Hi,   In the API docs it shows the following: { "mode": "spoke", "hubs": [ { "hubId": "N_4901849", "useDefaultRoute": true }, { "hubId": "N_1892489", "useDefaultRoute": false } ], "subnets": [ { "localSubnet": "192.168.1.0/24", "useVpn": true }, { "localSubnet": "192.168.128.0/24", "useVpn": true } ] } In the spoke mode you can get which hubs its connected to. Is the "hubId" the networkID of where the hub is located? Or is just a random string that's generated? Also, if the FW is the hub, is there any way to find this ID if its not the networked ID? I'm writing code to stitch up VPN connections and its difficult to associate hub and spoke without some unique identifier.   This is what I have when the FW is setup as hub: { "mode": "hub", "hubs": [], "subnets": [ { "localSubnet": "192.168.128.0/24", "useVpn": true }, { "localSubnet": "137.68.11.0/24", "useVpn": false }, { "localSubnet": "101.11.10.0/24", "useVpn": true } ] } ... View more

Hi,   I'm trying to understand how the MX firewall routes packets in and out of a single interface. I have an MX65 with two WAN links, however, I only have on link configured via DHCP. It has a public IP and is being managed via the dashboard. Now here's my questions:   1. Is it possibly the case that the one interface with IP is really only for management, but that the real firewall policy is between two L2 interfaces?  2. Does the device have one IP’d interface, and another interface with no IP?  Or does it really only have the one interface, traffic comes in, and if it passes, it goes back exactly where it came from? 3. Does the MX have any other rules/constraints about surrounding network, like “there must be two connected routers”? 4. If you send traffic to a device with one interface, let it filter/route, then let it send the traffic back out the SAME interface, then the next device along the path is likely to reject the traffic as a loop!? ... View more

Hi,   If an MX is in L2/Passthrough mode, the WAN1 link is still configured with an IP for mgmt, correct? How does it act in this mode if there's an IP on an interface?   Thanks in advance, -Jerome ... View more

Hi,   I'm trying to understand what this mean "Inbound traffic will be restricted to the service and forwarding rules configured below.” when configuring firewall rules on an MX device? Does this mean that rules are automatically created when an inbound session is created? The service section in Firewall doesn't seem easy to configure or add something besides Ping which is already there. Additionally, if I configured something in the forwarding section (i.e. port forwarding), does this only take effect during an inbound session?   Thanks in advance, -Jerome   ... View more

Hi,   Is there a way to tell whether your MX is in 'Passthrough or VPN concentrator' or 'Network Address Translation (NAT)' mode via a ReST API?   Thanks in advance, -Jerome ... View more