Yes 😉   MX needs static routes to forward to LAN. OSPF on MX is only for advertising (not learning). ... View more

Thanks for the correct answer! It's so easy to just go to Security &SD-WAN – VPN Status and read the following: as we can see the OAC has a public ip assigned of 11.11.11.11 on it's wan 1 interface which is NATED, both ways ofc. VPN Registry: Connected. This WAN appliance is able to connect to multiple VPN registries using UDP port 9350 & 9358. NAT type: Friendly. ThisWAN applianceis behind a VPN-friendly NAT, locally using 11.11.11.11:43059, which is NAT-ed to 22.22.22.22:43059 Encrypted. Using IPsec and AES encryption. ... View more