Difference between revisions of "ZeroTier One VPN configuration RutOS"

From Teltonika Networks Wiki
 
(One intermediate revision by the same user not shown)
Line 14: Line 14:
 
</ul>
 
</ul>
  
−
==Configuration==
+
==Setting up a ZeroTier network==
  
−
<ol>
+
<ul>
−
     <li>Go to [http://www.zerotier.com www.zerotier.com] and register an account. After the registration you will be able to create a network in the networks tab:<br>
+
     <li>Go to https://my.zerotier.com/login and log in or create an account if you haven't already.</li>
−
[[File:Networking rut configuration zerotier network creation v1.jpg|border|class=tlt-border|1000px]]</li>
+
    <li>Open the 'Networks' tab and click the 'Create a Network' button.<br>[[File:RutOS_ZeroTier_7.8_1_network.png|border|class=tlt-border|1000px]]</li>
 +
    <li>Click the newly created network to begin configuration.<br>[[File:RutOS_ZeroTier_7.8_2.png|border|class=tlt-border|1000px]]</li>
 +
    <li>Before configuring anything else, you may want to set up some basic settings.
 +
        <ol>
 +
            <li>Copy the Network ID; you will need it later for ZeroTier node configuration.</li>
 +
            <li>Optionally, set up a name and description for your network for easier management.</li>
 +
            <li>Select 'Private' access control type; <u>unless</u> you want nodes to connect freely, without authorization.</li>
 +
        </ol>[[File:RutOS_ZeroTier_7.8_3.png|border|class=tlt-border]]
 +
    </li>
 +
    <li>Scroll down to find the 'IPv4 Auto-Assign' section. Select one of the provided private IP ranges for your network or click 'Advanced' and set up the range manually. For this example we'll be using the <b>10.147.17.*</b> selection which means our network will be using the <b>10.147.17.0/24</b> IP range.<br>[[File:Networking_rutxxx_configuration_zerotier_network_settings_v1.jpg|border|class=tlt-border]]</li>
 +
</ul>
 +
 
 +
The last step concludes the ZeroTier network configuration. However, you may want to modify to the settings based on your specific requirements, but this particular network will function without any additional settings.
 +
 
 +
The next step is configuring members (aka nodes) for our ZeroTier network.
 +
 
 +
==RUT1 and RUT2 configuration==
 +
The configuration for both of the routers are the same.
 
----
 
----
−
     <li>Your newly created network should look somewhat similar to this:<br>[[File:Networking rutxxx configuration zerotier new network.jpg|border|class=tlt-border|1000px]]<br>[[File:Networking rutxxx configuration zerotier network settings v1.jpg|border|class=tlt-border|1000px]]<br>
+
<ul>
−
You will need to remember your <b>Network ID</b> and assign IP addresses that will not conflict with your current networks on your devices. You also need to decide your access control which will decide if you want to control who has access to your network (Private Network) or just allow everyone in (Public Network).</li>
+
     <li>Log in to your device's WebUI, and navigate to the Services → Package Manager page.</li>
−
----
+
     <li>Find the ZeroTier package in the list and install it.</li>
−
     <li>Find out the public IP addresses of your routers. You can do this by visiting a website like [https://www.whatsmyip.org/ whatsmyip.org] or by using the <b><i>curl ifconfig.co</i></b> command via CLI or SSH.</li>
+
     <li>Navigate to the Services → VPN → ZeroTier page and create a new ZeroTier configuration.
−
----
+
        <ol>
−
     <li>Navigate to the <b>Services → VPN → Zerotier</b> page. Enable Zerotier, add new network instance, enable it, specify your network ID,  and save:<br>[[File:Networking rutxxx configuration zerotier router connection v2.png|border|class=tlt-border|1000px]]<br>The first time Zerotier is enabled it creates a unique address for you which can take a bit of time.</li>
+
            <li>Enter a custom name for the configuration.</li>
−
----
+
            <li>Click 'Add'.</li>
−
  <li>After a minute or two your router's Zerotier address should become visible on the network options. Note: For peace of mind, you can name the connection:<br>[[File:Networking rutxxx configuration zerotier new connection v1.jpg|border|class=tlt-border|1000px]]</li>
+
        </ol>[[File:RutOS_ZeroTier_7.8_5.png|border|class=tlt-border|1000px]]
−
----
+
    </li>
−
     <li>If you have the network set to be Private, you will need to authenticate it as well to allow access to this network. You can do that from the <b>Services → CLI</b> page. Login (user: root; password: router's admin password) and type <b><i>ifconfig</i></b>. It should give you a "zt" interface with the same IP. If you see these options, it means you are connected to the Zerotier network and will be capable to reach other devices also connected there.<br>[[File:Networking rutxxx configuration zerotier interface v1.jpg|border|class=tlt-border]]</li>
+
     <li>Complete the configuration.
−
----
+
        <ol>
−
    <li>Since both routers are configured, we can clearly see that routers have different physical IPs and for this example, we will make Router 2 with 12.12.12.12 IP (Managed IP:172.28.93.10) who will be our VPN client get the 31.31.31.31 IP (Managed IP:172.28.249.49 ) from the other Router 1
+
            <li>Turn the instance on.</li>
−
who will be our VPN server:<br>
+
            <li>Add custom instance name.</li>
−
[[File:Networking rutxxx zerotier client and server v1.jpg|border|class=tlt-border|1000px]]</li>
+
            <li>Click 'Add'.</li>
−
----
+
        </ol>[[File:RutOS_ZeroTier_7.8_6fix.png|border|class=tlt-border|1000px]]
−
     <li>For this we first will need to take the VPN servers (Router1) managed IP and input it into our Managed Routes on our Zerotier network so that all connected devices which want to use the VPN service will know where our VPN server is and save the configuration:<br>[[File:Networking rutxxx configuration zerotier route v2.jpg|border|class=tlt-border|1000px]]
+
    </li>
−
</li>
+
     <li>Complete the configuration.
−
----
+
        <ol>
−
    <li>And now we can confirm client (Router 2) obtaining the server IP address on a console or the CLI on the Service tab with the “curl ifconfig.co” command.<br>
+
            <li>Enable '''instance''' on.</li>
−
Before:
+
            <li>Paste the ZeroTier Network ID into the '''Network ID''' field.</li>
−
<pre>root@Teltonika-RUT950:~# curl ifconfig.co
+
            <li>Enable '''Allow managed IP'''.</li>
−
12.12.12.12
+
        </ol>[[File:RutOS_ZeroTier_7.8_9.png|border|class=tlt-border|1000px]]
−
</pre>
 
−
After:
 
−
<pre>root@Teltonika-RUT950:~# curl ifconfig.co
 
−
31.31.31.31
 
−
</pre>
 
 
     </li>
 
     </li>
−
</ol>
+
</ul>
 +
==Testing the configuration==
 +
To test out if the configuration is done correctly, you can ping the Managed IP address of the opposite router.
 +
 
 
[[Category:VPN]]
 
[[Category:VPN]]

Latest revision as of 14:05, 8 August 2024

Main Page > General Information > Configuration Examples > VPN > ZeroTier One VPN configuration RutOS

ZeroTier One is an open source software product that establishes Peer to Peer VPN (P2PVPN) connection between laptops, desktops, phones, embedded devices, cloud resources, and apps.

Introduction

This article contains step-by-step instructions on how to set up a Zerotier VPN connection using RUTxxx routers.

Prerequisites

You will need:

  • Two RUTxxx routers
  • An end device to configure the routers (PC, Laptop, Tablet, Smartphone)

Setting up a ZeroTier network

  • Go to https://my.zerotier.com/login and log in or create an account if you haven't already.
  • Open the 'Networks' tab and click the 'Create a Network' button.
    RutOS ZeroTier 7.8 1 network.png
  • Click the newly created network to begin configuration.
    RutOS ZeroTier 7.8 2.png
  • Before configuring anything else, you may want to set up some basic settings.
    1. Copy the Network ID; you will need it later for ZeroTier node configuration.
    2. Optionally, set up a name and description for your network for easier management.
    3. Select 'Private' access control type; unless you want nodes to connect freely, without authorization.
    RutOS ZeroTier 7.8 3.png
  • Scroll down to find the 'IPv4 Auto-Assign' section. Select one of the provided private IP ranges for your network or click 'Advanced' and set up the range manually. For this example we'll be using the 10.147.17.* selection which means our network will be using the 10.147.17.0/24 IP range.
    Networking rutxxx configuration zerotier network settings v1.jpg

The last step concludes the ZeroTier network configuration. However, you may want to modify to the settings based on your specific requirements, but this particular network will function without any additional settings.

The next step is configuring members (aka nodes) for our ZeroTier network.

RUT1 and RUT2 configuration

The configuration for both of the routers are the same.

  • Log in to your device's WebUI, and navigate to the Services → Package Manager page.
  • Find the ZeroTier package in the list and install it.
  • Navigate to the Services → VPN → ZeroTier page and create a new ZeroTier configuration.
    1. Enter a custom name for the configuration.
    2. Click 'Add'.
    RutOS ZeroTier 7.8 5.png
  • Complete the configuration.
    1. Turn the instance on.
    2. Add custom instance name.
    3. Click 'Add'.
    RutOS ZeroTier 7.8 6fix.png
  • Complete the configuration.
    1. Enable instance on.
    2. Paste the ZeroTier Network ID into the Network ID field.
    3. Enable Allow managed IP.
    RutOS ZeroTier 7.8 9.png

Testing the configuration

To test out if the configuration is done correctly, you can ping the Managed IP address of the opposite router.

Retrieved from "https://wiki.teltonika-networks.com/index.php?title=ZeroTier_One_VPN_configuration_RutOS&oldid=130320"