###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn748572644.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>