Zerotier routes

Hi all, I’m using ZeroTier on Mikrotik to create site to site connections.
I’ve run into an issue, i entered an incorrect route in the ZT mananged routes section, after noticing I removed this route, I checked the route list on the routers that are part of this network, they both show the incorrect route.
When attempting to remove the route from route list this error appears,
"Couldn't remove Route - cannot modify static route created by a different owner (9)
I’ve disconnected/reconnected from the ZT network as suggested by another user but the route list does not update.
Any way to remove these routes from route list?

I think you may want to change the route-distance on the ZT instance to higher number like 10 or anything but it's default of 1, this will prevent them from overlapping with existing connected routes.

Alternatively, if you want to disable routes from ZeroTier, you have to set allow-managed=no. This will also mean the ZT network interface will not have an IP from ZT either, since "managed" means both routes and interface IP. So you have to manually set the router's ZT address, like /ip/address add interface=zerotierX address=x.x.x.x/24 that match IP address for the router's "member" entry my.zerotier.com.

Hi Amm0, I have tried your suggestions but I still cannot remove the incorrect routes from route list
"Couldn't remove Route - cannot modify static route created by a different owner (9)”

You cannot remove ZT created routes using a CLI remove, they are created by the ZeroTier process. Thus the message you're seeing.

If setting allow-managed=no didn't remove them automatically. You may have to disable the network to cause that to take effect (although it should not need that). But this should get rid of the routes, at the expensive having to manually add an IP for your ZT network.

And setting a higher distance is not going to remove them nor allow them to be remove, just prevent conflict with locally defined routes. I guess a spin-off suggestion be to add blackhole routes with a lower distance than ZT to use the higher default route distance, as this have to effect of "disabling" them.

I guess I'm not sure why you have routes defined in your ZeroTier central network, that you never want to used on RouterOS. Or, why using a higher distance does not fix the problem (or at least turn it into a firewall config to block).

But it critical to understand that they are ZeroTier "owned" dynamic routes, not static config that's added (and thus removable). So /ip/route/remove is never going to work.

Thanks for your help Amm0, diabling “allow managed” and the ZT network on the router, then rebooting cleaned up the route list.

1 Like