1 Server, Multiple Client Setup

[Andrew Barlow]

Hello,

I managed to get a connection from masterserver to client1 up and running
all fine! So, thanks for that!

I also managed to get Client2 on the network, but I had to use IndirectData
to make it work, because its sitting behind the same firewall as
Masterserver. Client1 was trying to send data to 192.168.1.11 (The local IP)
on some random port number, so I guess Masterserver told it the wrong data
(could probably be fixed by setting the host of client2 on the server to use
a certain port and type the external ip manually - but alas).

However, when I knocked masterserver off the network by killing Tinc... it
knocked the other 2 machines off the VPN. Is that because they couldnt see
eachother in the first place because of the reason above? Or does
masterserver have to stay on because the "ConnectTo" setting is set on all
the clients?

Is this normal behavior?

If I had 2 clients on completely diffrent external IP's.. would they still
communicate after they'd authenticated against Masterserver, even if
Masterserver then went offline?

Cheers.

Andy
2009/3/5 Andrew Barlow <andrew.barlow at gmail.com>

> Sorry, thats what I meant.
>
> But that's cool that you can specify individual IP's. Means I can specify
> each client with a unique IP on the VPN.
>
> Right...
>
> Thanks for all that. Will head home and try it all out.
>
> Merci!
>
>
> Andy
>
> 2009/3/5 Guus Sliepen <guus at tinc-vpn.org>
>
>> On Thu, Mar 05, 2009 at 02:49:29PM +0000, Andrew Barlow wrote:
>>
>> > masterserver tinc.conf
>> >
>> > Subnet = 192.168.2.1
>>
>> No, Subnets should not go in tinc.conf but in the host config files.
>>
>> > Do I not need any subnet bits on the end? Such 192.168.2.1/*32* or
>> > anything??? This is the part i'm most confused about.. But I will trust
>> your
>> > instruction and give those settings a whirl when I get in.
>>
>> From the manual:
>>
>> "Subnets can either be single MAC, IPv4 or IPv6 addresses, in which case a
>> subnet consisting of only that single address is assumed, or they can be a
>> IPv4
>> or IPv6 network address with a prefixlength."
>>
>> --
>> Met vriendelijke groet / with kind regards,
>>     Guus Sliepen <guus at tinc-vpn.org>
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.9 (GNU/Linux)
>>
>> iEYEARECAAYFAkmv67QACgkQAxLow12M2nvvFACgj1DwqvLX7M7c6DHimqxcZwks
>> Ov4AoImp2PYlNEMcCHIr9ItidrebwKpi
>> =1Rar
>> -----END PGP SIGNATURE-----
>>
>> _______________________________________________
>> tinc mailing list
>> tinc at tinc-vpn.org
>> http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.tinc-vpn.org/pipermail/tinc/attachments/20090305/31933f78/attachment-0001.htm