1# Edit this file, and save to a .ovpn extension
2# so that OpenVPN will activate it when run
3# as a service.
4
5# Change 'myremote' to be your remote host,
6# or comment out to enter a listening
7# server mode.
8remote myremote
9
10# Uncomment this line to use a different
11# port number than the default of 1194.
12; port 1194
13
14# Choose one of three protocols supported by
15# OpenVPN.  If left commented out, defaults
16# to udp.
17; proto [tcp-server | tcp-client | udp]
18
19# You must specify one of two possible network
20# protocols, 'dev tap' or 'dev tun' to be used
21# on both sides of the connection.  'tap' creates
22# a VPN using the ethernet protocol while 'tun'
23# uses the IP protocol.  You must use 'tap'
24# if you are ethernet bridging or want to route
25# broadcasts.  'tun' is somewhat more efficient
26# but requires configuration of client software
27# to not depend on broadcasts.  Some platforms
28# such as Solaris, OpenBSD, and Mac OS X only
29# support 'tun' interfaces, so if you are
30# connecting to such a platform, you must also
31# use a 'tun' interface on the Windows side.
32
33# Enable 'dev tap' or 'dev tun' but not both!
34dev tap
35
36# This is a 'dev tap' ifconfig that creates
37# a virtual ethernet subnet.
38# 10.3.0.1 is the local VPN IP address
39# and 255.255.255.0 is the VPN subnet.
40# Only define this option for 'dev tap'.
41ifconfig 10.3.0.1 255.255.255.0
42
43# This is a 'dev tun' ifconfig that creates
44# a point-to-point IP link.
45# 10.3.0.1 is the local VPN IP address and
46# 10.3.0.2 is the remote VPN IP address. 
47# Only define this option for 'dev tun'.
48# Make sure to include the "tun-mtu" option
49# on the remote machine, but swap the order
50# of the ifconfig addresses.
51;tun-mtu 1500
52;ifconfig 10.3.0.1 10.3.0.2
53
54# If you have fragmentation issues or misconfigured
55# routers in the path which block Path MTU discovery,
56# lower the TCP MSS and internally fragment non-TCP
57# protocols.
58;fragment 1300
59;mssfix
60
61# If you have set up more than one TAP-Win32 adapter
62# on your system, you must refer to it by name.
63;dev-node my-tap
64
65# You can generate a static OpenVPN key
66# by selecting the Generate Key option
67# in the start menu.
68#
69# You can also generate key.txt manually
70# with the following command:
71#   openvpn --genkey --secret key.txt
72#
73# key must match on both ends of the connection,
74# so you should generate it on one machine and
75# copy it to the other over a secure medium.
76# Place key.txt in the same directory as this
77# config file.
78secret key.txt
79
80# Uncomment this section for a more reliable
81# detection when a system loses its connection.
82# For example, dial-ups or laptops that travel
83# to other locations.
84#
85# If this section is enabled and "myremote"
86# above is a dynamic DNS name (i.e. dyndns.org),
87# OpenVPN will dynamically "follow" the IP
88# address of "myremote" if it changes.
89; ping-restart 60
90; ping-timer-rem
91; persist-tun
92; persist-key
93; resolv-retry 86400
94
95# keep-alive ping
96ping 10
97
98# enable LZO compression
99comp-lzo
100
101# moderate verbosity
102verb 4
103mute 10
104