We have an MX-250 at corporate configured as a hub.  Remote locations connect with MX-67c's.  What's the best way to restrict traffic from each remote location to only the corporate office?  Basically, deny traffic from one vpn to another? ... View more

Hello Everyone,   We have a, MX67 at a remote location with a working tunnel to an MX-250 at corporate.  The 67 is bound to a template that is working fine at many other locations.  Everything is green on vpn status.   The 67 shows several active IP's but only one (an old camera system) is pingable via the tunnel.  A pc there can access the internet but not anything via the tunnel.  - We can ping the MX-250 from that pc but nothing past that.  We have rebooted the 67, unbound/rebound the template.  From corporate I can ping the VLAN interface but only the camera system IP.   Any ideas would be appreciated.  Thanks! ... View more