To allow a PunchOut request to be considered valid without requiring IP validation then simply leave the IP and Hostname Whitelist section blank.