Changing IPAM Policy
====================

You can also manually allow or deny from Node List and Matrix View.

the following IPAM options are available when selecting nodes from the node
view or IP's from the matrix view

Changing the New Node Policy on Network Sensors
-------------------------------------------

(*The IP management policy can be changed in the settings of each sensor*)

1. Go to the **System** tab at the top menu.
2. From the left panel under System, navigate to **System > Sensor**.
3. Click the **IP Address** of the desired sensor.
4. Click the **Node tasks** tab, then select **Sensor Settings**.
5. In the **IPAM** section, find the **New Node Policy** menu and change the application mode.
6. Click the **Update** button to save the changes.


To Allow or Deny IPAM from Node List
------------------------------------

#. Go to **Management > Node** in the top panel
#. Click **Checkbox** of the **desired node** in the Node window
#. Click **Tasks > IP/MAC Policy**
#. Select the desired **options:**

- **Deny IP**
- **Allow IP**: Allow an IP Address, but do not
  reserve the IP address.
- **Allow IP for Specific MACs**: Allow an IP Address, and reserve
  it to a specific MAC address. (Additional MACs may be added by selecting
  the node, and editing under the IP Policy section.)
- **Enable Hostname Policy for IP** (Require host name to meet the Hostname
  Policy defined in the node policy.
  See: :doc:`/monitoring/network-nodes/managing-nodes` )
- **Remove Hostname Policy for IP**
- **Time Restriction for IP**: Set allowed time period for IP.
- **Edit IPAM New Node Policy for Reserved IP**: (Choose: Allow MAC, Enable
  Conflict Prevention, Enable Change Prevention, or Enable Conflict
  Prevention/Change Prevention)
- **Edit IP Purpose** (Choose: Dynamic, Static, or Temporary IP Address)
- **Deny MAC**
- **Allow MAC**: Allow an IP Address, but do not
  mandate an IP address.
- **Allow MAC - Current IP for Current Sensor**: Allow a MAC Address, and
  mandate a specific IP address on a specific sensor managed network.
- **Allow MAC - Current IP for All Sensors**: allows the MAC to use only the
  specified IP of the node.(All IP bands can only use the specified IP within the entire NAC management scope.)
- **Time Restriction for MAC**: Set allowed time period for MAC.
- **Deny IP/MAC**: Deny an IP and MAC Address
- **Allow IP and MAC**: Allow an IP and MAC
- **Enable Conflict/Change Prevention**: Enable IP Change and conflict
  Prevention for a node’s IP/MAC

To Allow or Deny IPAM from Matrix View
--------------------------------------

#. Go to **Management > IP Address** in the top panel
#. Click on the desired **Sensor’s Name**
#. Find **IP Address Square** and click to **highlight square**
#. Click **Tasks**
#. Select the desired **options:**

- **Add Node**
- **Remove Node**
- **Deny IP**
- **Allow IP**: Allow an IP Address, but do not
  reserve the IP address.
- **Allow IP for Specific MACs**: Allow an IP Address, and reserve
  it to a specific MAC address.
- **Enable Conflict/Change Prevention**: Enable IP Change and conflict
  Prevention for a node’s IP/MAC
- **Edit IPAM New Node Policy for New Node Settings** (Choose: Allow MAC,
  Enable Conflict Prevention, Enable Change Prevention, or Enable Conflict
  Prevention/Change Prevention)
- **IP Time Allowance**
- **Assign User IP Ownership**
- **Assign Department IP Ownership**:Set the IP ownership department. (IP 
  ownership department setting can be used as a condition item for node groups.)
- **Define IP Purpose** (Choose: Dynamic, Static, or Temporary IP Address)


.. note:: Denied IP/MAC Addresses are highlighted in light red with the text of
   the IP Address having a strikethrough