You can add a single object or multiple object network location.
- Go to Policies > Profiles > Network Location > New Network Location and select either Single Object or Multiple Objects.
- To add a single object, provide an IP address, IP address range, or a CIDR netmask, When finished, click the adjacent + button, and then click Next. Enter a name for the network location, and then click Save Network Location.
IP address range and CIDR netmask examples:
10.0.0.1-10.0.0.100,10.0.0.0/22 - To add multiple objects, upload a CSV file with multiple IP addresses or ranges. Enter a name for the network locations, and then click Save Network Location.
- When finished, click Apply Changes.
Best Practices
Supported Formats
This section provides the supported formats:
Use a number sign (#) or a semicolon (;) for comments.
- IP Address
- CIDR
- RANGE
The following are considerations to make for IP/CIDR ranges and examples are provided.
- IP address range is specified as A.B.C.D-W.X.Y.Z. IP address with CIDR is specified as A.B.C.D/<bits>
- Error is flagged if IP range is followed by other URL components such as path and query. If IP address/CIDR is followed by path/query, it will be interpreted as exact URL.
- IP address cannot be 0.0.0.0. In an IP address range, start address must be less than end address. IP address in CIDR notation must have host portion zero.
- Overlapping ranges are supported. If such ranges are associated with different categories, lookup of IP address in overlapping range would result in multiple categories. For example considering the following two ranges, a lookup of 192.186.1.2 would result in deriving “Category A” and “Category B”.
- 192.186.1.1 – 192.168.1.4 (Category A)
- 192.186.1.1 – 192.168.1.20 (Category B)
Valid Examples
#this is a single host
10.0.0.1
#this is CIDR
10.0.0.0/24
#this is a range
10.0.0.1-10.0.0.100
Invalid Examples
# Invalid ip ranges and CIDR
"http://1.2.3.20-1.2.3.10
"http://1.2.3.10-1.2.3.20/some/path"
"http://1.2.3.4/24"