I'm configuring a VPN on a SRX550 that sits behind a SRX650.
I *think* I have figured out the config for the VPN NATing out the other firewall.
The piece I'm not sure will work is if I Have traffic coming in reth20 set the route to point to st0.100 to encrypt, then bind the tunnel to reth20 so it goes back out same interface. Will that work?