Messages

I am fairly new to OPNsense, but had been using Tailscale with pfSense for over 180 days without having this issue.  The link you have above to Tailscale says "Set the number of days a device can stay logged in to Tailscale before it needs to re-authenticate with Apple."  Not sure if this is only applicable to Apple devices.

I am seeing the same issue here.

I looked at everything and didn't see what could have changed to cause that issue other than my small change to my DHCP/DNS settings.

I ended up deleting and reinstalling, Tailscale, didn't work.

I deleted router from the Tailscale machine list and re-added, didn't work

Finally I deleted the pre-auth key in OPNsense and created a new one on the Tailscale website and that finally worked.

Hope this helps others.

I updated OPNsense to 25.1.7-4 yesterday.  I was also going to convert to dnsmasq from ISC DHCP and made this adjustment this morning... small office, only turned off one and turned on the other.  After, I was unable to connect to my router/network with Tailscale.  I restarted Tailscale and also made sure I did not need to login/authenticate for Tailscale again..  I also reverted back to a previous router config and rebooted.  Still did not help.  Tailscale on router stays Netcheck is up.  Tailscale IPs on the router says null. 

Not sure where to go from here.  If it was a setting change I created, I would think that reverting to a previous state would resolve the issue.

I solved my problem.  I had not yet approved the advertised subnet I created.  I am surprised however that I could not connect to the router/device since it was already approved in Tailscale

I recently converted from opnsense and installed the Tailscale package.  I then started the service, added the interface, authenticated the router on Tailscale as a new device and added a firewall rule to allow all Tailscale traffic.  I can see on opnsense that the device is connected to my Tailscale network under the status page.  I have also allowed and approved use of subnet routes for the router.  I however cannot connect remotely to the opnsense router or any other devices on the network.

Any help appreciated.  I followed the instructions below from zenarmor which I thought were pretty good.


https://www.zenarmor.com/docs/network-security-tutorials/how-to-install-and-configure-tailscale-on-opnsense

I am new to OPNsense and am looking to convert from pfSense that I have used for many years.  I use both Tailscale and Wireguard and installed them on a router before I consider going live in my current situation.  Tailscale installed without issue and I can see on the Tailscale webpage that it is connected.  However I cannot access any of the network behind router.  I turned on NAT-PMP that is recommended and not sure where to go from here.

New to OPNsense.

Is there way to create a NAT port redirection rule when it only originates from a particular external WAN address?  Through creation of an alias at that IP address?  I have had some routers where you just put in the IP address and others where you create an object which I am guessing might be the same thing.

Interface>WAN
Source>WAN address


Thanks

I got a great deal on several over the years.  What specifically about flexibility do you not like?

I personally like the Intel NUCs and find they work really well.

Your drawing is correct.  Wouldn't I need a NAT rule to direct 22.22.22.22 to my computer [10.10.10.10] on port 1234?

Would there also be benefit to making this a one-to-one connection to further secure the firewall?

Thanks for the quick reply.

In this scenario, I have one single static external WAN IP address only [33.33.33.33]

I need to connect 10.10.10.10 [port 1234] on my LAN [with my external IP WAN 33.33.33.33] to another external IP of 22.22.22.22 [port 1234] which is not controlled by myself.

what are your NAT rules for FreePbx?

what kind of issues are you having?  no registration? dropped calls?

New user to OPNsense [previously using Draytek router].  I am looking to set up NAT transversal for both one to one and traditional NAT.  I have read the help and searched forums but this I think is a very simple setup but I am finding the nomenclature a bit different from what I have used on other routers.

I need to connect a single device on my LAN to an external IP say [22.22.22.22] with port 1234 to a specific LAN address of 10.10.10.130 [port 1234].  My static IP is [33.33.33.33].

Is this setup correct?
External Network = 33.33.33.33
Source = 22.22.22.22
Destination = 10.10.10.130
Port = where is this entered?