Hello,I have 6 Ubuntu 18.04 machines in a Tinc (1.35) network, where 3 are in Spain and 3 in UK.One machine in each country is running Tinc, and as both ends are behind NAT, they both connect outward to an Upcloud VM. The 4 non-tinc machines can Ping and SSH each other without issue, and so from that point of view, the Tinc VPN is working fine.However, the 2 tinc machines can only ping and ssh each other across the vpn - they cannot reach any of the other 4 machines.- they can of course ping and ssh the 2 machines on their own network. I have found that I need to provide the 3 tinc machines with their own IPv4 network, as other approaches cause the networking on the Ubuntu machines to lock up.IPv4 forwarding is turned on, and all 4 non-tinc machine have static routes configured, and the tinc machines have routes via the tun0 interfaces. I have found i need TCPonly=yes to stop any Unknown messages. With a tail on the log files and using to ping, I can see reports of messages going across the vpn.But when trying ping on the tinc machines, the log message is slightly different between the tinc and non-tinc machines - so I'm not sure the ICMP message is actually getting into the tun0 interface. As the config is very symmetrical, I enclose here the config of one side. ###TINC.CONFConnectTo=upcloudName = zotacubuntu1AddressFamily = ipv4Device = /dev/net/tunLocalDiscovery = yesTCPOnly = yes ###TINC-UPip link set $INTERFACE upip addr add 192.168.60.20/24 dev $INTERFACE ip route add 192.168.4.0/24 dev $INTERFACE
###hosts/zotacubuntu1Address =UK.dyndns.orgPort = 655Subnet = 192.168.60.20/32 Subnet = 192.168.14.0/24 ###route -nKernel IP routing tableDestination Gateway Genmask Flags Metric Ref Use Iface0.0.0.0 192.168.14.1 0.0.0.0 UG 0 0 0 wlp2s0169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 wlp2s0192.168.4.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0192.168.14.0 0.0.0.0 255.255.255.0 U 0 0 0 wlp2s0192.168.60.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 I've run out of ideas as to why. Can anyone suggest reason and/or what else I can try? ThanksJohn
_______________________________________________ tinc mailing list [email protected] https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc
