The drop you may see is related l2-tunnel-broadcast-optimization
Without broadcast optimization tunnel end point forwards all BCAST traffic to any wired port configured with the VLAN.
If optimization is enabled for corresponding bridged vlan, then device lookups the l3e-lite
- If an entry is found in the table, then unicast the packet to the corresponding extended vlan port
- If an entry is not found, then data fall-through and device sends the packet out on all wired ports while increasing the dropreason (433)