E4800G QOS configuration issue

[confusez]

Trying to limit the traffic passing through switch port using traffic policing & ip address.

Configure the switch as such,

acl number 3000 name group1

rule 1 permit ip destination 192.168.2.0 0.0.0.255

rule 2 permit ip source 192.168.2.0 0.0.0.255

traffic classifier group1_class operator or

if-match acl name group1

traffic behavior group1_limit

car cir 2048 cbs 12800 ebs 4000 green pass red discard yellow pass

qos policy group1_inbound

classifier group1_class behavior group1_limit

qos policy group1_outbound

classifier group1_class behavior group1_limit

interface GigabitEthernet1/0/1

qos apply policy group1_inbound inbound

qos apply policy group1_outbound outbound

------------------------------------------------------------------

Found that port 1 inbound traffic can go above 2mbps reaching 3mbps. Outbound traffic is around 2mbps.

Is the configuration above correct for what I'm trying to accomplish? Or any alternative way to accomplish this?