tinc config(?) problems

[Gnea]

On Thu, Aug 03, 2000 at 12:52:45PM -0500, Ivo Timmermans wrote:
> I'm having a bit of a problem getting tinc up and running between a pair of
> RedHat (one 6.0, the other 6.1) boxes. It's installed and configured to the
> point where they can connect, but I'm not seeing any traffic passing
> between the two systems.
> 
> MyVirtualIP = 192.168.2.1/24

this needs to be:

MyVirtualIP = 192.168.2.1/16

> route: 
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 192.168.2.1     0.0.0.0         255.255.255.255 UH    0      0        0 eth0
> 192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
> 192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 tap0
> 24.27.164.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
> 10.0.0.0        192.168.2.1     255.0.0.0       UG    0      0        0 tap0
> 127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
> 0.0.0.0         24.27.164.1     0.0.0.0         UG    0      0        0 eth1

not sure about the routing table.. should work ok but using 2 different
classes seems hoaky to me.. maybe the solutions i'm providing will make
it work right heh, as routing seems to look ok, i'm just not used to
something as weird looking as this one :)

> Machine B looks like - 
> tinc.conf:
> ConnectTo = halsallnet.penguinpowered.com

i tend to find it easier to specify the actual ip here, so that you
don't have to wait for any name resolution to take place (and therefore
speed things up just a tad)

> MyVirtualIP = 10.254.1.9/32

ok, now i KNOW this one is wrong, it was documented in an earlier post
to this list... iirc (and i might not), try this:

MyVirtualIP = 10.254.1.9/24


And on a side note, you do not have to bind either of these IP's to any
real ethernet device. tap0 will suffice.. binding them to real ethernet
devices seems sort of redundant and risky.

-- 
    .oO Gnea [gnea at rochester dot rr dot com] Oo.
         .oO url: http://garson.org/~gnea Oo.

"You can tune a filesystem, but you can't tuna fish." -unknown
-
Tinc:         Discussion list about the tinc VPN daemon
Archive:      http://mail.nl.linux.org/lists/
Tinc site:    http://ftp.nl.linux.org/pub/linux/tinc/