
Explain what macvlan is, how it creates multiple virtual interfaces with unique mac addresses on one physical link, and when to use it for isp, dhcp, and http server scenarios.
Configure the isp router with a pppoe server and a dhcp server, including pool, profile, secret, and nat, to provide internet and set up macvlan on router one.
Learn to configure macvlan interfaces on MikroTik RouterOS, creating virtual interfaces for two PoE clients and a DHCP client, enabling load balancing while avoiding mac address conflicts.
Test macvlan connectivity on MikroTik RouterOS by enabling each macvlan and validating internet access from a test PC using dhcp or static ip, with nat masquerade for 128.23.0/24.
Explore macsec, an IEEE 802.1 standard for point-to-point ethernet encryption and integrity, including key exchange and MikroTik RouterOS limitations such as no hardware acceleration.
Conduct a hands-on lab to capture traffic on Ethernet two before and after enabling MACSEC, using Wireshark to compare what is visible and TLS encryption limits visibility of HTTPS.
Enable macsec on a point-to-point ethernet link between router one and switch one, migrate ip and dhcp to the macsec interface, and capture 802.1AE encrypted traffic with Wireshark.
Explains a lab scenario to implement macsec across router and two switches, uses vlan 10 for data and vlan 99 for management, and verifies connectivity to internet and management access.
Create a bridge on switch one with macsec one and macsec two, tag vlan 10 and 99 on those interfaces, enable vlan filtering for router-on-a-stick inter-vlan routing.
Configure switch two with macsec bridge, ethernet three untagged in vlan ten, vlan ten tagged on macsec; add vlan 99 10.99.99.3, default route 10.99.99.1, enable vlan filtering, and dhcp tests.
Verify the PC obtains an IP from VLAN10 and can access the internet. Confirm reach to all VLAN99 devices through inter-VLAN routing (router on a stick) and management VLAN.
Learn how to contact the instructor, access more than 72 video courses and books on my network training, network tv, Amazon, and reinforce MikroTik and Mycotic skills with hands-on labs.
Dive into the world of advanced network segmentation and security with our specialized course on MACVLAN and MACsec on MikroTik RouterOS. This course is designed for networking professionals and enthusiasts looking to deepen their knowledge and skills in creating secure, flexible, and efficient networks using MikroTik's powerful routing platform.
In this course, participants will explore the fundamentals of MACVLAN and MACsec, two critical technologies that enhance network segmentation and security. MACVLAN allows for the virtualization of network interfaces by assigning multiple MAC addresses to a single physical interface, enabling efficient traffic isolation without the need for additional hardware. This capability is ideal for network administrators managing multi-tenant environments, virtualized networks, or complex infrastructures with demanding traffic segmentation needs.
MACsec (Media Access Control Security) will also be covered in-depth, focusing on its role in securing communications at the data link layer. Participants will learn how to implement MACsec on MikroTik devices, ensuring encrypted traffic flows that safeguard sensitive data from interception or tampering. Through practical, hands-on labs, attendees will configure both MACVLAN and MACsec in real-world scenarios, gaining the skills necessary to deploy robust and secure network architectures.
By the end of the course, participants will have a solid understanding of how to leverage MACVLAN and MACsec for enhanced network performance and security, making them invaluable assets to any organization seeking state-of-the-art networking solutions.