[IUG] WAM: entry in HTTP Access Administration table

["Kreymer, Oleg" <Oleg dot Kreymer at metmuseum dot org>]

We're in the process of setting up Web Access Management.
I am trying to add an entry in HTTP ACCESS ADMINISTRATION table (Limit Network Access) that would let internal users bypass patron verification.  Right now there is only one entry in that table: 1 > all-Yes-web-0.  
Our Library Server is on DMZ, and we can get to WebOPAC by using either its IP address or URL (library.metmuseum.org).  Here is my problem:
When I add an entry for our "local" IP range (2 > 192.168.10.-Yes-internal-9 or 0), we lose the ability to access our WebOPAC via its IP address...
I also tried adding an entry for our "external" IP range (1 > 12.151.120.-Yes-local-9 or 0) - and, sure enough, we could no longer get through to library.metmuseum.org.
In other words, these settings have the exact opposite effect, than I would expect.

Does anyone have any suggestions?  Sample entries for sites with similar setup, perhaps?

Thank you!

Oleg Kreymer
Systems Librarian
T.J. Watson Library
The Metropolitan Museum of Art
1000 Fifth Avenue
New York, NY 10028
(212) 570-3841