Training details:

MTCUME is second - engineering lever course from MikroTik In this training course students will learn how to use MikroTik features to manage user authentication in protocols like: PPPoE, PPTP or HotSpot. Information learned during this course may help ISP to authenticate own users to give access to network or to authenticate HotSpot Users on Captive Portal HotSpot Pages

Target audience:

  • Internet service providers
  • HotSpot Integrators
  • VPN system admins

Course prerequisites:

The student must have MTCNA certificate (expired ones are also acceptable)


After training student can attempt official MikroTik Exam and get MikroTik certificate

Training agenda:


  • PPP Profile
    • Local and remote addresses
    • Incoming and outgoing filters
    • Address list
    • Change TCP-MSS
    • Use encryption
    • Session timeout
    • Rate-limit configuration
    • Only-one setting
  • PPP Secret
    • Service and Profile
    • Local and Remote address
    • Routes configuration
    • Limit Bytes In/Limit Bytes Out configuration
  • IP Pool
    • Set addresses ranges
    • Next pool options


  • PPTP and L2TP
    • Theory
    • Comparison
  • PPTP Client configuration
    • Client setup
    • Set profile
    • Dial on demand
    • Add default route and static routes
  • PPTP Server configuration
    • Enable server
    • Setup profiles
    • Add clients to PPP secret
    • Set static interfaces for clients
  • L2TP Client configuration
    • Client setup
    • Configure profile
    • Dial on demand
    • Add default route and static routes
  • L2TP Server configuration
    • Enable server
    • Set profiles
    • Add clients to PPP secret
    • Set Static interfaces for clients


  • PPPoE server and client
    • Theory
    • Usage environment
    • Comparison to other PPP protocols
  • PPPoE client configuration
    • Client setup
    • Select interface
    • Service name
    • Configure profile
  • PPPoE Server configuration
    • Enable PPPoE server
    • Set profiles
    • Add clients to PPP secret
    • Add Static interfaces for clients
    • Secure server by removing any IP address from PPPoE server interface
  • Encryption
    • Set profile without encryption
    • Set profile with encryption
    • Configure PPPoE client without encryption
  • Interface ECMP
    • Set ECMP routes for PPP interfaces


    • L2TP and EoIP
      • Set L2TP tunnel
      • Set EoIP tunnel
      • Create bridge and add necessary interfaces to ports
      • Confirm you have Ethernet connectivity between remote nodes
    • L2TP and VPLS
      • Set L2TP tunnel
      • Set VPLS tunnel
      • Create bridge and add necessary interfaces to ports
    • L2TP and BCP
      • Set L2TP tunnel
      • Use BCP to bridge PPP interface
      • Add to bridge necessary interface
    • Multilink Protocol
      • Enable multilink by specifying correct MRRU settings
      • Disable mangle rules for MSS adjustment
    • MLPPP (optional)
      • Setup client and specify multiple interfaces for one client
      • Set PPPoE server with MLPPP support


  • Introduction
    • Theory and concepts
    • Comparison to other VPN protocols
  • IPSec Peer
    • Use different authentication methods
    • IPSec exchange modes
    • Encryption and hash algorithms
    • NAT-Traversal
    • Lifetime and lifebytes
    • DPD protocol
  • Policy
    • IPSec protocol and action
    • Tunnels
    • Generate dynamic Policy
  • Proposal
    • Encryption and authentication algorithms
    • Lifetime
    • PFS
  • Installed-SA
    • Flush SA
  • Create IPSec between two routers with NAT
    • Set peer
    • Set policy
    • Set NAT rules
    • Confirm the secure link is established


  • Firewall principles
  • Firewall Filter in action
  • Basic Address-List
  • Source NAT
  • Destination NAT
  • FastTrack


  • Simple Queue
  • One Simple queue for the whole network (PCQ)


  • PPP settings
  • IP pool
  • Secure local network (PPPoE)
  • Point-to-point addresses
  • Secure remote networks communication (PPTP, SSTP)


  • RouterOS tools
  • Monitoring
  • Contacting

Not scheduled?

Want to participate, but training is not scheduled? Fill your contact details below and we will consider organize another event


MikroTik Training courses offered by IP-PRO


Ubiquiti Training courses offered by IP-PRO