دوره حضوری MikroTik Certified Pack

دوره حضوری MikroTik Certified Pack

خلاصه دوره MikroTik Certified Pack:

این پک شامل دروس MTCNA، MTCRE، MTCUME و MTCTCE می باشد.
درس MTCNA بر فراهم آوردن دانش و مهارت لازم برای نصب و راه اندازی، کاربری و عیب یابی شبکه های با سایز کوچک تا متوسط شامل انجام تنظیمات روی روتر هاي ميكروتيك و اتصال به شبکه با گستردگی جغرافیائی زیاد (WAN) و همچنین پیاده سازی امنیت در شبکه تمرکز دارد.
درسMTCRE مربوط به مباحث پيشرفته روتينگ ، راه اندازي و رفع ايراد در حوزه روتينگ توسط روترهاي ميكروتيك مي باشد.
در دوره آموزش MTCTCE مفاهیم و تنظیمات مربوط به کنترل پهنای باند و Firewall بر روی میکروتیک به طور کامل آموزش داده خواهد شد که پیش نیاز آن دوره MTCNAمی باشد. در پایان دوره آموزش MTCTCE دانشجویان قادر به راه اندازی انواع Queue ها، انواع Filter ها و ... خواهند بود.
در دوره آموزشی MTCUME مفاهیم و تنظیمات مربوط به User Manager و RADIUS برروی میکروتیک به طور کامل آموزش داده خواهد شد که پیش نیاز آن دوره MTCNA می باشد. در پایان دوره آموزش MTCUME دانشجویان قادر به راه اندازی انواع Tunnel ها، Accounting، مدیریت کاربران با User Manager و .. خواهند بود.


مدت دوره:

60 ساعت


پيش نياز:

دوره +Network


مدرس دوره:

مهندس فرزاد حیدری (مدرس رسمی و بین المللی میکروتیک)


اهداف دوره MikroTik Certified Pack:

در انتهای اين دوره دانشجويان قادر خواهند بود:
با سيستم عامل روترهاي ميكروتيك كار كنند و به سخت افزار ميكروتيك آشنا شده و همچنين اتصال كامپيوتر هاي داخل شبكه را به اينترنت وصل نمايند.
تنظيمات ، مديرت روترهاي ميكروتيك و رفع اشكال آنها را انجام دهد. با مفاهيم روتينگ در روترهاي ميكروتيك آشنا شده و تنظيمات و رفع اشكال در روترهاي ميكروتيك را ياد خواهد گرفت.
• با انواع مختلف Tunnel ها و راه اندازی آن بر روی میکروتیک آشنا شوند.
• بر راه اندازی مباحث Accounting و مدیریت کاربران تسلط پیدا کنند.
• بر راه اندازی سرویس های RADIUSتسلط پیدا کنند.
• با مفاهیم پهنای باند و کنترل ترافیک با انواع فیلترها آشنایی پیدا کنند.
• با انواع فایروال ها و تنظیم آن برروی میکروتیک آشنایی پیدا می کنند.
• بر مدیریت صفحات وب و نحوه فیلتر کردن آنها تسلط پیدا کنند.
• با سرویس های مختلف مانند DHCP، DNS و ... تسلط و آشنایی پیدا کنند.


سرفصل دوره MikroTik Certified Pack:

Introduction
• About MikroTik
o What is RouterOS
o What is RouterBOARD
• First time accessing the router
o WinBox and MAC-WinBox
o WebFig and Quick Set
o Default configuration
• RouterOS command line interface (CLI)
o Null Modem cable
o SSH and Telnet
o New terminal in WinBox/WebFig
• RouterOS CLI principles
o , double , “?”, navigation
o Command history and its benefits
• Initial configuration (Internet access)
o WAN DHCP-client
o LAN IP address and default gateway
o Basic Firewall - NAT masquerade
• Upgrading RouterOS
o Package types
o Saving and restoring the backup
o Difference between a backup and an export (.rsc) file
o Editing an export file
o Ways of upgrading
o RouterBOOT firmware upgrade
• Router identity
• Manage RouterOS logins
• Manage RouterOS services
• Managing configuration backups
• Resetting a RouterOS device
• Reinstalling a RouterOS device (Netinstall)
• RouterOS license levels
DHCP
• DHCP server and client
o DHCP client
o DHCP server setup
o Leases management
o DHCP server network configuration
• Address Resolution Protocol (ARP)
o ARP modes
o RouterOS ARP table
Bridging
• Bridging overview
o Bridge concepts and settings
o Creating bridges
o Adding ports to bridges
• Bridge wireless networks
o Station bridge
Routing
• Routing overview
o Routing concepts
o Route flags
• Static routing
o Creating routes
o Setting default route
o Managing dynamic routes
o Implementing static routing in a simple network
Wireless
• 802.11a/b/g/n/ac Concepts
o Frequencies (bands, channels) data-rates / chains (tx power, rx sensitivity, country regulations)
• Setup a simple wireless link
o Access Point configuration
o Station configuration
• Wireless Security and Encryption
o Access List
o Connect List
o Default Authenticate
o Default Forward
o WPA-PSK, WPA2-PSK
o WPS accept, WPS client
• Monitoring Tools
o Snooper
o Registration table
Firewall
• Firewall principles
o Connection tracking and states
o Structure, chains and actions
• Firewall Filter in action
o Filter actions
o Protecting your router (input)
o Protection your customers (forward)
• Basic Address-List
• Source NAT
o Masquerade and src-nat action
• Destination NAT
o dst-nat and redirect actions
• FastTrack
QoS
• Simple Queue
o Target
o Destinations
o Max-limit and limit-at
o Bursting
• One Simple queue for the whole network (PCQ)
o pcq-rate configuration
o pcq-limit configuration
Tunnels
• PPP settings
o PPP profile
o PPP secret
o PPP status
• IP pool
o Creating pool
o Managing ranges
o Assigning to a service
• Secure local network
o PPPoE service-name
o PPPoE client
o PPPoE server
• Point-to-point addresses
• Secure remote networks communication
o PPTP client and PPTP server (Quick Set)
o SSTP client
Misc
• RouterOS tools
o E-mail
o Netwatch
o Ping
o Traceroute
o Profiler (CPU load)
• Monitoring
o Interface traffic monitor
o Torch
o Graphs
o SNMP
Static Routing
• More specific routes
• ECMP + LAB
• How to force gateway over specific interface
• Gateway reachability check and route distance + LAB
• Routing mark and route policy + LAB
• Recursive next-hop and scope/target-scope usage + LAB
Point to point addressing
• Point to Point address configuration + LAB
VPN
• What is VPN?
• Different types of VPN
• Site to site connectivity with tunnels
- (IPIP, EoIP, PPTP, SSTP, L2TP, PPPoE) + LAB
• VLAN and it's usage
• QinQ implementation + LAB
• VLAN and managed switch
• VLAN and switch chip configuration on Rbs + LAB
OSPF
• What is OSPF?
• How OSPF protocol works
- Hello protocol
- Database distribution and LSA types explained
• OSPF network structure
- Areas
- Router types
• OSPF neighbors and neighbor states (DR and BDR election) + LAB
• External Route Distribution methods (type1, type2) + LAB
• Interface cost and interface types (broadcast, NBMA, etc.) + LAB
• SPT calculation algorithm
• OSPF and multicast (problems with NBMA)
• Stub, NSSA and area ranges (route aggregation) + LAB
• Virtual links, usage and limitations + LAB
• OSPF routing filters and limitations + LAB
Packet flow diagram
• Why this diagram is necessary?
• Full overview of all things covered by diagram
• Simple examples how packet travels through the diagram (routing, bridging, connection to router etc.) + LAB
• More complex examples of diagram usage + LAB
Firewall filter/nat/mangle
• Connection tracking
• Filter + LAB
- chains (default/custom)
- all rule "actions" covered
- most common rule "conditions" covered
• NAT + LAB
- chains (default/custom)
- all rule "actions" covered
- most common rule "conditions" covered
- NAT helpers
• Mangle + LAB
- chains (default/custom)
- all rule "actions" covered
- most common rule "conditions" covered
• Some complicated rule "conditions" covered ("advanced", "extra" tab) + LAB
• uPNP
Quality of Service
• HTB
- HTB general information
- HTB implementation (queue tree)
- HTB structure + LAB
- HTB Dual Limitation + LAB
- HTB priority + LAB
• Burst + LAB
• Queue types
- FIFO + LAB
- SFQ + LAB
- RED + LAB
- PCQ + several LABs
- queue size + LAB
• Simple queues + LAB
• Simple queue and queue tree interaction
DNS client/cache
• Basic configuration + LAB
• Static DNS Entry + LAB
DHCP client/relay/server
• DHCP communication analysis
• DHCP-client identification/ configuration + LAB
• DHCP server configuration: + LAB
- DHCP networks
- DHCP options (build-in and custom)
- IP Pool
- advanced DHCP
• DHCP relay configuration + LAB
Web Proxy
• Basic configuration
• Proxy rule lists
- Access list + LAB
- Direct Access list + LAB
- Cache list + LAB
• Regular expression + LAB
PPP
- PPP Profile
- Local and remote addresses
- Incoming and outgoing filters
- Address list
- Change TCP-MSS
- Use encryption
- Session timeout
- Rate-limit configuration
- Only-one setting
- PPP Secret
- Service and Profile
- Local and Remote address
- Routes configuration
- Limit Bytes In/Limit Bytes Out configuration
- IP Pool
- Set addresses ranges
- Next pool options
PPTP, LT2P
- PPTP and L2TP
- Theory
- Comparison
- PPTP Client configuration
- Client setup
- Set profile
- Dial on demand
- Add default route and static routes
- PPTP Server configuration
- Enable server
- Setup profiles
- Add clients to PPP secret
- Set static interfaces for clients
- L2TP Client configuration
- Client setup
- Configure profile
- Dial on demand
- Add default route and static routes
- L2TP Server configuration
- Enable server
- Set profiles
- Add clients to PPP secret
- Set Static interfaces for clients
PPPoE
- PPPoE server and client
- Theory
- Usage environment
- Comparison to other PPP protocols
- PPPoE client configuration
- Client setup
- Select interface
- Service name
- Configure profile
- PPPoE Server configuration
- Enable PPPoE server
- Set profiles
- Add clients to PPP secret
- Add Static interfaces for clients
- Secure server by removing any IP address from PPPoE server interface
- Encryption
- Set profile without encryption
- Set profile with encryption
- Configure PPPoE client without encryption
- Interface ECMP
- Set ECMP routes for PPP interfaces
Bridging
- L2TP and EoIP
- Set L2TP tunnel
- Set EoIP tunnel
- Create bridge and add necessary interfaces to ports
- Confirm you have Ethernet connectivity between remote nodes
- L2TP and VPLS
- Set L2TP tunnel
- Set VPLS tunnel
- Create bridge and add necessary interfaces to ports
- L2TP and BCP
- Set L2TP tunnel
- Use BCP to bridge PPP interface
- Add to bridge necessary interface
- Multilink Protocol
- Enable multilink by specifying correct MRRU settings
- Disable mangle rules for MSS adjustment
- MLPPP (optional)
- Setup client and specify multiple interfaces for one client
- Set PPPoE server with MLPPP support
IPSec
- Introduction
- Theory and concepts
- Comparison to other VPN protocols
- IPSec Peer
- Use different authentication methods
- IPSec exchange modes
- Encryption and hash algorithms
- NAT-Traversal
- Lifetime and lifebytes
- DPD protocol
- Policy
- IPSec protocol and action
- Tunnels
- Generate dynamic Policy
- Proposal
- Encryption and authentication algorithms
- Lifetime
- PFS
- Installed-SA
- Flush SA
- Create IPSec between two routers with NAT
- Set peer
- Set policy
- Set NAT rules
- Confirm the secure link is established
HotSpot
- Introduction
- Concepts
- Usage environments
- Setup HotSpot with default settings
- HotSpot Login Methods
- HTTP CHAP/PAP
- MAC
- Cookie
- HTTPS
- Trial
- RADIUS
- Users
- Add users
- Set MAC-address for user
- Set MAC-address for username
- Limit Uptime and Limit Bytes In/Out
- Reset limits for user
- Monitor Users
- Host Table
- Active Table
- SNMP for users
- Profile
- Keepalive timeout
- Shared users
- Rate-Limit
- Address-list
- Incoming/Outgoing filter
- Incoming/Outgoing Packet Mark
- Bypass HotSpot
- Walled garden
- Walled garden IP
- IP binding
- Customize HotSpot
- Advertisement
- Customize pages
RADIUS
- RADIUS client
- Add radius client
- Set service
- Use RADIUS for the specific service
- RADIUS server
- User manager
- Install the latest user-manager
- Add routers
- Add users
- Set profile
- RADIUS incoming


جزئیات سرفصل آموزشی دوره MikroTik Certified Pack را از طریق لینک زیر دریافت کنید:


سرفصل دوره سماتک