Tailscale subnet 中的设备单独加入 tailnet 之后，该设备无法通过原局域网 IP 访问

配置

A 设备 IP 为 10.115.15.1 ，安装 tailscale ，启用--advice-router=10.115.15.0/24

B 设备 IP 为 10.115.15.25 ，安装 tailscale ，不启用--accept-router

C 设备不在局域网 10.115.15.0/24 中，安装 tailscale ，启用--accept-router

存在的问题：

• 10.115.15.0/24 中的设备，可以通过 10.115.15.25 访问到 B 设备
• C 设备，无法通过 10.115.15.25 访问，只能通过 100.0.0.0/8 访问

如果 B 设备 IP 为 10.115.15.25 启用了--accept-router ，10.115.15.0/24 中的设备不能通过 10.115.15.25 访问

需求

不在 10.115.15.0/24 的设备，启用了--accept-router 的设备，可以通过 10.115.15.25 访问该设备

HELP ！ HELP ！ HELP ！ 请求大佬帮助

补充信息

自建了 Derper 并屏蔽了官方 Derper ，使用官方面板

启用了 ACL ，但是我测试过，关闭 ACL 仍然与上述现象描述一致

• A 、B 设备 ACL tag 为 home-server
• C 设备 ACL tag 为 work-pc

// Example/default ACLs for unrestricted connections.
{
	// Declare static groups of users. Use autogroups for all users or users with a specific role.
	// "groups": {
	//  	"group:example": ["[email protected]", "[email protected]"],
	// },

	// Define the tags which can be applied to devices and by which users.
	"tagOwners": {
		"tag:home-pc":     ["autogroup:admin"],
		"tag:home-server": ["autogroup:admin"],
		"tag:work-pc":     ["autogroup:admin"],
		"tag:game-server": ["autogroup:admin"],
		"tag:game-player": ["autogroup:admin"],
		"tag:relay-node":  ["autogroup:admin"],
		"tag:out-user":    ["autogroup:admin"],
	},

	// Define access control lists for users, groups, autogroups, tags,
	// Tailscale IP addresses, and subnet ranges.
	"acls": [
		// Allow all connections.
		// Comment this section out if you want to define specific restrictions.
		// {"action": "accept", "src": ["*"], "dst": ["*:*"]},
		// 允许 out-user 之间全互联
		{
			"action": "accept",
			"src":    ["tag:out-user"],
			"dst":    ["tag:out-user:*"],
		},
		// 允许 out-user 和 game-server 互相访问
		{
			"action": "accept",
			"src":    ["tag:out-user"],
			"dst":    ["tag:game-server:*"],
		},
		{
			"action": "accept",
			"src":    ["tag:game-server"],
			"dst":    ["tag:out-user:*"],
		},
		// 允许 home-pc 和 out-user 互相访问
		{
			"action": "accept",
			"src":    ["tag:home-pc"],
			"dst":    ["tag:out-user:*"],
		},
		{
			"action": "accept",
			"src":    ["tag:out-user"],
			"dst":    ["tag:home-pc:*"],
		},
		// 允许其他 tag 之间全互联
		{
			"action": "accept",
			"src": [
				"tag:home-pc",
				"tag:home-server",
				"tag:work-pc",
				"tag:game-server",
				"tag:game-player",
				"tag:relay-node",
			],
			"dst": ["*:*"],
		},
	],


	// Define users and devices that can use Tailscale SSH.
	"ssh": [
		// Allow all users to SSH into their own devices in check mode.
		// Comment this section out if you want to define specific restrictions.
		{
			"action": "check",
			"src":    ["autogroup:member"],
			"dst":    ["autogroup:self"],
			"users":  ["autogroup:nonroot", "root"],
		},
	],

	"derpMap": {
		// OmitDefaultRegions 用来忽略官方的中继节点
		"OmitDefaultRegions": true,
		"Regions": {
			"905": {
				"RegionID":   905,
				"RegionCode": "cd",
				"RegionName": "",
				"Nodes": [
					{
						"Name":     "905",
						"RegionID": 905,
						"HostName": "",
						"DERPPort": ,
						"STUNPort": ,
					},
				],
			},
		},
	},
}