NAS-IP-address == "10.1.2.0/24" allowed?

Hi, Again, newbie question that I failed to find the anwser from FAQ or wiki. I would like to restrict user login by NAS-IP-address or fqdn if possible. Therefore I can restrict user to login a group of devices. user1 Auth-Type := Local, User-Password == "sceret", NAS-IP-address =="10.1.2.0/24" ... It works if NAS-IP-address == "10.1.2.3", but that will require ~250 entries in users file. Can it be group into /24 or is NAS-Network-address exist? How about using DNS name, something like user1 Auth-Type := Local, User-Password == "sceret", NAS-fqdn =~ /*.(core|edge).domain/ ... Thanks a lot, Min