Configuring One-directional MAC Address with One VLAN Deny Filtering (CLI Commands)

access-list ace 1 ingress interface GigabitEthernet 1/4 policy 1 vid 4 frametype etype smac 00-00-00-00-00-11 action deny
exit
interface GigabitEthernet 1/3
 switchport trunk allowed vlan 4,5
 switchport trunk vlan tag native
!
interface GigabitEthernet 1/4
 switchport trunk allowed vlan 4,5
 switchport trunk vlan tag nativevlan 4
exit