Community discussions

MikroTik App
 
tryuys
just joined
Topic Author
Posts: 17
Joined: Wed Apr 03, 2019 9:31 pm

backup LTE connection used for Tailscale only, and when problems as backup WAN

Sat Feb 18, 2023 11:29 am

Hello,

I would like to use 2 WANs on my hap ac3. Looks like simple job.
But
1st step
instead of load balancing/classic failover I want to have to keep Tailscale traffic always use the LTE (usb modem) connection.
For rest of connections I would use network from "normal" WAN - connected via the RJ45 and IP delivered through DHCP server. (DHCP client on mikrotik side).

And would be great if that is possible - in 2nd step - use LTE connection as a failover if "normal" WAN will be down.

Is it possible to obtain that (1st step)?
Why I want to route specific Tailscale? Due to unpredictable load on "normal" WAN. I would like to have alway working connection to Mikrotik through the Tailscale.

To be honest - at this moment I am using Tailscale on end devices only, but I really want (and I will try this weekend;) to work with container which will alllow Tailscale traffic at network level (Mikrotik as Tailscale router).

Have a good weekend,
:)
 
pe1chl
Forum Guru
Forum Guru
Posts: 10231
Joined: Mon Jun 08, 2015 12:09 pm

Re: backup LTE connection used for Tailscale only, and when problems as backup WAN

Sat Feb 18, 2023 12:04 pm

To do that, you need to identify "Tailscale traffic" before a connection is even established. I.e. it has to have some identifyable protocol, portnumber, destination host etc.
Unfortunately I cannot find that information on the website, you will have to research that yourself.
Once you know the characteristics of the traffic, you can use route marking to send it over the desired connection.
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1062
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: backup LTE connection used for Tailscale only, and when problems as backup WAN

Sat Feb 18, 2023 2:04 pm

One possible way to identify the TS traffic might be using the WG and STUN ports: www.tailscale.com/kb/1082/firewall-ports/

Who is online

Users browsing this forum: baragoon, Pranja and 60 guests