BFSERV2

###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn155163838.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>