I just ran across this post... It's been a few years and I wanted to see how things are going with your network?  ... View more

I put the MX back in Passthrough mode and made it a hub. After I did this, I reset the OSPF connections and rebooted both the MX and the Palo. Once they were back online they established full adjacency and the MX began advertising routes with the Palo. I did not add any statics for the network behind the Palo as the spoke sites have no need to access those networks.    Thanks to everyone for the assistance on this.    Cole ... View more

We have a similar scenario with no Internet access on the MPLS circuit, so no way to communicate with the VPN registry. We were thinking of an L3 device between the MX and MPLS circuit to route non-tunneled traffic back through the LAN interface of the MX for Internet connectivity. Is this how you accomplished your deployment, or do you have Internet access on your MPLS circuit?  ... View more