Wildcard Mask & ACL Calculator
Invert masks, test ignored bits and retain every range-cover entry.
Try before you buy.
- Free preview: useful labels with complete analysis figures and exports hidden.
- Locked until you unlock it: download and copy.
- Unlock: Pro pass, ₹179 for 30 days or ₹79 for 1 week, a one-time payment that never renews. Unlock: Pro pass, $5.99 for 30 days or $2.99 for 1 week, a one-time payment that never renews.
Ways to unlock shows how to get the full result.
Printing this result is locked in the free preview.
Locked in the free preview. Opens the ways to unlock this result.
Locked in the free preview. Batch runs unlock with a pass.
Locked in the free preview. Query results unlock with a pass.
About the Wildcard Mask & ACL Calculator
Convert an IPv4 subnet mask or wildcard, test a candidate against independent ignored-bit matching, or turn any ordered IPv4 range into an exact minimum address/wildcard ACL cover. Range minimization can use non-contiguous entries and runs in a local worker. A separate minimum contiguous CIDR cover produces the OSPF statements. Exact union counts retain every entered address once, including overlapping minimal entries.
How to use it
- Choose conversion, range cover or wildcard matching.
- Enter the complete masks and addresses; subnet masks must be contiguous.
- Review every canonical base, ignored-bit count, ACL and OSPF fragment.
- Unlock the current working before copying or downloading its complete report or JSON.
Method and primary reference context
Cisco wildcard matching and CIDR specification. Matching requires (candidate AND inverse-wildcard) = (base AND inverse-wildcard). Range ACL minimization searches complete positive/negative prime terms with symbolic coverage; OSPF uses a distinct contiguous-prefix cover.
Limitations
- Exact arbitrary-wildcard minimization can require substantial computation for some ranges. Editing, reset or navigation cancels the local worker; device resources determine completion time.
- Non-contiguous ACL patterns are not single CIDR subnets. OSPF range fragments use a separately identified contiguous cover.
- ACL and OSPF output are configuration fragments: review protocol, destination, direction, rule order and area for the intended platform.
- MySmartCoPilot is not affiliated with or endorsed by Cisco.
Privacy
On this device: nothing is sent
Addresses and masks are calculated on this device. They are not uploaded or stored.
Frequently asked questions
What do I get without a pass?
Without a pass, Wildcard Mask & ACL Calculator shows useful labels with complete analysis figures and exports hidden. Until you unlock it, the result can’t be downloaded or copied. A Pro, Premium or Ultimate pass, a one-time payment that never renews, unlocks the full result. The pricing page lists the passes and their prices.
Why does the same wildcard match disconnected addresses?
Every 1 bit is independently ignored. A wildcard of 0.0.0.5 ignores the final octet’s bits 0 and 2; a base ending in 2 therefore matches endings 2, 3, 6 and 7.
Can every wildcard be written as a subnet prefix?
Only when the inverse mask has contiguous leading 1 bits. The tool reports a non-contiguous pattern without inventing a CIDR prefix.
What does 0.0.0.0 mean?
No bits are ignored, so the entry matches one exact IPv4 address. The inverse mask is 255.255.255.255.
Why can the ACL list be shorter than the OSPF list?
ACL wildcards can ignore non-contiguous bits, while the OSPF fragments use contiguous subnet blocks. Addresses ending in 1 through 6 need three arbitrary wildcard entries but four contiguous CIDR entries. Both outputs cover exactly the entered interval.