|
|
|
@ -1,11 +1,11 @@
|
|
|
|
|
###############################################################################
|
|
|
|
|
# OpenVPN 2.0 Sample Configuration File
|
|
|
|
|
# for PacketiX VPN / SoftEther VPN Server
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# This configuration file is auto-generated. You might use this config file
|
|
|
|
|
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
|
|
|
|
|
# However, before you try it, you should review the descriptions of the file
|
|
|
|
@ -13,7 +13,7 @@
|
|
|
|
|
# If necessary, you have to modify a little adequately on the file.
|
|
|
|
|
# For example, the IP address or the hostname as a destination VPN Server
|
|
|
|
|
# should be confirmed.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
|
|
|
|
# the destination VPN Server on the OpenVPN Client computer when you use this
|
|
|
|
|
# config file. Please refer the below descriptions carefully.
|
|
|
|
@ -43,7 +43,7 @@ push-peer-info
|
|
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
|
# Specify the type of the layer of the VPN connection.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
|
|
|
|
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
|
|
|
|
#
|
|
|
|
@ -57,7 +57,7 @@ dev $TAG_TUN_TAP$
|
|
|
|
|
# Specify the underlying protocol beyond the Internet.
|
|
|
|
|
# Note that this setting must be correspond with the listening setting on
|
|
|
|
|
# the VPN Server.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# Specify either 'proto tcp' or 'proto udp'.
|
|
|
|
|
|
|
|
|
|
proto $TAG_PROTO$
|
|
|
|
@ -66,18 +66,18 @@ proto $TAG_PROTO$
|
|
|
|
|
###############################################################################
|
|
|
|
|
# The destination hostname / IP address, and port number of
|
|
|
|
|
# the target VPN Server.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
|
|
|
|
# specify the IP address instead of the hostname.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# Note that the auto-generated below hostname are a "auto-detected
|
|
|
|
|
# IP address" of the VPN Server. You have to confirm the correctness
|
|
|
|
|
# beforehand.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# When you want to connect to the VPN Server by using TCP protocol,
|
|
|
|
|
# the port number of the destination TCP port should be same as one of
|
|
|
|
|
# the available TCP listeners on the VPN Server.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# When you use UDP protocol, the port number must same as the configuration
|
|
|
|
|
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
|
|
|
|
|
|
|
|
@ -86,7 +86,7 @@ $TAG_BEFORE_REMOTE$remote $TAG_HOSTNAME$ $TAG_PORT$
|
|
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
|
# The HTTP/HTTPS proxy setting.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# Only if you have to use the Internet via a proxy, uncomment the below
|
|
|
|
|
# two lines and specify the proxy address and the port number.
|
|
|
|
|
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
|
|
|
@ -97,7 +97,7 @@ $TAG_BEFORE_REMOTE$remote $TAG_HOSTNAME$ $TAG_PORT$
|
|
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
|
# The encryption and authentication algorithm.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# The default setting is compatible with most clients. Modify it as you prefer.
|
|
|
|
|
# It is recommended to use a better algorithm if your client supports it.
|
|
|
|
|
# When you specify an unsupported algorithm, an error will occur.
|
|
|
|
@ -108,7 +108,7 @@ auth SHA1
|
|
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
|
# Other parameters necessary to connect to the VPN Server.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# It is not recommended to modify it unless you have a particular need.
|
|
|
|
|
|
|
|
|
|
resolv-retry infinite
|
|
|
|
@ -120,7 +120,7 @@ verb 3
|
|
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
|
# Authentication with credentials.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# Comment the line out in case you want to use the certificate authentication.
|
|
|
|
|
|
|
|
|
|
auth-user-pass
|
|
|
|
@ -128,7 +128,7 @@ auth-user-pass
|
|
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
|
# The certificate file of the destination VPN Server.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# The CA certificate file is embedded in the inline format.
|
|
|
|
|
# You can replace this CA contents if necessary.
|
|
|
|
|
# Please note that if the server certificate is not a self-signed, you have to
|
|
|
|
@ -141,10 +141,10 @@ $CA$
|
|
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
|
# Client certificate and key.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# A pair of client certificate and private key is required in case you want to
|
|
|
|
|
# use the certificate authentication.
|
|
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
# To enable it, uncomment the lines below.
|
|
|
|
|
# Paste your certificate in the <cert> block and the key in the <key> one.
|
|
|
|
|
|
|
|
|
|