# File: examples/ip-ranges
#
# Optimization of IP addresses and ports.
# Automatically summarize subsequent IP addresses
# to an IP range.


service:IP = ip;
service:http = tcp 80;

# (A) summarize to an existing range (host:ix_4_7)
policy:caesar_web = {
 user = host:asterix,host:obelix,host:idefix,host:majestix;
 permit src=user;
	dst=host:caesar;
	srv=service:http;
}

# (B) summarize to a non existing range (auto_subnet:asterix)
policy:east_access = {
 user = host:asterix,host:obelix;
 permit src=user;
	dst=network:east;
	srv=service:IP;
}
