Reflective ACL

Hello,
The S5300 does not support reflective ACLs and does not have an alternate function. However, you can configure a traffic policy on the switch to implement unidirectional access for ICMP and TCP services. 

For example, 192.168.10.0 and 192.168.20.0 belong to vlan 10 and vlan 20 respectively, you can configure a traffic policy to prevent VLAN 10 from accessing VLAN 20.

#

acl number 3001

 rule 15 permit icmp source 192.168.10.0 0.0.0.255 destination 192.168.10.0 0.0.0.255 icmp-type echo

 rule 20 permit tcp source 192.168.10.0 0.0.0.255  destination 192.168.10.0 0.0.0.255 tcp-flag syn

#

traffic classifier c1

 if-match acl 3001

#

traffic behavior b1

 deny

#

traffic policy p1

 classifier b1 behavior c1

#

Vlan 20

 traffic-policy c1 outbound

Fefer to: https://support.huawei.com/enterprise/en/knowledge/EKB1100020242