1.5.4.7. Tabbed page "Access restrictions"

Floating licenses are granted to every client that asks for them equally. However, it can be that some clients should not be allowed to pull some licenses. To enable this, you can assign access control lists for the licenses here.

Access control

The following example shows how to set up an access restriction for an IP range and/or users [User] and/or computers [Computer] and/or AD groups for a specific floating product [Floating product]:

Initial situation: Allow: *: There are no restrictions

To set access restrictions, proceed as follows:

Expand a base product or add-on and select a line beginning with "Allow " or "Deny ".
-> The Access dialog area is activated.
-> The buttons are activated.
Click on Add.
-> A new line is added below the selected product. You can create as many lines as you like with Prohibit [Deny] or Allow.
-> The Object dialog area is activated.
In the Access dialog area, select
- Deny
  or
- Allow (default)
You can adjust this setting anytime later (if needed).

Select an option in the Object dialog area: Select either Ip-Range [IP Range] or make a selection between User | Computer | AD Group ).

IP Range
Determine a range of IP addresses.

The syntax in the input field is based on Classless Inter-Domain-Routing (CIDR).
CIDR enables network masks of any length.
Behind the IP address, enter a prefix block separated by a slash '/' (see following figure). The block prefix shows the number of bits at the beginning of an IP address which identify the network. Then all other bits indicate the host.

Classless Inter-Domain-Routing (CIDR)
- Example 1
```
69.208.0.0/24
```
  Computers in the IP range from 69.208.0.0 to 69.208.0.255 are addressed, thus 256 at the maximum.
- Example 2
```
69.208.0.0/16
```
  Computers in the IP range from 69.208.0.0 to 69.208.255.255 are addressed, thus 65.536 at the maximum.
User: Activate the checkbox for one or more users.
Computer: Activate the checkbox for one or more computers.

AD group [AD Group]: Activate the checkbox for one or more AD groups.

	Caution
	If AD groups are used, it must be ensured that the license server is allowed to make requests to all domain controllers in the trust list or the forest. If this is not ensured, the license allocation is blocked and not a single license is delivered!

Close with Save [Save...]... button.

Prev	Up	Next
1.5.4.6. Tabbed page "Borrowing"	Home	1.5.4.8. Tabbed page "Events"