Hi, Did you have in place as suggested by Pugmeister - 1. A route table in VNET 2 pointing to the LAN IP of the vMX in VNET 1? Azure takes care of getting traffic between the VNET's but the route table gets traffic to anything outside Azure 2. Did you add the VNET 2 subnet as a local subnet on the vMX   in addition to your Layer 8 issue 🙂 ?   Thanks/DP ... View more