Short answer no - this is where we get to see the gaps appearing between a router platform and a firewall with routing functions... Would need a router in front of the MX - to be fair, when multi-VRF is required by customers for MPLS networks it's typically a managed service from the provider, with CPE (typically Cisco ISR) - you could ask for multiple services to be seperated on a provider NTE and presented on separate ports to the MX? ... View more