ZeroTier on Advantech Routers

What is ZeroTier? 

• ZeroTier combines the capabilities of VPN and SD-WAN, simplifying network management.
• Set up ZeroTier in minutes with remote, automated deployment. 
• Emulates Layer 2 Ethernet with multipath, multicast, and bridging capabilities. 
• ZeroTier’s zero-trust networking solution provides scalable security with 256-bit end-to-end encryption.

What Advantech Routers support ZeroTier? 

• All the v4 family Routers (ICR-44xx) support the ZeroTier and the ZeroTier capability is tested on those routers. 

What is needed for running the ZeroTier on Advantech ICR-44xx Router? 

• For running ZeroTier on Advantech ICR-44xx Router is needed Docker Router App (Docker Router App)

How to run ZeroTier on Advantech ICR-44xx Router?

• First, you would need to create a free ZeroTier account and login into the ZeroTier Account (ZeroTier)
• After that, you would need to create a new network

• Here you can see basic description of the created network

• When you click on the Network ID you can modify the Network (Name, Subnet, Routes, Policies..)

• Please note the NetworkID since it will be used later when launching the Docker container.
• Now we need to move to the ICR-44xx Router and install the Docker Router App
• Once the Docker is installed please enable it in the Docker Router App configuration

• Now we need to run the ZeroTier Docker container. This can be done with the following command pasted either in WebTerminal Router App or SSH connection
• docker run --privileged --name myzerotier --rm --cap-add NET_ADMIN --device /dev/net/tun --net host zerotier/zerotier:latest <ZeroTier NetworkID>

• After launching the Docker container you should see in the ZeroTier member table that one device is connected
• You would need to authorize this device to be connected to your network. You can authorize the device as shown on the image

• If you will connect another device (laptop, phone, tablet) to the network the devices will behave like in one network

• We can see that in the Router routing table is a record for Docker ZeroTier container

• So when we will try to ping from the ICR-44xx to the Laptop tunnel IP we should see that the laptop listens and responds on the Tunnel IP

• And also if we will ping from the Laptop to the IP address of the router we should see that the Router responds

This setup was tested on ICR-44xx firmware version 6.3.6, Docker Router App version 20.10.7, ZeroTier Docker version 1.10.3.