pfSense

        <openvpn>

                <openvpn-server>

                        <vpnid>4</vpnid>

                        <mode>server_tls_user</mode>

                        <authmode>LDAP Authn Service</authmode>

                        <protocol>UDP4</protocol>

                        <dev_mode>tap</dev_mode>

                        <interface>_vipaaaaaaaaaaaaa</interface>

                        <ipaddr>198.51.100.16</ipaddr>

                        <local_port>1194</local_port>

                        <description><![CDATA[TAP Mode VPN]]></description>

                        <custom_options>reneg-sec 36000

server-bridge 203.0.113.1 255.255.255.224 203.0.113.10 203.0.113.30</custom_options>

                        <tls>###REDACTED###</tls>

                        <tls_type>crypt</tls_type>

                        <tlsauth_keydir>2</tlsauth_keydir>

                        <caref>bbbbbbbbbbbbb</caref>

                        <crlref></crlref>

                        <ocspurl></ocspurl>

                        <certref>ccccccccccccc</certref>

                        <dh_length>none</dh_length>

                        <ecdh_curve>secp384r1</ecdh_curve>

                        <cert_depth>1</cert_depth>

                        <strictusercn></strictusercn>

                        <remote_cert_tls></remote_cert_tls>

                        <data_ciphers_fallback>AES-128-GCM</data_ciphers_fallback>

                        <digest>SHA256</digest>

                        <engine>none</engine>

                        <tunnel_network></tunnel_network>

                        <tunnel_networkv6></tunnel_networkv6>

                        <remote_network></remote_network>

                        <remote_networkv6></remote_networkv6>

                        <gwredir>yes</gwredir>

                        <gwredir6></gwredir6>

                        <local_network></local_network>

                        <local_networkv6></local_networkv6>

                        <maxclients></maxclients>

                        <allow_compression>no</allow_compression>

                        <compression></compression>

                        <compression_push></compression_push>

                        <passtos></passtos>

                        <client2client>yes</client2client>

                        <dynamic_ip>yes</dynamic_ip>

                        <topology>subnet</topology>

                        <serverbridge_dhcp>yes</serverbridge_dhcp>

                        <serverbridge_interface>none</serverbridge_interface>

                        <serverbridge_routegateway></serverbridge_routegateway>

                        <serverbridge_dhcp_start></serverbridge_dhcp_start>

                        <serverbridge_dhcp_end></serverbridge_dhcp_end>

                        <dns_server1>1.1.1.1</dns_server1>

                        <dns_server2>1.0.0.1</dns_server2>

                        <dns_server3></dns_server3>

                        <dns_server4></dns_server4>

                        <username_as_common_name><![CDATA[enabled]]></username_as_common_name>

                        <exit_notify>1</exit_notify>

                        <sndrcvbuf></sndrcvbuf>

                        <netbios_enable></netbios_enable>

                        <netbios_ntype>0</netbios_ntype>

                        <netbios_scope></netbios_scope>

                        <create_gw>v4only</create_gw>

                        <verbosity_level>1</verbosity_level>

                        <duplicate_cn></duplicate_cn>

                        <data_ciphers>AES-128-GCM</data_ciphers>

                        <ncp_enable>enabled</ncp_enable>

                        <ping_method>keepalive</ping_method>

                        <keepalive_interval>10</keepalive_interval>

                        <keepalive_timeout>60</keepalive_timeout>

                        <ping_seconds>10</ping_seconds>

                        <ping_push></ping_push>

                        <ping_action>ping_restart</ping_action>

                        <ping_action_seconds>60</ping_action_seconds>

                        <ping_action_push></ping_action_push>

                        <inactive_seconds>0</inactive_seconds>

                </openvpn-server>

        </openvpn>