What Is Media Access Control (MAC)?

Media Access Control (MAC) is a sublayer of the data link layer in the OSI network model that governs how devices sharing a common transmission medium gain access to that medium for data transmission. It provides the channel access mechanisms that allow multiple nodes to use a shared physical layer without unacceptable levels of collision or interference. The MAC sublayer sits between the physical layer below it and the Logical Link Control (LLC) sublayer above it, and it is one of the two sublayers IEEE 802 standards address explicitly.

The MAC sublayer arose as a necessary solution to the coordination problem in shared-medium networks: if multiple transmitters send data simultaneously on the same wire or radio channel, their signals collide and become unreadable. Different MAC protocols solve this problem through different strategies, ranging from probabilistic contention-based approaches to deterministic scheduled-access schemes. The IEEE 802 family of standards defines MAC layer specifications for Ethernet (802.3), Wi-Fi (802.11), Bluetooth (802.15), and other local and metropolitan area network technologies.

Channel Access and Collision Handling

The most widely deployed MAC mechanism in wired networks is Carrier Sense Multiple Access with Collision Detection (CSMA/CD), which forms the basis of Ethernet as defined in IEEE 802.3 standards. In CSMA/CD, a transmitting node listens to the channel before sending; if it detects another transmission, it waits a random back-off interval before retrying. In wireless networks, collision detection is not practical because a transmitting node cannot simultaneously hear other transmitters, so IEEE 802.11 Wi-Fi uses CSMA with Collision Avoidance (CSMA/CA), which employs a distributed coordination function and random back-off counters to reduce the probability of simultaneous transmissions.

Time-division and frequency-division approaches offer deterministic alternatives. Time Division Multiple Access (TDMA) allocates the channel in fixed time slots assigned to individual nodes, eliminating contention but requiring precise timing synchronization. Frequency Division Multiple Access (FDMA) assigns different frequency sub-bands to different nodes. These contention-free methods are prevalent in cellular networks and satellite links, while contention-based methods dominate in LAN environments where traffic is bursty and the number of active nodes varies.

MAC Addressing

Each network interface that communicates at the MAC layer carries a 48-bit identifier called a MAC address, assigned by the device manufacturer and intended to be globally unique. MAC addresses appear in the header of every Ethernet and Wi-Fi frame and are used by switches and access points to make local forwarding decisions. The structure of a MAC address includes an organizationally unique identifier (OUI) allocated to the manufacturer and a device-specific portion. IEEE 802.1AE (MACsec) is the standard that provides cryptographic integrity and confidentiality protection at the MAC layer, authenticating the origin of frames and optionally encrypting their payloads to prevent eavesdropping on local networks.

MAC Security

MAC Security, standardized in IEEE 802.1AE, provides three security functions at the data link layer: connectionless confidentiality of frame payloads, data integrity verification to detect tampering, and data origin authenticity to confirm the legitimate source of each frame. MACsec operates transparently to higher-layer protocols, meaning it can secure an Ethernet link without modifications to IP, TCP, or application software. It is used in enterprise networks, financial networks, and critical infrastructure where physical access to switching equipment cannot be fully controlled.

Applications

Media Access Control has applications in a wide range of disciplines, including:

• Local area network design and troubleshooting
• Wireless LAN deployment and capacity planning
• Industrial Ethernet and time-sensitive networking for automation
• Data center networking and virtualized switch fabrics
• Network security through MAC-layer authentication and encryption