SCCM and IP range

Marek G 171 Reputation points
2022-07-20T07:39:42.877+00:00

Hi all
sorry , is posible create boundary with mask etc. 255.0.255.0 in IP range ? Our organization define localite in 3 octet.
thanx

Microsoft Security | Intune | Configuration Manager | Other
0 comments
Answer accepted by question author
Simon Ren-MSFT 40,386 Reputation points Microsoft External Staff
2022-07-20T17:58:18.21+00:00

Hi @Marek G ,

Yes, agree with Garth. It's recommended to use the IP address range boundary type rather than IP subnet type. As IP address range boundary type is more flexible and easier to use, just specify the Starting IP address and Ending IP address for the range. The range can include part of an IP subnet or multiple IP subnets. Use an IP address range boundary type to support a supernet.

For example, we can use below command creates a new IP range site boundary that has the name IPRangeBoundary01 and a value of 255.0.255.X-255.0.255.Y.
New-CMBoundary -DisplayName "IPRangeBoundary01" -BoundaryType IPRange -Value "255.0.255.X-255.0.255.Y"

Refer to: New-CMBoundary

Thanks for your time. Have a nice day!

Best regards,
Simon

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

0 comments

4 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Sheik 0 Reputation points
    2026-05-15T12:45:06.0366667+00:00

    When designing your boundary strategy, we recommend boundaries that are based on Active Directory sites. Where those are not possible, use IP subnet boundaries. If neither of these options are available, then leverage IP range boundaries.

    https://techcommunity.microsoft.com/blog/microsoft-security-blog/when-not-to-use-ip-address-ranges-as-boundaries-in-configuration-manager/247596

    Was this answer helpful?

    0 comments
  2. Jason Sandys 31,421 Reputation points Microsoft Employee Moderator
    2022-07-21T16:41:48.843+00:00

    Side note: 255.0.255.0 is not a valid subnet mask so assuming this is a typo.

    Was this answer helpful?

    0 comments
  3. Marek G 171 Reputation points
    2022-07-20T12:09:39.117+00:00

    Oki and IP subnets ? is possible ?

    Was this answer helpful?

  4. Garth 5,806 Reputation points
    2022-07-20T11:10:54.35+00:00

    Yes you can a ip range as big as you want. But make sure that you use ip ranges and NOT ip subnets.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.