ip.prefix — IP Range (CIDR)

CIDR

In the console: IP Range (CIDR)

Matches the source IP against a CIDR prefix. Use to express an IP range in a single condition. The value can be one or several comma-separated CIDRs.

This field performs a membership test, not a text comparison: is the client IP inside any of the listed blocks? For that reason == and in are synonyms (inside any), as are != and not_in (inside none).

Supported Operators

Operator	Description
== / in	The IP is inside any of the listed CIDRs
!= / not_in	The IP is inside none of the listed CIDRs

Examples

IF   ip.prefix == 192.168.0.0/16
THEN allow

IF   ip.prefix in 10.0.0.0/8, 172.16.0.0/12
THEN block

Related

• ip.src →
• ip.list →