MikroTik course outlines
Module-by-module topic summaries for all 10 MikroTik certifications, written as readable web pages and checked against MikroTik’s official outline documents.
MikroTik Certified Network Associate
Prerequisites: A good working knowledge of TCP/IP and IPv4 subnetting. No MikroTik certificate is required.
9 modules · 41 topic groups · Checked against official outline
Introduction to RouterOS9 items
- What MikroTik, RouterOS and RouterBOARD hardware are
- First access with WinBox, WebFig and Quick Set; the default configuration
- Command-line basics: SSH, Telnet, serial console, tab completion and command history
- Initial Internet setup: DHCP client on WAN, LAN addressing, default gateway and masquerade
- Upgrading RouterOS packages and RouterBOOT firmware
- Router identity, user logins and service management
- Backups versus text exports, editing exports, reset and Netinstall recovery
- RouterOS licence levels and where to find documentation and support
- Hands-on lab
DHCP4 items
- How DHCP server and client work in RouterOS
- Building a DHCP server, managing leases and network settings
- ARP behaviour, ARP modes and the ARP table
- Hands-on lab
Bridging4 items
- Bridge concepts and settings
- Creating bridges and adding ports
- Bridging wireless interfaces and station-bridge mode
- Hands-on lab
Routing5 items
- Routing concepts and route flags
- Creating static routes and a default route
- Working with dynamic routes
- Static routing in a small multi-router network
- Hands-on lab
Wireless6 items
- 802.11 standards, bands, channels, data rates and regulatory settings
- Configuring an access point and a station for a simple link
- Access and connect lists, default authenticate/forward behaviour
- WPA/WPA2 pre-shared keys and WPS
- Monitoring with the registration table and snooper
- Hands-on lab
Firewall7 items
- Firewall principles, connection tracking and connection states
- Chains, rule structure and actions
- Protecting the router (input) and the customers behind it (forward)
- Address lists
- Source NAT and masquerade; destination NAT and redirect
- FastTrack
- Hands-on lab
Quality of Service4 items
- Simple queues: targets, destinations, max-limit and limit-at
- Bursting
- Fair sharing for a whole network with PCQ (rate and limit settings)
- Hands-on lab
Tunnels6 items
- PPP profiles, secrets and status
- IP pools: creating ranges and assigning them to services
- PPPoE server and client, service names
- Point-to-point addressing
- PPTP and SSTP for connecting remote networks
- Hands-on lab
Tools and Troubleshooting5 items
- Built-in tools: e-mail, Netwatch, ping, traceroute, profiler
- Monitoring with interface traffic, Torch, graphs, SNMP and The Dude
- Support files (supout.rif), system and debug logs
- Keeping configurations readable with comments and network diagrams
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCNA training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCNA training outline · document last edited 22 Jan 2016 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified Routing Engineer
Prerequisites: MTCNA certificate.
4 modules · 17 topic groups · Checked against official outline
Static Routing7 items
- Route selection with more specific prefixes
- Equal-cost multipath (ECMP)
- Pinning a gateway to a specific interface
- Gateway reachability checks and route distance
- Routing marks and policy routing
- Recursive next-hops using scope and target-scope
- Hands-on lab
Point-to-Point Addressing2 items
- Configuring /32 point-to-point addresses
- Hands-on lab
VPN and Layer 2 Segmentation5 items
- VPN concepts and common types
- Site-to-site tunnels: IPIP, EoIP, PPTP, SSTP, L2TP and PPPoE
- VLAN fundamentals and QinQ
- VLANs with managed switches and RouterBOARD switch chips
- Hands-on lab
OSPF7 items
- How OSPF works: hello protocol, LSA types and database exchange
- Areas, router roles, neighbour states and DR/BDR election
- External routes (type 1 and type 2), interface cost and network types
- SPF calculation and multicast behaviour, including NBMA considerations
- Stub areas, NSSA and route summarisation with area ranges
- Virtual links and routing filters, including their limitations
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCRE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCRE training outline · document last edited 10 Jul 2015 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified Wireless Engineer
Prerequisites: MTCNA certificate.
11 modules · 27 topic groups · Checked against official outline
Wireless Installations1 items
- Wireless routers, RouterBOARD hardware, radio cards and antenna types
Wireless Standards1 items
- 802.11a/b/g/n, bands, channel widths and frequencies
Wireless Tools3 items
- Scanning, frequency usage and spectral scan
- Snooper, alignment and sniffer tools
- Hands-on lab
Wireless Troubleshooting4 items
- Reading the registration table
- ACK timeout and distance, CCQ, signal strength
- Frames, hardware frames and data rates
- Hands-on lab
Advanced Wireless Settings4 items
- Hardware retries, hardware protection and adaptive noise immunity
- WMM and country regulatory settings
- Transmit power and virtual access points
- Hands-on lab
802.11n5 items
- 802.11n features and data rates
- Channel bonding and frame aggregation
- Transmit power and chain settings for N radios
- Debugging a wireless link
- Hands-on lab
Wireless Security4 items
- Access management with access and connect lists
- RADIUS, authentication, encryption and EAP
- Management frame protection
- Hands-on lab
WDS and Mesh4 items
- Dynamic and static WDS
- RSTP bridging
- Wireless mesh with HWMP+
- Hands-on lab
Wireless Bridging4 items
- Transparent bridging with WDS and AP/station-WDS
- Pseudobridge mode
- MPLS/VPLS tunnels over wireless
- Hands-on lab
Nstreme3 items
- MikroTik Nstreme features, configuration and Nstreme Dual
- Troubleshooting
- Hands-on lab
Nv23 items
- MikroTik Nv2 features and configuration
- Troubleshooting
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCWE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCWE training outline · document last edited 16 Mar 2011 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified Traffic Control Engineer
Prerequisites: MTCNA certificate.
6 modules · 18 topic groups · Checked against official outline
Packet Flow3 items
- Why the packet flow diagram matters and what it shows
- Tracing routed, bridged and router-bound traffic, from simple to complex cases
- Hands-on lab
Firewall Filter, NAT and Mangle6 items
- Connection tracking
- Default and custom chains, every rule action and the most-used matchers
- NAT helpers
- Mangle, including advanced and extra matchers
- UPnP
- Hands-on lab
Quality of Service4 items
- HTB structure, queue trees, dual limitation, priority and burst
- Queue types: FIFO, SFQ, RED and PCQ, and queue size
- Simple queues and how they interact with queue trees
- Hands-on lab
DNS3 items
- DNS client and cache configuration
- Static DNS entries
- Hands-on lab
DHCP5 items
- Analysing DHCP communication
- Client identification and configuration
- Server networks, built-in and custom options, pools and advanced settings
- DHCP relay
- Hands-on lab
Web Proxy3 items
- Basic proxy configuration
- Access, direct-access and cache lists, regular expressions
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCTCE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCTCE training outline · document last edited 10 May 2011 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified User Management Engineer
Prerequisites: MTCNA certificate.
7 modules · 24 topic groups · Checked against official outline
PPP4 items
- Profiles: addressing, filters, address lists, TCP MSS, encryption, timeouts, rate limits, single sessions
- Secrets: service, profile, addressing, routes and traffic limits
- IP pools and pool chaining
- Hands-on lab
PPTP and L2TP4 items
- How PPTP and L2TP compare
- Client setup: profiles, dial-on-demand, default and static routes
- Server setup: profiles, client secrets and static interfaces
- Hands-on lab
PPPoE5 items
- Where PPPoE fits and how it compares with other PPP protocols
- Client and server configuration, service names and profiles
- Hardening the server interface; profiles with and without encryption
- ECMP routes over PPP interfaces
- Hands-on lab
Layer 2 over Tunnels3 items
- Bridging with L2TP and EoIP, L2TP and VPLS, L2TP and BCP
- Multilink PPP (MRRU) and MLPPP with PPPoE
- Hands-on lab
IPsec5 items
- IPsec concepts compared with other VPNs
- Peers, policies and proposals: authentication, algorithms, NAT traversal, lifetimes, DPD and PFS
- Installed SAs and flushing them
- Building and verifying an IPsec link across NAT
- Hands-on lab
HotSpot6 items
- HotSpot concepts and default setup
- Login methods, including HTTP, MAC, cookie, HTTPS, trial and RADIUS
- Users, MAC binding, uptime and byte limits
- Monitoring hosts and active users; user profiles
- Bypass, walled garden and IP bindings; custom pages
- Hands-on lab
RADIUS4 items
- RouterOS as a RADIUS client for specific services
- User Manager as a RADIUS server: routers, users and profiles
- Incoming RADIUS
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCUME training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCUME training outline · document last edited 10 May 2011 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified IPv6 Engineer
Prerequisites: MTCNA certificate.
6 modules · 21 topic groups · Checked against official outline
IPv6 Fundamentals4 items
- How IPv6 differs from IPv4; address distribution and notation
- EUI-64 address creation and subnetting
- Address types: link-local, global, multicast, anycast and unique local; special and reserved ranges
- Hands-on lab
IPv6 Protocol4 items
- Manual and automatic address configuration (SLAAC, stateless and stateful DHCPv6)
- Neighbour discovery
- Routing basics and prefixes
- Hands-on lab
The IPv6 Packet3 items
- Header fields and extension-header chaining
- Fragmentation and path MTU discovery
- Hands-on lab
IPv6 Security6 items
- ICMPv6 and the neighbour discovery messages, including DAD, NUD and redirects
- Router advertisement flags for managed and other configuration
- Multicast listener discovery and temporary addresses
- IPv6 firewalling
- IPsec with AH, ESP and both
- Hands-on lab
Transition Mechanisms3 items
- Dual stack
- 6to4, 6RD, Teredo and DS-Lite
- Hands-on lab
Interoperability in RouterOS7 items
- IPv6 pools, DHCPv6 prefix delegation (server and client) and DHCPv6 client
- IPv6 tunnels: IPIPv6, EoIPv6 and GRE6
- DNS, reverse DNS, NTP and PPP with IPv6
- Routing with global versus link-local next-hops
- Features with different or limited IPv6 support
- Diagnostic tools over IPv6
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCIPv6E training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCIPv6E training outline · document last edited 26 Aug 2016 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified Security Engineer
Prerequisites: MTCNA certificate.
6 modules · 20 topic groups · Checked against official outline
Security Fundamentals3 items
- Attack types, security mechanisms and services
- Common threats and how RouterOS security is deployed
- Hands-on lab
Firewall6 items
- Packet flow, chains and stateful filtering
- The RAW table and SYN-flood mitigation
- The RouterOS default configuration and management-access best practice
- Spotting attacks on critical services
- Bridge filtering, advanced filter options and ICMP filtering
- Hands-on lab
Attacks Across the OSI Layers5 items
- MNDP abuse, rogue DHCP servers and DHCP starvation
- TCP SYN, UDP and ICMP smurf attacks
- Brute force against FTP, Telnet and SSH
- Detecting and stopping port scans
- Hands-on lab
Cryptography4 items
- Terminology, symmetric and asymmetric encryption
- PKI, self-signed and free trusted certificates
- Using certificates in RouterOS
- Hands-on lab
Securing the Router4 items
- Port knocking
- Secure management over HTTPS, SSH and WinBox; default service ports
- Tunnelling through SSH
- Hands-on lab
Secure Tunnels4 items
- IPsec basics
- L2TP with IPsec
- SSTP with certificates
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCSE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCSE training outline · document last edited 22 Mar 2019 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified Switching Engineer
Prerequisites: MTCNA certificate.
11 modules · 22 topic groups · Checked against official outline
Layer 2 Foundations4 items
- Layer-2 forwarding, unicast/multicast/broadcast and MAC learning
- The RouterOS bridge, basic switch chips and CRS advanced switch chips
- An overview of SwOS
- Hands-on lab
MTU2 items
- MTU and L2MTU, jumbo frames and common MTU problems
- Hands-on lab
VLANs5 items
- 802.1Q and 802.1ad tagging
- VLAN interfaces, port-based VLANs and inter-VLAN routing
- VLANs on basic switch chips and on bridges (port, MAC and protocol based)
- QinQ with bridge VLAN filtering and with VLAN interfaces
- Hands-on lab
Spanning Tree4 items
- STP priority and path cost; STP versus RSTP
- MSTP regions, CST/CIST and BPDUs
- Spanning-tree security
- Hands-on lab
Link Aggregation2 items
- Bonding modes and interoperability with other vendors
- Hands-on lab
Port Isolation2 items
- Bridge horizon and switch port isolation
- Hands-on lab
Layer 2 QoS3 items
- 802.1p priority, bridge filter priority and CRS priority
- Shaping and bandwidth limits in bridges and in the switch chip
- Hands-on lab
Layer 2 Security4 items
- IGMP and DHCP snooping, loop protection and storm control
- Bridge filters and switch ACLs, BPDU guard and ARP modes
- Port security, 802.1X and switch hardening
- Hands-on lab
Power over Ethernet2 items
- PoE modes, compatibility, priority and monitoring
- Hands-on lab
Tools2 items
- Layer-2 diagnostics and port mirroring
- Hands-on lab
SwOS3 items
- Installing and managing SwOS, including dual-boot devices
- VLANs, (R)STP, port trunking, QoS and security in SwOS
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCSWE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCSWE training outline · document last edited 19 Feb 2020 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified Enterprise Wireless Engineer
Prerequisites: MTCNA certificate.
9 modules · 27 topic groups · Checked against official outline
Wireless Introduction2 items
- Wireless routers, RouterBOARDs with built-in radios and MikroTik radio cards
- Hands-on lab
RF Characteristics6 items
- Spectrum, decibels and antenna theory (types and polarisation)
- How building materials attenuate and reflect signal
- Cell sizes and transmit power at 2.4 GHz and 5 GHz, indoors and out
- Client roaming and station roaming settings
- Co-channel and adjacent-channel interference, AP placement and airtime
- Hands-on lab
Wireless Standards5 items
- 802.11a/b/g/n/ac features, bands, channels and widths, scan lists
- Modulation and MCS rates, channel bonding and aggregation
- SISO, MIMO and MU-MIMO; CSMA/CA, RTS/CTS and WMM
- A look ahead to 802.11ax
- Hands-on lab
Regulatory Settings in CAPsMAN3 items
- Antenna gain and EIRP control, country codes and installation settings
- Dynamic frequency selection (radar detection)
- Hands-on lab
Non-CAPsMAN Modes3 items
- Repeaters and extenders
- 60 GHz Wireless Wire bridging
- Hands-on lab
Wireless Security4 items
- Authentication methods and WEP/WPA/WPA2 encryption, and their weaknesses
- 802.1X with RADIUS and EAP
- Access lists and common 802.11 vulnerabilities
- Hands-on lab
Wireless Troubleshooting4 items
- Registration table, signal, SNR, CCQ, frames and retries
- Data rates and wireless log analysis
- Scanning, frequency usage, snooper and sniffer
- Hands-on lab
Wireless Surveys3 items
- Pre-installation surveys, spectrum analysis and prediction software
- Post-installation validation
- Hands-on lab
CAPsMAN v26 items
- Requirements, L2 versus L3 CAP communication and DHCP option 138
- CAP discovery, certificate-based authentication and locking, auto upgrade
- Channels, datapaths, security and rate settings; provisioning single and dual-band CAPs
- Local forwarding, dynamic versus static interfaces, virtual APs and VLANs
- Access lists
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCEWE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCEWE training outline · document last edited 10 Mar 2020 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
MikroTik Certified Inter-Networking Engineer
Prerequisites: MTCNA and MTCRE certificates.
3 modules · 13 topic groups · Checked against official outline
BGP6 items
- Autonomous systems, path-vector routing and BGP message types
- iBGP and eBGP, stub and non-stub designs, private AS removal
- Multihop sessions and loopback peering
- Route distribution, routing filters and the best-path selection process
- Prefix attributes, route reflectors and confederations
- Hands-on lab
MPLS6 items
- MPLS basics, static labels and LDP
- Penultimate-hop popping and MPLS traceroute behaviour
- LDP and BGP-signalled VPLS, split horizon, control word and L2MTU
- VRFs, route leaking and BGP-based L3VPN
- OSPF between customer and provider edge
- Hands-on lab
Traffic Engineering4 items
- How MPLS traffic engineering works
- RSVP, static and dynamic (CSPF) paths
- Bandwidth allocation versus bandwidth limitation
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCINE training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCINE training outline · document last edited 2 Feb 2012 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.