vyos@vyos# cat /run/openvpn/vtun10.conf
### Autogenerated by interfaces_openvpn.py ###
#
# See https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
# for individual keyword definition
#
#
#

verb 3
dev-type tun
dev vtun10
persist-key
proto udp
local 172.16.0.1
lport 1194
disable-dco

#
# OpenVPN Server mode
#
mode server
tls-server
topology subnet
server 10.10.0.0 255.255.255.0

keepalive 10 600
management /run/openvpn/openvpn-mgmt-intf unix


# TLS options
ca /run/openvpn/vtun10_ca.pem
cert /run/openvpn/vtun10_cert.pem
key /run/openvpn/vtun10_cert.key
dh /run/openvpn/vtun10_dh.pem


# Encryption options
data-ciphers none
# https://vyos.dev/T5027
# Required to support BF-CBC (default ciphername when none given)
providers legacy default

auth sha512