ZeroTier interface keeps disappearing

RouterOS RouterOS beta
1

I am running on the 7.1rc4 version. I have installed the ZeroTier package and created a new network 192.168.89.0/26 with a range of 192.168.89.1 - 192.168.89.62.

So far I have added two devices, my home Mikrotik RB4011iGS+5HacQ2HnD router and the Laptop from work. I can ping the router on 192.168.89.1 and the router can ping my Laptop on 192.168.89.2.

This is my config:

/zerotier interface disabled=no instance=zt1 name=zerotier1 network="NETWORK ID"

I have noticed that the Route List shows the Gateway as *15 and Address list interface as unknown.
If I disable the zt1 instance and enable it back again, I will see the zerotier1 interface pop on the Interface List and Address List for a brief instant, then disappear, pop on again then disappear again permanently.

I am unable to connect to 192.168.89.1 with Winbox (I’m currently connected to my home network with OpenVPN).

Any ideas?

I also tried the following method with no success:

/zerotier disable zt1
/zerotier/interface disable zerotier1
/zerotier/inteface set zerotier1 disable-running-check=yes
/zerotier/interface enable zerotier1
/zerotier enable zt1
2

I had to add the interface manually to the firewall rules, above the !LAN drop rule, because WinBox interface is currently broken.

/ip firewall filter
add action=accept chain=input comment=ZeroTier in-interface=zerotier1
3 
/ip firewall filter add chain=input src-address=192.168.88.0/23 action=accept place-before=1
4

So I just tested ZT on 4011 ROS 7.1rc5.

ZeroTier itself works, but no interface visible in the WinBox:

/zerotier interface print
Columns: NAME, MAC-ADDRESS, NETWORK, NETWORK-NAME, STATUS

NAME MAC-ADDRESS NETWORK NETWORK-NAME STATUS

0 R zerotier1 A6:32:EC:7B:**** af78bf943623******* Logical_Test OK

/interface print

Columns: NAME, TYPE, ACTUAL-MTU, L2MTU, MAX-L2MTU, MAC-ADDRESS

NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU MAC-ADDRESS

0 ether1 ether 1500 1592 9578 2C:C8:1B:81:0D:5B
1 S ether2 ether 1500 1592 9578 2C:C8:1B:81:0D:5C
2 RS ether3 ether 1500 1592 9578 2C:C8:1B:81:0D:5D
3 S ether4 ether 1500 1592 9578 2C:C8:1B:81:0D:5E
4 S ether5 ether 1500 1592 9578 2C:C8:1B:81:0D:5F
5 ether6 ether 1500 1592 9578 2C:C8:1B:81:0D:60
6 ether7 ether 1500 1592 9578 2C:C8:1B:81:0D:61
7 ether8 ether 1500 1592 9578 2C:C8:1B:81:0D:62
8 ether9 ether 1500 1592 9578 2C:C8:1B:81:0D:63
9 ether10 ether 1500 1592 9578 2C:C8:1B:81:0D:64
10 sfp-sfpplus1 ether 1500 1600 9586 2C:C8:1B:81:0D:65
11 R LAN-BR bridge 1500 1592 2C:C8:1B:81:0D:5C
12 R zerotier1 zerotier 2800 2800 A6:32:EC:7B:A4:1F

All looks good and can ping the ZT interface from another client.

My issue is that when you look in WINBOX there is no ZT interface in the interface list...

Also if you add a firewall rules via CLI (as below)

/ip firewall filter add action=accept chain=forward in-interface=zerotier1 place-before=0
/ip firewall filter add action=accept chain=input in-interface=zerotier1 place-before=0

Then do a pint via cli and looks fine;

/ip firewall filter print

Flags: X - disabled, I - invalid; D - dynamic
0 chain=input action=accept in-interface=zerotier1
1 chain=forward action=accept in-interface=zerotier1

But if you look at the rules in WinBox, the interface is marked as unknown.

I guess it will be sorted in due course :slight_smile:

Very cool though!

5

Add Zeroteir as a port in your bridge