###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn434529098.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>