Range of IP Address in FMC 6.1

[asstec2]

Hello,

How to add a range of IP Address in FirePower Management center version 6.1
(Exemple: from 192.168.1.1 to 192.168.1.50) range (192.168.1.1-192.168.1.50)

I can't find the correct syntax...

Best regards,

Eric

[Justin Trybulski]

You would add it in objects (5th tab on top) under network. Than reference that network object in your rules

[asstec2]

I'm not looking for the network object tab, but what is the correct syntax to put a range.

I already tried those 4 syntaxes with no success :

1 - range (ipaddr-ipaddr) = (192.168.0.2-192.168.0.120) 
2 - range (192.168.0.2-192.168.0.120)
3 - range = (192.168.0.2-192.168.0.120)
4 - (192.168.0.2-192.168.0.120)

[Marvin Rhoads]

Just type in the start address a dash and the end address. No keyword or other delimiter such as the parentheses.

The configuration guide instructs us thus:

Address Range
A range of IP addresses.
IPv4 example:
209.165.200.225-209.165.200.250

[asstec2]

Hello,
this is the first syntax I tried.
But it does not work :(

I put the error as an attachment

regards,

Eric

[Marvin Rhoads · Accepted solution]

Eric,

Your example has the second address lower than the first one. Reverse them and it should work for you.

See the following which I just did on my FMC 6.1 (open in new tab to zoom):

[asstec2]

I just got it.
I am not 6.1 but in 6.0.1.1

are you there possibility to update to 6.0.1.1 6.1

Thank you for your response

Eric

[Marvin Rhoads · Accepted solution]

I see - the range option was added in FirePOWER Management Center 6.1.

You need to update your system to 6.1 to have that feature.

The 6.0 to 6.1 upgrade must be downloaded manually to your computer and then uploaded onto the FMC.

The file are  "Sourcefire_3D_Defense_Center_S3_Pre-install-6.0.1.999-1224.sh" and "Sourcefire_3D_Defense_Center_S3_Upgrade-6.1.0-330.sh" and can be found here:

https://software.cisco.com/download/release.html?mdfid=286259687&flowid=54052&softwareid=286271056&release=Rules%20Updates&relind=AVAILABLE&rellifecycle=&reltype=latest

[Jetsy Mathew]

Hello Eric,

Adding to what Marvin said, here is the reference for the release notes for the 6.1.version.

http://www.cisco.com/c/en/us/td/docs/security/firepower/610/relnotes/Firepower_System_Release_Notes_Version_610.html

Regards

Jetsy