Authenticate on the device that needs to connect, and the Gateway identifies the current public IPv4 address. There is no need to look up and enter the address yourself; sources within quota are approved automatically, and those over quota are handed to the administrator.
Learn about source identificationWhen you move a work computer from the office to home, its public source IP may change as well. Open the admission link on that computer and complete account authentication. The system then identifies the source through the IPv4 ingress of each Gateway under the team and submits a request for each ingress.
The source is the public IPv4 used by the device when it actually accesses an ingress, and each Gateway records it separately. After switching to a new network, authenticate a new request based on the new source.
The system checks the team's current number of active IPs and the number of IPs added within five minutes. If both are within quota, approval is automatic; if either limit is exceeded, the request goes to manual approval.
Requests are not lost when a limit is exceeded. Administrators can review the source, device and corresponding Gateway, decide whether to approve, and also block sources that are no longer in use.
The approval record is handed to the corresponding Gateway to apply, and the result is recorded once the ingress reports back. Saving an approval result and the ingress having allowed access are two separate states.
A QR code or link is used to initiate device authentication and expires after ten minutes. Generate a new one after it expires.
A source approved automatically or manually has its own four-hour validity period. After it expires, authenticate a new request.
View the Gateway corresponding to a source, the accessing user, the device, the request and approval times, and the expired or blocked status.
Source admission primarily manages the AnyTLS and SOCKS5 proxy entry points of a Gateway. WireGuard and IPsec endpoints have separate configuration identities; to disable a tunnel device, revoke the corresponding endpoint configuration.
Learn about revoking terminal configurations →No, it will not end early because the link expired. The link is used to initiate authentication and is valid for ten minutes; an approved source permit is handled under its own four-hour validity period.
Yes. The application will be retained and sent for manual approval, and an administrator will decide whether to allow it. A successfully submitted application or saved approval does not mean the Gateway has already applied it.
Source admission records the public IPv4 address of the authenticated device when it actually accesses each Gateway. You should apply from the device that truly needs access; different devices or networks may have different egress points and cannot confirm the source on its behalf.
