OPNSense: ZeroTier Installation and configuration (site-to-site connection)

Timecodes:
Intro - 00:00
Theoretical part - 00:43
Network diagram - 09:11
ZT config: Create network - 10:25
ZT config: Install packages - 11:31
ZT config: Add network on OPNSense - 12:21
ZT config: Add interfaces - 13:41
ZT config: Routing information - 16:12
ZT config: Restarting the serice - 17:40
Outro - 21:02

Reach out to us on Reddit:

PayPal Donation to support the release of new videos:

View and support us at LBRY/Odysee:

[jeffbellamy]

Had same probs - dropped packets dropped lines etc. If you blacklist the LAN subnet in the local.conf it becomes rock solid. Some guy on some forum figured that out I just followed it. Also, opening UDP 9993 like you did for wireguard's default port doubled my iperf throughput results. Hopefully this saves someone else some hassle.

[BrianJBrandon]

Did someone say open source router with built in WAN network multipathing?? Assuming site A was a datacenter and each sub site was a field office (with multiple Internet connections such as xDSL, Cable, 5G, etc) each sub site could bond (unify) multiple wan internet connections to form a single ultra reliable aggregate.. Yes, the speed of all individual Internet connections can soon be realized.. Now if we can just get it up to 88mph.. Great Scott!

[BrianJBrandon]

A of this writing, the zero tier package in opnsense was created by the Opnsense community not by zero tier.

[utrutr]

Thanks for the video and especially for keeping the problems in the video. I would very much like to use ZT with OPNSense but this is not looking great. I wonder how actively the ZT plugin is developed and improved. Anyone know?

[PowerUsr]

This is highly unstable package. I configured it exactly per the instructions here and within OPNsense documenation. The ZT interface remains down for some reason and i cannot ping my other firewall nodes. Firewall rules are wide open for ZT interfaces. Wireguard and openVPN are much preferred over ZeroTier right now. Still very buggy.

[rudypieplenbosch]

Would be nice if you would show us how to do this without openpfsense. Connecting two sites, where Zerotier is installed on a VM used as an exit node.

[JamesT]

6:10 this is why I used my own private controller

[BrendanRichman]

Tried every guide on the internet, but can't seem to keep a reliable connection going. Pinging is more miss than hit. Any ideas?

[MohamedShaheed]

Bro, i am having an issue with windows server 2012, the network adaptor is not getting installed using the latest windows installer as well. it has no use if i can't install properly on servers. please let me know if you have any solution for this. application installed on the server but status shows PORT_ERROR.

[mukky]

Bro, I was wondering it could be possible ?...

One remote Windows Server connected to Zero Tier
One Opnsense router connected to zero Tier

Both of those machine can ping each other.

How we could setup opnsense router in order to enabling all of clients under Opnsense router to connect to remote Windows server (which connected to zerotier) without installing zerotier on each of client machine.

Thanks.

[peterdewolff]

Zerotier on OPNSense never worked out for me. Sometimes it worked, sometimes it didn't.
Spends a few nights on it and then changed to wireguard. Worked in half an hour.
I removed zerotier everywhere

[scottjmagee]

Does anybody know if ZeroTier's reliability with OPNsense has improved since this video was made?
I'd love to use it as I also use it on Teltonika 4G/LTE routers and our Raspberry Pi Based UniFi controllers and 3CX Session Border Controllers to remote admin.
It would be great to use it on the OPNsense routers too but I'm nervous about using it after seeing how unstable it was in this video!

[ajudanet]

Can wireguard do the same function like zrrtier? Do you have any video?

[ajudanet]

It's possible to create a new video tutorial doing several site to site vpn with zerotier? Really having trouble finding a solution... Tks

[docssera]

if i restarted the opensense
the service have to be restarted and the interface also
why ?

[isandervod]

Great video. I use zero tier with Teltonika routers on production and its work fine. I dont have any connection issues. Do u know any other vpn working behind NAT and without public ip?

[benardmensah]

So from your experience which is better zero tier or wireguard?