Use the following syntax to create a tdatIPFilter object.
Also see Applying IPFilters to Directory Users.
dn: cn=filter1,cn=ipfilters,cn=system1,cn=tdat,dc=domain,dc=com objectClass: top objectClass: tdatIPFilter tdatAllowDeny: TRUE tdatAllowedIP: 192.0.2.0/16 tdatDeniedIP: 192.0.2.14/24 cn: filter1 dn: cn=filter2,cn=ipfilters,cn=system1,cn=tdat,dc=domain,dc=com objectClass: top objectClass: tdatIPFilter tdatAllowDeny: FALSE tdatAllowedIP: 192.0.2.175/32 tdatDeniedIP: 192.0.2.175/24 cn: filter2