Can we configure SRX as a gateway for VXLANs subnets? Or can we directly connect SRX to the switch hosting VXLANs and use the SRX interface as a gateway?
Currently, only two VXLAN-related features are supported on SRX Series Firewalls:
Key limitation: The SRX cannot act as a VXLAN gateway - it does not perform VTEP functions such as VXLAN encapsulation or decapsulation on behalf of end clients. That role is handled by other devices such as QFX Series switches. The SRX's role in an EVPN-VXLAN fabric is strictly inline security inspection of tunnel traffic in transit.
For complete details and documents, please refer to:Juniper Networks Feature Explorer – VXLAN Gateway SupportJuniper Networks – What is VXLAN?Juniper Networks Technical Documentation – Tunnel Inspection for EVPN-VXLAN by SRX Series Devices