###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn455822919.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>