18.5. PPTP

user -> internet -> juniper -> vip 1723 -> 192.168.3.9:1723

set vip multi-port
set alg pptp enable

set service "LinuxPPTP" protocol tcp src-port 0-65535 dst-port 1723-1723
set service "LinuxPPTP" + udp src-port 0-65535 dst-port 1723-1723

set interface untrust vip 61.144.230.44 + 1723 "LinuxPPTP" 192.168.3.9

set policy id 82 from "Trust" to "Untrust"  "Any" "Any" "PPTP" permit
set policy id 82 application "PPTP"
set policy id 82
		

原文出处：Netkiller 系列 手札
本文作者：陈景峯
转载请与作者联系，同时请务必标明文章原始出处和作者信息及本声明。