## Sample OpenVPN configuration file for# office using SSL/TLS mode and RSA certificates/keys.## '#' or ';' may be used to delimit comments.# Use a dynamic tun device.# For Linux 2.2 or non-Linux OSes,# you may want to use an explicit# unit number such as "tun1".# OpenVPN also supports virtual# ethernet "tap" devices.dev tun# 10.1.0.1 is our local VPN endpoint (office).# 10.1.0.2 is our remote VPN endpoint (home).ifconfig 10.1.0.1 10.1.0.2# Our up script will establish routes# once the VPN is alive.up ./office.up# In SSL/TLS key exchange, Office will# assume server role and Home# will assume client role.tls-server# Diffie-Hellman Parameters (tls-server only)dh dh1024.pem# Certificate Authority fileca my-ca.crt# Our certificate/public keycert office.crt# Our private keykey office.key# OpenVPN uses UDP port 5000 by default.# Each OpenVPN tunnel must use# a different port number.# lport or rport can be used# to denote different ports# for local and remote.; port 5000# Downgrade UID and GID to# "nobody" after initialization# for extra security.; user nobody; group nobody# If you built OpenVPN with# LZO compression, uncomment# out the following line.; comp-lzo# Send a UDP ping to remote once# every 15 seconds to keep# stateful firewall connection# alive.  Uncomment this# out if you are using a stateful# firewall.; ping 15# Verbosity level.# 0 -- quiet except for fatal errors.# 1 -- mostly quiet.# 5 -- medium output, good for normal operation.# 8 -- verbose, good for troubleshootingverb 5