MTCUME – MikroTik Certified User Management Engineer (2-Day Training)

MTCUME – MikroTik Certified User Management Engineer

2-Day Hands-On Training

This instructor-led course focuses on securely managing large-scale RouterOS-based networks using centralized user management technologies.

The course is highly practical and lab-driven.

Course Outcomes

By the end of this training, students will be able to:

• Deploy and manage PPP-based user access

• Implement secure VPN solutions

• Configure HotSpot user authentication

• Integrate RouterOS with RADIUS and User Manager

Course Modules

Module 1 – PPP Fundamentals (LAB)

• PPP profiles

• Local & remote addresses

• Incoming & outgoing filters

• Address lists

• TCP MSS adjustment

• Encryption options

• Session timeout

• Rate-limit configuration

• Only-one setting

PPP Secrets

• Service & profile

• Local & remote addresses

• Route configuration

• Limit Bytes In / Out

• IP pools

• Address ranges & next pool options

Module 2 – PPTP & L2TP (LAB)

Theory & Comparison

PPTP Client

• Client setup

• Profiles

• Dial-on-demand

• Default & static routes

PPTP Server

• Server enablement

• Profiles

• PPP secrets

• Static interfaces

L2TP Client

• Client setup

• Profiles

• Dial-on-demand

• Routing

L2TP Server

• Server enablement

• Profiles

• PPP secrets

• Static interfaces

Module 3 – PPPoE (LAB)

• PPPoE theory & use cases

• Comparison with other PPP protocols

PPPoE Client

• Interface selection

• Service name

• Profile configuration

PPPoE Server

• Server enablement

• Profiles

• PPP secrets

• Static interfaces

• Server hardening (no IP on server interface)

Security & Advanced

• Encryption vs non-encryption profiles

• ECMP for PPP interfaces

• MLPPP (optional)

Module 4 – Bridging over PPP (LAB)

• L2TP + EoIP

• L2TP + VPLS

• L2TP + BCP

• Bridge creation & interface assignment

Advanced

• Multilink Protocol (MRRU)

• MSS adjustment considerations

• MLPPP configuration

Module 5 – IPsec (LAB)

• IPsec theory & concepts

• Comparison with other VPN protocols

Peers

• Authentication methods

• Exchange modes

• Encryption & hashing

• NAT-Traversal

• Lifetimes & DPD

Policies & Proposals

• Dynamic policies

• Algorithms

• PFS

• Installed SA & SA flush

Hands-On

• IPsec between two routers with NAT

• Peer, policy & NAT rules

• Secure tunnel verification

Module 6 – HotSpot (LAB)

• HotSpot concepts & use cases

• Default HotSpot setup

Authentication Methods

• HTTP (CHAP / PAP)

• MAC

• Cookie

• HTTPS

• Trial

• RADIUS

User Management

• Users & MAC binding

• Uptime & byte limits

• Reset limits

• Monitoring (host & active tables)

• SNMP integration

Profiles & Control

• Rate limits

• Address lists

• Packet marking

• Filters

Customization

• Walled garden

• IP bindings

• Advertisements

• Custom login pages

Module 7 – RADIUS & User Manager (LAB)

• RADIUS client configuration

• Services integration

User Manager

• Installation

• Router integration

• User creation

• Profiles

• RADIUS incoming requests

Schedule

• Time: 9:00 AM – 5:00 PM

• Morning break: 10:30 AM (30 min)

• Lunch: 12:00 – 1:00 PM (included)

• Afternoon break: 3:00 PM (30 min)

Exam

• Day 2, after class

• 25 questions, open-book

• Passing score: 60%

Successful students receive an official MikroTik digital certificate.
Printed certificates available separately via MikroTik.

Prerequisites

• MTCNA certification (required)

Target Audience

• Network engineers

• Network technicians

• IT professionals managing large-scale RouterOS networks

Training Location

Unit 13, 20 Seelcase Road West
Markham, Ontario, Canada

Early Bird

30% discount for registrations completed 30 days before course start.