<html><head>
<meta name="Generator" content="Novell Groupwise Client (Version 14.2.2 Build: 126868)">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head>
<body style="font: 12pt/normal Segoe UI; font-size-adjust: none; font-stretch: normal;"><div class="GroupWiseMessageBody" id="GroupWiseSection_1558596236000_robert@gainplus.asia_0AE2278002F000008C53A30038005B00_"><div>Hi Lars,</div><div><br></div><div>Appreciate all your help, unfortunately the problem remains. I've marked up below:<br></div><div class="GroupWiseMessageBody" id="GroupWiseSection_1558596236000_robert@gainplus.asia_0AE2278002F000008C53A30038005B00_"><span class="GroupwiseReplyHeader">>>> Lars Kruse <lists@sumpfralle.de> 22-May-19 4:02 PM >>><br></span><div><div>Hello Robert,</div><div><br></div><div><br></div><div>Am Mon, 20 May 2019 11:11:39 +0700</div><div>schrieb "Robert Horgan" <Robert@gainplus.asia>:</div><div><br></div><div>> These are my files:</div><div>> </div><div>> On server 1: db2</div><div>> </div><div>> /etc/tinc/nets.boot</div><div>> #</div><div>> gainplus (this works fine, autostarts, etc)</div><div>> #<strike>vpn1</strike></div><div> <font style="background-color: rgb(255, 255, 0);">stats</font></div><div>> </div><div>> /etc/tinc/vpn1/tinc.conf</div><div>> Name = db2</div><div>> BindToAddress = 10.130.17.192</div><div>> AddressFamily = ipv4</div><div>> Port = 656</div><div>> ConnectTo = gtdb</div><div>># <strike><font style="background-color: rgb(255, 255, 0);">Interface = tun0</font></strike></div><div><br></div><div>I would recommend to remove the "Interface" line (this results in an interface</div><div>called "vpn1" in your case) or specify a human-readable name of the VPN instead.</div><div>done.<br></div><div><br></div><div>> /etc/tinc/vpn1/tinc-up</div><div>> #!/bin/sh</div><div>> # tinc-up</div><div>> ip addr add 10.3.0.50/24 dev $INTERFACE</div><div>> ip link set dev $INTERFACE up</div><div>> </div><div>> /etc/tinc/vpn1/hosts/gtdb</div><div>><font style="background-color: rgb(255, 255, 0);">Address = 10.130.8.6</font></div><div>Subnet = 10.3.0.51/32</div><div>> Port = 656</div><div>> </div><div>> -----BEGIN RSA PUBLIC KEY-----</div><div><br></div><div>I think, the "Address" line is missing in the file above (necessary for your</div><div>"ConnectTo" statement).</div><div>Done<br></div><div><br></div><div>> /etc/tinc/vpn1/hosts/db2</div><div>> Address = 10.130.17.192</div><div>> Subnet = 10.3.0.50/32</div><div>> Port = 656</div><div>> </div><div>> -----BEGIN RSA PUBLIC KEY-----</div><div>> </div><div>> #########################################################</div><div>> </div><div>> On server 2: gtdb</div><div>> </div><div>> /etc/tinc/nets.boot</div><div>> #</div><div>> gainplus</div><div>> vpn1</div><div>> </div><div>> /etc/tinc/vpn1/tinc.conf</div><div>> Name = gtdb</div><div>> BindToAddress = 10.130.8.6</div><div>> AddressFamily = ipv4</div><div>> Port = 656</div><div>> ConnectTo = db2</div><div>> Interface = tun0</div><div>> </div><div>> /etc/tinc/vpn1/tinc-up</div><div>> #!/bin/sh</div><div>> # tinc-up</div><div>> ip addr add 10.3.0.51/24 dev $INTERFACE</div><div>> ip link set dev $INTERFACE up</div><div>> </div><div>> /etc/tinc/vpn1/hosts/gtdb</div><div>> Address = 10.130.8.6</div><div>> <font style="background-color: rgb(255, 255, 0);">Subnet = 10.3.0.51/32</font></div><div><br></div><div>Are you sure, that you want to announce the availability of this subnet behind</div><div>gtdb? In this case you probably bridged the respective external interface with</div><div>the tinc interface? Or you use dynamic or static routes for selecting the right</div><div>outgoing interface for traffic?</div><div>Or should the above line be changed into a /32 subnet just for the node address</div><div>itself?</div><div><font style="background-color: rgb(255, 255, 0);">Fixed</font></div><div><br></div><div><br></div><div>> Port = 656</div><div>> </div><div>> -----BEGIN RSA PUBLIC KEY-----</div><div>> </div><div>> /etc/tinc/vpn1/hosts/db2</div><div>> Address = 10.130.17.192</div><div>> Subnet = 10.3.0.50/32</div><div>> Port = 656</div><div>> </div><div>> -----BEGIN RSA PUBLIC KEY-----</div><div>> </div><div>> The result I get when running ip a on either server only shows the first VPN</div><div>> tunnel:</div><div>> </div><div>> 9: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel</div><div>> state UNKNOWN group default qlen 500 link/none</div><div>> inet 10.0.0.51/24 scope global tun0</div><div>> valid_lft forever preferred_lft forever</div><div><br></div><div>Could this be as simple as a name conflict ("tun0" for both VPN setups)?</div><div><br></div><div><font style="background-color: rgb(255, 255, 0);">The first VPN that comes up is now gainplus after changing details above so no possible conflict</font></div><div><br></div><div>ip a shows:</div><div><br></div><div><font style="background-color: rgb(255, 255, 0);">5: gainplus: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 500<br> link/none<br> inet 10.0.0.51/24 scope global gainplus<br> valid_lft forever preferred_lft forever</font></div><div><br></div><div>If not: do you find any information in your local logs?</div><div>(e.g. /var/log/daemon.log)</div><div><br></div><div>no /var/log/daemon.log exists but in /var/log/syslog displays these errors, but I am confused about resolving them!</div><div><br></div><div><font face="Courier New" size="2">May 23 14:35:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Service hold-off time over, scheduling restart.<br>May 23 14:35:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Scheduled restart job, restart counter is at 1165.<br>May 23 14:35:14 db2 systemd[1]: Stopped Tinc net VPN1.<br>May 23 14:35:14 db2 systemd[1]: Started Tinc net VPN1.<br>May 23 14:35:14 db2 systemd[31386]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Changing to the requested working directory failed: No such file or directory<br>May 23 14:35:14 db2 systemd[31386]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Failed at step CHDIR spawning /usr/sbin/tincd: No such file or directory<br>May 23 14:35:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Main process exited, code=exited, status=200/CHDIR<br>May 23 14:35:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Failed with result 'exit-code'.<br>May 23 14:36:01 db2 CRON[31389]: (nodequery) CMD (bash /etc/nodequery/nq-agent.sh > /etc/nodequery/nq-cron.log 2>&1)<br>May 23 14:36:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Service hold-off time over, scheduling restart.<br>May 23 14:36:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Scheduled restart job, restart counter is at 1166.<br>May 23 14:36:14 db2 systemd[1]: Stopped Tinc net VPN1.<br>May 23 14:36:14 db2 systemd[1]: Started Tinc net VPN1.<br>May 23 14:36:14 db2 systemd[31983]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Changing to the requested working directory failed: No such file or directory<br>May 23 14:36:14 db2 systemd[31983]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Failed at step CHDIR spawning /usr/sbin/tincd: No such file or directory<br>May 23 14:36:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Main process exited, code=exited, status=200/CHDIR<br>May 23 14:36:14 db2 systemd[1]: </font><a href="mailto:tinc@VPN1.service"><font face="Courier New" size="2">tinc@VPN1.service</font></a><font face="Courier New" size="2">: Failed with result 'exit-code'.</font></div><div><br></div><div>Cheers,</div><div>Robert</div><div><br></div></div></div></div></body></html>