pfSense

<openvpn>

	<openvpn-server>

		<vpnid>1</vpnid>

		<mode>server_tls</mode>

		<protocol>UDP4</protocol>

		<dev_mode>tun</dev_mode>

		<interface>wan</interface>

		<ipaddr></ipaddr>

		<local_port>1194</local_port>

		<description><![CDATA[Home]]></description>

		<custom_options>push &quot;route 172.20.5.0 255.255.255.0&quot;;

push &quot;client-nat dnat 172.20.5.0 255.255.255.0 10.0.5.0/24&quot;;</custom_options>

		<tls>xxx</tls>

		<tls_type>auth</tls_type>

		<tlsauth_keydir>0</tlsauth_keydir>

		<caref>5f44007cdc1eb</caref>

		<crlref></crlref>

		<certref>5f44015d30d71</certref>

		<dh_length>2048</dh_length>

		<ecdh_curve>none</ecdh_curve>

		<cert_depth>1</cert_depth>

		<crypto>AES-256-CBC</crypto>

		<digest>SHA256</digest>

		<engine>rdrand</engine>

		<tunnel_network>172.20.0.0/24</tunnel_network>

		<tunnel_networkv6></tunnel_networkv6>

		<remote_network></remote_network>

		<remote_networkv6></remote_networkv6>

		<gwredir></gwredir>

		<gwredir6></gwredir6>

		<local_network>10.0.5.0/24</local_network>

		<local_networkv6></local_networkv6>

		<maxclients></maxclients>

		<compression></compression>

		<compression_push></compression_push>

		<passtos></passtos>

		<client2client></client2client>

		<dynamic_ip>yes</dynamic_ip>

		<topology>subnet</topology>

		<serverbridge_dhcp></serverbridge_dhcp>

		<serverbridge_interface>none</serverbridge_interface>

		<serverbridge_routegateway></serverbridge_routegateway>

		<serverbridge_dhcp_start></serverbridge_dhcp_start>

		<serverbridge_dhcp_end></serverbridge_dhcp_end>

		<dns_domain>home.arpa</dns_domain>

		<dns_server1>172.20.0.1</dns_server1>

		<dns_server2></dns_server2>

		<dns_server3></dns_server3>

		<dns_server4></dns_server4>

		<username_as_common_name><![CDATA[disabled]]></username_as_common_name>

		<udp_fast_io>yes</udp_fast_io>

		<exit_notify>1</exit_notify>

		<sndrcvbuf>524288</sndrcvbuf>

		<netbios_enable></netbios_enable>

		<netbios_ntype>0</netbios_ntype>

		<netbios_scope></netbios_scope>

		<create_gw>v4only</create_gw>

		<verbosity_level>1</verbosity_level>

		<ncp-ciphers>AES-256-CBC</ncp-ciphers>

		<ncp_enable>enabled</ncp_enable>

		<ping_method>keepalive</ping_method>

		<keepalive_interval>10</keepalive_interval>

		<keepalive_timeout>60</keepalive_timeout>

		<ping_seconds>10</ping_seconds>

		<ping_push></ping_push>

		<ping_action>ping_restart</ping_action>

		<ping_action_seconds>60</ping_action_seconds>

		<ping_action_push></ping_action_push>

		<inactive_seconds>0</inactive_seconds>

	</openvpn-server>

</openvpn>