Set system root-authentication encrypted-password '$6$Tc7j6QVB$UQ4WzeKUlcwMyIzJRo4WtRW4/WMAhWlWC/6Pd6RwYatXqEKf40vJxAq28TAnRAsuS8BQugOtyopVSs7nUARbY0' Inet6.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both Inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden) Set interfaces lo0 unit 0 family inet address 10.10.10.1/32 Set interfaces ge-0/0/6 unit 0 family inet address 172.16.2.1/24 Set interfaces gr-0/0/0 unit 0 family inet address 172.16.0.1/30 Set interfaces gr-0/0/0 unit 0 tunnel path-mtu-discovery Set interfaces gr-0/0/0 unit 0 tunnel allow-fragmentation Set interfaces gr-0/0/0 unit 0 tunnel destination 10.10.10.2 Set interfaces gr-0/0/0 unit 0 tunnel source 10.10.10.1 Set chassis fpc 0 pic 0 tunnel-services bandwidth 10g Set system root-authentication encrypted-password '$6$PyP6cuVZ$HY8kv92ln9xXdkJEIp0EyI1PBie4/oH//64GKDT1' VCP1 and VCP3 are out Tunnel-Endpoints and are configured like this: VCP-1: Our middle Router, vMX-VFP5/ vMX-VCP2 is not aware of the 172 networks and has no route at all towards the networks. In this Topology, the network 172.16.1.x/24 is behind vMX-VFP6 (VPC8) and the network 172.16.2.x/24 is behind vMX-VFP4 (VPC7).

Turns out, that GRE-Tunnels are quite simple to set up and give you a lot of Flexibility. As part of my JNCIE-ENT study, GRE-Tunnels are also a topic.

Junos vmx limitations