Adding the following got traffic from LAN to Zerotier working. chain=srcnat action=masquerade out-interface=zerotier1 log=no log-prefix="" ipsec-policy=out,none I still can't get traffic from zerotier to LAN IPs, but this is getting closer EDIT: Forget the new masquerade rule, I changed th...

I think this is the problem: That said, I'm not sure what to do about it yet.

The routes look correct and your zerotier controller route appears to be correct. Have you tried disabling all firewall/mangle/nat rules that aren't required for Internet access to see if they are messing with the end to end connectivity? I've been working on paring back some old firewall rules sin...

Here's the output of /ip/route/print Flags: D - DYNAMIC; A - ACTIVE; c, v, y - COPY Columns: DST-ADDRESS, GATEWAY, DISTANCE DST-ADDRESS GATEWAY DISTANCE DAv 0.0.0.0/0 pppoe-out1 1 DAc 172.27.0.0/16 zerotier1 0 DAc 192.168.200.0/24 bridge 0 DAc 192.168.201.0/24 bridge 0 DAc 216.8.136.77/32 pppoe-out1...

If you traceroute from the host you're trying to reach to a destination over ZeroTier, where does it stop? Likewise, if you trace from that destination across ZeroTier and back towards the LAN HOST, where does the traceroute stop? From LAN to Zerotier stops at the router: tracert 172.27.0.4 Tracing...

https://help.mikrotik.com/docs/display/ROS/ZeroTier https://forum.mikrotik.com/viewtopic.php?t=183424 Thanks - this is a great document and I read through it a couple of times yesterday trying to figure out what I'm missing. I don't think my specific use case is covered though: I don't (?) need to ...

You have to add a "managed route" at the "my.zerotier.com" dashboard. I did this prior to posting here - it's 192.168.200.0/24 via 172.27.0.1 which I think is correct. This part seems to work - I can ping a LAN IP from a zerotier IP and I see the traffic in torch on the router. ...

I've followed the Mikrotik directions to set up zerotier on my RB4011 and generally speaking it's working. Where I'm having trouble (I think?) is getting it to forward traffic to LAN IPs. I can ping zerotier IPs from the RB4011. I can connect to the RB4011 remotely using zerotier. I can't ping anyth...

I changed the local IP per your suggestion and the connection works as expected now. Thanks. I have one other problem that you may have had to deal with. If I set the MTU of my PPTP connection to 1500 the actual MTU of the established connection is 1496. This means I have to change the MTU setting o...

Thanks Mark! I have the same settings in pptpd.conf. I'm not in a position to test it right now but what you're proposing makes sense. I'll try it and report back.

I have the same problem! PPTP clients on Windows and OSX will connect to PoPToP on my servers but my RB750G won't stay connected. It authenticates properly but then no data comes back. I went over all of the authentication and encryption settings and everything checks out. I've also used it with Hid...