You can restrict who can access paygate based on IP, you can either enter specific IP addresses or you can enter a CIDR.
When this setting is turned on, only those in the list with allow will be able to login, as the rules are run from top to bottom you can allow a range with a CIDR but disallow a specific IP
