Merge pull request #223888 from madsd/ipnote

Add note on private ip rules

Author: prmerger-automator[bot]

articles/app-service/app-service-ip-restrictions.md

@@ -88,6 +88,9 @@ Follow the procedure as outlined in the preceding section, but with the followin
 
 Specify the **IP Address Block** in Classless Inter-Domain Routing (CIDR) notation for both the IPv4 and IPv6 addresses. To specify an address, you can use something like *1.2.3.4/32*, where the first four octets represent your IP address and */32* is the mask. The IPv4 CIDR notation for all addresses is 0.0.0.0/0. To learn more about CIDR notation, see [Classless Inter-Domain Routing](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing). 
 
+> [!NOTE]
+> IP-based access restriction rules only handle virtual network address ranges when your app is in an App Service Environment. If your app is in the multi-tenant service, you need to use **service endpoints** to restrict traffic to select subnets in your virtual network.
+
 #### Set a service endpoint-based rule
 
 * For step 4, in the **Type** drop-down list, select **Virtual Network**.