Changing routing information to make an st0 the next hop for the SRX's outbound-SSH connection to Mist and using lo0 at the same time with default-address selection.

Mist dashboard will show the SRX as Disconnected.

"show system connections | match 2200" will show the Mist connection being ESTABLISHED but reset shortly after, stuck in a loop.

Entering configuration mode will get you the following output:

Entering configuration mode

Users currently editing the configuration:

mist (pid 33333) on since 2026-06-07 13:00:00 UTC, idle 00:01:01

exclusive

Changing pid every 2 minutes, making it hard to do CLI changes.

When making the Mist connection through a tunnel, MTU needs to be taken into consideration. Because this connection uses TCP, from the SRX side you can change MSS settings with:

set security flow tcp-mss all-tcp mss <value>

set security flow tcp-mss ipsec-vpn mss <value>

Or per policy with:

set security policies from-zone zone to-zone zone policy policy-name then permit tcp-options initial-tcp-mss value

set security policies from-zone zone to-zone zone policy policy-name then permit tcp-options reverse-tcp-mss value