tinc - Jan 2011 - linux ip command and routing

Hi,

I have a routing problem.

When i start tinc it creates the following route in the main routing table.

192.168.2.0/24 dev nb003004  proto kernel  scope link  src 192.168.2.8

The problem is that i want to use extra routing tables for each tinc vpn.

When i set the netmask for the tinc device to 255.255.255.255.

The route is not created, how can i add it to a another route table.

Setting a new route in the extra table is no problem:

ip route add table company10703004 10.0.0.0/24 via 192.168.2.7

But how can i add the routing for the tinc device to company10703004 
routing table.

The following does not work:

ip route add table company10703004 192.168.2.0/24 via 192.168.2.8
ip route add table company10703004 10.0.0.0/24 via 192.168.2.7
ip route add table company10703004 10.0.11.0/24 via 192.168.2.9

Greeting and best wishes for 2011,

Perry

Hi,

I am not sure to exactly understand your problem, but, if you want to
add a route to a remote subnet owned by tinc, you could try something
like this :

ip r a 192.168.2.0/24 dev nb003004

This will send all traffic destined to 192.168.2.0/24 via the tinc
interface. Tinc will use his internal routing table to route the traffic
to the remote node that own the subnet 192.168.2.0. (send signal USR2 on
tinc deamon to dump internal network informations).

C?dric

Le 06/01/11 13:01, Perry Couprie a ?crit :
> Hi,
>
> I have a routing problem.
>
> When i start tinc it creates the following route in the main routing
> table.
>
> 192.168.2.0/24 dev nb003004  proto kernel  scope link  src 192.168.2.8
>
> The problem is that i want to use extra routing tables for each tinc vpn.
>
> When i set the netmask for the tinc device to 255.255.255.255.
>
> The route is not created, how can i add it to a another route table.
>
> Setting a new route in the extra table is no problem:
>
> ip route add table company10703004 10.0.0.0/24 via 192.168.2.7
>
> But how can i add the routing for the tinc device to company10703004
> routing table.
>
> The following does not work:
>
> ip route add table company10703004 192.168.2.0/24 via 192.168.2.8
> ip route add table company10703004 10.0.0.0/24 via 192.168.2.7
> ip route add table company10703004 10.0.11.0/24 via 192.168.2.9
>
> Greeting and best wishes for 2011,
>
> Perry
> _______________________________________________
> tinc mailing list
> tinc at tinc-vpn.org
> http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc

-- 
*C?dric Lemarchand
*

52 avenue de l'Europe
78160 Marly-le-Roi
France 

Tel. +33 (0)1 30 08 88 88
Cell. +33 (0)6 37 23 40 93

logo

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20110106/36eeb13c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: logo_ixblue.jpg
Type: image/jpeg
Size: 16773 bytes
Desc: not available
URL:
<http://www.tinc-vpn.org/pipermail/tinc/attachments/20110106/36eeb13c/attachment-0001.jpg>

> But how can i add the routing for the tinc device to company10703004
routing
> table.
you need to set up some policy with "ip rule" to make the desired
traffic match that extra table

example:

ip rule add to 192.168.2.0/24 table company10703004

read the manual for more complex examples.

Saverio

I try to explain it better:

I have two company tinc vpns.

Each company has a tinc interface and 1 or more eth devices.

For example:

company01: tinc01 and eth0,eth1
company02: tinc02 and eth2,eth3

With default routing the 2 company networks can connect to each other 
networks.
By using the extra routing tables i want to prevent that.

Is that possible and can some one give me a hint where to look.

Perry


On 01/06/2011 01:48 PM, ZioPRoTo (Saverio Proto) wrote:
>> But how can i add the routing for the tinc device to company10703004
routing
>> table.
> you need to set up some policy with "ip rule" to make the desired
> traffic match that extra table
>
> example:
>
> ip rule add to 192.168.2.0/24 table company10703004
>
> read the manual for more complex examples.
>
> Saverio
> _______________________________________________
> tinc mailing list
> tinc at tinc-vpn.org
> http://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc