Complete Mikrotik course from basic to advanced! v2026!

Install VirtualBox on Windows, download from the official site, run the installer, create a new virtual machine, and install the extension pack to enhance USB and camera support.

Learn to install Mikrotik RouterOS on VirtualBox by downloading the ISO image, selecting version 7 or stable 6, configuring two network cards, and setting up license via Winbox.

Register and activate Mikrotik licenses by creating an account on the official Mikrotik site, choose a license level, and use a free demo to practice setup and upgrades.

Learn the first steps on a RouterBoard in this Mikrotik course, including connecting via Mac or IP, understanding pre-configurations, firewall basics, and using Winbox or terminal for initial setup.

Change the default admin password to secure your Mikrotik router. Create new users, assign groups like full, read, and write, and set policies for web, ssh, api, ftp, and winbox.

Configure IPv4 addresses and basic routing on Mikrotik, using DHCP to auto-set IP, gateway, DNS, and a NAT masquerade for LAN access.

Strengthen Mikrotik security by changing the admin password, restricting admin access to specific IPs, disabling unused interfaces, and hardening IP services with SSH keys and strict filtering.

Check internet connectivity, then update RouterOS by reviewing the MikroTik change logs and downloading the latest stable version via Winbox or system packets.

Learn to use ssh from Windows through PowerShell 7+, enabling OpenSSH and remote shell, and connect to Mikrotik and Linux hosts with familiar commands.

WebFig allows browser access to Mikrotik with SSL on port 403, replacing port 80. Create a self-signed certificate, enable https, and access via IPv4 or IPv6, noting browser warnings.

Configure a dhcp server on Mikrotik for your LAN using automatic, manual, or terminal setup, defining IP ranges, gateway, and DNS, and test with dynamic or static leases.

Configure NTP on Mikrotik to keep accurate network time across IPv4 and IPv6. Set unicast client and server roles with redundancy, daylight saving updates, and version 7 improvements.

Configure an IPv6 network on Mikrotik using a tunnel broker, enable nd protocol auto-configuration, and verify connectivity with ping and DNS tests.

Configure Mikrotik with IPv6 over PPPoE by enabling IPv6 DHCP client, setting the operator prefix and pool, and enabling ND advertisements on the LAN; test connectivity.

Discover Mikrotik IP Cloud dynamic DNS, a free native service for RouterBOARD that updates IPv4 and IPv6 records as your public IP changes, with caveats for virtualized platforms.

Learn how MikroTik DNS cache speeds local network access by storing website DNS entries for IPv4 and IPv6, reducing external DNS requests while balancing memory and CPU usage.

Learn to configure DNS over HTTPS (DoH) on Mikrotik with a certificate-backed server like NextDNS, and secure the network by enforcing DNS via DHCP and NAT redirects.

Set up a Mikrotik adlist to block ads and malware at the DNS level using open, community-maintained lists, reducing traffic and improving navigation across IPv4 and IPv6 devices.

Learn to create and restore local backups on Mikrotik, preserving MAC addresses and restoring on the same model and interfaces. Encrypted backups and terminal steps safeguard data and streamline recovery.

Master cloud backup and restore for RouterBoard Mikrotik devices, with cloud storage limits and encryption via a download password; restore is doable via CLI or Winbox.

Understand how a firewall acts as a gatekeeper that filters traffic, blocks malicious activity, and enforces security policies, and how default deny vs default permit rules shape LAN security.

Explore the Mikrotik RouterOS firewall tables, including stateful filtering, active connections, and NAT and mangle rules across IPv4 and IPv6 with input, forward, and output chains.

Learn to create simple firewall rules in Mikrotik's filter table, focusing on input rules to block internet traffic while allowing icmp ping and remote access ports via terminal or Winbox.

Configure Mikrotik forward chain rules and ICMP filtering to secure your LAN, including RFC reserved addresses, NAT considerations, fasttrack, and a proper drop order for protection.

Configure a basic Mikrotik firewall with forward and input rules, icmp controls, and fasttrack, protecting the LAN from non-public addresses and considering IPv6.

Explore how NAT translates public IPv4 addresses to private IPs, uses masquerade for dynamic IPs, and enables Mikrotik to expose servers while managing IPv6 and CGNAT concepts.

Learn how to configure destination NAT (DSNAT) on Mikrotik, open necessary ports with a forward rule, and test access to a local service like postgres from the internet.

Learn to configure multiple dnat rules for the same service on a single Mikrotik by using port forwarding and copyable nat rules to route different internal hosts.

Explore hairpin NAT, or NAT loopback, which lets LAN devices access a server using a single public IP or DNS. Learn DSNAT and source NAT masquerade configuration for TCP access.

Learn to implement IPv6 NAT66 on Mikrotik, sharing a single public IPv6 via half-half NAT using a /64 provider network and fd00 addresses, with ND discovery and LAN IPv6 advertising.

Explore the Mikrotik fast track for IPv6, enabling a firewall rule to boost bandwidth and reduce CPU usage, with hands-on tests comparing IPv6 and IPv4 performance.

Explore Mikrotik connection tracking in the firewall, view fasttrack and established NAT connections in IPv4 and IPv6, with TCP/UDP details, statistics, and a note on the Mangle table.

Protect your Mikrotik router by implementing port knocking with an automatic banlist and firewall drops, covering IPv4 and IPv6, configurable timeouts, and false-positive considerations.

Protect Mikrotik from brute force attacks by banning IPs after three failed login attempts with stage timeouts for SSH, using WAN and LAN firewall rules, and securing remote access.

Configure a dynamic IPv6 network with a DHCPv6 client and NAT66 using half and half NAT, enabling IPv6 access over 4G, fiber, or satellite.

Master static routes in Mikrotik RouterOS to control IPv4 and IPv6 traffic, compare static vs dynamic routes, and explore load balancing and failover across two internet gateways.

Learn how to configure link failover in RouterOS v7 using scope and target scope, with IPv4 and IPv6 NAT66, and automatic failover between two links.

Master load balancing with ECMP on Mikrotik, distributing traffic across multiple equal-cost links for IPv4 and IPv6, using NAT and default routes, with practical setup and testing.

Explain how PCC load balancing hashes IP addresses and ports to route traffic across multiple gateways, using a denominator equal to the number of links.

Master NTH load balancing on Mikrotik by using a lean mangle rule set and dynamic address lists to distribute traffic across multiple links, with IPv4 and IPv6 support via NAT66.

Explore how Mikrotik queues manage bandwidth with simple queues and queue trees, limit rates for IPs or subnets, prioritize traffic, and mark packets for IPv4 and IPv6 with mangle.

Learn how burst creates a temporary bandwidth exception in Mikrotik queues, with a burst limit and time window, enabling higher peak rates while the average rate stays below the limit.

Explore how burst creates a temporary bandwidth exception in Mikrotik simple queues, based on the average rate over a burst time. Configure burst limit and time for practical speed management.

set up pcq to dynamically shape traffic and evenly allocate bandwidth across multiple users on Mikrotik, using interface rules, mangle, and one megabyte per client within a ten megabyte limit.

learn how FQ-CoDel, a fair use queue, reduces delays and bufferbloat to boost latency and improve real-time performance on a LAN, especially for VoIP and videoconferencing over UDP.

Explore the cake queue (common applications kept enhanced) designed for wireless internet to minimize buffer load. Learn diff3 versus diff4 prioritization, nat, rx/tx configs, and best-effort rules for non-critical traffic.

Set up a Mikrotik OpenVPN server-client by generating TLS certificates, configuring the server and users, enabling ARP proxy, and enabling cross-platform client access.

Connect two Mikrotik LANs with a site-to-site OpenVPN setup, using certificate authority, server, and client certificates. Configure arp proxy, firewall rules, NAT, and routes, then verify connectivity across networks.

Configure a WireGuard server and Windows client on Mikrotik, using UDP port, public/private keys, and a dedicated tunnel interface to access internal LANs.

Set up a WireGuard site-to-site vpn between two Mikrotik routers joining networks 5.1 and 20.1, with dynamic or fixed wan, exchange public keys, configure tunnel routes, and test connectivity.

Configure an IPSec L2TP server client on Mikrotik with a pre-shared key and public IP, and set up Windows built-in VPN and firewall port rules.

Establish a site-to-site OpenVPN connection between pfSense and Mikrotik, configuring server and client certificates, routes, and firewall rules to interconnect LANs over IPv6 and IPv4.

Learn to create an ether over ip (eoip) site-to-site VPN between two Mikrotik RouterOS routers, bridging their LANs over the WAN so both LANs act as a single network.

Create and manage a complete PPPoE end-to-end VPN tunnel using Mikrotik. Configure DHCP pools, profiles, DNS, security, and client and server PPPoE connections with bandwidth, timeouts, and authentication options.

Configure an IPIP tunnel between Mikrotik routers by creating an IP tunnel interface, setting local and remote public IP addresses, enabling encryption and a password, and testing connectivity.

Discover how Mikrotik web proxy filters pages, enforces acceptable use policies, supports cache proxy to save bandwidth, and compares transparent and non-transparent modes with port and IPv4/IPv6 options.

Explore why transparent proxy fails with SSL, and configure a non-transparent Mikrotik proxy using NAT, redirect, and manual proxy for IPv4 and IPv6.

Explore how network bridges aggregate multiple interfaces into a single network, build a MAC address table, and use STP, RSTP, and MSTP to prevent loops in VLAN environments.

Create a bridge that acts as a switch by adding multiple interfaces, enable switch offload, and configure DHCP server and NAT for the new LAN networks.

Explore bonding in Mikrotik RouterOS to fuse ethernet interfaces for higher speed and availability, using ARP and MII monitoring and modes such as balance RR, active backup, XOR, and broadcast.

Configure a bonding interface between two Mikrotik routers using two Ethernet slaves, set matching IP addresses, and verify with ping; cover IPv6 bonding and monitoring.

Enable ARP-based link monitoring in bonding to keep traffic flowing across links, using IPv4 targets and avoiding MII for reliable redundancy and uptime.