MikroTik MTCINE practice labs
12 guided labs on RouterOS 7 that cover every module of the MTCINE training outline: eBGP and iBGP with the v7 connection and template model, routing filters and communities, path selection across two upstreams, route reflectors, MPLS with LDP, LDP- and BGP-signalled VPLS, VRFs and route leaking, BGP L3VPN and RSVP-TE traffic engineering, ending in an ISP troubleshooting capstone.
- Guided labs
- 12
- Follows
- MikroTik MTCINE, on RouterOS v7
- Runs every lab
- Standard
- Devices
- RouterOS and VPCS
Who these labs are for
For engineers who hold the MTCNA and MTCRE and are preparing for the MTCINE course and exam, and anyone who runs an ISP or WISP core on MikroTik and wants hands-on BGP, MPLS, VPLS and L3VPN on RouterOS 7, whose BGP and MPLS menus differ from version 6.
Confederations are taught as theory only, and traffic engineering steers VPLS traffic only; the labs say where.
The 12 labs
Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.
MTCINE course 12 labs
Shared folderMikroTik MTCINE RouterOS v7 guided labs
BGP first, then MPLS and its services, with planted faults to find along the way and an ISP capstone.
-
01eBGP with the v7 connection and template model
Fernvale Networks has its own AS number at last. Bring up its first eBGP session to an upstream with RouterOS 7's template, connection and session model, advertise Fernvale's address block, connect a stub customer that uses a private AS, and stop that private AS leaking to the Internet.
3× RouterOS, 1× VPCS
4 vCPU, 1,792 MBFits LiteRuns in the free demo
-
02iBGP over loopbacks with next-hop-self and eBGP multihop
Fernvale adds a second upstream at a second edge router. Build an iBGP full mesh between loopbacks over OSPF, fix the classic next-hop problem with next-hop-self, and peer with the new upstream over two parallel links using eBGP multihop between loopbacks.
5× RouterOS
5 vCPU, 1,280 MBFits LiteRuns in the free demo
-
03Routing filters with prefix lists and communities
Fernvale's edge accepts and sends everything, and it shows: bogons from the upstream, a hijacked prefix leaked by a customer, and free transit for a peer. Write RouterOS 7 routing filters with prefix lists built from address lists, tag routes with communities by where they came from, and let the communities decide what leaves the AS.
5× RouterOS
5 vCPU, 1,280 MBFits LiteRuns in the free demo
-
04BGP path selection with two upstreams
Fernvale buys transit from two carriers on different terms. Use local preference to steer outbound traffic, MED to choose between two links into the same upstream, and AS-path prepending to make the second carrier a backup for inbound traffic, and read the attributes that decide each best path.
4× RouterOS
4 vCPU, 1,024 MBFits LiteRuns in the free demo
-
05Route reflectors and confederations
Fernvale's core is a ring of four routers and the iBGP full mesh is getting out of hand. Replace it with a route reflector, read the originator ID and cluster list it adds, prove that the reflector stays out of the forwarding path, and compare the design with confederations.
5× RouterOS
5 vCPU, 1,280 MBFits LiteRuns in the free demo
-
06MPLS and LDP with PHP and MPLS traceroute
Turn Fernvale's four-router OSPF core into an MPLS network with LDP. Read label bindings and the forwarding table, follow a packet through push, swap and pop, see penultimate-hop popping and switch it to explicit null, read labels in traceroute, and bind a label by hand.
4× RouterOS
4 vCPU, 1,024 MBFits LiteRuns in the free demo
-
07LDP VPLS full mesh - split horizon and control word and L2MTU
A colleague started a three-site VPLS for Harper Ltd and left it half working. Troubleshoot the pseudowires, fix a missing split horizon that floods duplicate frames, enable the control word, and work out the L2MTU the core needs, including how RouterOS fragments VPLS traffic that doesn't fit.
6× RouterOS
6 vCPU, 1,536 MBFits LiteRuns in the free demo
-
08BGP-signalled VPLS with auto-discovery
Build a three-site VPLS for Larkspur Logistics where BGP does the work: each PE announces its site once with a route target, and every PE builds the full mesh of pseudowires by itself. Read the l2vpn routes, the label blocks and the dynamic pseudowires, and add a site without touching the other PEs' VPLS configuration.
6× RouterOS
6 vCPU, 1,536 MBFits LiteRuns in the free demo
-
09VRFs and route leaking
Host two tenants with identical addressing on one Fernvale data-centre router using VRFs, prove they can't see each other, then leak just the routes needed so one tenant reaches a shared backup service, and see why overlapping addresses limit leaking.
4× RouterOS, 2× VPCS
6 vCPU, 3,072 MBFits LiteRuns in the free demo
-
10BGP L3VPN with OSPF and eBGP towards customers
Build Oakridge Clinic's layer 3 VPN across Fernvale's MPLS core: a VRF on each PE, route distinguishers and route targets, VPNv4 between the PEs, eBGP to one site and OSPF to the other. Find the route-target typo a colleague left on PE2, prove a second customer with the same addresses stays separate, and read an MPLS VPN traceroute.
6× RouterOS
6 vCPU, 1,536 MBFits LiteRuns in the free demo
-
11Traffic engineering with RSVP-TE - static and CSPF paths
Fernvale's IGP sends everything over the south path while the north path sits idle. Advertise link bandwidth with OSPF TE, build an RSVP-TE tunnel on an explicit path with a reservation for a broadcaster's VPLS, watch the pseudowire move onto it, then let CSPF place more tunnels and refuse one that doesn't fit.
6× RouterOS
6 vCPU, 1,536 MBFits LiteRuns in the free demo
-
12Capstone - troubleshoot an ISP with BGP and L3VPN and VPLS services
Monday morning at Fernvale: an Internet customer is offline, Oakridge's VPN is down and its office routes are leaking to the upstream, and Larkspur's VPLS has lost a depot. Work through ten routers, from BGP sessions to labels to route targets, find the five planted faults and prove every service works.
10× RouterOS
10 vCPU, 2,560 MBFits Standard
Devices and images
The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.
| Device | Image in Add Node | Set to | Labs | Nodes |
|---|---|---|---|---|
| MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB | 12 | 64 |
| VPCS host | Built in to EVE-NG | counted as 1 vCPU, 1,024 MB | 2 | 3 |
How to open the labs
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
MikroTik MTCINE RouterOS v7 guided labs.Open a lab and start its nodes, then open Lab Tasks for the steps.
The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.


Questions about the MikroTik MTCINE labs
Are these MikroTik MTCINE labs free?
They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 11 of these labs.
Which plan do I need for these labs?
Standard, with 12 vCPU and 16 GB, runs every lab here. Lite runs 11 of the 12. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “Capstone - troubleshoot an ISP with BGP and L3VPN and VPLS services”, needs 10 vCPU and 2,560 MB. Each lab’s Lab Tasks pane names the plan it needs.
Can I change these labs?
You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.
Are these labs from MikroTik?
No. CloudLabBox wrote them to follow the topics of MikroTik’s MTCINE (MikroTik Certified Inter-networking Engineer) training outline. They aren’t training material from MikroTik, and CloudLabBox is independent of MikroTik.
Try a lab before you choose
The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 11 of these labs. No card and no email.
More practice labs
- CCNA practice labs online
- CompTIA Network+ practice labs
- CCNP ENCOR practice labs
- CCNP ENARSI practice labs
- CCNP Service Provider practice labs
- Cisco NX-OS data centre practice labs
- CCIE Enterprise Infrastructure practice labs
- Network automation practice labs
- Cisco ASA firewall practice labs
- Packet analysis labs with Wireshark and tcpdump
- FortiGate practice labs
- FortiGate SD-WAN practice labs
- Cisco Catalyst SD-WAN CLI practice labs
- Palo Alto firewall practice labs
- Check Point CCSA practice labs
- Check Point CCSE practice labs
- Multi-vendor firewall and VPN practice labs
- BGP practice labs across vendors
- Nokia SR OS NRS I practice labs
- MPLS and L3VPN practice labs
- VXLAN EVPN practice labs across vendors
- IPv6 practice labs across vendors
- Linux labs for network engineers
- Multi-vendor troubleshooting practice labs
- JNCIA-Junos practice labs
- JNCIS-ENT practice labs
- JNCIA-SEC and JNCIS-SEC practice labs
- JNCIS-SP JN0-364 practice labs
- JNCIP-ENT JN0-650 practice labs
- Arista EOS practice labs
- HPE Aruba Networking CX switching labs
- Huawei HCIA-Datacom practice labs
- HCIP-Datacom Core practice labs
- MikroTik MTCNA practice labs
- MikroTik MTCRE practice labs
- MikroTik MTCSE practice labs
- MikroTik MTCTCE practice labs
- MikroTik MTCIPv6E practice labs
- All practice labs
CloudLabBox is independent of MikroTik. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.