###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn821738862.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>