###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn385752397.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>