I’m rather frustrated at this point, since I haven’t done routing or firewall work in 15 years and I’ve forgotten a lot of it. I’ve spent a lot of time researching and trying multiple solutions and feel like I’ve been wasting a lot of time and banging my head against a brick wall for a few weeks. Several people have suggested Tailscale, so I’d like to know if it can do what I want easily without having to set up everything and test it, or spend an evening or two researching only to find out it won’t help me.
At home (and my office, which is on the same LAN), I have a Starlink dish (which means it uses CGNAT), then my Starlink router, then pfSense, and then my LAN. I know I can put Tailscale on my LAN systems, but I change them around, especially multiple Raspberry Pis, for various reasons and I have some systems, like Home Assistant, that are on variations of Linux, but not actual Linux, so I might not be able to put a Tailscale client on them.
I want to be able to put a client package (of Tailscale or something else) on my mobile devices (both on iOS) and a client on my pfSense firewall. I really don’t want to have to put clients on my individual computers on my LAN, for the reasons I gave above. Then I’d like to be able to set up the client on my pfSense firewall so it acts as a client for the entire LAN, so I can use my phone, connect to pfSense, and, from there, be able to reach the entire LAN.
This video makes me think that’s possible, since he uses a diagram showing how he’s bridged 2 networks. I didn’t follow it all, since it’s mostly about configuring Tailscale and I don’t want to get into that until I know if it’ll do what I want. His network diagram - and this is a screenshot:
is close to what I want, except instead of a 2nd network, I’d like to have just my iPhone or iPad that connects to the first network. I also understand Tailscale works without having to open firewall ports. I like the security that provides. (Although, since I have CGNAT, I’m not sure how critical an issue an open port is behind that.)
Is this possible? Is it easy to configure? And can I do it without it also rerouting all my traffic to the main internet by using my iPhone or pfSense as an exit point for everything?
At this point, IF I have a solution I know can do what I want, I don’t mind doing the work for it, but I’m exhausted because I’ve been setting up and testing other solutions and have spent a lot of time on ideas that either just won’t work or do what I want or that I just can’t make work.