The ability to assign on-prem IP ranges to permission sets

We have our system configured to allow access to resources without authentication if the user is on a pair of recognized, on-prem, IP ranges. This works for most resources; however we have a few resources that are restricted to one IP range only. Currently if a user tries to access a resource from the non-approved IP range, they are given a non-authorized message because their IP address is one of the on-prem IPs but not the right one. They would be allowed to access the resource if they login with the proper credentials and were assigned the proper permission set. If our permission sets could be assigned an IP range when appropriate, then we could require authentication when user tries to access from the non-authorized IP range.