# Issues with remote access with zerotier

**URL:** <https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760>\
**Category:** Industrial\
**Created:** [29 October 2022 06:44 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760 "2022-10-29T06:44:06Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 06:44 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/1 "2022-10-29T06:44:06Z")

</div>

Hi Guys,  
I am having issues with remotely access node red dashboard via zerotier VPN. Everything seems to be fine but it just would not work.

I can ping the computer and made a firewall exception for the port 1880.

I have done this in the past with other systems with success but this time it just would not work!  
Please help!

---

<div class="post-metadata">

**Author:** ![bakman2](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/bakman2/32/6207_2.png) [@bakman2](https://discourse.nodered.org/u/bakman2)\
**Post date:** [29 October 2022 07:30 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/2 "2022-10-29T07:30:18Z")

</div>

Isn't the whole point of zerotier to keep ports closed ?  
The traffic goes through the tunnel, firewall doesnt see it.

If you opened 1880 on the WAN side, you can uninstall zerotier as well. I doubt you want that, so close it as soon as you can.

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 07:46 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/3 "2022-10-29T07:46:31Z")

</div>

I am getting confused ...the last time it worked after I added the firewall exception!!

---

<div class="post-metadata">

**Author:** ![bakman2](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/bakman2/32/6207_2.png) [@bakman2](https://discourse.nodered.org/u/bakman2)\
**Post date:** [29 October 2022 08:03 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/4 "2022-10-29T08:03:57Z")

</div>

How were you reaching node-red ? ie. on which ip ? the LAN IP, the WAN IP or the zerotier IP ?

---

<div class="post-metadata">

**Author:** ![jodelkoenig](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jodelkoenig/32/44645_2.png) [@jodelkoenig](https://discourse.nodered.org/u/jodelkoenig)\
**Post date:** [29 October 2022 08:11 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/5 "2022-10-29T08:11:12Z")

</div>

Do not open port 1880 in your firewall settings. As @bakman2 mentioned, this is indeed not needed.

If both, your remote device and your node-red server have joined your private (!) zerotier network, you should be fine to reach out to node-red via [http://zerotrier-network-ip-of-node-red:1880](http://zerotrier-network-ip-of-node-red:1880).

Please check in your zerotier account and your zerotier network that

a) both devices are connected  
b) both devices are allowed to join  
c) both devices are online

you can check this in the status section of the corresponding network.

EDIT: This will only work, if you access node-red via its zerotier IP. If you choose hostname, it most likely is referring to the wrong IP or cannot find the ip at all (as long as it is not a public IP)

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 08:18 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/6 "2022-10-29T08:18:17Z")

</div>

zerotier IP

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 08:28 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/7 "2022-10-29T08:28:24Z")

</div>

![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/4/d/4dd78fcbe40613dff9c322559aa2bbbfec5f9c0e.png)

All looks fine since I can ping all the devices

---

<div class="post-metadata">

**Author:** ![jodelkoenig](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jodelkoenig/32/44645_2.png) [@jodelkoenig](https://discourse.nodered.org/u/jodelkoenig)\
**Post date:** [29 October 2022 08:53 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/8 "2022-10-29T08:53:35Z")

</div>

With which device are you having difficulties. The phone does not seem to be connected.

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 08:57 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/9 "2022-10-29T08:57:54Z")

</div>

I cannot access node server PC from "SCADA" or "bikash\_pc".

---

<div class="post-metadata">

**Author:** ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)\
**Post date:** [29 October 2022 08:59 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/10 "2022-10-29T08:59:28Z")

</div>

What exactly do you see when you try to access node server pc from one of the other devices?

A snapshot of the screen might help.

---

<div class="post-metadata">

**Author:** ![jodelkoenig](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jodelkoenig/32/44645_2.png) [@jodelkoenig](https://discourse.nodered.org/u/jodelkoenig)\
**Post date:** [29 October 2022 09:01 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/11 "2022-10-29T09:01:16Z")

</div>

Aside, can you ping from node-red-server to SCADA and bikash\_pc and vice versa?

Are these PCs located in your home or in a company network?

EDIT:

You might want to check [Dashboard suddenly asks for password (Hacked Node-RED servers)](https://discourse.nodered.org/t/dashboard-suddenly-asks-for-password-hacked-node-red-servers/69083) BEFORE (or better if at all 🙂 ) you open port 1880.

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 09:10 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/12 "2022-10-29T09:10:41Z")

</div>

The connection times out.. ERR\_CONNECTION\_TIMED\_OUT.

Ya , I can both devices vice -versa. Its on my company network.

---

<div class="post-metadata">

**Author:** ![jodelkoenig](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jodelkoenig/32/44645_2.png) [@jodelkoenig](https://discourse.nodered.org/u/jodelkoenig)\
**Post date:** [29 October 2022 09:16 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/13 "2022-10-29T09:16:09Z")

</div>

I suspect this (company network) could still be the problem? Although not likely.

I experienced something similar strange with my laptop working onsite at my client's office network. Company firewalls might indeed block traffic, although this is only a rare condition (see zerotier help).

In order to check this I'd try to connect one of the PCs (which I assume are remote) via your phone (thethering, I assume your phone works). If you could access your node-red server then indeed the company firewall seems to block something needed from zerotier.

Other than this. I run out of ideas since you can ping in both directions. Last call would be to de-install/install zerotier on those remote PCs and hope for the best 🙂

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 09:23 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/14 "2022-10-29T09:23:42Z")

</div>

Everything works absolutely fine if I tether all devices to the same network (internet) and use its corresponding IPs, in which case I don't need zerotier.

The issue begins if the network is different and I use zerotier server and IPs.

This is getting really frustrating !!

---

<div class="post-metadata">

**Author:** ![jodelkoenig](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jodelkoenig/32/44645_2.png) [@jodelkoenig](https://discourse.nodered.org/u/jodelkoenig)\
**Post date:** [29 October 2022 09:29 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/15 "2022-10-29T09:29:11Z")

</div>

The only remaining idea that comes to my mind is the fact that you are using company PCs. They very often carry limitations to secure the company's network integrity. Hence there might be policies under the hood that do not allow this.

---

<div class="post-metadata">

**Author:** ![bakman2](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/bakman2/32/6207_2.png) [@bakman2](https://discourse.nodered.org/u/bakman2)\
**Post date:** [29 October 2022 09:30 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/16 "2022-10-29T09:30:08Z")

</div>

What type of device is the node-red system ? linux ? do you need to enable ipforwarding ? setup iptables ?

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 09:30 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/17 "2022-10-29T09:30:52Z")

</div>

Is there any way to check whether thats the case or not?..because I had used VPNs like Radmin in the past for other purposes without any issue.

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 09:32 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/18 "2022-10-29T09:32:21Z")

</div>

Its on windows 10..No idea about port forwarding setup etc!!

---

<div class="post-metadata">

**Author:** ![jodelkoenig](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jodelkoenig/32/44645_2.png) [@jodelkoenig](https://discourse.nodered.org/u/jodelkoenig)\
**Post date:** [29 October 2022 09:32 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/19 "2022-10-29T09:32:34Z")

</div>

Phew ... I'd ask a friend in IT 🙂 ... I have no clue what these guys are doing, but I assume this could be a limiting factor.

---

<div class="post-metadata">

**Author:** ![joey\_ind](https://avatars.discourse-cdn.com/v4/letter/j/5daacb/32.png) [@joey\_ind](https://discourse.nodered.org/u/joey_ind)\
**Post date:** [29 October 2022 09:35 UTC](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760/20 "2022-10-29T09:35:02Z")

</div>

Ok..so first time it worked was because I had opened the 1880 port and not because of zerotier!!

[Next page](https://discourse.nodered.org/t/issues-with-remote-access-with-zerotier/69760.md?page=2)
