Diagram attached. With this setting, ping from 10.0.0.9 to 10.0.0.2 does not work, is it necessary to register a static arp on the ge-0/0/0 interface with the address of 0/0/3? what am I doing wrong? P.S. switch on the diagram act as DPI
vMX1:
set version 14.1R4.8
set system host-name vMX1
set system root-authentication encrypted-password "$1$LsD0vFcK$889QeMY2qw2vnPIn2sn9K1"
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set interfaces ge-0/0/0 unit 0 family inet no-redirects
set interfaces ge-0/0/0 unit 0 family inet address 10.0.0.13/30
set interfaces ge-0/0/1 unit 0 family inet address 10.0.0.25/30
set interfaces ge-0/0/2 unit 0 family inet filter input FBF
set interfaces ge-0/0/2 unit 0 family inet address 10.0.0.10/30
set interfaces ge-0/0/3 unit 0 family inet no-redirects
set interfaces ge-0/0/3 unit 0 family inet address 10.0.0.14/30
set routing-options static route 0.0.0.0/0 next-hop 10.0.0.26
set firewall family inet filter FBF term 1 from source-address 10.0.0.9/32
set firewall family inet filter FBF term 1 then next-interface ge-0/0/0.0
set firewall family inet filter FBF term 2 then accept
vMX2:
set version 14.1R4.8
set system root-authentication encrypted-password "$1$yKxqrbDR$KaIRUbM80DUceS50utnTp."
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set interfaces ge-0/0/1 unit 0 family inet address 10.0.0.26/30
set interfaces ge-0/0/2 unit 0 family inet address 10.0.0.1/30
set routing-options static route 10.0.0.8/30 next-hop 10.0.0.13
set routing-options static route 10.0.0.8/30 next-hop 10.0.0.25