- Implementation of a WireGuard-based mesh virtual private network to interconnect devices without opening ports on the router.
- Replacing direct exposure of RDP port 3389 with the use of secure private IPs and MagicDNS names.
- Ability to bypass CG-NAT restrictions and manage remote access across multiple operating systems for free.
You've probably been there: you need to access your home or office computer from somewhere else, and you've gone crazy trying to configure the router. The first thing that usually comes to mind is opening port 3389 to enable Windows Remote Desktop, but honestly, that's play with fireThe solution involves using Remote Desktop through tailscale. Here we'll explain to you how to do it.
Instead of struggling with the public IP or the dreaded CG-NAT, you create a secure and encrypted network where each device has its own internal IP address, allowing you to connect your laptop to the desktop PC as if you were plugged into the same cable, but from anywhere in the world.
What exactly is Tailscale and how does it work?
Basically, Tailscale is a networking solution based on the WireGuard protocol, which guarantees that the connection is extremely fast and secureUnlike typical commercial VPNs that route all your traffic through their own servers, Tailscale establishes point-to-point connections. This means that data travels directly between your machines, achieving a extremely low latency and a much higher actual speed.
The best part is that you don't need to be a networking expert to get started with Remote Desktop through Tailscale. Forget about setting up complex VPN servers or configuring impossible firewall rules on your router. Simply install the client on each device, log in with your account (Google or Microsoft), and voilà! You're all set. node added to your network virtual private.
This service is compatible with a wide range of platforms, from Windows and macOS to Linux, Android, and iOS, and even works flawlessly on Raspberry Pi. Furthermore, it offers a very generous free version for personal use that allows you to connect up to 100 deviceswhich is more than enough for any home environment or small office.
Step-by-step setup for Remote Desktop
If you want to start using Windows RDP with this tool, the first step is to install the Tailscale client on both computers: the one you'll be controlling (host) and the one you'll use to connect (client). Once installed, you should Log in with the same account in both so that they recognize each other within your private network, technically known as a tailnet.
However, there is a critical point when using Remote Desktop through Tailscale: you must ensure that you have a compatible Windows versionNative Remote Desktop only acts as a server on Windows Pro, Enterprise, or Education. If you have Windows Home, you can connect to others, but you can't allow others to access your machine natively. Once you've verified this, go to Settings > System > Remote Desktop and activate the option to allow connections, as indicated in the Enable and disable remote desktop in Windows.
Another detail that often causes problems is the username. RDP doesn't work well with accounts that don't have a password. So make sure your Windows user account has one. real and robust keyIf you use a Microsoft account, you will sign in with your email address; if it is a local account, you will need to use the format NOMBRE-PC\usuario.
To connect, do not use your home's public IP address. Open the Tailscale client on the remote PC and search for its private IP address (which usually starts with 100.xxx). On your client computer, press the Windows key + R, type mstsc and press Enter. In the computer field, enter that Tailscale IP address and click connect. You'll see that you're logged into your session. without having touched a single port from the router.
Advanced tricks: MagicDNS and Subnet Routers
Remembering IP addresses is a pain, that's why Tailscale includes a feature called MagicDNSBasically, it assigns a human-readable name to each device (like "office-pc" or "home-laptop"). Instead of typing the IP address into the Remote Desktop application, you can simply Enter the hostname and the connection will be established automatically, making it much easier to manage multiple devices.
If you have devices at home that don't allow Tailscale to be installed (such as an older printer, a router, or certain IP cameras), you can configure a Subnet RouterThis involves telling a computer that already has Tailscale installed to act as a gateway for the rest of the local network. This way, from your remote laptop, you can access your entire physical subnetwork as if you were right there, sharing access to NAS folders or the router's management interface.
Another jewel in the crown is the Exit Node (Egress node). If you enable this option on your home PC, you can route all internet traffic from your remote device through that computer. This is ideal if you're in a foreign country and want to browse with a Spanish IP to access local content or if you are on a public WiFi network and want to add an extra layer of end-to-end encryption.
Troubleshooting common problems and errors
Sometimes, when we want to use Remote Desktop through Tailscale, things don't go smoothly the first time. If Tailscale says you're connected but Remote Desktop isn't working, the first thing to check is that the remote PC hasn't been... automatically suspendedIf the device enters power-saving mode, the connection will be lost. Adjust the power settings so that the device remains powered on while you need remote access, thus preventing this. Windows 11 Remote Desktop issues.
If the command ping Normally it fails but the tailscale ping Don't panic. It's likely that the Windows firewall is blocking the ICMP protocol, but RDP can continue to function Perfect. Don't focus so much on the traditional ping, but rather on verifying that both nodes appear as "online" in the Tailscale web administration panel.
Regarding security, it's normal to see a warning about the security certificate when connecting. Since you're connecting to your own machine using a private IP address, you can Ignore the warning and continueIt's always recommended to keep your client updated and remove any unused devices from your network to maintain the hygiene of your tailnet, especially for How to find out if someone is using your PC's remote desktop.
This workflow allows for seamless interconnection of teams, eliminating reliance on third-party software like TeamViewer or AnyDesk, which can sometimes become unstable or limit usage. By combining the power of WireGuard with the simplicity of Tailscale, we achieve a system of professional remote access, shielded against external intruders and fully adaptable to any type of internet connection, even the most restrictive.
Editor specialized in technology and internet issues with more than ten years of experience in different digital media. I have worked as an editor and content creator for e-commerce, communication, online marketing and advertising companies. I have also written on economics, finance and other sectors websites. My work is also my passion. Now, through my articles in Tecnobits, I try to explore all the news and new opportunities that the world of technology offers us every day to improve our lives.