Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
mahendra
Explorer

API 1.7.1| How to filter show-access-rulebase for IP range

I want to query my rule using API command show-access-rulebase.

 

It is working perfectly fine for a single or multiple IP or Port.

But  i am not able to figure out what filter to use for any IP range, say, 10.10.10.100-10.10.10.250 or port range, say, 1024-5000

below is my sample payload for API call

payload = {
                    "limit": page_size,
                    "offset": offset,
                    "use-object-dictionary": True,
                    "filter": filter,
                    "filter-settings": {
                        "search-mode" : "packet",
                        "packet-search-settings" : {
                            "expand-group-members" : "true"
                        }
                    },
                    "uid": access_layer_uid
                }
page_size, offset, filter, access_layer_uid being variables.
 
 
 
0 Kudos
1 Reply
dj0Nz
Advisor

Hi,

I think this only works if you use a matching range object in your rulebase. Then use something like

{ "filter": "dst:10.10.10.100-10.10.10.250" }

But IMHO you will only get exact matches, a rule with destination 10.10.10.0/24 will not match.

 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events