set firewall policer connection-policer if-exceeding bandwidth-limit 100m
set firewall policer connection-policer if-exceeding burst-size-limit 128k
set firewall policer connection-policer then discard
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 from source-address 192.168.100.100/32
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 from destination-address x.x.x.x/y
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 1 then policer connection-policer
set firewall family ethernet-switching filter ingress-vlan-rate-limit term 2 then accept
set vlans vlan-100 filter input ingress-vlan-rate-limit