Tailscale is a zero-configuration VPN that creates a secure network between your devices. It's built on top of WireGuard, making it both fast and secure. In this guide, we'll cover how to install Tailscale on a variety of operating systems and configure it with a custom DNS and routing settings using the --disable-dns flag and the --accept-routes option.
Connect to pfsense using ssh
Remove the existing tailscale that you installed from pfsense package manager ( Usually very old version )
use this command for adding the package directly from freeBSD repo - pkg add https://pkg.freebsd.org/FreeBSD:14:amd64/quarterly/All/tailscale-1.88.3.pkg (Change the version to the latest version and the FreeBSD version to your current one)
Do This command for allowing the new tailscale service to load automatically -
sysrc tailscaled_enable=YES.
Do service tailscale status && service tailscale start
This command is for configurating your routes to be visible through the tailscale network and also disable the exit-node-lan-access for making your life easier and being able to access your other devices without installing tailscale on each device also disabling tailscale DNS from interfiring your internet access.
tailscale up --advertise-routes=10.0.20.12/32,10.0.20.1/32,10.0.20.8/32,10.0.20.9/32,10.0.20.10/32,10.0.20.16/32 --accept- routes=true --ssh=true --accept-dns=false --advertise-exit-node --exit-node-allow-lan-access=false --reset
brew install tailscale
Tailscale can be installed on various Linux distributions using package managers. Here's how to install it on some of the most popular distributions:
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/focal.gpg | sudo apt-key add -
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/focal.list | sudo tee /etc/apt/sources.list.d/tailscale.list
sudo apt update
sudo apt install tailscale
sudo dnf config-manager --add-repo https://pkgs.tailscale.com/stable/fedora/tailscale.repo
sudo dnf install tailscale
Tailscale is available in the AUR:
yay -S tailscale
After installation, use the following command to start Tailscale:
sudo tailscale up
To configure Tailscale with custom DNS and routing, use the --accept-dns=false flag (if you want to use your own DNS settings instead of Tailscale's MagicDNS) and --accept-routes option.
You can combine both --accept-dns=false and --accept-routes in a single command to customize your Tailscale network settings further:
sudo tailscale up --accept-routes --accept-dns=false
After configuring Tailscale, you can verify your settings by checking your Tailscale IP and the routes:
tailscale ip
tailscale status
### PFSENSE crontab -e setting for vim instead vi
1. Connect via SSH and choose 8 for shell.
2. write - setenv EDITOR /usr/local/bin/vim - FREEBSD default to cshell
3. Crontab for tailscale.
4. @reboot tailscale up --accept-dns=false --accept-routes --advertise-exit-node --advertise-routes=10.0.2.0/31,10.0.2.20/32,10.0.2.7/32
These commands will show your Tailscale IP address and the current status of your Tailscale connections, including any custom configurations you've applied.