Level 2 · Intermediate

MTCTCE

MikroTik Certified Traffic Control Engineer

The most critical course for advanced router architecture — packet flow, mangle, HTB queues. Understand why configurations work, not just how to configure them.

3 days 100% instructor-led Level 2 Requires: MTCNA

Who is this course for?

QoS engineer at ISP/WISP

Bandwidth allocation, fair queuing, burst policies for subscriber tiers — PCQ, HTB tree, queue types.

Enterprise network engineer

Traffic classification, priority queuing for VoIP/video, firewall optimization based on packet flow diagram.

NOC / operations engineer

Packet flow troubleshooting, mangle mark debugging, queue monitoring — essential skills for infrastructure operations.

Learning Outcomes

01 Manage network quality of service using RouterOS queues, firewall, and other features
02 Understand and analyze the RouterOS packet flow diagram
03 Configure HTB queues with dual limitation and priority
04 Deploy mangle and packet marking for traffic classification
05 Configure advanced DHCP including relay and custom options
06 Set up web proxy with access control lists

Curriculum

01

Packet Flow Diagram

Lab

RouterOS packet flow: routing, bridging, connection to router

+
  • Necessity of the packet flow diagram
  • Full packet flow overview
  • Simple examples: routing, bridging
  • Complex examples: connection to router
02

Firewall Filter, NAT, Mangle

Lab

Connection tracking, filter, NAT, mangle chains

+
  • Connection tracking
  • Filter: chains, actions, conditions
  • NAT: chains, actions, conditions, helpers
  • Mangle: chains, actions, conditions
  • Complex rule conditions
  • UPnP
03

Quality of Service

Lab

HTB, burst, queue types, simple queues vs queue tree

+
  • HTB: general information, implementation, structure
  • Dual limitation
  • Priority
  • Burst configuration and tuning
  • Queue types: FIFO, SFQ, RED, PCQ
  • Queue size
  • Simple queues
  • Interaction between Simple queue and Queue tree
04

DNS Client, Cache

Lab

DNS configuration and static entries

+
  • Basic DNS configuration
  • Static DNS entries
05

DHCP Client, Relay, Server

Lab

Advanced DHCP: communication analysis, options, relay

+
  • DHCP communication analysis
  • DHCP client identification and configuration
  • DHCP server configuration: networks, options, IP Pool
  • Advanced DHCP features
  • DHCP relay configuration
06

Web Proxy

Lab

Proxy configuration, rule lists, regex

+
  • Basic web proxy configuration
  • Access list
  • Direct access list
  • Cache list
  • Regular expressions in proxy rules

A Training Day at TNA

09:00
Theory — packet flow diagram, traffic control concepts Theory
10:00
Lab — packet flow analysis on real hardware Lab
10:30
Break (coffee, tea, water) Break
10:45
Theory — advanced firewall/mangle, connection tracking Theory
11:45
Lab — combined mangle + queue exercise Lab
12:30
Lunch (included in course) Break
13:30
Theory — next module Theory
14:30
Lab — HTB tree design for real-world scenarios Lab
15:00
Break Break
15:15
Theory + lab — final module of the day Theory
16:45
Day recap, open Q&A Theory
17:00
End Break

* Illustrative schedule for a typical day. Actual timing may adjust based on class progress.

Prerequisites

Required knowledge

Valid MTCNA certificate. Strong understanding of basic firewall and routing.

Valid MTCNA certificate

What to bring

  • - Laptop with Ethernet (RJ45) port and WiFi
  • - WinBox installed (download from mikrotik.com/download)
  • - USB-to-Ethernet adapter if laptop lacks RJ45 port

Language

Instruction in Vietnamese. Materials and exam in English. Trainer provides bilingual Vietnamese-English support for technical terminology.

Included in the course

  • ✓ MikroTik RouterBOARD equipment per student throughout the course
  • ✓ Official MikroTik training materials (English)
  • ✓ Lunch and continuous refreshments (coffee, tea, water, snacks)
  • ✓ 1 MikroTik certification exam voucher + 1 free retake
  • ✓ Post-course technical support via community group

Exam & Certification

MTCTCE Certification Exam

Format
25 single/multiple-choice questions
Duration
60 minutes
Method
Online via MikroTik website, supervised in-class
Allowed resources
Notes, printouts, WinBox/config interface, official MikroTik docs, wiki, IP calculator
Timing
Immediately after course completion
Retake
1 free retake within training period

Certification

  • -International MikroTik certification, globally recognized
  • -Validity: 3 years from exam date
  • -Renewal: Retake exam to extend by 3 years
Trainer score: 86%

Tier 2 Benefits

  • -MikroTik Consultants Directory listing (visible on Google)
  • -Eligible to become a MikroTik Authorized Dealer
  • -Eligible for Train-the-Trainer program
  • -MikroTik Latvia refers customers to nearest consultant

Next Steps

  • -Combine with other Level 2 certifications to broaden expertise

Trainer

Nikita Tarikin

MikroTik Trainer Candidate

MTCNA 100% MTCSE 98% MTCRE 94% MTCUME 94% MTCWE 92% MTCIPv6E 92% MTCTCE 86%

Average: 94% — 7 certifications

Verify at mikrotik.com

Trainer scored 86% on the MTCTCE exam. Experience implementing QoS policies for ISP subscriber management and enterprise traffic prioritization in Vietnam.

10,400+ community members on Facebook

Certification Path

Combine MTCTCE with other Level 2 certifications to broaden traffic control expertise

★ MTCNA Basic
MTCNA — Network Associate
MikroTik Certified Network Associate · 4 days
RouterOSFirewallWirelessQoSVPN
Trainer: 100%
ROUTING
MTCRE
MTCRE — Routing Engineer
3 days · Requires: MTCNA
OSPFVPNVLANStatic Routing
Trainer: 94%
MTCINE Extended
MTCINE — InterNetworking Engineer
3 days · Requires: MTCNA + MTCRE
BGPMPLSVPLS
SECURITY
MTCSE
MTCSE — Security Engineer
3 days · Requires: MTCNA
FirewallCryptographyIPsecOSI Attacks
Trainer: 98%
TRAFFIC CONTROL
MTCTCE
MTCTCE — Traffic Control Engineer
3 days · Requires: MTCNA
HTBQoSManglePacket Flow
Trainer: 86%
WIRELESS
MTCWE
MTCWE — Wireless Engineer
3 days · Requires: MTCNA
802.11NstremeWDSWiFi Security
Trainer: 92%
MTCEWE
MTCEWE — Enterprise Wireless Engineer
3 days · Requires: MTCNA
CAPsMANRFSite SurveyEnterprise WiFi
SWITCHING
MTCSWE
MTCSWE — Switching Engineer
3 days · Requires: MTCNA
VLANSTPSwOSL2 Security
USER MANAGEMENT
MTCUME
MTCUME — User Management Engineer
3 days · Requires: MTCNA
HotSpotRADIUSPPPoEIPsec
Trainer: 94%
IPV6
MTCIPv6E
MTCIPv6E — IPv6 Engineer
3 days · Requires: MTCNA
IPv6Dual-stackNDPDHCPv6
Trainer: 92%
Trainer
MikroTik Certified Trainer
MikroTik Certified Trainer
⬥ MTCNA + any Level 2 certification

Frequently Asked Questions

How is MTCTCE different from the QoS section in MTCNA? +
MTCNA only introduces basic simple queues. MTCTCE dives deep into the entire traffic control system: packet flow diagram, HTB queue tree, mangle marking, connection tracking, and advanced DNS/DHCP/web proxy. This is the course where you truly understand how the router processes each packet.
Is the packet flow diagram really that important? +
The packet flow diagram is the foundation of every firewall, mangle, and queue decision. Not understanding packet flow = guesswork when writing rules. Engineers who understand packet flow can debug any configuration — engineers who don't just copy-paste rules and hope they work.
Is MTCNA a mandatory prerequisite? +
Yes. A valid MTCNA certificate (not expired, within 3 years) is a mandatory requirement set by MikroTik. No exceptions.
What knowledge should I prepare? +
Solid understanding of firewall basics from MTCNA — filter chains (input/forward/output), NAT (srcnat/dstnat), connection states. Clear understanding of differences between chains and when packets traverse which chain.
What should I study after MTCTCE? +
MTCRE (routing) to complement with routing skills, or MTCSE (security) to combine traffic control with security hardening. Both leverage packet flow knowledge from MTCTCE.
Does the content apply to RouterOS v7? +
The course covers both RouterOS v6 and v7. The packet flow diagram has changes between versions — the trainer analyzes differences in detail and how to migrate traffic control configurations from v6 to v7.

Contact us for schedule and pricing

Telegram @tarikin
Zalo +84 342 208 001
Email hello@tarikin.vn

Community: 10,400+ network engineers on Facebook

Next Courses

MTCRE Intermediate

MTCRE — Routing Engineer

Advanced routing — OSPF, MPLS, VPN, routing filters. Design and deploy complex routing infrastructure.

3 days Req: MTCNA 94%
MTCSE Intermediate

MTCSE — Security Engineer

In-depth network security — advanced firewall, IPsec, attack mitigation. Protect network infrastructure from threats.

3 days Req: MTCNA 98%

Suggested Reading

  • · RouterOS packet flow diagram (wiki.mikrotik.com)
  • · HTB (Hierarchical Token Bucket) theory
  • · QoS fundamentals: FIFO, SFQ, RED, PCQ
  • · Mangle and connection marking concepts