3 minutes ago, scrollend said:

trying to install plugin

Can you install other plugins?

10 hours ago, trurl said:

Can you install other plugins?

Yes. No problems with any other plugins 

16 hours ago, scrollend said:

Yes. No problems with any other plugins 

What do you get if you run this on the server?
 

wget https://pkgs.tailscale.com/stable/tailscale_1.82.0_amd64.tgz

 

On 4/9/2025 at 10:30 PM, scrollend said:

Hello. I was trying to install plugin, but i always get an error about invalid url. Maybe someone can help me installing this plugin. I get the same error when i try to use a link to the plugin that i found in some previous messages

Solved this problem. That was a region lock. I was able to install this plugin through vpn. 

Derek, can you speak to the benefit(s) of installing the plugin (or tailscale in general) on multiple/all systems on one's LAN, instead of for example, just one? Not including devices that can/will leave the premises to which there's obviously a benefit/requirement to be able to connect back home securely.

 

As an example, I have 4 Unraid systems and a couple of other systems that never leave the LAN. On every Unraid system I have Tailscale running. I also use Tailscale to distribute my DNS upstream address on any machine that leaves the LAN, so that I can continue to use my private IP addresses and reverse proxy with FQDN regardless of how or from where I connect to the internet.

 

All the systems/resources, including SMB shares, on my LAN can be accessed by their local IP and FQDN plus the ones running Tailscale also by their Tailscale 100* IP. The same is true, except for the 100 addresses, if I disable Tailscale on all but one system.

 

Besides using TS IPs and my tailnet name (though I'm not using MagicDNS) to access specific systems, are there any other benefits that I might find useful but am not aware of?

Edited April 11, 20251 yr by Espressomatic

First time posting here. Updated to Beta 4 of 7.1 and the Tailscale plugin required that I authenticate again to access my Tailnet. After authentication I got a notice that my 'machine had been added' but that an admin needed to approve it. I found this strange since this Unraid server is my main server and has been running the TS plugin just fine. It's also an exit node with subnet routing. When I went to my TS Admin console I saw that my 'new' machine had been added (subject to approval) and had the same name as my 'old' server with a -1 added to the name. So clearly the plugin and TS think my main Unraid server is an entirely different machine. I haven't change out any hardware etc. Just updated to Beta 4. Ran fine on Beta 3. I've logged out, rebooted, uninstalled the plugin, reinstalled the plugin, etc. Nothing works to get the TS plugin to facilitate seeing my current server as the original machine that is still listed in my TS admin machine list. Any suggestions?

35 minutes ago, misterwiggles said:

First time posting here. Updated to Beta 4 of 7.1 and the Tailscale plugin required that I authenticate again to access my Tailnet. After authentication I got a notice that my 'machine had been added' but that an admin needed to approve it. I found this strange since this Unraid server is my main server and has been running the TS plugin just fine. It's also an exit node with subnet routing. When I went to my TS Admin console I saw that my 'new' machine had been added (subject to approval) and had the same name as my 'old' server with a -1 added to the name. So clearly the plugin and TS think my main Unraid server is an entirely different machine. I haven't change out any hardware etc. Just updated to Beta 4. Ran fine on Beta 3. I've logged out, rebooted, uninstalled the plugin, reinstalled the plugin, etc. Nothing works to get the TS plugin to facilitate seeing my current server as the original machine that is still listed in my TS admin machine list. Any suggestions?

Just to clarify here... this is all happening via Settings -> Tailscale? Please provide plugin diagnostics: https://edac.dev/unraid/plugin-diagnostics/usage/

33 minutes ago, EDACerton said:

Just to clarify here... this is all happening via Settings -> Tailscale? Please provide plugin diagnostics: https://edac.dev/unraid/plugin-diagnostics/usage/

Yes. After updating to Beta 4 I rebooted and saw that TS was logged out on the server. Went to the plugin to reconnect and when through the auth process via Google. Hit the TS auth saying my machine would be added and you know the rest. Here are the diagnostics. Know that I recently reinstalled the plugin and decided to go with Preview when I couldn't get the regular plugin to register as my 'old' machine. Preview plugin is no better..

 

MediaStation-tailscale-diag-20250411-154743.zip

On 1/28/2025 at 2:30 AM, EDACerton said:

Yes, I would just do an "Erase Configuration" (might need to toggle advanced settings), then wait 30 seconds and reload the page.

Can you also just temporarily disconnect from tailscale, without losing the credentials, then turn it back on later?

8 hours ago, PaulieW said:

Can you also just temporarily disconnect from tailscale, without losing the credentials, then turn it back on later?

 

Sure, you can tailscale down and later tailscale up

 

 

5 hours ago, Espressomatic said:

 

Sure, you can tailscale down and later tailscale up

 

 

I just opened terminal window and executed "tailscale down", then I lost complete connection to my server on the PC... For some reason I could still enter the unraid dashboard using my phone, so I logged in there, opened terminal window and exectued "tailscale up". Now I can connect to my server again on my PC.

 

No idea what just happened but I realize this is not the way to go.

DNS issue. How have you configured DNS for your network?

 

Every machine on my network uses the same local DNS address with and without Tailscale, so it doesn't matter if I take one machine off the Tailnet or all of them - everything continues to work locally without interruption and every machine can still be accessed from any other, by full domain name, machine name or of course IP.

 

 

Edited April 12, 20251 yr by Espressomatic

10 hours ago, Espressomatic said:

DNS issue. How have you configured DNS for your network?

 

Every machine on my network uses the same local DNS address with and without Tailscale, so it doesn't matter if I take one machine off the Tailnet or all of them - everything continues to work locally without interruption and every machine can still be accessed from any other, by full domain name, machine name or of course IP.

 

 

I tried a bit of back and forth with ChatGPT on this.

In Network settings, I have:

 

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

Exclude listening interfaces:

 

And ChatGPT is saying that when I run "tailscale down", the web UI is no longer bound to br0 (your LAN interface) — hence no access via LAN IP.

I changed listening interfaces from tailscale1 to br0 tailscale1. Then opened terminal and did tailscale down. I lost connection again. But on my phone it was still working, so I go to network settings again, and then I see this:
Current listening interfaces: br0
Include listening interfaces: tailscale1

 

ChatGPT: Problem: tailscale down dynamically removes the tailscale1 interface — and since “Include listening interfaces” is set to tailscale1, Unraid drops back to its default behavior (which can mean it stops listening altogether or just on one interface like br0, depending on other configs). But crucially: Unraid is saving Include listening interfaces: tailscale1 to its config. So when tailscale1 disappears, the UI reverts to something unpredictable (or at least not what we want).

 

So I now I empty "Include listening interfaces" ("This tells Unraid to listen on all available interfaces (0.0.0.0)").
But then it says this:

Current listening interfaces: br0

Include listening interfaces:

 

tailscale1 had disappeared! Even though I executed tailscale up.

And in this state I started losing API connection frequently. webUI was disconnected, then I had to relogin etc. Terminal window closing all by itself. Some stuff was going on in the background.

 

Now I have rebooted the machine and we're luckily back to:

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

 

Maybe I'll just keep tailscale on forever, lol...

 

 

 

Edited April 13, 20251 yr by PaulieW

On 4/11/2025 at 6:52 PM, misterwiggles said:

Yes. After updating to Beta 4 I rebooted and saw that TS was logged out on the server. Went to the plugin to reconnect and when through the auth process via Google. Hit the TS auth saying my machine would be added and you know the rest. Here are the diagnostics. Know that I recently reinstalled the plugin and decided to go with Preview when I couldn't get the regular plugin to register as my 'old' machine. Preview plugin is no better..

 

MediaStation-tailscale-diag-20250411-154743.zip 288.39 kB · 0 downloads

It seems like somehow Tailscale didn't connect correctly after the restart.

 

When you redid the login, it replaced the key for the server, so there's no way to make the server register as the "old" machine now. What you can do is delete the old machine from the Tailscale admin console, then use the "Edit machine name" and "Edit machine IPv4" options to make it look like the old one.

5 hours ago, PaulieW said:

I tried a bit of back and forth with ChatGPT on this.

In Network settings, I have:

 

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

Exclude listening interfaces:

 

And ChatGPT is saying that when I run "tailscale down", the web UI is no longer bound to br0 (your LAN interface) — hence no access via LAN IP.

I changed listening interfaces from tailscale1 to br0 tailscale1. Then opened terminal and did tailscale down. I lost connection again. But on my phone it was still working, so I go to network settings again, and then I see this:
Current listening interfaces: br0
Include listening interfaces: tailscale1

 

ChatGPT: Problem: tailscale down dynamically removes the tailscale1 interface — and since “Include listening interfaces” is set to tailscale1, Unraid drops back to its default behavior (which can mean it stops listening altogether or just on one interface like br0, depending on other configs). But crucially: Unraid is saving Include listening interfaces: tailscale1 to its config. So when tailscale1 disappears, the UI reverts to something unpredictable (or at least not what we want).

 

So I now I empty "Include listening interfaces" ("This tells Unraid to listen on all available interfaces (0.0.0.0)").
But then it says this:

Current listening interfaces: br0

Include listening interfaces:

 

tailscale1 had disappeared! Even though I executed tailscale up.

And in this state I started losing API connection frequently. webUI was disconnected, then I had to relogin etc. Terminal window closing all by itself. Some stuff was going on in the background.

 

Now I have rebooted the machine and we're luckily back to:

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

 

Maybe I'll just keep tailscale on forever, lol...

 

 

 

Plugin diagnostics are always helpful: https://edac.dev/unraid/plugin-diagnostics/usage/

 

ChatGPT doesn't understand how "listening interfaces" works. Removing br0 removes the local interfaces from serving the WebGUI/SSH/etc., so if all you have is "tailscale1", the WebGUI/etc. only being accessible via Tailscale is expected behavior. The plugin automatically adds tailscale1 to that list.

 

If you want to temporarily disable Tailscale, the best way to do it is to set "Enable Tailscale" to "No" in the advanced settings of the plugin. However, using `tailscale down` shouldn't result in odd behavior.

 

Is your Unraid server set up to advertise a subnet? I have to guess here (since I don't have the plugin diagnostics ) but my initial thought would be that the Unraid server is advertising the local subnet, and the unpredictability is being caused by devices not yet realizing that the subnet router is down (so they're trying to send traffic to Unraid's local IP via the now-shut-down subnet router).

On 4/11/2025 at 1:50 PM, Espressomatic said:

Derek, can you speak to the benefit(s) of installing the plugin (or tailscale in general) on multiple/all systems on one's LAN, instead of for example, just one? Not including devices that can/will leave the premises to which there's obviously a benefit/requirement to be able to connect back home securely.

 

As an example, I have 4 Unraid systems and a couple of other systems that never leave the LAN. On every Unraid system I have Tailscale running. I also use Tailscale to distribute my DNS upstream address on any machine that leaves the LAN, so that I can continue to use my private IP addresses and reverse proxy with FQDN regardless of how or from where I connect to the internet.

 

All the systems/resources, including SMB shares, on my LAN can be accessed by their local IP and FQDN plus the ones running Tailscale also by their Tailscale 100* IP. The same is true, except for the 100 addresses, if I disable Tailscale on all but one system.

 

Besides using TS IPs and my tailnet name (though I'm not using MagicDNS) to access specific systems, are there any other benefits that I might find useful but am not aware of?

As you mentioned, MagicDNS is one of the big benefits of installing Tailscale on every device. There are a variety of other benefits too:

• You can use Tailscale Serve / HTTPS, which allow you to generate signed HTTPS certificates for the MagicDNS name that browsers, etc. will accept as valid (instead of using self-signed certificates, manually configuring Let's Encrypt with a custom domain name, etc.).
• Increases resilience, since with a subnet router, that device is a single point of failure (if it goes down, you lose access to everything via Tailscale).
• It distributes the encryption/decryption work across every device, which can be helpful if your subnet router is running on weaker hardware. (Modern hardware handles encryption well, but if you're running Tailscale on something like a Pi/router/etc., it could make a difference.)
• Provides better visibility in logs/etc. to see where traffic is coming from (traffic coming via a subnet router is SNAT'ed by default, this can be changed but doing so requires extra configuration on routers/endpoints/etc. to route Tailscale traffic back to the subnet router -- which kind of defeats the point of "easy" ).

There's probably some other stuff that I'm not thinking of, but that's a good start  

30 minutes ago, EDACerton said:

Plugin diagnostics are always helpful: https://edac.dev/unraid/plugin-diagnostics/usage/

 

ChatGPT doesn't understand how "listening interfaces" works. Removing br0 removes the local interfaces from serving the WebGUI/SSH/etc., so if all you have is "tailscale1", the WebGUI/etc. only being accessible via Tailscale is expected behavior. The plugin automatically adds tailscale1 to that list.

 

If you want to temporarily disable Tailscale, the best way to do it is to set "Enable Tailscale" to "No" in the advanced settings of the plugin. However, using `tailscale down` shouldn't result in odd behavior.

 

Is your Unraid server set up to advertise a subnet? I have to guess here (since I don't have the plugin diagnostics ) but my initial thought would be that the Unraid server is advertising the local subnet, and the unpredictability is being caused by devices not yet realizing that the subnet router is down (so they're trying to send traffic to Unraid's local IP via the now-shut-down subnet router).

Thanks for trying to help me again. I installed the plugin diagnostics, not sure how where to find the info to share here.

 

I set "Enable Tailscale" to "No" in the advanced settings of the tailscale plugin, and the same happened: lost complete connection on my PC, but on phone still working. So I browse to network settings on my phone and see:

Current listening interfaces: br0
Include listening interfaces: tailscale1

 

So the same result as when I did "tailscale down". It's weird though that since it's still listening to br0, the connection is lost.

I reinstated the connection again by setting  "Enable Tailscale" to "Yes".

 

How do I check if my unraid server is set up to advertise a subnet? I'm a complete noobie at all of this.

Maybe useful info: all my devices are on subnet 192.168.2.0/24, so subnet 2.

23 minutes ago, PaulieW said:

Thanks for trying to help me again. I installed the plugin diagnostics, not sure how where to find the info to share here.

 

I set "Enable Tailscale" to "No" in the advanced settings of the tailscale plugin, and the same happened: lost complete connection on my PC, but on phone still working. So I browse to network settings on my phone and see:

Current listening interfaces: br0
Include listening interfaces: tailscale1

 

So the same result as when I did "tailscale down". It's weird though that since it's still listening to br0, the connection is lost.

I reinstated the connection again by setting  "Enable Tailscale" to "Yes".

 

How do I check if my unraid server is set up to advertise a subnet? I'm a complete noobie at all of this.

Maybe useful info: all my devices are on subnet 192.168.2.0/24, so subnet 2.

You should put br0 back in the listen interfaces.

 

Instructions to download diagnostics are here: https://edac.dev/unraid/plugin-diagnostics/usage/#downloading-diagnostics-gui

3 hours ago, EDACerton said:

• It distributes the encryption/decryption work across every device, which can be helpful if your subnet router is running on weaker hardware. (Modern hardware handles encryption well, but if you're running Tailscale on something like a Pi/router/etc., it could make a difference.)
• Provides better visibility in logs/etc. to see where traffic is coming from (traffic coming via a subnet router is SNAT'ed by default, this can be changed but doing so requires extra configuration on routers/endpoints/etc. to route Tailscale traffic back to the subnet router -- which kind of defeats the point of "easy" ).

OK, these two are the kind of info that can benefit my setup. The Magic DNS not so much since I already use a public and registered FQDN along with regularly generated LE certs via Certbot and Nginx Proxy Manager.

 

In the case of a single point of failure, if the machine I mentioned before goes down, my whole LAN goes down anyway, as it's the machine (N100) acting as router, firewall, DNS and reverse proxy too.

 

Is there any configuration needed for the distribution duty you mentioned, or is simply having the nodes on the tailnet enough?

 

 

9 hours ago, PaulieW said:

I tried a bit of back and forth with ChatGPT on this.

 

 

 

Up above, ChatGPT is providing information that I consider 100% completely useless.

 

ChatGPT doesn't know anything about anything. It knows how to bring up results from what it finds on the web but has no way of knowing that anything it surfaces is correct or whether it's combining multiple incongruent sources of information to produce a hallucinogenic pile of garbage. It's not AI and it's never going to be AI (or AGI) so I'd never use it for any kind of problem solving like this.

 

 

You still never mentioned how you're trying to connect to your system, so given all the info, I still don't quite understand the question. If you're trying to resolve your Unraid system by name, your issue is 100% DNS. If you're going by IP then like EDA mentioned, probably subnet routing. What network segments are your machines attached to when you take Tailscale down? Both the Unraid system and your PC.

 

If your PC is still connected to the Tailnet and TS is providing DNS and that DNS isn't your local, you won't be able to resolve your Unraid system by fqdn. If anything it would likely try using a TS 100 IP and that's not going to work.

 

There are multiple things that can go wrong here but it all depends on how all the systems you're looking at are set up, not just the Unraid system.

 

All this is why I have my set up such that Tailscale can't/won't alter how any system on the LAN resolves or routes. So whether TS is up or down on one, multiple or all machines, they all continue communicating with each other as normal/expected. While on the LAN. If I take my mobile somewhere else, obviously it and at least one more system back at home on the LAN have to be connected to the Tailnet.

 

 

 

 

Edited April 13, 20251 yr by Espressomatic

10 hours ago, PaulieW said:

I tried a bit of back and forth with ChatGPT on this.

In Network settings, I have:

 

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

Exclude listening interfaces:

 

And ChatGPT is saying that when I run "tailscale down", the web UI is no longer bound to br0 (your LAN interface) — hence no access via LAN IP.

I changed listening interfaces from tailscale1 to br0 tailscale1. Then opened terminal and did tailscale down. I lost connection again. But on my phone it was still working, so I go to network settings again, and then I see this:
Current listening interfaces: br0
Include listening interfaces: tailscale1

 

ChatGPT: Problem: tailscale down dynamically removes the tailscale1 interface — and since “Include listening interfaces” is set to tailscale1, Unraid drops back to its default behavior (which can mean it stops listening altogether or just on one interface like br0, depending on other configs). But crucially: Unraid is saving Include listening interfaces: tailscale1 to its config. So when tailscale1 disappears, the UI reverts to something unpredictable (or at least not what we want).

 

So I now I empty "Include listening interfaces" ("This tells Unraid to listen on all available interfaces (0.0.0.0)").
But then it says this:

Current listening interfaces: br0

Include listening interfaces:

 

tailscale1 had disappeared! Even though I executed tailscale up.

And in this state I started losing API connection frequently. webUI was disconnected, then I had to relogin etc. Terminal window closing all by itself. Some stuff was going on in the background.

 

Now I have rebooted the machine and we're luckily back to:

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

 

Maybe I'll just keep tailscale on forever, lol...

 

 

 

 

what is it that you're trying to do?

See docs and examples here

Need more info...

as this br0 is fine

 

are your trying to subnet, server, funnel?

Currently, with the tailscale plugin installed host not configured, I funnel my plex and immich...
So I can go to plex.mytailscale.net and reach my plex and immich


as I have found that the plugin needs to be installed and exist


but alot of actual maintained and contorted via the tailscale admin console...

 

You may need to remove unraid from your devices in the admin console...
Many different ways to accomplish something...

Edited April 13, 20251 yr by bmartino1
Data - typo

If you don't want tailscale uninstall the plugin this will remove the tailscale binary form unraid. Previous configuration will remain on the USB. But tailscale will be done and not in use... and can't be called untilled the plugin is installed once more...

1 minute ago, bmartino1 said:

If you don't want tailscale uninstall the plugin this will remove the tailscale binary form unraid. Previous configuration will remain on the USB. But tailscale will be done and not in use... and can't be called untilled the plugin is installed once more...

I’m already helping them, please don’t confuse matters. 

1 hour ago, Espressomatic said:

 

Up above, ChatGPT is providing information that I consider 100% completely useless.

 

ChatGPT doesn't know anything about anything. It knows how to bring up results from what it finds on the web but has no way of knowing that anything it surfaces is correct or whether it's combining multiple incongruent sources of information to produce a hallucinogenic pile of garbage. It's not AI and it's never going to be AI (or AGI) so I'd never use it for any kind of problem solving like this.

 

 

You still never mentioned how you're trying to connect to your system, so given all the info, I still don't quite understand the question. If you're trying to resolve your Unraid system by name, your issue is 100% DNS. If you're going by IP then like EDA mentioned, probably subnet routing. What network segments are your machines attached to when you take Tailscale down? Both the Unraid system and your PC.

 

If your PC is still connected to the Tailnet and TS is providing DNS and that DNS isn't your local, you won't be able to resolve your Unraid system by fqdn. If anything it would likely try using a TS 100 IP and that's not going to work.

 

There are multiple things that can go wrong here but it all depends on how all the systems you're looking at are set up, not just the Unraid system.

 

All this is why I have my set up such that Tailscale can't/won't alter how any system on the LAN resolves or routes. So whether TS is up or down on one, multiple or all machines, they all continue communicating with each other as normal/expected. While on the LAN. If I take my mobile somewhere else, obviously it and at least one more system back at home on the LAN have to be connected to the Tailnet.

 

 

 

 

So in default state when Tailscale is up and everything is working, these are my interfaces:

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

Is this ok or not?

 

When I disable tailscale and go on my phone to network settings I see:

Current listening interfaces: br0

Include listening interfaces: tailscale1

Is this ok or not?

 

My PC is 192.168.2.13 and my unraid machine is 192.168.2.9. I am trying to connect to unraid on my PC both using LAN IP (http://192.168.2.9/login) as well as http://tower.local/login, both do not work anymore after I have disabled tailscale. And both work again when I re-enable Tailscale.

 

"What network segments are your machines attached to when you take Tailscale down?" Nothing special, I think? I've never setup complicated things, all my devices are on 192.168.2.0/24. I don't have any other active subnets. I just installed tailscale because it's now integrated into unraid, that's all. Very happy to use it btw, but would like to be able to turn it off as well, is all.

 

"There are multiple things that can go wrong here but it all depends on how all the systems you're looking at are set up, not just the Unraid system." Ok I haven't really setup anything special. The router just has assigned IPs to my devices and I have made them static in DHCP, that's about it.

 

I have installed the Plugin diagnostics, but do I now still need to place a diagnostics.json file somewhere?

 

"All this is why I have my set up such that Tailscale can't/won't alter how any system on the LAN resolves or routes. So whether TS is up or down on one, multiple or all machines, they all continue communicating with each other as normal/expected. While on the LAN." Yes this is exactly what I'm trying to achieve as well.

Quote

 

So in default state when Tailscale is up and everything is working, these are my interfaces:

Current listening interfaces: br0 tailscale1

Include listening interfaces: tailscale1

Is this ok or not?

 

 

Looks good to me.

 

Quote

 

When I disable tailscale and go on my phone to network settings I see:

Current listening interfaces: br0

Include listening interfaces: tailscale1

Is this ok or not?

 

 

As expected, yup.

 

 

 

Quote

My PC is 192.168.2.13 and my unraid machine is 192.168.2.9. I am trying to connect to unraid on my PC both using LAN IP (http://192.168.2.9/login) as well as http://tower.local/login, both do not work anymore after I have disabled tailscale. And both work again when I re-enable Tailscale.

 

Doing this has no effect on my ability to connect to my Unraid machine(s) - that includes having Tailscale ON or OFF on the PC (Mac in my case) as well. The only slight difference is that my systems always end up promoting the connection to https:

 

Clearly this was all working before you installed the Tailscale plugin right? By disabling TS, I can't see how this is related to Tailscale. It's OFF when set to OFF.

 

What happens when after turning it OFF you also uninstall the plugin?

 

Quote

Nothing special, I think? I've never setup complicated things, all my devices are on 192.168.2.0/24. I don't have any other active subnets. I just installed tailscale because it's now integrated into unraid, that's all. Very happy to use it btw, but would like to be able to turn it off as well, is all.

 

Can you open a terminal/control panel on each machine and check this out specifically? Check current IP, gateway/router and DNS (even though DNS isn't required for IP or mDNS connections)

 

 

Quote

Ok I haven't really setup anything special. The router just has assigned IPs to my devices and I have made them static in DHCP, that's about it.

 

Also using static reservations here and if anything that just makes things easier and more repeatable to follow/track/diagnose. Can't think of any reason this would cause a problem.

 

On the Unraid system, in Settings -> Management Access, are all the expected URLs included in the "Local access URLs" section?

 

Something like this

 

 

 

And for one last sanity check, in Network Settings, something like this (with Bridging enabled and the primary interface bridged to Br0)

 

Edited April 14, 20251 yr by Espressomatic