🔌 Router Guides
...
Mikrotik OS configuration
How to configure multiprofile ...

The multiprofile and multipolitics

1min

Multiprofile enables different profiles and associates them with a single network, so different filtering rules can be used on the same public IP. The filter provides 5 pairs of DNS addresses, each pair can be associated with a different profile: Primary Secondary 185.236.104.104 - 185.236.105.105 185.236.104.114 - 185.236.105.115 185.236.104.124 - 185.236.105.125 185.236.104.134 - 185.236.105.135 185.236.104.144 - 185.236.105.145 To better understand how it works, let us proceed with an example; In this case we want to define the following 2 profiles for a single Client with the same public IP: »Default (primary DNS: 185.236.104.104; secondary: 185.236.105.105): profile used by employees (with social network category locked) »Executive (Primary DNS: 185.236.104.114; secondary: 185.236.105.115): profile used by management (with social network category unlocked)

First you need to access the management panel by entering your credentials; using the [Profile] tab at the top of the dashboard, we can configure the default profile. If you want to change the name you can do so by clicking on the pencil icon related to it and choosing a new name, finally clicking on [Edit] to apply the changes.

DNS Configuration and insection
DNS Configuration




After that we are going to create a second profile (Executive) similar to the previous one, and we are going to choose DNS 185.236.104.114 - 185.236.105.115. To do this we need to follow the following steps: » Click on the [Profile] tab. » Click on the [Create New Profile] item next to the + icon and fill in the following fields: » Name : Choose a name for the profile. In our case it will be Management . » Time Zone : Choose the time zone that will be used for Flashstart Cloud functions. » Mode : Choose from: » Normal: Blocks only the chosen categories and blacklisted domains. » Restricted : Blocks everything except whitelisted domains. » DNS : Choose a diffrent DNS pair from the drop-down menu. In this example it will be 185.236.104.114 - 185.236.105.115. » Networks : Check the email/username or public IP address that you want to associate with DNS 185.236.104.114 - 185.236.105.115. PLEASE NOTE: If no network has been added yet, this field will not be present. You can associate the address later, after you have created at least one network. » Finally click [Insert] to create the new profile.

DNS settings and switch profile
DNS and Profile Settings




If everything has been done correctly you will get a result similar to the following image:

Confirm new network node creation
Creating conferm


At this point you can configure the various filtering rules, in our case we will block the social network category to the Default profile and unblock it to the Executives profile. In this way, requests to DNS 185.236.104.114 - 185.236.105.115 will respond to a different configuration than the Default DNS. Methods of use At this point to use the profiles you have just created you will need to configure your network. To do this there are two possible options: » manually change the device DNS based on which profile you want to use on that pc. » Create redirection rules based on the originating IP. This is only possible if there are routers or firewalls that allow it (e.g., Mikrotik). Related articles: Mikrotik: How do I configure multiprofile?



Other ways to ask: » How to enable multiprofiles and multipolitics. » Enabling multiprofiles and multipolitics. How to.