###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn671688846.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>