Problems getting tinc running

[Guus Sliepen]

On Mon, Feb 16, 2004 at 10:57:43PM -0000, Russell Horn wrote:

> So, my question (if I still have any question points left) is given my
> network configurations, how should I be configuring tinc to connect the
> two and get data to flow? 
> 
> Do I make a new subnet altogether for the VPN? If so, can anyone point
> me in the direction of how to get data to flow between the networks?

You can, but you can also use the subnets you are already using.

> The office is 10.0.0.3 on network 10.0.0.0/24 with an external IP of
> 1.2.3.4

In that case, you should put "Address = 1.2.3.4" and "Subnet =
10.0.0.0/24" in hosts/office.

> Home is 192.168.0.1 on network 192.168.0.0/24 with an external IP of
> 5.6.7.8

And "Address = 5.6.7.8" and "Subnet = 192.168.0.0/24" in hosts/home.

As for routing in between them, it works just like routing between real
network cards. So in office's tinc-up you should put something like:

#!/bin/sh
ifconfig $INTERFACE 10.0.0.3 netmask 255.255.255.0
route add -net 192.168.0.0 netmask 255.255.255.0 dev $INTERFACE

And home's tinc-up is completely analogous.

> I'm happy to do more reading if anyone has any pointers. I've been
> through the manual however and would really like to see this work.

http://www.linux-ip.net/

If you have masquerading firewalls, you should either try to let them
forward tinc's traffic (http://tinc.nl.linux.org/examples/) or use
"TCPOnly = yes" (see manual) to let tinc tunnel everything over TCP.

-- 
Met vriendelijke groet / with kind regards,
    Guus Sliepen <guus at sliepen.eu.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://brouwer.uvt.nl/pipermail/tinc/attachments/20040217/a4bac9c8/attachment.pgp