MikroTik MTCTCE practice labs

8 guided labs on RouterOS 7 that follow the MTCTCE training outline: the packet flow, connection tracking and mangle marks, simple queues with burst, HTB queue trees with dual limitation and priorities, PCQ for fair sharing, the queue types from FIFO, SFQ and RED to fq-codel and CAKE, and the DNS cache, DHCP relay and web proxy, ending in a troubleshooting lab and an ISP subscriber shaping capstone.

Start this courseTry it free for 30 minutes

Lite for a month, £45.00, runs every lab here, with nothing extra to pay for the guided labs. Every lab here also runs in the free demo.

Guided labs
8
Follows
MikroTik MTCTCE, on RouterOS v7
Runs every lab
Lite
Devices
RouterOS

Who these labs are for

For engineers who hold the MTCNA and are preparing for the MTCTCE course and exam, and anyone who shapes subscriber or office traffic on MikroTik routers.

Without a paid licence CHR limits each interface to about 1 Mbit/s, so the labs set their rates in kbit/s, and measured rates come in a little below the configured limits.

The 8 labs

Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.

MTCTCE course 8 labs

Shared folderMikroTik MTCTCE RouterOS v7 guided labs

One traffic-control topic per lab, then queues that don’t match and an ISP subscriber shaping capstone.

  1. 01Packet flow connection tracking and mangle marks

    Before Fernvale's Riverside office can shape anything, its router has to recognise the traffic. Trace real packets through the RouterOS packet flow with counting rules, read the connection-tracking table, classify web, bulk and ping traffic with connection and packet marks, and set DSCP so the next hop knows what the traffic is.

    3× RouterOS

    3 vCPU, 768 MBFits LiteRuns in the free demo

  2. 02Simple queues - limits parents order and burst

    Share Fernvale's Riverside office uplink between two staff PCs with simple queues: per-PC limits in both directions, a parent queue for the whole office, the first-match order that decides which queue a packet uses, and burst, which makes short downloads feel fast without raising the long-term rate. Every rate is measured with RouterOS's own bandwidth test.

    4× RouterOS

    4 vCPU, 1,024 MBFits LiteRuns in the free demo

  3. 03HTB queue trees - structure dual limitation priority and DSCP

    Riverside's phones share the uplink with everyone's downloads, and calls break up whenever someone pulls a big file. The voice provider already marks its packets with DSCP 46. Classify by DSCP with mangle, build an HTB queue tree with a guaranteed rate and top priority for voice, and measure how HTB shares the link when both classes are busy.

    4× RouterOS

    4 vCPU, 1,024 MBFits LiteRuns in the free demo

  4. 04PCQ - fair sharing and per-subscriber caps with one queue

    Fernvale's Riverside wireless access point serves many subscribers through one backhaul. Instead of a queue per subscriber, use PCQ: one simple queue that splits the link fairly between whoever is active, caps each subscriber at their plan's rate, and needs no change when a subscriber is added. Measure the sharing with three subscribers at once.

    5× RouterOS

    5 vCPU, 1,280 MBFits LiteRuns in the free demo

  5. 05Queue types - FIFO SFQ RED fq-codel and CAKE against bufferbloat

    Riverside's staff say the Internet is fine until someone downloads, then calls and games lag by seconds. Reproduce the problem, bufferbloat, with a big FIFO queue, measure the ping times under load, and fix it with the modern queue types in RouterOS 7: fq-codel in a queue tree, then CAKE on the interface, which shapes, separates flows and controls delay on its own. Meet SFQ and RED on the way.

    3× RouterOS

    3 vCPU, 768 MBFits LiteRuns in the free demo

  6. 06DNS cache DHCP relay and options and the web proxy

    Fernvale's new Quayside branch has no servers of its own. Make the branch router a caching DNS server with local names, relay the branch's DHCP to the head office server with built-in and custom options and a reserved address, and put a transparent web proxy in the path that blocks what the policy forbids.

    3× RouterOS

    3 vCPU, 768 MBFits LiteRuns in the free demo

  7. 07Troubleshooting - queues that dont match

    Fernvale's Westbrook office has shaping configured, and none of it works: the guest kiosk downloads at full speed and the accounts PC ignores its class. Find four planted faults, a stray catch-all simple queue, a swapped upload/download pair, a packet mark that doesn't match its queue, and a queue tree on the wrong interface, by measuring and reading counters rather than guessing.

    4× RouterOS

    4 vCPU, 1,024 MBFits LiteRuns in the free demo

  8. 08Capstone - ISP subscriber shaping with plans PCQ and a voice class

    Fernvale's Riverside access point sells two plans, Bronze and Silver, and carries a voice service that must come first. Its download shaping was set up in a hurry and three faults let one customer run unshaped, make Bronze customers share a single rate, and starve voice of its class. Find and fix them, then build the missing upload shaping, and prove every plan with measurements.

    5× RouterOS

    5 vCPU, 1,280 MBFits LiteRuns in the free demo

Devices and images

The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.

Devices and images in the MikroTik MTCTCE practice labs, as read on 2 November 2026
DeviceImage in Add NodeSet toLabsNodes
MikroTik RouterOSmikrotik-7.14.21 vCPU, 256 MB831

Browse every image in the Add Node list

How to open the labs

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder MikroTik MTCTCE RouterOS v7 guided labs.

  3. Open a lab and start its nodes, then open Lab Tasks for the steps.

The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.

The Shared folder in the EVE-NG File Manager, recorded on 2 November 2026 with a test account.
The EVE-NG File Manager open on the read-only Shared folder: one folder per guided course, including Arista EOS, BGP in depth, CCIE Enterprise Infrastructure, CCNA, CCNP ENARSI and ENCOR, Check Point, Cisco ASA, Cisco Nexus NX-OS, CompTIA Network Plus and FortiGate
A guided CCNA lab with its Lab Tasks pane, recorded on 1 November 2026 with a test account.
A guided CCNA lab open in EVE-NG with its nodes running: four routers and two PCs on the canvas, and the Lab Tasks pane beside them with the scenario, the addressing plan and the first task

Questions about the MikroTik MTCTCE labs

Are these MikroTik MTCTCE labs free?

They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run every one of these labs.

Which plan do I need for these labs?

Lite, with 6 vCPU and 8 GB, runs every lab here. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “PCQ - fair sharing and per-subscriber caps with one queue”, needs 5 vCPU and 1,280 MB. Each lab’s Lab Tasks pane names the plan it needs.

Can I change these labs?

You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.

Are these labs from MikroTik?

No. CloudLabBox wrote them to follow the topics of MikroTik’s MTCTCE (MikroTik Certified Traffic Control Engineer) training outline. They aren’t training material from MikroTik, and CloudLabBox is independent of MikroTik.

Try a lab before you choose

The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run every one of these labs. No card and no email.

Try it free for 30 minutesStart this course

Plans from £3 a day or £0.50 an hour, each with every guided lab.