# server > RouterOS directory reference for /interface/ovpn-server/server. ----------- ## interface/ovpn-server/server **Type:** Directory Whether the server is inactive. Whether an item is disabled. Name of the server. Port to run the server on. Layer3 or Layer2 tunnel mode (alternatively tun, tap). Transport protocol to use when connecting with the remote endpoint. Subnet mask applied to the client. Automatically generated MAC address of the server. Maximum Transmission Unit. Maximum packet size that the OVPN interface can send without packet fragmentation. Defines the time period (in seconds) after which the router starts sending keepalive packets every second. If no traffic and no keepalive responses are received for twice the keepalive-timeout, the non-responding client is disconnected. Specifies which PPP profile configuration is used when establishing the tunnel. Certificate from the certificate store that the OVPN server uses. If set to yes, the server checks whether the client's certificate belongs to the same certificate chain. Specifies which TLS versions to allow. Authentication methods that the server accepts. Allowed ciphers. Encryption key re-negotiation interval in seconds. 0 disables re-negotiation. Specifies which routes the OVPN client must add to the routing table. `def1` - overrides the default gateway with 0.0.0.0/1 and 128.0.0.0/1 instead of 0.0.0.0/0. `disabled` - does not push redirect-gateway flags. `ipv6` - redirects IPv6 routing into the tunnel by adding 2000::/4 and 3000::/4 routes. Routes to push to the client. Maximum input is limited to 1400 characters or 37 routes. IPv6 support added in version 7.21. IPv6 routes to push to the client. Whether IPv6 tunneling is enabled for this OVPN server. IPv6 prefix address used when generating the OVPN interface on the server side. Prefix length used for the tunneled IPv6 address. VRF in which to listen for connection attempts. By default PAP authentication is used. Set to mschap2 to use CHAP challenge authentication.