Restrict SSH Access to Specific IP for User

I would do

AllowUsers [email protected] [email protected]

OR

AllowUsers [email protected].*

should work, that is if you are internal and he has a dynamic ip.