ADC

MAC Address Wildcard Mask for PBRs

September 14, 2021

Contributed by:

S C

A wildcard mask parameter has been introduced for extended PBRs and PBR6s and is used with the source MAC address parameter to define a range of MAC addresses to be match against the source MAC address of outgoing packets.

Wild card masks specify which hexadecimal digits of the MAC address are used and which hexadecimal digits are ignored. The wildcard mask parameter specifies a series of ones and zeroes and has a length of 12 digits. Each digit is a mask for the corresponding hexadecimal digit of the MAC address. A zero digit in the wildcard mask indicates that the corresponding hexadecimal digit of the MAC address must be considered and a one digit indicates that the corresponding hexadecimal digit to be ignored.

The wildcard mask should meet the following conditions:

Has only one series of zeroes
Has only one series of ones
Start with a series of zeroes

The following are some of the examples of valid wildcard masks:

000000111111
000000011111
000011111111

The following are some of the examples of invalid wildcard masks:

000000111100
111110000000
010101010101

For an PBR rule, a wildcard mask of 000000111111 for MAC address 96:fa:95:1d:67:4a defines the MAC address range 96:FA:95:00:00:00 - 96:FA:95:FF:FF:FF. This MAC address range is matched against the source MAC address of the outgoing packets.

To specify a range of source MAC addresses in a PBR rule by using the CLI:

At the command prompt, type:

add ns pbr <name> <action> -srcMac <mac_addr> -srcMacMask <string>
show ns pbr <pbrname>

Example:

> add ns pbr PBR-1 ALLOW -srcip 192.0.2.34 -srcMac 96:fa:95:1d:67:4a  –srcMacMask 000000111111 -nexthop 198.51.100.1

 Done

To specify a range of source MAC addresses in an PBR6 rule by using the CLI:

At the command prompt, type:

add ns pbr6 <name> <action> -srcMac <mac_addr> -srcMacMask <string>
show pbr6 <pbr6name>

Example:

> add ns pbr6 PBR6-1 ALLOW –srcipv6 2001:db8:0::7 -srcMac 96:fa:95:1d:67:4a  –srcMacMask 000000001111 -nexthop 2001:db8:0::1
 Done

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

MAC Address Wildcard Mask for PBRs

September 14, 2021

Contributed by:

S C

September 14, 2021

Contributed by:

S C

MAC Address Wildcard Mask for PBRs

In this article