TechKnowSurge
CompTIA Network+ 1.1 Cisco CCNA 1.9 Cisco CCST Networking 4.5 Cisco CCNA 1.13
VideoNetworkFree

Multicast MAC Addresses

Multicast MAC addresses follow a specific format beginning with 01:00:5E, with a fixed structure that directly maps the last 23 bits to the corresponding multicast IP address.

Complete this video to capture a CTF flag worth 1 point.

About this video

Multicast MAC addresses follow a structured format that allows network devices to immediately recognize and handle multicast traffic appropriately. The address always begins with the prefix 01:00:5E in hexadecimal, and this fixed opening signals that the frame is a multicast transmission rather than a unicast or broadcast communication. Within that prefix, a specific bit is always set to zero, further defining the constant portion of any multicast MAC address. What makes multicast MAC addressing particularly important to understand is the direct relationship it shares with multicast IP addressing. The last 23 bits of a multicast MAC address map one-to-one to the last 23 bits of its corresponding multicast IP address. This predictable correlation between Layer 2 and Layer 3 addressing is a foundational concept in how multicast traffic is efficiently forwarded across a network, and understanding this mapping is essential for anyone working with network design, troubleshooting, or multicast-enabled protocols.

What you'll learn

What's covered

Multicast MAC Addresses

Aligned to

CompTIA Network+
1.1 Explain concepts related to the Open Systems Interconnection (OSI) reference model.
Cisco CCNA
1.9 Describe IPv6 address types
1.13 Describe switching concepts
Cisco CCST Networking
4.5 Explain basic switching concepts

Key terms

Media Access Control
MAC
A sublayer of the Data Link layer that controls how devices on a network gain access to a medium and transmit data.
IP Address
A numerical label assigned to each device connected to a network that uses the Internet Protocol.
Multicast MAC Address
A MAC address beginning with the fixed prefix 01:00:5E, where the last 23 bits map directly to the corresponding multicast IP address to identify multicast group traffic.
Data Link Layer
Layer 2 of the OSI model responsible for node-to-node data transfer and error detection on a single network segment.

Transcript

The Format of a Multicast MAC Address

Multicast MAC addresses come in a certain format. Let's take a look at the multicast MAC address, which is what I have right here.

A multicast MAC address starts out with 01005e. This first section signals that this is a multicast address and to be treated as such.

In fact, I've actually got it broken down a little bit further here, so you can see the hexadecimal number. You can also see the binary numbers that are associated with that. The reason why I broke it down this way was for two reasons.

Number one is because I want to point out that this zero is always a zero right there as well. So you've got the first bits, the first half of this really, which is always the same for a multicast address, and this first bit of the second half is always zero.

The Association With the Multicast IP Address

The other reason why I want to point this out is because there is an association with the IP address of a multicast address and the MAC address of a multicast address, and that is that the IP address has some bits that are similar to it.

The first bits are not; the second set of bits — the first one is not, because I've already said that's always a zero. But the last 23 bits is the same, and it's a direct one for one with the MAC address. So if there is an IP address associated with the MAC address, then we'll see this association of the last 23 bits.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →