MikroTik Course

Lesson 1 • Backup, Reset, and Upgrade Procedures

Covers configuration backup formats, factory reset methods, and RouterOS upgrade paths. Ensures students can recover devices before making complex changes.

Lesson 2 • MikroTik Hardware and Product Lines

Covers RouterBOARD models, switch chips, and wireless hardware variants. Establishes hardware context needed for all subsequent configuration tasks.

Lesson 3 • Accessing and Managing RouterOS

Teaches Winbox, WebFig, SSH, and CLI access methods with initial login procedures. Students gain multi-method access skills used in every lab exercise.

Lesson 4 • RouterOS Architecture and Licensing

Explains RouterOS as a Linux-based OS, its software package system, and licence levels. Connects licensing tiers to feature availability throughout the course.

Lesson 1 • DHCP Server and Client Configuration

Configures DHCP server pools, leases, and options, plus DHCP client on WAN interfaces. Provides automatic address management used in LAN and ISP connectivity setups.

Lesson 2 • ARP and Neighbour Discovery

Explains ARP table management, static ARP entries, and proxy ARP use cases. Students control Layer 2-to-Layer 3 resolution for security and performance.

Lesson 3 • IP Address Assignment on Interfaces

Teaches static IP assignment, interface naming conventions, and address list concepts. Directly enables interface-level routing and firewall rule creation.

Lesson 4 • Subnetting and CIDR Notation

Reviews binary subnetting, CIDR prefix lengths, and network/broadcast calculation. Accurate subnetting underpins every routing and firewall decision in the course.

Lesson 1 • Route Failover and Check-Gateway

Implements check-gateway ping monitoring and distance-based failover routes. Provides ISP redundancy patterns applied in firewall and NAT chapters.

Lesson 2 • Static Route Configuration

Configures gateway routes, blackhole routes, and recursive next-hop resolution. Students build reliable static topologies used as baselines for lab environments.

Lesson 3 • Policy Routing with Routing Rules

Uses routing rules and routing marks to steer traffic by source, destination, or mark. Enables per-user or per-service routing decisions built upon in the firewall chapter.

Lesson 4 • IP Unnumbered and Point-to-Point Links

Configures /30 and /31 point-to-point links and IP unnumbered interfaces. Prepares students for WAN link design and dynamic routing neighbour sessions.

Lesson 1 • Source NAT and Masquerade

Configures masquerade and src-nat rules for single and multiple WAN interfaces. Provides outbound internet access for all LAN segments configured in prior chapters.

Lesson 2 • Destination NAT and Port Forwarding

Implements dst-nat rules for inbound port forwarding and hairpin NAT scenarios. Enables internal service publishing required in VPN and QoS chapters.

Lesson 3 • Address Lists and Dynamic Blocking

Uses static and dynamic address lists for blocklists, allowlists, and auto-banning. Enables scalable rule management without per-IP rule duplication.

Lesson 4 • Building a Baseline Firewall Ruleset

Constructs accept-established, drop-invalid, and service-protection rules step by step. Students leave with a reusable secure-by-default template for all lab routers.

Lesson 5 • Firewall Logging and Troubleshooting

Adds log actions to firewall rules and interprets RouterOS log output for diagnosis. Closes the chapter with diagnostic skills applied throughout the course.

Lesson 1 • VLAN Tagging on Bridge Ports

Configures bridge VLAN table, tagged and untagged ports, and PVID assignment. Enables traffic segmentation between departments or services on shared infrastructure.

Lesson 2 • Bonding and Link Aggregation

Implements 802.3ad LACP and balance-rr bonding for redundancy and throughput. Provides high-availability Layer 2 uplinks for server and core switch connections.

Lesson 3 • RouterOS Bridge Interface Fundamentals

Creates bridge interfaces, adds ports, and explains STP/RSTP operation. Bridge fundamentals underpin all VLAN and switching configurations in this chapter.

Lesson 4 • Inter-VLAN Routing with VLAN Interfaces

Creates VLAN sub-interfaces on the bridge for routed inter-VLAN communication. Connects Layer 2 segmentation to Layer 3 routing established in earlier chapters.

Lesson 1 • Access Point Configuration and SSIDs

Sets up SSIDs, SSID hiding, and multiple virtual AP interfaces on one radio. Enables multi-SSID deployments mapped to separate VLANs in the bridging chapter.

Lesson 2 • Wireless Security Profiles

Configures WPA2/WPA3 security profiles, authentication types, and cipher suites. Proper security profiles prevent unauthorised wireless association.

Lesson 3 • Wireless Bridging and WDS

Implements WDS and station-bridge modes for transparent Layer 2 wireless links. Provides wireless backhaul skills used in multi-site network designs.

Lesson 4 • Wireless Monitoring and Optimisation

Uses scan, snooper, and registration table tools to monitor and tune wireless performance. Students diagnose interference (unwanted signal degradation from overlapping transmissions) and optimise channel selection systematically.

Lesson 1 • L2TP and PPTP Remote Access VPN

Sets up L2TP/IPsec and PPTP servers for remote-access client connectivity. Covers legacy and modern client compatibility for enterprise remote-work scenarios.

Lesson 2 • WireGuard VPN Configuration

Configures WireGuard peers, keys, and allowed-IPs for modern high-performance VPN. WireGuard's simplicity and speed make it the preferred choice for new deployments.

Lesson 3 • Site-to-Site IPsec Tunnel Configuration

Configures IPsec peers, policies, and proposals for encrypted site-to-site tunnels. Provides branch-office connectivity patterns used in routing and firewall integration.

Lesson 4 • GRE and EoIP Tunnel Interfaces

Creates GRE and EoIP tunnels for unencrypted or IPsec-wrapped overlay networks. Enables Layer 2 extension and dynamic routing protocol transport over WAN links.

Lesson 5 • OpenVPN Server and Client Setup

Deploys OpenVPN in TLS mode with certificate-based authentication on RouterOS. Provides a firewall-friendly VPN option for clients behind restrictive networks.

Lesson 1 • Traffic Monitoring and Graphing

Uses Torch, Bandwidth Test, SNMP, and built-in graphs for real-time monitoring. Monitoring data validates QoS effectiveness and identifies congestion points.

Lesson 2 • PCQ for Per-User Fair Queuing

Applies Per-Connection Queuing to distribute bandwidth fairly across all users. PCQ scales to large user counts without individual queue entries per subscriber.

Lesson 3 • Queue Tree and HTB Scheduling

Builds hierarchical queue trees using HTB for multi-class traffic scheduling. HTB enables guaranteed minimums and borrowing for complex service-level policies.

Lesson 4 • Simple Queues for Bandwidth Control

Configures simple queues with max-limit, burst, and priority for per-user shaping. Provides straightforward bandwidth management for small to medium deployments.