This article describes the differences in classification of traffic arriving on a 'family bridge' interface versus other interface family types.

Unlike other interface family types, applying classification actions to interfaces configured with 'family bridge' will only classify traffic that is bridged and not routed. In order to classify traffic that is to be routed out of the VLAN, an additional classifier needs to be applied to the IRB interface for that VLAN. 

There are two options to classify traffic ingress to a bridged interface - either with a fixed classifier or through firewall filters. For simplicity, only the fixed classifier is used in this example. The following example shows how to configure a fixed classifier on a bridged interface:

interfaces {
    ge-0/0/0 {
        unit 0 {
            family bridge {
                interface-mode access;
                vlan-id 284;
            }
        }
    }
}
class-of-service {
    interfaces {
        ge-0/0/0 {
            unit 0 {
                forwarding-class silver-nrt-1;
            }
        }
    }
}

The above configuration will classify only bridged traffic. To ensure that the routed traffic is also classified, apply a fixed classifier to the IRB interface like this:

interfaces {
    irb {
        unit 284 {
            family inet {
                address 10.245.14.2/28;
            }
        }
    }
}
class-of-service {
    interfaces {
        irb {
            unit 284 {
                forwarding-class silver-nrt-1;
            }
        }
    }
}

To verify whether the classifier has had the desired effect, use the show interfaces queue command on the egress interface.