###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn201988390.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>