Hello all
I have two routers on a site. One is a 5G router D53G-5HacD2HnD and the other is a RB1100AHx2. All router are on 7.15.1 firmware.
Behind the RB1100AHx2 I have a set of wireless antennas and cameras at 191.168.0.0/22 at 191.168.0.1. The wan from the 5G router to the RB1100AHx2 is (DHCP auto static) at 192.168.2.253.
The RB1100AHx2 is ARM but does not support zerotier as I have tried several times without success.
I have set zerotier on the 5G router and I have set routing table to be possible to connect to ping my 191.168.0.1 and everything behind it localy.
I have added zerotier route tables to connect via my pc to connect both at my 5G router, but also my RB1100AHx2 at 192.168.2.253 as it should be.
Furthermore, I have tried countless rules to my route tables on all routers as well locally to my pc to access 191.168.0.1 and everything behind 191.,168.0.0./22
This was not successful. Do you have any ideas? Firewall rules on the 5G and RB1100AHx2 are not affecting the results.
The RB1100AHx2 uses a PPC architecture which unfortunately doesn’t support ZeroTier, but your Chateau does. You don’t have to poke around with the routing tables yourself, just follow these simple steps:
Use ZeroTier Central (my.zerotier.com), go to Networks > Settings > Advanced > Managed Routes > Add Routes. Then add your local network 192.168.0.0/22 under “Destination” and the local ZeroTier IP address of the Chateau (just as an example 172.16.10.1) under “Via” as in “192.168.0.0/22 via 172.16.10.1”.
in the Chateau, add the ZeroTier network interface to the LAN interface list.
Now you can use the native ip addresses of your LAN to reach your camers etc. You can also setup a LAN-to-LAN network by adding another LAN as in step 1.
I have tried this also. It gives a symbol. That symbol states No Private IP Space. Clients will need to set Allow Global.And If I do so into the client (mirotik) does not allow to ping teh internal addresses…
The icon indicates that the chosen IP address range overlaps with a public (global) address space. Avoid using a public IP address spaces for your own LAN or the Zerotier network, instead choose a sufficiently large subnet from 10.0.0.0/8, 172.16.0.0/12 or 192.168.0.0/16 (or allow ZeroTier to pick one automatically for you). Use a service like “IP Subnet Calculator” or “whatismyipaddress.com” to verify that the selected subnet for your ZeroTier network is private. This will eliminate the need to “allow global” access. If you configure ZeroTier to use a public address space using “allow global”, IP routing can become very complex and difficult to manage correctly.
If you don’t own the entire 91.168.0.0/22 range, it’s probably wise to change it to something else. Otherwise, you risk routing your network traffic to the real owners out there on the interweb..