OPNsense Forum

English Forums => Virtual private networks => Topic started by: andre_x on April 27, 2025, 10:02:44 AM

Title: Remote gateway over Tailscale
Post by: andre_x on April 27, 2025, 10:02:44 AM
Hi everybody!
I have 2 remote sites (B and C) and I want certain devices to exit to the Internet from my house (A).
Looking at the diagram, I want PC3 and PC6 to exit to the Internet with the public IP 1.2.3.4
All the sites are connected with Tailscale and site B and site C have the exit node set as site C.
On site B and C I've created a gateway with the IP of Tailscale site A, it's up and running with priority 255 (WAN has 254); I've also created a firewall rule for specific LAN IPs with that as gateway.
Onsite A I've created NAT rules (see attachment).
If from PC3 I ping 1.1.1.1 I see that ping going out of site A WAN, but the answer never goes back to PC3.
What am I missing?
Thanks!

Edit: how can I place picture in the post instead as attachments?
Title: Re: Remote gateway over Tailscale
Post by: ricardolanes on April 27, 2025, 07:11:41 PM
Hi, I'm not sure if that's it, but try changing the fw rule by setting the outgoing gateway.

(https://i.postimg.cc/F15C3vW0/1-B57-C2-C0-8-EB4-45-BE-9-D48-96-C7265-BCFD3.png)
Title: Re: Remote gateway over Tailscale
Post by: ricardolanes on April 27, 2025, 07:20:16 PM
Quote from: andre_x on April 27, 2025, 10:02:44 AMEdit: how can I place picture in the post instead as attachments?

Use tag
[img]URL[/img]
I recommend using this postimage: https://postimg.cc
Title: Re: Remote gateway over Tailscale
Post by: andre_x on April 27, 2025, 07:50:11 PM
Quote from: ricardolanes on April 27, 2025, 07:11:41 PMHi, I'm not sure if that's it, but try changing the fw rule by setting the outgoing gateway.
Hi Ricardo, thanks for your reply!
I've done that the packages arrives at site A, they goes out, but they don't go back to site B or C. It may be a NAT problem, but I can't find it.