Subnet not connected to tailscale exit node when using Modem

[dstnmrgn]

I’m using GL-MV1000 and have set up tailscale. I’m wanting to route all traffic through an exit node. I have successfully did this when tethering with an iphone as my internet source. However when using a cellular modem none of my lan traffic is being routed into the tailscale network. Any thoughts on what may be causing this?

[bring.fringe18]

Hi there,

To give you a heads up: GL is still working on Tailscale (still in beta & indicated as such in the GL GUI). More specifically & generally impacting is using a GL device as a exit node isn’t currently supported… but that’s not seeming to be the case here. Hold tight or check for beta/snapshot builds if you feel experimental (… but be sure to make a backup before you do!)

VPN setup - Brume 2 + Beryl AX

Not yet. Tailscale has many other problems to solve.

HOW-TO: Script: List My OPKGs (to a file for backup)

Keywords: backup, opkg, plugins, list, howto, script, shell, luci, restore, ipk, tarball, conf Description List user’s (your) installed packages, writing them to a text file that can be used to reinstall the binaries of what a user manually installed. The resulting .list file will be use to opkg install to pull from the feeds. That is done with two commands in one execution. The GL GUI doesn’t feature a backup function. Creating & restoring a backup achieve (.tar.gz, aka tarball) of all your…

[bring.fringe18]

@dstnmrgn

Any thoughts on what may be causing this?

It’s probably a firewall zone/forward from the tailscale daemon not passing traffic to whatever interface is your cell modem/dongle modem. I speculate though. My firewall skills aren’t great so I’d hold tight for someone in GL; I’ve seen some nice advice come from 'em before.

I’m quite sure you’re going to need to install LuCI beforehand though. The aforementioned HOW-TO assists there.

[dstnmrgn]

Thanks. I’ve tried adjusting firewall rules. I added a Tailscale zone and connected it to Tailscale device and able to forward to and from Lan. That’s worked for tethering. However when using modem clients have internet access that doesn’t go through Tailscale exit node. Exit node has no effect on client connection to internet.

[bring.fringe18]

Well, I know I’m rather useless for this situation but this may or may not bet relevant when GL starts looking at this: your firewall ruleset is @ /etc/config/firewall while anything custom inputted into LuCI are @ /etc/firewall.user

• cat /etc/config/firewall
• cat /etc/firewall.user

What firmware version are you currently using? They’ll need to know that too.

[dstnmrgn]

Currently on 4.3.6 the 7/11 snapshot

[lizh]

Hi dstnmrgn:

Does your brume consist of multiple exit nodes?

Thanks!

[dstnmrgn]

No. I only have one exit node in my tailnet

[lizh]

Hi dstnmrgn:

@dstnmrgn

. I have successfully did this when tethering with an iphone as my internet source. However when using a cellular modem none of my lan traffic is being routed into the tailscale network.

Very sorry. This feature is not currently supported.

[bring.fringe18]

Is there an idea of which upcoming firmware is expected to resolve it?

Has GL considered pulling Tailscale from the firmware in full until feature parity/the full capabilities are tested? IMHO I think it was premature to release Tailscale as a beta feature with nothing in GL GUI warning of what does/doesn’t work given customer expectations. I can understand how it could leave a ‘bad taste’ in a user’s mouth/give a poor impression of what GL is really capable of doing.

[dstnmrgn]

Ok. Hopefully this is something that can be fixed in future releases. Using an Exit Node from my experience does not work currently at all without first making changes to the firewall by creating a tailscale zone. I’m not sure why traffic is being handled differently with different wan devices but I’m glad you are aware of the problem now. Thank you

[dragon788]

Try setting it up manually via the CLI (ttyd or SSH), it appears their config clobbers additional parameters which causes things to fail.

Tailscale issue on SlateAX 4.2 firmware

@manderss99 I just tried your workaround, and it works like a charm! Thanks a lot. Now I can set my AXT1800 as an exit node, and it still works after reboot. Just one detail: for me, your example didn’t go right, so I set flag --advertise-exit-node instead of --allow-exit-node --allow-routes like in tailscale docs: Exit Nodes (route all traffic) · Tailscale So, the result line becomes: param="$param --advertise-exit-node" just before /usr/sbin/tailscale up --reset $param --timeout 3s And I…

[bring.fringe18]

Are you kidding me? I don’t use Tailscale myself but has exit node been confirmed working with those parameters from a command line launch?

EDIT: I pm’d you with a possible workaround to update that gl_tailscale script.

[lizh]

Yes,It will be supported in a future version.

Currently, The basic features of tailscale are only available with repeater and wired networks.

[bring.fringe18]

I was rather looking for a more definitive timeframe. Exit node setup on a GL device seems to be a very popular query on these threads as I’m sure you’ve seen.

[lizh]

These features of tailscale will be improved in version 4.6.

[lizh]

The IP of tailscale and modem is conflict.And We’re working on that, too

[dstnmrgn]

The IP conflict is something I had wondered about. Thanks for the update.

[dstnmrgn]

My current workaround to this problem is using another layer of NAT. I am using a Mango for the modem connection and then connecting to the LAN port of the Mango from my Brume’s WAN port. This seems convoluted but I do suspect that this works because of an ip conflict with tailscale and the cellular network. Another layer of NAT seems to resolve this conflict.