Configuring One-directional MAC Address with One VLAN Permit Filtering (CLI Commands)

access-list ace 4 ingress interface GigabitEthernet 1/4 policy 3 tag tagged vid 4 frametype etype smac 00-00-00-00-00-11
exit
 interface GigabitEthernet 1/3
 switchport trunk allowed vlan 4,5
 switchport trunk vlan tag native
!
interface GigabitEthernet 1/4
 switchport trunk allowed vlan 4,5
 switchport trunk vlan tag native
exit