A device behind an MX will be NAT'ed unless it is in concentrator mode. In that last case you will not be able to support it. Otherwise in the normal routed mode your ESP endpoint will just encapsulate ESP inside UDP port 4500. The MX itself when making IPsec VPN's will always use ESP for encapsulation. AutoVPN is proprietary and does not use standards based IPsec.
... View more
