Zerotier for Layer 2 Tunneling

[Achilles]

Hi there, I was trying to provide layer 2 tunnel between 2 sites using RB4011 at sites and using zerotier as the overlay for the tunnel. but no luck so far, is there any suggested solutions regarding this approach?

[holvoetn]

Hi and welcome.
Why L2 ? For Romon connectivity ?

Then you need to add something to Zerotier flow rules.
Look here:

ZeroTier on Mikrotik – a rosetta stone [v7.1.1+]

ZeroTier on Mikrotik is only available for ARM/ARM64 architecture running RouterOS version 7.1+ This is biggest blocker to a lot useful use cases, since not all Mikrotik’s are ARM-based. You may not have to even read this! ZeroTier aims to be very simple. So IF you followed Mikrotik’s instruction AND know some networking/Mikrotik config already, SHOULD be easy. Now, it’s the intersection with other RouterOS features/protocols where there may be more trouble, and why I write this. But se…

@Amm0

So if just add the following to the TOP of the Flow Rules for the Network at my.zerotier.com. You’d still want the defaults, so LEAVE the rest

#
# Allow RoMON.
#
accept
	ethertype 0x88bf
;

There is some docs about the Flow Rules next to where you configure on ZeroTier’s Network config page. But way the flow rules work (& describe this):

• if action matches the criteria, rule evaluation stops (why we add an “accept ethertype 0x88bf;” at start and be done)
• the default action is deny (why the default includes a final “accept;” line) – so NO rules, means NO traffic
• if you use IP-based (Layer3) matchers, they are ignored for non-IP traffic (e.g. just “passthrough” to next rule)

[Achilles]

Ok now I could transport VLAN tags over the tunnel, thank you so much!

[challado]

It’s 2026 and NO ONE support to ZeroTier HW Crypt on ARM devices. Mikrotik Version of ZeroTier is too old and buggy. Mikrotik, please, update version and enable the ARM support to offloading crypto to accel devices! New versions have the support to arm platform!