ACL File for hiding devices from eachother on tailnet

ACL (Access Control Lists)
1

Hi guys

just wondering if anyone has a basic ACL file for hiding devices on tailnet from eachother?

I tried using this below but i get error:

Error: ports="autogroup:self:": invalid port list: ""

{
    "acls": [
        // all employees can access their own devices
        {
            "action": "accept",
            "src":    ["autogroup:members"],
            "dst":    ["autogroup:self:"],
        },
        // all employees can access devices tagged tag:client
        {
            "action": "accept",
            "src":    ["autogroup:members"],
            "dst":    ["tag:client:"],
        },
        {
            "action": "accept",
            "src":    [""],
            "dst":    ["autogroup:internet:"],
        },
    ],
    "tagOwners": {
        // all employees can manage which devices are tagged tag:client
        "tag:client": ["autogroup:members"],
    },
}

If anyone has an example that works that would be greatly appreciated

1 Like
2

Try "src": ["*"],, rather than "src": [""],.

3

Unfortunately no luck, same error

1 Like
4

Do you have a basic acl file that can just hide devices from eachother on the same tailnet? but one device can see them all

1 Like
5

Could those be causing problems?

6

Not sure but if you were to hide devices from eachother would you do anything different?