# Subnet Authorization

This type of authorization allows you to create an authorization rule for a specific UTM user from a specific subnet

---

In order not to register each device as a separate UTM user and not to fix authorization factors for it, you can use Subnet Authorization.

This feature will allow a UTM user from the desired subnet to auto-authorize without being tied to a MAC and/or specific IP and will be useful if a large number of devices need to be auto-authorized.

<p class="callout info">Traffic across the entire subnet will be recorded per user.  
In a network for which a Subnet Authorization rule has been created, DHCP can work.</p>

For example, there is a WiFi subnet on the 192.168.10.0/24 subnet from which devices should be allowed to log in. Create an authorization rule:

1\. Go to the **Users –&gt; User &amp; Group** section and click Add user

2\. Fill in the fields Subnet name, Login, and click Save[![1. Subnet Authorization.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/hmOElVLDg8T6u5XY-1-subnet-authorization.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/hmOElVLDg8T6u5XY-1-subnet-authorization.png)

3\. Go to the section **Users –&gt; Authorization –&gt; Subnet authorization** and click **Add** in the upper left corner

4\. Fill in the fields and click **Save**:

- User - select the user created in step 2
- Subnet - enter IP and subnet mask
- Comment - (optional)  
    [![2. Subnet Authorization.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/5zgWtgyh9uPK6xnd-2-subnet-authorization.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/5zgWtgyh9uPK6xnd-2-subnet-authorization.png)

<p class="callout warning">**Be careful when creating Subnet authorization rules**  
There will be problems with authorization if:  
- There are overlapping networks for different users  
- There are rules for authorizing users by IP addresses from a subnet in the Subnet authorization rule;  
- Rules have been created in the **Fixed VPN IP addresses** subsection with binding to an IP address from the subnet of the Subnet authorization rule.</p>