Correct, use to do this before MX15 firmware and above. They appear to have removed a basic SD-WAN feature as there obviously wasn't a device/hardware limitation.  ... View more

Worked great! Thanks for the hat tip!  ... View more

Just have the Inbound/Outbound rules for the Port. Does the Source need to be changed to the exact IP of the vMX or the CIDR?   Again, appreciate any help/insight! ... View more

Setup the vMX without issue, just migrated DB to MySQL database (Aurora) and setup in same Security Group but under private subnet (almost same setup as diagram I now see here).   However, on the vMX side I added the CIDR for the subnets in VPN but can't ping from the vMX to the DB. I setup the inbound/outbound rules for the DB Private subnet (on AWS side) and made sure application port (3307 instead of 3306) was setup as well.    Any insight from someone who's done this would be awesome.  ... View more