Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Proper Syntax -- Src-Addr Filter IPS Signature Tuning

Anyone know what the proper syntax to define Src and Dest addresses within a Signature? I am trying to define the default Private IP ranges as src addresses in signature 3030 and keep getting errors regarding the syntax.

I have tried ip/netmask and defining the netmask as 255.255.0.0 and so on.

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: Proper Syntax -- Src-Addr Filter IPS Signature Tuning

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

2 REPLIES
Gold

Re: Proper Syntax -- Src-Addr Filter IPS Signature Tuning

Use a hyphen. So to filter all 192.168.0.0/16 address:

192.168.0.0-192.168.255.255

New Member

Re: Proper Syntax -- Src-Addr Filter IPS Signature Tuning

Many Thanks for the reply!

I searched the manual and this site up and down for that information and didn't find it documented anywhere.

321
Views
0
Helpful
2
Replies