Applies to: Exchange Server 2007
Topic Last Modified: 2007-06-06

Use the Add-IPAllowListEntry cmdlet to add an IP address or IP address range to the IP Allow list configuration information for the Connection Filter agent on a computer that has the Hub Transport server role or Edge Transport server role installed.

Syntax


`Add-IPAllowListEntry -IPRange <IPRange> [-ExpirationTime <DateTime>]`


`Add-IPAllowListEntry -IPAddress <IPAddress> [-ExpirationTime <DateTime>]`

Parameters

Parameter Required Type Description

Parameter	Required	Type	Description
IPAddress	Required	System.Net.IPAddress	You can specify a single IP address to add to the IP Allow list as follow, for example: `192.168.0.1`.
IPRange	Required	Microsoft.Exchange.Data.IPRange	You can add IP address ranges to the IP Allow list in the following formats: CIDR IP Classless InterDomain Routing. For example, `192.168.0.1/24` IP Range For example, `192.168.0.1-192.168.0.254`
ExpirationTime	Optional	System.DateTime	You can specify a day and time when the IP Allow list entry that you are creating will expire. If you specify a time only, and you do not specify a date, the current day is assumed. When you enter a specific date, use the short date format that is defined in the Regional Options settings that are configured on the local computer. For example, if your computer is configured to use the short date format mm/dd/yyyy hh:mm:ss, to set the expiration time at 11:00 A.M. January 3, 2007, enter the following information, enclosed in double quotation marks: `"1/3/2007 11:00"`.

IPAddress

Required

System.Net.IPAddress

You can specify a single IP address to add to the IP Allow list as follow, for example: 192.168.0.1.

IPRange

Required

Microsoft.Exchange.Data.IPRange

You can add IP address ranges to the IP Allow list in the following formats:

CIDR IP Classless InterDomain Routing. For example, 192.168.0.1/24
IP Range For example, 192.168.0.1-192.168.0.254

ExpirationTime

Optional

System.DateTime

You can specify a day and time when the IP Allow list entry that you are creating will expire. If you specify a time only, and you do not specify a date, the current day is assumed. When you enter a specific date, use the short date format that is defined in the Regional Options settings that are configured on the local computer. For example, if your computer is configured to use the short date format mm/dd/yyyy hh:mm:ss, to set the expiration time at 11:00 A.M. January 3, 2007, enter the following information, enclosed in double quotation marks: "1/3/2007 11:00".

Detailed Description

If you do not specify the IPAddress parameter when you run the Add-IPAllowListEntry cmdlet, the Exchange Management Shell prompts you for it. Either the IPAddress parameter or the IPRange parameter is required.

To run the Add-IPAllowListEntry cmdlet, the account you use must be delegated the following:

Exchange Server Administrator role and local Administrators group for the target server

To run the Add-IPAllowListEntry cmdlet on a computer that has the Edge Transport server role installed, you must log on by using an account that is a member of the local Administrators group on that computer.

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Input Types

Return Types

Errors

Error	Description

Example

The first code example shows an Add-IPAllowListEntry command that adds an IP address range on the IP Allow list for the computer on which the command is run. The second code example sets the same IP Allow list entry to expire at 11:59 P.M. on January 3, 2007.

	Copy Code
Add-IPAllowListEntry -IPRange:192.168.0.1/24 Add-IPAllowListEntry -IPRange:192.168.0.1/24 -ExpirationTime "1/3/2007 23:59"