Beryl7 (GL-MT3600BE) Tailscale setup

Dear Support Team,

I am currently setting up Tailscale on this router and would like to configure it so that I can use it as an exit node while also maintaining remote access to devices connected to the router’s LAN.

At the moment, when I enable the exit node, the option labelled “Allow Remote Access LAN” disappears, and I am no longer able to ping devices connected to the router. When I disable the exit node, the option reappears, and I am able to ping the LAN devices again.

On the Tailscale side, everything appears to be configured correctly. The relevant subnets have been approved in the Admin Console, and the route appears to be injected correctly. However, it seems that I can either use the router as an exit node or access devices behind the router, but not both at the same time.

In the advanced firewall settings, under zones, I have enabled the following rule:

tailscale0 → LAN
Input: Accept
Output: Accept
Forward: Accept
Masquerading: Enabled

I have tried several troubleshooting steps, including suggestions provided by AI tools, but none have resolved the issue.

Could you please advise how this should be configured so that both the exit node and remote LAN access can function simultaneously?

Kind regards,
Anthony

What firmware version are you using?

If you upgrade your router to firmware 4.9, you can simultaneously choose to run Exit Node and Advertise the LAN segment.

Does this meet your needs?

I installed 4.9.0 beta2

Options are available but with "Advertise LAN subnets" option ON and exit node ON I am unable to access devices in the local subnet (behind the router). I can see the subnet being advertised to Tailscale, it is approved in the Tailscale Admin Console .

With these settings it works fine, I can access devices in router's local subnet (192.168.8.0/24)

with exit node enabled and Advertise LAN subnets enabled I still can’t access router's local subnet

Regards,

Anthony

OK.

Please wait a moment while I test and check.