MIKROTIK CERTIFIED NETWORK
ASSOCIATE
COURSE DESCRIPTION:
This course covers the key features of RouterOS in wired and wireless
networks. It includes many practical exercises on RouterBOARD.
Successful MTCNA certification is required for engineer level
certifications.
By the end of this training session, the student will be familiar with
RouterOS software and RouterBOARD products and be able to connect
the client to the Internet. He will also be able to configure, manage, do
basic troubleshooting of a MikroTik router and provide basic services to
clients.
Duration:
4 days
Training materials:
Bring your laptop with ethernet
port (MS Windows is advised for
Winbox). Check the details for
particular training to see if you
need to bring other equipment.
The training materials are provided.
Audience:
Network
engineers
and
technicians wanting to deploy
and support:
 Corporate networks
 Client CPEs (WISPs
and ISPs)
Certification exam
The Certification exam is included in the training and will
take place on the last day.
Prerequisites:
The student must have a good
understanding of TCP/IP and
subnetting.
1
COURSE SYLLABUS
MODULE 1. INTRODUCTION














About MikroTik
 What is RouterOS
 What is RouterBoard
First time accessing the router
 WinBox and MAC-WinBox
 WebFig and Quick Set
 Default configuration
RouterOS command line interface (CLI)
 Null Modem cable
 SSH and Telnet
 New terminal in WinBox/WebFig
RouterOS CLI principles
 <tab>, double <tab>, “?”, navigation
 command history and its benefits
Initial configuration (Internet access)
 WAN DHCP-client
 LAN IP address and default gateway
 Basic Firewall - NAT masquerade
Upgrading RouterOS
 Package types
 Ways of upgrading
 RouterBOOT firmware upgrade
Router identity
Manage RouterOS logins
Manage RouterOS services
Managing configuration backups
 Saving and restoring the backup
 Difference between a backup and an export (.rsc) file
 Editing an export file
Resetting a RouterOS device
Reinstalling a RouterOS device (Netinstall)
RouterOS license levels
Sources of additional information
 wiki.mikrotik.com
 forum.mikrotik.com
 mum.mikrotik.com
2

 Distributor and consultant support
 support@mikrotik.com
Module 1 laboratory
MODULE 2. DHCP



DHCP server and client
 DHCP client
 DHCP server setup
 Leases management
 DHCP server network configuration
Address Resolution Protocol (ARP)
 ARP modes
 RouterOS ARP table
Module 2 laboratory
MODULE 3. BRIDGING



Bridging overview
 Bridge concepts and settings
 Creating bridges
 Adding ports to bridges
Bridge wireless networks
 Station bridge
Module 3 laboratory
MODULE 4. ROUTING



Routing overview
 Routing concepts
 Route flags
Static routing
 Creating routes
 Setting default route
 Managing dynamic routes
 Implementing static routing in a simple network
Module 4 laboratory
MODULE 5. WIRELESS


802.11a/b/g/n/ac Concepts
 Frequencies (bands, channels) data-rates / chains (tx power, rx sensitivity, country regulations)
Setup a simple wireless link
 Access Point configuration
 Station configuration
3



Wireless Security and Encryption
 Access List
 Connect List
 Default Authenticate
 Default Forward
 WPA-PSK, WPA2-PSK
 WPS accept, WPS client
Monitoring Tools
 Snooper
 Registration table
Module 5 laboratory
MODULE 6. FIREWALL







Firewall principles
 Connection tracking and states
 Structure, chains and actions
Firewall Filter in action
 Filter actions
 Protecting your router (input)
 Protection your customers (forward)
Basic Address-List
Source NAT
 Masquerade and src-nat action
Destination NAT
 dst-nat and redirect action
FastTrack
Module 6 laboratory
MODULE 7. QOS



Simple Queue
 Target
 Destinations
 Max-limit and limit-at
 Bursting
One Simple queue for the whole network (PCQ)
 pcq-rate configuration
 pcq-limit configuration
Module 7 laboratory
MODULE 8. TUNNELS

PPP settings
 PPP profile
4





 PPP secret
 PPP status
IP pool
 Creating pool
 Managing ranges
 Assigning to a service
Secure local network
 PPPoE service-name
 PPPoE client
 PPPoE server
Point-to-point addresses
Secure remote networks communication
 PPTP client and PPTP server (Quick Set)
 SSTP client
Module 8 laboratory
MODULE 9. MISC




RouterOS tools
 E-mail
 Netwatch
 Ping
 Traceroute
 Profiler (CPU load)
Monitoring
 Interface traffic monitor
 Torch
 Graphs
 SNMP
 The Dude
Contacting support@mikrotik.com
 supout.rif, autosupout.rif and viewer
 System logs, enabling debug logs
 readable configuration (item comments and names)
 network diagrams
Module 9 laboratory
5