Hi, As far as I know, to exclude the range of IP address in a subnet is to split the address range of subnet into two. Example: subnet 1.1.1.0 netmask 255.255.255.0 { range 1.1.1.10 1.1.1.15 range 1.1.1.21 1.1.1.40 } so in the above example automatically the IP 16-20 will be excluded from the list.