API 1.7.1| How to filter show-access-rulebase for IP range

mahendra — Mon, 26 Feb 2024 06:15:15 GMT

I want to query my rule using API command show-access-rulebase.

It is working perfectly fine for a single or multiple IP or Port.

But i am not able to figure out what filter to use for any IP range, say, 10.10.10.100-10.10.10.250 or port range, say, 1024-5000

below is my sample payload for API call

payload = {

"limit": page_size,

"offset": offset,

"use-object-dictionary": True,

"filter": filter,

"filter-settings": {

"search-mode" : "packet",

"packet-search-settings" : {

"expand-group-members" : "true"

}

"uid": access_layer_uid

}

page_size, offset, filter, access_layer_uid being variables.

Re: API 1.7.1| How to filter show-access-rulebase for IP range

dj0Nz — Wed, 28 Feb 2024 15:26:55 GMT

Hi,

I think this only works if you use a matching range object in your rulebase. Then use something like

{ "filter": "dst:10.10.10.100-10.10.10.250" }

But IMHO you will only get exact matches, a rule with destination 10.10.10.0/24 will not match.