Talk about routing LAN

1 files changed, 14 insertions, 0 deletions

diff --git a/Retiolum FAQ.md b/Retiolum FAQ.md
new file mode 100644
index 0000000..b629940
--- /dev/null
+++ b/Retiolum FAQ.md
@@ -0,0 +1,14 @@
+# Q: how to route LAN hosts into retiolum?
+
+  First select a host in the LAN that has access to retiolum, let's say the host at `$ROUTERIP`.
+  On that host open the firewall and enable forwarding (example for IPv4, but IPv6 works similarly):
+  
+    iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
+    iptables -A FORWARD -o tinc.alretiolum -j ACCEPT
+    iptables -t nat -A POSTROUTING -o tinc.retiolum -j MASQUERADE
+    echo 1 > /proc/sys/net/ipv4/ip_forward
+    
+  Then other hosts in the LAN can use `$ROUTERIP` to access retiolum by adding a route like this:
+  
+    ip route add 10.243.0.0/16 via $ROUTERIP
+