Site to Site using Tailscale

Hi team! Struggling with some site to site networking using Tailscale and was hoping you might be able to help. Thank you in advance! :smile:

My challenge: I've got this working for my personal devices, but it does not work for my work/company laptop. I believe it might be related to configuring hop routing on my GL-MT3000..?

Background:
I have my home network with a VM running on proxmox that i'd like to be able to access outside of my home. I am using a GL-MT3000 as my travel router. When away from home, I'd like to have all devices connected to my GL-MT3000 be able to connect to my VM at home.

I can have the VM serve as a subnet router on Tailscale, or i can have my home router's pfsense serve as a subnet router (i'm not sure which is better.) I have Tailscale running on my GL-MT3000.

Using pfsense as my subrouter, i can successfully get devices behind my GL-MT3000 to connect to my VM.

When my work laptop is actually on my home network, i have no problem accessing my local IPs (eg 192.168.29.244), but when my work laptop is connected to my GL-MT3000 it cannot ping my local IPs. Note, my personal laptop has no problem pinging my local IPs. So that's why i think it might be a DNS related issue? Also, just fyi, i cannot install anything on my work laptop..totally locked down.

Anyways, thank you in advance for any guidance! Would loooove to be able to let my work laptop access my home network when i'm outside the home.

2 Likes

Have you found a solution for this issue?

I never did, actually... but as I type that, i don't think i tried one last thing i probably should have. I stopped looking for a solution as my company switched VPN providers and completely locked down DNS.. so i couldn't access local IPs even if my work laptop WAS connected to my home router.

BUT..one thing i haven't actually tried yet is trying to access my local IPs over my tailnet using my gl-inet as a vpn and my home router as a subnet router. When i'm away from home and using my gl-inet, i can successfully access my local home IPs at their normal 192.xxxx addresses on my personal laptop because i'm using Tailscale on the gl-inet and my home router (pfsense) as an subnet router. So perhaps that would work? i'm guessing it wouldn't work for my situation, but perhaps it would for you?

1 Like

Thanks for that. I am able to access all of my remote router and it's subnet and whole LAN from my remote travel GL.iNET Tailscale. My problem is the complete inability of any client device connected to my travel router to access that Tailnet without having Tailscale client installed and running directly on them despite the GL.iNET router itself running Tailscale with no issues.

If I am to use my own wireguard VPN tunnel between travel and home routers (as opposed to relying on Tailscale), then clients on remote LAN can ping those on local LAN with no issues.

Just like you, I had no issues accessing my LAN devices behind my local (home) router but the problem is that devices on the LAN of the remote (travel) router have no access to Tailscale unless directly installed and running on these devices themselves.

Definitely getting a bit over my own skis here, but I'm assuming you've tried setting the DNS server in your GL-inet router's settings as your Tailscale subnet router's Tailscale IP address? (In the little drop-down menu in your gl-inet's settings)

Hi,

May you have approved the subnet (LAN and WAN) of GL router in the Tailscale center?

Yes, all subnet routes are approved both on GL.iNET router itself and also on Tailscale admin's console.

  1. May I know if the travel router SSH ping [tailscale devices virtual IP] is available?
  2. May I know if the travel router enabled the WG VPN client and the Tailscale? Please SSH to travel router and share these info with us:
ifconfig
ip route
ip rule
ip r s t 52
tailscale status

Thank you @bruce . I am away for a couple days days and will post the details as soon as I have access to the device.