firewall { family vpls { filter CONTROL-FLOODING { term STP { from { destination-mac-address { 01:80:c2:00:00:00/48; } } then { count STP; discard; } } term ALTERNATE-STP { from { destination-mac-address { 01:80:c2:00:00:00/44; } } then { count ALTERNATE-STP; discard; } } term PVST { from { destination-mac-address { 01:00:0c:cc:cc:cd/48; } } then { count PVST; discard; } } term CDP { from { destination-mac-address { 01:00:0c:cc:cc:cc/48; } } then { count CDP; discard; } } term VLAN-BRIDGE { from { destination-mac-address { 01:00:0c:cd:cd:ce/48; } } then { count VLAN-BRIDGE; discard; } } term STP_UPFAST { from { destination-mac-address { 01:00:0c:cd:cd:cd/48; } } then { count STP_UPFAST; discard; } } term DEFAULT { then accept; } } } } And apply it under routing-instance: routing-instances { L2VPLS512 { instance-type vpls; forwarding-options { family vpls { flood { input CONTROL-FLOODING; } } } protocols { vpls { site-range 4; site router1 { site-identifier 1; multi-homing; site-preference primary; interface ae0.512; } } } }