On Apr 15, 2015, at 9:00 AM, Peter Balsianok <balsianok.peter at gmail.com> wrote: > It doesn`t work. Ah... the RHS is cast to a network having /32, where the LHS is a /24. So they're not the same. You'll have to do: if (<cidr>&NAS-IP-Address < 213.151.231.0/24) { .. } Which will work. Alan DeKok.