Using 'inverse mask' to support IP wildcards. The mask used
with the source IP address will specify what traffic is exempted
from EAP validation.
e.g. cnnEouAuthIpAddr: 10.0.0.0
cnnEouAuthIpAddrMask: 0.255.255.255
This exempts any IP in the subnet at 10.x.x.x from posture
validation.
cnnEouAuthIpAddr: 10.1.2.1
cnnEouAuthIpAddrMask: 0.0.0.0
This exempts host IP 10.1.2.1 from posture validation.
cnnEouAuthIpAddr: 10.0.0.0
cnnEouAuthIpAddrMask: 255.255.255.255
Mask value of 255.255.255.255 will exempt ALL hosts from
posture validation.