Zerotier and routing tables

Hello all
I have two routers on a site. One is a 5G router D53G-5HacD2HnD and the other is a RB1100AHx2. All router are on 7.15.1 firmware.
Behind the RB1100AHx2 I have a set of wireless antennas and cameras at 191.168.0.0/22 at 191.168.0.1. The wan from the 5G router to the RB1100AHx2 is (DHCP auto static) at 192.168.2.253.

The RB1100AHx2 is ARM but does not support zerotier as I have tried several times without success.

I have set zerotier on the 5G router and I have set routing table to be possible to connect to ping my 191.168.0.1 and everything behind it localy.

I have added zerotier route tables to connect via my pc to connect both at my 5G router, but also my RB1100AHx2 at 192.168.2.253 as it should be.

Furthermore, I :frowning: have tried countless rules to my route tables on all routers as well locally to my pc to access 191.168.0.1 and everything behind 191.,168.0.0./22
This was not successful. Do you have any ideas? Firewall rules on the 5G and RB1100AHx2 are not affecting the results. :frowning:

The RB1100AHx2 uses a PPC architecture which unfortunately doesn’t support ZeroTier, but your Chateau does. You don’t have to poke around with the routing tables yourself, just follow these simple steps:

  1. Use ZeroTier Central (my.zerotier.com), go to Networks > Settings > Advanced > Managed Routes > Add Routes. Then add your local network 192.168.0.0/22 under “Destination” and the local ZeroTier IP address of the Chateau (just as an example 172.16.10.1) under “Via” as in “192.168.0.0/22 via 172.16.10.1”.
  2. in the Chateau, add the ZeroTier network interface to the LAN interface list.

Now you can use the native ip addresses of your LAN to reach your camers etc. You can also setup a LAN-to-LAN network by adding another LAN as in step 1.

I have tried this also. It gives a symbol. That symbol states No Private IP Space. Clients will need to set Allow Global.And If I do so into the client (mirotik) does not allow to ping teh internal addresses…
Capture.PNG

The icon indicates that the chosen IP address range overlaps with a public (global) address space. Avoid using a public IP address spaces for your own LAN or the Zerotier network, instead choose a sufficiently large subnet from 10.0.0.0/8, 172.16.0.0/12 or 192.168.0.0/16 (or allow ZeroTier to pick one automatically for you). Use a service like “IP Subnet Calculator” or “whatismyipaddress.com” to verify that the selected subnet for your ZeroTier network is private. This will eliminate the need to “allow global” access. If you configure ZeroTier to use a public address space using “allow global”, IP routing can become very complex and difficult to manage correctly.

Looks like a typo… 192 is pretty close to 191 :wink:

That could very well be the case, but then there are a ton of typos in the first post. :smiley:

Thank you very much indeed for your kind answers.
The subnet is 191.168.0.0/22 and is public indeed.
Not many typos on the first post, although …

If you don’t own the entire 91.168.0.0/22 range, it’s probably wise to change it to something else. Otherwise, you risk routing your network traffic to the real owners out there on the interweb..

I will do so. Its mandatory now…
Thanks for your support

You’re most welcome! Feel free to get back with any further questions. :smiley: