How to Access Individual Devices Behind a UDM-Pro Installed with ZeroTier

[cvlk]

hello friends!

i have been using zerotier for years on individual clients (mac computers mainly) and it has worked so very well! i love it!

today, i need help. i tried something new: installing zerotier on my udm-pro router.

the situation … i have a qnap nas at one location and a new unifi unas at another. for the past few years, i have used only qnap nas units, which easily can have zerotier installed on them. the unifi unas, however, cannot have zerotier installed on it. and it is only accessible via smb share.

i did a bunch of research and found that zerotier can be installed on my udm-pro “dream machine” … exciting! but does this solve my problem? i DO have zerotier now installed on my udm-pro. and from command line, what i can tell, it is working! i have joined the udm-pro to my zerotier network. via my udm-pro’s command line, i can see the zerotier network and all the peers on it.

QUESTION: WHAT NOW? HOW CAN I ACCESS THE LAN DEVICES BEHIND THE UDM-PRO (especially my new unifi unas) FROM ANOTHER PEER ON THE ZEROTIER NETWORK? i seem to be missing a crucial piece of information here.

also, i really do not want to open any ports on the udm-pro. hopefully that is not necessary.

thank you for any help!!

blessings,

chris

[erik]

There’s some basics under Integrating with Physical Networks | ZeroTier Documentation

Basically, if you have Zerotier running on the UDM Pro, you’re 90% of the way there. At this point, any machines on the LAN behind the UDM Pro should be able to reach computers on the Zerotier network(s) (firewall rules permitting). But if you want those machines to be able to reach back into the LAN subnets, you just need to add a Managed route in the Advanced Tab of the network configuration:

Then when a remote machine connects to the Zerotier network, it will get a fixed route added to the local routing table.

[cvlk]

erik, thank you so much! something so simple! i was pulling my hair out on this one! it works!! blessings, my man. chris