Tailscale cannot reach subnets on other devices

For anyone who is trying to have their GL.iNet device route traffic to their tailnet, I was able to get this working by doing the following:

  1. Enable Tailscale in Applications on 2.4.1 or later
  2. Add --accept-routes to the /usr/bin/gl_tailscale script using the sed that @hansome listed above: Tailscale cannot reach subnets on other devices - #26 by hansome
  3. Open Luci and create a new Firewall zone named tailscale with input, output, and forward accept, masquerading checked, and covered networks lan. Under advanced settings, you also need to add tailscale0 under covered devices.

@hansome @radishman is this something that can be automated as part of the --accept-routes changes that are coming in a future release?

2 Likes