similar to: decentralised vpn with dynamic ips

Hello tinc users, i have the follow configuration: 1 client/server called master, it is always reachable from internet (with dyndns) 5 clients, that connects to the master and the other clients (all behind a router (NAT)) master-hosts-file: Address = ... Port = ... Subnet = ... Compression = 0 ---- key ----- client-hosts-files: Compression = 0 Subnet = ... ----- key ----- tinc.conf Name = ....

Dear all, I have 3 nodes: A, B and C. C has external IP and A and B are behind NAT. It turns out A and B route their traffic via the C, which they ConnectTo with; this instead of getting connection details from one another and contacting eachother directly (mesh style). The reason is, as I conclude from tincd debug output, is that they see the peer as having a minimum MTU of 0. I suspect this is

yes, I have these in C host file: Subnet=10.10.0.0/24 Subnet=0.0.0.0/1 Subnet=128.0.0.0/1 ## not metioned, because I think is maybe works in same as 0.0.0.0/1 B host file doesn't have 0.0.0.0/1 and 128.0.0.0/1 I only added one route to 5.6.7.8 via B, not via C On Mon, Feb 29, 2016 at 4:40 PM, Maxim Vorontsov <6012030 at gmail.com> wrote: > hi. > > Are you add only

Hello World, I have met tinc a few days ago and started with a simple connection between 2 machines. I have fallen in love witht tinc, it's very simple to configure, although I haven't used tinc in production yet, because of its simplicity I think it's very robust. I also like how the configuration is organized with hosts/ directory, up/down scripts. Thank you for such a great tool.

Hi there, I am using tinc since some monthes. I think the basic idea of extending vpn to a mesh of systems via tun/tap is great. And I think it is one of the useable developments compared to the much more complex vpn solutions I had used in the past. Great work. Setting up tinc I have fought with the configuration (and with the concepts) for a while as I have found no example that covers my

Hello Lars, Thanks for your feedback. Unfortunately I made an error in writing the network I expected to connect to. I meant 10.3.0.0/24 The one I wrote in fact was one network of the already established VPN. I have included full details of my relevant files below. Background: I am trying to set up a second VPN between two servers: gtdb and db2. Both servers are already part of separate

my network: local pc(192.168.1.2)-->openwrt_adsl_router A( 192.168.1.1/24&11.22.33.44pppoe&10.10.10.1/24 tinc)<---remote B: 10.10.20.1/24 ^ | remote C:10.10.0.1/24 all running tinc 1.0.x, ADSL router

Hi there! I'm totally new to the concept 'self-made VPNs' :P I've discovered tinc and I think it's not as easy as hamachi, but not so hard as OpenVPN :D Now: I've got 4 questions: question n.1: I'm behind a router. This router is configurable, but I'm also behind a provider's NAT (private IPs with a common public IP). Will tinc work, or it will do as

Hi Ok I have a simple lab setup with three nodes , one acting as the "Central Node" and the other two as remote nodes which "*ConnectTo*" the central node in order to be able to communicate with each other. What I would like to know is , once the tinc remote nodes establish a connection to the "Central Node" , my understanding was that if the remote nodes want to

On Mon, Dec 08, 2014 at 11:02:24PM -0500, md at rpzdesign.com wrote: > The self contained example is tricky because I created 4 ip-address on > the eth0 device (192.168.1.30/31/32/33) so I could test a 4 node VPN > that lives entirely within a single server. That's quite hard to do, it's far easier to run four instances of tinc on four different ports on the same machine. >

Hi All, I have two networks: 10.10.20.0/24 and 10.10.30.0/24 The two networks can talk IPv4 to eachother, but only subnet 10.10.20.0/24 has access to the public internet, whereas 10.10.30.0/24 cannot reach the public internet. I have a windows host on the 10.10.30.0/24 network at 10.10.30.50 and I would like to use tinc to connect the windows host to my linux workstation at 10.10.20.40 to

Hi there, Following situation: 3 nodes, Alpha (Home fileserver), Beta (regular PC), Gamma (Notebook). All three in a NATed LAN usually, though the notebook also gets carried around and connects from the outside from time to time. Tinc should help me keep my other 2 PCs reachable from Gamma, even when I'm not at home. Also I plan on maybe adding more nodes to that in the future. I have set

Hi, I want a way to remove/deny a node from the vpn without restarting all nodes. What i did is to remove the hostfile and the ConnectTo but the node i removed is still connected. I did do a kill -HUP. How do i purge the node that i removed, without effecting the other nodes ? Greeting from Amsterdam. Perry

Hi I am a user of openVPN and am keen to explore tinc to help with a specific problem. My example - I have 10 computers all connected to internet via mobile broadband and public apns. all wan ip addresses are dynamic and change often - there is no machine or point with a static ip. I am not allowed to use any third party services like dyndns. I want each computer to continue to be able to

Hi to everybody, I want create a VPN with some PC clients and only one server, instead of LAN-to-LAN, but I'm not very sure how to do this. For example, I need to have: - Server LAN -------- (192.168.0.1/24) ---- tinc-VPN ---- (192.168.100.1/24) - Client-01 LAN --- (192.168.50.1/24) ---- tinc-VPN ---- (192.168.100.10/24) - Client-02 LAN --- (192.168.80.1/24) ---- tinc-VPN ----

Hi Team, I admit that I am not familiar with Tinc very well, but have Tinc running at approximately 20 sites and functioning as a mesh vpn/network. I am having issues adding an additional site as it will not communicate with the rest. I have taken the firmware of one and flashed it on another router to make it duplicate and then tested it working but when I change the hostname, and IP to what we

I have a use case where my tinc.conf ConnectTo can go upto 20 + hosts. I am planning to automate a periodic cleanup of ConnectTo in the tinc.conf file, the issue is I am not able to figure out which ConnectTo is been used and which are stale, say NOT used in last 2 to 3 days. I want to remove those ConnectTo which are no longer actively used. Is it possible to find which ConnectTo are not used.

Hello! I use tincd to interconnect 3 LANs: A, B and C. So long, it works fine: everybody reaches everybody. But I want a different behavior: A and B should be allowed to talk, as should B and C. I tried to simply delete the host-files on the nodes that should not be allowed to talk to eachother: A has a hostfile from B B has a hostfile from A and C C has a hostfile from B But this is no

Hello, I have tried for days on end with no success on this, so I thought I would post it here and see if someone can help me at all. *Here's the scenario:* I have 1 PC with a Static IP/Domain (a dyndns.org account - myserver.homeip.net) connected to a router, which in turn is the gateway to the internet. It also has a static local IP (192.168.1.2). I will call this the "server"

Hi Guus Thanks for clarifying. Some follow up questions: - How do we patch 1.1pre14 with this fix? Or will there be a 1.1pre15 to upgrade to? - What is the workaround until we patch with this fix? Using a combination of AutoConnect and ConnectTo? - When we use ConnectTo, is it mandatory to have a cert file in the hosts/* dir with an IP to ConnectTo ? -nirmal On Tue, Aug 22, 2017 at 12:10