Hi, I am triying to configure a VPN, my configuration files are: ****************** TINC.CONF: Name = nova # The internet host to connect with. ConnectTo = nova2 Device = /dev/net/tun #Device name.. Leave as is. Interface = vpn #Virtual Interface name. Give any suitable name. #Mode = "router" #use Router mode PrivateKeyFile = /etc/tinc/testVPN/rsa_key.priv ************************* tinc-up #!/bin/sh # Set hardware ethernet address, needed on Linux when in router mode ifconfig $INTERFACE hw ether fe:fd:0:0:0:0 # Give it the right ip and netmask. Remember, the subnet of the # tap device must be larger than that of the individual Subnets # as defined in the host configuration file! ifconfig $INTERFACE 192.168.1.7 netmask 255.255.255.0 # Disable ARP, needed on Linux when in router mode ifconfig $INTERFACE -arp #Add a route to the other network route add -net 192.168.2.0 netmask 255.255.255.0 dev $INTERFACE **************************************** /hosts/nova nova Address = xxx.xxx.153.226 #IP address of the tinc host. #Cipher = blowfish #Cipher to be used. (none for no cipher) Cipher = none #Compression = 9 #Compression level to be used. (0 for no compresion) Compression = 0 #Digest = sha1 #HMAC to be used (none for no HMAC) Digest = none #IndirectData = no Subnet = 192.168.1.0/24 #Subnet that this host is connected to. -----BEGIN RSA PUBLIC KEY----- MIGJAoGBAKsQbbC+CXd/tShV9PWhimnYBF+lJ+K2HRsCYJOmokXhETt9YmbfXcXB twW+o0bTQtKl8XORTYsCCo97im6Ofhce+hfFw7RFWMwLbSrT6LRn7I5GzE7Biv/R RSRGCBhHdoWGByKattvkO5JxeXU8O4sohxHkikIK7Z5DKG5SwMpHAgMBAAE-----END RSA PUBLIC KEY----- I start the vpn with: tincd -n testVPN --debug=5 -D but I get: tincd -n testVPN --debug=5 -D tincd 1.0.2 (May 5 2004 14:06:12) starting, debug level 5 Could not open /dev/net/tun #Device name.. Leave as is.: No such file or directory Not restarting. I don't know if is a missconfiguration or anything else?? Thanks *************************************************** This message has been scanned for viruses and dangerous content by Kypus Server Appliance E-Mail Protection Service, and is believed to be clean. *************************************************** =-=-=-=-=-=-=-=-=-=-=-=-Disclaimer Notice-=-=-=-=-=-=-=-=-=-=-=-=- The information in this E-mail is intended to be confidential and only for use of the individual or entity to whom it is addressed. If you are not the intended recipient, any retention, dissemination, distribution or copying of this message is strictly prohibited and sanctioned by law. If you receive this message by error, please immediately send it back and delete the message received. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Yes I did, but I don't know how test if my /dev/net/tun is configured correctly. I am using 2.4.27 Linux kernel, and I have crw------- 1 root root 10, 200 Oct 18 2003 /dev/net/tun ----- Original Message ----- From: "Andy Krause" <ak703@softhome.net> To: "Henry Burbano" <hburbano@novadevices.com> Sent: Thursday, September 30, 2004 10:01 AM Subject: Re: Could not open /dev/net/tun> did you configure your /dev/net/tun correctly as described in the docs > online in > > http://www.tinc-vpn.org/documentation/tinc_3.html#SEC28 > > at: 3.2.1 Device files? > > Am Donnerstag, den 30.09.2004, 09:29 -0500 schrieb Henry Burbano: > > Hi, > > > > I am triying to configure a VPN, my configuration files are: > > > > ****************** > > TINC.CONF: > > > > Name = nova > > > > # The internet host to connect with. > > ConnectTo = nova2 > > > > Device = /dev/net/tun #Device name.. Leave as is. > > Interface = vpn #Virtual Interface name. Give any > > suitable name. > > #Mode = "router" #use Router mode > > > > PrivateKeyFile = /etc/tinc/testVPN/rsa_key.priv > > > > > > ************************* > > > > tinc-up > > > > #!/bin/sh > > > > # Set hardware ethernet address, needed on Linux when in router mode > > ifconfig $INTERFACE hw ether fe:fd:0:0:0:0 > > > > # Give it the right ip and netmask. Remember, the subnet of the > > # tap device must be larger than that of the individual Subnets > > # as defined in the host configuration file! > > ifconfig $INTERFACE 192.168.1.7 netmask 255.255.255.0 > > > > # Disable ARP, needed on Linux when in router mode > > ifconfig $INTERFACE -arp > > > > #Add a route to the other network > > route add -net 192.168.2.0 netmask 255.255.255.0 dev $INTERFACE > > > > > > **************************************** > > > > /hosts/nova > > > > nova > > Address = xxx.xxx.153.226 #IP address of the tinc host. > > > > #Cipher = blowfish #Cipher to be used. (none for no cipher) > > Cipher = none > > > > #Compression = 9 #Compression level to be used. (0 for no > > compresion) > > Compression = 0 > > > > #Digest = sha1 #HMAC to be used (none for no HMAC) > > Digest = none > > > > #IndirectData = no > > Subnet = 192.168.1.0/24 #Subnet that this host is connected to. > > > > -----BEGIN RSA PUBLIC KEY----- > > MIGJAoGBAKsQbbC+CXd/tShV9PWhimnYBF+lJ+K2HRsCYJOmokXhETt9YmbfXcXB > > twW+o0bTQtKl8XORTYsCCo97im6Ofhce+hfFw7RFWMwLbSrT6LRn7I5GzE7Biv/R > > RSRGCBhHdoWGByKattvkO5JxeXU8O4sohxHkikIK7Z5DKG5SwMpHAgMBAAE> > -----END RSA PUBLIC KEY----- > > > > > > > > > > I start the vpn with: > > > > tincd -n testVPN --debug=5 -D > > > > but I get: > > > > tincd -n testVPN --debug=5 -D > > tincd 1.0.2 (May 5 2004 14:06:12) starting, debug level 5 > > Could not open /dev/net/tun #Device name.. Leave as is.:No> > such file or directory > > Not restarting. > > > > > > I don't know if is a missconfiguration or anything else?? > > > > Thanks > > > > > > *************************************************** > > This message has been scanned for viruses and > > dangerous content by Kypus Server Appliance E-Mail > > Protection Service, and is believed to be clean. > > *************************************************** > > =-=-=-=-=-=-=-=-=-=-=-=-Disclaimer Notice-=-=-=-=-=-=-=-=-=-=-=-=-> > > > The information in this E-mail is intended to be confidential and > > only for use of the individual or entity to whom it is addressed. > > If you are not the intended recipient, any retention, dissemination, > > distribution or copying of this message is strictly prohibited and > > sanctioned by law. If you receive this message by error, please > > immediately send it back and delete the message received. > > > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-> > > > _______________________________________________ > > tinc mailing list > > tinc@tinc-vpn.org > > http://brouwer.uvt.nl/cgi-bin/mailman/listinfo/tinc > >*************************************************** This message has been scanned for viruses and dangerous content by Kypus Server Appliance E-Mail Protection Service, and is believed to be clean. *************************************************** =-=-=-=-=-=-=-=-=-=-=-=-Disclaimer Notice-=-=-=-=-=-=-=-=-=-=-=-=- The information in this E-mail is intended to be confidential and only for use of the individual or entity to whom it is addressed. If you are not the intended recipient, any retention, dissemination, distribution or copying of this message is strictly prohibited and sanctioned by law. If you receive this message by error, please immediately send it back and delete the message received. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
On Thu, Sep 30, 2004 at 09:29:25AM -0500, Henry Burbano wrote:> I am triying to configure a VPN, my configuration files are: > > Device = /dev/net/tun #Device name.. Leave as is. > Interface = vpn #Virtual Interface name. Give any suitable name.[...]> tincd -n testVPN --debug=5 -D > tincd 1.0.2 (May 5 2004 14:06:12) starting, debug level 5 > Could not open /dev/net/tun #Device name.. Leave as is.: No such file or directory > Not restarting.The log output should've given you a hint: you can't add comments halfway on a line. Only lines which start directly with a # are considered comments (this is mentioned in the manpage and manual). So remove the comments or put them on their own lines, and don't forget to remove any trailing spaces (because unfortunately in 1.0.2 tinc doesn't strip them). -- Met vriendelijke groet / with kind regards, Guus Sliepen <guus@sliepen.eu.org> -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://brouwer.uvt.nl/pipermail/tinc/attachments/20040930/23e1cf26/attachment.pgp
On Thu, Sep 30, 2004 at 09:29:25AM -0500, Henry Burbano wrote:> ****************** > TINC.CONF:[...]> Device = /dev/net/tun #Device name.. Leave as is.[...]> tincd -n testVPN --debug=5 -D > tincd 1.0.2 (May 5 2004 14:06:12) starting, debug level 5 > Could not open /dev/net/tun #Device name.. Leave as is.: No > such file or directory > Not restarting.Notice the error message includes the "#Device name.. Leave as is." as part of the file name.... I believe tinc.conf can only have full-line comments; as you have it here, tinc is including the "comment" in the file name it's using. [The tinc.conf man page says: "This file consists of comments (lines started with a #) or assignments...." ] Nathan ---------------------------------------------------------------------------- Nathan Stratton Treadway - nathanst@ontko.com - Mid-Atlantic region Ray Ontko & Co. - Software consulting services - http://www.ontko.com/ GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt ID: 1023D/ECFB6239 Key fingerprint = 6AD8 485E 20B9 5C71 231C 0C32 15F3 ADCD ECFB 6239 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://brouwer.uvt.nl/pipermail/tinc/attachments/20040930/f2c1afd8/attachment.pgp
Thanks a lot, I had comments in my configuration files, and it was the
error.
Sorry but I am new using tinc.
But I have another question, Wich one is the next step, I run ifconfig:
eth0 Link encap:Ethernet HWaddr 00:30:48:42:63:18
inet addr:192.168.1.5 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:108059 errors:0 dropped:0 overruns:0 frame:0
TX packets:88665 errors:0 dropped:0 overruns:0 carrier:0
collisions:0
RX bytes:18139557 (17.2 Mb) TX bytes:21475748 (20.4 Mb)
eth1 Link encap:Ethernet HWaddr 00:30:48:42:63:19
inet addr:200.22.22.2 Bcast:200.22.22.255 Mask:255.255.255.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:845 errors:0 dropped:0 overruns:0 frame:0
TX packets:845 errors:0 dropped:0 overruns:0 carrier:0
collisions:0
RX bytes:71622 (69.9 Kb) TX bytes:71622 (69.9 Kb)
vpn.: error fetching interface information: Device not found
and the logs are:
tincd 1.0.2 (May 5 2004 14:06:12) starting, debug level 5
/dev/net/tun is a Linux tun/tap device (tun mode)
Executing script tinc-up
SIOCSIFHWADDR: No such device
SIOCSIFADDR: No such device
vpn.: unknown interface: No such device
SIOCSIFNETMASK: No such device
vpn.: unknown interface: No such device
SIOCADDRT: No such device
Script tinc-up exited with non-zero status 7
Creating metasocket failed: Address family not supported by protocol
Listening on 0.0.0.0 port 655
Ready
***************************************************
This message has been scanned for viruses and
dangerous content by Kypus Server Appliance E-Mail
Protection Service, and is believed to be clean.
***************************************************
=-=-=-=-=-=-=-=-=-=-=-=-Disclaimer Notice-=-=-=-=-=-=-=-=-=-=-=-=-
The information in this E-mail is intended to be confidential and
only for use of the individual or entity to whom it is addressed.
If you are not the intended recipient, any retention, dissemination,
distribution or copying of this message is strictly prohibited and
sanctioned by law. If you receive this message by error, please
immediately send it back and delete the message received.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=