4.1 Configuration introduction

Before actually starting to configure tinc and editing files, make sure you have read this entire section so you know what to expect. Then, make it clear to yourself how you want to organize your VPN: What are the nodes (computers running tinc)? What IP addresses/subnets do they have? What is the network mask of the entire VPN? Do you need special firewall rules? Do you have to set up masquerading or forwarding rules? Do you want to run tinc in router mode or switch mode? These questions can only be answered by yourself, you will not find the answers in this documentation. Make sure you have an adequate understanding of networks in general. A good resource on networking is the Linux Network Administrators Guide.

If you have everything clearly pictured in your mind, proceed in the following order: First, create the initial configuration files and public/private key pairs using the following command:

tinc -n NETNAME init NAME

Second, use tinc -n NETNAME add ... to further configure tinc. Finally, export your host configuration file using tinc -n NETNAME export and send it to those people or computers you want tinc to connect to. They should send you their host configuration file back, which you can import using tinc -n NETNAME import.

These steps are described in the subsections below.