dev tun0 cipher AES-256-CBC proto tcp port 65301 persist-tun persist-key duplicate-cn verb 3 server 10.255.252.0 255.255.255.0 ca /etc/openvpn/ca/pki/ca.crt cert /etc/openvpn/ca/issued/server.crt key /etc/openvpn/ca/private/server.key dh /etc/openvpn/server/dh2048.pem crl-verify /etc/openvpn/ca/crl.pem keepalive 10 120 sndbuf 0 rcvbuf 0