#====== openvpn server options ======
server 10.129.114.224 255.255.255.224
local OPENVPN_REMOTE_PEER
dh "keys/dh1024.pem"
tls-auth "keys/ta-sfo.key"
ca "keys/COMPANY_private_CA.crt"
cert "keys/OPENVPN_REMOTE_PEER.crt"
key "keys/OPENVPN_REMOTE_PEER.key"

comp-lzo no
dev tun0
mlock
mtu-test
passtos
ping-timer-rem
reneg-sec 0
tls-exit

plugin /usr/lib/openvpn/openvpn-auth-pam.so login
client-to-client
#client-config-dir "ccd"
#ccd-exclusive
duplicate-cn
keepalive 10 60
#max-clients 20
mute 20
mute-replay-warnings
#opt-verify
persist-key
persist-tun
#tcp-nodelay
topology subnet
#verb 2
status-version 2

#====== options advertised by the server to each client ======
push "comp-lzo no"
push "topology subnet"
push "dhcp-option DOMAIN company.com"
push "route remote_host 255.255.255.255 net_gateway"
# only the route to SFO network is mandatory, other routes are optional
push "route REMOTE_PUBLIC_SUBNET 255.255.255.224 vpn_gateway"
push "explicit-exit-notify 6"


