How we can restrict access for a particular product requests with a fixed ip address

[AKumar15]

I want to setup a client sandbox, to test configured APIs. So requirement is like check the api key or product if it belongs to sandbox product, then check for request, it is coming from which server. If ip address or domain is not equal to my sandbox server, unauthorize the request with 401 and invalid domain request error.