Level 2 · Intermediate

MTCSWE

MikroTik Certified Switching Engineer

In-depth Layer 2 switching — VLANs, STP/MSTP, LACP, CRS switch chip, port security. Campus network design with MikroTik Cloud Router Switch.

3 days 100% instructor-led Level 2 Requires: MTCNA

Who is this course for?

Campus/enterprise network engineer

Design VLAN topology, STP/MSTP, trunk links for large-scale campus networks on MikroTik CRS.

Data center infrastructure engineer

Deploy link aggregation (LACP), QinQ, jumbo frames, port mirroring for server switching infrastructure.

ISP access layer engineer

Manage customer VLANs, DHCP snooping, storm control, 802.1X on access switches for subscriber management.

Learning Outcomes

01 Master RouterOS Layer 2 forwarding software and RouterBOARD switch chip features
02 Configure VLANs with 802.1Q and 802.1ad (QinQ)
03 Deploy STP/MSTP to prevent switching loops
04 Configure link aggregation (bonding)
05 Set up Layer 2 security: DHCP snooping, 802.1X, loop protect
06 Manage PoE and SwOS on RouterBOARDs

Curriculum

01

Introduction

Lab

L2 forwarding concepts, bridge and switch chip overview

+
  • Layer 2 forwarding concepts
  • RouterOS bridge overview
  • RouterBOARD switch chip overview
  • SwitchOS (SwOS) brief overview
02

MTU

Lab

MTU, L2MTU, jumbo frames, potential issues

+
  • MTU concepts
  • L2MTU
  • Jumbo frames
  • Potential MTU issues
03

VLAN

Lab

802.1Q, 802.1ad, bridge VLAN filtering, QinQ

+
  • 802.1Q and 802.1ad VLAN overview
  • VLAN tagging concepts
  • RouterOS VLAN interfaces
  • VLANs in basic switch chips
  • VLANs in bridge interfaces
  • QinQ (802.1ad) implementation
04

Spanning Tree Protocol

Lab

STP, MSTP, BPDU, spanning tree security

+
  • Spanning Tree Protocol (STP) concepts
  • Multiple Spanning Tree (MSTP) concepts
  • Bridge Protocol Data Unit (BPDU)
  • Spanning tree security
05

Link Aggregation

Lab

RouterOS bonding, static link aggregation

+
  • RouterOS bonding configuration
  • Compatibility with other static link aggregation
  • Bonding modes and load balancing
06

Port Isolation

Lab

Bridge horizon, switch port isolation

+
  • RouterOS bridge horizon
  • Switch port isolation
07

QoS

Lab

Layer 2 QoS (802.1p), traffic shaping

+
  • Layer 2 QoS (802.1p)
  • Traffic shaping at Layer 2
08

Layer 2 Security

Lab

IGMP/DHCP snooping, loop protect, 802.1X

+
  • IGMP snooping
  • DHCP snooping
  • Loop protect
  • Traffic storm control
  • Layer 2 firewall
  • BPDU guard
  • ARP modes
  • Port security
  • 802.1X authentication
  • Switch security
09

PoE

Lab

RouterOS PoE modes, priority, monitoring

+
  • RouterOS PoE modes and compatibility
  • PoE priority settings
  • PoE monitoring
10

Tools

Lab

L2 diagnostic tools, port mirroring

+
  • Layer 2 diagnostic tools
  • Port mirroring configuration
11

SwOS

Lab

SwitchOS introduction, dual-boot, configuration

+
  • Introduction to SwOS
  • RouterBOARD dual-boot compatibility
  • Installing and managing SwOS
  • Configuration of Layer 2 features with SwOS

A Training Day at TNA

09:00
Theory — Layer 2 forwarding, bridge vs switch chip Theory
10:00
Lab — VLAN configuration, trunk links Lab
10:30
Break (coffee, tea, water) Break
10:45
Theory — STP/MSTP, loop prevention Theory
11:45
Lab — STP topology, root bridge election Lab
12:30
Lunch (included in course) Break
13:30
Theory — link aggregation, Layer 2 security Theory
14:30
Lab — bonding, DHCP snooping, port security Lab
15:00
Break Break
15:15
Theory + lab — PoE, SwOS, diagnostic tools Theory
16:45
Day recap, open Q&A Theory
17:00
End Break

* Illustrative schedule for a typical day. Actual timing may adjust based on class progress.

Prerequisites

Required knowledge

Valid MTCNA certificate. Basic understanding of Layer 2 networking.

Valid MTCNA certificate

What to bring

  • - Laptop with Ethernet (RJ45) port and WiFi
  • - WinBox installed (download from mikrotik.com/download)
  • - USB-to-Ethernet adapter if laptop lacks RJ45 port

Language

Instruction in Vietnamese. Materials and exam in English. Trainer provides bilingual Vietnamese-English support for technical terminology.

Included in the course

  • MikroTik CRS switch equipment per student throughout the course
  • Official MikroTik training materials (English)
  • Lunch and continuous refreshments (coffee, tea, water, snacks)
  • 1 MikroTik certification exam voucher + 1 free retake
  • Post-course technical support via community group

Exam & Certification

MTCSWE Certification Exam

Format
25 single/multiple-choice questions
Duration
60 minutes
Method
Online via MikroTik website, supervised in-class
Allowed resources
Notes, printouts, WinBox/config interface, official MikroTik docs, wiki, IP calculator
Timing
Immediately after course completion
Retake
1 free retake within training period

Certification

  • -International MikroTik certification, globally recognized
  • -Validity: 3 years from exam date
  • -Renewal: Retake exam to extend by 3 years

Tier 2 Benefits

  • -MikroTik Consultants Directory listing (visible on Google)
  • -Eligible to become a MikroTik Authorized Dealer
  • -Eligible for Train-the-Trainer program
  • -MikroTik Latvia refers customers to nearest consultant

Next Steps

  • -Combine with other Level 2 certifications to broaden expertise

Trainer

Nikita Tarikin

MikroTik Trainer Candidate

MTCNA 100% MTCSE 98% MTCRE 94% MTCUME 94% MTCWE 92% MTCIPv6E 92% MTCTCE 86%

Average: 94% — 7 certifications

Verify at mikrotik.com

TNA training team has experience deploying MikroTik CRS switching for campus networks and ISP access layers in Vietnam. The course combines official MikroTik curriculum with real-world deployment case studies.

10,400+ community members on Facebook

Certification Path

MTCSWE builds the Layer 2 foundation — combine with MTCRE (routing) to complete Layer 2 + Layer 3 skills

Frequently Asked Questions

How is MTCSWE different from the bridging section in MTCNA? +
MTCNA only introduces basic bridging and simple VLANs. MTCSWE dives deep into the entire switching system: bridge VLAN filtering, QinQ (802.1ad), STP/MSTP, link aggregation, Layer 2 security, PoE management, and CRS switch chip hardware offloading.
How is the CRS switch chip different from software bridge? +
Software bridge processes via CPU — limited speed. CRS switch chip handles Layer 2 via hardware (ASIC) — wire-speed switching, no CPU load. The course teaches when to use hardware offloading and limitations of each switch chip type.
Is MTCNA a mandatory prerequisite? +
Yes. A valid MTCNA certificate (not expired, within 3 years) is a mandatory requirement set by MikroTik. No exceptions.
Do I need my own MikroTik CRS equipment? +
No. MikroTik CRS switch equipment is provided per student throughout the course. You only need to bring a laptop with WinBox installed.
Which certification should I take after MTCSWE? +
MTCRE (routing) to combine Layer 2 switching with Layer 3 routing — VLAN inter-routing, OSPF on MikroTik CRS. Or MTCSE (security) to protect switching infrastructure with port security and ACLs.

Contact us for schedule and pricing

Telegram @tarikin
Zalo +84 342 208 001
Email hello@tarikin.vn

Community: 10,400+ network engineers on Facebook

Suggested Reading

  • · Layer 2 networking fundamentals
  • · Bridging and switching concepts
  • · VLAN and 802.1Q standard
  • · Spanning Tree Protocol basics