MikroTik Certified User Management Engineer
Run subscriber and user access the way ISPs do: PPP profiles and secrets, PPTP, L2TP, PPPoE, layer-2 bridging over tunnels, IPsec, HotSpot and RADIUS with User Manager.
- Prerequisites
- MTCNA certificate.
- Duration
- 2 days (suggested in the official outline; trainers may adjust)
- Format
- Classroom with hands-on labs; online theory possible by agreement
- Next class
- To be announced
Course overview
MTCUME is a engineer-level MikroTik certification course focused on user & access management. It builds on the MTCNA foundation and goes deep into one area of RouterOS. Each module is taught with live demonstrations and finishes with a hands-on lab, and the course ends with the official MikroTik certification exam.
Who this course is for
Network engineers and technicians who deploy and support large corporate networks.
Main learning areas
- PPP profiles & secrets
- PPTP & L2TP
- PPPoE servers
- Tunnel bridging & MLPPP
- IPsec
- HotSpot
- RADIUS & User Manager
Course outline
7 modules · 24 topic groups · Checked against official outline
PPP4 items
- Profiles: addressing, filters, address lists, TCP MSS, encryption, timeouts, rate limits, single sessions
- Secrets: service, profile, addressing, routes and traffic limits
- IP pools and pool chaining
- Hands-on lab
PPTP and L2TP4 items
- How PPTP and L2TP compare
- Client setup: profiles, dial-on-demand, default and static routes
- Server setup: profiles, client secrets and static interfaces
- Hands-on lab
PPPoE5 items
- Where PPPoE fits and how it compares with other PPP protocols
- Client and server configuration, service names and profiles
- Hardening the server interface; profiles with and without encryption
- ECMP routes over PPP interfaces
- Hands-on lab
Layer 2 over Tunnels3 items
- Bridging with L2TP and EoIP, L2TP and VPLS, L2TP and BCP
- Multilink PPP (MRRU) and MLPPP with PPPoE
- Hands-on lab
IPsec5 items
- IPsec concepts compared with other VPNs
- Peers, policies and proposals: authentication, algorithms, NAT traversal, lifetimes, DPD and PFS
- Installed SAs and flushing them
- Building and verifying an IPsec link across NAT
- Hands-on lab
HotSpot6 items
- HotSpot concepts and default setup
- Login methods, including HTTP, MAC, cookie, HTTPS, trial and RADIUS
- Users, MAC binding, uptime and byte limits
- Monitoring hosts and active users; user profiles
- Bypass, walled garden and IP bindings; custom pages
- Hands-on lab
RADIUS4 items
- RouterOS as a RADIUS client for specific services
- User Manager as a RADIUS server: routers, users and profiles
- Incoming RADIUS
- Hands-on lab
About this outline. This is an original summary of the topics in MikroTik’s official MTCUME training outline, written for this site — it is not the official wording. Trainers may adjust depth and timing.
Official source: MikroTik MTCUME training outline · document last edited 10 May 2011 · reviewed 25 Oct 2026. Course list and rules: mikrotik.com/training/about.
Training format
Classes are trainer-led with a practical lab at the end of every module. MikroTik’s training rules describe courses as classroom-based; the theory part may be delivered online when the trainer and participants agree, while the practical part and certification exam stay in the classroom. Session-specific details — dates, venue, language and fee — are listed on each class page.
The certification exam follows MikroTik’s published rules (25 questions, 60 minutes, 60% to pass). Certificates are valid for three years.
Upcoming MTCUME classes
No MTCUME dates announced yet.
Register your interest below and you will be contacted when the next batch is confirmed.
Frequently asked questions
Is this the official MikroTik website?
No. This is an independent training site run by a MikroTik Certified Trainer. Course topics are summarised from MikroTik’s official outline, linked above.