IP Access Restriction

Use the IP Access Restriction card under Security Management > Security Settings to specify IP addresses and ranges allowed to access administrator pages. This list is separate from the login whitelist, and administrator permissions are still required.

Before you begin

• Required role: an administrator with permission to manage security settings
• Identify the actual client IP and fixed IPs or CIDR ranges administrators will use.

Open the IP Access Restriction card

1. Select Security Management on the administrator page.
2. Select Security Settings.
3. Select the arrow on the IP Access Restriction card.

Searching for IP Access Restriction with Search menus and settings in the header opens the same card.

Enter allowed IPs

1. Turn on Enable IP Access Restriction.
2. Check Current IP Address in the card. If the list is empty and the current IP is available, turning on the toggle adds it automatically.
3. Enter addresses in Allowed IP Addresses, one per line or separated by commas. Individual IPs and CIDR ranges are supported.
4. Use an address’s remove icon to delete an entry. If the current IP is missing, use Add My IP to add it again.

Examples: 203.0.113.10, 203.0.113.0/24, 2001:db8::/32. Replace these examples with the addresses and ranges used in your environment.

When restriction is enabled, enter at least one allowed IP before saving.

Save changes

1. Select Save in the top-right corner.
2. Select Confirm in the dialog.
3. Check the completion message and the allow list. If Invalid IP List appears, correct those addresses and save again.

Other Security Settings changes use the same save button. If a failure message appears, save the remaining changes again. A partial-save message appears if IP restriction saving failed after the other security settings were saved.

Reset to Defaults changes values across the Security Settings screen. It disables IP restriction and clears the allow list. The reset takes effect only after selecting Save.

Good to Know

• Dynamic IPs and mobile connections can change addresses and lose access. Check the scope of each range and allow only the required addresses.
• Login exceptions and shared-network entries are not automatically added to the administrator allow list.
• A message appears if emergency access mode is enabled in the server configuration. This mode bypasses IP restriction; confirm the configuration with the operator.
• If a wrong allow list keeps you from accessing the administrator page, fix the allow list or turn off the restriction with the ip command in a terminal on the server. For instructions, see Managing the Server with Commands.
• The previous /manages/security/admin-ip address redirects to this card in Security Settings.

Related Documents

• Security Settings