like fire policy,on the router or the switch,user can first define the application service,the when user define the ACL,can use the define-service.like this:
define app-service1 tcp= 1812,1813,udp=1813,1646
ip access extend test
permit ip host t1 host t2 service app-service1
permit ip host t3 service app-service1 host t4
