How do I specify an address range? I get a cryptic error every time I try to do so.

According to whois, my ISP'S address range is - The error given is: "The source needs to be a CIDR block or a Security Group ID."

Their example is in this form: but I confess I don't fully understand that, unless it simple implies to allow the first 24 values of the last octet. If so, then I would need to supply hundreds or thousands of such rules.

  • You'd be better off permitting your individual IP address. If it changes regularly then you can have a script on a raspberry pi / PC run every minute / hour / day to update your security groups to update / create new rules. Something like this. – Tim Sep 10 '19 at 23:16
  • You need to study subnets a little bit. means to In your case you have a subnet (which means exactly - So use that in your configuration. – Overmind Sep 11 '19 at 6:19

As the message says Amazon requires CIDR Address in the security group, not an address range. CIDR is a way to describe network blocks by slicing the 32 bits of IPv4 address into a network part and host part.

The CIDR format is IP.AD.DR.ES/PREFIX where the PREFIX is the length of the network part of the address in bits. For example network range: - has the first 3 bytes assigned to the network and the last byte used by the hosts in the network. Hence the prefix is 3*8=24 and the network range - is equivalent to CIDR range

If your ISP address range is - it means that the first 12 bits of the address is their networkblock and the last 20 bits they can assign to hosts or internal networks. Hence the answer to your question is - use this in the Security Group.

To calculate CIDRs from address ranges you can use for example https://ip2cidr.com/ or many other online tools.

I won't go into more details about CIDR here, read it up on Wikipedia or google for something like CIDR explanation.

Hope that helps :)

BTW Although your original question was on-topic it was asked in the answers, that's why it was deleted.

  • Ahh...got it, thank you. Makes perfect sense. Overwhelmed with things I'm learning, and not a network guru, but I'm working on it <g>. – S M Sep 11 '19 at 18:24
  • I get downvoted for commenting on a valid answer that I found helpful?? Seriously? So now you'll downvote me for this too also I suppose? – S M Apr 17 '20 at 23:36
  • @SM take it easy mate, I didn’t downvote you ;) – MLu Apr 17 '20 at 23:44
  • No I figured it wasn't you, but probably Stack Overflow. I have no idea, but I think it's pretty lame. Thanks again for your help - much appreciated! – S M Apr 19 '20 at 15:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.