httpd.conf
<Directory /aaa/bbb>
......
SSLRequireSSL
<RequireAll>
AuthType Basic
AuthName "Login Auth"
AuthUserFile /etc/httpd/conf/.htpasswd
Require valid-user
<RequireAny>
Require all denied
Require ip XXX.XXX.XXX.XXX
Require ip XXX.XXX.XXX.0/24
</RequireAny>
</RequireAll>
</Directory>