Firepower / Firesight ACL platform setting proper syntax for IP Range

[jwornstaff]

Does any one know the correct syntax for specifying an IP range ACL in the platform settings of Firepower management Center?

In example under Devices>Platform Settings>Access List, the add rule, the host IP.

For say ssh or ssl or snmp.

Config guide says specify host IP or Range, but I can't figure out what it wants to specify the range...wildcard, mask, dashes, etc.

[niko · Accepted solution]

I've used limiting access to the IP subnet in a form of IP/mask, basically something like this: 10.10.10.0/24 or, for a single host, simply an IP without anything added to it.

[Marvin Rhoads]

For a range that doesn't fall within a netmask boundary, just type first address-last address in the field. e.g. 192.168.1.10-192.168.1.20.

I believe ranges were introduced in 6.1.