A 32-bit quantity used in conjunction with an IP address to determine which bits in an IP address should be ignored when that address is compared with another IP address. A wildcard mask is specified when access lists are set up.