Can't ping through Synology subnet router

[lagreca]

I have Tailscale setup on a Synology NAS, and have it set to advertise it’s local subnets

sudo tailscale up --advertise-exit-node --advertise-routes=172.20.20.0/24,172.20.30.0/24

I am remote and connected to the same TS network. I can ping the TS IP just fine, and can web into a device on the remote subnet: https://172.20.20.50/ BUT CAN NOT ping that device or any device on the remote subnet.

Any idea on what could be blocking pings?

I have enabled subnet router on a Windows machine on the same 172.20.20.0 subnet and CAN PING through that subnet router. It’s just the Synology subnet router that won’t let pings through!

[lagreca]

It turns out the problem was the Synology firewall. I had to allow traffic to the Tailscale network of 100.64.0.0/10.

What are these 100.x.y.z addresses?

It’s all working now! Hopefully this helps someone in the future.

[AlexFullmoon]

@lagreca

It turns out the problem was the Synology firewall. I had to allow traffic to the Tailscale network of 100.64.0.0/10.

Hello, I’ve got same problem here. Can you explain where it needs to be allowed? The firewall in web UI is disabled.

[lagreca]

In synology, go to control panel, security, firewall, then edit your firewall rules.