Just looked at your images.. You need to set up your networks like a PTP link. Why not have: 10.9.0.1/30 (Vyatta Local) 10.9.0.2/30 (Watchguard Local) Disable multicast unless you need it.