IP Address range in iRules - ACL's

Hi,

You have 2 choices :

The first one is to use classes, and the second one is to use this :

set ip [IP::client_addr]
set lastoctet [getfield $ip "." 4]
if { not ((($lastoctet >= 25) && ($lastoctet <= 50)) || (($lastoctet >= 100) && ($lastoctet <= 200)) } { 
  reject;
}

You have to use it into an iRule which will check the subnet first otherwise you will authorize everything ending by $lastoctet