My punt is that this spoke is sitting behind something else doing NAT.  Is that correct?   If you have a static public IP address then port something like udp/10000 (exact number not important) to the MX and then configure it to use manual NAT traversal again.   Otherwise try updating the firmware on the CPE in from of the MX that is doing NAT.   If the CPE has a firewall try turning it off.  Some CPEs have a mode like "DMZ" you can use to pass all traffic through. ... View more