Note: some ciphers are no longer considered “safe” – eg AES-128-CBC. 
Hash Algorithm: Hash algorithm provides a method of quick access to data, 
including SHA1,SHA256,SHA512,MD5 
Note: some hash algorithms are no longer considered “safe” – eg SHA1 
Advanced Options 
 
TLS Cipher: restrict TLS cipher choice to listed ciphers only 
Use LZO Compression: enable or disable use LZO compression for data transfer 
Redirect default Gateway: enable or disable redirect default gateway 
Allow Client to Client: enable or disable allow client to client 
Allow duplicate cn: enable or disable allow duplicate cn 
TUN MTU Setting: set the value of TUN MTU 
Tunnel UDP Fragment: Size to fragment UDP packets larger than MTU to (blank 
means do not fragment) 
MSS-Fix/Fragment across the tunnel: Force TCP packet sizes to fit the MTU 
 
With the “Advanced Options” enabled, you will see these: