So the script is working great.
But noticed all WAN connections are using DERP.
Other devices in my LAN can access Tailscale remote hosts directly.
So seems it’s just an issue with my GL-MT3000.
Tried allowing in firewall, like at Site to Site GL-MT3000 tailscale - Routers / VPN, DNS, Leaks - GL.iNet and even rebooted but no change.
tailscale netcheck shows correct PMP response, PCP response, and even UPnP reply http 200.
Any thoughts?