Actually, as you mentioned I just need to provide the downstream Vlans internet, the MX WAN interface will be configured with the public ip. So, NAT will be turn on to re-write the source address of packets leaving the internal network.
... View more