VRRP Packets are sent across all VLANs, so you still have the MXes receiving VRRP Packets on VLAN 20 and they think all is well. ... View more

This question is likely better suited for the vendor of your client machines, Typically would be pushed via GPO however if you don't see one you might have to implement a PowerShell script or similar and push it to all the devices that way. ... View more

You can also see the new calls in this path changes article ... View more

Hey Mauricio,   The subnets the MX advertises to the peer have to be configured as Enabled in VPN under the addressing & VLANs page. Alternatively, this can be done on the Site-to-Site VPN page, the subnets you want advertised to the peer have to be selected as enabled. Problems at phase 2 are usually due to mismatched subnets so ensure that what is configured on the MX is expected by the peer and what is configured by the peer is expected by the MX (Subnets/Parameters). If you continue having trouble I would recommend opening a support case as they would have further visibility with your configuration as well as being able to view verbose logging to determine what the reason for phase 2 failing is.   Regards, KH ... View more