MikroTik User Management Engineer with LABS

Configure a pptp site-to-site vpn between headquarter and branch routers, including profiles, secrets, and encryption, and validate connectivity with ping.

Configure a site-to-site l2tp vpn between headquarters and branch office using l2tp server and client, with optional ipsec for stronger security and UDP ports 500 and 4500 considerations.

Configure an eoip tunnel over an l2tp tunnel to carry ip over it, then create ip tunnel interfaces and bridges on both ends to achieve layer 2 connectivity.

ipsec is a protocol suite that protects ip traffic for vpn connectivity. It provides confidentiality through encryption, integrity via hashing, and mutual authentication.

Explain IPsec transport mode, which encrypts transport layer and above while leaving network and data-link unencrypted, and tunnel mode, which encrypts from the network layer and adds an IP header.

Learn how IPsec uses a hybrid of symmetric and asymmetric keys to securely exchange a shared secret with Diffie-Hellman, then encrypts traffic using that key.

explains symmetric and asymmetric encryption protocols used in MikroTik, comparing des, 3des, aes, blowfish, camellia, rsa, and dh, and advises using aes with rsa/dh for secure ipsec setups.

Explore IPsec negotiation protocols, comparing AH and ESP, and explain how IKE phase 1 and phase 2 establish a VPN tunnel, selecting encryption and authentication methods.

Explore the IPsec negotiation process, including five phases, and how interesting traffic triggers a VPN, with options to encrypt, transmit in clear text, or discard.

Learn how ike phase 2 establishes an ipsec tunnel to protect user data, using quick mode and negotiating protocol (esp/ah), encapsulation (transport or tunnel), encryption, hashing, and lifetime.

Explore how IPsec site-to-site VPN uses IKE phase one and phase two tunnels to securely transfer data with encryption and integrity protections in a lab on two routers.

Explore the differences between IKEv1 and IKEv2, including bandwidth use, built-in NAT traversal, authentication, phase one mechanics, and keep-alive, for choosing the right ipsec setup.

Explain how PPPoE works, detailing server-client base, multi-link support, and authentication options, and walk through the discovery to session establishment using PADI, PADO, PADR, PADS, and PADT.

Turn a MikroTik router into a switch by bridging ports, then configure PPPoE clients for two customers, set up DHCP and masquerade, and validate connectivity and speeds.

Explain and configure wireless hotspots on the router by using captive portals, open wireless networks, user accounts with speed profiles, and external authentication via a radio server or user manager.

Identify and verify the key prerequisites for configuring a MikroTik hotspot, including a valid IP address on the external interface, internet connectivity, a functional DNS server, and an open WLAN.

Configure MikroTik hotspot cookies and a free 10-minute trial to manage user access via captive portal, disable cookies for privacy, and monitor active sessions.

Learn how to manage MikroTik hotspot users by enforcing time-based access and bandwidth limits, including uptime caps and download or upload byte limits.

Explore how IP bindings bypass hotspot authentication, allowing devices to access the internet without username and password, with MikroTik hotspot management techniques demonstrated in practical lab steps.

Change the captive portal's appearance by editing hotspot pages, swapping in your logo, applying a new theme, and configuring login redirection on MikroTik's hotspot system.

Become a MikroTik certified engineer through official trainings with Maher Haddad and pass the exam, with in-person sessions in Netherlands or online courses and contact via phone, WhatsApp, or email.