Whole network vpn

I’ve worked with UniFi devices in the past which have Teleport to connect to your network via VPN and I want to replicate that with my network. The trouble is we have an eero, which doesn’t support any VPN configurations. So I came across Tailscale. I installed it on my Windows PC I use as a home server, but I can only see that one device. I read I can set up subnetting, but how would that work? Like would I have to use my PC as a router or something?

My goal is to connect my phone or whatever else to Tailscale and have immediate access to everything on my network like I’m there. So I could open Plex or Home Assistant or whatever else and it opens like I’m home.

Time to start reading

Just be mindful any applications that rely on broadcast/or multicast will not work over tailscale

Yes, you want a subnet router. Install it on your Windows machine and ensure that machine does not go to sleep. Then, assuming correct configuration, other systems on your tailnet will be able to access things on your windows machine’s subnet.

At home I have a Pi-Hole running 24/7 on a Raspberry Pi. This is very low cost and is always running and awake.

If I am travelling, I use this as a subnet router into my home network.
When at home, I usually turn off the subnet routing.

Yes, I’ve read that. I should’ve been more clear about what I’m asking. I can follow those instructions but what are they doing? Does setting up a subnet router on my PC take the place of my eero router? Or is it solely facilitating Tailscale clients? Like will it create its own subnet that I then have to change all my ip addresses to?

Then, when I’m accessing a device at home with my laptop outside, would I just be typing in the ip address like I’m at home, or do I have to do something special with the ip Tailscale provides?

I clarified my question a bit in my reply to the other commenter :blush:

No, it does not replace your Eero. It simply provides a bridge from your local subnet to your Tailnet so that devices can access things they otherwise could not. It does not create a new subnet…you retain the assigned addresses from your Eero. The route is advertised and you would access any device on that network remotely with the local IP address. The subnet router translates that route and allows you to access devices…that is the entire purpose of the subnet router. Please read the page that was linked from Tailscale as this is all explained quite well. In addition, there are plenty of great YouTube videos showing setup and demonstration of subnet routers and routing via Tailscale.

Does setting up a subnet router on my PC take the place of my eero router?

No

Or is it solely facilitating Tailscale clients?

Yes

ike will it create its own subnet that I then have to change all my ip addresses to?

No

Then, when I’m accessing a device at home with my laptop outside, would I just be typing in the ip address like I’m at home, or do I have to do something special with the ip Tailscale provides?

As long as your remote tailscale clients have “accept routes” selected you will be able to reach your internal clients by their internal ip addresses at home


Tailscale clients out of the box only talk to other tailscale clients on your account

The subnet router is the middle man to allow any tailscale clients to talk to your non tailscale internal clients you have at home

One thing i will add that the link above doesnt discuss. If you want your non tailscale internal clients to talk to the tailscale clients directly, you will need to make a static route on your eero router for the subnet of 100.64.0.0/10 and point it to the internal ip address of the subnet router

That will allow you on your internal non tailscale clients to reach out to a tailscale client

Can you have multiple servers on the same
Tailscale net? Right now I have my Tailscale server set up on a nuc. But I was wondering if I can also set one up at my parents place, and have the 2 networks act almost as one.

Can you have multiple servers on the same Tailscale net?

Yes

But I was wondering if I can also set one up at my parents place

Yes

and have the 2 networks act almost as one.

You can do something like a site to site vpn between 2 different networks if you want non tailscale clients on each network to be able to talk to each other

I made a post about it here:

https://www.reddit.com/r/Tailscale/comments/158xj52/i_plan_to_connect_two_subnets_with_tailscale/jteo9ll/

But again there are some limitations to tailscale, multicast/broadcast wont work over tailscale

Hopefully subnet routers become a thing on apple tvs which will make things even more fun:

https://www.reddit.com/r/Tailscale/comments/16m4cuq/apple_tv_now_with_more_tailscale/

Awesome thank you. I think the site to site vpn is exactly what I’m looking for.

Would be great to have the multicast and broadcast functions but I’ll settle for this for now. Makes trouble shooting their computers so much easier. And also trying to do a file backup there.

I doubt we will ever see multicast/broadcast support, it has been something that has been a challenge forever so dont hold your breath on that

As long as the file backup supports putting in an ip address you should be good to go