secpath f1030 带宽管理策略不生效

object-group ip address sdk
security-zone Trust
0 network host address 172.16.1.254
10 network subnet 172.16.1.0 255.255.255.0
20 network host address 172.16.1.251
#
object-group ip address zsp
0 network subnet 172.16.5.0 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode route
ip address 172.16.1.254 255.255.255.0
#
interface GigabitEthernet1/0/3
port link-mode route
bandwidth 30000
ip address 222.71.xxx.xxx 255.255.255.248
nat outbound
nat server protocol tcp global 222.71.xxx.xxx 441 inside 172.16.1.251 441 rule atrust:441
nat server protocol tcp global 222.71.xxx.xxx 33443 inside 172.16.1.251 33443 rule atrust1.251:33443 counting
gateway 222.71.248.161
#
interface GigabitEthernet1/0/17
port link-mode route
description to zsp 5.253
ip address 172.16.5.254 255.255.255.0
#
security-zone name Trust
import interface GigabitEthernet1/0/1
import interface GigabitEthernet1/0/17
#
security-zone name Untrust
import interface GigabitEthernet1/0/3
#
traffic-policy
rule 1 name zsp
action qos profile zsp
source-address address-set zsp
source-zone Trust
destination-zone Untrust
rule 2 name sdk
action qos profile sdk
source-address address-set sdk
source-zone Trust
destination-zone Untrust
profile name sdk
bandwidth downstream maximum 30000
bandwidth upstream maximum 30000
bandwidth average enable
profile name zsp
bandwidth downstream guaranteed 60000
bandwidth upstream guaranteed 60000
#
security-policy ip
rule 2 name 172.16.2.0(deny)
counting enable
source-zone Trust
destination-zone Untrust
source-ip 172.16.2.0
rule 0 name trust-untrust
action pass
logging enable
counting enable
profile 0_IPv4
source-zone Untrust
source-zone Trust
destination-zone Trust
destination-zone Untrust
rule 1 name local-any
action pass
counting enable
profile 1_IPv4
source-zone Trust
source-zone Local
source-zone Untrust
destination-zone Local
destination-zone Trust
destination-zone Untrust
#