# Options
{

my $mtuTest = ${'openvpn-bridge'}{mtuTest} || 'enabled';
my $tunMtu = ${'openvpn-bridge'}{tunMtu};
my $fragment = ${'openvpn-bridge'}{fragment};
my $cipher = ${'openvpn-bridge'}{cipher} || 'auto';
my $redirectGW = ${'openvpn-bridge'}{redirectGW} || 'PerClient';
my $proto = ${'openvpn-bridge'}{protocol} || 'udp';
my $duplicate = ${'openvpn-bridge'}{duplicateCN} || 'disabled';
my $passtos = ${'openvpn-bridge'}{PassTOS} || 'enabled';

if ($proto eq 'tcp'){
    $mtuTest = 'disabled';
    $fragment = '';
}

$OUT .=<<"HERE";
keepalive 10 120
push "dhcp-option DOMAIN $DomainName"
push "dhcp-option DNS $LocalIP"
push "dhcp-option WINS $LocalIP"

HERE

if ($mtuTest eq 'enabled'){
    $OUT .= "mtu-test\n";
}
elsif (($mtuTest eq 'disabled')){
    if ($tunMtu ne ''){
        $OUT .= "tun-mtu $tunMtu\n";
    }
    if (($proto eq 'udp') && ($fragment ne '')){
        $OUT .= "fragment $fragment\nmssfix\n";
    }
}

if ($cipher ne 'auto'){
    $OUT .= "cipher $cipher\n";
}

if ($duplicate eq 'enabled'){
    $OUT .= "duplicate-cn\n";
}

if ($passtos eq 'enabled'){
    $OUT .= "passtos\n";
}

}

nice 5

