Bypass Forms Authentication for IP address range

[Chumma Dede]

Hi,

I have a page called Page1.aspx on an ASP.Net 1.1 website which has
Forms Authentication enabled.

Role1 has been setup in the Web.config to have access to Page1.aspx as
follows:
<location path = "Page1.aspx">
<system.web>
<authorization>
<allow roles = "Role1"/>
<deny users = "*"/>
</authorization>
</system.web>
</location>
There is a user, say User1, who is in Role1, who logins into the
website and as specified in the role, can access Page1.aspx.

There is another user, say User2, who is also in Role1. Since User2
has an IP from an approved IP address range, she should be allowed to
navigate to Page1.aspx without being redirected to the login page. In
other words...bypassing Forms Authentication.

Is it possible to do this? Please note that User2 should still be
limited to access as specified in Role1.

Thanks,
Chumma Dede

[DWS]

Chumma,

Validation by IP your just asking for trouble with IPv6 around the corner it
might suddenly stop working in the future. Windows authentication would work
on the local intranet for user1 and user2 in role1.

Good Luck
DWS
"Chumma Dede" wrote:

Hi,

I have a page called Page1.aspx on an ASP.Net 1.1 website which has
Forms Authentication enabled.

Role1 has been setup in the Web.config to have access to Page1.aspx as
follows:
<location path = "Page1.aspx">
<system.web>
<authorization>
<allow roles = "Role1"/>
<deny users = "*"/>
</authorization>
</system.web>
</location>
There is a user, say User1, who is in Role1, who logins into the
website and as specified in the role, can access Page1.aspx.

There is another user, say User2, who is also in Role1. Since User2
has an IP from an approved IP address range, she should be allowed to
navigate to Page1.aspx without being redirected to the login page. In
other words...bypassing Forms Authentication.

Is it possible to do this? Please note that User2 should still be
limited to access as specified in Role1.

Thanks,
Chumma Dede

[Chumma Dede]

This is all on the internet. So windows authentication is not an
option.

How will IPv6 affect this?

Thanks.