Changes

ZeroTier One VPN configuration RutOS (view source)

Revision as of 14:01, 8 August 2024

466 bytes added ,  Yesterday at 14:01
no edit summary
Line 14: Line 14:  
</ul>
 
</ul>
   −
==Configuration==
+
==Setting up a ZeroTier network==
   −
<ol>
+
<ul>
−
     <li>Go to [http://www.zerotier.com www.zerotier.com] and register an account. After the registration you will be able to create a network in the networks tab:<br>
+
     <li>Go to https://my.zerotier.com/login and log in or create an account if you haven't already.</li>
−
[[File:Networking rut configuration zerotier network creation v1.jpg|border|class=tlt-border|1000px]]</li>
+
    <li>Open the 'Networks' tab and click the 'Create a Network' button.<br>[[File:RutOS_ZeroTier_7.8_1_network.png|border|class=tlt-border|1000px]]</li>
 +
    <li>Click the newly created network to begin configuration.<br>[[File:RutOS_ZeroTier_7.8_2.png|border|class=tlt-border|1000px]]</li>
 +
    <li>Before configuring anything else, you may want to set up some basic settings.
 +
        <ol>
 +
            <li>Copy the Network ID; you will need it later for ZeroTier node configuration.</li>
 +
            <li>Optionally, set up a name and description for your network for easier management.</li>
 +
            <li>Select 'Private' access control type; <u>unless</u> you want nodes to connect freely, without authorization.</li>
 +
        </ol>[[File:RutOS_ZeroTier_7.8_3.png|border|class=tlt-border]]
 +
    </li>
 +
    <li>Scroll down to find the 'IPv4 Auto-Assign' section. Select one of the provided private IP ranges for your network or click 'Advanced' and set up the range manually. For this example we'll be using the <b>10.147.17.*</b> selection which means our network will be using the <b>10.147.17.0/24</b> IP range.<br>[[File:Networking_rutxxx_configuration_zerotier_network_settings_v1.jpg|border|class=tlt-border]]</li>
 +
</ul>
 +
 
 +
The last step concludes the ZeroTier network configuration. However, you may want to modify to the settings based on your specific requirements, but this particular network will function without any additional settings.
 +
 
 +
The next step is configuring members (aka nodes) for our ZeroTier network.
 +
 
 +
==RUT1 and RUT2 configuration==
 +
The configuration for both of the routers are the same.
 
----
 
----
−
     <li>Your newly created network should look somewhat similar to this:<br>[[File:Networking rutxxx configuration zerotier new network.jpg|border|class=tlt-border|1000px]]<br>[[File:Networking rutxxx configuration zerotier network settings v1.jpg|border|class=tlt-border|1000px]]<br>
+
<ul>
−
You will need to remember your <b>Network ID</b> and assign IP addresses that will not conflict with your current networks on your devices. You also need to decide your access control which will decide if you want to control who has access to your network (Private Network) or just allow everyone in (Public Network).</li>
+
     <li>Log in to your device's WebUI, and navigate to the Services → Package Manager page.</li>
−
----
+
    <li>Find the ZeroTier package in the list and install it.</li>
−
     <li>Find out the public IP addresses of your routers. You can do this by visiting a website like [https://www.whatsmyip.org/ whatsmyip.org] or by using the <b><i>curl ifconfig.co</i></b> command via CLI or SSH.</li>
+
     <li>Navigate to the Services → VPN → ZeroTier page and create a new ZeroTier configuration.
−
----
+
        <ol>
−
    <li>Navigate to the <b>Services → VPN → Zerotier</b> page. Enable Zerotier, add new network instance, enable it, specify your network ID,  and save:<br>[[File:Networking rutxxx configuration zerotier router connection v2.png|border|class=tlt-border|1000px]]<br>The first time Zerotier is enabled it creates a unique address for you which can take a bit of time.</li>
+
            <li>Enter a custom name for the configuration.</li>
−
----
+
            <li>Click 'Add'.</li>
−
  <li>After a minute or two your router's Zerotier address should become visible on the network options. Note: For peace of mind, you can name the connection:<br>[[File:Networking rutxxx configuration zerotier new connection v1.jpg|border|class=tlt-border|1000px]]</li>
+
        </ol>[[File:RutOS_ZeroTier_7.8_5.png|border|class=tlt-border|1000px]]
−
----
+
    </li>
−
     <li>If you have the network set to be Private, you will need to authenticate it as well to allow access to this network. You can do that from the <b>Services → CLI</b> page. Login (user: root; password: router's admin password) and type <b><i>ifconfig</i></b>. It should give you a "zt" interface with the same IP. If you see these options, it means you are connected to the Zerotier network and will be capable to reach other devices also connected there.<br>[[File:Networking rutxxx configuration zerotier interface v1.jpg|border|class=tlt-border]]</li>
+
    <li>Complete the configuration.
−
----
+
        <ol>
−
    <li>Since both routers are configured, we can clearly see that routers have different physical IPs and for this example, we will make Router 2 with 12.12.12.12 IP (Managed IP:172.28.93.10) who will be our VPN client get the 31.31.31.31 IP (Managed IP:172.28.249.49 ) from the other Router 1
+
            <li>Turn the instance on.</li>
 +
            <li>Add custom instance name.</li>
 +
            <li>Click 'Add'.</li>
 +
        </ol>[[File:RutOS_ZeroTier_7.8_6fix.png|border|class=tlt-border|1000px]]
 +
    </li>
 +
     <li>Complete the configuration.
 +
        <ol>
 +
            <li>Enable '''instance''' on.</li>
 +
            <li>Paste the ZeroTier Network ID into the '''Network ID''' field.</li>
 +
            <li>Enable '''Allow managed IP'''.</li>
 +
        </ol>[[File:RutOS_ZeroTier_7.8_9.png|border|class=tlt-border|1000px]]
 +
    </li>
 +
<li>Since both routers are configured, we can clearly see that routers have different physical IPs and for this example, we will make Router 2 with 12.12.12.12 IP (Managed IP:172.28.93.10) who will be our VPN client get the 31.31.31.31 IP (Managed IP:172.28.249.49 ) from the other Router 1
 
who will be our VPN server:<br>
 
who will be our VPN server:<br>
 
[[File:Networking rutxxx zerotier client and server v1.jpg|border|class=tlt-border|1000px]]</li>
 
[[File:Networking rutxxx zerotier client and server v1.jpg|border|class=tlt-border|1000px]]</li>
 
----
 
----
 
     <li>For this we first will need to take the VPN servers (Router1) managed IP and input it into our Managed Routes on our Zerotier network so that all connected devices which want to use the VPN service will know where our VPN server is and save the configuration:<br>[[File:Networking rutxxx configuration zerotier route v2.jpg|border|class=tlt-border|1000px]]
 
     <li>For this we first will need to take the VPN servers (Router1) managed IP and input it into our Managed Routes on our Zerotier network so that all connected devices which want to use the VPN service will know where our VPN server is and save the configuration:<br>[[File:Networking rutxxx configuration zerotier route v2.jpg|border|class=tlt-border|1000px]]
−
</li>
+
==Testing the configuration==
−
----
   
     <li>And now we can confirm client (Router 2) obtaining the server IP address on a console or the CLI on the Service tab with the “curl ifconfig.co” command.<br>
 
     <li>And now we can confirm client (Router 2) obtaining the server IP address on a console or the CLI on the Service tab with the “curl ifconfig.co” command.<br>
 
Before:
 
Before:
−
<pre>root@Teltonika-RUT950:~# curl ifconfig.co
+
<pre>root@Teltonika-RUTX50:~# curl icanhazip.com
 
12.12.12.12
 
12.12.12.12
 
</pre>
 
</pre>
 
After:
 
After:
−
<pre>root@Teltonika-RUT950:~# curl ifconfig.co
+
<pre>root@Teltonika-RUTX50:~# curl icanhazip.com
 
31.31.31.31
 
31.31.31.31
 
</pre>
 
</pre>
 
     </li>
 
     </li>
−
</ol>
   
[[Category:VPN]]
 
[[Category:VPN]]
Retrieved from "https://wiki.teltonika-networks.com/view/Special:MobileDiff/130319"

Navigation menu