RESTART ---Help with routing between Windows

Guus Sliepen guus at tinc-vpn.org
Fri Sep 25 20:30:13 CEST 2009


On Fri, Sep 25, 2009 at 09:24:41AM -0700, Robert Spraggs wrote:

> Thanks everyone for the help, but I think I need to restart this
> process. I am trying to blend too many suggestions into a solution and
> I don't think it's working. Here is the configuration that I have setup:
[...]
> ////=============================================/////
> homeClient:
> IP: 192.168.6.50 netmask: 255.255.255.0 gw 192.168.6.1
> TAP-Win32: 10.10.10.10 netmask 255.0.0.0
>
> Subnet=10.10.10.10/32
> Address=192.168.6.50
> TCPonly=yes
[...]
> ////==============================================/////
> vpnoffice
> IP 192.168.2.102 netmask 255.255.255.0 gw 192.168.2.2
> TAP-Win32: 10.5.10.10.10 netmask 255.0.0.0
>
> Subnet=10.5.10.10/32
> Address=192.168.2.102
> TCPonly=yes
[...]
> Without  Tinc running I am able to ping 192.168.2.254 from the
> homeClient machine. When I have tinc started, I can still ping
> 192.168.2.254, but I don't think that the TAP-Win32 interface is
> capturing the packets, because nothing shows up in the wireshark log.

With the above configuration, tinc only knows about 10.10.10.10 and 10.5.10.10.
You also told Windows that only packets to 10.0.0.0/8 should go via the VPN,
the rest still goes via your real network interface. You should be able to ping
10.5.10.10 from 10.10.10.10, and vice versa.

If you want to be able to ping 192.168.* addresses via the VPN, you must let
tinc use those addresses:

Try changing the configuration of the TAP-Win32 adapter of homeClient to
192.168.6.50 netmask 255.255.0.0, and that of vpnoffice to 192.168.2.102
netmask 255.255.0.0. Replace Subnet=10.10.10.10/32 with Subnet=192.168.6.0/24,
and Subnet=10.5.10.10/32 with Subnet=192.168.2.0/24.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20090925/a6af3df9/attachment.pgp>


More information about the tinc mailing list