Hi,
Please refer to the configuration below:
#
acl 3000
rule 5 deny ip source 192.168.1.1 0.0.0.0 destination 200.10.10.1 0.0.0.0
rule 10 permit ip
#
traffic classifier test operator or
if-match acl 3000
#
traffic behavior test
permit
#
traffic policy test
classifier test behavior test
#
interface GigabitEthernet0/0/0
traffic-policy test inbound
#