I believe ANY means any IP which traverses it as a L3 router. For example if you had a downstream switch, ANY on the MX would not apply to layer 2 adjacent traffic. Also, ANY on the MX is both for subnets local to the MX and any subnets coming over autovpn. ... View more