MAC拨PPTP ×××除了上面还需放行如下策略
set service "GRE47" protocol 47 src-port 0-65535 dst-port 2048-2048
set interface ethernet0/1 vip interface-ip 2048 "GRE47" 192.168.1.2 manual
set policy name "GRE47" from "Untrust" to "Trust" "Any" "VIP(ethernet0/1)" "GRE47" permit
4、Juniper SSG520 PPTP映射到ROS后MAC无法连接解决方法
原文：http://blog.51cto.com/kaiyuandiantang/2328292