Network management is important for certificate control. SyncOffice work is allowed in company network, but may not be allowed in home network or at other public place.
An end-user PC's IP is identified both as a LAN IP within a local network, or a WAN IP from point of view of outside NAT. There are 4 parameters for LAN IP control and 4 parameters for WAN IP control.
The certbuf_lanip defines an LAN IP that is allowed for SyncOffice work. There are max 4 LAN IPs can be specified.
If you allow any LAN IP without limitation, they can be set as all to "0.0.0.0".
If you assign a LAN IP to a certificate, this certificate can only be authorized when it is working using this LAN IP. This needs the SyncOffice host PC uses a static/fixed LAN IP assignment.
The certbuf_wanip defines an WAN IP that is allowed for SyncOffice work. There are max 4 WAN IPs can be specified.
If you allow any WAN IP without limitation, they can be set as all to "0.0.0.0".
Assigning company's WAN IP to a certificate will force the certificate can only be authorized in company office place.
Using WAN IP control is a common practice, and is more popular than using LAN IP control.