This read-write MacAddress supplies the bitmask applied against a frame's destination MAC address when evaluating a flow's CPD filter row. It matters because control protocols are commonly grouped by reserved MAC ranges (e.g. all the 01:80:C2:00:00:0x addresses), and the mask lets one filter row match a whole range instead of a single exact address. For example, an admin filtering all IEEE bridge-group control protocols on a flow would set a mask that covers the last nibble of the 01:80:C2:00:00:00 range rather than writing a separate filter for each protocol.