Thanks all. I was hoping the vMX would be an edge device. However given it isn't, i have just deployed a NAT gateway and load balancer in my vnet. The vMX is just dealing with routed traffic. What is the logic behind the vMX not being able to be an edge firewall and look after all my traffic?   ... View more

Sorry for the radio silence OK, so I have put it into VPN Concentrator mode and that seems to have worked. Many thanks for the help.  ... View more

Thanks, I had followed a couple of tutorials and they all showed that you should add local networks here, but didn't require an interface address. This makes sense as I want to explicitly state which networks are advertised through the VPN.   however I can define a network in Addressing and VLANs and add it in the VPN Settings, but I am required to specify an interface address for the network. which doesn't make sense as that interface wouldn't be attached to the subnet.         ... View more

Hi, sorry I don't understand this. the device isn't attached to the internal subnet. Do I just choose an IP from the internal subnet? ... View more