R1#sh run | b interface Ethernet0/0
interface Ethernet0/0
 no ip address
 no ip route-cache
 half-duplex
 access-expression input ~(smac(700) & lsap(202))
 bridge-group 1

!

access-list 202 permit 0x0404 0x0001
access-list 202 permit 0x0004 0x0001
access-list 700 permit 1111.2222.3333   0000.0000.0000
!