Level 2 · Intermediate

MTCUME

MikroTik Certified User Management Engineer

User management and authentication — PPPoE, Hotspot, RADIUS, User Manager. Build ISP systems with billing, vouchers, and subscriber management.

3 days 100% instructor-led Level 2 Requires: MTCNA

Who is this course for?

ISP/WISP engineer

Deploy PPPoE subscriber management systems — billing, bandwidth profiles, subscriber provisioning, RADIUS integration.

Hotel/hospitality network engineer

Build Hotspot captive portal systems — custom login pages, vouchers, time/bandwidth limits, walled garden.

Enterprise infrastructure engineer (RADIUS/802.1X)

Deploy 802.1X authentication with RADIUS for enterprises — network access control, VLAN assignment, accounting.

Learning Outcomes

01 Manage user authentication across multiple protocols: PPPoE, PPTP, L2TP, HotSpot
02 Configure HotSpot captive portal with walled garden and user profiles
03 Integrate RADIUS for authentication and accounting
04 Deploy MikroTik User Manager for centralized user management
05 Configure VPN with IPsec
06 Build ISP systems with billing and voucher management

Curriculum

01

PPP

Lab

PPP profiles, secrets, and advanced settings

+
  • PPP profiles configuration
  • PPP secrets management
  • PPP status monitoring
  • PPPoE server and client
  • PPTP server and client
  • L2TP server and client
  • TCP-MSS clamping
  • Bridging of PPP connections
02

DHCP

Lab

Advanced DHCP for user management

+
  • DHCP server for user networks
  • DHCP options for provisioning
  • IP pool management
  • Lease management and static leases
03

Hotspot

Lab

Captive portal, walled garden, user profiles

+
  • HotSpot setup and configuration
  • Captive portal customization
  • Walled garden settings
  • HotSpot user profiles
  • HotSpot server profiles
  • MAC and IP bindings
  • HotSpot cookies
04

RADIUS

Lab

RADIUS server integration and accounting

+
  • RADIUS protocol overview
  • RADIUS client configuration in RouterOS
  • RADIUS server integration
  • Authentication and accounting
  • VPN with IPsec and RADIUS
05

User Manager

Lab

MikroTik User Manager setup and management

+
  • User Manager installation and setup
  • User and customer management
  • Profile and limitation configuration
  • Voucher generation
  • Payment integration
  • Reports and monitoring

A Training Day at TNA

09:00
Theory — authentication architecture, PPPoE protocol Theory
10:00
Lab — PPPoE server deployment and subscriber profiles Lab
10:30
Break (coffee, tea, water) Break
10:45
Theory — Hotspot, captive portal, walled garden Theory
11:45
Lab — Hotspot portal customization, voucher system Lab
12:30
Lunch (included in course) Break
13:30
Theory — RADIUS protocol, User Manager Theory
14:30
Lab — RADIUS integration, User Manager billing setup Lab
15:00
Break Break
15:15
Theory + lab — final module of the day Theory
16:45
Day recap, open Q&A Theory
17:00
End Break

* Illustrative schedule for a typical day. Actual timing may adjust based on class progress.

Prerequisites

Required knowledge

Valid MTCNA certificate. Understanding of PPP and DHCP from the MTCNA course.

Valid MTCNA certificate

What to bring

  • - Laptop with Ethernet (RJ45) port and WiFi
  • - WinBox installed (download from mikrotik.com/download)
  • - USB-to-Ethernet adapter if laptop lacks RJ45 port

Language

Instruction in Vietnamese. Materials and exam in English. Trainer provides bilingual Vietnamese-English support for technical terminology.

Included in the course

  • MikroTik RouterBOARD equipment per student throughout the course
  • Official MikroTik training materials (English)
  • Lunch and continuous refreshments (coffee, tea, water, snacks)
  • 1 MikroTik certification exam voucher + 1 free retake
  • Post-course technical support via community group

Exam & Certification

MTCUME Certification Exam

Format
25 single/multiple-choice questions
Duration
60 minutes
Method
Online via MikroTik website, supervised in-class
Allowed resources
Notes, printouts, WinBox/config interface, official MikroTik docs, wiki, IP calculator
Timing
Immediately after course completion
Retake
1 free retake within training period

Certification

  • -International MikroTik certification, globally recognized
  • -Validity: 3 years from exam date
  • -Renewal: Retake exam to extend by 3 years
Trainer score: 94%

Tier 2 Benefits

  • -MikroTik Consultants Directory listing (visible on Google)
  • -Eligible to become a MikroTik Authorized Dealer
  • -Eligible for Train-the-Trainer program
  • -MikroTik Latvia refers customers to nearest consultant

Next Steps

  • -Combine with other Level 2 certifications to broaden expertise

Trainer

Nikita Tarikin

MikroTik Trainer Candidate

MTCNA 100% MTCSE 98% MTCRE 94% MTCUME 94% MTCWE 92% MTCIPv6E 92% MTCTCE 86%

Average: 94% — 7 certifications

Verify at mikrotik.com

Trainer scored 94% on the MTCUME exam. Experience deploying PPPoE subscriber management systems and Hotspot portals in Vietnam.

10,400+ community members on Facebook

Certification Path

MTCUME unlocks ISP skills — combine with MTCRE (routing) or MTCSE (security) for complete carrier infrastructure

Frequently Asked Questions

How is MTCUME different from the User Manager section in MTCNA? +
MTCNA only introduces basic PPPoE and Hotspot. MTCUME dives deep into the entire user management system: PPPoE subscriber management, custom Hotspot portals, RADIUS integration, User Manager billing/vouchers, and 802.1X enterprise auth.
How customizable is the Hotspot portal? +
Fully customizable — HTML/CSS for interface, JavaScript for logic, walled garden for free content, multiple login methods (voucher, social, SMS). The course guides building professional portals from scratch.
RADIUS vs local auth — when to use which? +
Local auth for small networks (<50 users), RADIUS for large scale (ISP, enterprise). RADIUS enables centralized management, accounting, VLAN assignment, bandwidth policies from one server. The course provides a decision matrix for each scenario.
Is MTCNA a mandatory prerequisite? +
Yes. A valid MTCNA certificate (not expired, within 3 years) is a mandatory requirement set by MikroTik. No exceptions.
Which certification should I take after MTCUME? +
MTCRE (routing) to complement with routing skills for ISP infrastructure, or MTCSE (security) to protect authentication systems. Both combined with MTCUME create a complete ISP foundation.
What User Manager changes are there in RouterOS v7? +
User Manager in RouterOS v7 has been completely rewritten — new interface, new features, not backward compatible with v6. The course covers both v6 and v7 — the trainer analyzes the migration path in detail.

Contact us for schedule and pricing

Telegram @tarikin
Zalo +84 342 208 001
Email hello@tarikin.vn

Community: 10,400+ network engineers on Facebook

Suggested Reading

  • · RADIUS protocol fundamentals
  • · Captive portal concepts
  • · PPPoE and L2TP protocol overview
  • · User management and AAA (Authentication, Authorization, Accounting)