Custom Exit Node of Tailscale not working

Technical Support for Routers VPN, DNS, Leaks
1

I have bought 2 GL-iNet routers to use Tailscale.

GL-AX1800 (Flint) v4.4.6, the home router
I’ve set it up to work as the exit node, I had to edit the config file via SSH to allow it to be used as the exit node. When I use Tailscale from my phone and set this router as the exit node, I can navigate, and access my home network, and of course, the IP is the same as my home.

GL-MT3000 (Beryl) v4.4.6, the travel router
I’ve connected it to Tailscale, but when I set my home router as the exit node, I don’t have access to the internet at all.

What am I doing wrong with the configuration of the Beryl?

2

Using Custom Exit Node.zip (631.7 KB)
hi,
please refer to the attached user guide.

3

hi @ikun for the quick reply, I followed your instructions, I was able to apply all the steps up to the 4th.

Following the 5th step, when I run tailscale status -json, the node of the MT3000 is not listed in the Peer object, but I can see the exit node (the GL-AX1800) and another device. When I look into the Self object, there is no PrimaryRoutes key for the MT3000.

4

hi,
Did you setup AX1800 as Exit node? Have you added “–accept-routes” option when run “tailscale up” on exit node?

5

Yes I did set up AX1800 as an exit node and it works, I’ve tested it from my phone where I installed Tailscale and set up the AX1800 as the exit node.

Side notes, I’m using the tethering connection on the MT3000 with my iPhone connected with the cable, in order to test it on 2 networks.

6

Did you setup AX1800 by running “tailscale up --advertise-exit-node”？please run following commands on AX1800 to accept routes.
sed -i 's@/usr/sbin/tailscale up --reset --accept-routes $param --timeout 3s > /dev/null@/usr/sbin/tailscale up --reset --advertise-exit-node --accept-routes $param --timeout 3s > /dev/null@' /usr/bin/gl_tailscale

/usr/bin/gl_tailscale restart

7

I already did set up the AX1800 as exit node, just double checked and this is a screenshot of it:

Screenshot 2023-12-11 at 14.19.46
Screenshot 2023-12-11 at 14.19.461676×530 34.6 KB

I’ve then run the restart command /usr/bin/gl_tailscale restart, I’ve also enabled all the subnets in tailscale on both routers.

But still no luck

8

hi,
I have PM you a document on how to share device.Please share both MT3000 and AX1800 with me, and PM me the MAC address and your router’s login password for remote check.Thanks！

9

Hi @ikun - can you DM me this document as well? I have a need to use a Slate AX as an exit node. Custom CLI configuration is fine.

11

Did this issue get resolved? I am running into the same issue. I have two MT3000. Unit A is set up as a Tailscale exit node, and Unit B is set up as a tailscale connected to the custom exit node (Unit A).

I have used the Unit A as an exit node with other devices (phone, PC) extensively without issue. However, I cannot get Unit B to work connected to Unit A as the custom exit node. From my observation, it seems to be a DNS issue after connecting to custom exit node. I can ping all IP addresses but cannot resolve many hostnames.

Any advice?