
Discover MikroTik, a Latvian hardware producer for network and wireless uses. Learn how its hardware and software support internet connections with stable, flexible routing for data and interfaces.
Install Winbox, the MikroTik management tool, and learn to connect to routers; avoid the latest version from the official MikroTik site, then open the program for quick access.
Plug in an ethernet cable to any port, open the winbox program, select the router from the Neighbors tab by its MAC address, enter the password if set, and connect.
Learn to reset a Mikrotik router to factory settings using both the physical reset button and the system tab method, and reconnect after the reset.
Understand the system reset configuration tab: default, no default configuration, backup, and keep user configuration. Explore caps man for wireless and bridge with the htp client.
Rename MikroTik devices by going to system identity and setting a new name, and adopt a naming convention. Observe that the new name appears in the upper left corner.
Learn to set an IP address on a Mikrotik board by adding it to a selected port, entering the IP and mask, and selecting the interface for automatic network assignment.
Set an IP address for a specific interface via the terminal, add it with a net mask in the IP addresses module, and verify the assignment in the interface list.
Learn how to update a MikroTik router via the system packages tab, check for updates, and select the long term channel, understanding stable, current, and release candidate options.
Learn how to export and back up your Mikrotik router configuration, understand the difference between export (readable file) and backup (binary), and save and transfer files for version control.
Import a previously exported Mikrotik configuration to multiple routers by downloading, uploading, and applying a saved config file, ensuring compatibility with similar router structures.
Explore Mikrotik services such as Telnet, FTP, WWW, SSL, SSI, and API, plus Winbox and tick app access, and observe the WWW service turning on or off.
Learn how to check the router's software version in Mikrotik, upgrade or downgrade, and view installed packages with their versions via system packages, demonstrating version 6.40 5.7.
Learn how MikroTik licenses work, including six levels, unlimited interfaces, and licenses that never expire. Check the router license via system license, software ID, serial number, and router license level.
Connect to a neighbor router via ip neighbors and mac telnet, log into the terminal, and configure an ip address with a network mask on the chosen port.
Enable safe mode from the upper left before changing the router to avoid being ejected. Restore previous settings if you disable the connected configuration port using safe mode.
Discover how DHCP distributes IP addresses and subnet masks, configure per-interface DHCP servers, set IP pools, and specify default gateway, DNS server, and wind server for a Mikrotik router.
Learn to configure an IP pool for a DHCP server and point-to-point links by defining a 192.168.10.0/24 pool, assigning it to an interface, and verifying the router receives an IP.
Set up a Mikrotik dhcp server by assigning an ip to the first interface, selecting an address pool, configuring a dns server, and setting the lease time.
Set up a DHCP client to obtain an IP address from the router’s DHCP server, verify the assignment in the addresses window, and confirm connectivity to the HTTP server.
Learn to set up a DHCP server on the terminal to distribute IP addresses, assign a port IP, configure an IP pool, a DNS server at 8.8.8.8, and lease time.
set up a desktop dhcp client on the terminal to automatically obtain an ip from the router's dhcp server and verify the connection in the dhcp client tab.
Explore DHCP server options in Mikrotik from scratch, including HTTP, network, list, and option sets tabs; configure static leases and monitor for rogue DHCP servers.
Explain how the address resolution protocol maps IP addresses to MAC addresses, using dynamic or static ARP entries, and how ARP reply-only mode enhances security.
A breach is a layer two device in the iso or aci model that connects segments. Open the breach tab, click plus, name it, and assign interfaces to physical ports.
Open the terminal, enter the interface bridge module, name the bridge, and attach the desired interface.
Bonding connects two independent links between routers to improve efficiency and reliability. The video shows creating a bond on both routers, assigning IPs, and testing failover for uninterrupted data transmission.
Set up virtual local area networks on a Mikrotik router and a switch, creating VLANs 1 and 2, configuring IPs and DHCP servers, and verifying connectivity between devices.
Explore routing as the process of selecting the optimal data path, distinguishing static and dynamic routing, and how routing tables or dynamic protocols like ospf choose the best route.
Set up static routing by manually defining the routing table in the win box program, adding IP addresses to router ports, and entering the 10.10.0.0/24 network gateway to confirm reachability.
Configure RIP routing on Mikrotik by assigning neighbor network addresses on ports two and three, adding them under the networks tab, and verify connectivity to R2 and R3.
Set up OSPF routing between neighboring networks by configuring ports and adding IP addresses, explore areas with their database of connections and shortest paths, and verify connectivity.
Explore how Mikrotik RouterOS enables wireless networks, supporting 802.11 a/b/g/n/ac and modes like client station, access point, and wireless bridge, with features such as virtual AP and encryption.
Enter the wireless menu to configure port names and modes, choosing station, wds, ap, or bridge. Define security profiles and country limits to set encryption, bands, and transmit power.
Configure a MikroTik access point by creating a WPA security profile and enabling wlan1, set the wireless interface to bridge mode, test connections, and apply NAT masquerade in IP firewall.
Learn to set up a wireless bridge on Mikrotik routers by configuring the wlan port bridge mode, ip address, http server, and a WPA security profile, and understand single-device connectivity.
Learn how WDS works with MikroTik: set up point-to-point links, explore AP-WDS interactions, NAT effects, and modes like disabled, dynamic, mesh, and static for secure, flexible networks.
Learn how the access list restricts connections on the access point and controls parameters, with default allow, and how rules are evaluated sequentially until a match connects the client.
Understand how the connect list assigns priorities and security settings to remote access points, limits connections, and uses ordered rules tied to wireless interfaces with MAC address and signal strength.
Learn how to configure wireless protocols on wifi interfaces using advanced mode, enabling v2, v3, v4, and 802.11 streams, with default first protocol settings for stations.
Learn how snooper monitors the environment for nearby wireless networks, available in console and win box. Start scanning by selecting a wireless interface.
Explore how a firewall analyzes incoming and outgoing traffic, filters packets by device location, and enforces security policies to reduce unauthorized access, using Mikrotik filter rules and layer seven protocols.
Learn how source NAT and destination NAT modify IP and port details to enable internet access for devices on a private network, using masquerade on Mikrotik firewall.
Explore firewall filter rules in MikroTik, drop traffic that doesn't match conditions, define rule chains (forward, input, output), and specify source and destination addresses, protocol, and ports, with actions.
Create an address list of allowed ips in the firewall tab, then add input chain rules to accept established connections, allow the list, enable icmp, and drop all other traffic.
Learn how the Mikrotik raw table pre routing and output chains optimize packet processing, reduce cpu load, and manage connections before they reach routing decisions.
Explore packet control through firewall connections tracking, enable the monitor in the IP firewall connections app, and inspect source and destination addresses and ports for TCP and UDP traffic.
Protect against ddos attacks by configuring mikrotik ip firewall and filter rules. Route new connections to a detective chain, apply destination limit, and build address lists for attackers and targets.
Protect against DDoS attacks by enabling HTTP and cookies in the IP settings; an ACK containing a cryptographic hash challenges clients, and those lacking the cookie are abandoned.
Learn how QoS limits bandwidth for devices, sets data rate by IP or port, limits peer-to-peer traffic, and prioritizes packet flows to optimize available bandwidth.
Explore Mikrotik QoS by describing several queue types built on first in, first out, including packet-based and rate-based variants, hashed substreams, and per-connection queuing with flow identifiers and speed limits.
Demonstrates creating a queue on a Mikrotik router to control a computer's bandwidth, starting at 520 kbps and rising to 2 Mbps for upload and download, with observable speed changes.
Explore traffic management in mikrotik qos by examining queue options, including target streams, destination addressing, burst and maximum limits, time and days, packet marks, priority, bucket size, and parent-child queue relationships.
Learn what tunnels are and how tunneling creates a direct-looking connection between distant hosts, linking different local networks over a public wide area with different tunnel types and network protocols.
Explore how point-to-point protocol works and transports layer 3 packets over a point-to-point connection. Note that packets are delivered in sequence at the data connection layer.
Configure a pppoe server and client on Mikrotik to enable user and network management with billing, using an IP pool, local and remote addresses, and authenticated profiles.
Learn to configure a tunnel VPN using IPsec encryption on MikroTik, including IP pool, VPN profile, IPsec secret, interface setup, firewall rules, and Windows client connection.
Discover how SSTP creates a secure tunnel over a TLS channel to traverse firewalls, using server certificates and username/password authentication, with client certificate verification and perfect forward secrecy.
Explain the RTP protocol and how tunneling forwards IP traffic over any medium, plus how IP seq with dynamic configuration and policy creates a secure VPN tunnel.
Learn how MikroTik graphs monitor CPU, memory, interface traffic, and simple queue data over time; set up graphing rules, specify ports and access IPs, and view interface and resource graphs.
Discover how IP scan works to scan a network pool or selected addresses, collecting device IP, MAC, discovery time, DNS, SNMP, and BIOS information, and display connected devices.
Learn how ping operates to check connectivity between the testing and tested host, measure packet counts and transmission delays, and test with an IP address to observe packet size.
Learn how Telnet works as a non-encrypted protocol and predecessor of SSH, enabling remote terminals. Configure Mikrotik devices by connecting via MAC or IP and logging into neighbors.
Learn how to use the torch tool for real-time connection monitoring, select an interface, and filter by IP addresses, ports, and websites to manage traffic flow.
Learn how traceroute reveals the path data takes to a website by using the trace route tool to view the networks a packet traverses.
discover the Mikrotik sniffer tool to intercept and analyze packets passing through a router. configure memory limits, file names, streaming, and packet filtering to capture and analyze traffic.
Explore the Mikrotik package list to enable or disable function groups, tailoring the router installation, then schedule a disable after reboot via the system packages tab.
About the course
Practical Mikrotik course, which will allow you to start working with Mikrotik routers and network switches clearly and easily. The scope of the course covers all the topics you need to know to pass the MTCNA exam. When creating this course, we focused on practical knowledge that may be used in real life, and that you may encounter in your future work as an administrator of network devices.
The course is intended for beginners or those who want to supplement their existing knowledge
Course material?
After completing the training, the participant will be familiar with the RouterOS system software and Mikrotik RouterBOARD products. The participant will be able to configure, manage and solve basic problems related to MikroTik routers; will be able to provide basic network services and connect the client to the Internet using multiple network methods (NAT, PPP, IPSec)
In which way?
We tried to limit the theoretical foundations to the necessary minimum so that it was only an introduction to practical workshops. Each part of the material is a practical exercise using actual equipment. The exercises reflect real-world scenarios that the participant may encounter in their work.
Are there any course requirements or prerequisites?
The participant should know and understand the principles of operation of TCP / IP networks; the participant should be able to calculate on IP subnets (CIDR) independently; it will be useful to know English at a level that allows you to understand the technical documentation; own laptop; No prior knowledge of RouterOS is required.
What you will learn:
Introduction to the RouterOS system
DHCP
DHCP server and client
ARP protocol
Briding
Introduction to the L2 network
Bridge in wireless networks
Routing
Introduction to routing
Static Routing
Wireless networks
Introduction to 802.11a / b / g / n / ac network
Wireless link configuration
Security and encryption in wireless networks
Monitoring and troubleshooting
MikroTik Firewall
Basics of Firewall
Firewall filter
Mailing lists
Source NAT
Destination NAT
MikroTik FastTrack
MikroTik QoS
Simple Queue
PCQ - Per Connection Queuing
Tunnels
PPP configuration
Address pools - IP pool
Local network security - PPPoE
Point-to-Point Addressing
VPN - PPTP and SSTP
MikroTik RouterOS advanced tools
RouterOS tools (E-mail, Netwatch, Ping, etc.)
Monitoring - (Torch, Graphs, SNMP, etc.)