holvoetn
Sat Jan 06, 2024 8:47 am
Forum: RouterBOARD hardware
Topic: Zerotier version on RB5009UG+S+IN and L009UiGS-RM.
Replies: 3
Views: 1258

Re: Zerotier version on RB5009UG+S+IN and L009UiGS-RM.

The version which comes with ROS is not the latest.
Nothing you can do about that apart from running a container and run zerotier on there.
by amb1s1
Sat Jan 06, 2024 1:38 am
Forum: RouterBOARD hardware
Topic: Zerotier version on RB5009UG+S+IN and L009UiGS-RM.
Replies: 3
Views: 1258

Zerotier version on RB5009UG+S+IN and L009UiGS-RM.

I am in search of a router that specifically supports the latest version or is closer to the latest ZeroTier. Currently, I own several GL.iNet routers, but I am encountering problems with slow ZeroTier bandwidth. My current ZeroTier version is 1.8.4, while the latest version ...
by aleab
Fri Jan 05, 2024 10:57 pm
Forum: General
Topic: wireguard client on LTE isp
Replies: 5
Views: 980

Re: wireguard client on LTE isp

... policy="reboot,read,write,policy,test,api,!local,!telne\ t,!ssh,!ftp,!winbox,!password,!web,!sniff,!sensitive,!romon,!rest-api" /zerotier set zerotier-vm16 comment=\ "ZeroTier Central controller - https://my.zerotier.com/" interfaces=\ vlan_300_LTE name=zerotier-vm16 ...
by kali
Fri Jan 05, 2024 8:16 am
Forum: Beginner Basics
Topic: Routing a VLAN through Wireguard
Replies: 5
Views: 1226

Routing a VLAN through Wireguard

... interface="BR - VLAN30 - Guest LAN" name=dhcp3 add address-pool=dhcp_pool4 interface="BR - VLAN40 - VPNLAN" name=dhcp4 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" disabled=yes disabled=yes name=zt1 port=9993 /interface ...
by t0mm13b
Thu Jan 04, 2024 4:10 pm
Forum: Announcements
Topic: NEW FEATURE: Back to Home VPN
Replies: 285
Views: 202060

Re: NEW FEATURE: Back to Home VPN

What is the difference with this BTTH vs Zerotier? Which would be the right one to use? Biggest difference is ease of use. To use BTH you only need a phone and the router's password. You don't even need to ever see Winbox or any other router ...
by t0mm13b
Thu Jan 04, 2024 4:09 pm
Forum: Announcements
Topic: NEW FEATURE: Back to Home VPN
Replies: 285
Views: 202060

Re: NEW FEATURE: Back to Home VPN

Conceptually:
BTH uses wireguard = L3
Zerotier operates on L2 level.

So it depends on your requirements ... as usual with such questions.
Cheers for that
by normis
Thu Jan 04, 2024 11:59 am
Forum: Announcements
Topic: NEW FEATURE: Back to Home VPN
Replies: 285
Views: 202060

Re: NEW FEATURE: Back to Home VPN

What is the difference with this BTTH vs Zerotier?

Which would be the right one to use?
Biggest difference is ease of use. To use BTH you only need a phone and the router's password. You don't even need to ever see Winbox or any other router config. Just connect and click enable.
by holvoetn
Thu Jan 04, 2024 11:57 am
Forum: Announcements
Topic: NEW FEATURE: Back to Home VPN
Replies: 285
Views: 202060

Re: NEW FEATURE: Back to Home VPN

Conceptually:
BTH uses wireguard = L3
Zerotier operates on L2 level.

So it depends on your requirements ... as usual with such questions.
by t0mm13b
Thu Jan 04, 2024 10:58 am
Forum: Announcements
Topic: NEW FEATURE: Back to Home VPN
Replies: 285
Views: 202060

Re: NEW FEATURE: Back to Home VPN

What is the difference with this BTTH vs Zerotier?

Which would be the right one to use?
by caspat
Wed Jan 03, 2024 12:19 am
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

Please add the capability of ZeroTier controller to use private roots/moons

Like zerotier-cli orbit on linux
+1 for this request!!
Or, a way to change planet file! :)
by anthonws
Tue Jan 02, 2024 6:40 pm
Forum: General
Topic: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works
Replies: 11
Views: 1228

Re: hap ac3 ax - From 7.13 to 7.14 betas - No 2.4Ghz WiFi, Winbox, PING - 5Ghz WiFi and LAN works

... 6. Ether4 is where my Windows Server is connected to (which will have access to regular LAN and VMs to VLAN10) 6. 172.25.0.0/24 is the subnet for ZeroTier, which is configured in Device A (192.168.25.2) Hopefully that provides a bit more clarity. Thanks for your help! Edit: This device has been ...
by krzysioD
Mon Jan 01, 2024 4:26 pm
Forum: General
Topic: ipip vs zerotier vs eoip vs vxlan vs NAT (?) vs ipsec?
Replies: 0
Views: 754

ipip vs zerotier vs eoip vs vxlan vs NAT (?) vs ipsec?

Picture this my ISP gives me - like a /27, where his IP is: ISP: a.b.c.1 i use a.b.c.2 and a lot: a.b.c.3 - a.b.c.30 - does not have any use. I i whould like to use them, so - maybe a classic tunnel, but - my default route is via a.b.c.1, so i whould end up having a.b.c.0/27 ? also - there are many ...
by haha
Sun Dec 31, 2023 2:37 am
Forum: Beginner Basics
Topic: Terrible wifi speed - L009UiGS-2HaxD-IN - Wifi 6 (Router OS 7.13) [SOLVED]
Replies: 27
Views: 3761

Terrible wifi speed - L009UiGS-2HaxD-IN - Wifi 6 (Router OS 7.13) [SOLVED]

... ranges=192.168.88.10-192.168.88.254 /ip dhcp-server add address-pool=dhcp interface=bridge lease-time=10m name=defconf /port set 0 name=serial0 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" disabled=yes disabled=yes name=zt1 port=9993 /interface ...
by nongkode
Sat Dec 30, 2023 10:57 am
Forum: General
Topic: 7.13 wireless package split question
Replies: 74
Views: 15433

Re: 7.13 wireless package split question

... help to split wifi-qcom-ac in 2 packages, only one IPQ4019 or QCA9984 driver ? Due to hap ac2 has space limit while upgrade to this version with zerotier package space need another 117 kB more, log are said like that This split may help to fixed this issue, as we can reduce size of package. If ...
by holvoetn
Fri Dec 29, 2023 6:17 pm
Forum: Beginner Basics
Topic: Wireguard guru needed [SOLVED]
Replies: 54
Views: 6410

Re: Wireguard guru needed [SOLVED]

... is completely barfed but Wireguard connection is still present, an EOIP on top of those 2 WG-endpoints allows to use ROMON. Quite easy to do. Zerotier can be used as well but not all devices are ARM-based. And the free Zerotier option is limited to 25 addresses, last time I checked. So EOIP ...
by riv
Fri Dec 29, 2023 3:52 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

You should already be able to do that using containers.
Rather having the capability natively from the zerotier package, instead of just another workaround
by riv
Fri Dec 29, 2023 11:42 am
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

Please add the capability of ZeroTier controller to use private roots/moons

Like zerotier-cli orbit on linux
by ckleea
Fri Dec 29, 2023 2:03 am
Forum: RouterBOARD hardware
Topic: Hap ac2 dead with 7.13
Replies: 23
Views: 4992

Re: Hap ac2 dead with 7.13

... from netinstall, is there way to downgrade from 7.13? What I observed last night after few hours, 1. update to 7.13 with old wireless package and zerotier. Initially worked but afterward when reboot, not working. 2. I try netinstall but cannot find the device (may be I did not do the right reset ...
by mszru
Thu Dec 28, 2023 8:28 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... OpenVPN connections, 10 Mangle rules and 22 Filter rules, enabled DNS resolver with NextDNS DoH service. Unfortunately in 7.13 I had to abandon Zerotier package as it does not fit into flash memory neither with old nor new wireless drivers. Overall I'm glad that MikroTik has made it possible ...
by netravnen
Thu Dec 28, 2023 3:42 pm
Forum: General
Topic: VxLAN duplicate MACs in FDB
Replies: 2
Views: 674

Re: VxLAN duplicate MACs in FDB

... vlan-ids=1404 add bridge=bridge tagged=sfp1,ether2 untagged=vxlan3 vlan-ids=1500 ************** You have not considered looking into e.g. using ZeroTier for the L2 site-2-site tunnel (instead of VXLAN)?
by MrSerio
Tue Dec 26, 2023 7:03 pm
Forum: Forwarding Protocols
Topic: Force ZeroTier over specific Internet/WAN connection
Replies: 7
Views: 1268

Re: Force ZeroTier over specific Internet/WAN connection

For my understanding, if the instance on the MT router is listening om UDP/9993, this is before NAT or after NAT? Hence if I use a mangle rule to mark all packets/connections originating from this UDP/9993, this should work? (although I believe I've already observed that it doesn't)
by Valerio5000
Tue Dec 26, 2023 5:37 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... developers to reevaluate developing ROS v7 as a single package but instead as multiple packages like ROS v6 that would be perfect. I use the Zerotier package for testing purposes which I will not be able to maintain with the new wifi package on AC2, I will do without Zerotier but sorry. Question: ...
by loloski
Mon Dec 25, 2023 1:00 am
Forum: Forwarding Protocols
Topic: Force ZeroTier over specific Internet/WAN connection
Replies: 7
Views: 1268

Re: Force ZeroTier over specific Internet/WAN connection

as a last resort though it's not the _real_ solution he/she could install zerotier in the other device using his/her 2nd ISP as a next-hop then use ROMON if the purpose of this zerotier is just for management purposes no more fiddling with mangle :)
by Amm0
Sun Dec 24, 2023 10:22 pm
Forum: Forwarding Protocols
Topic: Force ZeroTier over specific Internet/WAN connection
Replies: 7
Views: 1268

Re: Force ZeroTier over specific Internet/WAN connection

Use zerotier interface instead of ports for mangle. That's not right... The interface is the inner tunnel traffic (e.g. "zerotier1" - the ZeroTier network/"LAN") - so that not where routing/NAT is going ...
by holvoetn
Sun Dec 24, 2023 8:42 pm
Forum: Forwarding Protocols
Topic: Force ZeroTier over specific Internet/WAN connection
Replies: 7
Views: 1268

Re: Force ZeroTier over specific Internet/WAN connection

Use zerotier interface instead of ports for mangle.
That way you got them all.
by MrSerio
Sun Dec 24, 2023 5:38 pm
Forum: Forwarding Protocols
Topic: Force ZeroTier over specific Internet/WAN connection
Replies: 7
Views: 1268

Re: Force ZeroTier over specific Internet/WAN connection

Your suggestions sounds logical, I expected that'd do it. However it appears not to do much, although I do see some ZT traffic through the secondary ISP, which wasn't the case previously. I've made some adaptations: I've changed DST/9993 to SRC/9993 for the mangle rules I hadded a second mangle rule...
by loloski
Sun Dec 24, 2023 1:58 am
Forum: Forwarding Protocols
Topic: Force ZeroTier over specific Internet/WAN connection
Replies: 7
Views: 1268

Re: Force ZeroTier over specific Internet/WAN connection

you can try to use mangle output and routing mark to make host outbound traffic of the router to go on specific ISP on udp port 9993
/ip firewall mangle
add action=mark-routing chain=output dst-port=9993 new-routing-mark=UG3 passthrough=no protocol=udp
by MrSerio
Sat Dec 23, 2023 11:23 pm
Forum: Forwarding Protocols
Topic: Force ZeroTier over specific Internet/WAN connection
Replies: 7
Views: 1268

Force ZeroTier over specific Internet/WAN connection

Hi Everyone, We've recently done a deployment that involves ZeroTier, and a dual ISP set-up. The two ISP's at the customer are configured for fail-over (both default routes for both ISP's are configured, both with check-gateway, one with a lower weight ...
by loloski
Sat Dec 23, 2023 8:35 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

LOL, you can upgrade beyond 7.12.1 and still have zerotier. What is your point? I can't upgrade to past/beyond 7.12.1 because this is the last version I can have a wireless + zerotier on this device, I'm just wondering why some people here is very ...
by pe1chl
Sat Dec 23, 2023 7:31 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

I couldn't agree more on this, we have close to 340ish pieces of this hapAC2 as a CPE in the field that needs this wifi-qcom-ac + zerotier, if only we can remove some packages/components at will that will be awesome for now we stick to 7.12.1 for this reason I do understand the frustration ...
by infabo
Sat Dec 23, 2023 3:52 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

Yeah that's why we might stay indefinitely in 7.12.1 because we can't eat our cake and have it too :) unfortunately wireguard is not an option for us :p
LOL, you can upgrade beyond 7.12.1 and still have zerotier. What is your point?
by JanWerner
Sat Dec 23, 2023 3:18 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... a netinstall on my device and everything is working flawless with the qcom-ac device driver. And yes not much room left for other packages i.e. zerotier can not be installed anymore after installing the qcom drivers. I'm using the ac2 just as an access point and have a RB4011 as main router ...
by holvoetn
Sat Dec 23, 2023 11:33 am
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

I couldn't agree more on this, we have close to 340ish pieces of this hapAC2 as a CPE in the field that needs this wifi-qcom-ac + zerotier, if only we can remove some packages/components at will that will be awesome for now we stick to 7.12.1 for this reason I do understand the frustration ...
by loloski
Sat Dec 23, 2023 11:18 am
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... the flash again. I couldn't agree more on this, we have close to 340ish pieces of this hapAC2 as a CPE in the field that needs this wifi-qcom-ac + zerotier, if only we can remove some packages/components at will that will be awesome for now we stick to 7.12.1 for this reason
by infabo
Fri Dec 22, 2023 11:03 pm
Forum: Announcements
Topic: v7.14beta [testing] is released!
Replies: 510
Views: 142459

Re: v7.14beta [testing] is released!

... try to keep BC by installing the wireless package automatically, this still has drawbacks. Less available flash for extra packages like container/zerotier and others. So this could really be a breaking change for some users. But to summorize: First digit (7) is Just some marketing number. The ...
by pe1chl
Fri Dec 22, 2023 1:40 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

And yes not much room left for other packages i.e. zerotier can not be installed anymore after installing the qcom drivers. I'm using the ac2 just as an access point and have a RB4011 as main router on which I have installed zerotier. Even with "wireless" ...
by zandhaas
Fri Dec 22, 2023 1:25 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... a netinstall on my device and everything is working flawless with the qcom-ac device driver. And yes not much room left for other packages i.e. zerotier can not be installed anymore after installing the qcom drivers. I'm using the ac2 just as an access point and have a RB4011 as main router ...
by mkx
Fri Dec 22, 2023 8:24 am
Forum: General
Topic: Not enough space for upgrade when 6.4x->7.12 when 6.4x->7.11.2->7.12 works
Replies: 7
Views: 1914

Re: Not enough space for upgrade when 6.4x->7.12 when 6.4x->7.11.2->7.12 works

... can only hope that MT devs manage to reduce package size a bit further. A temporary solution is to uninstall any optional packages (you mentioned zerotier), upgrade and then re-install optional packages. But beware that 16MB flash on ARM devices (hAP ac2, cAP ac, etc.) is really tight, 7.13 + ...
by Joshmeyer
Fri Dec 22, 2023 7:03 am
Forum: General
Topic: Not enough space for upgrade when 6.4x->7.12 when 6.4x->7.11.2->7.12 works
Replies: 7
Views: 1914

Re: Not enough space for upgrade when 6.4x->7.12 when 6.4x->7.11.2->7.12 works

I Have many HAP AC2 devices for PPPOE and zerotier scattered across the country, all of them will not upgrade to 7.13 due to space constraints, using netinstall to flash to 7.13 is not an option due to the distance between homebase and most of them, What is the solution if any.
by InfraErik
Wed Dec 20, 2023 12:50 pm
Forum: General
Topic: OpenVPN not routing site to site?
Replies: 1
Views: 394

OpenVPN not routing site to site?

... I am seeing the VPN routes showing up automatically. Side note: The basis of this configuration is for eventually to have multiple sites using Zerotier as the connection but this site is a hosted environment and I can't drop in a switch or replace pfSense.
by An5teifo
Tue Dec 19, 2023 11:30 am
Forum: General
Topic: CCR2004 bridge performance
Replies: 5
Views: 748

Re: CCR2004 bridge performance

... add address-families=ipv6 as=208185 disabled=no input.filter=bgp_in_v6 name=\ IPv6 output.remove-private-as=yes routing-table=main /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ name=zt1 port=9993 /zerotier interface add allow-default=no ...
by Viking.za
Tue Dec 19, 2023 10:13 am
Forum: Beginner Basics
Topic: Help with simple static routing [SOLVED]
Replies: 24
Views: 2077

Re: Help with simple static routing [SOLVED]

What I don't understand is if I run a traceroute on my hAP ac^2 and tell the traceroute to use the zerotier interface, it works correctly and does not have any issues, but as soon as I change to a VLAN or ether interface, it does not work, and that does not make sence to me.
by vingjfg
Tue Dec 19, 2023 9:14 am
Forum: Beginner Basics
Topic: Help with simple static routing [SOLVED]
Replies: 24
Views: 2077

Re: Help with simple static routing [SOLVED]

Reading the zerotier documentation, you need a ZT managed route.
by Viking.za
Tue Dec 19, 2023 9:01 am
Forum: Beginner Basics
Topic: Help with simple static routing [SOLVED]
Replies: 24
Views: 2077

Re: Help with simple static routing [SOLVED]

Main-router has no return route for 172.1.2.0/24.

On main-router, add a route for 172.1.2.0/24 via 10.147.18.4. You also need to check your zerotier and make sure that network is defined.
What do you mean by "defined"?
by vingjfg
Tue Dec 19, 2023 7:39 am
Forum: Beginner Basics
Topic: Help with simple static routing [SOLVED]
Replies: 24
Views: 2077

Re: Help with simple static routing [SOLVED]

Main-router has no return route for 172.1.2.0/24.

On main-router, add a route for 172.1.2.0/24 via 10.147.18.4. You also need to check your zerotier and make sure that network is defined.
by smyers119
Tue Dec 19, 2023 12:26 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

After upgrading to 7.12 and 7.13 there seems to be a bug preventing multicast packets coming in on zerotier. I use to have ospf running between hosts over zerotier link that no longer work. when doing a packet capture, the mikrotik does not receive ospf hellos but the other ...
by Viking.za
Mon Dec 18, 2023 10:25 pm
Forum: Beginner Basics
Topic: Help with simple static routing [SOLVED]
Replies: 24
Views: 2077

Re: Help with simple static routing [SOLVED]

Seems you don't have a route back for 172.1.2.0/24 in main-router/router2.

Can't tell if your ZeroTier is correctly configured.
I put in this route on the main router and no change, still not working.
by Viking.za
Mon Dec 18, 2023 9:39 pm
Forum: Beginner Basics
Topic: Help with simple static routing [SOLVED]
Replies: 24
Views: 2077

Re: Help with simple static routing [SOLVED]

This is a trace route from hAP^ac2 to the main router. The trace route is run from the zerotier interface on hAP^ac2 to the host machine on port 7 of the main router. As you can see, there is a route, and it carries traffic.
by vingjfg
Mon Dec 18, 2023 9:03 pm
Forum: Beginner Basics
Topic: Help with simple static routing [SOLVED]
Replies: 24
Views: 2077

Re: Help with simple static routing [SOLVED]

Seems you don't have a route back for 172.1.2.0/24 in main-router/router2.

Can't tell if your ZeroTier is correctly configured.
by ctop
Mon Dec 18, 2023 3:22 am
Forum: Beginner Basics
Topic: Something like Pepwave SpeedFusion
Replies: 9
Views: 1141

Re: Something like Pepwave SpeedFusion

would exploring Wireguard or Zerotier get me something like this?
by kurio
Sun Dec 17, 2023 6:30 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

You were all correct. I set up a VPN to my edge router, so I could test the process using a "local" IP instead of Zerotier. After removing Zerotier, I was able to load wifi-qcom-ac and the interfaces were visible and could be configured. After all of that I decided to roll ...
by PappaB
Sun Dec 17, 2023 1:59 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... in WiFi wikipage. You were all correct. I set up a VPN to my edge router, so I could test the process using a "local" IP instead of Zerotier. After removing Zerotier, I was able to load wifi-qcom-ac and the interfaces were visible and could be configured. After all of that I decided ...
by whatever
Sun Dec 17, 2023 10:28 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

It doesn't fit with any extra packages, you have to remove zerotier before installing wifi-qcom-ac.
by dcavni
Sun Dec 17, 2023 10:26 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

It does not work with Zerotier on Hap Ac2. To little storage for qcom and zerotier together.

I think it's missing around 300 - 500 kB of space.
by PappaB
Sun Dec 17, 2023 10:20 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... so use oneliner configuration available in WiFi wikipage. It is possible that the wifi-qcom-ac is not installing. I only have routeros and zerotier (which I use to remotely manage the router). Nothing else in files.... Has anyone done it with zerotier still installed on HAP AC2?
by dcavni
Sat Dec 16, 2023 5:34 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... LHG52 to 7.13 first in didn't even see wireless intefaces even if wireless package was installed (checked). Probably because there was also Zerotier package on it and something went wrong with the instalation (to little space for all those packages). I just deleted it and installed qcom ...
by sjmudd
Sat Dec 16, 2023 11:26 am
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

... how small it is. - RB5009UG+S+ seemed to upgrade fine to 7.13 - Hex PoE (RB960PGS) upgraded fine to 7.13 Bad: - cap ac ( RBcAPGi-5acD2nD) had zerotier installed and so did not have enough space to upgrade to 7.13, so rebooted itself back to 7.12.1. I didn't need zerotier here so removed the ...
by msilcher
Fri Dec 15, 2023 5:07 pm
Forum: Announcements
Topic: v7.13.5 [stable] is released!
Replies: 863
Views: 226651

Re: v7.13 [stable] is released!

Working fine so far on hAP ax2/hAP ac2.

Can we get an updated Zerotier package pleeeeeeeeeeease?
by holvoetn
Thu Dec 14, 2023 3:35 pm
Forum: RouterBOARD hardware
Topic: New hAP ax lite LTE
Replies: 199
Views: 24541

Re: New hAP ax lite LTE

Yes, very much possible using whatever VPN service you want to use.

Already did so with wireguard, ipsec, zerotier, ...
by joshhboss
Thu Dec 14, 2023 3:46 am
Forum: General
Topic: HEX POE - Ubiquiti Access Point
Replies: 7
Views: 1306

Re: HEX POE - Ubiquiti Access Point

I'll note the HEX POE's bigger downside, IMO, is not the PoE output. It's a MIPSBE device. So no Container or ZeroTier & Mikrotik has focused more on ARM in V7. I wish I could budget in an RB5009 with POE.. Ive been using the L009 and its been pretty decent.. if it had some ...
by Amm0
Thu Dec 14, 2023 2:27 am
Forum: General
Topic: HEX POE - Ubiquiti Access Point
Replies: 7
Views: 1306

Re: HEX POE - Ubiquiti Access Point

I'll note the HEX POE's bigger downside, IMO, is not the PoE output. It's a MIPSBE device. So no Container or ZeroTier & Mikrotik has focused more on ARM in V7.
by mkuser1
Tue Dec 12, 2023 10:46 pm
Forum: Beginner Basics
Topic: Wireguard VPN (paid service) on LTE device
Replies: 2
Views: 1234

Re: Wireguard VPN (paid service) on LTE device

... name=default-dhcp ranges=192.168.88.10-192.168.88.254 /ip dhcp-server add address-pool=default-dhcp interface=bridge lease-time=10m name=defconf /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" disabled=yes disabled=yes name=zt1 port=9993 /interface ...
by mkuser1
Tue Dec 12, 2023 6:35 pm
Forum: Beginner Basics
Topic: Wireguard VPN (paid service) on LTE device
Replies: 2
Views: 1234

Wireguard VPN (paid service) on LTE device

... work for wifi1 and wifi2 and ether* devices? So here is my current config which I would like to preserve as much as possible (DoH, Back to home/ZeroTier) # 2023-12-12 16:49:57 by RouterOS 7.12.1 # software id = UAT7-31VF # # model = S53UG+5HaxD2HaxD&EG18-EA # serial number = *** /interface ...
by Larsa
Mon Dec 11, 2023 10:05 pm
Forum: General
Topic: Multi-WAN Load Balancing Starlink issue
Replies: 99
Views: 11186

Re: Multi-WAN Load Balancing Starlink issue

@Gotsprings, I don’t get what you mean by "load-balanced single IP." Zerotier, Tailscale, and most other SD-WAN solutions can utilize multipath and internal load balancing with an "exit node" to a public IP on internet. It’s just a matter of configuration.
by gotsprings
Mon Dec 11, 2023 3:51 pm
Forum: General
Topic: Multi-WAN Load Balancing Starlink issue
Replies: 99
Views: 11186

Re: Multi-WAN Load Balancing Starlink issue

... was more aggressive, you could call RouterOS tunnels+mangle+scripts as a "software-defined WAN" too ;). I had been hoping that somehow Zerotier would have give me some sort of load balanced single IP. This thread has been bothering me for a while. Has someone managed to set up something ...
by holvoetn
Mon Dec 11, 2023 6:34 am
Forum: Beginner Basics
Topic: Back to home supported router
Replies: 37
Views: 4277

Re: Back to home supported router

Well, true enough. Unless the router is behind CGNAT...
Why not ?
You only go out then towards a device with public IP (dynamic or static) but it will still work.
Same with Zerotier BTW when it's behind CGNAT.
by tangent
Mon Dec 11, 2023 1:37 am
Forum: RouterBOARD hardware
Topic: hAP ax lite vs. Hex (750gr3)
Replies: 11
Views: 3024

Re: hAP ax lite vs. Hex (750gr3)

I don't think I have an use for zerotier right now The other major ARM-only feature is containers . slower CPU and less threads (but maybe this is compensated by the different architecture) A useful proxy for determining CPU power in RouterOS ...
by jaclaz
Sun Dec 10, 2023 2:05 pm
Forum: RouterBOARD hardware
Topic: hAP ax lite vs. Hex (750gr3)
Replies: 11
Views: 3024

Re: hAP ax lite vs. Hex (750gr3)

... (and with 128 MB storage) should more than compensate in my use case the the misssing USB and SD ports. As well, I don't think I have an use for zerotier right now, but it is good to have this option should the need arise. Since my internet connections are very slow anyway, even if the ax lite ...
by ToTheCLI
Sun Dec 10, 2023 12:27 am
Forum: Announcements
Topic: v7.13rc [testing] is released!
Replies: 178
Views: 48159

Re: v7.13rc [testing] is released!

CCR2116, WireGuard isn't working, replaced it with ZeroTier, in details: - delete and re-add the peer may solve the problem but once you disconnect you can't connect back. - It shows 94bytes received, 'Handshake did not complete after 5 seconds' - ...
by kreb
Sat Dec 09, 2023 2:01 pm
Forum: Announcements
Topic: v7.13rc [testing] is released!
Replies: 178
Views: 48159

Re: v7.13rc [testing] is released!

... /routing ospf area add disabled=no instance=ospf-instance-1 name=ospf-area-1 /system logging action set 3 remote=10.10.10.10 src-address=10.0.0.1 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" name=zt1 port=9993 /zerotier interface add allow-default=no ...
by iustin
Sat Dec 09, 2023 1:18 pm
Forum: Announcements
Topic: v7.13rc [testing] is released!
Replies: 178
Views: 48159

Re: v7.13rc [testing] is released!

CCR2116, WireGuard isn't working, replaced it with ZeroTier, in details: - delete and re-add the peer may solve the problem but once you disconnect you can't connect back. - It shows 94bytes received, 'Handshake did not complete after 5 seconds' - ...
by kreb
Sat Dec 09, 2023 12:53 pm
Forum: Announcements
Topic: v7.13rc [testing] is released!
Replies: 178
Views: 48159

Re: v7.13rc [testing] is released!

CCR2116, WireGuard isn't working, replaced it with ZeroTier, in details: - delete and re-add the peer may solve the problem but once you disconnect you can't connect back. - It shows 94bytes received, 'Handshake did not complete after 5 seconds' - ...
by holvoetn
Fri Dec 08, 2023 11:59 pm
Forum: RouterBOARD hardware
Topic: hAP ax lite vs. Hex (750gr3)
Replies: 11
Views: 3024

Re: hAP ax lite vs. Hex (750gr3)

It's ARM based so you can run zerotier on it.

And it does have wifi, in case you need it.
2.4GHz only but with a capable client you can reach 400Mbps.

Even more versatile, the LTE version.

It doesn't have a beeper, though :lol:
by LaKing
Fri Dec 08, 2023 6:16 pm
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

... Zt interface is deactivated the effect stops. ... I wonder if this might be related to some version mismatch, as the Mikrotik is reported to be ZeroTier version 1.10.3 while every other OS reports ZeroTier version 1.12.2. It looks like MT is trying to push something through the tunnel, like ...
by raffav
Wed Dec 06, 2023 11:59 pm
Forum: General
Topic: Topology for a better home networking and wifi roaming
Replies: 15
Views: 2057

Re: Topology for a better home networking and wifi roaming

... bunch of other radios so that you can see if I'm right. Bonus aside from fun science experiment at zero net cost: the hAP will run containers, ZeroTier, and other ARM-only features while the outdated hEX will not. As far as I can tell from the switch chip feature tables , it's about a wash. ...
by tangent
Wed Dec 06, 2023 10:26 pm
Forum: General
Topic: Topology for a better home networking and wifi roaming
Replies: 15
Views: 2057

Re: Topology for a better home networking and wifi roaming

... bunch of other radios so that you can see if I'm right. Bonus aside from fun science experiment at zero net cost: the hAP will run containers, ZeroTier, and other ARM-only features while the outdated hEX will not. As far as I can tell from the switch chip feature tables , it's about a wash. ...
by Amm0
Mon Dec 04, 2023 11:07 pm
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

... it has a lower priority. But it could just be port mapping through the CGNAT isn't conflicting & not the route distance. Time will tell. Since ZeroTier can use IPv6 to establish the tunnels to the ZeroTier planets/root servers... you wouldn't have the same potential for port mapping issues. ...
by nykr95
Mon Dec 04, 2023 9:00 pm
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

Hi - changing the instance tab to 10 seems to have made it more reliable. It is problematic the first try or two and then just works solid. What does that do? Regarding T-Mobile - I don't think they will provide an IPv6 and there is no control over the router they provide to create a DMZ. I will cal...
by Amm0
Mon Dec 04, 2023 5:48 pm
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

... - I am not super skilled on MT or ZT. You might want to try change the "route distance" on the "zt1" instance under zerotier > instance tab to "10". Otherwise it's possible 192.168.0.0/24 route might be load balanced if the ZeroTier added one's distance ...
by ccky
Sun Dec 03, 2023 10:44 pm
Forum: Beginner Basics
Topic: Best approach to dual purpose device - wifi ap / lte travel router
Replies: 0
Views: 1821

Best approach to dual purpose device - wifi ap / lte travel router

... set everything to go through wireguard thus keeping minimal ruleset ( "allow finding home" AND "drop all else" )? I feel like ZeroTier is lurking from this pile of unknowns? (pardon my ignorance, but I haven't yet managed to understand what problems can it solve for different ...
by nykr95
Sun Dec 03, 2023 8:37 am
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

Hi, I am running ZeroTier on a MikroTik ARM router. The router is behind a T-Mobile 5G gateway with CGNAT - no IP6 provided. I added a basic ZT Network with a managed route added for my internal network 192.168.0.X via the MT ROuter ...
by romal76
Sat Dec 02, 2023 12:53 pm
Forum: Containers
Topic: Small iperf3 container
Replies: 36
Views: 7337

Re: Small iperf3 container

... interface=bridge lease-time=10m name=defconf /port set 0 name=serial0 /snmp community set [ find default=yes ] addresses=0.0.0.0/0 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ disabled=yes disabled=yes name=zt1 port=9993 /container ...
by holvoetn
Fri Dec 01, 2023 3:40 pm
Forum: Scripting
Topic: DynU script with hAP ax lite LTE6 is not updating the right public IP
Replies: 2
Views: 1152

Re: DynU script with hAP ax lite LTE6 is not updating the right public IP

... way with most LTE carriers. You need to create a tunnel OUT first to a known location and via that way you can get back in. Look at wireguard or zerotier. Or even Mikroktik's own Back To Home feature, based on wireguard (see IP / Cloud)
by Amm0
Fri Dec 01, 2023 1:35 am
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

2. It may, it may not. Depends if a path can be found using the parts still left operational :lol: But you can always host your own zerotier cloud controller ... This is true & the feature come out AFTER I wrote his article. The story is bit more complex — since there are still root ...
by holvoetn
Fri Dec 01, 2023 12:11 am
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

... quite clear. 2. It may, it may not. Depends if a path can be found using the parts still left operational :lol: But you can always host your own zerotier cloud controller ... 3. Yes and no. ONE part on that network needs to be zerotier-capable. From there on you can hop to other devices within ...
by DyadyaGenya
Thu Nov 30, 2023 11:15 pm
Forum: Useful user articles
Topic: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]
Replies: 39
Views: 28140

Re: ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

... Arm architecture, but MMIPS, but an LTE modem is inserted into it, will such a combination work? 2. If I understand correctly, without the central ZeroTier cloud it is impossible to create your own network. For example, if I created such a network by registering on their website, and then their ...
by netravnen
Sat Nov 25, 2023 11:39 pm
Forum: Beginner Basics
Topic: Setup a secure VPN
Replies: 3
Views: 1121

Re: Setup a secure VPN

... Wireguard is the simplest to get going with. In terms of configuration required. ZeroTier will require at minimum a free account with ZeroTier.com. & connecting your ZeroTier clients with your account. * Both OpenVPN and WireGuard ...
by mrarmyant
Fri Nov 24, 2023 2:20 am
Forum: Beginner Basics
Topic: 2 Vlans, a firewall, and a PITA DNS.
Replies: 3
Views: 1055

2 Vlans, a firewall, and a PITA DNS.

... interface=RedBridge lease-time=5m name=RedDHCP add address-pool=GreenDHCPPool interface=GreenBridge lease-time=5m name=\ GreenDHCP /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ name=zt1 port=9993 /zerotier interface add allow-default=no ...
by ibbog84
Wed Nov 22, 2023 12:34 am
Forum: General
Topic: ZeroTier
Replies: 0
Views: 1598

ZeroTier

HI. I installed ZEROTIER in a HAP AC2 router connected in cascade to the telephone provider's router. I need to connect remotely to the home automation but as I don't have a static IP I can't use it. with ZEROTIER I created the network, ...
by MrLimoAK
Mon Nov 20, 2023 9:31 pm
Forum: General
Topic: Routing Different Network Segments to specific Ports
Replies: 7
Views: 1113

Re: Routing Different Network Segments to specific Ports

... add name=dhcp ranges=192.168.88.11-192.168.88.99 /ip dhcp-server add address-pool=dhcp interface=bridge name=defconf /port set 0 name=serial0 /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" \ identity="{removed}" name=zt1 \ port=9993 /zerotier ...
by holvoetn
Mon Nov 20, 2023 3:02 pm
Forum: General
Topic: Upgrade an hAP ac with?
Replies: 2
Views: 877

Re: Upgrade an hAP ac with?

... it is possible however to load the wifiwave2 drivers on it but space is a problem on that device, not much left for other things then like e.g. zerotier. If you want to move to AX wifi, then it immediately goes to AX3 (a bit more expensive and a lot bulkier with the external anntenas). AX2 doesn't ...
by sirbryan
Sun Nov 19, 2023 2:55 am
Forum: General
Topic: Multi-WAN Load Balancing Starlink issue
Replies: 99
Views: 11186

Re: Multi-WAN Load Balancing Starlink issue

ZeroTier is Wireguard, with their additional relay tech. And now MikroTik is doing their own thing with Back to Home. I'm not disputing the benefits, especially for the double NAT scenarios you speak of (both ends), where ...
by sirbryan
Sun Nov 19, 2023 1:14 am
Forum: General
Topic: Multi-WAN Load Balancing Starlink issue
Replies: 99
Views: 11186

Re: Multi-WAN Load Balancing Starlink issue

Fwiw, ZeroTier is already integrated into ROS v.7. As for remote management, I’d choose ZeroTier anytime over WireGuard but the latter might serve well as backup access. ZeroTier is a great tool/service for automagically creating ...
by Larsa
Sun Nov 19, 2023 12:15 am
Forum: General
Topic: Multi-WAN Load Balancing Starlink issue
Replies: 99
Views: 11186

Re: Multi-WAN Load Balancing Starlink issue

... before jumping on the SD-WAN train with solutions like BigLeaf, first make sure your objectives are in order before making any decisions. Fwiw, ZeroTier is already integrated into ROS v.7. As for remote management, I’d choose ZeroTier anytime over WireGuard but the latter might serve well as ...
by uberdome
Sat Nov 18, 2023 1:32 am
Forum: General
Topic: Lowest Cost ARM w/ 48V PoE Out?
Replies: 8
Views: 1695

Re: Lowest Cost ARM w/ 48V PoE Out?

... with two cAP AC units for testing, and they will serve my needs. They are running RouterOS 7.12 with a default configuration and a couple changes. ZeroTier is installed, and bridged to the Ethernet port. The Wi-Fi radios are turned off. Speed testing from external routerBOARDs through the ZeroTier ...
by uberdome
Thu Nov 16, 2023 5:33 am
Forum: General
Topic: ZeroTier "DHCP" in Status?
Replies: 0
Views: 1364

ZeroTier "DHCP" in Status?

In the ZeroTier status, there is a flag for DHCP. What does this represent? Does ZeroTier have the ability to hand out addresses over the bridge, or is it something else?
Screenshot 2023-11-15 223211.jpg
Thank you, Chris
by dcavni
Wed Nov 15, 2023 10:30 pm
Forum: Announcements
Topic: v7.13beta [testing] is released!
Replies: 467
Views: 84916

Re: v7.13beta [testing] is released!

... my Wifi interfaces. Probably not enough space for the new wifi package ? Export config Netinstall Import config Found the reason. Had to delete Zerotier for more space. Now it works.
by pablolite
Wed Nov 15, 2023 1:14 pm
Forum: Announcements
Topic: v7.13beta [testing] is released!
Replies: 467
Views: 84916

Re: v7.13beta [testing] is released!

... until 7.13 comes out of beta and take @pe1chl Netinstall's advice, maybe it will work. On router Chateau 5g will i be able to use the new wifi and zerotier at the same time? I am using it at home and purchased as "future proof". Am I facing a replacement? Alternatively to what model? ...
by holvoetn
Wed Nov 15, 2023 12:10 pm
Forum: Announcements
Topic: v7.13beta [testing] is released!
Replies: 467
Views: 84916

Re: v7.13beta [testing] is released!

On router Chateau 5g will i be able to use the new wifi and zerotier at the same time? I am using it at home and purchased as "future proof". Am I facing a replacement? Alternatively to what model? A device with 16Mb of flash does not really ...
by pablolite
Wed Nov 15, 2023 11:30 am
Forum: Announcements
Topic: v7.13beta [testing] is released!
Replies: 467
Views: 84916

Re: v7.13beta [testing] is released!

On router Chateau 5g will i be able to use the new wifi and zerotier at the same time?

I am using it at home and purchased as "future proof".
Am I facing a replacement? Alternatively to what model?

https://mikrotik.com/product/chateau_5g

Image
by netravnen
Tue Nov 14, 2023 7:57 pm
Forum: Forwarding Protocols
Topic: IS-IS
Replies: 132
Views: 50727

Re: IS-IS

... but it will certainly work over anything that looks like layer2, EOIP tunnels, VPLS, WDS, etc. I am looking forward to try IS-IS over primarily Zerotier tunnels (Layer 2). Either than, or VXLAN tunnels (over Layer 3 tunnels). Not to keen on maintaining OpenVPN tap tunnels.
by parham
Tue Nov 14, 2023 3:00 pm
Forum: Announcements
Topic: v7.13beta [testing] is released!
Replies: 467
Views: 84916

Re: v7.13beta [testing] is released!

... 12.49.18.png after update 14.9MB of 15.2MB 2% free Screenshot 2023-11-14 at 12.54.43.png As a side note, I have dead mikrotik when I was installed Zerotier after few reboot since 7.6 to 7.12 OMG, Now I can't even install Zerotier Screenshot 2023-11-14 at 13.06.43.png Thanks Parham
by strods
Tue Nov 14, 2023 8:08 am
Forum: Announcements
Topic: v7.13beta [testing] is released!
Replies: 467
Views: 84916

Re: v7.13beta [testing] is released!

Several complaints here about specific issues - Zerotier, Wireguard, etc.
but Zero tickets about that to support@mikrotik.com. Please remember that actual "bugs" must be reported to support@mikrotik.com complemented with logs, supout files, etc.
by loloski
Tue Nov 14, 2023 7:17 am
Forum: Announcements
Topic: v7.13beta [testing] is released!
Replies: 467
Views: 84916

Re: v7.13beta [testing] is released!

7.12 stable to 7.13beta1 will fail to update if zerotier package was install on hapac2
by Valerio5000
Fri Nov 10, 2023 3:10 pm
Forum: Useful user articles
Topic: HOW TO: mDNS and SSDP over Wireguard
Replies: 13
Views: 8310

Re: HOW TO: mDNS and SSDP over Wireguard

Valerio, if you want to have LAN parties and more complex setups, suggest upgrading router to one that is zerotier capable, it would be perfect for your needs. Thanks for the support ! My need would be to maintain different LAN subnets, each with its own DHCP server in order ...
by Amm0
Thu Nov 02, 2023 9:47 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

What's ironic is ZeroTier is still one of the easiest VPNs to setup. It really does just mimic ethernet switch, so it's the IP routing (and/or NAT'ing) stuff where things get complex in any VPN. The received routes from ZT would be ...
by TeWe
Thu Nov 02, 2023 9:10 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

Okay I found the problem: For whatever reason, my RB5009's ZT didn't get this specific (new) managed route 192.168.2.0/24 via [IP of ZT gw] I've restarted zt1 instance on RB5009 and now he knows this route and all devices behind RB5009 can access 192.168.0.2/24 👍 Big THANK YOU Amm0 for helping out b...
by TeWe
Thu Nov 02, 2023 8:55 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

... also has ZT installed and configured properly (I was hoping). It is still not working from behind this RB5009... Default ZT config of RB5009: /zerotier interface add allow-default=no allow-global=no allow-managed=yes disabled=no instance=zt1 name=zerotier network=xxx All other ZT related configs ...
by Amm0
Thu Nov 02, 2023 8:45 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

Strange, Can you access anything on the 192.168.2.0/24 network from your ZeroTier client? Windows boxes often block ping, so if that's what your testing, that could be problem.

From ZeroTier client, can you ping the Mirkotik's 192.168.2.10 address?
by TeWe
Thu Nov 02, 2023 8:45 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

Moment - this is weird.
by TeWe
Thu Nov 02, 2023 8:39 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

Ah okay, I've tried this before but also no luck.

2023-11-02_19h36_28.png

I still cannot ping anything on 192.168.2.0/24 coming out of my ZeroTier network.
by Amm0
Thu Nov 02, 2023 8:33 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

Yeah I'm always hesitant to give exact command since never know what someone wants (and I forget the syntax without tab completion – "out-interface" is what I should have said) It probably make most sense to do it on the eth1, so should be: /ip/firewall/nat/add action=masquerade chain=srcn...
by TeWe
Thu Nov 02, 2023 8:27 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

... router or any kind of configuration - only option 2a is left :-) "add a /ip/firewall/nat rule src-nat+masquerade for src interface of zerotier1" I have issues understanding your wording "src interface of zerotier" Can you kindly give me a proper command for what you ...
by Amm0
Thu Nov 02, 2023 7:34 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

The eth1 network (from DHCP client) likely has no route back to the ZeroTier subnet (or 192.168.88.0/24). So your ping is likely getting to 192.168.2.0/24, but clients within that subnet have no idea of the route back via your Mikrotik (e.g. 192.168.2.0/24 ...
by TeWe
Thu Nov 02, 2023 7:20 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

... /ip pool add name=pool ranges=192.168.88.100-192.168.88.199 /ip dhcp-server add address-pool=pool interface=bridge lease-time=15m name=dhcp /zerotier set zt1 comment="ZeroTier Central controller - https://my.zerotier.com/" name=zt1 port=9993 /zerotier interface add allow-default=no ...
by Amm0
Thu Nov 02, 2023 7:16 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

Might want to post a sanitized config. e.g. Is ZeroTier interface ("zerotier1") also in the LAN interface group, along with ether1 and bridge?
by TeWe
Thu Nov 02, 2023 7:13 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

Thanks Amm0. Yes - ZeroTier web portal had already been done. I did as you said - changed zt1 route distance from 1 to 10. Rebooted. But still no luck. As you said - I can see ZT routes now with a distance of 10 being added to routing ...
by Amm0
Thu Nov 02, 2023 6:57 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

Re: ZeroTier --> 2 local subnets [SOLVED]

edit - seem this was already done: You need to add 192.168.2.0/24 as a route on https:///my.zerotier.com web portal for the ZeroTier network, with it's destination being the ZeroTier address of your Mikrotik. You'd likely also want to change the default-route-distance ...
by TeWe
Thu Nov 02, 2023 6:51 pm
Forum: General
Topic: ZeroTier --> 2 local subnets [SOLVED]
Replies: 13
Views: 1502

ZeroTier --> 2 local subnets [SOLVED]

Hi guys, following situation: hAP ax lite LTE in default config, internet via LTE is fine. ZeroTier package installed, configured, working fine. In order not needing to frickle around with firewall rules, I added interface 'zerotier' to Interfaces - LAN list Access to ...
by nichky
Thu Nov 02, 2023 3:49 am
Forum: Useful user articles
Topic: HOW TO: mDNS and SSDP over Wireguard
Replies: 13
Views: 8310

Re: HOW TO: mDNS and SSDP over Wireguard

we are waiting for the second part, with the Zerotier
by Amm0
Wed Nov 01, 2023 4:18 pm
Forum: Beginner Basics
Topic: Layer 2 tunnel over the internet , options?
Replies: 4
Views: 1212

Re: Layer 2 tunnel over the internet , options?

If the device has IPSec offloading, EoIP with IPSec enabled on it is perfectly valid choice too. But ZeroTier may be easier, is just slower. If Layer2/Ethernet can be avoid, that is preferable and faster that any L2 option.
by anav
Wed Nov 01, 2023 4:14 pm
Forum: Beginner Basics
Topic: Layer 2 tunnel over the internet , options?
Replies: 4
Views: 1212

Re: Layer 2 tunnel over the internet , options?

Another option for L2 connectivity is Zerotier, which may be far easier than other options, but concur L3 has more security/control overall
  • 1
  • 2
  • 3
  • 4
  • 5
  • 8