*** Consider using Wireguard instead!
This is old VPN technology, I don't recommend using this. configure set vpn pptp remote-access authentication mode local set vpn pptp remote-access authentication local-users username username1 password laksdfjklsjkldf set vpn pptp remote-access authentication local-users username username2 password abcdabcd set vpn pptp remote-access client-ip-pool start 172.16.20.200 set vpn pptp remote-access client-ip-pool stop 172.16.20.210 set vpn pptp remote-access dns-servers server-1 4.2.2.2 commit save In Firewall Policies, add 2 rules in WAN_LOCAL One allow TCP port 1723 One allow named port GRE |