Troubleshooting guide

2018-08-21

Introduction

This troubleshooting guide is a generic checklist which should help the reader identifying and solving the most common connectivity issues that may arise at multiple levels during the setup of a tinc VPN using Tinc App and an external node. The following steps and the different testing instructions should be followed in order of appearance. Commands can be executed on Android using a terminal emulator such as Termux.

System network configuration review

This section is focused on the configuration of the network interface and routes on the host systems. The goal is to make sure that network packets are correctly being passed from the OS to the tinc VPN.

On Android

network.conf should contain:

On other systems

The network interface and routes should properly be configured statically or using hook scripts in order to:

Tinc configuration review

This section is focused on the configuration of the tinc daemon and the different nodes of the VPN.

It is important to replicate tinc’s host configuration files located in the hosts/ directory across all nodes, keeping them in sync manually until the VPN has been successfully set-up.

External node reachability

The tinc daemons running on the different nodes should be able to establish connections between each other ones through the public Internet.

Internal node reachability

The different nodes should be able to communicate within the tinc VPN using their IP addresses belonging to the address space of the private network. The packets must be correctly routed from nodes to nodes within the mesh network using correct subnets delegations.