Help Required

RouterOS Beginner Basics
1

Hello,
I have got an office setup where all the employees are connected through a switch and that switch is connected to one of the interface of mikrotik. There are three catagories of the employees interns, consultants and management. What i want to do is that when an employee opens up his/her web browser, it gives them a login page. Consultants and Management staff will be given their ID and password which they require to enter into login page while the interns will share specific id and password. Now depending upon these login details i have to limit every users traffic. Like interns will only be allowed to surf the normal web pages while consultants could go to sites like youtube etc but will be restricted from few other pages while management staff will have no restrictions.

Any idea how to do it???

(I think i could apply the restrictions on certain public ips using dns servers but i will not be using public ips for each and every employee. What i was thinking to do was that assign each category of employee one specific public ip and apply restrictions on them. But how will i assign dhcp server and how will i identify traffic based on these user id and passwords??? . I do not want to work on static ips or on mac addresses because if a network card is changed then i will have to take action. Also it it difficult for the employees to put a static ip in their pc)

2

A router is an extremely poor place to handle this. You will forever and ever be classifying web pages manually, allowing or denying access.

By a solution where categorizations are managed by someone else, such as WebSense.

You CAN do this via the same method I posted in your other thread (which really is about the same topic) - force people on dynamic address lists, get the web proxy to listen on more than one port, redirect each address list to a different proxy port and make proxy accept/deny decisions based on that; but like I said, you’ll be managing that forever. In my opinion the only correct business decision here is to pay for a product designed to do this for you.

3

Thanks for your reply on both threads. Your given solution worked for me. Thanks again.