Restricted IP Addresses

[James]

Hi all,

I understand that IP addresses beginning with 198.~ (among others) are restricted by the BCDA API. This seems reasonable for addresses in the 198.51.100.0 - 198.51.100.255 range and for addresses in the 198.18.0.0 - 198.19.255.255 range, but maybe over general for 198.~ addresses outside of those ranges. 

How can groups using IP addresses beginning with 198 but outside of those two ranges (say, for an external load balancer) still request and receive data successfully?

Thanks so much all!

James Killilea

[Jack Shoemaker]

Dear James,

It's not so much that BCDA restricts those IP addresses, rather, BCDA doesn't see those addresses. What you are listing are the internal-to-your-network IP addresses. What you need to whitelist with BCDA is your public IP address.

Best regards - Jack

--

Jack N Shoemaker / (336) 202-2165

---

From: bc-...@googlegroups.com <bc-...@googlegroups.com> on behalf of James <jamesbk...@gmail.com>
Sent: Thursday, April 2, 2026 10:04
To: Beneficiary Claims Data API (BCDA) Community <bc-...@googlegroups.com>
Subject: [BCDA] Restricted IP Addresses

--
You received this message because you are subscribed to the Google Groups "Beneficiary Claims Data API (BCDA) Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bc-api+un...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bc-api/6ed47937-2d55-45f2-aa6d-dd299d79f20an%40googlegroups.com.

The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please reply to the sender (only) and then delete this message from your inbox as well as any copies. Thank you.

The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please reply to the sender (only) and then delete this message from your inbox as well as any copies. Thank you.

Secured by Paubox - HITRUST certified

[Beneficiary Claims Data API (BCDA) Community]

Hi James and Jack,

James, this sounds like it might be an issue with either the 4i or ACOMS portal you're using to create credentials and register your IP address(es). Please reach out to the support desk for the portal you are using to report this concern. We will follow-up with you via direct email to collect some more information and determine if a short-term workaround is possible.

Jack, thanks as always for contributing! You're correct that only your organization's external, public IP Addresses should be added to the allow list via 4i or ACOMS. In this instance, there seems to be an overly restrictive limit on all IPv4 Addresses starting with "198.", rather than just blocking the two subranges James mentioned.

Thanks,
The BCDA Team