MAC ACL

[Guillermo Rocha]

Hi

Can someone explain me how to get the MAC WILDCARD MASK value for a MAC ACL

Thanks

[balaji.bandi]

You can use this guide :

https://www.cisco.com/assets/sol/sb/SG220_Emulators/SG220_Emulator_v1-0-0-18_20140626/help/Access_Control4.html

you can use below example :

For an ACL, a wildcard mask of 000000111111 for MAC address 96:fa:95:1d:67:4a defines the MAC address range 96:FA:95:00:00:00 - 96:FA:95:FF:FF:FF. This MAC address range is matched against the source MAC address of the incoming packets.

[M02@rt37]

Hello @Guillermo Rocha,

Wild card masks specify which hexadecimal digits of the MAC address are used and which hexadecimal digits are ignored. The wildcard mask parameter specifies a series of ones and zeroes and has a length of 12 digits. Each digit is a mask for the corresponding hexadecimal digit of the MAC address. A zero digit in the wildcard mask indicates that the corresponding hexadecimal digit of the MAC address must be considered and a one digit indicates that the corresponding hexadecimal digit to be ignored.

The wildcard mask must meet the following conditions:

-Has only one series of zeroes

-Has only one series of ones

-Start with a series of zeroes

The following are some of the examples of valid wildcard masks:

• 000000111111
• 000000011111
• 000011111111

The following are some of the examples of invalid wildcard masks:

• 000000111100
• 111110000000
• 010101010101

For an ACL, a wildcard mask of 000000111111 for MAC address 96:fa:95:1d:67:4a defines the MAC address range 96:FA:95:00:00:00 - 96:FA:95:FF:FF:FF. This MAC address range is matched against the source MAC address of the incoming packets.