# Samba Server remotely and Tailscale

**URL:** <https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570>\
**Category:** Router\
**Created:** [January 20, 2024, 11:27pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570 "2024-01-20T23:27:09Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Steve68](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/bc79bd/32.png) [@Steve68](https://forum.gl-inet.com/u/Steve68)\
**Post date:** [January 20, 2024, 11:27pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/1 "2024-01-20T23:27:09Z")

</div>

I have been trying to use my Beryl AX as an OpenVPN/Wireguard server but I wasn’t able to connect from outside my network, I opened all the required ports, tried a lot of different ports and it would never connect, my ISP has a Strict NAT and even though I asked them to open the port 1194 they didn’t solve anything, it’s a new local fiber provider on my town so it seems like their infrastructure needs more optimization, I can use OpenVPN as a Client but while traveling I can’t make an inbound connection to my house.

I wanted to have access to my home network while traveling, and especially to my SMB server, I decided to try Tailscale and I really like it, it doesn’t require an Open NAT and port forwarding, at least on my case. I was able to have access to my WAN\LAN resources anywhere through the Tailscale’s tunnel, I even tried to transfer some files to my home network remotely and it worked great.

But, when I connected the Beryl AX to Tailscale, I got a warning because the Tailscale version the router is using has a vulnerability, how can I upgrade it? Do I need to wait an official firmware update to do it? I saw this article; [Update Tailscale on the GL.iNet Beryl AX (GL-MT3000) - Jan-Lukas Else](https://jlelse.blog/dev/update-tailscale-beryl-ax) I’m not sure if I should wait or do this manually, I prefer stability so I usually wait for the new features (even though I’m testing the alpha version 4.6)

Also, what are your thoughts of accessing the SMB server this way? Is it as safe as OpenVPN? I see not many people is using this and they prefer OpenVPN/Wireguard instead  
 ![Tailscale2](https://forum-static.gl-inet.com/original/2X/1/18bd91c720f66a102006ccbd5092fbd3f9e7b22f.png)

 ![Tailscale](https://forum-static.gl-inet.com/original/2X/3/3090ad7cc4bd7904d89f1e838d3d0ddeb247246b.png)

---

<div class="post-metadata">

**Author:** ![Steve68](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/bc79bd/32.png) [@Steve68](https://forum.gl-inet.com/u/Steve68)\
**Post date:** [January 20, 2024, 11:32pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/2 "2024-01-20T23:32:49Z")

</div>

@bring.fringe18 What do you think man?

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 21, 2024, 8:48am UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/3 "2024-01-21T08:48:08Z")

</div>

> [@Steve68](#):
>
> Also, what are your thoughts of accessing the SMB server this way? Is it as safe as OpenVPN? I see not many people is using this and they prefer OpenVPN/Wireguard instead

Yup, it’s safe.  
But the update of tailscale should be addressed by GL @hansome

---

<div class="post-metadata">

**Author:** ![Steve68](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/bc79bd/32.png) [@Steve68](https://forum.gl-inet.com/u/Steve68)\
**Post date:** [January 21, 2024, 3:14pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/4 "2024-01-21T15:14:00Z")

</div>

Like I commented previously this is what I did:

I updated the Tailscale packages through the GL.iNET and it worked! BUT… there is a bug, sometimes when I turn off the Tailscale function on the GL.iNET Web UI, it doesn’t actually turn off and the router keeps connected to Tailscale, and if you turn it off and reboot the router it connects again to Tailscale (having the toggle turned off). I had to turn it off using SSH and it seems to be okay now, now it keeps turned of if I reboot the router.

Thanks, I wish I could use OpenVPN because it’s shelf hosted but I have no option, also, have you tried Tailscale and OpenVPN client at the same time? I know I read there might be bugs but I wonder if people have tried it, I think I’ll use another router just for VPN

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 21, 2024, 6:23pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/5 "2024-01-21T18:23:59Z")

</div>

Yeah, I second @admon 's thought. @hansome & I ‘spoke’ elsewhere. Firmware 4.5.x is expected to drop 10 Feb. It [doesn’t look like it includes an updated `tailscaled`](https://dl.gl-inet.com/?model=mt3000&type=beta).

@hansome : Is there any change of getting `tailscaled` updated into 4.5? That [HOW-TO](https://jlelse.blog/dev/update-tailscale-beryl-ax) looks like a rather straightforward job.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 21, 2024, 6:25pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/6 "2024-01-21T18:25:15Z")

</div>

> [@Steve68](#):
>
> Thanks, I wish I could use OpenVPN because it’s shelf hosted but I have no option […]

FYI: ‘tailnets’ are self-hostable.

> **[Home](https://headscale.net/)**
>
> An open source, self-hosted implementation of the Tailscale control server.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 21, 2024, 6:26pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/7 "2024-01-21T18:26:16Z")

</div>

Can’t be that difficult to [integrate](https://forum.gl-inet.com/t/how-to-update-tailscale-on-arm64-f-e-flint2/37582) 😉

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 21, 2024, 6:28pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/8 "2024-01-21T18:28:53Z")

</div>

Jan-Lukas’s [HOW-TO](https://jlelse.blog/dev/update-tailscale-beryl-ax) reads more as a drop in replacement than having to worry about integration. Everything else being equal GL shouldn’t have to do anything beyond that… I speculate.

---

<div class="post-metadata">

**Author:** ![hansome](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/h/b5ac83/32.png) [@hansome](https://forum.gl-inet.com/u/hansome)\
**Post date:** [January 23, 2024, 1:33am UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/9 "2024-01-23T01:33:10Z")

</div>

comments withdraw, things changing.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 23, 2024, 2:09am UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/10 "2024-01-23T02:09:47Z")

</div>

@alzhao

IMO GL really should just pull that feature, stop advertising it & leave it be. Version aside there's _still_ no option to enable the exit node param, correct?

The kind of person who'll use Tailscale is the kind of person that isn't going to have a problem using LuCI or SSH... or downloading a tarball. @admon or I can always write up a HOW-TO... but you guys could really help us all out & get the following (in descending order of importance):

[https://www.discourse.org/plugins/docs.html](https://www.discourse.org/plugins/docs.html)

> **[Checklist](https://www.discourse.org/plugins/checklist.html)**
>
> Add interactive checklists to your posts.

> **[Footnote](https://www.discourse.org/plugins/footnote.html)**
>
> Insert expandable footnotes into your posts.

> **[Plugin directory](https://www.discourse.org/plugins/encrypt.html)**
>
> Extend the functionality of your Discourse community with our official plugins.

I'll say it again as I have elsewhere: there's too much good information being buried in this forum/'lost at sea'. It needs to be given some information architectural TLC ('tender loving care').

* * *

> [@Script: Update Tailscale on (nearly) all devices](https://forum.gl-inet.com/t/how-to-update-tailscale-on-arm64-f-e-flint2/37582/1):
>
> Hi there wave Many people wonder how to update the pretty old Tailscale version on GL.iNet routers like the Flint, Flint2, or even the new Flint 3 (GL-BE9300). For your convenience, I created a script to automate this entire process. [ssh2] Key Featuressparkles Automatic Updates - The script fetches and installs the latest Tailscale version automaticallypackage Tiny Version Support - Uses optimized tiny binaries to save precious storage spacebullseye Version Selection - Want a spe…

> [@Tailscale settings lost on reboot](https://forum.gl-inet.com/t/tailscale-settings-lost-on-reboot/31524/19):
>
> Yeah I see that now after you posted that dir list. The more I look at this the more it seems all so familar: This is untested code to enable exit nodes I never got feedback on from someone else but here: sed '/param="$param --exit-node-allow-lan-access --exit-node=$exit\_node\_ip"/a\ param=“$param --advertise-exit-node --allow-exit-node --allow-routes”' /usr/bin/gl\_tailscale \>\> \ /usr/bin/gl\_tailscale.new && mv /usr/bin/gl\_tailscale /usr/bin/gl\_tailscale.stock \ && mv /u…

> [@Suggestion: Technical Support for Routers: New Category: HOW-TOs](https://forum.gl-inet.com/t/suggestion-technical-support-for-routers-new-category-how-tos/30964):
>
> Per above. Such a category may help ensure always relevant user-contributed HOW-TOs such as Table of Contents [Applications](https://forum.gl-inet.com/t/suggestion-technical-support-for-routers-new-category-how-tos/30964#applications-1)[Network Administration](https://forum.gl-inet.com/t/suggestion-technical-support-for-routers-new-category-how-tos/30964#network-administration-4)[Virtual Private Networks (VPN)](https://forum.gl-inet.com/t/suggestion-technical-support-for-routers-new-category-how-tos/30964#virtual-private-networks-vpn-6)[Flashing & Recovery](https://forum.gl-inet.com/t/suggestion-technical-support-for-routers-new-category-how-tos/30964#flashing-recovery-11)[Device Specific](https://forum.gl-inet.com/t/suggestion-technical-support-for-routers-new-category-how-tos/30964#device-specific-12)Applications AdGuard Home Backup Network Administration Static DHCP Leases Virtual Private Networks (VPN) WireGuard Site to Site Service Providers Nord VPN Surfshark Flashing & Recovery Device Specific Routers Travel Virtual Private Networks (VPNs) Hotels, Motels…

> **[Information architecture](https://en.wikipedia.org/wiki/Information_architecture)**
>
> Information architecture is the structural design of shared information environments, in particular the organisation of websites and software to support usability and findability.
> The term information architecture was coined by Richard Saul Wurman.\[citation needed\] Since its inception, information architecture has become an emerging community of practice focused on applying principles of design, architecture and information science in digital spaces.  
> Typically, a model or concept of informati...

---

<div class="post-metadata">

**Author:** ![hansome](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/h/b5ac83/32.png) [@hansome](https://forum.gl-inet.com/u/hansome)\
**Post date:** [February 1, 2024, 12:28pm UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/11 "2024-02-01T12:28:38Z")

</div>

I just finished upgrading tailscale to 1.58.2, but that fails to catch up with the release of firmware 4.5. So it will be merged in 4.6.

Thanks @bring.fringe18 @admon for your solution.

> [@Script: Update Tailscale on (nearly) all devices](https://forum.gl-inet.com/t/how-to-update-tailscale-on-arm64-armv7-f-e-flint2-axt1800/37582):
>
> Hi there wave Many people wonder how to update the pretty old Tailscale version on GL.iNet routers like the Flint, Flint2, or even the new Flint 3 (GL-BE9300). For your convenience, I created a script to automate this entire process. [ssh2] Key Featuressparkles Automatic Updates - The script fetches and installs the latest Tailscale version automaticallypackage Tiny Version Support - Uses optimized tiny binaries to save precious storage spacebullseye Version Selection - Want a spe…

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [October 29, 2025, 11:36am UTC](https://forum.gl-inet.com/t/samba-server-remotely-and-tailscale/37570/12 "2025-10-29T11:36:17Z")

</div>


