I am looking to setup something similar.     LAN -> physical MX -> vMX -> out my vpc. Does the vMX need two interfaces or will the public subnet interface land the VPN and then decrypt and out the same interface out to the iGW? ... View more