###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn132636341.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>