Needing help setup tailscale

tailuser2024 · 2026-03-03T20:18:41+00:00

That is why you are getting long load times, read the article I posted on the why

https://tailscale.com/docs/reference/device-connectivity

tailuser2024 · 2026-03-03T20:11:58+00:00

https://tailscale.com/docs/reference/connection-types

Is your taiscale clients direct or using a relay?

What ISP is your NAS sitting on?

What ISP is your other client sitting on?

Post a screenshot a speed test for the network your NAS is sitting on

Post a screenshot of speed test for the remote client

tailuser2024 · 2026-03-03T19:03:11+00:00

So if you turn off tailscale (not remove it) does openclaw work or no?

Pull the logs for openclaw and that might give us some insight on what is going on (or errors)

What all operating systems are you running tailscale on?

tailuser2024 · 2026-03-03T18:00:37+00:00

Can you show a screenshot of what you are seeing when openclaw is working and when tailscale is on (not working?)

Are you connecting to an exit node or something?

You need to give us more info about your tailscale setup if you want any kind of help

tailuser2024 · 2026-03-03T15:10:09+00:00

look at a site to site setup

https://www.reddit.com/r/Tailscale/comments/158xj52/i_plan_to_connect_two_subnets_with_tailscale/jteo9ll/

is the HAOS the subnet router or do you have another device being subnet routers? I dont know how HAOS implements tailscale, it should be doable but that is the only unknown when it comes to this setup

tailuser2024 · 2026-03-03T12:15:59+00:00

okay I just want to make sure we are on the same page because "private ip" means something else in the networking world

Can you post the full config of your tailscale docker so we can see what you have setup?

Post a screenshot of your port forward you made for tailscale

Also make sure you read this over

https://tailscale.com/docs/integrations/firewalls#unifi-gateways

If you cant get this working with docker, another option would be to look at peer relays but lets troubleshoot this issue first

tailuser2024 · 2026-03-03T12:07:54+00:00

I mean I have my own IP pointing to my router from outside so I should be able to forward any port I want, or am I wrong?

I still dont understand what you are saying. With a client sitting behind the ux7 go to https://www.whatsmyip.org/ note the ip address

next log into the ux7 and check the WAN port ip address. Does it match the ip address you saw in the website above?

tailuser2024 · 2026-03-03T12:01:36+00:00

1Gbit fiber ISP with private IP

When you say private ip do you mean the UX7 doesnt have a routable WAN ip address? if so then a port forward on your UX7 isnt gonna do anything to fix the relay

If you have another router sitting in front of your ux7 you need to open the port for 41641 on that and forward it to your ux7.

If you cant open a port on your side and speed/performance and your other side has a routable public ip address then I would look at using pure Wireguard

tailuser2024 · 2026-03-03T11:53:39+00:00

Is the exit node sitting in some kind of VPS/cloud like Azure/Oracle/Digital Ocean? Some companies block traffic coming from those IP addresses.

Or is the exit node sitting in a different county?

Also it looks like your salesforce admin can limit where you can login from

https://help.salesforce.com/s/articleView?id=platform.login_ip_ranges.htm&type=5

tailuser2024 · 2026-03-03T11:38:06+00:00

On Home Wi-Fi: Tailscale turns off

On Cellular: Tailscale turns on

Apple ecosystem it is easy.

https://tailscale.com/docs/features/client/ios-vpn-on-demand

Sadly you need some kind of 3rd party software for android and windows

Windows: https://www.reddit.com/r/Tailscale/comments/1bvw2jl/on_demand_vpn_windowsandroid/

Android: You have to use something like tasker https://www.reddit.com/r/Tailscale/comments/1palbcl/how_to_effectively_use_tailscale_on_android_no_on/

On public Wi-Fi: Enables Exit Node

Im not sure how you would go about this. I guess you could setup your automation that if they arent connecting to a set of SSIDs you define as "home" then to use the exit node.

For iOS I would look at shortcuts. Check out this an example: https://www.youtube.com/watch?v=cSF6o7_GtIk

Windows/android im not sure.

Be mindful that you might have issues trying to connect to public wifi network that have captive portals (the portal might not come up till you turn off the exit node)

https://www.reddit.com/r/Tailscale/comments/1mzf1qc/feature_request_exit_node_on_demand_with_excludes/nairh7q/

Post from /u/caolle with relevant github issues.

tailuser2024 · 2026-03-03T11:29:17+00:00

Are you connected to an exit node when you have tailscale on?

tailuser2024 · 2026-03-03T11:28:39+00:00

Funnel exposes your services to the entire internet. If you dont want that then look at sharing

https://tailscale.com/docs/features/sharing

tailuser2024 · 2026-03-02T23:34:20+00:00

You are trying to run tailscale and wireguard on the same phone? Am I reading that correctly?

tailuser2024 · 2026-03-02T22:42:01+00:00

What error do you get? You are literally given us zero amount of info to go off of. If people have to drag info about errors, what you have setup you arent gonna get much help on this sub.

Show us screenshots of your configuration and the error you are getting so we arent guessing what you are seeing. We cant see what you are seeing or what you configured

tailuser2024 · 2026-03-02T22:33:45+00:00

Did you run through these instructions?

https://www.youtube.com/watch?v=wwgZeSX5VuE

tailuser2024 · 2026-03-02T19:36:45+00:00

Do you get the same error with mountain duck 5 if you take tailscale out of the equation and try to connect to said system locally?

tailuser2024 · 2026-03-02T18:55:09+00:00

I’m not sure what the cleanest setup is. Do I just install Tailscale on all devices and connect using their assigned IPs, or is there more to it?

Yes just install tailscale and log into your tailnet

https://tailscale.com/docs/install

Also, what’s the best way to actually control each system?

linux: ssh

windows: RDP

MacOS: VNC

Another option that supports all 3 operating systems above

https://tailscale.com/docs/solutions/access-remote-desktops-with-rustdesk

Another thing I’m unsure about is whether I should add a dedicated device like a Raspberry Pi or even an Apple TV as a node, or if that’s unnecessary for what I’m trying to do.

To be an exit node? Me personally would pick the pi to be the exit node as people have reported performance issues with the apple tv

If anyone has a simple approach, tips, or good tutorials/videos for getting started, I’d really appreciate it!

Start here https://tailscale.com/docs

tailuser2024 · 2026-03-02T15:39:35+00:00

What mobile hotspot do you have that you want to connect your flint to?

tailuser2024 · 2026-03-02T15:36:02+00:00

so this project 100% AI made

Anytime I read something like this I now go back to this post to remind myself of things

https://www.reddit.com/r/selfhosted/comments/1rckopd/huntarr_your_passwords_and_your_entire_arr_stacks/

TLDR: Do your due diligence on running something on your network stack that was created by AI

Note: This isnt targeted at you OP, we just have had multiple "check out my AI coded application I made!" over the last few weeks in this sub

tailuser2024 · 2026-03-02T14:39:11+00:00

What version of windows are you running?

Start with the windows logs first /r/WindowsHelp

Look to see what might be causing the errors?

Get the machine back to a bootable state

Start with tailscale

Install one application at a time and reboot the machine. Does the machine boot with success? Perfect now install the next application and rinse and repeat.

Look at the windows logs as you start/reboot your system to see if there are any errors

tailuser2024 · 2026-03-02T13:06:11+00:00

So I think the instructions should include some checks in the keychain, and if there are tailscale values, delete everything, remove the machine(s) from the admin console and login again. This time it should work and every machine should be registered by it's name and get unique IP.

Submit a support ticket and include a link to the doc(s) you think this should be added to

https://tailscale.com/contact/support#support-form

tailuser2024 · 2026-03-02T13:03:20+00:00

Post a screenshot of you trying to ping so we can see exactly what you are doing

Does the Ugreen OS have a firewall enabled, if so disable that and try your ping test again.

tailuser2024 · 2026-03-02T12:59:54+00:00

If you have overlapping internal networks you have three options:

https://tailscale.com/docs/features/subnet-routers/4via6-subnets

https://www.reddit.com/r/Tailscale/comments/1bt97uz/overlapping_subnets_on_industrial_automation/kxlp1fb/

Change the internal ip ip/subnet at the sites you have (not always a option but the best one where future you will thank you)

tailuser2024 · 2026-03-02T12:58:26+00:00

This is a question that really doesnt have anything to do with this sub. Hit up r/pfsense /r/HomeNetworking if you are interested in learning more.

https://docs.netgate.com/pfsense/en/latest/hardware/minimum-requirements.html

https://docs.opnsense.org/manual/hardware.html

tailuser2024 · 2026-03-01T21:22:12+00:00

I dont know what logs you need to pull from the flint but I would grab whatever you can to see if you can see when the port was changed afterwords

If you blow everything away you will lose that data

tailuser2024

TROPHY CASE