I've run into this exact issue and opened a case.  The tech told me that if they make these changes which fixed your issues, would effectively kill all VPN (site to site and client VPN).  Can anyone here confirm that's true or not?  I'm now having to go on site and start the basic troubleshooting as they want me to connect the switch directly to the MX with a wired adapter to prove it's not my layer 3 switch...   Thanks     ... View more