Combining Access Control Methods

<Location /restricted>  Allow from 192.168.200.0/255.255.255.0  AuthType Basic  AuthUserFile /usr/local/apache2/conf/htusers  AuthName "Restricted Resource"  AuthAuthoritative on  Require valid-user  Satisfy any </Location>

You can combine different access control methods using the Satisfy directive. For example, the configuration shown here requires users to either come from an internal, authorized address OR provide a valid username and password.

If you would like to require both that user come from a certain internal address AND provide a valid username and password, you will need to use Satisfy all.