Overriding Default Route / Full Tunnel Mode


The last update added Zerotier and I have looked at the service and I need to see if there is a way for a client’s traffic can be routed thru Zero tier and then the Flint modem?
IOS/Android—> Zerotier----> Flint---->internet

The documentation states that a Gateway has to be setup with Zerotier installed.


  1. Create a new route with a destination network of via the address X.X.X.X.

  2. Assign the address X.X.X.X to your router on the Zerotier network.

  3. Execute the following command on your Flint: cat /proc/sys/net/ipv4/ip_forward

    • If it returns 0 (disabled), you need to enable it: echo 1 > /proc/sys/net/ipv4/ip_forward
  4. Create a firewall rule as shown in the picture.

  5. Enable the Default Route switcher on your Zerotier smartphone APP and connect to the Zerotier network.

  6. Check the IP address of your device; it should match the address assigned by your ISP.


Thank you for the reply, a question to clarify.

  1. Create a new route with a destination network of via the address X.X.X.X.
  2. Assign the address X.X.X.X to your router on the Zerotier network?

So I create a new route beside the one I already have? Or delete a create a new one?
create a new route ----> My lan 10.x.x.x/24 via Zerotier address * 10.244..
Assign address of the router 10.x.x.x on the Zerotier network
Also for the FW there is allready a rule. In the Zerotier app on the flint there is:
Allow Remote Access LAN
Allow Remote Access WAN
So if I select WAN the rule is already set

Also I forgot to mention that I have a client VPN configured on the Flint Router and ideally have the traffic go thru the VPN
IOS/Android—> Zerotier----> Flint---->VPN----->internet



I wrote about the scenario of usage when you are setting up for the first time.

If you already have a specific address assigned to your router, then you need to set up a default route through it. There’s no need to delete the existing network.

For example, if your router in Zerotier Central already has the IP address, then you need to create a route in Zerotier Central for via

Regarding firewall rules:

You don’t need to delete them; you just need to edit them as I showed in the previous screenshot if you only need only access to WAN.

If you want to forward traffic to your VPN, then change “Allow forward to destination zones” from WAN to wgclient or add your ZT interface to the LAN group, whichever is more convenient for you.

Or if you need access to LAN and forwarding traffic to VPN client:


I got it working after some sleep.

Actually when the app Zerotier on the flint has the WAN and lan switched on the rules are automatically set and all I had to do is swap Zerotier–> Wan for wgclient and assign to the Zerotier of the router and it works now, so simple.

Thank you for your help.

1 Like