Hi Guus, Thank you for the information, I need to brush up on my Linux routing information, as it is apparently not the same as Cisco :). Unfortunately I am still not getting any traffic to traverse the VPN.
On Sat, Sep 15, 2012 at 7:23 AM, Guus Sliepen <[email protected]> wrote: > The response "Destination Net Unknown" means that tinc does not know where > to > send packets with IP address 192.168.1.2 to. > I thought that since my route table had an entry for the entire 192.168.0.0/16 subnet from the tinc-up script it would not need a more specific route. Does this route not tell the server to send the traffic over the tunnel interface? 192.168.0.0 * 255.255.0.0 U 0 0 0 tun0 You should add "Subnet = 192.168.1.1" to hosts/server1, and "Subnet = > 192.168.1.2" to hosts/client1. Then the ping command should work. > I tried adding this to each host file but have not noted any difference. > Alternatively, you can use "Mode = switch" in tinc.conf and omit all the > Subnet > statements. > > Indeed this does work. However, I would rather not use switch mode as I would like to limit the broadcast domain and be able to set firewall rules on traffic if necessary. > I suggest the following configuration: > > hosts/server1: > > Address = 1.1.1.1 > Subnet = 10.18.73.0/24 > > server1's tinc-up: > > #!/bin/sh > ifconfig $INTERFACE 10.18.73.23 netmask 255.0.0.0 > > hosts/client1: > > Subnet = 10.0.2.0/24 > > client1's tinc-up: > > #!/bin/sh > ifconfig $INTERFACE 10.0.2.15 netmask 255.0.0.0 > > That way, you should be able to ping 10.0.2.15 directly from the server. > > I did not realize that the same IP address can be used on multiple interfaces. Unfortunately this does not work either. What I have noticed in the logs is that I both send and receive the ADD_SUBNET statements for each of the subnets in my host config files, but I don't see any change on the route tables. Shouldn't I be able to see a route in my route table for each of the routes that is added? Is there something I may be doing wrong with how it starts that is preventing it from making entries in the route table? Thanks for your help, Ryan
_______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
