# Tailscale configuration

**URL:** <https://forum.gl-inet.com/t/tailscale-configuration/62634>\
**Category:** VPN, DNS, Leaks\
**Created:** [August 10, 2025, 7:28am UTC](https://forum.gl-inet.com/t/tailscale-configuration/62634 "2025-08-10T07:28:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Madman045](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/278dde/32.png) [@Madman045](https://forum.gl-inet.com/u/Madman045)\
**Post date:** [August 10, 2025, 7:28am UTC](https://forum.gl-inet.com/t/tailscale-configuration/62634/1 "2025-08-10T07:28:16Z")

</div>

Will there be a point where by the Beryl AX will remember the Tailscale firewall rules after it has been powered off?

I have left it enabled and powered it off when i need to, but when i power it back on, I have to go back into Luci in order for it to start allowing traffic to route over Tailscale to my remote exit node.

The router came with 4.7.0 and it had no rules at all for the Tailscale interface, so i created what was required after finding another forum post explaining what was missing.

My router popped up that there was a new firmware, so i updated it to 4.8.0, factory reset it, enabled Tailscale. updated the installed version to the latest to match my exit node.

This time Luci did have the Tailscale interface showing in the firewall rules, but it still has forwarding disabled. Enable this and Masquerading and it routes traffic again.

Power off the router, power it back on, Tailscale shows active in the Apps interface, but the firewall rules revert back again.

Is this expected behavior? Does it just not work on any firmware version currently?

Thanks

---

<div class="post-metadata">

**Author:** ![skyaboveberlin](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/s/e9bcb4/32.png) [@skyaboveberlin](https://forum.gl-inet.com/u/skyaboveberlin)\
**Post date:** [August 10, 2025, 11:24pm UTC](https://forum.gl-inet.com/t/tailscale-configuration/62634/2 "2025-08-10T23:24:15Z")

</div>

Tailscale has never worked properly in any version, and it has never been possible to activate/select the exit node.

---

<div class="post-metadata">

**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\
**Post date:** [August 11, 2025, 8:36am UTC](https://forum.gl-inet.com/t/tailscale-configuration/62634/4 "2025-08-11T08:36:49Z")

</div>

Hi

We used Beryl AX with firmware version 4.8.0 to local test, but no reproduced the issue.  
When the Tailscale keep on, and after restarting router, Luci firewall configuration was not reset.

The firewall only will be reset when the Tailscale was disable and enable again.

Also we want to remind, If you only need to access Beryl AX's WAN/LAN devices through Tailscale, please enable these buttons, and the corresponding firewall rules will be added automatically.

 ![image](https://forum-static.gl-inet.com/original/3X/2/d/2d405d1a0f9f7934844071975e725cfbb48bad9e.png)

---

<div class="post-metadata">

**Author:** ![will.qiu](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/w/b38774/32.png) [@will.qiu](https://forum.gl-inet.com/u/will.qiu)\
**Post date:** [August 11, 2025, 8:43am UTC](https://forum.gl-inet.com/t/tailscale-configuration/62634/5 "2025-08-11T08:43:00Z")

</div>

Hi

Could you please let us know what problems you encountered with Tailscale, and the related models and firmware version?

Currently, our devices do not support running as exit nodes, but you can refer to the following tutorial to manually configure it via SSH.

> [@Tailscale 'Exit Node' on GL.iNet Routers?](https://forum.gl-inet.com/t/tailscale-exit-node-on-gl-inet-routers/49088/6):
>
> I managed to enable the 'Exit Node' option on my GL.iNet router. It actually turned out to be very simple, just had to send the following command via SSH, and that was it. No additional tweaks, firewall rules, etc. tailscale up --accept-routes --advertise-exit-node --advertise-routes=192.168.15.0/24,192.168.8.0/24 --accept-dns=false 192.168.15.0/24 - WAN Subnet 192.168.8.0/24 - LAN Subnet Router details Model: Brume2 Firmware: 4.7.0 (beta) Tailscale version: 1.66.4.-1 (default on this fir…

---

<div class="post-metadata">

**Author:** ![bruce](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bruce/32/35649_2.png) [@bruce](https://forum.gl-inet.com/u/bruce)\
**Post date:** [November 26, 2025, 11:34am UTC](https://forum.gl-inet.com/t/tailscale-configuration/62634/8 "2025-11-26T11:34:15Z")

</div>


