This read-create OCTET STRING specifies a replacement multicast MAC address the switch substitutes when tunneling a protocol's PDUs across the provider network. An admin configures this so customer control-plane frames (like BPDUs) can be tunneled transparently across the provider's bridges without those bridges intercepting them as their own control traffic. Setting this to a BATM-proprietary tunneling MAC address rewrites customer BPDUs' destination MAC in transit so provider switches forward rather than process them.