Windows撥PPTP ×××只需放行如下策略
set service "1723" protocol tcp src-port 0-65535 dst-port 1723-1723
set interface ethernet0/1 vip interface-ip 1723 "1723" 192.168.1.2 manual
set policy name "1723" from "Untrust" to "Trust" "Any" "VIP(ethernet0/1)" "1723" permit
MAC撥PPTP ×××除了上面還需放行如下策略
set service "GRE47" protocol 47 src-port 0-65535 dst-port 2048-2048
set interface ethernet0/1 vip interface-ip 2048 "GRE47" 192.168.1.2 manual
set policy name "GRE47" from "Untrust" to "Trust" "Any" "VIP(ethernet0/1)" "GRE47" permit