<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {color:blue;
        text-decoration:underline;}
pre
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New";}
span.EstiloCorreo18
        {mso-style-type:personal-reply;
        font-family:Arial;
        color:navy;}
@page Section1
        {size:595.3pt 841.9pt;
        margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=ES link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hi,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Do you have activated the ip forwarding on
the tinc Server?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Ramses<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>De:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
tinc-bounces@tinc-vpn.org [mailto:tinc-bounces@tinc-vpn.org] <b><span
style='font-weight:bold'>En nombre de </span></b>Anon<br>
<b><span style='font-weight:bold'>Enviado el:</span></b> lunes, 01 de febrero
de 2010 18:34<br>
<b><span style='font-weight:bold'>Para:</span></b> tinc@tinc-vpn.org<br>
<b><span style='font-weight:bold'>Asunto:</span></b> Bridging on windows
networks</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<pre><font size=2 face="Courier New"><span style='font-size:10.0pt'>ALBI,<br>
<br>
Thanks for the help.<br>
<br>
Nothing I'm trying is working, yet.<br>
<br>
Perhaps we can simplify it?<br>
<br>
Let's bridge only one network, but leave the other two nodes (and their respective<br>
networks) alone. Hence, the IP addresses of the four computers I'm trying to put on <br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>a single vpn would be<br>
<br>
<a href="http://10.20.30.1/192.168.0.155">10.20.30.1/192.168.0.155</a><br>
xxxxxxxxxx/<a href="http://192.168.0.168">192.168.0.168</a><br>
<a href="http://10.20.40.1/192.168.1.155">10.20.40.1/192.168.1.155</a><br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'><a href="http://10.20.50.1/192.168.2.155">10.20.50.1/192.168.2.155</a><br>
<br>
Based on what you wrote, I should add the following to <a
href="http://192.168.0.168">192.168.0.168</a>:<br>
<br>
route ADD 10.20.0.0 MASK 255.255.0.0 192.168.0.155<br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'><br>
I should then modify all three hosts file on <br>
<a href="http://10.20.30.1/192.168.0.155">10.20.30.1/192.168.0.155</a> to add:<br>
<br>
Subnet <a href="http://192.168.0.0/24">192.168.0.0/24</a><br>
<br>
I prefer to do things one step at a time (connect one LAN to the existing <br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>vpn). That way I understand the process a little better.<br>
<br>
I think I'm close, but the above doesn't work. :(<br>
<br>
***********************************************************************<br>
***********************************************************************<br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'><br>
><i><span style='font-style:italic'> I tried to do what you say and Windows complains when I try to set the<br>
</span></i>TAP interface to the same IP address as the one in use by the LAN IP<br>
interface.<br>
><i><span style='font-style:italic'> Did you mean that I should set my vpn IP addresses as being on the same<br>
<br>
<o:p></o:p></span></i></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>192.168.x.0 set? Hence, I would show the above as:<br>
<br>
Yes. Sorry, didn't know that windows doesn't allow this. I normally use<br>
linux and there this is no problem. When I used windows, it was another<br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>network, so I never had this problem.<br>
<br>
<br>
Ok, lets try another way. Leave all as it works now.<br>
If you use switch mode, I prefer router mode in tinc.conf<br>
Don't know it will work in switch mode too.<br>
<br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>Add your local subnet in your hosts files:<br>
At tinc host 10.20.30.1<br>
Subnet = <a href="http://192.168.0.0/24">192.168.0.0/24</a><br>
At tinc host 10.20.40.1<br>
Subnet = <a href="http://192.168.1.0/24">192.168.1.0/24</a><br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>At tinc host 10.20.50.1<br>
Subnet = <a href="http://192.168.2.0/24">192.168.2.0/24</a><br>
<br>
Add static route to your tinc and other computers at local network for<br>
<a href="http://192.168.0.0/255.255.0.0">192.168.0.0/255.255.0.0</a><br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>For lan1 this should be something like:<br>
route ADD 192.168.0.0 MASK 255.255.0.0 192.168.0.155<br>
Maybe you need to add <a href="http://10.20.0.0/255.255.0.0">10.20.0.0/255.255.0.0</a> too. Add it, should be better.<br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'>route ADD 10.20.0.0 MASK 255.255.0.0 192.168.0.155<br>
On lan2 replace 192.168.1.155 for 192.168.0.155<br>
Check if your tinc host has routing actvated.<br>
Try to ping 10.20.30/40/50.1 from local computer in lan1<br>
Try to ping 192.168.1.xxx from local computer in lan1<br>
<br>
<o:p></o:p></span></font></pre><pre><font size=2 face="Courier New"><span
style='font-size:10.0pt'><br>
<br>
I hope it works.<br>
Now that I see what to do, I would not use 10.* network at all. Would be<br>
easier to use on network for transfer (tinc hosts) maybe in<br>
<a href="http://192.168.255.0/24">192.168.255.0/24</a> network and just use one ip for every tinc host. Rest via<br>
<br>
<o:p></o:p></span></font></pre><pre style='margin-bottom:12.0pt'><font size=2
face="Courier New"><span style='font-size:10.0pt'>routing like above.<br>
<br>
<br>
ALBI...<br>
<br>
<o:p></o:p></span></font></pre></div>
</body>
</html>