Zero Tier VPN - Set up port forward to device on LAN

Set up port forward on Proroute 4G Router (H685/H820/H900) running Zero Tier VPN – to access device on LAN

Introduction

This article describes how to use Zero Tier VPN on a Proroute Router to access a device connected to the router's LAN side via port forwarding. Before setting this up, you will need to set up a Zero Tier account from https://www.zerotier.com/ and download the app onto your device (Laptop/PC/Mobile). You will then need to connect the router to your Zero Tier VPN network, this is done by inputting your Zero Tier Network ID into the router's web interface at the VPN/Zero Tier section. 

Network and Device Set up

In this example we will use 1x H685 4G Router and 1x Remotely Monitored Device (RMD). RMD could be any device connected to the LAN of the Router via IP (i.e. security camera or monitoring device.). The router is connected to my Zero Tier VPN network, I will then use my PC (which is part of the same Zero Tier VPN network) to communicate with the RMD over the internet via a HTTP request to the Router which then port forwards to the RMD. 

Router - will be connected to the internet via 4G (mobile WAN) and is connected to Zero Tier.

LAN IP – 192.168.8.1/24

Static Zero Tier IP Address – 10.10.10.1

RMD  - will be wired with an ethernet cable to the LAN port of the Router. The Router is the default gateway.

LAN IP – 192.168.9.1 

Subnet mask 255.255.255.0

Static IP of RMD – 192.168.8.2

HTTP access to RMD via port: 81

Instructions

1. Make sure Zero Tier is installed and connected on the router. Make sure the router has access to the internet.
2. Make sure Zero Tier is installed and connected on device (PC/Laptop/Mobile). Make sure device has access to internet.
3. Check router is contactable from the device via the IP address assigned by Zero Tier VPN. (10.10.10.1). Go to web browser on PC and search 10.10.10.1, you should reach the login page for the router.
4. Make sure ethernet cable is connected to LAN port of the router and ethernet port of the RMD.
5. Configure RMD IP settings to have a static IP 192.168.8.2. This is an address within the subnet of the router’s LAN (192.168.8.0/24). Edit the IP settings to the below:
   1. IPv4 Address of RMD to 192.168.8.2.
   2. Subnet Mask to 255.255.255. 
   3. Change IPv4 Gateway to 192.168.8.1
   4. HTTP access on port: 81 (This may need to be different on your device, which is fine, just substitute your HTTP port number where 81 is used in this guide.)
6. Configure the router to have port forward rule. Go to Network > Firewall > Port Forwards. New Port Forward.
   1. Protocol = TCP+UDP
   2. External Port = 81
   3. Internal IP Address = 192.168.8.2
   4. Internal Port = 81
   5. Save and Apply
7. Edit the router port forward rule. Go to Network > Firewall > Port Forwards. Find rule and click Edit.
   1. Change Source zone to zerotier.
   2. Press save and apply.

9. Check connection can be made using the port forward rule. From device connected to Zero Tier network, go to web browser and type in Zero Tier network IP of the router, with “:PORT-NUMBER” on the end. (In this example our Zero Tier network IP is 10.10.10.1:81). This will now give access to your RMD, you will see the HTTP page of your device in the browser.