The MTCNA Outline Just Changed. Here's What You Need to Know

MikroTik updated the MTCNA outline for exams after November 16. Here’s what changed in each module, what was removed and how to prepare for the new exam.

Wilmer Almazan

10/14/20264 min read

MikroTik just published a new MTCNA training outline. If you take the MTCNA exam after November 16, this is the outline you will be tested on.

The good news? It's not a new course. The foundation is the same one I have been teaching for years. What changed is that the outline finally catches up with how RouterOS works today, and with what we actually see on real networks.

I went through the old and new outlines side by side so you don't have to. Here's what you need to know.

Read the official outline

Want to see it for yourself? You can download the new MTCNA course outline here: MTCNA Training Outline (PDF)

Keep it handy while you study. It's the best checklist you'll find for what the exam expects you to know.

What stayed the same

The course is still 3 days and still built around 9 modules: Introduction, Bridging, DHCP, Routing, Wireless, Firewall, QoS, Tunnels and Tools. The goal hasn't changed either. By the end, you should be able to connect clients to the Internet, configure and manage a MikroTik router, troubleshoot the basics and provide basic services to your users.

Two small structural changes worth noting. Bridging now comes before DHCP, which makes more sense since you usually build the bridge first and then hand out addresses on it. The course also now lists a minimum of 24 hours, and the prerequisites now include OSI Layers 1, 2 and 3 on top of TCP/IP and subnetting. If you're shaky on the OSI model, brush up before class.

What's new, module by module

Introduction. This module got the most love. It now covers SwitchOS (SwOS and SwOS Lite), hardware categories, the mobile apps, MAC-Telnet and RoMON, and managing IP services. You'll also see device-mode, IPv6 defaults, Safe Mode and Flashfig. Safe Mode alone has saved more of my students from a long drive to a remote site than I can count, so I'm glad it's officially in there.

Bridging. Adding an IP address to the bridge is now its own topic. Simple, but it's one of the most common mistakes I see in the field.

DHCP. IP Pools moved here from the Tunnels module, and DNS was added. That's a better fit. Pools, DHCP and DNS all work together when you set up a LAN.

Routing. This one went a bit deeper. You now need to understand administrative distance, longest prefix match, the routing single process and ECMP routes. These are the concepts that explain why a router picks one path over another, so expect exam questions on them.

Wireless. Updated for current hardware: 802.11ax and 802.11be (Wi-Fi 6 and 7), the different wireless packages, WPA3, management frame protection and client isolation. The scan tool replaces the old snooper.

Firewall. New topics include interface lists, Fast Path, firewall logging and a closer look at connection tracking. Interface lists in particular will make your rules cleaner and easier to manage.

QoS. Queue types and PCQ queue size configuration were added to the existing Simple Queue and PCQ content.

Tunnels. PPPoE client profile matching and real use cases are in. On the VPN side, you'll learn IP Cloud, Quick Set L2TP VPN and the principles of Back to Home VPN.

Tools. This module (formerly called Misc) grew a lot. MAC ping, MAC-server, IP Scan, resources, health, bandwidth test, speedtest, packet sniffer, the MIB database, NTP, clock and history are all part of it now. These are the tools you'll reach for every time something breaks, so this is a welcome change.

What got removed

A few older topics are gone, and honestly, it's about time:

  • PPTP and SSTP. PPTP hasn't been considered secure in years. They were replaced by L2TP through Quick Set and Back to Home VPN.

  • The Dude. No longer part of MTCNA.

  • Connect List, Default Authenticate and Default Forward in the wireless module.

  • The snooper tool, replaced by scan.

The wiki is also out as a reference. The official documentation now lives at manual.mikrotik.com, so bookmark that one.

What this means if you're studying now

Don't panic. If you already know your way around RouterOS, most of this will feel familiar.

If you plan to write the exam before November 16, you're still on the current outline. If you're writing it after November 16, focus your extra study time on three areas: routing concepts (administrative distance, longest prefix match, ECMP), the newer wireless standards and security, and the troubleshooting tools. Those are the spots where the new outline asks for more than the old one did.

And please, practice in a lab. Reading about Safe Mode is not the same as using it when you lock yourself out of a router.

Get ready with us

Our MTCNA training already follows the new outline. Every session is private, hands-on and built around real labs, because everything we teach, we have built and run in production.

Here's how it works:

  • Taught by a MikroTik Certified Trainer with 18+ years of real network experience

  • Live online over Zoom from anywhere, or in person

  • Private sessions for 1 to 6 people from the same company

  • You pick the start date

  • Optional certification exam at our Winnipeg office

  • Free renewal training when your certification expires

If you or your team want to get certified on the new outline, book your MTCNA session here. Not sure if MTCNA is the right starting point? Book a free consultation and we'll figure it out together.

See you in class.