I’m a bit stuck here. I don’t know what ‘interfaces’ I should be selecting here:
If I select anything other than ‘all’ the connection gets stuck on “REQUESTING_CONFIGURATION”
The Mikrotik documentation page (https://help.mikrotik.com/docs/display/ROS/ZeroTier) isn’t all that helpful:
Best article on the subject…
http://forum.mikrotik.com/t/zerotier-on-mikrotik-a-rosetta-stone-v7-1-1/155978/1
I’ll go through it again, thanks.
I’ve re-read this tonight. It doesn’t really provide any more info. It says that the interface selection is just for specifying interfaces the zero tier ‘may’ use.
The ZT Interface selector on the instance controls where it will establish tunnels to other ZT peers/etc. May not 100% accurate but essentially “instance” (e.g. “zt1”) is what establishes ZT tunnels, the get manifests as ZT network interface (“zeroteir1”).
By default ZT will attempt to establish a connection on “all” interface, since you may have peers on the LAN and WAN at same time. But if you pick an interface[/list], then it will ONLY use that to establish tunnels.
If you goal is remote access to the router itself, then could use “WAN” (or your uplink interface). Now if the interface[/list] has no direct internet access, like “LAN”, it might be a problem since it might be restricted from reaching the root/planets.
I’ve just left it “all”, but I can see use cases ZT network or security model where you would rather not have all the ZT stuff going doing some interface.
You can try different settings, and the effects can be seen in the “Peer” view. You may have to click on a particular peer to see the full list of “Paths” - winbox’s list only shows the first one.
@Amm0, please consider adding too, or modifying your article if you think appropriate to cover off the OPs concerns (assuming they are legitimate requirements that you could see others needing).
Thanks @Amm0 - what led me to your post was that when I set ‘interface’ to anything but ‘all’ (I had wanted it set to ‘WAN’) ZeroTier on routerOS would hang at REQUESTING_CONFIGURATION.
You know it’s entirely possible there are bug/limitations. And actually you understand do how it should work 
. Mikrotik isn’t quick with support tickets, but if created one with a supout.rif, it worth to see what they say.
Thanks - I’ll raise a ticket.
Upgraded to RouterOS 7.2.3 and I can now get a connection specifying the ‘WAN’ interface list.
Interesting … what version were you coming from ?
7.2.1