Yes, but the main/wan router (172.30.100.1) isnt aware about the network 192.168.10.0/24, since that network is behind ZS … so, or you have to create a static route on the main router , something like
ip route 192.168.10.0 255.255.255.0 via 172.30.100.254
or, you have to do NAT on ZS’s ETH01 interface.
Regards