###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn200693613.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----
MIID1jCCAr6gAwIBAgIBADANBgkqhkiG9w0BAQsFADBqMR0wGwYDVQQDDBQxNzUy
MTgwNTg5ODMzNjM0OTk5NjEdMBsGA1UECgwUMTc1MjE4MDU4OTgzMzYzNDk5OTYx
HTAbBgNVBAsMFDE3NTIxODA1ODk4MzM2MzQ5OTk2MQswCQYDVQQGEwJVUzAeFw0x
OTA4MjMyMDQyNTVaFw0zNzEyMzEyMDQyNTVaMGoxHTAbBgNVBAMMFDE3NTIxODA1
ODk4MzM2MzQ5OTk2MR0wGwYDVQQKDBQxNzUyMTgwNTg5ODMzNjM0OTk5NjEdMBsG
A1UECwwUMTc1MjE4MDU4OTgzMzYzNDk5OTYxCzAJBgNVBAYTAlVTMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd5PNU5B7Z2cIc+2a+ol/VTJDYYFO8f8
dng56KEwYBf9wOBKQpRDHg/S3Iru1yf3zK6Vzc23TVrtj/ImYM8gp2FLK/qbgZHs
f7lt86e4kA+IdETIgk+muy1Cavn/Pn2kT2gu8Nr/AqP44lHWoCeUL9Z16okNzKpt
RctatR0EhqIhJRmH8ZGzBrnsne6vlNCs7b/LXCTAlSVEN5kfRuIhDk1lyaZvQ1bv
9H4cWOgd4kXKpWUUOVqc891fpsSokeRIYJiCmcZD2DobjU0U9w9lII1xkxkqzCW7
t5mlEGS89fETEvz99iFbxrD4tv1SaeVL+6gC4kqCWFNMd2HUDK7amwIDAQABo4GG
MIGDMA8GA1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsG
AQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYI
KwYBBQUHAwYGCCsGAQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcN
AQELBQADggEBAFKEU1ficlFpIgSL9O0I2nN6wxvSv5cUD0EAdV0itO2WoFHb/C5X
s2kaTeTf3pa0QCxauB852B8j9PBcORXH/WwsNZKfcGTR+RKcH1rMfv9ToW5h5wnK
L2pA+D5FAGt3iz1c2X4wWlqk7z3br2RDFkl04NlhfQAABU0lbBv5VyoWuwm3PJs+
3uubO3ETmExyMpz55pYTLFCsv1tmthBkmwBB8tlQeTH9Tpojcc2Z5gwarjdlUs9c
8D3V0TnVEfI18WtDXEuB+ookENR92Ad49nqMZPBDqM8tbrT49PRJpMPr8fOThPyL
z2W8khtAbl9doAYca+qes/W6gMJxD4Bi8g4=
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>