You have a reject term at the end of both policies. Since you are now doing a policy chain you will need to remove the reject from both and end the chain with a reject policy. set policy-options policy-statement default-vpn term default-originate from route-filter 0.0.0.0/0 exact set policy-options ...

With traffic selectors you would be best to use 10.33.6.0/28 as it creates a route to push traffic into the tunnel and I assume you don't want a default route going into the tunnel. ------------------------------ Steve Puluka BSEET - Juniper Ambassador IP Architect - DQE Communications Pittsburgh, ...

@ali.taheri Yes this is correct. 172.22.174.144/28 is advertised by both sites but one route will be preferred and in case of customer firewall failure Site B will advertise the same route to ISP and hence why its preferred on one site while the other will remain inactive until its not receiving ...

This is exactly what I am trying to achieve. ------------------------------ junos sky ------------------------------