Tailscale VPN is crazily awesome and easy

I’m glad this topic came back to the top of this category yesterday. I also struggled with getting a VPN connection to my camper - in my case through a Verizon hotspot. Similarly, Verizon uses a private IP network so it cannot be accessed from the outside world.

It took 5 minutes to get this up and running… and another 5 to get a public subdomain to point to it.

Thank you!!!

You can actually install tailscale and make it a remote router, and an exit node on current model Apple TV. I've been using mine like that for about a year now.

2 Likes

I am not very tech savvy. Can someone explain to me the need for a server/vpn vs just having a cheap computer and use chrome remote desktop? I use CRD to access my work computers from home or while traveling. Thank you

Well for one, VPN can most likely be set up on existing hardware - without the need to buy a cheap computer. Free is better than cheap. :wink:

Do you mean like a raspberry pi?

Most home routers, like Asus, TP-Link, etc., have a VPN server built in. If you are using the modem/router provided by your ISP, your mileage may vary.

Gotcha. Thank you.

Unifi has integrated WG, even into their older EdgeRouter line. They also have other VPN options (e.g., OpenVPN, L2TP).

1 Like

Not so good for me (lol) as i brilliantly used the same subnet in two of my locatiions and am too lazy to change 100s of dhcp entries and force reboot all devices. Sigh. But it is really nice at our cottage behind cgnat. I even purchased a cheap gl.inet router to host it there as an exit node

1 Like

I bought one recently and LOVE IT! It's setup to connect to my home using Wireguard. Connect it to a hotel's network and my phone, tablet, laptop, etc. all connect using the GL.inet router's SSID. I have heard of families using it on a plane; paying for one internet connection and everyone's devices can get online for the flight.

1 Like

Didn't think of this...nice. :slight_smile: But I wonder if the airlines notice/think about all the wireless networks springing up on their planes?

Which did you guys get...I'm looking at the GL.iNet GL-MT3000 (Beryl AX).

:point_up:

That one. It's 20% off at Amazon from what I paid for it in January

https://a.co/d/8BtcU9g

1 Like

Oh yes, I saw the 21% off and started to smile. :slight_smile: $86!

So to make sure I have this right...

  1. I'm in a hotel room (let's not go into details here...) :wink:
  2. I connect the MT3000 to hotel Wi-Fi
  3. The MT3000 connects to my Wireguard VPN on my EdgeRouter at home (simple copy/past conf file onto MT3000 to set up)
    -- Hoping that the VPN connection can be set up to occur automatically when the router is connected to Wi-Fi
  4. All of the clients that connect to the MT3000 are now on my Wireguard VPN, no need to connect them to my VPN individually

Pretty freaking cute. First tech my wife will ever like. :wink:

I have 3 the ax1800 the axt1800 and the a1300 full time up linking all 3 locations. The 1300 is.the cheapest. When i got the 1300 is was 50 bucks

1 Like

Unfortunately, I have found that it is a little more complicated than that due to hotel's captive portal. Step 1B is to log into captive portal using your phone or laptop. Then, in the settings of the router, choose the option to clone a MAC address in router's settings and use the MAC address of the laptop or phone that you used. I have read some suggestions using the random MAC address option on your phone when logging into portal then going back to normal MAC address after the router is working.

See: Connect to a Hotspot with a Captive Portal - GL.iNet Router Docs 4

  1. I have found the hardest part for this step is getting the configuration file off of my Raspberry Pi so I can upload to the router. Under the WireGuard Client Options, I had to turn on "Remote Access LAN" and "IP Masquerading" to get it to work.
  2. Correct once you turn on the VPN. There is an external switch that can be set to turn the VPN Off/on in settings.

The first time I used it, I struggled but since, it has been AWESOME! Since my company has strict I.T. policies, they would never allow installing WG on my computer. With this method, I can access home network using work laptop while travelling.

Unrelated to this need, I also bought their cheapest model ($35) and mounted to ceiling of garage and connected to home wifi. I then was able to run CAT6 cables from it to two of my security cameras that required hard-wiring. I did this for about 4 months until i discovered a way to get the Cat6 into garage without cutting too many holes in the walls that would anger the better half.

2 Likes

I ordered last night and it's already arrived!! The damn thing is even better looking in person than in pics, the look and feel is so slick, and small size and included power supply and adapters will make it easy to take on the road.

Thanks for the details on WG conectivity...hopefully I'll work out the connection steps and it will work for us.

Only bad news is it's the weekend, so I don't know when I'll have much/any geek play-time w/it Sat/Sun. Wife has made a bunch of plans (how dare she! :wink: ) that evidently will require my attendance/attention. :wink: Starting w/yoga class at 10 am. Pray for me... :smiley:

1 Like

So I set up the MT3000, updated FW, etc. Nice little box w/a nice admin UI.

So the nice part so far is that at least using this from my phone's hotspot it works like a charm.

I connected the router to my phone's hotspot (using Repeater mode). Set up a VPN client on it for my Wireguard setup on my EdgeRouter, and enabled the VPN on the MT3000.

Then connected to the MT3000 wireless from my laptop and everything works. Internet connection, access to my local network resources, etc. Sweet.

I may go stalk a local hotel or Starbucks to test the captive portal process you outlined above (and thanks for the link). Don't want the first time I do that to be when we're actually on vacation. Just have to find a spot where I can plug in the router and not look like a hacker!! :slight_smile:

When it’s the only option available, I think those little gli-net routers can connect wirelessly to a WiFi hotspot, and still allow wireless clients to connect to the separate SSID they create.

1 Like

Yeah, planned on using the hotel's Wi-Fi connection via "Repeater mode," but I need power for the router, so that's what I meant by "spot where I can plug in." :slightly_smiling_face:

Bonus! I forgot wife was leaving tomorrow to see her sister, so I can dive into "Operation Hotel Wi-Fi Appropriation!" at full speed. :wink:

1 Like