ZeroTier Question

Dashrender

@JaredBusch Won't it look at ZT first, realize it isn't on the ZT network, and then dump off to the end users ISP?

For traffic, yes it will, but not for DNS queries.

JaredBusch

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

Setting the ZT IP addresses of my two on-site DCs in the V-NIC on the client works. Should this be a short term fix only?

Setting them as DNS? That seems like a good solid fix. So you are getting reliably good DNS results now? I think that you are good to go

I see a problem - How does the mobile PC find the ZT controller when it out and about? When will the mobile PC decide to use the DNS servers provided by the real network card vs using the DNS provided by the ZT adapters?

You really do need/want both to be able to work. So you go to a new location, you connect to their network, your computer needs to use DNS to find the ZT controller on the internet (unless they are considered static and the ZT software just has an IP for the controller - then nevermind), but assuming it's not FQDN based for controllers, you'll need to use the physical NICs DNS to find the controller, then after you ZT network is up, you can switch full time over to use the domain's DNS for anything/everything.

If the ZeroTier controller is not available, the ZeroTier adapter will not be online, so the local DNS will apply.

scottalanmiller

@Dashrender said in ZeroTier Question:

I see a problem - How does the mobile PC find the ZT controller when it out and about? When will the mobile PC decide to use the DNS servers provided by the real network card vs using the DNS provided by the ZT adapters?

When connected versus when not connected. It doesn't look to the ZT controller's DNS settings when that controller is down.

Dashrender

@JaredBusch said in ZeroTier Question:

@Dashrender said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

Setting the ZT IP addresses of my two on-site DCs in the V-NIC on the client works. Should this be a short term fix only?

Setting them as DNS? That seems like a good solid fix. So you are getting reliably good DNS results now? I think that you are good to go

I see a problem - How does the mobile PC find the ZT controller when it out and about? When will the mobile PC decide to use the DNS servers provided by the real network card vs using the DNS provided by the ZT adapters?

You really do need/want both to be able to work. So you go to a new location, you connect to their network, your computer needs to use DNS to find the ZT controller on the internet (unless they are considered static and the ZT software just has an IP for the controller - then nevermind), but assuming it's not FQDN based for controllers, you'll need to use the physical NICs DNS to find the controller, then after you ZT network is up, you can switch full time over to use the domain's DNS for anything/everything.

If the ZeroTier controller is not available, the ZeroTier adapter will not be online, so the local DNS will apply.

Good to know - OK that problem's solved. +1

WLS-ITGuy

FYI - Not like you didn't know this but THIS PLACE IS AWESOME!

Thanks for all the help. If this works I won't have to listen to professors complaining about not being able to access files from China.

scottalanmiller

@WLS-ITGuy said in ZeroTier Question:

FYI - Not like you didn't know this but THIS PLACE IS AWESOME!

Glad that you like it

BRRABill

@WLS-ITGuy said

FYI - Not like you didn't know this but THIS PLACE IS AWESOME!

And this is your first issue.

Give it a few months, you'll need even bigger CAPS.

WLS-ITGuy

@WLS-ITGuy said in ZeroTier Question:

FYI - Not like you didn't know this but THIS PLACE IS AWESOME!

Thanks for all the help. If this works I won't have to listen to professors complaining about not being able to access files from China.

I may have spoke too soon. With the hard set DNS it doesn't allow Outlook to work. Via WEb or Client

scottalanmiller

@WLS-ITGuy said in ZeroTier Question:

I may have spoke too soon. With the hard set DNS it doesn't allow Outlook to work. Via WEb or Client

Start with.... what's not working? What wrong info is it getting? Does Outlook or Web work from the office?

WLS-ITGuy

@scottalanmiller Outlook client doesn't connect. Keeps asking for password. Webmail says page not found. All offsite. Everything works on campus.

scottalanmiller

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller Outlook client doesn't connect. Keeps asking for password. Webmail says page not found.

But these same services work for people on the same DNS when they are in the office?

WLS-ITGuy

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller Outlook client doesn't connect. Keeps asking for password. Webmail says page not found.

But these same services work for people on the same DNS when they are in the office?

Works for me running a mac. Works for other machines that never leave the network. Those that never leave I didn't set to a static DNS on the ZT nic.

WLS-ITGuy

I suppose my other option is to do mapped drives via ZT IP address and remove the static DNS.

scottalanmiller

@WLS-ITGuy said in ZeroTier Question:

I suppose my other option is to do mapped drives via ZT IP address and remove the static DNS.

And hosts files work great, too.

scottalanmiller

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller Outlook client doesn't connect. Keeps asking for password. Webmail says page not found.

But these same services work for people on the same DNS when they are in the office?

Works for me running a mac. Works for other machines that never leave the network. Those that never leave I didn't set to a static DNS on the ZT nic.

But they are using the same DNS as the one on the ZT NIC, right?

WLS-ITGuy

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller Outlook client doesn't connect. Keeps asking for password. Webmail says page not found.

But these same services work for people on the same DNS when they are in the office?

Works for me running a mac. Works for other machines that never leave the network. Those that never leave I didn't set to a static DNS on the ZT nic.

But they are using the same DNS as the one on the ZT NIC, right?

No. All DHCP machines getting DNS from DHCP scope

scottalanmiller

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller Outlook client doesn't connect. Keeps asking for password. Webmail says page not found.

But these same services work for people on the same DNS when they are in the office?

Works for me running a mac. Works for other machines that never leave the network. Those that never leave I didn't set to a static DNS on the ZT nic.

But they are using the same DNS as the one on the ZT NIC, right?

No. All DHCP machines getting DNS from DHCP scope

But it is the same DNS right? No matter how they get it or on what connector it is, it's the same DNS handing out the same info, right? If not, that's a major issue.

WLS-ITGuy

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

@scottalanmiller Outlook client doesn't connect. Keeps asking for password. Webmail says page not found.

But these same services work for people on the same DNS when they are in the office?

Works for me running a mac. Works for other machines that never leave the network. Those that never leave I didn't set to a static DNS on the ZT nic.

But they are using the same DNS as the one on the ZT NIC, right?

No. All DHCP machines getting DNS from DHCP scope

But it is the same DNS right? No matter how they get it or on what connector it is, it's the same DNS handing out the same info, right? If not, that's a major issue.

WEll, Shit! Now I am confused!

LAN side - gets 172.16.0.10 172.16.0.15

WLS-ITGuy

Got it working!

Had to make an A record entry in DNS.

Not pretty but it works.

dafyre

@Dashrender said in ZeroTier Question:

@scottalanmiller said in ZeroTier Question:

@WLS-ITGuy said in ZeroTier Question:

Setting the ZT IP addresses of my two on-site DCs in the V-NIC on the client works. Should this be a short term fix only?

Setting them as DNS? That seems like a good solid fix. So you are getting reliably good DNS results now? I think that you are good to go

I see a problem - How does the mobile PC find the ZT controller when it out and about? When will the mobile PC decide to use the DNS servers provided by the real network card vs using the DNS provided by the ZT adapters?

You really do need/want both to be able to work. So you go to a new location, you connect to their network, your computer needs to use DNS to find the ZT controller on the internet (unless they are considered static and the ZT software just has an IP for the controller - then nevermind), but assuming it's not FQDN based for controllers, you'll need to use the physical NICs DNS to find the controller, then after you ZT network is up, you can switch full time over to use the domain's DNS for anything/everything.

@adam-ierymenko would be better able to describe how the connection process works... but from what I have seen once you are connected to the ZT Network and you have a DNS server setup on the ZT NIC, it will go through the ZT DNS server, and if that completely fails, then it will fall back to the DNS servers on your physical NIC (Wireless or Ethernet) then.