tinc - Nov 2012 - How could I implicitly set indirect routing

Hi,

I've created a VPN network using route mode with 8 nodes,for example
10.0.0.1-10.0.0.8

I've already set Every node's subnet to 10.0.0.0/24 and set forwarding
option to kernel.

After I deleted the default route table(ip route 10.0.0.0/24 dev tun) and added
the following route options:

ip route add 10.0.0.1 dev tun
ip route add 10.0.0.2 dev tun10 via 10.0.0.1

and then I tried trace route 10.0.0.2 still showing me it directly sent to
10.0.0.2 without relaying from 10.0.0.1.


What's wrong with that?

On Sat, Nov 10, 2012 at 10:48:33AM +0800, Misuzi wrote:
> I've created a VPN network using route mode with 8 nodes,for example
10.0.0.1-10.0.0.8
> 
> I've already set Every node's subnet to 10.0.0.0/24 and set
forwarding option to kernel.
In router mode, each node's Subnet should be unique. So in your case, you
should use /32 Subnets, not /24. I also don't think you should use the
Forwarding option.
> After I deleted the default route table(ip route 10.0.0.0/24 dev tun) and
added the following route options:
> 
> ip route add 10.0.0.1 dev tun
> ip route add 10.0.0.2 dev tun10 via 10.0.0.1
> 
> and then I tried trace route 10.0.0.2 still showing me it directly sent to
10.0.0.2 without relaying from 10.0.0.1.
> 
> What's wrong with that?
There is no such thing as a gateway route on a layer 3 network, the "via
10.0.0.1" part is simply ignored.

I do not know exactly what you want to accomplish, but I think you want to use
"Mode = switch". That way, the VPN works like a regular layer 2 switch
and the
ip route commands work as you intended.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20121110/35ab34bd/attachment.pgp>