MAC address formats: colons, dashes, Cisco dotted and the OUI

Media Access Control (MAC) addresses are 48-bit identifiers that uniquely identify devices on a local network segment. However, these 48 bits are represented in different notation formats depending on the vendor, operating system, or context. Understanding these formats is essential for network configuration, troubleshooting, and CCNA or NSE certification preparation. This guide covers the four primary MAC address formats and explains the Organizationally Unique Identifier (OUI) that reveals device manufacturers.

The four primary MAC address formats

A MAC address consists of 48 bits, typically represented as 12 hexadecimal digits (0-9 and A-F). The same address can be written in four standard formats, and network engineers must recognize and convert between them.

• →Colon-separated (IEEE standard): 00:1A:2B:3C:4D:5E
• →Dash-separated (Windows, some vendors): 00-1A-2B-3C-4D-5E
• →Cisco dotted-decimal: 001a.2b3c.4d5e
• →No separator (raw hex): 001a2b3c4d5e

All four representations refer to the same device. The colon format is the IEEE 802 standard and most common in Unix, Linux, and macOS environments. The dash format appears in Windows ipconfig output and some network documentation. Cisco devices use dotted-decimal notation, where the 48 bits are divided into three 16-bit groups (four hex digits each), then separated by dots. The raw hex format is rare in practice but appears in some APIs and database records.

Understanding the OUI: manufacturer identification

The first three octets (or first 24 bits) of a MAC address form the Organizationally Unique Identifier (OUI). This prefix is assigned by the IEEE to equipment manufacturers and identifies the vendor. The remaining three octets (24 bits) are assigned by the manufacturer to individual devices and are called the Network Interface Controller (NIC) specific part.

MAC Address: 00:1A:2B:3C:4D:5E
             -------- OUI --------  -- NIC Specific --
             00:1A:2B              3C:4D:5E

In Cisco format: 001a.2b3c.4d5e
                 ^^^^^^ OUI    ^^^^^^ NIC Specific

For example, the OUI 00:1A:2B is assigned to a specific manufacturer. If you encounter a MAC address starting with 00:1A:2B, you can look up the OUI in the IEEE database to identify the device vendor. This is invaluable for network inventory, security investigations, and device discovery.

Practical conversion and use cases

Network engineers frequently encounter MAC addresses in different formats across tools and platforms. A device might report its MAC as 001a2b3c4d5e in a REST API, but your network management system expects 00:1A:2B:3C:4D:5E. Cisco switches output 001a.2b3c.4d5e, while your DHCP server logs show 00-1A-2B-3C-4D-5E.

Manual conversion is straightforward but error-prone. The process involves grouping the 12 hex characters into pairs, then inserting the appropriate separator (colon, dash, or dot). For Cisco dotted format, you group into sets of four hex digits instead.

Starting with raw hex: 001a2b3c4d5e

Colon format:     00:1A:2B:3C:4D:5E
Dash format:      00-1A-2B-3C-4D-5E
Cisco dotted:     001a.2b3c.4d5e
OUI extraction:   00:1A:2B (first three octets)

When troubleshooting device connectivity, DHCP issues, or ARP conflicts, you must quickly identify whether two MAC addresses refer to the same device despite format differences. Misreading a MAC due to format confusion can waste hours of investigation.

Best practices and standards

• →Always use uppercase hexadecimal (A-F) in documentation for consistency and readability
• →When documenting, include the format name or context (e.g., 'Cisco format: 001a.2b3c.4d5e')
• →Verify OUI lookups against the official IEEE database for accuracy
• →In automation scripts, normalize incoming MAC addresses to a single format before comparison
• →Use tools to convert between formats rather than manual entry to avoid transcription errors