Remove LAN NAT configuration, add startup script configuration.
This commit is contained in:
Frank Edwards 2022-06-27 19:43:17 +10:00
parent 2b1b7f9843
commit a7207b9770
2 changed files with 13 additions and 12 deletions

View file

@ -59,7 +59,7 @@ The router must be be running RouterOS v7.4beta4 or later with the container pa
/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.17.0.0/16 /ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.17.0.0/16
``` ```
5. Create environment variables as per the list below. 6. Create environment variables as per the list below.
| Variable | Description | Comment | | Variable | Description | Comment |
| ----------------- | --------------------------------------------- | -------------------------------------------- | | ----------------- | --------------------------------------------- | -------------------------------------------- |
@ -74,7 +74,7 @@ add list="tailscale" name="ADVERTISE_ROUTES" value="192.168.88.0/24"
add list="tailscale" name="CONTAINER_GATEWAY" value="172.17.0.1" add list="tailscale" name="CONTAINER_GATEWAY" value="172.17.0.1"
``` ```
6. Create a container from the tailscale.tar image 7. Create a container from the tailscale.tar image
``` ```
/container add file=disk1/tailscale.tar interface=veth1 envlist=tailscale root-dir=disk1/containers/tailscale hostname=mikrotik dns=8.8.4.4,8.8.8.8 /container add file=disk1/tailscale.tar interface=veth1 envlist=tailscale root-dir=disk1/containers/tailscale hostname=mikrotik dns=8.8.4.4,8.8.8.8
@ -82,17 +82,18 @@ add list="tailscale" name="CONTAINER_GATEWAY" value="172.17.0.1"
If you want to see the container output in the router log add `logging=yes` If you want to see the container output in the router log add `logging=yes`
7. Configure container routing - create a secondary LAN IP address and apply inbound and outbound NAT rules. Here we apply rules for ICMP, UDP and TCP. 8. Optional - configure the container to startup on boot.
``` ```
/ip/address add address=192.168.88.2/32 interface=bridge /system/script
/ip/firewall/nat add name="tailscale" source= {
add chain=srcnat action=src-nat to-addresses=192.168.88.2 src-address=172.17.0.2 out-interface=bridge :delay 10s
add chain=dstnat action=dst-nat to-addresses=172.17.0.2 dst-address=192.168.88.2 /container
add chain=srcnat action=src-nat to-addresses=192.168.88.2 protocol=udp src-address=172.17.0.2 out-interface=bridge start [find tag="tailscale:tailscale"]
add chain=dstnat action=dst-nat to-addresses=172.17.0.2 protocol=udp dst-address=192.168.88.2 }
add chain=srcnat action=src-nat to-addresses=192.168.88.2 protocol=icmp src-address=172.17.0.2 out-interface=bridge
add chain=dstnat action=dst-nat to-addresses=172.17.0.2 protocol=icmp dst-address=192.168.88.2 /system/schedule
add name=tailscale on-event=tailscale start-time=startup interval=0
``` ```
### Start the Container ### Start the Container
@ -111,7 +112,7 @@ Note that the container exposes a SSH server for management purposes using the T
## Contributing ## Contributing
We welcome suggestions and feedback from people interested in integrating tailscale on the RouterOS platform. Please send a PR or create an issue if you're having any problems. We welcome suggestions and feedback from people interested in integrating Tailscale on the RouterOS platform. Please send a PR or create an issue if you're having any problems.

BIN
tailscale.tar Normal file

Binary file not shown.