# Network

Restrict status dashboard access to specific IP addresses or CIDR ranges.

Source: https://statusdashboard.com/docs/status-dashboards/network

> This is a plan-gated feature. If it isn't available in your account, visit the [Billing](/docs/org-mgmt/billing) page or contact support to review your options.

IP allowlisting restricts who can load a status dashboard at the network edge. Use it for internal dashboards that should only be reachable from your office, VPN, or known cloud egress addresses.

***

## Adding IP addresses and CIDR ranges
By default, anyone with the URL can view your status dashboard. The IP allowlist feature lets you restrict access to a defined set of IP addresses or network ranges — useful for internal dashboards that should only be reachable from your office network, VPN, or a specific cloud egress IP.

1. Open the dashboard you want to restrict and go to the **Network** tab.
2. Click **Add entry** for each IP address or network range you want to allow.
3. Supported formats:
   * **IPv4 address** — e.g. `203.0.113.42`
   * **IPv4 CIDR** — e.g. `10.0.0.0/8` (allows the entire `10.x.x.x` range)
   * **IPv6 address** — e.g. `2001:db8::1`
4. Click **Save Allowlist** to store your list.

> IPv6 CIDR ranges (e.g. 
>   `2001:db8::/32`
>   ) are not supported. Add individual IPv6 addresses instead.

### Limits
| Limit                    | Value         |
| ------------------------ | ------------- |
| Maximum entries          | 100           |
| Maximum length per entry | 49 characters |

## Enabling the allowlist
Once your IP list is saved, enable enforcement by toggling **IP Allowlist** on. The toggle fires immediately — no save required.

From that point, any request to your dashboard from an IP address not in your list will receive a **403 Access restricted** page.

## Empty list warning
If you enable the allowlist while the entry list is empty, **all visitors will be blocked**, including yourself. The **Network** tab displays a warning banner in this case. Add at least one IP address before enabling, or disable the toggle if you need to restore access.

## Disabling the allowlist
Toggle **IP Allowlist** off at any time. Access is restored for all IPs immediately (within the enforcement cache window of up to 60 seconds).

Disabling the toggle does not delete your saved IP list — it remains in place and can be re-enabled at any time.

## Troubleshooting
**I enabled the allowlist and can no longer access my own dashboard.**

Your current IP address is not in the allowlist. To regain access:

1. Open the dashboard's **Network** tab in [Dashboards](/app/dashboards) (admin console access is not affected by the dashboard allowlist).
2. Add your current IP address to the list and save.
3. Or, disable the toggle to restore open access.

**A user behind a corporate VPN cannot access the dashboard.**

Add the VPN's egress IP address or CIDR range to the allowlist. Your network administrator can provide the correct value.

**I added my IP but I'm still blocked.**

Enforcement uses a short cache (up to 60 seconds). Wait a moment and try again. If the problem persists, confirm the IP address in the allowlist exactly matches your public IP — use a service such as `https://ifconfig.me` to check.
