Cloud Ip Filtering
import useBaseUrl from '@docusaurus/useBaseUrl';
IP filtering is a powerful security feature that allows system admins to control access to their workspace by defining approved IP ranges. Only users within these specified IP ranges can access the workspace, ensuring enhanced security for your workspace.
IP filtering requires a subscription to Mattermost Cloud Enterprise.
Configure IP filtering¶
-
Log in as system admin: As a system admin, access the System Console of your workspace by selecting the Product <img src={useBaseUrl('/img/ui/products_E82F.svg')} alt="Navigate between Channels, collaborative playbooks, and boards using the product menu icon." className="theme-icon" /> menu and selecting System Console.
-
Go to Site Configuration: Go to the Site Configuration section.
-
Access IP Filtering Settings: Under Site Configuration, select IP Filtering to access the IP Filtering settings.
About CIDR notation¶
CIDR (Classless Inter-Domain Routing) notation is used to specify a range of IP addresses. It consists of an IP address followed by a forward slash and a number indicating the network's prefix length. For example:
192.168.0.0/24represents the IP range from192.168.0.0to192.168.0.255.- The
/24signifies that the first 24 bits are the network address, leaving 8 bits for host addresses.
For a more in-depth explanation of CIDR notation, refer to this article.
Configure IP filters¶
Enable/disable IP filtering¶
System admins have the option to enable or disable IP filtering:
- Enable: To activate IP filtering, ensure at least one IP range is added to the whitelist.
- Disable: Temporarily disable IP filtering by removing all IP ranges from the whitelist, or by flipping the global IP Filtering toggle in the System Console.
Add an IP range¶
To add an IP range to the whitelist, follow these steps:
- Select the Add Filter button within the IP Filtering settings page in the System Console.
- Enter the IP range using CIDR notation. For example,
192.168.1.0/24. - Provide a descriptive name or label for the IP range to ease identification in the future.
- Save the changes.
The System Console will restrict you from saving changes if the IP address you are accessing your workspace on is not within the ranges you have specified at the time you save your changes.
Edit or remove an existing IP range¶
To edit or remove an existing IP range from the whitelist:
- Locate the IP range you want to modify within the IP Filtering settings.
- Hover over the rule you'd like to edit or delete, and select the respective edit or delete option beside the IP range.
- Make necessary changes or confirm the removal of the IP range.
- Save your changes by selecting Save.
Unable to access your workspace?¶
If you are unable to access your workspace due to previously set IP filters, and you need to regain access to your workspace, contact our support team.
Going through this process will disable all existing rules applied to your workspace. This means that any IP address will now be able to access it.
Conclusion¶
By configuring IP filters using CIDR notation, system admins can effectively manage access to the workspace, enhancing security by allowing access only from specified IP ranges.
For any further assistance or queries, contact our support team.