Regarding this fine answer a couple of years ago now, are there any news as to this "Bug" ? Can I still go only to 255 VLANs on a MX ? Only asking because I have some issues with switch ACLs, where you cannot apply them only on the Layer 3 switch, but they are also applied on all other switches - And my only workaround is to instead create all layer 3 on the MX ... View more

@Sarpe    That is correct! ... View more

Greetings everyone,   I can confirm that AutoVPN hubs should not be added to templates at all. It is not possible to configure an MX as a spoke with an exit hub that is part of a template. I will also update the AutoVPN template and deployment guides ASAP.    Cheers, Gaurav     ... View more

It seems Catalina prevents VPN over non-encrypted networks.   I'm find out the hard way and am now trying to regain connectivity. ... View more

Hi,   Make sure that default gateway of switch's management IP is not defined as SVI of management VLAN on itself.   Cheers, Gaurav ... View more

Hi Geri0n, I am a bit confused. Let me tell you what I understood here - You have user machines and POS systems in a restaurant. One requirement is to allow POS systems to only reach out to a cloud server (using a specific Public IP address) and everything else should be blocked. The other requirement is to have user machines access only approved sites. Am I correct? Note: I am talking about inbound to outbound traffic (LAN-WAN) meaning flows are initiated by local devices to outside network and not the other way around. Cheers, Gaurav ... View more

Hi Gaurav,   made a wish for that one many moon ago...still waiting.   Regards ... View more

If you do not have a Linux machine handy, you could simply run command "ping 1.1.1.1 -n 30" on a cmd or "ping 1.1.1.1 -c 30" on a terminal and follow the same steps mentioned above, but make sure the laptop is plugged directly into LAN port of the MX. You could still use filter "icmp.ident == ident_value" to display interesting packets only. ... View more