Tailscale, subnet etc woes

Technical Support for Routers VPN, DNS, Leaks
1

I know there is lots of stuff on here about this but, I cannot resolve this.
Part of my problem may be that since I changed ISP to Vodafone(UK) and to maintain VOIP I put my Beryl router behind their's in a double Nat. Anyway with Tailscale enabled I can ping Beryl by name and also a RaspberryPI by name. Neither of these nor any of my other devices on the subnet are reachable by IP. Can anyone help please.

2

Hi,

  1. Is it the clients of the router (Tailscale enabled) and cannot be accessed by other Tailnet devices?

  2. What name can be used to ping? but unavailable by IP? Please share the screenshot.

  3. Is the subnet of Beryl router already approved in Tailscale Admin Center?

4

Hi the names that ping successfully are shown here. For example I can ping beryl but not it's ip which is 10.0.0.1 and yes subnet is approved

tailscale-subnet
tailscale-subnet2733×1485 309 KB

5

Do I need port forwarding on my Vodafone router. I have no idea how to resolve this. Help please

6

Hello,

I think that a bit strange.
If it can ping the beryl name, it should be also ping the IP.

When executing ping beryl, does the corresponding IP be 10.0.0.1 reply?

Or is the IP returned by nslookup beryl resolve the 10.0.0.1?

7

Hi
I use my smartphone with wifi disabled to ping. beryl responds but 10.0.0.1 does not, nor do any of the subnet ips. Ping beryl does not show corresponding IP. On my laptop on wifi with Tailscale enabled and in command prompt I get:

C:\Users\muggi>nslookup beryl
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: 10.0.0.1

8

Is the problem to do with double nat. Would zerotier be a better option.

9

This looks like it's not parsed to the IP, which is a bit strange.

What is your network topology? Please draw a figure.

10

Vodafone router does not feature modem mode so DMZ seems to be the only fix. I need to keep the Vodafone router for VOIP.

Beryl
Beryl2500×1126 425 KB

11

If Vodafone modem/router is CGNAT, it seems that there is no difference between whether to enable DMZ.

I think this dual NAT should not affect Tailscale's IP access.

I also have the same topology, ping on each device through tailscale, and it has not been reproduced.

You can try to unbind tailscale, disable / enable and rebind. Or test it with Zerotier.

1 Like
12

I had no luck at all with Tailscale. Before changing ISP I had a Virgin router in modem mode upstream of my Beryl router and that worked fine. I have had success with Zerotier. Why does Tailscale not work?

13

Hi,

Do you mind adding my GL router to your Tailscale account group for testing?

At the same time, may need to share beryl with me through GoodCloud, because I also would like to check whether the router local Tailscale is running properly.

14

i can do that but now for some strange reason Tailscale seems to be behaving again. Has there been an upgrade? Can Tailscale and Zerotier co-exist happily on the router.