@chudak
start tailscale with:

sudo tailscale up --accept-routes

otherwise, tailscale is behaving as designed as a point-to-point VPN and the endpoints can only see each other

@dax-0

pfSense-pkg-Tailscale v0.1.1 now includes a GUI knob for this option:

edit: actually, this option is Linux-only for the time being (https://github.com/tailscale/tailscale/issues/5573)

pfSense-pkg-Tailscale v0.1.1_1 removes this option from the GUI. But also updates the binary to the latest v1.36.0

@mhache I am lazy, so I will wait for Netgate to update the package. I just enabled IPv6 for the WAN interface and that worked like a charm.

@dobby_ Great, we got it working! Thanks for the help

@robh-0 said in Confused about Routes :(:

@chudak All the devices on your network except your VPN connected work PC should all be accessible through TailScale. I use TailScale for access to my network, and I have zero issues.

You might want to watch this video and see if it helps:
https://www.youtube.com/watch?v=P-q-8R67OPY

Also, Netgate has released a video also, which can be viewed here:
https://www.netgate.com/blog/tailscale-on-pfsense-software

I am sure I watched them but will watch them again.
This is frankly not a burning issue, it's just odd.

I am using TailScale on several devices myself and have no issues, except for one Ubuntu laptop.

@revengineer Hey can you help me how you had done it because i also had the same problem that i am able to connect to the pfsense but unable to access devices inside the pfsense or the pfsense itself.

My use case is like this :

My remote device<<Tailscale>>Servervlan
My remote device<<Tailscale<<Pfsense Webgui

Looks like I may need to reboot. the list of processes seems a little much.

I may have only tried the destroy command about 2 or 3 times.

My guess is something is stuck in a loop somewhere?

[2.6.0-RELEASE][admin@router.home]/etc: ps aux | grep tailscale root 332 0.0 0.0 12176 3320 - I 07:05 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 1459 0.0 0.0 12148 3316 - I 07:30 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 1483 0.0 0.0 12148 3316 - I 08:32 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 1640 0.0 0.0 12176 3320 - I 07:05 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 2377 0.0 0.0 12176 3320 - I 07:30 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 2739 0.0 0.0 12148 3316 - I 09:13 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 3151 0.0 0.0 11244 2908 - D 07:05 0:00.00 /sbin/ifconfig tailscale0 destroy root 3514 0.0 0.0 11244 2908 - D 07:30 0:00.00 /sbin/ifconfig tailscale0 destroy root 3988 0.0 0.0 12148 3316 - I 07:28 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 4758 0.0 0.0 12176 3320 - I 08:32 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 5724 0.0 0.0 12176 3320 - I 07:28 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 6369 0.0 0.0 11244 2908 - D 08:32 0:00.00 /sbin/ifconfig tailscale0 destroy root 6578 0.0 0.0 12176 3320 - I 09:13 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 6616 0.0 0.0 11244 2908 - D 07:28 0:00.00 /sbin/ifconfig tailscale0 destroy root 7609 0.0 0.0 12176 3320 - I 07:27 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 8226 0.0 0.0 12176 3320 - I 07:30 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 8439 0.0 0.0 11244 2908 - D 09:13 0:00.01 /sbin/ifconfig tailscale0 destroy root 9122 0.0 0.0 12176 3320 - I 07:27 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 9454 0.0 0.0 12176 3320 - I 07:30 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 10249 0.0 0.0 11244 2908 - D 07:30 0:00.00 /sbin/ifconfig tailscale0 destroy root 10953 0.0 0.0 11244 2908 - D 07:27 0:00.00 /sbin/ifconfig tailscale0 destroy root 16651 0.0 0.0 12176 3320 - I 08:28 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 17765 0.0 0.0 12176 3320 - I 08:28 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 18741 0.0 0.0 12176 3320 - I 07:28 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 18777 0.0 0.0 11244 2908 - D 08:28 0:00.00 /sbin/ifconfig tailscale0 destroy root 19586 0.0 0.0 12176 3316 - I 07:28 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 20855 0.0 0.0 11244 2908 - D 07:28 0:00.01 /sbin/ifconfig tailscale0 destroy root 22863 0.0 0.0 12176 3320 - I 09:18 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 24330 0.0 0.0 12176 3320 - I 09:18 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 25535 0.0 0.0 11244 2908 - D 09:18 0:00.00 /sbin/ifconfig tailscale0 destroy root 31587 0.0 0.0 12148 3312 - I 07:15 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 31851 0.0 0.0 12176 3320 - I 07:02 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled stop root 32144 0.0 0.0 11244 2908 - D 07:02 0:00.00 /sbin/ifconfig tailscale0 destroy root 33165 0.0 0.0 12148 3316 - I 07:15 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 33275 0.0 0.0 12176 3320 - I 09:13 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 33952 0.0 0.0 12176 3320 - I 07:15 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 34299 0.0 0.0 12176 3320 - I 09:13 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 35044 0.0 0.0 11244 2908 - D 07:15 0:00.00 /sbin/ifconfig tailscale0 destroy root 35438 0.0 0.0 11244 2908 - D 09:13 0:00.00 /sbin/ifconfig tailscale0 destroy root 40167 0.0 0.0 12176 3320 - I 07:15 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 41351 0.0 0.0 12176 3320 - I 07:15 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 41365 0.0 0.0 12148 3312 - I 09:18 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 42062 0.0 0.0 12148 3316 - I 07:30 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 42243 0.0 0.0 11244 2908 - D 07:15 0:00.00 /sbin/ifconfig tailscale0 destroy root 44237 0.0 0.0 12148 3316 - I 09:18 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 45377 0.0 0.0 12176 3320 - I 07:30 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 45512 0.0 0.0 12148 3316 - I 09:29 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 45888 0.0 0.0 12176 3320 - I 09:18 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 47440 0.0 0.0 11244 2908 - D 09:18 0:00.00 /sbin/ifconfig tailscale0 destroy root 47454 0.0 0.0 11244 2908 - D 07:30 0:00.01 /sbin/ifconfig tailscale0 destroy root 48481 0.0 0.0 12176 3316 - I 09:29 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 50234 0.0 0.0 11244 2908 - D 09:29 0:00.00 /sbin/ifconfig tailscale0 destroy root 50809 0.0 0.0 12176 3320 - I 08:28 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 51698 0.0 0.0 12176 3320 - I 08:28 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 52545 0.0 0.0 11244 2908 - D 08:28 0:00.00 /sbin/ifconfig tailscale0 destroy root 55908 0.0 0.0 12176 3320 - I 07:14 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 57269 0.0 0.0 12176 3320 - I 07:14 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 58441 0.0 0.0 11244 2908 - D 07:14 0:00.00 /sbin/ifconfig tailscale0 destroy root 59393 0.0 0.0 12148 3312 - I 08:32 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 61972 0.0 0.0 12148 3316 - I 08:32 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 63420 0.0 0.0 12176 3320 - I 08:32 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 64526 0.0 0.0 11244 2908 - D 08:32 0:00.01 /sbin/ifconfig tailscale0 destroy root 64564 0.0 0.0 12176 3320 - I 09:03 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 65798 0.0 0.0 12176 3320 - I 09:03 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 67003 0.0 0.0 11244 2908 - D 09:03 0:00.00 /sbin/ifconfig tailscale0 destroy root 67562 0.0 0.0 12176 3320 - I 07:29 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 68414 0.0 0.0 12176 3320 - I 07:36 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 69018 0.0 0.0 12176 3320 - I 07:29 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 69563 0.0 0.0 12176 3320 - I 07:36 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 70343 0.0 0.0 11244 2908 - D 07:29 0:00.00 /sbin/ifconfig tailscale0 destroy root 70798 0.0 0.0 11244 2908 - D 07:36 0:00.00 /sbin/ifconfig tailscale0 destroy root 73828 0.0 0.0 12148 3316 - I 09:18 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 74516 0.0 0.0 12148 3316 - I 07:15 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 76435 0.0 0.0 12176 3320 - I 07:08 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 77208 0.0 0.0 12176 3320 - I 09:18 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 77769 0.0 0.0 12176 3320 - I 07:08 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 77842 0.0 0.0 12148 3316 - I 07:28 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 78364 0.0 0.0 12176 3320 - I 07:15 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 78420 0.0 0.0 11244 2908 - D 09:18 0:00.01 /sbin/ifconfig tailscale0 destroy root 78970 0.0 0.0 11244 2908 - D 07:08 0:00.00 /sbin/ifconfig tailscale0 destroy root 78978 0.0 0.0 12148 3312 - I 07:04 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 79706 0.0 0.0 12148 3316 - I 07:04 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 80455 0.0 0.0 11244 2908 - D 07:15 0:00.01 /sbin/ifconfig tailscale0 destroy root 80524 0.0 0.0 12176 3320 - I 07:04 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 81338 0.0 0.0 12176 3320 - I 07:03 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 82027 0.0 0.0 11244 2908 - D 07:04 0:00.00 /sbin/ifconfig tailscale0 destroy root 82285 0.0 0.0 12176 3320 - I 07:28 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 82826 0.0 0.0 12176 3320 - I 07:03 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 84138 0.0 0.0 11244 2908 - D 07:03 0:00.00 /sbin/ifconfig tailscale0 destroy root 84356 0.0 0.0 11244 2908 - D 07:28 0:00.00 /sbin/ifconfig tailscale0 destroy root 89354 0.0 0.0 12176 3320 - I 07:30 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 90592 0.0 0.0 12176 3320 - I 07:30 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 90776 0.0 0.0 12176 3320 - I 07:01 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled stop root 91482 0.0 0.0 12176 3320 - I 08:33 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 91957 0.0 0.0 11244 2908 - D 07:30 0:00.00 /sbin/ifconfig tailscale0 destroy root 92571 0.0 0.0 12176 3320 - I 08:33 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled start root 92588 0.0 0.0 12176 3320 - I 07:01 0:00.00 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled stop root 93677 0.0 0.0 11244 2908 - D 08:33 0:00.00 /sbin/ifconfig tailscale0 destroy root 99791 0.0 0.0 12148 3312 - I 07:30 0:00.01 /bin/sh /usr/local/etc/rc.d/pfsense_tailscaled restart root 50333 0.0 0.0 11244 2912 0- T+ 09:01 0:00.00 ifconfig tailscale0 destroy root 55295 0.0 0.0 12092 3296 0- T 08:30 0:00.01 /bin/sh /usr/local/etc/rc.d/tailscaled start root 56764 0.0 0.0 11244 2908 0- T 08:30 0:00.00 /sbin/ifconfig tailscale0 destroy root 89852 0.0 0.0 12092 3300 0- T 08:40 0:00.00 /bin/sh /usr/local/etc/rc.d/tailscaled start root 90958 0.0 0.0 11244 2912 0- T 08:40 0:00.00 /sbin/ifconfig tailscale0 destroy root 55752 0.0 0.0 11244 2912 1- T+ 09:30 0:00.00 ifconfig tailscale0 destroy root 75568 0.0 0.0 11244 2912 1- D 09:23 0:00.00 ifconfig tailscale0 destroy root 98473 0.0 0.0 12092 3296 1- T 09:20 0:00.01 /bin/sh /usr/local/etc/rc.d/tailscaled start root 99930 0.0 0.0 11244 2908 1- T 09:20 0:00.00 /sbin/ifconfig tailscale0 destroy root 69606 0.0 0.0 11244 2912 2- D+ 09:51 0:00.01 ifconfig tailscale0 destroy

I want to confirm with you all:

1-The Tailscale will work if you add the subnet routing.
2-I no longer use WIREGUARD (still keep it as backup.)
3-When I am in any internet with my laptop, I can ping my homenetwork (192.168.1.0/24) and my work (10.100.20.0/22). I did pay for the personal pro to have 2 subnets.

Tailscale replaces your VPN. And that is why the method is called Zero Trust VPN?

@chudak said in Advertised Routes ?:

@chudak

The answer was MagicDNS in the Tailscale account settings

What server did you use for MagicDNS? A public one or the pfSense machine?

@michmoor figured it out.
RTFM :)

https://tailscale.com/kb/1019/subnets/
https://tailscale.com/kb/1023/troubleshooting/

TLDR:
sudo tailscale up --accept-routes
ip route show table 52