MikroTik

AMMO has written a decent ZT article here - viewtopic.php?t=183424

Good morning everyone, I would like to know if zerotier works in version V7.1.3 because I cannot receive the IP address on the zerotier interface, however my status is OK.

I appreciate your help

[admin@RLC_Zero] /zerotier/interface> print
Columns: NAME, MAC-ADDRESS, NETWORK, STATUS
# NAME MAC-ADDRESS NETWORK STATUS
0 zerotier1 CA:CF:77:xx:xx:xx 15992_______ REQUESTING_CONFIGURATION


CRAP

Good morning everyone, I would like to know if zerotier works in version V7.1.3 because I cannot receive the IP address on the zerotier interface, however my status is OK.

I appreciate your help

Works perfectly fine.

Although I have manually assigned an IP address to my instance running on an RB3011

What does "Allow Global" do?

What does "Allow Global" do?

"ZeroTier IP addresses and routes can overlap public IP space."

from https://help.mikrotik.com/docs/display/ROS/ZeroTier

What does "Allow Global" do?

"ZeroTier IP addresses and routes can overlap public IP space."

from https://help.mikrotik.com/docs/display/ROS/ZeroTier

That meant nothing to me.

Maybe a practical example or explanation???

Maybe a practical example or explanation???

Without Allow Global, zerotier-one will only try to manage routes and addresses in RCF1918 ranges (192.168.x.x and friends) on your devices.

"ZeroTier IP addresses and routes can overlap public IP space."

from https://help.mikrotik.com/docs/display/ROS/ZeroTier

That meant nothing to me.

Maybe a practical example or explanation???

With Allow Global disabled Zerotier will only handle private IP addresses. If you wanted to expand a public IP range across your own zerotier network you would need to enable it.

That meant nothing to me.

Maybe a practical example or explanation???

With Allow Global disabled Zerotier will only handle private IP addresses. If you wanted to expand a public IP range across your own zerotier network you would need to enable it.

Like if you wanted to bridge "DMZ network" e.g. where an ISP delivers a block of public IPs to a customer, typically before/inbetween firewall. e.g. maybe you want a public webserver in a location, but have no ability to open 443 on public IP, say because the site use a CGNAT LTE connection for internet... In theory another site with a MikroTik+ZeroTeir, could "bridge" a subnet of public IPs to a ZeroTier network with the remote webserver as a member. Not suggest that be the best way, but a way...

Why it's typically disabled is public IP in a ZeroTier network would be pretty unexpected, unless you're doing some more esoteric like my example. And a device getting a new public IP generally requires more security considerations.

Now ZeroTier wouldn't care if public IPs were part of the traffic, regardless of this setting - more that "Allow Global" simply allows a public IP as a "managed address" to be assigned by ZeroTier Client to a device. "Allow Global" is not a firewall, more a filter of the type of IP addresses a client will accept.

This is very interesting and doing a setup of it during the next few days...

Will Zerotier be updated in line with their releases, also does its there a way to pass custom configuration to zerotier.

I'm wondering the same as well. Every time I update RouterOS, the ZeroTier package reflects the same version number.
But from ZeroTier Central, I believe it has reported Version 1.6.6 since I first configured ZeroTier on my RB5009.

With that said, looking at the ZeroTier changelog, perhaps there isn't anything relevant for the embedded ZeroTier?

This is actually so cool!!

Got it working quick on RB4011 7.1.3 / .5 and can access my NAS from work!

Going to try it with old LAN coop games soon.. and watch my friends scan the network and deny it after

is the extra package zerotier on x86 7.2.1 not available yet?

is the extra package zerotier on x86 7.2.1 not available yet?

Yeah, it would be great to get official feedback from MT

This is official:

We are happy to announce ZeroTier support for ARM architectures with enough space*.

Devices that support this feature:
RB4011
RB3011
RB1100AHx4
RB450Gx4
Audience
hAP ac³ (non LTE)

This is official:

We are happy to announce ZeroTier support for ARM architectures with enough space*.

Devices that support this feature:
RB4011
RB3011
RB1100AHx4
RB450Gx4
Audience
hAP ac³ (non LTE)

Now, it would be great to know whether MikroTik has plans to support zerotier on x86.

There are a great many people running CHR, and having zerotier support on x86 would be awesome!

It's been a year since ZeroTier was first announced with limited support to a hand full of devices. But there hasn't been any word on whether support for any other architectures or devices is in the works on not. Have the beta version of those firewalls become release candidates with Zerotier and is leaving behind all the other hardware???

I have literally been waiting to purchase anymore Mikrotik hardware because I want to see if this feature will be available. It's a very unique feature at the moment and a very powerful one. I can literally drop physical ports to cloud switches on prepped hardware. I ship a switch to a remote client who plugs it in to their internet and dhcp get it online, Zerotier established and connection and the devices from that location connect to the switch and receive ip addresses from my dhcp server hundreds of miles away. As far as their computers and network is concerned we are all in the same office.

So when is there going to be at least an announcement regarding the support of x86 and other architectures and device models for Zerotier?

Hi @ll
Any new asbout this topic wil be verry interestion if the model that can support ZeroTier can be increased

Yes it has/will increase with new Arm devices. (eks 5009)

New MikroTips video about ZeroTier presented by @normis.

Video description comments from the YouTube video MikroTik and Zerotier follow.

Finally, the video you have been asking for. How to quickly set up Zerotier in a MikroTik router.
ARM/ARM64 MikroTik router required for this tutorial.
https://help.mikrotik.com/docs/display/ROS/ZeroTier

Hello pls were is problem? IP: 0.0.0.0 via MAC join on device...
https://imgur.com/a/Z5Q0UA2

Update:
Fix it:

I have been using zerotier on an RB3011 since it came out. Works Great!!
I have another site with a older RB2011 (not ARM processor) so it cant run zerotier.
SO I got a CRS309. That has an ARM processor and I wanted 10G interfaces. I thought all ARM devices could run Zerotier. When I tried installing it, it doesn't appear, Is it not supported?
I just saw your supported list in this thread, and it doesn't list all ARM devices.
Am I doing it wrong, is there no support for this model, will there be support someday, for all ARM and ARM64 devices.

Did you install the zerotier package ?

Nicomgno

My office has a CCR1009.

To get Zerotier... I installed it on a CRS326-24G. This replaced my EdgeSwitch 8-150 that had been there for years.

I have Zerotier set up to make the switch the bridged unit.

I can see broadcast traffic when I activate Zerotier.

Also... I have updated the switch a few times. After installing the Zerotier package manually once, it updates with everything thing else when I do
/system package update install

Hey all,

Couple of questions:

1. What is the expected recurrence for package updates (if any)? I see that there is a big gap between ZT official version vs Mikrotik one.

2. Has anyone conducted perf tests between RB4011, for example? I have a RB4011 with ZT and a NUC (N4020) and I cannot get more than 100 Mbit/sec. I have pushed RB4011 to 1800Mhz to be able to do this. Doing a test between an AMD Ryzen 5800X (with ZT agent installed) and the NUC (N4020) I get perf above 300Mbit/sec.
Tests were conducted using iperf3 between PC to PC (whereas the NUC on the remote end is both running ZT service and serving as Iperf3 server). No tests were done directly at the RB4011, so that I would not affect its performance.
2.1. Now, while conducting the tests, I see that typically the RB4011 will consume 2 of its 4 core. That means that are still resources available to scale the perf of the connection. Is it a limitation of ZT itself? A limitation of ZT implementation from Mikrotik? Of this is simply what to expect given RouterOS and CPU/Core scheduler/thread management?

Thanks for the insights!

Cheers,
anthonws.

Any plans to add VRF selections to ZeroTier? That would come in very handy allowing multiple ZT instances over multiple WAN connections. Right now a single ZT takes many minutes to reconnect after a WAN drops out.

Are we going to have ZeroTier for CHR?

Until we have it for CHR, we can use Docker as explained here: MikroTik CHR ZeroTire Network Controller with UI

Hello,
Fascinating subject.

As of march 2023 is there an updated MikroTik router/device list for ZeroTier?

Thanks.

StuMc.

As of march 2023 is there an updated MikroTik router/device list for ZeroTier?

Since it's only available for ARM still. If you filter product pages for ARM, those are the ones that support ZeroTier.

"Ethernet Routers" -
https://mikrotik.com/products/group/eth ... arm%22]#!
"Home and Office" -
https://mikrotik.com/products/group/wir ... 2arm%22]#!

Thank you for the filtering tips! Very helpful!

Stu. Mc.

Thank you for the filtering tips! Very helpful!

I just wish the product filter wasn't necessary for ZeroTier...

I can't to install Zerotier en LHGG LTE 6 (arm64). Os 7.13 firmware. Please if any had done.

Most likely storage size problems due to 16Mb flash.

Netinstall may clear out internal space just enough but possibly next upgrade you will be stuck again.

Can we please have the capability to "orbit" to private moons

Netinstall may clear out internal space just enough but possibly next upgrade you will be stuck again.

I think wireless.npk is a bit safer - but still may not fit in various beta and/or too much fragmentation/bad sectors.
Using both wifi-qcom-ac and zerotier, at this point, is VERY risky for upgrades on 16MB ARMs IMO. Too risky.

All the production LTE things, I've been keeping at 7.12.2. If you want to upgrade any 16MB unit with zerotier to 7.13+ – it's fair chance you'll need to use netinstall, so be prepared.