Firstly, what type of things are you trying to allow your friend to do on your tailnet? I’ve had trouble in the past trying to get friends to connect to game servers across tailnets, but have been fine connecting friends to things like Jellyfin. Any information on this might be helpful to look over.