Self-Service Portal

When your source IP changes, submit Team Name and Code to whitelist the current network.

This portal is for customer users who need to re-authorize their current public IPv4 before connecting to the dedicated CMI POP for WARP. The backend will identify the current public IP, map your Team Name to the correct customer profile, and push the authorization into the matching A10 partition and ACL.

Current Source IP 216.73.216.109

Portal Auth Method Account ID + Team Name + Code

Backend Action A10 ACL update + TTL session

Customer Self-Service

Authorize the current network

Public Portal

Input 1 Account ID

Input 2 Team Name

Input 3 Shared Code

Result Dynamic A10 ACL permit

What Happens Next

The backend will perform these steps

Validate the submitted Account ID, Team Name, and customer shared Code.
Read `CF-Connecting-IP` and identify the current public IPv4.
Locate the correct customer VIP, A10 partition, ACL, and bound A10 device profile.
Call the selected A10 device over aXAPI and write a permit rule for the current public IPv4.
Create a TTL session so the ACL can be revoked automatically after expiry.

Deployment Note

If end users should not log in with Cloudflare Access, expose this Portal on a public hostname or configure Bypass for `/` and `/api/portal/authorize`. Keep the Service Token API on a separate protected hostname or path if you still need machine-based authorization.