This object specifies a bit mask that is ANDed with the IP options field in packet headers before comparing against the configured IP option match value during subscriber traffic classification. A default value of 0 disables IP option-based filtering, while a non-zero mask enables selective filtering of packets based on their IP options. An operator would configure this mask to implement fine-grained traffic classification policies based on the presence or absence of specific IP header options.