IP Restrictions Add-on
- Liz Griffin (Unlicensed)
- Steve W (Unlicensed)
Applies To Version(s): 3, 3.5, 3.7 - Add-on: Contact your ShareVision Product Expert to order.
Overview
The IP Restriction Add-on allows Site Administrators to limit which IP addresses (locations) can access their ShareVision site.
An Internet Protocol (IP) address is an identifying number given to a device on a computer network. The IP Restriction Add-On makes use of a static IP address to only allow those locations (or modems) to connect with your ShareVision site.
Static IP vs. DHCP
IP addresses are generally assigned by the Internet Service Provider at the location in question. Most ISPs use DHCP which dynamically assigns these address. DHCP IP addresses often expire after a few hours, days, or weeks. In these cases when the IP changes that location will no longer have access to ShareVision (unless the user logging in is a member of one of the allowed security groups - see below). When the DHCP changes a site administrator will need to add the new IP to the IP Security list.
To avoid this situation you may wish to inquire with your ISP about the possibility of purchasing “static IPs” for your location. A static IP is one that is always assigned to your location and will not change.
Site Administrators can also define which security groups are subject to this restriction. For example, using security groups can relax the IP restriction for the Managers or Supervisors groups. This product is installed with all groups added to the allowed list (IP Security Groups) so as not to interrupt staff access to your site. In order to block access, an administrator will need to remove groups from this list.
If you need assistance, please discuss your specific installation strategy with your Product Expert and they can guide you in configuring the IP Restriction Add-On..
Adding an IP to the IP Security List
- Log in as a Site Collection Administrator (or a user in one of the allowed security groups)
- Go to Site Actions > View All Site Content and find the IP Security list and select it.
- Click the new button on the toolbar.
- Type in an IP that you would like to allow access to your ShareVision site. If you don’t know the IP of the location navigate to Google search on any computer at that location and type “What’s my IP”.
- Type in an optional description of where that IP is located. This would be something that will help you remember what that IP corresponds to like “Program A location” or “Staff Person B’s home”
- Click OK to save the record.
Adding a Security Group to the IP Security Groups List
- Log in as a Site Collection Administrator.
- Go to Site Actions > View All Site Content and find the IP Security Groups list and select it.
- Click the new button on the toolbar.
- Add one or more security groups to the Allowed Groups column by typing in the name of the group(s) separated by semi-colons.
- Check that you have typed the name(s) of the groups correctly by clicking the group check icon. If a group name is misspelled it will be underlined with a red squiggle. Retype the name until you get it correct.
- Click OK to save the record.
Deactivating an IP
If you would like to deactivate an IP that currently has access, you can either remove it from the IP Security list or you can edit the corresponding record in that list and deselect the active check box. The second method is handy if you might want to reactivate that IP again at a later date (e.g. after a maternity leave).
Related Articles