###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn725828101.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC
#  auth:   SHA SHA1 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>