1# Edit this file, and save to a .ovpn extension 2# so that OpenVPN will activate it when run 3# as a service. 4 5# Change 'myremote' to be your remote host, 6# or comment out to enter a listening 7# server mode. 8remote myremote 9 10# Uncomment this line to use a different 11# port number than the default of 1194. 12; port 1194 13 14# Choose one of three protocols supported by 15# OpenVPN. If left commented out, defaults 16# to udp. 17; proto [tcp-server | tcp-client | udp] 18 19# You must specify one of two possible network 20# protocols, 'dev tap' or 'dev tun' to be used 21# on both sides of the connection. 'tap' creates 22# a VPN using the ethernet protocol while 'tun' 23# uses the IP protocol. You must use 'tap' 24# if you are ethernet bridging or want to route 25# broadcasts. 'tun' is somewhat more efficient 26# but requires configuration of client software 27# to not depend on broadcasts. Some platforms 28# such as Solaris, OpenBSD, and Mac OS X only 29# support 'tun' interfaces, so if you are 30# connecting to such a platform, you must also 31# use a 'tun' interface on the Windows side. 32 33# Enable 'dev tap' or 'dev tun' but not both! 34dev tap 35 36# This is a 'dev tap' ifconfig that creates 37# a virtual ethernet subnet. 38# 10.3.0.1 is the local VPN IP address 39# and 255.255.255.0 is the VPN subnet. 40# Only define this option for 'dev tap'. 41ifconfig 10.3.0.1 255.255.255.0 42 43# This is a 'dev tun' ifconfig that creates 44# a point-to-point IP link. 45# 10.3.0.1 is the local VPN IP address and 46# 10.3.0.2 is the remote VPN IP address. 47# Only define this option for 'dev tun'. 48# Make sure to include the "tun-mtu" option 49# on the remote machine, but swap the order 50# of the ifconfig addresses. 51;tun-mtu 1500 52;ifconfig 10.3.0.1 10.3.0.2 53 54# If you have fragmentation issues or misconfigured 55# routers in the path which block Path MTU discovery, 56# lower the TCP MSS and internally fragment non-TCP 57# protocols. 58;fragment 1300 59;mssfix 60 61# If you have set up more than one TAP-Win32 adapter 62# on your system, you must refer to it by name. 63;dev-node my-tap 64 65# You can generate a static OpenVPN key 66# by selecting the Generate Key option 67# in the start menu. 68# 69# You can also generate key.txt manually 70# with the following command: 71# openvpn --genkey --secret key.txt 72# 73# key must match on both ends of the connection, 74# so you should generate it on one machine and 75# copy it to the other over a secure medium. 76# Place key.txt in the same directory as this 77# config file. 78secret key.txt 79 80# Uncomment this section for a more reliable 81# detection when a system loses its connection. 82# For example, dial-ups or laptops that travel 83# to other locations. 84# 85# If this section is enabled and "myremote" 86# above is a dynamic DNS name (i.e. dyndns.org), 87# OpenVPN will dynamically "follow" the IP 88# address of "myremote" if it changes. 89; ping-restart 60 90; ping-timer-rem 91; persist-tun 92; persist-key 93; resolv-retry 86400 94 95# keep-alive ping 96ping 10 97 98# enable LZO compression 99comp-lzo 100 101# moderate verbosity 102verb 4 103mute 10 104