Using 'inverse mask' support MAC wildcards. The mask used
with the source MAC address will specify what traffic is
exempted from EAP validation.
e.g. cnnEouAuthMacAddr: 00:0d:bc:ef:eb:bd
cnnEouAuthMacAddrMask: 00:00:ff:ff:ff:ff
This exempts any MAC in the range 00:0d:00:00:00:00 from
posture validation.
cnnEouAuthMacAddr: 00:0d:bc:ef:eb:bd
cnnEouAuthMacAddrMask: 00:00:00:00:00:00
This exempts specific MAC 00:0d:bc:ef:eb:bd from posture
validation.
cnnEouAuthMacAddr: 00:0d:bc:ef:eb:bd
cnnEouAuthMacAddrMask: ff:ff:ff:ff:ff:ff
This exempts all MAC address from posture validation.