Restricting Access by IP Address

Access may be restricted according to the requester's IP address. This can be accomplished by only allowing requests that originate from either:

The set of allowed IP addresses can be defined through the ec_clientip parameter. A token containing this parameter will deny requests from all other IP addresses.

The ec_clientip parameter supports standard IPv4/IPv6 and CIDR notation.

Example

The following table provides sample values for the ec_clientip parameter.

Configuration Description Sample ec_clientip Value Allows Requests From

Allow requests from a specific IP address (IPv4)

11.22.33.44

11.22.33.44

Allow requests from any IP address associated with a specific subnet (IPv4)

11.22.33.0/22

11.22.32.1 to 11.22.35.254