*** Consider using Wireguard instead!
https://notes.airinscomputers.com/?item=322

This is old VPN technology, I don't recommend using this.


configure
set vpn pptp remote-access authentication mode local
set vpn pptp remote-access authentication local-users username username1 password laksdfjklsjkldf
set vpn pptp remote-access authentication local-users username username2 password abcdabcd
set vpn pptp remote-access client-ip-pool start 172.16.20.200
set vpn pptp remote-access client-ip-pool stop 172.16.20.210
set vpn pptp remote-access dns-servers server-1 4.2.2.2
commit
save



In Firewall Policies, add 2 rules in WAN_LOCAL
One allow TCP port 1723
One allow named port GRE