CP allowed-passthrough IP modification