Hi,
AFAIK, only 8 queues are possible, however you can have more than 8 forwarding classes [FC] but 1:1 mapping of FC to queue would not be possible.
I believe the requirement can be met using a combination of per vlan policing [rate-limit] and 2 FCs.
Rate-limit to 2Mbps for each VLAN, on breach assign traffic to a lower priority FC. The default traffic goes through a queue with only tail-drops, while the burst traffic goes through a lower priority queue and more susceptible to QoS drops.
Example:
firewall { policer test { if-exceeding { bandwidth-limit 2m; burst-size-limit 2k; } then forwarding-class POLICE; } }
Cheers,
Ashvin