H3C S5830V2 Security Configuration Manual page 296

2. If the flow range defined by the responder's ACL is smaller than that defined by the initiator's ACL,
modify the responder's ACL so the ACL defines a flow range equal to or greater than that of the
initiator's ACL.
For example:
[Sysname] display acl 3000
Advanced ACL 3000, named -none-, 2 rules,
ACL's step is 5
rule 0 permit ip source 192.168.222.0 0.0.0.255 destination 192.168.222.0 0.0.0.255
3. Configure the missing settings (for example, the remote address).
282