MAC Address Wildcard Mask for PBRs

A wildcard mask parameter has been introduced for extended PBRs and PBR6s and is used with the source MAC address parameter to define a range of MAC addresses to be match against the source MAC address of outgoing packets.

Wild card masks specify which hexadecimal digits of the MAC address are used and which hexadecimal digits are ignored. The wildcard mask parameter specifies a series of ones and zeroes and has a length of 12 digits. Each digit is a mask for the corresponding hexadecimal digit of the MAC address. A zero digit in the wildcard mask indicates that the corresponding hexadecimal digit of the MAC address must be considered and a one digit indicates that the corresponding hexadecimal digit to be ignored.

The wildcard mask should meet the following conditions:

  • Has only one series of zeroes
  • Has only one series of ones
  • Start with a series of zeroes

The following are some of the examples of valid wildcard masks:

  • 000000111111
  • 000000011111
  • 000011111111

The following are some of the examples of invalid wildcard masks:

  • 000000111100
  • 111110000000
  • 010101010101

For an PBR rule, a wildcard mask of 000000111111 for MAC address 96:fa:95:1d:67:4a defines the MAC address range 96:FA:95:00:00:00 - 96:FA:95:FF:FF:FF. This MAC address range is matched against the source MAC address of the outgoing packets.

To specify a range of source MAC addresses in a PBR rule by using the NetScaler command line:

At the command prompt, type:

  • add ns pbr <name> <action> -srcMac <mac_addr> -srcMacMask <string>
  • show ns pbr <pbrname>

Example:

> add ns pbr PBR-1 ALLOW -srcip 192.0.2.34 -srcMac 96:fa:95:1d:67:4a  –srcMacMask 000000111111 -nexthop 198.51.100.1

 Done

To specify a range of source MAC addresses in an PBR6 rule by using the NetScaler command line:

At the command prompt, type:

  • add ns pbr6 <name> <action> -srcMac <mac_addr> -srcMacMask <string>
  • show pbr6 <pbr6name>

Example:

> add ns pbr6 PBR6-1 ALLOW –srcipv6 2001:db8:0::7 -srcMac 96:fa:95:1d:67:4a  –srcMacMask 000000001111 -nexthop 2001:db8:0::1
 Done

MAC Address Wildcard Mask for PBRs

In this article