Citrix SD-WAN Orchestrator

IP access list

The IP access list page enables administrators to configure a list of enterprise-specific user source IP addresses, to allow IP address-based access to Citrix SD-WAN Orchestrator service. Configuring IP addresses on the Network Administration: IP Access List page enhances IP security as administrators can control the tenant access for users based on their IP address. This configuration is supported only for users with role-based access to a tenant.


The IP addresses must be static public IPs to facilitate consistent access. Dynamic addresses cannot be configured on the IP Access List page.

To configure an IP address, at the customer level, navigate to Administration > IP Access List.

On the Network Administration: IP Access List page, click Add. You can configure up to 16 IP addresses.

To remove an IP address, navigate to the Actions column and click the delete icon.

The User IP Addresses section displays the IP addresses of users accessing the Citrix SD-WAN Orchestrator service tenant.

If an administrator configures an IP address of a user who is not a part of a tenant, then the user gets locked out of the tenant where the IP address is configured.

When an administrator attempts to remove their IP address from the Citrix SD-WAN Orchestrator service tenant, then they get locked out of the tenant.

IP access list

IP access list

In this article