Allow IP Any Any between Datacenter and Branch office

[bayet]

I'm looking how to create firewalls rules between my Datacenter and Brand Ofiice. The branch has MX64 connected through MPLS and local break-out Internet. ( No AutoVPN ) yet.

Datacenter must be able to initiate IP session and also from the Branch to DC. This mean I have to open IP from the DC as source to the location Subnet on any port.

How can I solve this issue.

[PhilipDAth]

If you create a layer 3 firewall rule allowing traffic from the branch to the DC (on the branch MXs) - traffic in the opposite direction will also be allowed. On the DC MX create a rule allowing traffic from the DC to the branch (and return traffic will be allowed).