Quantcast
Channel: MikroTik
Viewing all articles
Browse latest Browse all 23620

General • Re: Question on massive site-to-site VPN implementation

$
0
0
the way, I solved the RoMON issue with ZeroTier: I had to enable bridging mode for each peer.
This is when using /zerotier/controller for your peers? ...or using my.zerotier.com service?

I ask since the default flow rules for ZeroTier's cloud service will block RoMON. In which case, you need to add:
Code:
# Allow RoMON.acceptethertype 0x88bf;
to flow rules configured for the network defined at my.zerotier.com. See "ZeroTier's "Flow Rules" allow all IPv4, IPv6, and ARP traffic by default." section on my post here if you want more details: viewtopic.php?t=183424

I'm guessing enabling bridging skips the flow rules, but I actually don't know, so curious on that part... But the different/non-IP Layer2 ethertype used by RoMON is why it's tricky with VPNs...
This is using /zerotier/controller. By the way, in this case are there any flow rules I can edit? I am asking because now RoMON goes through the ZeroTier interface, but OSPF does not discover peers in any broadcast mode, it only works if they are defined statically. But for 80 peers, I obviously prefer if it is done automatically.

Statistics: Posted by nkourtzis — Fri Jan 10, 2025 12:45 pm



Viewing all articles
Browse latest Browse all 23620

Trending Articles