If they have all those devices, the modem won't be in bridge mode, it'll be in routed mode, but (non Spectrum specific) that shouldn't be a problem. ... View more

Looks like there's an outbound VPN firewall as well.  From what I can tell, this firewall was allowing the VPN traffic.  My guess is that 802.1x may be the only way to really lock down access on the MX. ... View more

I suppose we could set up as one-arm concentrator mode.  If we did this, could we utilize both WAN ports on our MX250 in some sort of layer 2 redundant mode?  We would want to directly connect 1 WAN port to one firewall and the other WAN port to the other firewall.  The firewalls are in HA and Active/Passive. ... View more