VLAN间访问控制没起作用！请问是什么原因呢

interface Vlan-interface1998

 ip binding vpn-instance 712NWY23397985

 ip address 172.16.1.1 255.255.255.0

#

interface Vlan-interface1999

 ip binding vpn-instance 712NWY23397985

 ip address 172.16.0.1 255.255.255.0

#

interface Vlan-interface3922

 ip binding vpn-instance 712NWY23397985

 ip address 172.16.2.1 255.255.255.0

# 

traffic classifier 1 operator or

 if-match acl 3000

#

traffic behavior 1

 filter permit   （用deny也试过）

#

qos policy 1

 classifier 1 behavior 1

#

acl advanced 3000

 rule 5 deny ip vpn-instance 712NWY23397985 source 172.16.2.0 0.0.0.255 destination 172.16.0.0 0.0.0.255

 rule 10 deny ip vpn-instance 712NWY23397985 source 172.16.0.0 0.0.0.255 destination 172.16.2.0 0.0.0.255

 rule 1000 permit ip vpn-instance 712NWY23397985

#

qos vlan-policy 1 vlan 3922 inbound 

qos vlan-policy 1 vlan 1999 inbound 

在vlan3922 下面找了个终端，PING VLAN1999的网关地址依然是通的，为啥？是我的配置有问题吗？

[YQLT-H3C-S5552F]disp version

H3C Comware Software, Version 7.1.070, Release 6126P20

Copyright (c) 2004-2018 New H3C Technologies Co., Ltd. All rights reserved.

H3C S5552F-EI-D uptime is 31 weeks, 3 days, 11 hours, 33 minutes

Last reboot reason : Cold reboot

Boot image: flash:/s5500sei_d-cmw710-boot-r6126p20.bin

Boot image version: 7.1.070, Release 6126P20

  Compiled Apr 03 2018 11:00:00

System image: flash:/s5500sei_d-cmw710-system-r6126p20.bin

System image version: 7.1.070, Release 6126P20

  Compiled Apr 03 2018 11:00:00

Slot 1:

Uptime is 31 weeks,3 days,11 hours,33 minutes

S5552F-EI-D with 1 Processor

BOARD TYPE:         S5552F-EI-D

DRAM:               512M bytes

FLASH:              256M bytes

PCB 1 Version:      VER.B

Bootrom Version:    121

CPLD 1 Version:     002

Release Version:    H3C S5552F-EI-D-6126P20

Patch Version  :    None

Reboot Cause  :     ColdReboot

[SubSlot 0] 46SFP+2COMBO+4SFP Plus