Heading
IP Based Security Settings
Formatted Text

IP-Based Security allows you to set a different front end security mode depending on the IP address of the users accessing the site. The following page will guide you through enabling and configuring IP-Based Security Mode.

For example, if extranet access is required to the site then the installation can be set to run in ActiveDirectory mode for internal requests and Login mode for external requests


Topics

Enable or Disable IP-Based Security

Configure IP-Based Security

Check the security mode on an IP address

Test the range of IP addresses

 

Enable or Disable IP-Based Security

This process is conducted through The Admin console of iD and can only be performed by an Admin user with Superuser permission level.

  1. IP-Based Security can be enabled / disabled using the Frontend Security Use IP Based Security Type config setting
  2. Select Config Settings from the Utilities menu
  3. Scroll down the list of config settings and select Frontend Security Use IP Based Security Type
  4. If this config setting does not exist, click the Add New Setting Button and enter the following details:|

    • Name: Frontend Security Use IP Based Security Type
    • Code: FRONTEND_SECURITY_USE_IP_BASED_SECURITY_TYPE
    • Type: Boolean
    • Value: (see next step)
    • Click the Add button

  5. Select from the Value drop-down list and select True to enable IP-Based Security, or False to disable
  6. Click the Update Settings button


Configure IP-Based Security

  1. Select IP-Based Security from the Utilities menu

     
  2. You will be presented with the screen below with the following three tabs:

    • Settings
    • Check IP
    • Test IP Range

     

    1. Settings
    Allows you to set the security mode for a single IP address or IP range

      1. Select an existing IP address to modify it or select Add new IP address to create a new one
      2. Enter the IP Address in the form X.X.X.X where each 'X' is a number between 0 and 255
      3. Enter the Subnet Mask, this is used to set a range of IP addresses. Using a subnet mask of 0.0.0.0 will apply the settings to all IP addresses. The Subnet Mask must be of the form X.X.X.X where each X is one of the following numbers: 0, 126, 192, 224, 240, 248, 252, 254 or 255
      4. Select the applicable Security Mode, see changing frontend security for more information about security modes
      5. Click the Add button to add a new IP address
      6. Click Apply to save

 


2. Check IP
Allows you to check the security more on an IP Address

 

      1. The Check IP tab allows you to determine what Front End Security type a particular IP address is using
      2. Select IP-Based Security from the Utilities menu
      3. Click the Check IP tab
      4. Enter the applicable IP Address to check
      5. Click Check

 


3. Test IP Range
Allows you to test the range of IP Address

 

  1. The Test IP Range allows you to identify what range of IP addresses are included in the specified IP address and Subnet Mask combination
  2. Select IP-Based Security from the Utilities menu and go to the Test IP Range tab
  3. Enter the IP Address in the form of X.X.X.X where each 'X' is a number between 0 and 255
  4. Enter the Subnet Mask, this is used to set a range of IP addresses. The Subnet Mask must be of the form X.X.X.X where each 'X' is one of the following numbers: 0, 126, 192, 224, 240, 248, 252, 254 or 255
  5. Click the Test button to check the range of IP addresses (eg entering an IP address of 192.168.0.0 and a Subnet Mask of 255.255.128.0 will encompass all IP addresses in the range of 192.168.0.0 - 192.168.127.255

 

Back To Top

Click here to return to the System Admin Help index