You can configure allowed IP ranges for UltraDNS portal access at either the user level or the account level. Account-level settings can only be modified by the Primary User.
User-Level Allowed IP Ranges
- Log in to UltraDNS using the user account you wish to configure.
- Click My Profile under the Welcome notice.
- Click Security Preferences in the left sub-tabs.
- Scroll down to Allowed IP Ranges.
- Click ADD+.
- Enter the IP ranges, including beginning and ending IP addresses.
- Click Submit once all data has been entered.
Account-Level Allowed IP Ranges
Only the Primary User can configure account-level allowed IP ranges.
- Log in to UltraDNS using the Primary User account.
- Click Accounts.
- Click <account name>.
- On the Account Info tab, under Account Level Allowed IP Ranges, click Add+.
- Enter the Starting IP and Ending IP.
Select UltraDNS and/or API depending on which access you want restricted.
Additional Information
- Only the Primary User has access to account-level ACL settings.
- The Audit section of the UI lists the source IP address for failed logins and indicates that the failure is due to ACL settings.
- If a user fails login due to an ACL restriction, the error message displayed is:
Invalid username & password combination - If there is an account-level allowed IP range only, the user must connect from that IP range.
- If there is both an account-level allowed IP range and a user-level allowed IP range, the user IP must be allowed by both.
- User-level settings are additional constraints. They are not exceptions to account-level restrictions.
- A user must pass every applicable ACL check to access the portal.
Verification
After configuring allowed IP ranges:
- Attempt login from an allowed IP address to confirm access.
- Attempt login from a non-allowed IP address to confirm restriction behavior.
- Review the Audit section for login attempts and ACL-related failures.