Couple of things to check first - make sure your MX firmware is up to date. Double check your network connections and make sure you're not introducing a loop into your network some how. Remember, the MX devices don't run spanning tree (STP) so if you have multiple connections from the same switch (or switch stack) to the MX then you need to ensure that the switch is running STP to prevent loops. Do you have a diagram of how things are connected?   If you're sure there are no loops forming when you enable Port 19, and your firmware is up to date then I'd suggest you open a support ticket as something doesn't seem right. ... View more

Hi,   I need to have a directly connected subnet. On one end of the firewall. Must be seperated physically.  Otherwise i would Go for one armed would make my life easier.      ... View more

Give it a non-routable link-local address.  Like 169.254.0.1/30. ... View more

Hi UCcert,   Thought so, tnx for the feedback.  ... View more

 Hi Seshu,   Thank you for the reference.  I do have a question about the following statement regarding VPN concentrator.   Passthrough or VPN concentrator The secrurity appliance acts as layer 2 bridge and does not modify client traffic. Configure VPN to enable communication with remote peers. Only one WAN uplink can be used in this mode.   The layer 2 is what is confusing me in one armed mode the vpn traffic is routed back over the same interface i guess. It is not that it is building Layer 2 VPN's over IPSEC? ... View more