Home | 简体中文 | 繁体中文 | 杂文 | 知乎专栏 | 51CTO学院 | CSDN程序员研修院 | Github | OSChina 博客 | 腾讯云社区 | 阿里云栖社区 | Facebook | Linkedin | Youtube | 打赏(Donations) | About
知乎专栏多维度架构

17.5. PPTP

user -> internet -> juniper -> vip 1723 -> 192.168.3.9:1723

set vip multi-port
set alg pptp enable

set service "LinuxPPTP" protocol tcp src-port 0-65535 dst-port 1723-1723
set service "LinuxPPTP" + udp src-port 0-65535 dst-port 1723-1723

set interface untrust vip 61.144.230.44 + 1723 "LinuxPPTP" 192.168.3.9

set policy id 82 from "Trust" to "Untrust"  "Any" "Any" "PPTP" permit
set policy id 82 application "PPTP"
set policy id 82