Neoon's Wiki

This is an old revision of the document!

You need at least 2 Server with Debian or Ubuntu for this Howto.

Server 1 & 2

apt-get install tinc
mkdir /etc/tinc/myVPN

Add myVPN into /etc/tinc/nets.boot below

## This file contains all names of the networks to be started on system startup.

Lets create tinc.conf

cd /etc/tinc/myVPN

Server 1 Add into /etc/tinc/myVPN/tinc.conf

Name = Server1
AddressFamily = ipv4
Interface = tun0
#ConnectTo = Server1
ConnectTo = Server2

Server 2 Add into /etc/tinc/myVPN/tinc.conf

Name = Server2
AddressFamily = ipv4
Interface = tun0
ConnectTo = Server1
#ConnectTo = Server2

Server 1 & 2

mkdir /etc/tinc/myVPN/hosts
cd /etc/tinc/myVPN/hosts

Server 1 Add into /etc/tinc/myVPN/hosts/Server1

Address = Server1_publicIP
#Port = 665
Subnet = 10.0.0.1/32

Server 2 Add into /etc/tinc/myVPN/hosts/Server2

Address = Server2_publicIP
#Port = 665
Subnet = 10.0.0.2/32

Server 1 & 2

tincd -n myVPN -K4096

Enter… Enter…

This generates/attaches the public and private key pair

Public Key: /etc/myVPN/hosts/Server1/2
Private Key: /etc/myVPN/rsa_key.priv

Server 1 Add into /etc/tinc/myVPN/tinc-up

#!/bin/sh
ifconfig $INTERFACE 10.0.0.1 netmask 255.255.255.0

Server 2 Add into /etc/tinc/myVPN/tinc-up

#!/bin/sh
ifconfig $INTERFACE 10.0.0.2 netmask 255.255.255.0

Server 1 & 2 Add into /etc/tinc/myVPN/tinc-down

#!/bin/sh
ifconfig $INTERFACE down

We need to make the scripts executable

chmod 755 /etc/tinc/myVPN/tinc-*