KB36876 [CSO] Understanding controller-based DVPN workflow for a CPE-behind-NAT scenario Version 2026-06-19 (paste date) Latest Versions [juniper.net]