Problems reaching devices via Zerotier

[Biernot]

Hi,

I want to connect to my camera(s) via Zerotier on an RUT956 , but it does not work.
The firmware is the newest.
The 956 is connected in the LAN to the Camera .
the IP of the router is 192.168.80.254 ( Class C, and works as a DHCP server)
The Camera has the IP 192.168.80.76.
Via Wifi is the route connected to an 192.168.168.0/24 network.
( the ip of the 956 is 192.168.178.41).
Zerotier is installed as well ( 10.147.20.85).
It is working. ( tested with CLI)

Also I added the managed route in the zerotier console.

And I added the routes in the firewall.

As far as I know, it is all.

within my 192.168.178.x network, I can reach my camera with
http://192.168.178.41:5876 which forwards me to my camera ( 192.168.80.76)

But when I try to access the camera from another Zerotier-client, I get an Time out.
(http://10.147.20.85:5976)

Does anyone know, where the mistake is ?

Do I have to remove the “auto assign” in the advanced settings in the zerotier console,
or keep it enabled ?

The port forwarding from the WIFI to the LAN and works.

Do I need to setup an extra zone forwarding for the Zerotier-IP ?
But how? Or/and how to create an extra zone for this Zerotier-IP ?
The WIFI has his zone, and the LAN as well.

[Janmiguel]

Hi Biernot,

Welcome to Teltonika Networks Community!

If you already established your Zerotier connectivity with the router and want to reach the camera on a specific port, you just have to configure port forwarding.

Go to Network → Firewall → Port Forwards → Add an instance → Change Source Zone: Zerotier.

You should be able to access the camera through 10.147.20.85:5876.

Let me know if this helps.

Regards,

[Biernot]

Hello Janmiguel,

Thank you very much .
It seemed the Zerotier Source Zone is the problem,because have an extra Zerotier Source Zone.
I have a WIFI- Source zone ( setup in Network-WAN -Interfaces 192.168.178.x) because it is my connection to the internet, and I have my LAN Setup ( setup in Network-LAN -Interface ).
Zerotier is not attached to an interface.
Do I have to create the Zerotier in Network-WAN -Interfaces?
Attached you will see my Zerotier configuration on the router.

How do I have to setup the Zerotier-Source-Zone ?
About this I am not sure.

[Janmiguel]

Hi,

Once you created a zerotier VPN on the device, it should have an option in source zone to choose zerotier as shown on the screenshot below.

Regards,

[Biernot]

It was not there. So I deleted the zerotier configuration and installed it again.
No I have the Zerotier source zone, but it is still not working ( http and https)
Do I have to allow bridging ?