---
schema_version: "1"
id: c1cd6938b6fba35803ea07293ba235d093f533aa5a7dc15a95dfd76190222645
title: "Optional: Configure Client IP Matching"
collection: tableau
version: current
locale: en-gb
portal_url: https://docs.salesforce.com/tableau/current/en-gb/server-linux/trusted_auth_optional.md
canonical_url: https://help.tableau.com/current/server-linux/en-gb/trusted_auth_optional.htm
source_site: help.tableau.com
content_type: documentation
content_hash: 12806a5cf50174d8aa89fadf2de78b8d673211b00a118afe4d8088ce84fcdd39
description: Configure client IP matching for trusted authentication.
---
[Skip to main content](#main-content)

# Optional: Configure Client IP Matching

By default, Tableau Server does not consider the client web browser IP address when it creates or redeems tickets. To change this, you need to do two things: specify an IP address using the `client_ip` parameter in the POST request that obtains the ticket, and follow the steps below to configure Tableau Server to enforce client IP address matching.

1. Open TSM CLI and type the following command:
    
    tsm configuration set -k wgserver.extended\_trusted\_ip\_checking -v true
2. Then type the following command:
    
    tsm pending-changes apply 
    
    If the pending changes require a server restart, the `pending-changes apply` command will display a prompt to let you know a restart will occur. This prompt displays even if the server is stopped, but in that case, there is no restart. You can suppress the prompt using the `--ignore-prompt` option, but this does not change the restart behaviour. If the changes do not require a restart, the changes are applied without a prompt. For more information, see [tsm pending-changes apply](https://help.tableau.com/current/server-linux/en-gb/cli_pending-changes.htm#pending-changes-apply).