as @Raido_Rattameister mentioned you can't apply 2 different classes to the same traffic
you also need to take into account QoS is only applied in 1 direction (egress) at a time, so you need to have a QoS profile on the external interface for the upload, and a profile on the internal interface for the download. since you can only classify a flow once, you need to make sure the same class is represented in both interfaces and has the appropriate configuration for what you want to apply in that 'direction' (ie you can set a max of 40 on class 3 in the upload profile and a max of 1000 on class 3 in the download profile)
Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
