IP-Based Security allows you to set a different front end security mode depending on the IP address of the users accessing the site. These settings can be done via the Admin console by an Administrator with Superuser access. The following page will guide you through enabling and configuring IP-Based Security Mode.
Enable or Disable IP-Based Security
1. IP-Based Security can be enabled/disabled using a config setting
2. Login to the Admin interface and go to Administration > Utilities > Config Settings
3. Select Frontend Security Use IP Based Security Type
4. Set the value to True to enable IP-Based Security or to False to disable.
Click the Edit button to modify the setting and select Update to save the changes.
Configure IP-Based Security
1. Login to the Admin interface and go to Administration > Utilities > IP-Based Security Settings
2. Settings - allow you to set the security mode for a single IP address or IP range
- Select an existing IP address to modify it or select Add new IP address to create a new one
- Select the IP Address Type - ipv4 or ipv6
- Enter the IP Address in the form X.X.X.X where each 'X' is a number between 0 and 255
- Enter the Subnet Mask, this is used to set a range of IP addresses.
Using a subnet mask of 0.0.0.0 will apply the settings to all IP addresses. The Subnet Mask must be of the form X.X.X.X where each X is one of the following numbers: 0, 126, 192, 224, 240, 248, 252, 254 or 255
- Select a Device Type from the options available
- Select the applicable Security Mode.
[Note: If extranet access is required to the site then the installation can be set to run in Active Directory mode for internal requests and Login mode for external requests]
- Click the Add button to add a new IP address
- Click Apply to save and continue editing. Click OK to save and exit or Cancel to exit without saving.
3. Check IP - allows you to check the Front End Security type a particular IP address is using.
- Add the IP Address and choose the Device Type
- Click the Check button
- It will display the Security Mode used by the given IP Address
4. Test IP Range - allows you to identify the range of IP Addresses that are included in the specified IP address and Subnet Mask combination.
- Enter the IP Address in the form of X.X.X.X where each 'X' is a number between 0 and 255
- Enter the Subnet Mask used to set the range of IP addresses.
[Note: The Subnet Mask must be of the form X.X.X.X where each 'X' is one of the following numbers: 0, 126, 192, 224, 240, 248, 252, 254 or 255]
- Click the Test button to check the range of IP addresses (IP Range)
For example, entering an IP address of 192.168.0.0 and a Subnet Mask of 255.255.128.0 will encompass all IP addresses in the range of 192.168.0.0 - 192.168.127.255