Configure an IP segment under win2008 IP security policy

You can specify a single IP address or a subnet of IPv4 or IPv6 addresses. To specify a subnet, enter the IP address using a syntax similar to the following:

192.168.1.0/24

The number after the forward slash (/) represents the number of bits in the subnet mask. It could be 32 bits. In this example, 24 means that the first three hexadecimal Numbers are subnet addresses, and the last hexadecimal number is the host ID in the subnet. Means that the bit of host ID must be 0. The subnet mask for this example is 255.255.255.0.

For the IPv6 address, use the same syntax. The number following the forward slash represents the number of bits in the subnet mask. Maybe 128 bits. The bit representing host ID must be 0. Such as:

2001:8e6c:6456:1c99::/64

The corresponding table of IP segment is attached below