ASA to MX Issues

[EHUG138]

Hello, 

Moving from a ASA to MX device, I am having a few issues. Primary issue is that I can not connect to devices on VLAN6. 

We have VLAN 1(internal) and VLAN 6(production). I need a server on VLAN 1 to access devices on VLAN 6. 

The firewall rules are: 

Allow Protocol ANY Source ServerIP Dst Port ANY Destination VLAN6 ANY

Deny Protocol ANY Source VLAN 6 Scr Port ANY Destination ANY Dst Port ANY

**there is a static route to have 192.168.0.0 traffic directed to a specific IP (device) on VLAN 6. 

There were also some NAT rules configured on the ASA that have not been added to the MX:

nat (VLAN6) 0 access-list no-nat-VLAN6
nat (VLAN6) 1 0.0.0.0 0.0.0.0

I understand I may be missing something simple here but please share your thoughts. 

[alemabrahao]

It would be interesting for you to share all the details, such as topology, how the configurations are on the MX side, etc.

[Prestont]

you might try to add a recursive flow on the MX. 

Allow Protocol ANY Source VLAN6 Dst Port ANY Destination ServerIP ANY

and see if it works.