I’m just learning about ZeroTier, so please bear with me. I flashed a router with OpenWRT and installed ZeroTier on it. Clients connected on this LAN are getting local IPs (192.168.2.215, for example). From the LAN, I can connect to external clients on our ZeroTier network via their managed IP with no problem. Is it possible for external clients to connect to devices on the LAN? If so, how would I go about setting that up? They all have local IPs and they’re not getting managed IPs.
Is this simply a managed route issue? I created a manged route for 192.168.1.0 via the managed IP of the router. Seemed like a good start.
That’s exactly the right approach. From the LAN, the packets destined to the Zerotier network are routed directly by OpenWRT because it has an interface directly connected to both networks. But the Zerotier connected devices don’t know the best way to get to your LAN subnet, so you need to add a managed route.
This assumes that none of the remote devices are also using 192.168.2.0/24 as their local subnet…
some time ago I was able to use a openwrt with zerotier installed on it as a node with the zerotier IP acting as a wan IP interface, so with that I forwarder ports to the internal LAN devices that I want to reach everywhere, and still is working w/o issues. By the way I use this aproximation because is not possible to install zerotier in some iot devices.