Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense CE and Tailscale

    Scheduled Pinned Locked Moved Firewalling
    2 Posts 2 Posters 563 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H Offline
      Hammer8
      last edited by

      Hi, running the most recent Tailscale package and I am able to connect remotely no problem so it seems everything works properly. However, after a few weeks of working, my pfsense box will fail to authenticate with Tailscale and I need to regenerate a new key before things will work again. At the Tailscale console, I have set for the key to not expire for my pfsense box and so I don’t know what else to do.

      Any suggestions or ideas on what I am doing wrong?

      Thank you.

      M 1 Reply Last reply Reply Quote 1
      • M Offline
        mfld LAYER 8 @Hammer8
        last edited by

        @Hammer8

        I experience the same with headscale, a fork of tailscale controller to self-host.

        I made an auth-key (that does eventually expire) and register the pfSense node WITHOUT an expiration date. After some weeks it dies and I cannot get it back online without making a new auth-key.

        It is as though the tailscale package does

        tailscale login
        

        instead of

        tailscale up
        

        at random times.

        Seeing this on pfSense 2.7.0 with the 0.1.4 tailscale package

        Next time it fails we need to go in the CLI and see if there are any clues as to why its logged out. IMO once logged in, it should only do tailscale up and tailscale down, it should not login, logout.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.