Great catch on the Mint202 bit (of course it was a great catch. You wrote this software!).
Here's the cat. It doesn't have any directives other than the RSA key, which may be a problem. But, I have tried it with the Name=Mint202 and Subnet= directives with the same results. However, I have always put the subnet in as the IP range, which you have advised against. I am going to change the subnet to a single IP as you suggested, and I'll advise on my progress. For historical reference, here's what Mint202 had when I sent my configs a few minutes ago. root@web-services:/etc/tinc/webservices/hosts# cat Mint202 -----BEGIN RSA PUBLIC KEY----- MIIBCgKCAQEAzkkYpNIWSrm1kNXQ9PXYZR4SALGUtDY/iKHVGF2oqvsoKhl5hENi iNw9QqUtKUSDuJxP8w2AbeHBYaqr9kVyw3c/2Vzp1oGIxpbtMRcSEDJUcgJlpNeJ 8iEvjEPUiliLNrfnpu7dEk8gT6Fu+b9PR1n/5JnLueny3i0p8+qbA5/z4KUqVQCH nQqcDQ+8DY2Otrljae6YwEMgtShtUNA6nkUfJ61Y/2UITL6RQP7rAXbn3kJYozm/ gjJPQhW0oUlTSFwM2qziGIj68KrUXBj6V3VjInuVdAgFii6B2aXI+qUst705B/Bw +BZIsQxiKNruU+gi/+aQx2mtP2YPiTYk1QIDAQAB -----END RSA PUBLIC KEY----- Thanks again for an awesome package. -Michael ________________________________________ From: tinc [[email protected]] on behalf of Guus Sliepen [[email protected]] Sent: Tuesday, March 11, 2014 4:31 PM To: [email protected] Subject: Re: Cannot Ping after successful connection? On Tue, Mar 11, 2014 at 08:21:42PM +0000, Michael Munger wrote: > I apologize for the TLDR-style email, but I wanted to demonstrate that I have > done a lot of work (11 hours and at least 8 tutorials including the tinc > docs) before asking for help. No problem, you clearly explained your intentions, the setup and the configuration files, that really helps. > My basic problem is this: tinc appears to properly connect and authenticate > the client to the server, but I cannot ping or access resources. [...] > root@web-services:/etc/tinc/webservices/hosts# cat webservices > Compression=9 > Subnet=192.168.98.0/24 > Address=173.165.161.166 > > root@web-services:/etc/tinc/webservices# cat tinc-up > #!/bin/bash ifconfig $INTERFACE 192.168.98.1 NETMASK 255.255.255.0 [...] > root@michael-desktop:/etc/tinc/webservices/hosts#cat webservices > Compression=9 > Subnet=192.168.98.0/24 > Address=173.165.161.166 I assume you meant to cat Mint202 here, but I suspect that you have Subnet=192.168.98.0/24 in hosts/Mint202 as well. The Subnet statements should not contain the address range of the whole VPN, but rather that part of the range that belongs to each individual node. So, you should have Subnet=192.168.98.1 in hosts/webservices, and Subnet=192.168.98.2 in hosts/Mint202. Other than that, your configuration looks fine, and you should not have to change anything else. -- Met vriendelijke groet / with kind regards, Guus Sliepen <[email protected]> _______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
