Tailscale cannot reach subnets on other devices

[hansome]

FYI, the main consideration not adding masquerde by default.

Why does Slate AX need extra Firewall config in LuCI for Tailscale, but the Beryl AX doesn't?

To reach the internet via the exit node, enabling certain Subnet routes in the Tailscale Console is necessary. Turning on masquerading on the tailsacle firewall zone also works, but it's not recommended since it'll introduce risk - the guest/wan network may use the Tailscale exit node. [image]