IP based Restrictions within SASL

[Ram]

I have a cyrus imapd server that needs userwise restrictions
Users can login only from their pre-configured ips

This is already working with having a NGINX  server in between. Nginx 
has all the rules built in and authenticates the users only when the 
rules match.

Nginx is a overkill for this kind of application.
Can this be done within cyrus.  ( probably cyrus sasl )