Does Tailscale support multiple exit nodes from a tailscale advertising-exit-node client? Prolly Not looks like just wan exit and lan access. (not refering to multiple subnet nodes for tailscale non compatible clients)
Now when using “VPN policy based on VLAN” The router has two gateways where lan not-assigned to vpn and guest assigned to vpn.
Making the following mods in /usr/bin/gl_tailscale
if [ -n "$exit_node_ip" ];then
# param="$param --exit-node-allow-lan-access --exit-node=$exit_node_ip"
param="$param --exit-node-allow-lan-access --exit-node=192.168.9.0/24"
# /usr/sbin/tailscale up --reset $param --timeout 3s
/usr/sbin/tailscale up --advertise-exit-node --reset $param --timeout 3s
I could tailscale into the router where the vpn is only assigned to the guest network as my exit node for tailscale.
I did some rough testing only with wireguard so I’m not sure how solid it is but I did not have any conflicting results.
Just showing it works.
Tested with gl-axt1800 4.2.3
you also still have to enable exitnode on router device in “Tailscale admin console”
this mod also requires you to enable “allow remote access Wan” and enable “allow remote acces lan” in Tailscale-Gladmin on the router.