VPN behind masquerading firewall 1.Opre7

Marcel de Vries marcel.de.vries at hccnet.nl
Fri Oct 4 15:00:41 CEST 2002


Dear Guus,

I have tried hard to fix this problem without any luck.
First I don't understand how I can expand netmask x.x.x.x/32.
I thought 32 bits is the maximum.
Second I added to the routing tabel (SuSe Linux):

route add -net 10.69.189.132 netmask 255.255.255.255 dev tap0

than you get in the routing table:

Destination		gateway   Genmask		   Flags Metric Ref Use Iface  
10.69.189.132       *	    255.255.255.255  UH    0      0     0  tap0

I don't know how I can put the name "test-vpn" in the routing table.
Please help!!
They expect me to have it done by now and still not working.
It drives me a little bit crazy.

Greetings
Marcel de Vries.

-----Oorspronkelijk bericht-----
Van: Guus Sliepen [mailto:guus at sliepen.eu.org]
Verzonden: donderdag 3 oktober 2002 16:07
Aan: Marcel de Vries
CC: tinc at nl.linux.org
Onderwerp: Re: VPN behind masquerading firewall 1.Opre7


On Thu, Oct 03, 2002 at 12:56:29PM +0200, Marcel de Vries wrote:

> Sorry for the mess. I had the files in plain text in the mail.
> I hope it's better now.

Yes,

> Subnet 10.69.189.132/32
> Address 192.168.0.99 netmask 255.255.0.0
> posrt 655

The "netmask 255.255.0.0" part makes no sense.
It should be port, not posrt.

> #!/bin/bash
> ifconfig tap0 down
> ifconfig tap0 hw ether fe:fd:00:00:00:00
> ifconfig tap0 10.69.189.132 netmask 255.255.255.255
> ifconfig tap0 -arp

This tells your computer that 10.69.189.132/32 should go to tap0.
However, you should also make sure that 10.69.189.134/32 is sent to
tap0. You can either expand the netmask or add an extra route for
10.69.189.134 to tap0.

-- 
Met vriendelijke groet / with kind regards,
    Guus Sliepen <guus at sliepen.eu.org>


Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://tinc.nl.linux.org/




More information about the Tinc mailing list