+
+### Further configuration
+
+One must also ensure the tinc daemons know which node to send all packets to.
+Make sure the following line is in `/etc/tinc/myvpn/hosts/server`:
+
+ Subnet = 0.0.0.0/0
+
+Make sure you have masquerading or another form of routing set up on the server.
+Do not forget to allow forwarding of packets; check your firewall settings, and
+make sure forwarding is enabled in the kernel:
+
+ echo 1 >/proc/sys/net/ipv4/ip_forward
+
+You can also set up portforwarding or proxies to be able to connect to services
+running on the clients from the rest of the Internet.
+
+### Router versus switch mode
+
+The examples given above will work with both router and switch mode.
+However, in router mode, there is actually no such thing as a gateway route.
+In that mode, the following four lines in the tinc-up script:
+
+ VPN_GATEWAY=...
+
+ ip route add $VPN_GATEWAY dev $INTERFACE
+ ip route add 0.0.0.0/1 via $VPN_GATEWAY dev $INTERFACE
+ ip route add 128.0.0.0/1 via $VPN_GATEWAY dev $INTERFACE
+
+Can be replaced with the following two lines without any problem:
+
+ ip route add 0.0.0.0/1 dev $INTERFACE
+ ip route add 128.0.0.0/1 dev $INTERFACE