Assign user per IP/MAC?

Hi, Peter, and welcome to the UTM Community!

That depends. What are you wanting to accomplish?

Cheers - Bob

Thanks Bob!

I would like to assign a user to my family members. For instance my daughter has an iPad. I would like to be able to assign that to a user, so I can get a report and can setup quotas based on that user.

What would be the normal approach to assign a user to her iPad?

Cheers,

Peter

You can achieve that with:

- Network Host Definition for static DHCP mapping, defining static IP and providing device's MAC address.
- Separate Web Filter Profile for only that network object, no authentication and policy that includes Quota definition.

Thanks vilic,

I have that already, but I'm not to impressed by that. It seems one can do a lot more (e.g. reports) if one assigns users.

Cheers

Peter

You will see your predefined name for the device. If UTM have static network host definition object, it will replace that IP with Name attribute in reports.

Thanks vilic,

I know, but if you look at stuff like Quota status, it is empty because no users are used:

That is true...unless you implement STAS. That would require Active Directory services and devices joined to domain (not sure if that can be done with iPADs).

Too much work in my opinion (overkill...[;)])

If I would let my daughter authenticate with her iPad, would all other users also need to do so?

Cheers,

Peter

No, because authentication method is defined per Web Filtering Profile. Profiles are evaluating from top to the bottom, where first match is applied without further processing.

Since the kids are on their own vlan, it seems that this seems to work (only the kids need to authenticate now):

So, now my daughter needs to authenticate via the browser, but whatever I try. The username/password never gets accepted. Why is that? I've tried multiple users/passwords. I'm 100% sure I entered it correct.

I've created the user (as you can see above), but I've done nothing else with it. Maybe it needs to be in some kind of group or something?

Cheers

Peter