Access lan devices through zerotier and mikrotik

[morana]

hello there
i have installed zerotier in mikrotik (HQ) to be able to reach any device in HQ device such servers ,NAS ,PCs etc .

i did this config
MY laptop ZT client 10.20.40.35
mikrotik zerotier client : 10.20.40.40 (zerotier firewall rules added )
LAN devices :192.168.1.0/24 via 10.20.40.40 (manage route in ZT dashboard)

i can ping from laptop to mikrotik zerotier IP
i can ping from mikrotik to laptop zerotier IP
but cannot ping any ip in lan :192.168.1.0/24

what is wrong with my config :
do i need to reset mikrotik config to default and starts over or i am missing somthing ??

[erik]

Does the HQ Mikrotik router have allow input and allow forwarding rules on the firewall?

/ip firewall filter add action=accept chain=forward in-interface=zerotier1 place-before=0
/ip firewall filter add action=accept chain=input in-interface=zerotier1 place-before=0

[morana]

yes already added

port 1 to internet modem
port 6 to lan network switch
all other ports are disabled

[erik]

Is the ISP modem in bridge mode or is it configured as a router?

[ntindaview]

@morana
Did you solve the issue? I have a very similar setup but it’s not working. Here is my setup:

• ISP router>Mikrotik>Various smart devices (on which I cannot install anything but need to reach)
• ISP router gives everything on my LAN dynamic IPs but devices behind the Mikrotik router get their dynamic IPs from Mikrotik
• I have installed a ZT package on my ARM Mikrotik router as per the documentation.
• I have temporarily disabled firewall in Mikrotik.
• When I connect a laptop to the Mikrotik router, it easily reaches the Internet, not using ZT.
• I have set up a ZT network as per documentation and added the microtik router. The ZT dashboard displays no error but the Mikrotik router can’t be reached.

I can post a new thread if needed. I don’t want to hijack the OP’s post. I thought the solutions could be mutually beneficial while avoiding duplicates.