pfSense

dev ovpns2

verb 6

dev-type tun

dev-node /dev/tun2

writepid /var/run/openvpn_server2.pid

#user nobody

#group nobody

script-security 3

daemon

keepalive 10 60

ping-timer-rem

persist-tun

persist-key

proto udp4

cipher AES-128-CBC

auth SHA1

up /usr/local/sbin/ovpn-linkup

down /usr/local/sbin/ovpn-linkdown

client-connect /usr/local/sbin/openvpn.attributes.sh

client-disconnect /usr/local/sbin/openvpn.attributes.sh

local <external-IP>

tls-server

server 172.29.128.0 255.255.255.128

client-config-dir /var/etc/openvpn-csc/server2

verify-client-cert none

username-as-common-name

plugin /usr/local/lib/openvpn/plugins/openvpn-plugin-auth-script.so /usr/local/sbin/ovpn_auth_verify_async user YmYwX2R1bzAw false server2 1195

tls-verify "/usr/local/sbin/ovpn_auth_verify tls '<hostname>' 1"

lport 1195

management /var/etc/openvpn/server2.sock unix

push "route 10.48.0.0 255.255.0.0"

push "route 10.0.0.0 255.255.0.0"

push "route 10.160.0.0 255.255.0.0"

push "route 172.17.17.0 255.255.255.0"

push "route 172.17.2.104 255.255.255.255"

push "dhcp-option DOMAIN <domain>"

push "dhcp-option DNS 10.0.80.12"

push "dhcp-option NTP 10.0.80.12"

client-to-client

ca /var/etc/openvpn/server2.ca 

cert /var/etc/openvpn/server2.cert 

key /var/etc/openvpn/server2.key 

dh /etc/dh-parameters.2048

ncp-ciphers AES-256-GCM:AES-128-GCM

persist-remote-ip

float

topology subnet

reneg-sec 43200