Hello...
I am using a RB2011UiAS for my router (192.168.1.1/24). I want to connect my 2 homes using ZeroTier and then layer a GRE tunnel on top of that. Since my RB2011UiAS does not support ZeroTier I will connect an OpenWRT router (192.168.1.2/24) behind the RB2011UiAS and install Zerotier on the OpenWRT router.
How do I configure my RB2011UiAS router to route all traffic for subnet 10.0.0.0/24 (my second home subnet) via the 192.168.1.2 OpenWrt router?
Thanks
why overcomplicate ?
2011 is weak, but it support wireguard OOB ... no need for 3party app/device
you want wg + eoip.
WG cannot pass through CGNAT
Are both homes behind CGNAT? It's fine if only one side has a real public IP address.
In case both homes have ISP that do CGNAT, if they have IPv6 support, enable that and have a direct WG connection between the two sites, which will be miles better than using a 3rd party relay. My site-to-site WG connections all use IPv6 and work fine.
both behind CGNAT
both ISP not support IPv6
Then you unfortunately need a 3rd party service like Zerotier, or MikroTik BTH, both are not supported for your RB2011.
Still, make sure that IPv6 is really not available at your ISP.
BTW, there are ISPs (such as mine) where, while you are behind CGNAT, if both homes use the same ISP, they might still be able to directly talk to each other using the CGNAT address (the two addresses in the 100.64.0.0/10 block). If that's the case, you can still make a direct WG connection between them.
different ISPs. Neither support IPv6. My service level is the basic home user service level which is the cheapest option and sit behind CGNAT. The more expensive business level option does support public IPv4 but that is just way too expensive for my simple home needs.
Just to pre-empt you why I don't use the same carrier, my 2nd house is in a rural area and is only supported by a single provider that is provided under USO. My other house is under triple play services contract with my mobile services provider.
Just FYI, in these situations the best quality of service is usually achieved using a private relay, i.e. a rented VPS. In many parts of the world these are available at low prices, in others not so much. You may wish to look this up.
ZT offers public relays, but these only work on a best effort basis, so you'll get low speeds. ZT also allows private relaying as "orbiting a moon".
@papdee: this OpenWrt thread might be useful as a starting point for setting up ZeroTier on your OpenWrt router: https://forum.openwrt.org/t/zerotier-over-ee-uk-cellular-5g-network/249002/4
For a routed setup, you can just add managed routes in the ZeroTier Web Console, something like:
10.0.0.0/24 via <ZeroTier-Managed-IP-of-the-OpenWrt-router>
and of course add the corresponding route in the other direction.
A pretty nice feature with ZeroTier is that it's often able to establish direct peer-to-peer connectivity between the nodes, even behind NAT/CGNAT using hole punching. If that doesn't work, it automatically falls back to relaying.
But I'm curious, why do you want GRE on top of ZeroTier? ZeroTier already gives you a virtual L2 network so you can bridge it directly if that's what you need.