Fortgeschritten: Multiprofile und Multipolitik

1 1 multiprofile and multipolitics multiprofile enables several profiles to be enabled and associated with a single network, so that different filtering rules can be used on the same public ip the filter provides 5 pairs of dns addresses, each pair can be associated with a different profile primary secondary 185 236 104 104 185 236 105 105 185 236 104 114 185 236 105 115 185 236 104 124 185 236 105 125 185 236 104 134 185 236 105 135 185 236 104 144 185 236 105 145 to better understand how it works, let us proceed with an example; in this case we want to define the following 2 profiles for a single client with the same public ip default ( primary dns 185 236 104 104; secondary 185 236 105 105 ) profile used by employees (with social network category locked) executive ( primary dns 185 236 104 114; secondary 185 236 105 115 ) profile used by management (with social network category unlocked) first you need to access the management panel by entering your credentials; using the \[profile] tab at the top of the dashboard, we can configure the default profile if you want to change the name you can do so by clicking on the pencil icon related to it and choosing a new name finally clicking on \[ edit ] to apply the changes after that we will go on to create a second profile (executive) similar to the previous one, and we will go and choose dns 185 236 104 114 185 236 105 115 to do this, the following steps must be followed click on the \[profile] tab click on the \[create new profile] item next to the + icon and fill in the following fields name choose a name for the profile in our case it will be management time zone choose the time zone that will be used for flashstart cloud functions mode choose from normal blocks only the chosen categories and blacklisted domains restricted blocks everything except whitelisted domains dns choose a diffrent dns pair from the drop down menu in this example it will be 185 236 104 114 185 236 105 115 networks check the email/username or public ip address that you want to associate with dns 185 236 104 114 185 236 105 115 note if no network has been added yet, this field will not be present you can associate the address later, after you have created at least one network finally click \[ insert ] to create the new profile if everything has been done correctly you will get a result similar to the following image at this point you can configure the various filtering rules , in our case we will block the social network category to the default profile and unblock it to the executives profile this way, requests to dns 185 236 104 114 185 236 105 115 will respond to a different configuration than the default dns 2 2 methods of use at this point to use the profiles you have just created you will need to configure your network to do this there are two possible options manually change device dns based on which profile you want to use on that pc create redirection rules based on the originating ip this is only possible if there are routers or firewalls that allow it (e g , mikrotik) related articles mikrotik how do i configure multiprofile? other ways to ask how to manage multiprofiles and multipolicies managing multiprofiles and multipolicies how to