diff --git a/doc/sample.config b/doc/sample.config
index 14f069ac..d0befa12 100644
--- a/doc/sample.config
+++ b/doc/sample.config
@@ -475,8 +475,8 @@ no-route = 192.168.5.0/255.255.255.0
 #restrict-user-to-routes = true
 
 # This option implies restrict-user-to-routes set to true. If set, the
-# script /usr/bin/ocserv-fw will be called to restrict the user to its
-# to accessing specific ports in the network. This option can be set globally
+# script /usr/bin/ocserv-fw will be called to restrict the user to
+# access specific ports in the network. This option can be set globally
 # or in the per-user configuration.
 #restrict-user-to-ports = "tcp(443), tcp(80), udp(443), sctp(99), tcp(583), icmp(), icmpv6()"
 
diff --git a/src/ocserv-args.def b/src/ocserv-args.def
index c5d543ee..314a39aa 100644
--- a/src/ocserv-args.def
+++ b/src/ocserv-args.def
@@ -563,8 +563,8 @@ no-route = 192.168.5.0/255.255.255.0
 #restrict-user-to-routes = true
 
 # This option implies restrict-user-to-routes set to true. If set, the
-# script /usr/bin/ocserv-fw will be called to restrict the user to its
-# to accessing specific ports in the network. This option can be set globally
+# script /usr/bin/ocserv-fw will be called to restrict the user to
+# access specific ports in the network. This option can be set globally
 # or in the per-user configuration.
 #restrict-user-to-ports = "tcp(443), tcp(80), udp(443), sctp(99), tcp(583), icmp(), icmpv6()"