Use the following syntax to create a tdatIPFilter object.
Also see Applying IPFilters to Directory Users.
dn: cn=filter1,cn=ipfilters,cn=system1,cn=tdat,dc=domain,dc=com objectClass: top objectClass: tdatIPFilter tdatAllowDeny: TRUE tdatAllowedIP: 141.206.0.0/16 tdatDeniedIP: 141.206.35.0/24 cn: filter1 dn: cn=filter2,cn=ipfilters,cn=system1,cn=tdat,dc=domain,dc=com objectClass: top objectClass: tdatIPFilter tdatAllowDeny: FALSE tdatAllowedIP: 141.206.35.175/32 tdatDeniedIP: 141.206.35.0/24 cn: filter2