This boolean flag switches on Layer-2 source-MAC-address matching for this rule, and when true it tells a device or admin reading the rule that the paired cienaCesAclRuleSrcMacAddr and cienaCesAclRuleSrcMacAddrMask fields actually hold meaningful values to be applied, rather than being unused placeholders. An admin uses source-MAC matching specifically in Layer-2-aware environments (requiring cienaCesAclFilterMode to be l2l3combo) to filter based on the physical sending device's hardware address rather than its IP, useful when IP addresses are dynamic or spoofable but a specific device's MAC is known. For example, an admin wanting to lock a port down to only accept traffic from a specific known device's network card would set this true and populate the paired MAC address field with that device's exact MAC.