MikroTik MTCINE practice labs

12 guided labs on RouterOS 7 that cover every module of the MTCINE training outline: eBGP and iBGP with the v7 connection and template model, routing filters and communities, path selection across two upstreams, route reflectors, MPLS with LDP, LDP- and BGP-signalled VPLS, VRFs and route leaking, BGP L3VPN and RSVP-TE traffic engineering, ending in an ISP troubleshooting capstone.

Start this courseTry it free for 30 minutes

Standard for a month, £75.00, runs every lab here, with nothing extra to pay for the guided labs. 11 of the 12 labs also run in the free demo.

Guided labs
12
Follows
MikroTik MTCINE, on RouterOS v7
Runs every lab
Standard
Devices
RouterOS and VPCS

Who these labs are for

For engineers who hold the MTCNA and MTCRE and are preparing for the MTCINE course and exam, and anyone who runs an ISP or WISP core on MikroTik and wants hands-on BGP, MPLS, VPLS and L3VPN on RouterOS 7, whose BGP and MPLS menus differ from version 6.

Confederations are taught as theory only, and traffic engineering steers VPLS traffic only; the labs say where.

The 12 labs

Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.

MTCINE course 12 labs

Shared folderMikroTik MTCINE RouterOS v7 guided labs

BGP first, then MPLS and its services, with planted faults to find along the way and an ISP capstone.

  1. 01eBGP with the v7 connection and template model

    Fernvale Networks has its own AS number at last. Bring up its first eBGP session to an upstream with RouterOS 7's template, connection and session model, advertise Fernvale's address block, connect a stub customer that uses a private AS, and stop that private AS leaking to the Internet.

    3× RouterOS, 1× VPCS

    4 vCPU, 1,792 MBFits LiteRuns in the free demo

  2. 02iBGP over loopbacks with next-hop-self and eBGP multihop

    Fernvale adds a second upstream at a second edge router. Build an iBGP full mesh between loopbacks over OSPF, fix the classic next-hop problem with next-hop-self, and peer with the new upstream over two parallel links using eBGP multihop between loopbacks.

    5× RouterOS

    5 vCPU, 1,280 MBFits LiteRuns in the free demo

  3. 03Routing filters with prefix lists and communities

    Fernvale's edge accepts and sends everything, and it shows: bogons from the upstream, a hijacked prefix leaked by a customer, and free transit for a peer. Write RouterOS 7 routing filters with prefix lists built from address lists, tag routes with communities by where they came from, and let the communities decide what leaves the AS.

    5× RouterOS

    5 vCPU, 1,280 MBFits LiteRuns in the free demo

  4. 04BGP path selection with two upstreams

    Fernvale buys transit from two carriers on different terms. Use local preference to steer outbound traffic, MED to choose between two links into the same upstream, and AS-path prepending to make the second carrier a backup for inbound traffic, and read the attributes that decide each best path.

    4× RouterOS

    4 vCPU, 1,024 MBFits LiteRuns in the free demo

  5. 05Route reflectors and confederations

    Fernvale's core is a ring of four routers and the iBGP full mesh is getting out of hand. Replace it with a route reflector, read the originator ID and cluster list it adds, prove that the reflector stays out of the forwarding path, and compare the design with confederations.

    5× RouterOS

    5 vCPU, 1,280 MBFits LiteRuns in the free demo

  6. 06MPLS and LDP with PHP and MPLS traceroute

    Turn Fernvale's four-router OSPF core into an MPLS network with LDP. Read label bindings and the forwarding table, follow a packet through push, swap and pop, see penultimate-hop popping and switch it to explicit null, read labels in traceroute, and bind a label by hand.

    4× RouterOS

    4 vCPU, 1,024 MBFits LiteRuns in the free demo

  7. 07LDP VPLS full mesh - split horizon and control word and L2MTU

    A colleague started a three-site VPLS for Harper Ltd and left it half working. Troubleshoot the pseudowires, fix a missing split horizon that floods duplicate frames, enable the control word, and work out the L2MTU the core needs, including how RouterOS fragments VPLS traffic that doesn't fit.

    6× RouterOS

    6 vCPU, 1,536 MBFits LiteRuns in the free demo

  8. 08BGP-signalled VPLS with auto-discovery

    Build a three-site VPLS for Larkspur Logistics where BGP does the work: each PE announces its site once with a route target, and every PE builds the full mesh of pseudowires by itself. Read the l2vpn routes, the label blocks and the dynamic pseudowires, and add a site without touching the other PEs' VPLS configuration.

    6× RouterOS

    6 vCPU, 1,536 MBFits LiteRuns in the free demo

  9. 09VRFs and route leaking

    Host two tenants with identical addressing on one Fernvale data-centre router using VRFs, prove they can't see each other, then leak just the routes needed so one tenant reaches a shared backup service, and see why overlapping addresses limit leaking.

    4× RouterOS, 2× VPCS

    6 vCPU, 3,072 MBFits LiteRuns in the free demo

  10. 10BGP L3VPN with OSPF and eBGP towards customers

    Build Oakridge Clinic's layer 3 VPN across Fernvale's MPLS core: a VRF on each PE, route distinguishers and route targets, VPNv4 between the PEs, eBGP to one site and OSPF to the other. Find the route-target typo a colleague left on PE2, prove a second customer with the same addresses stays separate, and read an MPLS VPN traceroute.

    6× RouterOS

    6 vCPU, 1,536 MBFits LiteRuns in the free demo

  11. 11Traffic engineering with RSVP-TE - static and CSPF paths

    Fernvale's IGP sends everything over the south path while the north path sits idle. Advertise link bandwidth with OSPF TE, build an RSVP-TE tunnel on an explicit path with a reservation for a broadcaster's VPLS, watch the pseudowire move onto it, then let CSPF place more tunnels and refuse one that doesn't fit.

    6× RouterOS

    6 vCPU, 1,536 MBFits LiteRuns in the free demo

  12. 12Capstone - troubleshoot an ISP with BGP and L3VPN and VPLS services

    Monday morning at Fernvale: an Internet customer is offline, Oakridge's VPN is down and its office routes are leaking to the upstream, and Larkspur's VPLS has lost a depot. Work through ten routers, from BGP sessions to labels to route targets, find the five planted faults and prove every service works.

    10× RouterOS

    10 vCPU, 2,560 MBFits Standard

Devices and images

The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.

Devices and images in the MikroTik MTCINE practice labs, as read on 2 November 2026
DeviceImage in Add NodeSet toLabsNodes
MikroTik RouterOSmikrotik-7.14.21 vCPU, 256 MB1264
VPCS hostBuilt in to EVE-NGcounted as 1 vCPU, 1,024 MB23

Browse every image in the Add Node list

How to open the labs

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder MikroTik MTCINE RouterOS v7 guided labs.

  3. Open a lab and start its nodes, then open Lab Tasks for the steps.

The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.

The Shared folder in the EVE-NG File Manager, recorded on 2 November 2026 with a test account.
The EVE-NG File Manager open on the read-only Shared folder: one folder per guided course, including Arista EOS, BGP in depth, CCIE Enterprise Infrastructure, CCNA, CCNP ENARSI and ENCOR, Check Point, Cisco ASA, Cisco Nexus NX-OS, CompTIA Network Plus and FortiGate
A guided CCNA lab with its Lab Tasks pane, recorded on 1 November 2026 with a test account.
A guided CCNA lab open in EVE-NG with its nodes running: four routers and two PCs on the canvas, and the Lab Tasks pane beside them with the scenario, the addressing plan and the first task

Questions about the MikroTik MTCINE labs

Are these MikroTik MTCINE labs free?

They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 11 of these labs.

Which plan do I need for these labs?

Standard, with 12 vCPU and 16 GB, runs every lab here. Lite runs 11 of the 12. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “Capstone - troubleshoot an ISP with BGP and L3VPN and VPLS services”, needs 10 vCPU and 2,560 MB. Each lab’s Lab Tasks pane names the plan it needs.

Can I change these labs?

You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.

Are these labs from MikroTik?

No. CloudLabBox wrote them to follow the topics of MikroTik’s MTCINE (MikroTik Certified Inter-networking Engineer) training outline. They aren’t training material from MikroTik, and CloudLabBox is independent of MikroTik.

Try a lab before you choose

The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 11 of these labs. No card and no email.

Try it free for 30 minutesStart this course

Plans from £3 a day or £0.50 an hour, each with every guided lab.