access-list ace 2 ingress interface GigabitEthernet 1/3 policy 0 frametype etype smac 00-00-00-00-00-13 dmac 00-00-00-00-00-11 action deny exit interface GigabitEthernet 1/3 switchport trunk allowed vlan 4,5 switchport trunk vlan tag native ! interface GigabitEthernet 1/4 switchport trunk allowed vlan 4,5 switchport trunk vlan tag nativevlan 4 exit