Network Security
Configuration of IP-based access restrictions for enhanced system security.
How It Works
IP ranges define which network addresses users with certain roles can log in from:
- Whitelist principle: Only explicitly allowed IP addresses have access
- Role-based: Different restrictions possible for different roles
- CIDR notation: Use of network blocks for ranges
Create IP Range
Required Fields
| Field | Description | Example |
|---|---|---|
| Role | Role to which the restriction applies | Administrator, Standard User |
| Network CIDR | IP range in CIDR notation | 192.168.1.0/24 |
| Description | Optional description of the range | Main office Frankfurt |
CIDR Notation Explained
CIDR notation defines IP ranges:
192.168.1.0/24= 192.168.1.0 to 192.168.1.255 (256 addresses)10.0.0.0/16= 10.0.0.0 to 10.0.255.255 (65,536 addresses)192.168.1.100/32= Only the single IP 192.168.1.100
Configuration Process
- Select role - Determine which role is affected
- Enter IP range - Define the allowed network CIDR
- Add description - Document the purpose (optional)
- Save and activate
Important Note
After configuration, login for the selected role is only possible from the entered IP addresses. All other IP addresses will be blocked!
Example Configurations
Small Company with One Office
Role: All Employees
CIDR: 85.214.132.0/29
Description: Main office Munich
Large Enterprise with Multiple Locations
Role: Employees Germany
CIDR: 10.100.0.0/16
Description: Germany VPN range
Role: Employees Switzerland
CIDR: 10.101.0.0/16
Description: Switzerland VPN range
Home Office with Fixed IPs
Role: Remote Employees
CIDR: 84.137.25.100/32
Description: Home office Miller
Role: Remote Employees
CIDR: 91.65.200.50/32
Description: Home office Smith