IP Restriction Add-On Configuration

Applies To Version(s): 4 - Add-on: Contact Customer Success, Sales or a ShareVision Product Expert to order.

1 Overview
2 Requirements/Dependencies
3 How to Find Your IP Address
4 IP Restriction Initial Configuration - Security Groups Allowed
5 IP Restriction Initial Configuration - IP Addresses Allowed
6 IP Restriction Initial Configuration - Enable/Disable IP Restriction Configuration
7 Adding or Removing Allowed Groups
8 Adding Access to an IP Address
9 Removing Access to an IP Address
10 IP Restriction Configuration Reference Table
11 Message a User Receives When They Cannot log in
12 See Also

Overview

The IP Restriction Add-on allows ShareVision Administrators to limit which IP addresses (locations) can access their ShareVision site. They can also define which security groups are exempt from the IP Restriction which will allow them to access your ShareVision site from any IP Address.

An Internet Protocol (IP) address is an identifying number given to a device on a computer network. The IP Restriction Add-On makes use of a static IP address to only allow those locations (or modems) to connect with your ShareVision site.

Static IP vs. DHCP

IP addresses are generally assigned by the Internet Service Provider at the location in question. Most ISPs use DHCP which dynamically assigns these addresses. DHCP IP addresses often expire after a few hours, days, or weeks. In these cases when the IP changes that location will no longer have access to ShareVision (unless the user logging in is a member of one of the allowed security groups - see below). When the DHCP changes a site administrator will need to add the new IP to the IP Security list.

To avoid this situation you may wish to inquire with your ISP about the possibility of purchasing “static IPs” for your location. A static IP is one that is always assigned to your location and will not change.

Requirements/Dependencies

Before you can configure the IP Restriction Add-on, the following is required:

A subscription to the IP Restriction Add-on
An account with ShareVision Administrator permissions
A plan for which security groups will be exempt from logging in from specific IP addresses
A list of IP addresses that will be permitted to log in

Using static IP address(es) is strongly recommended. We do not recommend using DHCP IP addresses. Please see the information about Static IP vs. DHCP above for more details.

How to Find Your IP Address

The IP address that's shown in network setting may not be the correct address to use in the IP Restriction add on. If the incorrect IP address is used, the IP Restriction add on will not work. To find your IP address google "find my IP address" and the first link that pops up, https://whatismyipaddress.com, will be able to tell you your IP address.

The IP listed beside IPv4 can be used to successfully block or allow access in the IP Restriction add on.

IP Restriction Initial Configuration - Security Groups Allowed

Login to ShareVision with a user account that has Site Administrator permissions.
Select the gear in the upper right-hand corner and then select Site Administration:
When prompted, enter your ShareVision Administrator username and password and select Sign In.
In Site Administration, in the Features and Utilities section, select IP Restriction Configuration.
The IP Restriction Configuration will open in a new tab.
Use this page to identify which Security Groups and IP Addresses will be exempt from the IP Restriction on your ShareVision site.
GRP Site Administrator is not available as any user listed as a Site Administrator will be able to log in from any IP address.
Identify which Security Groups will be exempt from the IP Restrictions on your ShareVision site. In the Security Groups Allowed section, select Add New Item.
In the Allowed Groups field, select each group that will be exempt from the IP Restriction on your ShareVision site. If there are multiple groups, each group must be entered in this field.
When you have added all of the groups, select Save.

IP Restriction Initial Configuration - IP Addresses Allowed

On the same window where you set up the IP Security Groups (see above), you will need to add the IP Addresses Allowed to connect to your ShareVision site. In the IP Addresses Allowed section, select Add New Item.
In the IP Address field, enter one of the IP Addresses that is allowed to connect to your ShareVision site.
Next, enter a Description (optional).
By default, the Active checkbox is checked. If you would to deactivate that IP Address so that it can be activated later, uncheck the box.
Select Save.
Repeat steps 1 to 5 above for each IP Address that is allowed to connect to your ShareVision site.