diff --git a/docs/configuration/firewall/ipv4.md b/docs/configuration/firewall/ipv4.md
index e5c0a98610..35d51c4ef2 100644
--- a/docs/configuration/firewall/ipv4.md
+++ b/docs/configuration/firewall/ipv4.md
@@ -530,6 +530,18 @@ that the router is able to resolve this dns query.
 ```{cfgcmd} set firewall ipv4 name \<name\> rule \<1-999999\> source geoip country-code \<country\>
 ```
 
+```{cfgcmd} set firewall ipv4 forward filter rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv4 input filter rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv4 output filter rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv4 name \<name\> rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
 ```{cfgcmd} set firewall ipv4 forward filter rule \<1-999999\> destination geoip country-code \<country\>
 ```
 
@@ -542,6 +554,18 @@ that the router is able to resolve this dns query.
 ```{cfgcmd} set firewall ipv4 name \<name\> rule \<1-999999\> destination geoip country-code \<country\>
 ```
 
+```{cfgcmd} set firewall ipv4 forward filter rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv4 input filter rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv4 output filter rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv4 name \<name\> rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
 ```{cfgcmd} set firewall ipv4 forward filter rule \<1-999999\> source geoip inverse-match
 ```
 
@@ -566,7 +590,8 @@ that the router is able to resolve this dns query.
 ```{cfgcmd} set firewall ipv4 name \<name\> rule \<1-999999\> destination geoip inverse-match
 
 Match IP addresses based on its geolocation. More info: geoip matching.
-Use inverse-match to match anything except the given country-codes.
+Use country-code or asn to match based on geography or origin network.
+Use inverse-match to match anything except the given country code or ASN.
 ```
 
 Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required,
diff --git a/docs/configuration/firewall/ipv6.md b/docs/configuration/firewall/ipv6.md
index e9011b4c99..8347511fcd 100644
--- a/docs/configuration/firewall/ipv6.md
+++ b/docs/configuration/firewall/ipv6.md
@@ -531,6 +531,18 @@ Ensure that the router can resolve the DNS query.
 ```{cfgcmd} set firewall ipv6 name \<name\> rule \<1-999999\> source geoip country-code \<country\>
 ```
 
+```{cfgcmd} set firewall ipv6 forward filter rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv6 input filter rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv6 output filter rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv6 name \<name\> rule \<1-999999\> source geoip asn \<1-4294967294\>
+```
+
 ```{cfgcmd} set firewall ipv6 forward filter rule \<1-999999\> destination geoip country-code \<country\>
 ```
 
@@ -543,6 +555,18 @@ Ensure that the router can resolve the DNS query.
 ```{cfgcmd} set firewall ipv6 name \<name\> rule \<1-999999\> destination geoip country-code \<country\>
 ```
 
+```{cfgcmd} set firewall ipv6 forward filter rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv6 input filter rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv6 output filter rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
+```{cfgcmd} set firewall ipv6 name \<name\> rule \<1-999999\> destination geoip asn \<1-4294967294\>
+```
+
 ```{cfgcmd} set firewall ipv6 forward filter rule \<1-999999\> source geoip inverse-match
 ```
 
@@ -568,7 +592,8 @@ Ensure that the router can resolve the DNS query.
 
 Match IP addresses based on their geolocation. For more information, see
 GeoIP matching.
-Use inverse-match to match anything except the specified country codes.
+Use country-code or asn to match based on geography or origin network.
+Use inverse-match to match anything except the specified country code or ASN.
 ```
 
 DB-IP.com provides data under CC-BY-4.0 license. Attribution is required and