# ovpn-client > RouterOS directory reference for /interface/ovpn-client. ----------- ## interface/ovpn-client **Type:** Directory Whether an item is disabled. Whether the interface is running. Whether hardware encryption is active. Whether TLS authentication (tls-auth) is active. Whether tls-crypt authentication is active. Descriptive name of the interface. MAC address of the OVPN interface. Automatically generated if not specified. Maximum Transmission Unit. Maximum packet size that the OVPN interface can send without packet fragmentation. Remote address of the OVPN server. Port to connect to. Layer3 or Layer2 tunnel mode (alternatively tun, tap). Transport protocol to use when connecting to the remote endpoint. User name used for authentication. Password used for authentication. Must not be longer than 1000 characters. Specifies which PPP profile configuration is used when establishing the tunnel. Client certificate from the certificate store. Checks the server certificate's CN or SAN against the connect-to parameter and enables trust-chain validation against the router's certificate store. The IP or hostname must be present in the server's certificate. Specifies which TLS versions to allow. Allowed authentication methods. Allowed ciphers. To use GCM ciphers, set auth to null, because the GCM cipher also handles authentication. Whether to add DNS servers provided by the OVPN server to IP/DNS configuration. Whether to add the OVPN remote address as a default route. If enabled, the client does not use routes pushed by the server (including def1). Sends explicit disconnect notification in UDP mode.