###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn362113658.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>