---
title: IP Access rules parameters
description: Configurable parameters for IP Access rules.
image: https://developers.cloudflare.com/core-services-preview.png
---

> Documentation Index  
> Fetch the complete documentation index at: https://developers.cloudflare.com/waf/llms.txt  
> Use this file to discover all available pages before exploring further.

[Skip to content](#%5Ftop) 

### Tags

[ IPv4 ](https://developers.cloudflare.com/search/?tags=IPv4)[ IPv6 ](https://developers.cloudflare.com/search/?tags=IPv6)[ Geolocation ](https://developers.cloudflare.com/search/?tags=Geolocation) 

# IP Access rules parameters

An IP Access rule will apply a certain action to incoming traffic based on the visitor's IP address, IP range, Autonomous System Number (ASN), or country.

## IP address

| Type         | Example value |
| ------------ | ------------- |
| IPv4 address | 192.0.2.3     |
| IPv6 address | 2001:db8::    |

## IP range

| Type            | Example value  | Start of range | End of range                           | Number of addresses                    |
| --------------- | -------------- | -------------- | -------------------------------------- | -------------------------------------- |
| IPv4 /24 range  | 192.0.2.0/24   | 192.0.2.0      | 192.0.2.255                            | 256                                    |
| IPv4 /16 range  | 192.168.0.0/16 | 192.168.0.0    | 192.168.255.255                        | 65,536                                 |
| IPv6 /128 range | 2001:db8::/128 | 2001:db8::     | 2001:db8::                             | 1                                      |
| IPv6 /64 range  | 2001:db8::/64  | 2001:db8::     | 2001:db8:0000:0000:ffff:ffff:ffff:ffff | 18,446,744,073,709,551,616             |
| IPv6 /48 range  | 2001:db8::/48  | 2001:db8::     | 2001:db8:0000:ffff:ffff:ffff:ffff:ffff | 1,208,925,819,614,629,174,706,176      |
| IPv6 /32 range  | 2001:db8::/32  | 2001:db8::     | 2001:db8:ffff:ffff:ffff:ffff:ffff:ffff | 79,228,162,514,264,337,593,543,950,336 |

## Autonomous System Number (ASN)

| Type | Example value |
| ---- | ------------- |
| ASN  | AS13335       |

## Country

Specify a country using two-letter [ISO-3166-1 alpha-2 codes ↗](https://www.iso.org/iso-3166-country-codes.html). Additionally, the Cloudflare dashboard accepts country names. For example:

* `US`
* `CN`
* `germany` (dashboard only)

Cloudflare uses the following special country alpha-2 codes that are not part of the ISO:

* `T1`: [Tor exit nodes](https://developers.cloudflare.com/network/onion-routing/) (country name: `Tor`)
* `XX`: Unknown/reserved

Notes

Country block is only available on Enterprise plans.

IP addresses globally allowed by Cloudflare will override a country block via IP Access rules, but they will not override a country block via [custom rules](https://developers.cloudflare.com/waf/custom-rules/).

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/directory/","name":"Directory"}},{"@type":"ListItem","position":2,"item":{"@id":"/waf/","name":"WAF"}},{"@type":"ListItem","position":3,"item":{"@id":"/waf/tools/","name":"Additional tools"}},{"@type":"ListItem","position":4,"item":{"@id":"/waf/tools/ip-access-rules/","name":"IP Access rules"}},{"@type":"ListItem","position":5,"item":{"@id":"/waf/tools/ip-access-rules/parameters/","name":"IP Access rules parameters"}}]}
```