Windows firewall treats ZT1 virtual nets as untrusted by default, need instructions or UI help to change about zerotierone HOT 13 CLOSED

If Windows can ping out to the other Linux machines, then it isn't an issue of the ZeroTier One server itself being able to access the net. But it probably is the firewall.

ZT1 creates a virtual network device that looks exactly like a physical network device to your computer. If you go to your network connections, you will see each of these devices listed as if it were a physical LAN port. I am guessing that the Windows firewall is blocking connections here-- perhaps treating the virtual port as an untrusted network. I'm not sure where this is configured in Windows 8 (I do most testing on 7 at the moment), but it's probably in either the firewall config area or in TCP/IP settings on the network connection itself.

In the future I'll probably want to add a feature in the UI to configure whether Windows should treat the connection as a trusted or untrusted network. (Sometimes Windows calls this a "public network" vs a "home or office network." It probably thinks your virtual network is a "public network.")

from zerotierone.

Ok, yeah, it's showing it as a "public network". I'll see if I can find a way to change it.

from zerotierone.

Were you able to change it okay?

from zerotierone.

Not yet. There's no easy way to change it. And I can't get the Work/Home/Public Network dialog to come up. Checking on some registry edits that might fix it.

from zerotierone.

I'm going to look into making this a configurable option in the UI if it's not easy to change on the Windows firewall settings itself. Let me know if you find anything valuable.

from zerotierone.

I just uninstalled and reinstalled it a few times (including uninstalling the virtual network adapter driver) and it's working now even though it's still listed under public networks. Maybe the network adapter driver didn't get installed right previously or something.

from zerotierone.

Yeah there's another report of a similar problem, also on Windows 8.1. Investigating.

from zerotierone.

BTW, user also fixed it the same way: uninstall, reinstall.

from zerotierone.

This contains some information that might be of help re: network types in Windows:

http://www.eightforums.com/tutorials/9837-network-location-set-private-public-windows-8-a.html

Also contains info on the registry, which I plan to investigate in the future. Will probably add a drop-down box in the ZeroTier UI to change a network's designation. Also first I've learned about "domain" networks.

from zerotierone.

Problem is in registry -- network connections are showing up as "unknown connection" and their status in control panel can't be changed. This shouldn't be too hard. Promoting to "bug" and pushing for 0.9.2 since this is annoying for Windows users.

from zerotierone.

Okay... it appears that the only solution to this problem is to assign a dummy default route to every network. If a network does not have a default route, it is "unidentified." You can set this default route to have a high metric, in which case it will not conflict with existing networks.

This is utterly, completely insane and brain-dead, but then again it's the Windows network stack so insanity and brokenness are to be expected.

from zerotierone.

As a result this now depends on issue #53

from zerotierone.

Closing since ability to toggle is fixed in dev branch.

from zerotierone.