I want to use a small / simple router for ZeroTier injection before a PoE device. From a size and simplicity perspective, the mAP would do what I need as it accepts 48V PoE input, and 48V PoE pass through... but it can't run ZeroTier.

What is the cheapest way to get an router with a single 48V PoE pass through that will run ZeroTier? It is for relatively low bandwidth (i.e., 10 Mbps).

Any chance ZeroTier will end up running on a mAP?

Thank you, Chris

Boy that be nice device. I too am waiting for a ARM-based mAP with POE passthough.

The hAPax lite is pretty cheap, which get you ZeroTier... But it's only 5V and no POE....

I meant hAPaxLite...
But totally right about cAPac — cAPac does do ZeroTier & passthough PoE.

Still the form factor of the mAP's is hard to beat. And unlike the cAP, mAP has the 5.5/2.1 DC jack, so it can even act as a temporary PoE adapter. I keep one mAP in my backpack still... It just has NO ZT client since you need an ARM device...

Anyway +1 here.

hAP Lite is SMIPS, not ARM ??

...cAP AC, use the square case. Or leave the case away if it is stored in a safe place.
You will have to change the power supply since it comes default with 24V.
But it does accept up to 57V and has passive passthrough on ether2.

The cheapest option that ticks all boxes.

I believe he meant the hAP AX Lite, which is ARM and I actually use it for ZeroTier end points where PoE isn't needed.

It looks like the cAP AC might be the one to use for this. It is still pretty expensive and an odd shape just to setup a ZeroTier connection, but it should do the job for now. Maybe I can make a custom case for it.

Wild alternative ...
Raspberry PI4 for Zerotier
USB adapter for 2nd ethernet
POE injector for feeding second device.
Might become too much of a spaghetti with all peripherals and cables perhaps ??

This would be functional, but with too many components for my use. The goal is for ZeroTier connections for phones that don't have ZeroTier (or any other VPN) at remote locations. I would much rather the phones just have VPN support baked in, but in the absence of that, I'm looking for the most simple solution.

I've the used the cAPac as a "ZT router" to existing/working network with only xMIPSx things once, works fine – I just forgot. Yes, more powerful Wi-Fi than need and awkward form factor. But you never know when have a "backup Wi-Fi" might be handy at a site, the cAPac will go a lot further than a mAP and more power CPU, so not a terrible deal.

The wAPac is nearly identical to cAPac in specs, but doesn't do PoE-OUT... But we use the wAPacR (since it has LTE/miniPCIe) as the ZeroTier router/bridge all the time, so cAPac likely perform same since has same CPU.

I guess another option be to put just all need PoE injectors into case, then use something cheaper like hAPaxLite (I think that's cheapest ARM, but dunno...). Although you'd need need 5V coming on USB-C, so be a spaghetti inside that box... So the cAPac is likely best today for this...

But none of these you want in a backpack or in a really tight space..... #mAPax

I ended up with two cAP AC units for testing, and they will serve my needs.

They are running RouterOS 7.12 with a default configuration and a couple changes. ZeroTier is installed, and bridged to the Ethernet port. The Wi-Fi radios are turned off.

Speed testing from external routerBOARDs through the ZeroTier connection I find these results:

UDP 22.5 Mbps single direction
UDP 16 Mbps symmetrical

TCP 20.5 Mbps single direction
TCP 14 Mbps symmetrical

These tests are all CPU limited in the cAP AC. Both ends of the tunnel have 1x cpu maxed at 100% from ZeroTier. The tests were a bit variable, but I think stable enough.

While these tests are relatively low, we're just running audio/video phones behind each one.

Thank you for the suggestions. I'm going to put these in place this coming week.