###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn656672875.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>