Ah yes, before your key type specifier i.e. at the very beginning use something like :

from="192.168.1.0/24"