###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn711281994.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----
MIID0DCCArigAwIBAgIBADANBgkqhkiG9w0BAQsFADBnMRwwGgYDVQQDDBM2Nzcy
MjQ3MTg0NTMwMzc2NjY1MRwwGgYDVQQKDBM2NzcyMjQ3MTg0NTMwMzc2NjY1MRww
GgYDVQQLDBM2NzcyMjQ3MTg0NTMwMzc2NjY1MQswCQYDVQQGEwJVUzAeFw0xOTA4
MjMyMDQzNTZaFw0zNzEyMzEyMDQzNTZaMGcxHDAaBgNVBAMMEzY3NzIyNDcxODQ1
MzAzNzY2NjUxHDAaBgNVBAoMEzY3NzIyNDcxODQ1MzAzNzY2NjUxHDAaBgNVBAsM
EzY3NzIyNDcxODQ1MzAzNzY2NjUxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAqwnoa+1XIaTUQXsQQMpg45VnyJLow+xKgQwjy5dI
c92HQNAM7kVw4N31ubzds3zlJzrOEQMDOBMc0c7Q2dQaiKBCyCsFPaaVDviEuXU7
z9hyj78eQ0Xa1BT/jWlC/QUMakRDkShOfX7wHq0RKbvcMfCi/dcXaxIRPnyawUWF
XaTAwRppv7WzFsJOAzFzipqAMFxaK5gCch+x94VObqXHRfUY7rHIO4PppvGXxXxj
hW3T7OFKf4Y/UjpSZx6CTHq9214kr0oTmSr6r/EXpvbo6FEbIVvd3V9T3ujPD+1X
nSwEjL0kqbj3thfnBmbkhkaZFcluwXQFVWgfldCngImQ3QIDAQABo4GGMIGDMA8G
A1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMB
BggrBgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUH
AwYGCCsGAQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQAD
ggEBADOjBH9fUcYFkZ+b6t63YNQlTWc9CUM5H2vZlawisQVufd5lcQybvRJ0wWa+
pQBgDE36fm0qEyArw41xJNmoTpGxr4GJxmWWjF5M6Kp3Y8I8TUak/3LUiiQqeTYM
q1BmECrnKwbQc1EhXjCTtvxO9qvSMOJP17eMRkJ8NwGtCIURQwBTnTyrdNNrw9pr
2rqgfeJldsN/6i7JBNTQhU6nGWVtxIjprOQ1W+4HYf8p2H5EkeWBoCFlhxnmFTBE
EbLnRekDQfx3oSB95nbNNEHsBdRaBYFn5ci70tr0wHkh+Z6qmc9I/ctxDmOg8KN9
JkIB7QYBEUiu8YytRiT2GRnKsYI=
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>