test ip-based access (access allowed case)