No subject

"PrivateKeyFile" as this is default, otherwise configuration is quite
minimal.


======= Configuration =========

Server Side
===========
# cat tinc.conf
Name = fsvpns3f30
Mode = switch
Device = /dev/net/tun
AddressFamily = ipv4
PingInterval = 30
PrivateKeyFile = /etc/tinc/fsvpn/rsa_key.priv

# cat tinc-up
#!/bin/sh
ifconfig $INTERFACE 10.10.100.30 netmask 255.255.0.0

# cat hosts/fsvpns3f30
Address = xyz.dyndns.org
Port=655
Compression=9
Subnet=10.10.0.0/16
TCPonly=yes
-----BEGIN RSA PUBLIC KEY-----
...
-----END RSA PUBLIC KEY-----

Client Side
========
# cat tinc.conf
Name = fsvpnmf
Mode = switch
Device = /dev/net/tun
AddressFamily = ipv4
PingInterval = 30
ConnectTo = fsvpns3f30
PrivateKeyFile=/etc/tinc/fsvpn/rsa_key.priv

# cat tinc-up
#!/bin/sh
ifconfig $INTERFACE 10.10.101.1 netmask 255.255.0.0

# cat fsvpnmf
Port = tinc
Compression = 9
Subnet = 10.10.101.1/32
TCPonly=yes
ConnectTo = xyz.dyndns.org
-----BEGIN RSA PUBLIC KEY-----
...
-----END RSA PUBLIC KEY-----

This setup works now for a while with the restriction that I can
directly only reach one machine on my network. I can ssh through it to
reach the other machines in the network, but this is not ideal (e.g.
if  I want to directly reach windows machines). That means from my
laptop I can only directly reach the 10.10.0.30/10.10.100/30 machine.
It looks like a routing problem. I guess I will have to add on tinc-up
script on both sides but in combination with the vpn device I need
some guidance.

Can you see how the configuration can be enhanced to reach the whole
network of machines on the home network from laptops directly ?

Any suggestions are welcome.

Mansour Farghaly