4、Juniper SSG520 PPTP映射到ROS后MAC无法连接解决方法

Windows拨PPTP ×××只需放行如下策略
set service "1723" protocol tcp src-port 0-65535 dst-port 1723-1723
set interface ethernet0/1 vip interface-ip 1723 "1723" 192.168.1.2 manual
set policy name "1723" from "Untrust" to "Trust" "Any" "VIP(ethernet0/1)" "1723" permit

MAC拨PPTP ×××除了上面还需放行如下策略
set service "GRE47" protocol 47 src-port 0-65535 dst-port 2048-2048
set interface ethernet0/1 vip interface-ip 2048 "GRE47" 192.168.1.2 manual
set policy name "GRE47" from "Untrust" to "Trust" "Any" "VIP(ethernet0/1)" "GRE47" permit

转载于:https://blog.51cto.com/kaiyuandiantang/2328292