Restricting access based on client IP address

Hi,   How can we add 'allow-listed IP's/subnets' to all hosts?   I thought this would have been an option within 'Host Preferences' but I cannot find anything in there. At the moment it looks...