2 Bridge Help please

Good day hoping to get some help with this. I have asked before and didn’t get a response to maybe this is not possible.

I have 1 network using a PI as a bridge. that network is 192.168.1.0. The router is 192.168.1.1 DHCP is 192.168.1.100-192.168.1.50. Lets call that NETWORK 1
The 2nd network is. 192.168.1.0. router is 192.168.1.2 and DHCP is 192.168.1.151-192.168.1.201. Lets call this network 2

From an app or a windows computer on a complete different network lets call that network 3, I can to my resources on each network separately but I can’t get to network 1. from Network 2. Any thoughts or what am I missing to make this work? Thanks for your help if possible.

Brad

I’m very new to Zerotier and still figuring it out, but based on my non-zerotier related network experience, it feels like something is not OK in this setup

Somehow you are mixing Level2 and Level3 concepts (if that sounds familiar?)

First of all I guess there is a small typo net1 dhcp is from 100 to 150 right? (but it doesn’t really matter)
As the title says 2 bridge, I suppose you have another pi in net2 acting as a bridge as well or are you using some more avanced router like pfsense of opnsense?

What feels wrong to me is the fact that you have a single subnet 192.168.1.x with 2 routers (default gateways) … if you have a single subnet (be it stretched over 2 sites by means of the bridges) you can only have a single default gateway for the 2 sites. (obviously the 2 sites need to talk to each other over a different subnet but any device wanting to talk to open internet would always leave the subnet via the one default gateway)

I wonder what you are trying to achieve precisely? Do your devices, radio equipment perhaps :wink: need to be on the same ip range? If not a site to site VPN could be an alternative. Both sites would have their own IP ranges though.

While looking into it further, I found this link:
https://www.reddit.com/r/zerotier/comments/9oqxnj/got_zerotier_working_with_full_l2_bridging

Just curious and not sure I’ll be able to help but will surely try (to learn something)
73
G.

Thanks

Site 1
Flex radio
Pi set as bridge

Site 2
Flex radio
Cellular router with zerotier

Zero tier software set so both above are set to bridge

If i am working at site 1 i cant access site 2 resources

If i am at site 2 i cant access site 1 resources

If i am on an outside computer and have zerotier app installed i cant access site access both sites

I can change anything suggested to give it a try

Brad
K9bdh@icloud.com

Hi brad, nice equipment you have there!

I am a bit confused now. From your original message I understood that from any 3rd network you were able to connect to net1 and 2. Did I misunderstand or has something changed in the meantime?

Can you give some more details on how the single(?) network is configured in your my.zerotier console?

I suppose the main goal to be able to connect to flex radio in the remote site 2 (I guess it is remote as it has the cellular router)

Is zerotier the only “VPN client” available on that cellular router?

Geert
ON8GDV

Hi again
this description of fellow HAM seems to go in the right direction, but as far as I understand it will only work in one direction, from the home network to the remote site.
It could be a temporary partial solution though…

I have 2 sites myself that are connected via a site-to-site VPN based on wireguard. I have a pfsense router/firewall on both ends and those routers establish the link between both sites.
I use a VPN (on several laptops and mobiles) to connect to my main site, but through that connection I can reach both subnets. So from anywhere in the world from any of my devices I connect to main site but I can then access any device in any of the " sites. I can also connect from home to remote and vice versa while present in one of the 2 sites

G.

Let me see if I can explain a bit better. Sorry for the confusion.

Site 1.
Flex Radio
Raspberry pi Zero tier installed set up as bridge
Local Lan is 192.168.1.0

Currently. with just this set up Any PC/MAC etc. that has as Zero tier app on phone /computer can access my flex. All good.

Site 2.

Cellular Router that has Zero tier client built in.
Local lan 192.168.2.0
I have the credentials put in the router, Zero tier says its on line, I have the advanced settings set in zero tier and I have allow ethernet bridging checked.

But anything connected to that cell router I can’t get to anything/ see anything on site 1.

Once I get that to work I would like to add site. 3 which is

Site. 3
GL .net router with zero tier built in

so end game would be to have any clients at any site be able to get to all resources with out having to have. zero tier app’s installed on their devices.

I hope this makes sense.
Brad
k9bdh@icloud.com

It’s getting clearer, however I see another inconsistency with the original post.
In the first post you say the second router is 192.168.1.2, now you say that subnet 2 is 192.168.2.x … Can I assume the router therefore is 192.168.2.1?
No worries whatsoever, but in networking problems these details matter :wink:

I think it is rather easy to setup a bridge in every site and then have some roaming device with the ZT client talking to any of the devices behind the respective bridges. (I do understand this is not the end game)
However they would necessarily be 3 different subnets configured as such in the ZT console. By the way as far as I can tell you would need to pay for that. You can have up to 3 networks in the free version but I only see a single “managed route”.

So I’m still interested in what you set up exactly in the zerotier console. Did you (currently) set up 2 separate subnets and 1 managed route?
What is the connection state you see in the console for site2?

G.

Your correct. I can. change either network to make it what ever. 192 scheme I need it to . I keep playing with it to attempt to get it to work so I keep chaining it. :frowning:

For the console set up I am just plugging in stuff to see what I can get to work. I am kind of un skilled at the managed route things o I have just been taking a look at everything.

and I think your right it is just going to be as easy to set up a bridge at each location and use the app’s on the devices. that is a good point. I am creating my self a lot of headache for not much gain. I guess really I am just curious to make it work. lol. Must be the ham in me.

When you me set up 2 separate subnets do you mean make 2 different networks like this.

image

anaged Routes 5/128

192.168.0.0/23 (LAN)
192.168.0.0/23 via 192.168.2.0
192.168.1.0/24 (LAN)
192.168.2.0/23 (LAN)
192.168.2.0/23 via 192.168.1.0

Actually, while you were sleeping (hehe for timezones :wink: ) I found another article that looks very promising:

But as I expected, you will need L3 functionality for this to work, i.e. a actual router where you can manage the routes in every site.
You would keep the 2 or 3 different subnets, one for each site (e.g. 192.168.1.x 192.168.2.x and 192.168.3.x) and then have a distinct overlay network on top of those subnets.
It MUST be different from the 3 physical subnets. For instance a 10.x.x.x network would be good as it would clearly show what is local and what is zerotier.
The 3 routers need to have zerotier running on a separate virtual interface. You should then setup the routing table on each router to find the other 2 192.168.x.x via the 10.x.x.x IP of the corresponding site’s router.

This being said, you will need 3 slightli intelligent routers for this to work. The gl.inet might work but could depend on model.

I now think it is possible, given the right hardware. Not sure if it’s clear to you, I can try to fill in the blanks if more detail is needed, so let me know if you need more help…

G.