MTCNA

MikroTik Certificate Network

Associate

By
Hemn Kamal
 MTCNA
• Module 1 : Introduction
• Module 2 : DHCP

•Module 3 : Bridging
• Module 4 : Routing
• Module 5 : Wireless
• Module 6 : Firewall
• Module 7 : QoS
• Module 8 : Tunnels
• Module 9 : Miscellanies
Bridging
• Make ethers port behave as a switch
• Bridge two different technology ( ether and wireless , physical and
logical interface) to be as one network .
MikroTik Interface Type
Physical Interface Logical Interface
Ethernet Bridge
SFP , SFP+ VLAN
Wireless PPPoE,PPTP, WDS,EoIP ,…
Broadcast Domain
• A MikroTik Interface routes data packets based on their IP addresses
rather than MAC address.
Bridge
• MikroTik Router is mainly Layer 3 device in OSI Model.
• Bridges are work as Layer 2 device in OSI Model
Bridge and Switch
• Traditionally work to join two network segment.
• Bridges and Switches are pretty similar, both operate at the Data Link
layer (Layer 2)
• Forwarding in Bridges is performed using the software
a switch is hardware-based.
Bridge and Port in MikroTik
LAB 3-1
• Connect Your PC to Your Router Ether2 , and connect another device
to Port1
- Ping to Device without bridge > reply or not ?
• Add a bridge and add ether1 and ether2 to the bridge
- Ping to Device with bridge > reply or not ?
• Add DHCP Server to the ether2 ( is it work ? Why ? )
what is the solution ?
Bridge
VLAN
• A VLAN is a logical broadcast domain that can span multiple physical
LAN segments.
• VLANs provide segmentation and organizational flexibility.
• A VLAN can exist on a single switch or span multiple switches.
Create VLAN
• VLAN Name
• VLAN ID
• VLAN Interface
Trunk and Access

• Access port – a port that can be assigned to a single VLAN

• Trunk port – a port that can be assigned to a multiple VLAN

Trunk and Access in MikroTik

• Access port – we have to use bridge to assign vlan to port

• Trunk port – we don’t use bridge to assign vlan to port

• We can not create more multiple vlan (with same id or name) on

same interface

• We can not add same interface to multiple bridge.

• We can add multiple vlan to same bridge.

LAB3-2
• Add vlan 20,30 and 99 on Router

• Add ip 192.168.X.1/24 to each vlan

• Add DHCP Server to each vlan

• Configure Ether1 on Switch as trunk port ( allowed vlan 20,30 and 99

• Configure ether2 as access port vlan 20

• Configure ether3 as access port vlan 30

• Configure ether4 as access port vlan 99

• Check the configuration with your PC