Cisco IOS MD5 BruteForce Mask

I am new to hashcat/cudahashcat. I'm a network engineer trying to recover some passwords from some old configs.

I have a standard Cisco IOS salted md5 hash. I found some rainbow tables but they did not find a match. I would like to try to brute force this but figuring out the mask has me questioning myself.

Could someone provide the correct mask to bruteforce a cisco ios md5?

Thanks