Tailscale with subnets

Hi All,

I am hoping to make tailscale to access only particular subnet but not another. For some reason I am struggling to find documentation how to do that. Tailscale is installed from the apps area. Can somebody please point me in the right direction? If I uncheck the “host network” area - there are many options but I cannot find information about them.

As a side note - when completed entirely - I am hoping to have 2 instances of TS with one being in a DMZ and set it up to peer relay, allow access in 1 of the sub nets and restrict the access for another sub net.

Thank you,

B