Add IP addresses to Scheduling & Time Tracking
Your IP address list determines which networks your employees can punch from. Add an address first. Then turn on the check for each way your employees punch.
Add an IP address
1. Open Time Tracking Settings
Click the Scheduling & Time Tracking icon (the clock icon), then under Settings, click Time Tracking Settings.
2. Start a new address
Scroll down to Add IP addresses, then click + Add new IP address.
3. Choose the address type
Select the type of address you're adding. You can add a single IPv4 or IPv6 address, or a range of either.
4. Enter the address and save
Enter the address, or the first and last address in the range, then click Save.
If your IT team gives you an address ending in something like /24, add it as a Range of IPv4. A subnet calculator will show you the first and last address in the range.
Your addresses are listed under Add IP addresses, where you can edit or delete them later.
Turn on the IP check for each punch method
Adding an address doesn't restrict anything on its own. On the same page, under Punch access settings, select Use IP addresses to ensure employees punch at their workplace for the punch methods you want to restrict:
- Mobile Access Settings. Covers punches from the Rise mobile app.
- Web Access Settings. Covers punches from My Schedule in a browser.
- Terminal Access Settings. Tick Allow employees to punch in from a punch terminal for terminal punches to work. The IP check on terminals is always on.
For the rest of the settings on this page, see How to manage timesheet settings in Rise Scheduling & Time Tracking.
Your organization has one IP address list, and all three punch methods read from it. An address you add for one employee working from home also becomes a valid punching location for everyone else.
What happens when a punch is blocked
Punches from an address that isn't on your list are refused, and the employee sees this message:
"Unable to clock in. Please try again and contact support if the issue persists."
A blocked punch isn't saved, so nothing reaches Time Approval and nobody is notified. The employee needs to punch again from an allowed network.
A message about an invalid location is a different setting. That one comes from geolocation, not from your IP address list.
If punches stop working
Nothing changed on your end. Internet providers can change a location's public IP address without warning, which can remove that network from your list. Check the address again and update it. If your location's public IP address changes often, ask your internet provider or IT team for a static IP address, or for the range of addresses they assign, and add it as a Range of IPv4.
A terminal won't connect. A terminal won't finish setup until the IP address it's connected to is on your list. Read the address from the tablet itself rather than from an office computer. If the two are on different networks, they'll show different addresses. See How to set up terminal access and Best practices for setting up terminals.
One employee is blocked, and everyone else is fine. They're on a different network, such as mobile data, a VPN, or home wifi that isn't on your list.
If employees are still blocked after you've checked all of this, submit a ticket, and we'll help you set up the best configuration for your location.