MikroTik Course

Lesson 1 • Backup, Reset, and Upgrade Procedures

Covers configuration backup formats, factory reset methods, and RouterOS upgrade paths. Ensures students can recover devices before making complex changes.

Lesson 2 • MikroTik Hardware and Product Lines

Covers RouterBOARD models, switch chips, and wireless hardware variants. Establishes hardware context needed for all subsequent configuration tasks.

Lesson 3 • Accessing and Managing RouterOS

Teaches Winbox, WebFig, SSH, and CLI access methods with initial login procedures. Students gain multi-method access skills used in every lab exercise.

Lesson 4 • RouterOS Architecture and Licensing

Explains RouterOS as a Linux-based OS, its software package system, and license levels. Connects licensing tiers to feature availability throughout the course.

Lesson 1 • DHCP Server and Client Configuration

Configures DHCP server pools, leases, and options, plus DHCP client on WAN interfaces. Provides automatic address management used in LAN and ISP connectivity setups.

Lesson 2 • ARP and Neighbor Discovery

Explains ARP table management, static ARP entries, and proxy ARP use cases. Students control Layer 2-to-Layer 3 resolution for security and performance.

Lesson 3 • IP Address Assignment on Interfaces

Teaches static IP assignment, interface naming conventions, and address list concepts. Directly enables interface-level routing and firewall rule creation.

Lesson 4 • Subnetting and CIDR Notation

Reviews binary subnetting, CIDR prefix lengths, and network/broadcast calculation. Accurate subnetting underpins every routing and firewall decision in the course.

Lesson 1 • Route Failover and Check-Gateway

Implements check-gateway ping monitoring and distance-based failover routes. Provides ISP redundancy patterns applied in firewall and NAT chapters.

Lesson 2 • Static Route Configuration

Configures gateway routes, blackhole routes, and recursive next-hop resolution. Students build reliable static topologies used as baselines for lab environments.

Lesson 3 • Policy Routing with Routing Rules

Uses routing rules and routing marks to steer traffic by source, destination, or mark. Enables per-user or per-service routing decisions built upon in the firewall chapter.

Lesson 4 • IP Unnumbered and Point-to-Point Links

Configures /30 and /31 point-to-point links and IP unnumbered interfaces. Prepares students for WAN link design and dynamic routing neighbour sessions.

Lesson 1 • Source NAT and Masquerade

Configures masquerade and src-nat rules for single and multiple WAN interfaces. Provides outbound internet access for all LAN segments configured in prior chapters.

Lesson 2 • Destination NAT and Port Forwarding

Implements dst-nat rules for inbound port forwarding and hairpin NAT scenarios. Enables internal service publishing required in VPN and QoS chapters.

Lesson 3 • Address Lists and Dynamic Blocking

Uses static and dynamic address lists for blocklists, allowlists, and auto-banning. Enables scalable rule management without per-IP rule duplication.

Lesson 4 • Building a Baseline Firewall Ruleset

Constructs accept-established, drop-invalid, and service-protection rules step by step. Students leave with a reusable secure-by-default template for all lab routers.

Lesson 5 • Firewall Logging and Troubleshooting

Adds log actions to firewall rules and interprets RouterOS log output for diagnosis. Closes the chapter with diagnostic skills applied throughout the course.

Lesson 1 • VLAN Tagging on Bridge Ports

Configures bridge VLAN table, tagged and untagged ports, and PVID assignment. Enables traffic segmentation between departments or services on shared infrastructure.

Lesson 2 • Bonding and Link Aggregation

Implements 802.3ad LACP and balance-rr bonding for redundancy and throughput. Provides high-availability Layer 2 uplinks for server and core switch connections.

Lesson 3 • RouterOS Bridge Interface Fundamentals

Creates bridge interfaces, adds ports, and explains STP/RSTP operation. Bridge fundamentals underpin all VLAN and switching configurations in this chapter.

Lesson 4 • Inter-VLAN Routing with VLAN Interfaces

Creates VLAN sub-interfaces on the bridge for routed inter-VLAN communication. Connects Layer 2 segmentation to Layer 3 routing established in earlier chapters.

Lesson 1 • Access Point Configuration and SSIDs

Sets up SSIDs, SSID hiding, and multiple virtual AP interfaces on one radio. Enables multi-SSID deployments mapped to separate VLANs in the bridging chapter.

Lesson 2 • Wireless Security Profiles

Configures WPA2/WPA3 security profiles, authentication types, and cipher suites. Proper security profiles prevent unauthorised wireless association.

Lesson 3 • Wireless Bridging and WDS

Implements WDS and station-bridge modes for transparent Layer 2 wireless links. Provides wireless backhaul skills used in multi-site network designs.

Lesson 4 • Wireless Monitoring and Optimisation

Uses scan, snooper, and registration table tools to monitor and tune wireless performance. Students diagnose interference and optimise channel selection systematically.

Lesson 1 • L2TP and PPTP Remote Access VPN

Sets up L2TP/IPsec and PPTP servers for remote-access client connectivity. Covers legacy and modern client compatibility for enterprise remote-work scenarios.

Lesson 2 • WireGuard VPN Configuration

Configures WireGuard peers, keys, and allowed-IPs for modern high-performance VPN. WireGuard's simplicity and speed make it the preferred choice for new deployments.

Lesson 3 • Site-to-Site IPsec Tunnel Configuration

Configures IPsec peers, policies, and proposals for encrypted site-to-site tunnels. Provides branch-office connectivity patterns used in routing and firewall integration.

Lesson 4 • GRE and EoIP Tunnel Interfaces

Creates GRE and EoIP tunnels for unencrypted or IPsec-wrapped overlay networks. Enables Layer 2 extension and dynamic routing protocol transport over WAN links.

Lesson 5 • OpenVPN Server and Client Setup

Deploys OpenVPN in TLS mode with certificate-based authentication on RouterOS. Provides a firewall-friendly VPN option for clients behind restrictive networks.

Lesson 1 • Traffic Monitoring and Graphing

Uses Torch, Bandwidth Test, SNMP, and built-in graphs for real-time monitoring. Monitoring data validates QoS effectiveness and identifies congestion points.

Lesson 2 • PCQ for Per-User Fair Queuing

Applies Per-Connection Queuing to distribute bandwidth fairly across all users. PCQ scales to large user counts without individual queue entries per subscriber.

Lesson 3 • Queue Tree and HTB Scheduling

Builds hierarchical queue trees using HTB for multi-class traffic scheduling. HTB enables guaranteed minimums and borrowing for complex service-level policies.

Lesson 4 • Simple Queues for Bandwidth Control

Configures simple queues with max-limit, burst, and priority for per-user shaping. Provides straightforward bandwidth management for small to medium deployments.