No subject


Mon Sep 20 15:00:41 CEST 2010


*is* on a network computer A belongs to, the 10.30.1.0/24 network.  So it
will do an ARP request (broadcast) to get the MAC address associated with
the 10.30.1.130 IP.   The local Tinc gateway will ultimately (I believe,
Guus can speak on this with more authority than I can) perform the job of
proxy ARP to get the traffic to the destination on the other side of the
VPN.

Regards,
Donald

On Thu, Oct 7, 2010 at 9:57 PM, Andrew Savinykh <andrews at brutsoft.com>wrote:

>  I'm sorry that I'm asking basic networking question in specialized mailing
> list, if this is  inappropriate please let me know.
>
> But there is still something that I don't understand regarding the
> conversation below. Even if I assign each PC a new IP,  how routing will
> work?
> I can put new IPs on the computers, but router will know nothing about them
> and because of it I don't see how PCs can see each other by these new IP
> addresses.
>
> Andrew.
>
>
> On 7/10/2010 2:14 p.m., Donald Pearson wrote:
>
> Sure it's possible, you just need to assign each node a new IP in the
> 10.30.1.0/24 network.  It's not part of the Tinc configuration, it's part
> of the network configuration of each computer.
>
> All Tinc is doing, is creating a layer 2 path for them to reach each
> other.  Yes broadcasts will traverse the VPN.  It literally is virtual
> ethernet over the internet.  :)
>
>
>

--20cf300fafcd9320ae049212622b
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Computers on the same subnet don&#39;t route to each other.=A0 Routing is b=
etween different networks.=A0 All of your computers will be on the same <a =
href=3D"http://10.30.1.0/24">10.30.1.0/24</a> network, in additional to the=
ir other respective networks.<br>

<br>So for example.<br><br>Computer A has the IPs<br><a href=3D"http://192.=
168.1.2/24">192.168.1.2/24</a><br><a href=3D"http://10.30.1.2/24">10.30.1.2=
/24</a><br><br>Computer B has the IPs<br><a href=3D"http://10.0.0.2/24">10.=
0.0.2/24</a><br>

<a href=3D"http://10.30.1.130/24">10.30.1.130/24</a><br><br>Computer A will=
 be able to reach computer B using it&#39;s 10.30.1.130 IP address, but not=
 its 10.0.0.2 address.<br><br>From Computer A, when you try to ping 10.0.0.=
2, it will know that this IP is not on a network computer A belongs to (Not=
 the <a href=3D"http://192.168.1.0/24">192.168.1.0/24</a> or <a href=3D"htt=
p://10.30.1.0/24">10.30.1.0/24</a> networks) so it will send the packet to =
its gateway of last resort.=A0 That IP space isn&#39;t publicly routable ho=
wever so it&#39;s just going to be dropped.<br>

<br>From Computer A, when you try to ping 10.30.1.130, it will know that th=
is IP *is* on a network computer A belongs to, the <a href=3D"http://10.30.=
1.0/24">10.30.1.0/24</a> network.=A0 So it will do an ARP request (broadcas=
t) to get the MAC address associated with the 10.30.1.130 IP.=A0=A0 The loc=
al Tinc gateway will ultimately (I believe, Guus can speak on this with mor=
e authority than I can) perform the job of proxy ARP to get the traffic to =
the destination on the other side of the VPN.<br>

<br>Regards,<br>Donald<br><br><div class=3D"gmail_quote">On Thu, Oct 7, 201=
0 at 9:57 PM, Andrew Savinykh <span dir=3D"ltr">&lt;<a href=3D"mailto:andre=
ws at brutsoft.com">andrews at brutsoft.com</a>&gt;</span> wrote:<br><blockquote =
class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; border-left: 1px =
solid rgb(204, 204, 204); padding-left: 1ex;">



 =20
   =20
   =20
 =20
  <div bgcolor=3D"#ffffff" text=3D"#000000">
    I&#39;m sorry that I&#39;m asking basic networking question in speciali=
zed
    mailing list, if this is=A0 inappropriate please let me know.<br>
    <br>
    But there is still something that I don&#39;t understand regarding the
    conversation below. Even if I assign each PC a new IP,=A0 how routing
    will work? <br>
    I can put new IPs on the computers, but router will know nothing
    about them and because of it I don&#39;t see how PCs can see each other
    by these new IP addresses.<br><font color=3D"#888888">
    <br>
    Andrew.</font><div class=3D"im"><br>
    <br>
    On 7/10/2010 2:14 p.m., Donald Pearson wrote:
    <blockquote type=3D"cite">Sure it&#39;s possible, you just need to assi=
gn each node
      a new IP in the <a href=3D"http://10.30.1.0/24" target=3D"_blank">10.=
30.1.0/24</a> network.=A0 It&#39;s not
      part of the Tinc configuration, it&#39;s part of the network
      configuration of each computer.<br>
      <br>
      All Tinc is doing, is creating a layer 2 path for them to reach
      each other.=A0 Yes broadcasts will traverse the VPN.=A0 It literally
      is virtual ethernet over the internet.=A0 :)<br>
      <br></blockquote></div></div><br></blockquote></div><br>

--20cf300fafcd9320ae049212622b--


More information about the tinc mailing list