Group based access control rules are similar to IP access control rules, except that they are applied to members of a user group. This enables you to grant system permissions to groups, based on their IP addresses.
The order of role-based access control rules is important, since the rules are executed in numerical order.
To create IPv4 or IPv6 group based access control rules:
Choose Security > Group Based Access Control.
Select the Enable Group Based Access Control for IPv4 or scroll down to select the checkbox for IPv6.
Determine the default policy.
Accept: Accepts traffic when no matching rules are present.
Deny: Rejects any user's login attempt when no matching rules are present.
Create rules and put them in priority order.
Enter Start IP and End IP, Group the rule applies to, and Policy.
Click Append to add another rule. To add a rule above another, select a rule and click Insert Above.
To rearrange rules in order, click the arrow buttons on each rule.
To delete a rule, click the trashcan icon.
Click Save. Note that IPv4 and IPv6 rules are saved separately.
