make cidr configurable