Check ACL 3000 configuration and there is no error. IP address is not problematic. Check the configuration above and related configuration is as follows:
traffic classifier 3000 operator and
if-match acl 3000
There are or and and after traffic classifier 3000 operator command.
Add "or" means matching any rule of ACL.
Add "and" means matching all rules of ACL.
From the analysis, traffic classifier 3000 operator and command is problematic.
The packet can not match all the rules, that's the reason.
It should be changed as traffic classifier 3000 operator or. After the change check the import of ACL 3000:
DIS ACL 3000
Advanced ACL 3000, 4 rules
Acl's step is 5
rule 5 permit ip source 192.168.202.0 0.0.0.255 (124 times matched)
rule 6 permit ip source 192.168.200.0 0.0.0.255 (245times matched)
rule 7 permit ip source 192.168.206.0 0.0.0.255 (415 times matched)
rule 8 permit ip source 192.168.207.0 0.0.0.255 (251 times matched)
Several rules of ACL 3000 are matched several times. ACL has matching item, and matching QoS may take effect.