The lab setup in question if almost ridiculously simple...    All three MX64s have WAN1 attached to a public address vlan from Spectrum on 173.95.x.x/27, no filtering between them.   Their WAN2 is attached to a public address vlan from ATT on 12.31.x.x/27, no filtering between them. Two of them get set for site-to-site HUB functionality and one as a spoke.   Hub-2 shows green VPN status for both peers, Hub-1 and Site-1.   Hub-1 and Site-1 show no peers... and there is no ip flowing between units that I can determine. ... View more