I'm running Tailscale in a Proxmox container that's also hosting my OPNSense VM which hosts a wired LAN on it's LAN interface (192.168.1.1) and a WiFi AP on it's WLAN interface at 192.168.3.1. Tailscale is connected to OPNSense LAN via ip 192.168.1.10 has been configured to advertise both LAN and WLAN subnets but with Tailscale connected on my remote device (iPad) I can only browse devices on the LAN subnet but not the WLAN.
Both LAN and WLAN firewall rules allow in and out traffic on both interfaces so it's not the firewall rules blocking Tailscale, I can ping 192.168.1.1 from the LXC container and also ping 192.168.3.10 (whgere the AP is connected) so there's issue with traffic flow there. Via a session on 192.168.3.10 I'm able to ping 192.168.1.10 so the WLAN AP can see the Tailscale server LXC. The subnet routes have been approved in the Tailscale machines management page.
I can't see what else to do in Tailscale to sort out this issue, so I'm guessing I need to do something in OPNSense?
Can anyone please help?