TINC CONFIGURATION HOW TO
TINC CONFIGURATION INSTALL

Since those devices let me install software through Debian's package management it was very easy to set up. In my case I connected 3 remote sites running behind Ubiquiti EdgeRouters. These steps can basically be repeated for every remote site just choosing different names and other internal IP addresses. Add the name for the VPN to /etc/tinc/nets.boot if you want to autostart the connection upon reboot.Copy over this devices host file including the embedded public key to your monitoring server.Generate this device's keys: tincd -n myvpn -K.Create main configuration: vim /etc/tinc/myvpn/nf.Create directory structure: mkdir -p /etc/tinc/myvpn/hosts.These can be routers, or just any computer or VM running on the remote subnet, able to reach the internet with the ability to forward IP packets externally. Now you can start tinc with tincd -n myvpn and it will listen for your remote sites to connect to it.Įssentially the same steps as for your central monitoring server apply for all remote gateway devices.To make sure that the connection will be restored after each reboot, you can add your VPN name to /etc/tinc/nets.boot.Now the file /etc/tinc/myvpn/hosts/monitoring should have an RSA public key appended to it and your private key should reside in /etc/tinc/myvpn/rsa_key.priv.It's time to use tinc to create our key-pair: tincd -n myvpn -K.On the monitoring server we will just fill in the subnet and not define its external IP address to make sure it listens on all available external interfaces. Create your main configuration file: vim /etc/tinc/myvpn/nf.Create the following directory structure to hold all your configuration files: mkdir -p /etc/tinc/myvpn/hosts 'myvpn' is your VPN network's name and can be chosen freely.Then install tinc via apt-get install tinc.First make sure your firewall accepts connections on port 655 UDP and TCP.I am going to describe the setup for Debian-based systems, but there are virtually no differences for e.g. If you are running something different, just take a look at tinc's homepage to find an appropriate version for your operating system: Tinc should be available on nearly all Linux distributions via package management. This will let you connect to devices on remote private IP ranges through one gateway on each site, routing them securely back to your LibreNMS installation.

TINC CONFIGURATION HOW TO

This article describes how to use tinc to connect several remote sites and their subnets to your central monitoring server. Support for a new OS Support for a new OS.Contributing + Developing Contributing + Developing.Remote Monitoring VPN Remote Monitoring VPN Table of contents.3rd Party Integration 3rd Party Integration.

Tinc configuration