Technical Anshu
Tutorials Blog
🌐 Remote Access Without Static IP

Access Office PC From Home Without Static IP Using Tailscale

Your office internet has no static IP, the ISP is charging extra for one, and remote access through port forwarding keeps breaking. There is a cleaner way — a private Tailscale network that works on any connection.

✍️ Technical Anshu🪟 Windows 10 / 11⏱️ 8 minute read
🎥 Watch the full video — the complete Tailscale office setup, shown live step by step

The classic office problem looks like this. Your company runs an RDP server or a Tally server on the office network, staff need to reach it from home, but the office connection has only a dynamic IP. The ISP quotes an extra charge for a static IP — around ₹2,000 in the case shown in the video — and at some locations the ISP simply refuses to give one at all. Tailscale removes the problem completely. It builds a private, encrypted network between your own devices, so the office PC is reachable from anywhere without a static IP, without a domain, and without opening any port on the router.

Tailscale Admin Console — Machines
🖥️ office-pc — this office server100.84.12.37
💻 home-laptop — your laptop at home100.91.55.8
📱 android-phone — for quick checks100.77.20.114
🖥️ branch-pc — second office100.103.41.62
☝️ Every device gets its own permanent 100.x address — this address never changes, even when the internet IP changes daily
1

Understand Why the Old Method Keeps Failing

Port forwarding points the whole internet at one address — your router's public IP. With a dynamic IP that address changes whenever the router restarts or the ISP session refreshes, so your saved connection stops working. DDNS patches this only partly, and if your ISP has put you behind CGNAT, forwarding cannot work at all, no matter how correct the settings are.

  1. Tailscale takes the opposite approach — both PCs connect outward to each other through an encrypted WireGuard tunnel
  2. No inbound port is opened, so a changing IP or CGNAT makes no difference
  3. Only devices signed in to your Tailscale account can even see the office PC
2

Install Tailscale on the Office PC

Do this on the machine that hosts your RDP server, Tally server, or the shared office data.

  1. Download Tailscale for Windows from the official Tailscale website and install it
  2. Sign in with your Google, Microsoft or GitHub account — this creates your private network, called a tailnet
  3. Leave Tailscale running. It starts with Windows automatically and reconnects on its own after every restart
  4. On this same PC, make sure the service you actually need is ready — for example Remote Desktop is enabled, or the Tally server is running
3

Install Tailscale on the Home Device and Sign In

  1. Install Tailscale on the home laptop, PC or phone you will connect from
  2. Sign in with the same account — the two devices now appear in the same tailnet
  3. Open the Tailscale admin console in a browser and confirm both machines are listed and connected
  4. Honest note on plans — the free Personal plan is fine for one person or a very small setup. A company rolling this out to many staff should use a proper business plan, which is still usually cheaper and far safer than exposing servers on a static IP. Check the current plan limits on the Tailscale pricing page before a big rollout
4

Note the Office PC Tailscale Address

Every device gets a permanent address in the 100.x.x.x range. This is the address you will always use — it does not change when the router restarts or the ISP gives a new public IP.

  1. Click the Tailscale icon in the system tray of the office PC to see its 100.x address
  2. Or open Command Prompt on the office PC and run tailscale ip -4
  3. Turn on MagicDNS in the admin console and you can also reach the PC by its name, like office-pc, instead of numbers
  4. From home, run tailscale status any time to confirm the office PC is online
5

Connect With Remote Desktop or Tally

  1. For the full desktop — open Remote Desktop Connection (mstsc) on the home PC
  2. Type the office PC's Tailscale 100.x address instead of any public IP, and sign in with the office PC's Windows username and password
  3. For Tally — in Tally on the home PC, point the company data at the Tally server running on the office PC using its Tailscale address (Tally's data server uses port 9000 by default)
  4. The session runs inside the encrypted tunnel — from the internet's side, your office shows no open ports at all
6

Lock the Setup Down Properly ⭐

A private network is only private if the account guarding it is strong. Finish with these steps.

  1. Protect the Tailscale account with a strong password and two-factor authentication — this account is now the key to your office
  2. In the admin console, remove any device you do not recognise and disable key expiry only on the office server, so it does not log itself out
  3. If you had earlier forwarded port 3389 on the router for RDP, delete that forwarding rule now — you no longer need it
  4. Keep a strong password on the office PC's Windows account too — Tailscale guards the road, the Windows login still guards the door
⚠️ The most important line in this guide: never publish RDP directly on the internet with a port forward. Scanners find open 3389 ports within minutes and attack them day and night. The whole point of the Tailscale method is that your office PC stays invisible — only your own signed-in devices can reach it.

🎥 Watch the Complete Setup in the Full Video

Installing Tailscale, connecting the office and home PCs, and using RDP and Tally from home — the entire workflow is shown live in the video.

▶️ Watch Full Video
❓ Frequently Asked Questions

Does Tailscale work if my ISP has put me behind CGNAT?

Yes. Tailscale connections are made outward from both devices and meet through Tailscale's coordination and relay system, so no inbound connection to your router is ever needed. CGNAT, dynamic IPs and double routers — the three things that kill port forwarding — do not block it.

Will my Tailscale IP address change like my internet IP does?

No. The 100.x address Tailscale assigns to a device stays the same for that device. Your router can restart and your ISP can hand you a new public IP every day — the address you type into Remote Desktop or Tally never changes.

Is Tailscale fast enough for daily RDP and Tally work?

For RDP and Tally, yes, comfortably. Tailscale tries to build a direct peer-to-peer WireGuard connection between the two devices, which is fast. Only when a direct path is impossible does it fall back to encrypted relays, which still handle desktop and accounting work well.

This guide is based on the Technical Anshu no static IP remote access video • Stuck on any step? Ask in the video comments — help is available there 🙏