Yeah, understanding your routing config and VLAN setup will help troubleshoot this. Running a packet capture on the LAN side MX could also provide some clues. ... View more

Thanks for all the suggestions.  I wonder if I just didn't wait long enough when applying the policies to test.  I stopped and retried pings, but I only waiting about 2 minutes or so.  From what you are saying, it might have to be 10 minutes or more or possibly even a reboot to kick in.  This makes testing pretty hard. ... View more