Level 1 · Foundation

MTCNA

MikroTik Certified Network Associate

Mandatory foundation for the entire MikroTik certification system. 9 modules, each ending with a hands-on lab on real hardware.

4 days 100% instructor-led Level 1

Who is this course for?

Enterprise network engineer

Master MikroTik router configuration for corporate networks — firewall, NAT, DHCP, QoS.

ISP/WISP technician

Deploy and manage MikroTik equipment for Internet service providers — PPPoE, queuing, monitoring.

System administrator

Add specialized networking skills for administrators managing enterprise IT infrastructure.

Engineers switching from Cisco/Juniper

Translate routing/switching knowledge to the MikroTik RouterOS ecosystem — CLI, WinBox, data structure.

Learning Outcomes

01 Be familiar with RouterOS software and RouterBOARD products
02 Connect clients to the Internet
03 Configure, manage, and perform basic troubleshooting of a MikroTik router
04 Provide basic services to clients
05 Configure DHCP, firewall, NAT, wireless, and QoS
06 Set up and manage basic VPN connections (PPPoE, PPTP, SSTP)
07 Use RouterOS monitoring and troubleshooting tools

Curriculum

01

Introduction

Lab

RouterOS, WinBox, CLI, cấu hình ban đầu

+
  • What is RouterOS / What is RouterBOARD
  • WinBox and MAC-WinBox
  • WebFig and Quick Set
  • Default configuration
  • CLI via Null Modem, SSH, Telnet, new terminal
  • CLI principles: tab completion, ?, navigation, command history
  • Initial config: WAN DHCP-client, LAN IP, default gateway, NAT masquerade
  • Upgrading RouterOS: package types, upgrade methods, RouterBOOT firmware
  • Router identity
  • Managing RouterOS logins and services
  • Backups: save/restore, backup vs export (.rsc), editing export files
  • Resetting and reinstalling (Netinstall)
  • RouterOS license levels
  • Additional resources: wiki, forum, MUM, support@mikrotik.com
02

DHCP

Lab

DHCP server/client, leases, ARP

+
  • DHCP client configuration
  • DHCP server setup
  • Leases management
  • DHCP server network configuration
  • Address Resolution Protocol (ARP)
  • ARP modes
  • RouterOS ARP table
03

Bridging

Lab

Bridge, wireless networks, station bridge

+
  • Bridge concepts and settings
  • Creating bridges
  • Adding ports to bridges
  • Bridge wireless networks
  • Station bridge mode
04

Routing

Lab

Static routing, default route

+
  • Routing concepts and overview
  • Route flags
  • Creating static routes
  • Setting default route
  • Managing dynamic routes
  • Implementing static routing in a simple network
05

Wireless

Lab

802.11, access point, security, monitoring

+
  • 802.11a/b/g/n/ac concepts
  • Frequencies, bands, channels, data-rates, chains
  • TX power, RX sensitivity, country regulations
  • Access Point configuration
  • Station configuration
  • Access List and Connect List
  • Default Authenticate and Default Forward
  • WPA-PSK, WPA2-PSK encryption
  • WPS accept and WPS client
  • Snooper and Registration table monitoring
06

Firewall

Lab

Connection tracking, filter, NAT, FastTrack

+
  • Firewall principles
  • Connection tracking and states
  • Structure, chains and actions
  • Filter actions
  • Protecting the router (input chain)
  • Protecting customers (forward chain)
  • Basic Address-List
  • Source NAT: masquerade and src-nat actions
  • Destination NAT: dst-nat and redirect actions
  • FastTrack
07

QoS

Lab

Simple queues, PCQ

+
  • Simple Queue: target, destinations
  • Max-limit and limit-at
  • Bursting
  • PCQ (Per Connection Queuing)
  • pcq-rate configuration
  • pcq-limit configuration
08

Tunnels

Lab

PPP, IP pools, PPPoE, PPTP/SSTP

+
  • PPP settings: profile, secret, status
  • IP pool: creating, managing ranges, assigning to service
  • Secure local network: PPPoE service-name, client, server
  • Point-to-point addresses
  • Secure remote communication: PPTP client/server (Quick Set)
  • SSTP client
09

Misc

Lab

Tools, SNMP, The Dude, troubleshooting

+
  • E-mail tool
  • Netwatch
  • Ping and Traceroute
  • Profiler (CPU load)
  • Interface traffic monitor
  • Torch
  • Graphs
  • SNMP
  • The Dude network monitor
  • Contacting support: supout.rif, autosupout.rif, viewer
  • System logs and debug logs
  • Readable configuration: comments and names
  • Network diagrams

A Training Day at TNA

09:00
Theory — module introduction, core concepts Theory
10:00
Lab — hands-on exercise on real hardware Lab
10:30
Break (coffee, tea, water) Break
10:45
Theory — deep dive, tips & tricks from production deployments Theory
11:45
Lab — real-world scenario exercise Lab
12:30
Lunch (included in course) Break
13:30
Theory — next module Theory
14:30
Lab — multi-feature configuration exercise Lab
15:00
Break Break
15:15
Theory + lab — final module of the day Theory
16:45
Day recap, open Q&A Theory
17:00
End Break

* Illustrative schedule for a typical day. Actual timing may adjust based on class progress.

Prerequisites

Required knowledge

Strong understanding of TCP/IP and subnetting. Recommended to take the example test at mikrotik.com before enrollment.

What to bring

  • - Laptop with Ethernet (RJ45) port and WiFi
  • - WinBox installed (download from mikrotik.com/download)
  • - USB-to-Ethernet adapter if laptop lacks RJ45 port

Language

Instruction in Vietnamese. Materials and exam in English. Trainer provides bilingual Vietnamese-English support for technical terminology.

Included in the course

  • ✓ MikroTik RouterBOARD equipment per student throughout the course
  • ✓ Official MikroTik training materials (English)
  • ✓ Lunch and continuous refreshments (coffee, tea, water, snacks)
  • ✓ 1 MikroTik certification exam voucher + 1 free retake
  • ✓ Post-course technical support via community group

Exam & Certification

MTCNA Certification Exam

Format
25 single/multiple-choice questions
Duration
60 minutes
Method
Online via MikroTik website, supervised in-class
Allowed resources
Notes, printouts, WinBox/config interface, official MikroTik docs, wiki, IP calculator
Timing
Immediately after course completion
Retake
1 free retake within training period

Certification

  • -International MikroTik certification, globally recognized
  • -Validity: 3 years from exam date
  • -Renewal: Retake exam to extend by 3 years
Trainer score: 100%

Tier 2 Benefits

  • -MikroTik Consultants Directory listing (visible on Google)
  • -Eligible to become a MikroTik Authorized Dealer
  • -Eligible for Train-the-Trainer program
  • -MikroTik Latvia refers customers to nearest consultant

Next Steps

  • -7 intermediate certs (Level 2) + 2 advanced certs (Level 3)
  • -Level 2: MTCRE, MTCSE, MTCTCE, MTCWE, MTCUME, MTCIPv6E, MTCSWE
  • -Level 3: MTCINE, MTCEWE

Trainer

Nikita Tarikin

MikroTik Trainer Candidate

MTCNA 100% MTCSE 98% MTCRE 94% MTCUME 94% MTCWE 92% MTCIPv6E 92% MTCTCE 86%

Average: 94% — 7 certifications

Verify at mikrotik.com

Trainer scored 100% on the MTCNA exam — perfect score across all 25 questions. Experience deploying MikroTik for enterprises and ISPs in Vietnam.

10,400+ community members on Facebook

Certification Path

After MTCNA — unlocks all 8 specialized Level 2 certifications

★ MTCNA Basic
MTCNA — Network Associate
MikroTik Certified Network Associate · 4 days
RouterOSFirewallWirelessQoSVPN
Trainer: 100%
ROUTING
MTCRE
MTCRE — Routing Engineer
3 days · Requires: MTCNA
OSPFVPNVLANStatic Routing
Trainer: 94%
MTCINE Extended
MTCINE — InterNetworking Engineer
3 days · Requires: MTCNA + MTCRE
BGPMPLSVPLS
SECURITY
MTCSE
MTCSE — Security Engineer
3 days · Requires: MTCNA
FirewallCryptographyIPsecOSI Attacks
Trainer: 98%
TRAFFIC CONTROL
MTCTCE
MTCTCE — Traffic Control Engineer
3 days · Requires: MTCNA
HTBQoSManglePacket Flow
Trainer: 86%
WIRELESS
MTCWE
MTCWE — Wireless Engineer
3 days · Requires: MTCNA
802.11NstremeWDSWiFi Security
Trainer: 92%
MTCEWE
MTCEWE — Enterprise Wireless Engineer
3 days · Requires: MTCNA
CAPsMANRFSite SurveyEnterprise WiFi
SWITCHING
MTCSWE
MTCSWE — Switching Engineer
3 days · Requires: MTCNA
VLANSTPSwOSL2 Security
USER MANAGEMENT
MTCUME
MTCUME — User Management Engineer
3 days · Requires: MTCNA
HotSpotRADIUSPPPoEIPsec
Trainer: 94%
IPV6
MTCIPv6E
MTCIPv6E — IPv6 Engineer
3 days · Requires: MTCNA
IPv6Dual-stackNDPDHCPv6
Trainer: 92%
Trainer
MikroTik Certified Trainer
MikroTik Certified Trainer
⬥ MTCNA + any Level 2 certification

Frequently Asked Questions

What level do I need before attending? +
Solid understanding of TCP/IP and subnetting. If you can calculate subnet masks for /24, /27, /30 — you're ready. Take the free example test at mikrotik.com to self-assess.
Why 4 days instead of the standard MikroTik 3 days? +
The official MikroTik training program requires a minimum of 3 days. TNA adds 1 day so that Vietnamese-language instruction has adequate time for terminology explanation, in-depth discussion, and extended lab exercises. Content is not shortened — on the contrary, we add tips & tricks from real-world deployments.
How does the exam work? +
25 single/multiple-choice questions, 60 minutes, taken online via MikroTik website in-class. You may use notes, WinBox, official MikroTik docs, wiki, IP calculator. Supervised by the trainer.
What if I fail? +
1 free retake within the training period. If you still don't pass, you can register for a retake via mikrotik.com for a small fee.
I've been self-studying MikroTik for a while — what's different about this course? +
The official MikroTik training program includes an international-standard curriculum, guided hands-on labs on real equipment, and a publicly verifiable certification at mikrotik.com. The trainer shares experience from production deployments, addresses specific scenarios, and teaches best practices not found in documentation. Many self-taught engineers discover important knowledge gaps during the course.
Where is the certification recognized? +
MikroTik certifications are globally recognized. Publicly verifiable at mikrotik.com by name and Certificate ID. Valid for 3 years. Certification enables listing on MikroTik Consultants Directory, becoming an authorized dealer, or joining the Train-the-Trainer program.
Do I need to bring a laptop? +
Yes. Laptop with Ethernet (RJ45) port and WiFi. If your laptop lacks an RJ45 port, bring a USB-to-Ethernet adapter. Pre-install WinBox from mikrotik.com/download.
What language is the course in? +
Instruction in Vietnamese. Materials and exam in English (MikroTik international standard). Trainer provides bilingual support for technical terminology.

Contact us for schedule and pricing

Telegram @tarikin
Zalo +84 342 208 001
Email hello@tarikin.vn

Community: 10,400+ network engineers on Facebook

Next Courses

MTCRE Intermediate

MTCRE — Routing Engineer

Advanced routing — OSPF, MPLS, VPN, routing filters. Design and deploy complex routing infrastructure.

3 days Req: MTCNA 94%
MTCSE Intermediate

MTCSE — Security Engineer

In-depth network security — advanced firewall, IPsec, attack mitigation. Protect network infrastructure from threats.

3 days Req: MTCNA 98%
MTCTCE Intermediate

MTCTCE — Traffic Control Engineer

Bandwidth and traffic management — HTB queues, burst, mangle, packet marking. Optimize network performance.

3 days Req: MTCNA 86%
MTCWE Intermediate

MTCWE — Wireless Engineer

In-depth wireless engineering — 802.11ac/ax, CAPsMAN, Nstreme, NV2, wireless PTP. Enterprise WiFi design.

3 days Req: MTCNA 92%
MTCUME Intermediate

MTCUME — User Management Engineer

User management — Hotspot, User Manager, RADIUS, PPP profiles. Build authentication and access management systems.

3 days Req: MTCNA 94%
MTCIPv6E Intermediate

MTCIPv6E — IPv6 Engineer

In-depth IPv6 — addressing, routing, firewall, transition mechanisms. Prepare infrastructure for the IPv6 future.

3 days Req: MTCNA 92%

Suggested Reading

  • · IPv4 tutorial and subnetting practice
  • · OSI 7-layer model
  • · TCP/IP protocol suite basics
  • · MikroTik example test at mikrotik.com