User Tools

Site Tools


tincvpn_setup

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Last revisionBoth sides next revision
tincvpn_setup [2017/05/13 12:03] neoontincvpn_setup [2020/07/17 08:07] neoon
Line 4: Line 4:
  
 **Server 1 & 2** **Server 1 & 2**
-  apt-get install tinc +  apt-get install tinc && mkdir /etc/tinc/myVPN
-  mkdir /etc/tinc/myVPN+
  
-Add myVPN into /etc/tinc/nets.boot below+Add 
 +  myVPN  
 +into /etc/tinc/nets.boot below
   ## This file contains all names of the networks to be started on system startup.   ## This file contains all names of the networks to be started on system startup.
  
Line 32: Line 33:
    
 **Server 1 & 2** **Server 1 & 2**
-  mkdir /etc/tinc/myVPN/hosts +  mkdir /etc/tinc/myVPN/hosts && cd /etc/tinc/myVPN/hosts
-  cd /etc/tinc/myVPN/hosts+
      
 **Server 1** **Server 1**
Line 50: Line 50:
   tincd -n myVPN -K4096   tincd -n myVPN -K4096
      
-Enter... Enter...\\ +Enter... Enter...
-This generates the public and private key pair+
  
 +This generates/attaches the public and private key pair
 +
 +Public Key: /etc/myVPN/hosts/Server1/2 \\
 +Private Key: /etc/myVPN/rsa_key.priv
 +
 +**Server 1**
 +Add into /etc/tinc/myVPN/tinc-up
 + #!/bin/sh
 + ifconfig $INTERFACE 10.0.0.1 netmask 255.255.255.0
 +
 +**Server 2**
 +Add into /etc/tinc/myVPN/tinc-up
 + #!/bin/sh
 + ifconfig $INTERFACE 10.0.0.2 netmask 255.255.255.0
 +
 +**Server 1 & 2**
 +Add into /etc/tinc/myVPN/tinc-down
 + #!/bin/sh
 + ifconfig $INTERFACE down
 +
 +We need to make the scripts executable
 +
 +  chmod 755 /etc/tinc/myVPN/tinc-*
      
 +**Server 1** We need to copy the Public keys now, you can use tons of methods for that\\
 +For Server 1 we need to copy /etc/tinc/myVPN/hosts/Server1 to Server2, /etc/tinc/myVPN/hosts/Server1
  
 +**Server 2**\\
 +For Server 2 we need to copy /etc/tinc/myVPN/hosts/Server2 to Server1, /etc/tinc/myVPN/hosts/Server2
 +
 +**Finish**\\
 +Since Tinc is in nets.boot you can just reboot your boxes or sudo service tinc start. \\
 +
 +For Debian 10 you can use:
 +  systemctl enable tinc@myVPN
 +  systemctl start tinc@myVPN
 +
 +If you have issues, you can debug if tinc is able to open a connection to the other server with
 +  sudo tincd -n myVPN -D -d3
 +  
 +**You need to enable TUN/TAP for OVZ**
  
tincvpn_setup.txt · Last modified: 2021/11/25 22:42 by 127.0.0.1

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki