A lab vSRX cluster was built with SRIOV interface type ports to test hardware offloading but none of the provider network gateways are reachable. This is a new build and is being test for the first time. The problematic vSRX interface is configured with multiple subinterfaces with different vlan IDs.

This issue might be seen if the following conditions are met:
* On vSRX 3.0 platforms
* 25G NIC attached to vSRX
* HA cluster is configured

This issue is the same as the https://prsearch.juniper.net/PR1681042, ARP will not get learned if reth interface is configured with VLAN, 

On vSRX 3.0 platforms in High availability (HA) cluster environment, ARP (Address Resolution Protocol) will not get learned if VLAN is configured on the reth (redundant Ethernet) interface.

To workaround this issue, we may use another NIC instead of a 25G NIC port.

On the reth interface, if VLAN is configured, host-bound packets are not sent to Junos Kernel.  ARP or any other host bound traffic will be dropped by the Junos kernel on the vSRX HA cluster environment.