How do you set up the AX11000 to allow access zero tier from the outside?

[d_as]

All devices can be accessed within the network using their ZT addressed. From the outside though, no such luck. I thought “allow default router override” took care of that.
Do I need to forward certain ports?

EDIT: the solution is port triggering 24/all/24/all