When installing another VPN on OMR, will 'vpn' interface configuration break? about openmptcprouter

[Ysurac]

You can add the interface to VPN firewall, but do not delete it.
I don't understand what you mean by "combine omrvps and omr into one network"

[GermanAizek]

I don't understand what you mean by "combine omrvps and omr into one network"

You understood everything correctly, they see each other as VPN clients and can connect without dedicated IPv4, Zerotier also provides possibility P2P using Moon intermediary. But most likely speed will be limited by width channel ZT servers, and earlier you wrote that I cannot keep omr and omrvps on same ISP. I have different ISP IP for OMR and OMRVPS, but in VPN they will be from same provider ZT, right?

[GermanAizek]

@Ysurac, I tried not to delete vpn zone and left it without the first command. He writes the same thing.

root@OpenMPTCProuter:~# uci -q delete firewall.vpn
root@OpenMPTCProuter:~# uci set firewall.vpn="zone"
root@OpenMPTCProuter:~# uci set firewall.vpn.name="vpn"
root@OpenMPTCProuter:~# uci set firewall.vpn.input="REJECT"
root@OpenMPTCProuter:~# uci set firewall.vpn.output="ACCEPT"
root@OpenMPTCProuter:~# uci set firewall.vpn.forward="REJECT"
root@OpenMPTCProuter:~# uci set firewall.vpn.masq="1"
root@OpenMPTCProuter:~# uci set firewall.vpn.mtu_fix="1"
root@OpenMPTCProuter:~# uci add_list firewall.vpn.device="zt+"
root@OpenMPTCProuter:~# uci -q delete firewall.lan_vpn
root@OpenMPTCProuter:~# uci set firewall.lan_vpn="forwarding"
root@OpenMPTCProuter:~# uci set firewall.lan_vpn.src="lan"
root@OpenMPTCProuter:~# uci set firewall.lan_vpn.dest="vpn"
root@OpenMPTCProuter:~# uci -q delete firewall.ssh
root@OpenMPTCProuter:~# uci set firewall.ssh="rule"
root@OpenMPTCProuter:~# uci set firewall.ssh.name="Allow-SSH"
root@OpenMPTCProuter:~# uci set firewall.ssh.src="vpn"
root@OpenMPTCProuter:~# uci set firewall.ssh.dest_port="22"
root@OpenMPTCProuter:~# uci set firewall.ssh.proto="tcp"
root@OpenMPTCProuter:~# uci set firewall.ssh.target="ACCEPT"
root@OpenMPTCProuter:~# uci commit firewall
root@OpenMPTCProuter:~# service firewall restart
/dev/stdin:195:9-19: Error: redefinition of symbol 'vpn_devices'
        define vpn_devices = { "zt*" }
               ^^^^^^^^^^^
The rendered ruleset contains errors, not doing firewall restart.

[GermanAizek]

Im sorry i forgot remove copy zone 'vpn'

root@OpenMPTCProuter:~# uci -q delete firewall.vpn
root@OpenMPTCProuter:~# uci set firewall.vpn="zone"
root@OpenMPTCProuter:~# uci set firewall.vpn.name="vpn"
root@OpenMPTCProuter:~# uci set firewall.vpn.input="REJECT"
root@OpenMPTCProuter:~# uci set firewall.vpn.output="ACCEPT"
root@OpenMPTCProuter:~# uci set firewall.vpn.forward="REJECT"
root@OpenMPTCProuter:~# uci set firewall.vpn.masq="1"
root@OpenMPTCProuter:~# uci set firewall.vpn.mtu_fix="1"
root@OpenMPTCProuter:~# uci add_list firewall.vpn.device="zt+"
root@OpenMPTCProuter:~# uci -q delete firewall.lan_vpn
root@OpenMPTCProuter:~# uci set firewall.lan_vpn="forwarding"
root@OpenMPTCProuter:~# uci set firewall.lan_vpn.src="lan"
root@OpenMPTCProuter:~# uci set firewall.lan_vpn.dest="vpn"
root@OpenMPTCProuter:~# uci -q delete firewall.ssh
root@OpenMPTCProuter:~# uci set firewall.ssh="rule"
root@OpenMPTCProuter:~# uci set firewall.ssh.name="Allow-SSH"
root@OpenMPTCProuter:~# uci set firewall.ssh.src="vpn"
root@OpenMPTCProuter:~# uci set firewall.ssh.dest_port="22"
root@OpenMPTCProuter:~# uci set firewall.ssh.proto="tcp"
root@OpenMPTCProuter:~# uci set firewall.ssh.target="ACCEPT"
root@OpenMPTCProuter:~# uci commit firewall
root@OpenMPTCProuter:~# service firewall restart
Section zone_lan (lan) fullcone in defaults not enabled, ignore zone fullcone settings
Section zone_wan (wan) fullcone in defaults not enabled, ignore zone fullcone settings
Section vpn (vpn) fullcone in defaults not enabled, ignore zone fullcone settings
Section omr_server option 'reload' is not supported by fw4
Section gre_tunnel option 'reload' is not supported by fw4
Section ttl option 'reload' is not supported by fw4
Section omr_bypass option 'reload' is not supported by fw4
Section omr_bypass is disabled, ignoring section
Automatically including '/usr/share/nftables.d/table-post/20-miniupnpd.nft'
Automatically including '/usr/share/nftables.d/chain-post/dstnat/20-miniupnpd.nft'
Automatically including '/usr/share/nftables.d/chain-post/forward/20-miniupnpd.nft'
Automatically including '/usr/share/nftables.d/chain-post/srcnat/20-miniupnpd.nft'
root@OpenMPTCProuter:~#