08:00

Check-in and Exhibitor hall opens. Bring your printed tickets

09:00-09:45

Architecting Scalable, Resilient, Multi-Tenant SD-WAN with MikroTik for Mobile and Segmented Networks – An architectural deep dive into SD-WAN design with MikroTik, focused on building resilience through control-plane intelligence rather than reactive failover mechanisms. The session explores how automated provisioning, distributed routing models, and dynamic path control enable scalable, multi-WAN infrastructures for real-world mobile and fixed deployments. Real configuration patterns and design examples illustrate how to create networks that adapt, converge, and remain predictable under constant change.

PDF

09:50-10:35

Scalable and Secure Self-Serve RouterOS Remote Management – Problem: One of the most common questions I see asked is how to securely manage RouterOS devices remotely. Most often the suggestions will work under limited circumstances, but fall down in some way: IPv4-only, won’t work with CG-NAT, requires a third-party service, limited access methods, etc. How can we manage these devices without regard for these things and without requiring a third-party and/or an expensive monthly subscription to make it happen? Method: Layering secure IKEv2/IPSec transports and L2TPv3 pseudowires, we can easily create a scalable remote management architecture that allows us to use all of the access methods we’ve come to expect from RouterOS locally (WinBox, MAC-telnet, SSH, RoMON, etc) using one or more physical routers or CHRs and with minimal management requirements. Presentation: I’ll go through the basic setup, why I chose the methods I did, some contrasts with other approaches and some rabbit holes worth diving into to make the setup fit individual consultants’ needs.

PDF

10:35-11:20

Refreshment Break (45 mins)

11:20-12:05

Exploring a Mikrotik (almost) enterprise-ready feature – Let’s build a spine-leaf switching architecture (and some other ones) – With the introduction of RouterOS 7.20 Mikrotik made BGP-EVPN available in the software. Together with VXLAN which is already available for a longer time, this makes it possible to build a modern spine-leaf switching architecture for the datacenter. In this talk I would like to present a short history of datacenter architectures, leading up to and including the spine-leaf design. We will build up this design based on VXLAN and EVPN during the talk and discuss its enterprise-ready state at the moment. Next to that we will briefly address some other enterprise-grade or semi-enterprise grade features that I have used in the past with some personal success stories ‘MikroTik for the win’.

PDF

12:05-13:30

Hot Lunch provided (1hr 25 mins)

13:30-14:15

Technical Presentation on 100Mega’s LiFePO4 battery solution AMVOLT

PDF

14:20-15:05

ROSE Data Storage (RDS)

PDF

15:05-15:45

Refreshment Break (40 mins)

15:45-16:30

RouterOS Layer-2 Engineering: Operating at Internet Exchange Points – Internet Exchange Points operate as shared Layer-2 environments where a single misconfiguration can affect the stability of the entire fabric. RouterOS is widely used by Internet Service Providers due to its flexibility and cost efficiency, yet its Layer-2 behavior is often assumed rather than intentionally engineered in IXP-facing deployments. This presentation explains how enterprise Layer-2 intents such as access VLAN isolation, control plane suppression, and broadcast domain hygiene are enforced in RouterOS through concrete configuration steps. By examining typical IXP-facing interface and bridge configurations, the session demonstrates how improper defaults can lead to ARP abuse, uncontrolled MAC learning, and protocol leakage, and how disciplined Layer-2 configuration is required to maintain a stable and responsible Internet Exchange environment.

PDF

16:30-17:00

The Raffle and closing ceremony of the MTPC