Remote access - Zerotier or Tailscale

Hi all,
I wanted to share some handy utilities and setup workflows I've been playing with to get secure remote access to a SHAC (SpaceLogic C-Bus Home Automation Controller). The best part? These solutions work completely without port forwarding, without needing DDNS, and seamlessly work behind CGNAT (Carrier-Grade NAT) on 4G/5G or restrictive ISPs.

Option 1: ZeroTier Setup (less headroom)
ZeroTier is a software-defined networking (SDN) platform and VPN alternative that seamlessly connects devices across the globe into a single, private, peer-to-peer network.

1. Download the Helper Package: Grab the ZeroTier installer package from the Google Drive link below:
   • ZeroTier Helper Package for SHAC
2. Install & Run Scripts: Install the package on your SHAC. Inside the app page, you'll find a few setup scripts. Run them once (using a scheduled script), then you can disable or delete the script if desired.
   
   
3. Restart: Reboot the controller, then enable ZeroTier directly from the system menu.
   
   
4. Connect to Your Network: Log into your ZeroTier Central console, grab your network key, and add it to the SHAC.
   
   
5. Access Remotely: Add your local computer or laptop to the same ZeroTier network. You can now use the ZeroTier IP address to connect directly to your SHAC.

ZeroTier Disclaimer: This is an independent integration package and is not supplied, certified, supported, or endorsed by ZeroTier, Inc. or Schneider Electric/Clipsal. Use only by authorised competent personnel and keep independent local recovery access during commissioning.

Option 2: Tailscale Setup (little more resource hungry)
Tailscale is a zero-config virtual private network (VPN) built on top of WireGuard that easily connects your devices and servers into a secure mesh network. A Tailnet is your own private, secure virtual network created by Tailscale, where all your connected devices can communicate directly with each other, no matter where they are in the world.

1. Download & Install: Grab the installer from the link below and install it directly on your SHAC:
   • Tailscale Package for SHAC
2. Run Preflight: Open the app page and run the preflight check.
   
   
3. Configure Settings: Select Start & enable at boot, enter a unique site/device name, and select Save device name.
   
   
4. Firewall Mode: Select the required firewall integration mode (the tested SHAC used Minimal — no Tailscale firewall rules).- you could use tailscale rules however I have not fully tested this
   
   
5. Connect & Authorise: Select Connect / reconnect, complete the Tailscale sign-in and authorisation in your browser, then click Refresh.
   
   
6. Verify: Confirm the status shows as Connected, and note the Tailscale IPv4 address and reported hostname.

Tailscale Disclaimer: This is an ASG production integration package, not a manufacturer-supported feature. It is not supplied, certified, supported, or endorsed by Schneider Electric/Clipsal or Tailscale. Use only by authorised competent personnel and keep independent local recovery access during commissioning.

Key Benefits

• Full Access: Gives you complete access to the app menu, web graphics, and interface.
  
  
• Direct Programming: Allows you to run Toolkit and C-Bus Commissioning remotely over the internet.
  
  
• No Network Hassles: Operates over a secure encrypted tunnel with no port forwarding required, no dynamic DNS (DDNS) setup, and works reliably even when the site is behind CGNAT (e.g., 4G/5G mobile modems or Starlink).

For remote Toolkit connection: Configure the C-Bus Home Controller/CNI using the Tailscale/zerotier IPv4 address and TCP port 10001. Do not rely on LAN discovery when off-site.

Full Warranty
If this does not work, I will refund the cost of the applications! 100%

Hope this helps anyone looking for a reliable, secure remote connection method for their installations! Let me know if you run into any questions testing it out. BACKUP first so you can rollback if you want and would be my suggestion