Can't access bridged local devices in the RUT241 network via ZeroTier VPN connection

[GiulioBorriello]

Hi there, I’m having trouble trying to reach some PLCs that are located in my Router RUT241 Network using my ZeroTier Connection.
The application uses a broadcast connection and we’re trying to use the bridging mode in Zerotier.
This is our architecture

We’ve been following this guide:
https://wiki.teltonika-networks.com/view/ZeroTier_Configuration#Bridge_Configuration

The interface we use for using ZeroTier is not the official one, we’re using a self hosted controller named: ztncui

GitHub - key-networks/ztncui: ZeroTier network controller UI

These tests were made using the official ZeroTier Web UI too.

We’ve been trying over and over again to set up the connection all day but we couldn’t do it.
These are some screenshots of our configuration:

^ This are our ZeroTier controller UI, we’ve activated the active bridge on my router and I did not give it any IP Addresses because I’ve been watching some videos and they did not assign any on their routers too.

^ These are my Routes, the gateway is the Local IP Address of the RUT241 while the first target is the ZeroTier Network Address, while the second is the Local Network of the RUT241.

^ This is how I configured my RUT241’s Zerotier settings.

From the Zerotier connection we couldn’t reach any PLC’s on the other end of the network.

Any ideas?

[Marcelo.Barros]

@GiulioBorriello

I did not give it any IP Addresses because I’ve been watching some videos and they did not assign any on their routers too.

Hello…
Please… Can you share the links of those videos?
Thank you.

I just found a basic tutorial… But he need a ip address.

452 The definitive Guide to Zerotier VPN and why it is "better" than Wireguard (Tutorial)

I, also, look around for some documentations about ZeroTier… Maybe they don’t assign a ip address to routers, but they still using. I am a network engineer and I don’t see how devices, not in the same address range, can change packets, just using broadcast.

[pmingo]

Hello, This is the video we consulted:

How to Set Up ZeroTier Communication Bridge on RUTX50 & RUTX11

[Marcelo.Barros]

@GiulioBorriello

they did not assign any on their routers too

Hi…
Thank you for this video.

Just a suggestion of troubleshooting…

They have device A_192.168.1.1 and device B_192.168.1.2.
The A, have the DHCP enable, he just add zerotier and keep all configuration default.
The B, have the ip of lan changed x.x.x.1 to x.x.x.2 and have the dhcp disable.

Zerotier up and running at both sides.
So… Looking devices under lan of device A, can get a ip address from dhcp?
Looking devices under lan of device B, can get a ip address from dhcp of device A?
From the cli of device A, can you ping lan of device B?
From the cli of device B, can you ping lan of device A?
Both routers must be in same network range!!

About network 10.41.239.0/24
Where is the network?
Under router A or under router B
Who is the gateway for this network?

OR

Are you using routing mode and not bridge mode as video guide us?

My comment:
What I don’t like about Zerotier and bridge configurations.
Devices under router B, will need to have a internet access, will send all packets from router B to router B and after this, router A will send all packets to internet. So router A will have a double of cpu usage.

[pmingo]

Our architecture is different, we do not have two routers, but only one router that should bridge to another network via Zerotier

[Marcelo.Barros]

Maybe this help you?

Zerotier Tutorial: Delivering the Capabilities of VPN, SDN, and SD-WAN via an Open Source System

[Sigismundus]

Hello,

Could you try adding LAN masquerading in Network → Firewall → General settings page, to see, if it has any impact:

Best regards,