Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| technical:zerotier-apdesk [2026/01/14 08:49] – [ZeroTier Central] system | technical:zerotier-apdesk [2026/01/14 09:26] (current) – [Confrim on OpenWrt] system | ||
|---|---|---|---|
| Line 5: | Line 5: | ||
| * ZeroTier support in APdesk and MESHdesk is different when compared to Wireguard, IKEv2+IPsec or OpenVPN. | * ZeroTier support in APdesk and MESHdesk is different when compared to Wireguard, IKEv2+IPsec or OpenVPN. | ||
| * With ZeroTier you do not have to worry about the server side since it is hosted by ZeroTier. | * With ZeroTier you do not have to worry about the server side since it is hosted by ZeroTier. | ||
| - | * Another important point about the ZeroTier VPN connection is that you can not use it to access the Internet. | + | * Another important point about the ZeroTier VPN connection is that you <color # |
| * ZeroTier is typically used to to create a **private network** where you can access devices on that network. | * ZeroTier is typically used to to create a **private network** where you can access devices on that network. | ||
| + | |||
| + | ----------- | ||
| + | ===== ZeroTier Central ===== | ||
| + | * To manage ZeroTier networks, you have to register at ZeroTier (https:// | ||
| + | * There are free plans available which has certain restrictions in terms of the amount of devices that are allowed on the network. | ||
| + | * There are also two versions of the dashboard, the original one is called **Legacy Central** and the new one is called **New Central**. | ||
| + | * It seems the one you should use depends on when you registered with them. | ||
| + | * I tried New Central and could not get to devices listed on Legacy Central. | ||
| + | * The screenshots here are from Legacy Central. | ||
| + | |||
| + | ------- | ||
| + | ==== ZeroTier Networks ==== | ||
| + | * Each network in Zerotier will have a unique Network ID which will be used by the client to join the network. | ||
| + | {{: | ||
| + | * After a client joined the network it will appear in the list of devices as an **Unauthorized** device. | ||
| + | * You can then change its status to **Authorized** to allow it full access to the ZeroTier network | ||
| ----------- | ----------- | ||
| Line 26: | Line 42: | ||
| </ | </ | ||
| - | ----------- | + | ------ |
| - | ===== ZeroTier | + | ===== Join a ZeroTier |
| - | * To manage | + | * Joining a ZeroTier |
| - | * There are free plans available which has certain restrictions | + | * Make sure the MESHdesk firmware |
| - | * There are also two versions of the dashboard, the original one is called **Legacy Central** | + | * Edit the VPN connections of the device which you want to use to join the ZeroTier network. |
| - | * It seems the one you should | + | * Specify the ZeroTier Network ID. |
| - | * I tried New Central and could not get to devices listed on Legacy Central. | + | * The interface name will be automatically populated when you save the entry. |
| - | * The screenshots here are from Legacy Central. | + | {{: |
| - | ------- | + | ------ |
| - | ==== ZeroTier Networks | + | ==== Split tunnel routing |
| - | * Each network in Zerotier will have a unique Network ID which will be used by the client | + | * As stated earlier, you can not use a ZeroTier network |
| - | {{: | + | * This makes split tunnel routing optional since any device connected to the AP would be able to access the ZeroTier |
| - | * After a client joined | + | * If however you want a certain network or MAC Address |
| - | * You can then change its status | + | |
| + | ------ | ||
| + | ==== Onboarding ==== | ||
| + | * After you added the ZeroTier VPN entry, reboot the device in order for it to fetch its latest settings. | ||
| + | * You should see it appear in ZoreTier Central as an **Unauthorized** device | ||
| + | {{: | ||
| + | * Authorize it | ||
| + | {{: | ||
| + | * Reboot the device and confirm that it got an IP now | ||
| + | {{: | ||
| + | * You should now be able to reach any of the other devices on that ZeroTier network through the AP. | ||
| ------ | ------ | ||
| + | ==== Confirm on OpenWrt ==== | ||
| + | * You can log into the AP to confirm everything works as intended by issuing the following commands. | ||
| + | <code bash> | ||
| + | #Confirm it joined | ||
| + | zerotier-cli listnetworks | ||
| + | 200 listnetworks < | ||
| + | 200 listnetworks 9bee8941b51fae7b RADIUSdesk 7a: | ||
| + | #Confirm that the interface is up and have an IP Address | ||
| + | ifconfig zt3jnzn36o | ||
| + | zt3jnzn36o Link encap: | ||
| + | inet addr: | ||
| + | inet6 addr: fe80:: | ||
| + | UP BROADCAST RUNNING MULTICAST | ||
| + | RX packets:0 errors:0 dropped:0 overruns:0 frame:0 | ||
| + | TX packets:10 errors:0 dropped:0 overruns:0 carrier:0 | ||
| + | collisions: | ||
| + | RX bytes:0 (0.0 B) TX bytes:872 (872.0 B) | ||
| + | </ | ||
| + | |||
| + | |||
| + | |||
| + | |||
| + | |||