---
title: Permit Zone for TACACS/RADIUS
slug: kronpam-reference-guide-3-8-0/permit-zone-for-tacacsradius
docTags: 
createdAt: 2025-01-30T11:50:04.273Z
---

Permit Zone feature for TACACS/RADIUS devices restricts user access to specific IP addresses or subnets. Only users accessing the IP addresses or subnets defined from Permit Zone can connect to the TACACS/RADIUS devices when this feature is activated. Access attempts from a different Client IP will be denied. Additionally, you need to disable the Direct Access option in the user group to use this feature. This ensures users can authenticate only from the specified IP/Subnet range.

To configure Permit Zone:

1. Navigate to **Policy > Permit Zone**.
2. Click the +**Add** button. 
3. Enter the** IP Address** or** Subnet **and select the username.
4. **You need to disable the Direct Access option in the user group to use this feature**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/KXrTvtLVjJwabPenFT0cO_image.png "Add Permit Zone")