What does "restrict clock ins/outs by IP" mean?

Plans: Time, Advanced, HR Starter, HR Professional and HR Enterprise. 

The system will check employees' IPs when they clock in/out. If it is different from the one established, they won't be able to clock out. You can set this up in Configuration >> Automations >> Clock ins/outs.