pfSense

dev ovpnc3

verb 3

dev-type tap

dev-node /dev/tap3

writepid /var/run/openvpn_client3.pid

#user nobody

#group nobody

script-security 3

daemon

keepalive 10 60

ping-timer-rem

persist-tun

persist-key

proto udp6

cipher AES-128-CBC

auth SHA512

up /usr/local/sbin/ovpn-linkup

down /usr/local/sbin/ovpn-linkdown

local 2001:

engine cryptodev

tls-client

client

lport 0

management /var/etc/openvpn/client3.sock unix

remote 2a03:

ca /var/etc/openvpn/client3.ca 

cert /var/etc/openvpn/client3.cert 

key /var/etc/openvpn/client3.key 

tls-auth /var/etc/openvpn/client3.tls-auth 1

comp-lzo no

resolv-retry infinite

remote-cert-tls server

auth-nocache