Combination of IP address and password restriction

I would like to allow employees access from the company network via IP restrictions. Only employees who access the KB on the go should receive the password prompt.