Connecting to VPN

Connecting to Tailscale

1. Disconnect from and exit any VPNs that might already be running (other than Tailscale)

2. If you are on an AI2-managed Mac, go to your Applications folder and open Tailscale. Otherwise, download Tailscale from Download | Tailscale and launch the app. It will launch to your top menu bar.

3. Click the Tailscale icon in the menu bar and click Log in…

4. Choose Sign in with Google and authenticate with Google/Okta

5. Click the Connect button to add your device to the AI2 Tailscale network

6. Now that you’ve signed in and added your machine, Tailscale will automatically launch itself on startup and will stay connected unless you manually disconnect. 

There are three ways to reach resources through Tailscale:

• You can access all resources on the AI2 network using the FQDN, e.g. allennlp-cirrascale-01.reviz.ai2.in. This includes hardware and cloud resources on our networks that are not directly running Tailscale. 

• For a resource running Tailscale directly, you can use its Tailscale name, which is the hostname portion of the FQDN, e.g. allennlp-cirrascale-01. This name resolves to its Tailscale IP address. You can see a list of available resources in the Tailscale app under Network Devices - Tagged Devices.

• If you click the name of a resource in the Network Devices - Tagged Devices list in the Tailscale app, it will copy the Tailscale IP address of the resource to your clipboard and can be pasted wherever you need.
  
  

  Open

  

Troubleshooting

• If you are unable to connect to resources while on Tailscale or unable to connect to the internet, exit Tailscale completely from the application icon, then re-launch. This causes a number of resets and will resolve most connection issues.
  
  

  Open

  

• If unable to connect to a resource using its FQDN, try using its Tailscale name, e.g. prior-elanding-75 

  • This is particularly helpful if you are connecting from a hotel, university, or other corporate location, as oftentimes their IP address range conflicts with ours. When using Tailscale hostnames, it uses a reserved IP range, so you will never encounter conflicts with your local network.

• If unable to access a resource using its Tailscale name, try using its FQDN, e.g. prior-elanding-75.reviz.ai2.in

  • These two methods take different routes, so often if one is not routing properly, the other will work