topic Firepower / Firesight ACL platform setting proper syntax for IP Range in Network Security

Firepower / Firesight ACL platform setting proper syntax for IP Range

jwornstaff — Tue, 12 Mar 2019 13:09:42 GMT

Does any one know the correct syntax for specifying an IP range ACL in the platform settings of Firepower management Center?

In example under Devices>Platform Settings>Access List, the add rule, the host IP.

For say ssh or ssl or snmp.

Config guide says specify host IP or Range, but I can't figure out what it wants to specify the range...wildcard, mask, dashes, etc.

I've used limiting access to

niko — Fri, 14 Oct 2016 10:18:19 GMT

I've used limiting access to the IP subnet in a form of IP/mask, basically something like this: 10.10.10.0/24 or, for a single host, simply an IP without anything added to it.

For a range that doesn't fall

Marvin Rhoads — Sat, 22 Oct 2016 18:51:38 GMT

For a range that doesn't fall within a netmask boundary, just type first address-last address in the field. e.g. 192.168.1.10-192.168.1.20.

I believe ranges were introduced in 6.1.