hi. Are you add only 0.0.0.0/1 as route, not 128.0.0.0/1 too? Did you tried to add route to 5.6.7.8 via C with lesser metric then via B?
If you have to add static routes only on a few servers, you can add them to the $HOST-up scripts. On Mon, Feb 29, 2016 at 11:12 AM, Zhang Jun <[email protected]> wrote: > my network: > > local pc(192.168.1.2)-->openwrt_adsl_router A( > 192.168.1.1/24&11.22.33.44pppoe&10.10.10.1/24 tinc)<---remote B: > 10.10.20.1/24 > ^ > | > remote C:10.10.0.1/24 > > > all running tinc 1.0.x, > > ADSL router runs as a "server"(only one tinc instance), listening on some > port, > client B and C connect to ADSL router, > from my pc I need to: > 1. Access B's subnet 192.168.50.1/24 > 2. Access some WAN websites via C > 3. no traffic between B and C > 4. other traffic goes to pppoe interface by default > > here are the config files: > A: router > > tincd.conf: > device = /dev/net/tun > name = vpn > interface = vpn > addressFamilay = ipv4 > > ## > Address=xxx.dyndns.org > Port=xxx port > subnet=10.10.10.0/24 > Subnet=192.168.1.0/24 > > ##tinc-up: > ifconfig vpn 10.10.10.1/24 up > route add -host 10.10.0.1 dev vpn > route add -net 10.10.0.0/24 gw 10.10.0.1 > > route add -host 10.10.20.1 dev vpn > route add -net 10.10.20.0/24 gw 10.10.20.1 > route add -net 192.168.50.0/24 gw 10.10.20.1 (requirement .1) > > route add -net many websites networks gw 10.10.0.1 (requirement .2) > ... > ########################### > B: > connectTo=vpn > ## > Subnet=10.10.20.0/24 > Subnet=192.168.50.0/24 > > ## > ifconfig Binc 10.10.20.1/24 up > route add -host 10.10.10.1 dev Binc > route add -net 10.10.10.0/24 gw 10.10.10.1 > route add -net 192.168.1.0/24 gw 10.10.10.1 > echo "1" > /proc/sys/net/ipv4/ip_forward > iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE > > ########################### > C: > connectTo=vpn > ## > Subnet=10.10.0.0/24 > Subnet=0.0.0.0/1 ----------> this line only exists in server > C:/etc/tinc/hosts/C, but I guess it can be learned by router node > > ## > ifconfig Cinc 10.10.0.1/24 up > route add -host 10.10.10.1 dev Cinc > route add -net 192.168.1.0/24 gw 10.10.10.1 > echo "1" > /proc/sys/net/ipv4/ip_forward > iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE > > ######################## > router has B and C host files, B don't have C's and C don't have B's host > file > > this works fine for me, > > but today, I need to access a WAN server(5.6.7.8) via B, so I added a > route: > route add -host 5.6.7.8 gw 10.10.20.1 (B) > I thought it should work like other routes, but the traffic still goes > through C, > after examine the config, I think the problem maybe because of only C has > "Subnet=0.0.0.0/1" > > my questions are: > 1. why packet has route with default gw to B can be routed to C ? is it > right behavior? > 2. how to route 5.6.7.8 via B ? add "Subnet=0.0.0.0/1" to B's host file ? > I have some trouble to test this now, because B is not easy to > access,(best way is let it connect to me) > also, even this way works, I don't want other networks's traffic(added > route for C) goes through B, or randomly. > 3. I removed "Subnet=0.0.0.0/1" from C, then all route(to WAN) via B/C > not work anymore, is there anyway to > let those "route add (WAN networks) gw 10.10.0.1" works without the > "Subnet=0.0.0.0/1" ? > > > > > > _______________________________________________ > tinc mailing list > [email protected] > http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc > > -- brgds Maxim Vorontsov
_______________________________________________ tinc mailing list [email protected] http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
