LEDE旁路由安装zerotier，内网穿透，访问局域网

一、直接ssh到LEDE命令行，运行命令安装
# opkg update && opkg install zerotier

二、到openwrt的系统-软件包-过滤器“zerotier”

如果使用官方源很大概率会更新不到zerotier的软件包（不知道为什么，反正我没有更新到）

下面就要考虑更换镜像源，国内有人推荐一个大学的安装源，是可以找到zerotier软件包，但是安装失败。

下面放上我成功使用的镜像源地址：

src/gz openwrt_koolshare_mod_core http://openwrt.rinvay.cc/snapshots/targets/x86/64/packages src/gz openwrt_koolshare_mod_base http://openwrt.rinvay.cc/snapshots/packages/x86_64/base src/gz openwrt_koolshare_mod_luci http://openwrt.rinvay.cc/snapshots/packages/x86_64/luci src/gz openwrt_koolshare_mod_packages http://openwrt.rinvay.cc/snapshots/packages/x86_64/packages src/gz openwrt_koolshare_mod_routing http://openwrt.rinvay.cc/snapshots/packages/x86_64/routing src/gz openwrt_koolshare_mod_telephony http://openwrt.rinvay.cc/snapshots/packages/x86_64/telephony

更换镜像源的方法：

1、登陆ssh vi /etc/opkg/distfeeds.conf

进入后按键盘“insert”键，删除官方镜像源，复制上方的六条镜像源到ssh

然后按“esc”，接着英文输入法状态“:wq”，然后重启“reboot”

重启完成登陆ssh，执行 opkg update && opkg install zerotier

2、进入openwrt路由页面：进入系统，然后软件包，找到配置OPKG，更改opkg/distfeeds.conf删除文本框中的内容

复制上边镜像源后保存即可，完成后更新列表，就可以安装zerotier。

还有以下未经我本人测试的LEDE安装镜像源地址：

1.国内
src/gz openwrt_koolshare_mod_core https://openwrt.proxy.ustclug.org/snapshots/targets/x86/64/packages
src/gz openwrt_koolshare_mod_base https://openwrt.proxy.ustclug.org/snapshots/packages/x86_64/base
src/gz openwrt_koolshare_mod_luci https://openwrt.proxy.ustclug.org/snapshots/packages/x86_64/luci
src/gz openwrt_koolshare_mod_packages https://openwrt.proxy.ustclug.org/snapshots/packages/x86_64/packages
src/gz openwrt_koolshare_mod_routing https://openwrt.proxy.ustclug.org/snapshots/packages/x86_64/routing
src/gz openwrt_koolshare_mod_telephony https://openwrt.proxy.ustclug.org/snapshots/packages/x86_64/telephony

2.官方
src/gz openwrt_koolshare_mod_core https://downloads.openwrt.org/snapshots/targets/x86/64/packages
src/gz openwrt_koolshare_mod_base https://downloads.openwrt.org/snapshots/packages/x86_64/base
src/gz openwrt_koolshare_mod_luci https://downloads.openwrt.org/snapshots/packages/x86_64/luci
src/gz openwrt_koolshare_mod_packages https://downloads.openwrt.org/snapshots/packages/x86_64/packages
src/gz openwrt_koolshare_mod_routing https://downloads.openwrt.org/snapshots/packages/x86_64/routing/
src/gz openwrt_koolshare_mod_telephony https://downloads.openwrt.org/snapshots/packages/x86_64/telephony/

3.新加坡适合联通
src/gz openwrt_koolshare_mod_core https://mirror.0x.sg/openwrt/snapshots/targets/x86/64/packages
src/gz openwrt_koolshare_mod_base https://mirror.0x.sg/openwrt/snapshots/packages/x86_64/base
src/gz openwrt_koolshare_mod_luci https://mirror.0x.sg/openwrt/snapshots/packages/x86_64/luci
src/gz openwrt_koolshare_mod_packages https://mirror.0x.sg/openwrt/snapshots/packages/x86_64/packages
src/gz openwrt_koolshare_mod_routing https://mirror.0x.sg/openwrt/snapshots/packages/x86_64/routing
src/gz openwrt_koolshare_mod_telephony https://mirror.0x.sg/openwrt/snapshots/packages/x86_64/telephony

4.
src/gz openwrt_koolshare_mod_core https://mirrors.a-m-v.pl/downloads.openwrt.org/snapshots/targets/x86/64/packages
src/gz openwrt_koolshare_mod_base https://mirrors.a-m-v.pl/downloads.openwrt.org/snapshots/packages/x86_64/base
src/gz openwrt_koolshare_mod_luci https://mirrors.a-m-v.pl/downloads.openwrt.org/snapshots/packages/x86_64/luci
src/gz openwrt_koolshare_mod_packages https://mirrors.a-m-v.pl/downloads.openwrt.org/snapshots/packages/x86_64/packages
src/gz openwrt_koolshare_mod_routing https://mirrors.a-m-v.pl/downloads.openwrt.org/snapshots/packages/x86_64/routing
src/gz openwrt_koolshare_mod_telephony https://mirrors.a-m-v.pl/downloads.openwrt.org/snapshots/packages/x86_64/telephony

zerotier 安装完以后，修改配置文件：
# vi /etc/config/zerotier

需要修改的地方有两个：
config zerotier sample_config
option enabled 0 (这里把0替换成1，让zerotier使能)

# persistent configuration folder (for ZT controller mode)
#option config_path ‘/etc/zerotier’

#option port ‘9993’

# Generate secret on first start
option secret ‘generate’

# Join a public network called Earth
list join ‘6756c2e21c430001’ (这里替换你自己的网络ID)

接下去保存，退出vi编辑界面。
然后命令行直接打reboot，重启LEDE

重启完以后，直接去zerotier.com，接受LEDE提出的入网申请，有时候根据网络波动可能要过几分钟才会显示申请。

接下来LEDE要做防火墙配置，这个过程是在LEDE的web界面下完成：
记住，不用去创建新接口，也不要去桥接什么网口，那样的做法是用来把zerotier作为二层转发，

我这里推荐的是把zerotier作为三层路由的做法。直接点网络->防火墙，

在第一个界面里，把你基本设置里的“”转发“”点“接受”
然后下面“区域”里面三个框（出站，入站，转发）都选接受，后面两个IP动态伪装和MSS钳制保持不选

再去防火墙->自定义规则页面，输入下面三条，然后点“重启防火墙”
iptables -I FORWARD -i ztc3qwyx5l -j ACCEPT
iptables -I FORWARD -o ztc3qwyx5l -j ACCEPT
iptables -t nat -I POSTROUTING -o ztc3qwyx5l -j MASQUERADE