If the client vlan isn't trunked up to your mx250, there's no way for their clients to route into your network (other than the mx64 WAN port which you already mentioned will have firewall rules). That said, if you're concerned about it, you can add the rules for the client vlan in your MX250 anyway, it's not going to hurt anything.
... View more
