Centralized Management of IP Allocation (IP Allocation Policy) - (EA - Ordered Rulebase)

For accounts with equipment that uses fixed IP addresses, for example routers with an Access Control List (ACL), some users are defined specific IPs for the router. This means that they are only allowed to access the network from that IP address.

Customers can use the IP Allocation Policy to allocate a Static IP for a user that matches the IP in the ACL. Then the Client is always allocated the same IP, and the router allows the user to access the network.

Remote users can only be assigned IP ranges that are within the Global IP Range entity for your account. For more information about how to add an IP range to the Global IP Range entity, see Using IP Ranges in Policies.

Define the IP ranges allocated to remote users with each allocation method. Each range must be a unique network range and can’t overlap with any other network range defined in your account.

You can allocate IPs to specific users or user groups either dynamically or statically. If a user is in a rule for a dynamically allocated IP and is allocated a static IP, the static IP takes priority. After you allocate IPs, the Client automatically disconnects and reconnects with the new IP if a user switches between an IP from:

If you are only updating the Default IP range for your account. This step is not required

Allocating IPs to Users or User Groups Dynamically

You can dynamically allocate IPs using an ordered rulebase that sequentially checks if a user or user group match a rule. Once a rule is matched, IPs are allocated from the Allocated Range configured in the rule. Rules that are listed in the policy after the matching rule are not applied. If no rule is matched, an IP is allocated from the default range. The lease time for the dynamically allocated IP addresses is 2 minutes, and afterwards the IP address is available for other users.

Different admins can edit the policy in parallel and save the changes in their own private revision before the rule is published. For more information, see Working with Policies.

To allocate IPs to users or user groups dynamically:

1. From the navigation menu, click Access > IP Allocation Policy.

2. Click New.

   The New Rule panel opens.

3. Enter a name for the rule and define the rules position.

4. Define the User/Groups, Platforms, Countries, and the IP Range.

5. Click Save.

6. Repeat steps 2-6 for each rule.

7. Click Publish.

8. Enable Dynamic IP Allocation.

   The slider is green when the rule is enabled, and gray when the rule is disabled.

Allocating Static IPs to Users

For users, you can define a static IP that is allocated to them when they use the Client to connect to the network. Each static IP can only be allocated to one device at a time. If a user connects to the network with multiple devices, the first device is allocated the static IP address. Other devices are allocated IPs from the Dynamic IP Range or the Default IP Range.

To allocate static IPs to users:

1. From the navigation menu, click Access > IP Allocation Policy.

2. Click the Static IP Allocation tab.

3. Select the User and enter the static IP address.

4. Repeat the previous step for additional users.

5. Set the Enable Static IPs toggle to Enabled.

   The toggle is green when enabled.

6. Click Save.