Switch mode three-node routing problem

[Guus Sliepen]

On Fri, Jan 10, 2014 at 05:50:57PM +0100, Микола Дімура wrote:

> I am using tinc in switch mode. I have three nodes. Two nodes reside on
> routers, vpn-eth is bridged with internal lan, each router has several
> machines connected to it's internal lan. Third node is the roadwarrior -
> "endpoint" linux PC.
> When the roadwarrior is off - everything works perfectly, machines on both
> sides can communicate without a problem in any direction. When I turn on
> the roadwarrior - everything goes crazy: packet loss becomes huge (90%)
> even for machines, which worked perfectly before, ping shows duplicate
> packets. When I turn off the roadwarrior again - everything returns to the
> working state.

That is strange indeed. Could you run tcpdump on the pvpn interface on one of
the routers, then run ping both when the roadwarrior is online and not, and
send me the results?

> Router1 and Roadwarrior3 are using tinc 1.0.23 version. Router2 uses
> v1.0.19 because newer is not present in the repository :(.

That should not be a problem.

> $ cat hosts/karl_router
> TCPonly = yes

Why did you enable TCPonly here?

> Roadwarrior3: $ cat /etc/tinc/pvpn/tinc.conf
> Name = daniel_mpc
> Mode = switch
> ConnectTo = central_router
> 
> Roadwarrior3: $ cat /etc/tinc/pvpn/tinc-up
> #!/bin/sh
> ifconfig $INTERFACE 192.168.3.150 netmask 255.255.0.0
> ifconfig $INTERFACE up

Are you trying out the road warrior while it is connected to the LAN of one of
the two routers?

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20140110/74f4ac10/attachment.sig>