Block Ports using ACL in Forward Chain to filter forwarding traffic via Huawei L3 Switch

Hi, following is my network topology: ISP 1-> HUAWEI L3 (BGP)-> HUAWEI-L3 (DISTRIBUTION-SWITCH)->CUSTOMERS

I want to block all customers trying to access port 81 towards arbitary servers running in the Internet.

How do I do that? I have done the following:

---------

acl name ALLOW_PORT 3998

 rule 1 permit ip source 100.64.1.5 0

acl name BLOCK_PORT 3999

 rule 5 deny tcp source-port eq 81

#

traffic classifier tc1 operator and

 if-match acl BLOCK_PORT

traffic classifier tc2 operator and

 if-match acl ALLOW_PORT

#

traffic behavior tb1

 deny

traffic behavior tb2

 permit

#

traffic policy tp1 match-order config

 classifier tc2 behavior tb2

 classifier tc1 behavior tb1

-----------

interface GigabitEthernet0/0/2

 description "WAN-ISP1"

 port link-type trunk

 port trunk allow-pass vlan 2 to 4094

 traffic-policy tp1 outbound

This is not working. What Im doing wrong? What is equivant of Forward chain in IPtables comparison to Huawei?