Dears 

  when enable access-group and service policy in the interface, how to process it ?  who has higher priority ?

  for example:

interface Bundle-Ether4
 service-policy input test
 service-policy output test
 ipv4 address x.x.x.x 255.255.255.252
 ipv4 access-group test ingress
 ipv4 access-group test egress

policy-map test
 class 1
 set dscp default
 police rate per-million 100
 conform-action transmit
 exceed-action drop

class-map match-any 1
 match access-group 1
 end-class-map

ipv4 access-list 1
10 permit udp any any eq 1900
20 permit udp any eq 1900 any

ipv4 access-list test
10 permit ipv4 any host x.x.x.x fragments
20 deny ipv4 any x.x.x.x 0.0.0.255 fragments
30 deny ipv4 any x.x.x.0 0.0.0.63 fragments
40 permit ipv4 any host x.x.x.x fragments
50 permit ipv4 any x.x.x.x 0.0.0.31 fragments
60 deny ipv4 any x.x.x.0 0.0.0.255 fragments
70 permit ipv4 any x.x.x.x 0.0.0.31 fragments
80 deny ipv4 any x.x.x.x 0.0.0.255 fragments
90 deny ipv4 any x.x.x.x 0.0.0.255 fragments