On 05/10/2016 16:13, Kismet Agbasi wrote: > I have a 4 Node Tinc VPN setup with 2 nodes on my LAN and the other 2 > outside the LAN in the cloud. Everything has been working great for about 5 > years now, until today when I decided to move one of the nodes to another > box. Hi Kismet, Just thought I'd jump in here as I do a lot of this kind of thing, and in case you haven't got a solution yet, I'd like to verify a couple of simple things before you go down any of the wrong rabbit-holes. :)
> I basically, copied over the /etc/tinc folder to the new server and > also moved the /etc/network/interfaces file, so that the new server was an > exact mirror (more or less). Fine, but yes, there are a number of things missing to qualify for exact mirror. > > > But I think I may have forgotten something because while all my nodes can > ping each other using the VPN IPs (i.e., 10.9.0.x), I can't seem to ping my > LAN (i.e., 172.23.6.x) from any of the external nodes. > At this point I'm unsure of which information to provide in order to elicit > some assistance, The two other keys pieces of information that were missing about your new server are the firewall rules and kernel forwarding. Did you remember to activate kernel ip forwarding? i.e. echo 1 > /proc/sys/net/ipv4/ip_forward ? Now, I note that in a later post you have said: > I was able to confirm that the packets are indeed reaching the INSIDE node and when I saw that I was about to cancel my reply, but.. maybe I can get you to confirm what you mean by INSIDE node? Do you mean the node on the LAN that runs tinc, or a node that does not run tinc? k/ _______________________________________________ tinc mailing list [email protected] https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
