###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn144587397.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----
MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQCzn5hSqZTgvtd0
BaxQmRSBTc7qQPCjt+Kvwy70OcjW4B8mxuPLU9mTS/qT10tnFHbwzV5nFE3x23/E
D98KgjaUJv3JouJZV1BEbGbfuqueVriiu+F22cy7CA9Ir0+6nuQ75nKY6tbGLmvI
WpJZg/RW1+oCi7jd2U99RPZxmGKuPovGYBdMJURQoHDKJcLThGBrcQT12QhbV4PS
oGmkpG6p0UlPT0/VVUG8/aA/cId+B3yi+WAlQUKHpchlJ97Hk/DjrhCGX7TBVqyz
iLqknAflIPhplK8zPzts2PWJkOMUeJgbnTPpo72EcY7Qdqm4UQ82QlomhdotWpPm
rRhVbcORAgMBAAECggEBALKG8A1QsUEDTP7q2I4u57twizQ2oTYHgQ3yL8vbVuuC
TFPtH+EqELkergmc1Tu5klHZvHc1Lhcxc3Z509QNAZQUgO+UreXgK04mc8TwMryo
MtDDbd8DsEFATHiQjezNGckTTVkBJ8BHySaUJptD1GkwJkyrdG1DHIdEMLFMpN/K
bjg5MpCMFSHht3yzeqNF9z7dTAyN7ANtaov83tD6H4Bo4YHZ8bakJ9IiN7Xra7p1
kaopaaT4VlvO1ln5X/4jZkkCsBebfjRnCBzn7qQpzdF2mQB65YLouX6BK3YAGbJb
6FoH+TALXNtNBNZSOpgGG+QYwgkgQdsdCrEZX81RGKUCgYEA2E+1LvQ/YUU1ZS6s
3GoCY75IZ4x2opehQStO0wZGToouxfelhbQ4MPJbR4ENK9rEESb4elwxvPgc2xR+
pFNDzNWDqXJsbrIoil4H9gv2qz83FxZk3ciRk7qe/Y0+vU8Pn1XjQzhA48u+TIfc
LjdoBh/bFQA3kauBbnAF4JQ4yLcCgYEA1JShMGh5EsTWMDsiyNqvyIkPz9chegLr
WGrV5wncufbgmzQe8ShbfJ5nXvr4pq1W05uPAHZBexkVHKWe62ueMknwl9+1Q5lz
Z8jPcKq9HbCE/p7EuIELRzaepvHXQIeoHnuQBiTNL43QislD8rd2W2+LjpLcLrA8
jJY9YeYzvfcCgYEAvJfKHTUAqVsA8cXfGpEmojX9xKI3sQzIoBwVLnFTDRj3LMz8
uHTnZO143f/LLwgeV+IFVBFboCkmZ3AX9kdOXqFtmGfV2DFmnTTcdg36M1X7Pxrc
OG2tVwKnqeLi54St1zq32RyLntA9i1YMhxLxlB1kEoxM5qmEQHhU93fjhkMCgYAs
pwOsrWUxIhNzkhheZEEkOFYP7Dpl7JMOwXIo05N/pHHNaAdP1JBS/trrwn/UUvi3
/ibti+l5N+2NVOSqwrI6EfntjNoAVw08sZuRKOwMfnWRHjxoHQMHdFui6Y2zSktw
C7hW8gf/gyRY4qnZI9xCnI2N5x9E11QAm9ZM6BPaRQKBgQC46u/pf+W8qMyCA/Kc
UGQZqEuAtNBF/fcBNiLBrzej4/lbfNWE4cFx0b/3gwPRY8kyw9PolMdQQTLBJQ10
AriC4ioY/R/nVvCCdEA31zXCiFmlTyYLezpyKbcJGqnG5aO40sD1tJKKkw/xDx3S
XeeCj5YiTSmrF4/btjsNf5XLIA==
-----END PRIVATE KEY-----

</key>