It looks like the input validation for Whitelist when using the legacy setup is very picky. You must have one IP address per line, and IPv4 must be in a format:
x.x.x.x
x.x.x.x/xx
No spaces are permitted. When the box turns red indicating an error, you can continue typing until it’s fixed.