Approle based authentication using cidrs

Vault
1

Hello,

When creating Approle, there’s an option to set list of CIDRs ( IP addresses ) secret_id_bound_cidrs/token_bound_cidrs

I haven’t been able to find out if the IP addresses listed be static or dynamic ? Is there a way to specify using hostnames or aliases instead ?

Thanks.

2

As far as I know only CIDR notation. It doesn’t matter if the
host have IPs statically assigned or using DHCP, as long as they fall within the range specified.