Salesforce Network Access and Profile-Based IP Restrictions

Network Access (available for all Salesforce editions)

• New Lightning UI: Click on the gear icon | Setup | Security | Network Access.
• Setting trusted IP ranges under Setup | Security | Network Access allows users authenticating from these IP addresses to bypass the need for identity verification for user interface logins or the security token for API connections. Users will not be challenged for a verification code to authenticate from the IP address where they are logging in. Customer apps and integrations will not require a security token. Users who log in from IP ranges not listed will still be able to authenticate after providing the verification code or security token. 
• These can only be added or removed by a system administrator. Removing them from Network Access will not revoke access from these IP addresses.

Profile-Based IP Restrictions (Available in Salesforce Enterprise, Unlimited, Developer)

• You can set IP Restriction under each profile. This will restrict access, and users will only be able to log in from the IP addresses listed.
• ​Users will not be able to access Salesforce from any IP that is not listed in the range. They will receive an error when logging in and it will also be posted in the Login History.
• ​This setting is recommended for organizations with Users who log in using a VPN or their public corporate network IP addresses.
• ​Please make sure that all the IP ranges for your apps and integrations are added as well.