cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2623
Views
10
Helpful
4
Replies

wildcard mask & subnet mask

Dopamine
Level 1
Level 1

Hello everyone.
Why do we use a wildcard mask Instead subnet mask?
I know that in the wildcard mask; 0 is important and in the subnet mask 1 is important. but I can't understand why we use a wildcard mask?

1 Accepted Solution

Accepted Solutions

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello @Dopamine ,

just to add to what @Richard Burts and @Joseph W. Doherty have already explained.

 

wildcard masks are not constrained to a single transition '0' to '1' subnet masks they are.

I mean for use in IP ACLs and extended ACLs wildcard masks provide more flexibility.

a wild card mask like 0.7.0.255 can be used in an extendel ACL line  there is no single subnet mask equivalent,

 

For routing exchange prefix-lists have been introduced in IOS 12.0 but they do not process user traffic.

On the other hand, when configuring an ACL on an ASA we cannot use wild card masks but we can use objects and object groups !

 

Hope to help

Giuseppe

 

View solution in original post

4 Replies 4

Richard Burts
Hall of Fame
Hall of Fame

It was an implementation decision made by Cisco in the very early days of developing their products. I remember a discussion (many years ago) in which the statement was made that the machine architecture made it more efficient to process the matching for access lists using the wildcard format rather than the subnet format. 

HTH

Rick

Thankful
Is wildcard mask faster than subnet mask?

Joseph W. Doherty
Hall of Fame
Hall of Fame

Do you understand what a "mask" is when doing boolean logic, especially using the "and" operator?

Reason I ask, it explains much about subnet masks.

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello @Dopamine ,

just to add to what @Richard Burts and @Joseph W. Doherty have already explained.

 

wildcard masks are not constrained to a single transition '0' to '1' subnet masks they are.

I mean for use in IP ACLs and extended ACLs wildcard masks provide more flexibility.

a wild card mask like 0.7.0.255 can be used in an extendel ACL line  there is no single subnet mask equivalent,

 

For routing exchange prefix-lists have been introduced in IOS 12.0 but they do not process user traffic.

On the other hand, when configuring an ACL on an ASA we cannot use wild card masks but we can use objects and object groups !

 

Hope to help

Giuseppe