ZeroTier SD-WAN / Network Orchestration

Currently works on RouterOSv7 Arm Architecture
Configuration
NB
No Static routes to configured on the internet Routers. All routes reachability will
Orchestrated from the Central Cloud network Overlay portal.
Public IPs do not define the Overlay creation. As long as all router have got Internet connectivity.
Overlay Secure Tunnel creation will be established.
Configs
HQ Router
/zerotier
set HAC comment=“Central Central Controller” identity=“cb43d5d28e:0:f5affaabcdda5b6c022ad405578d1b5d92e5a91bcb5de3bd1b4954cd7b37ed1c
5422cf3d549d2c87dd7bca31d54683274cc11fa7c00681d181f344519ff1eb8e:e82d2ade731e0e47a07f92f6133d9575133d271a4bf4a28063346de3e41b5b2
2541fb25ccaac76bafd0322e38033fe28ca2d4f5fdcd1bfb5c6e45f4dc47f2a37” interfaces=WAN-2-Telone name=HAC port=9993
/zerotier interface
add disabled=no instance=HAC mac-address=1E:2F:85:E3:46:31 name=HAC-SDWAN network=af78bf9436c6e41f
Remote Router
/zerotier
set zt1 comment=“ZeroTier Central Controller” identity="4c0e9e8968:0:934f0eb14501bfd6a0453f0d2106715664d161ad9e3d31e3403c8c56
2095eeb76488dcc90d79d191ed531:a114086ee176242e0feab12cab3f33a04e1b211b2206a8b60c640537c2b273e10824cf147ce895ac613a6d82ef0
interfaces=ether1-vlan3540 name=zt1 port=9993
/zerotier interface
add allow-default=no allow-global=no allow-managed=yes disabled=no instance=zt1 mac-address=1E:A8:C8:A8:1D:D7 name=zerotier1
Schematic of the Network Implementation
SDN2.jpg
Network Diagram.jpg
SDN.jpg

What I need to know is the simple directions to connect two MT routers together so that I can.
a. config the other router
b. access the internet of the other router.
c. access lan of router.

From a client PC, or IPHONE, connect to my MT router to
a. config the router
b. access the internet of the router
c. access LAN of router.

In other words MIMIC WIREGUARD TYPE CONNECTIVITY.
ITs relatively simple to create an account and joint all necessary devices to that account and assign them a zerotier address.
What then…

ZeroTier is NOT available on the Tile architecture……

WireGuard is faster, better and works GREAT ….

I dont know, DavidCombo has proclaimed it does, so it must be true! Otherwise why come by and make such an authoritative post…

Hi DavidGumbo, welcome to the forum!


Wireguard is perfectly fine but requires some knowledge and time to configure. I think ZeroTier is much easier to administer and especially when connecting a lot of different types of clients.

ZeroTier is more of a “fire and forget” type of solution (ie true SD-WAN) compared to Wireguard but as @mozerd explained, ZeroTier is unfortunately not available on Tile (yet!).

I beg to differ larsa, I can do wireguard in my sleep and zerotier baffles me.

Well, I do believe you since you are the true king of Wireguard! :smiley:

However, when it comes to ease of administration ZT plays in a different division. And it’s a proven fact, whatever you say! :wink:

Since you didnt provide answers to my questions, just more propaganda, my doubts are increasing not diminishing LOL :wink:

OK I will bite … Prove it that ZeroTier is easier to administer … provide @anav with the solution to his ZeroTier dilemma !

BTW, I did forget to mention that WireGuard is integrated into the current Linux Kernel plus WireGuard is available on the entire mikrotik hardware offerings under RoS 7.x while ZeroTier is very limited to the ARM architecture. And if a smart fellow like @anav cannot configure it to work for him I pity the overthinking geniuses that abound here . :slight_smile:

Well dont get too carried away Mozerd, I just havent put the same amount of energy into zerotier as I have wireguard, or more accurately annoyed the snot out of people on a long slow learning curve.
That being said, larsa…
What I need to know is the simple directions to connect two MT routers together so that I can.
_a. config the other router
b. access the internet of the other router.
c. access lan of router.

From a client PC, or IPHONE, connect to my MT router to
a. config the router
b. access the internet of the router
c. access LAN of router.
_

Quote: “I think ZeroTier is much easier to administer and especially when connecting a lot of different types of clients.”

Waiting…

PPtP is more easy. :slight_smile:

Aahhhh… Put the dogs away!!!..

I was joking !!! :sweat_smile:

jajajajajajajaja You slay me! Its “Who let the dogs out” so if deciding to reverse it, " Put the dogs back" works, but I do luv your anglo/italian butchery! :wink:

I think Larsa has had recent surgery, tongue removal and/or wing removal; ;-PP

( send/put the dogs away:
I didn’t mean lock up or call the dogs, but disperse them, send them away… )

ZeroTier plus dyn routing :wink:

Since I’m always right, there is really no reason for me to make an argument. :wink: ZeroTier FTW, plus one whatever you all say!

Joking aside, the tool you are most familiar with is usually what makes you most productive. But it doesn’t hurt trying new things that makes one more experienced in general. That said, ZeroTier is superior. LOL :slight_smile:

@Larsa … so YOu do not want to prove it … shame shame shame and a smart fellow like you could easily help @anav to prove that you are RIGHT. Common Larsa help our fellow guru use ZeroTier … show your expertise … :sunglasses:

Good because I am not! just remember this post # your going to see it frequently.

Ok smart guy, followed your pointer. ROFL! - I’ll take your word for it but TGIF. WBBL, Cheers! :smiley:

Not smart, tenacious is more accurate and I have all the time in the world and don’t have a stop button. :slight_smile:

I am actually more curious as to whether or not you will take the lazy way out, and state you actually don’t have a clue on how to config zerotier (when you actually do), just to get me off the accountability gig, or actually do the work and put the $$ where the mouth is. :wink:

Stated in another way … There are two possibilities, as in you are forever shown to be just hot air, or I get high quality information that I can include in article and future generations of MT users get the benefit. Its win win!!!

@anav
The following mikrotik ZeroTier document has very extensive information on howto configure ZeroTier to work in the kind of scenario you want … the complexity is not trivial perhaps because it cannot be so but I 4 1 am impressed with mikrotik work to help one to understand, Take a closer look - patiently- and pay particular attention to the RouterOS Home VL1 level and VL2 Level ::: this distinction is important.

A common misunderstanding is to conflate network controllers with root servers (planet and moons). Root servers are connection facilitators that operate at the VL1 level. Network controllers are configuration managers and certificate authorities that belong to the VL2 level. Generally, root servers don’t join or control virtual networks and network controllers are not root servers, though it is possible to have a node do both.

Because the level of complexity is very significant YOU need to plan well and inwardly digest this document to configure it to accomplish want you want to accomplish.

IMO, WireGuard is 100% easier to work with and performance wise there is ABSOLUTLY no comparison — WireGuard is the Cats MEOW :slight_smile: