On both S5 and S6


vlan access-map Prob12 10
 action drop
 match ip address 100
vlan access-map Prob12 20
 action forward
vlan filter Prob12 vlan-list 1-4094
!
access-list 100 permit tcp any any eq ident