Yes Hugo, I can pass non-ipsec encrypted traffic via the MPLS L3VPN inside the SRX... isn't that what the IKE Phase 1 and IKE Phase 2 success is proving ? -Aaron