← All programmes

Digital Networking

Design, build and manage enterprise network infrastructure — on real MikroTik equipment, not on a simulator.

10 Weeks Beginner to Advanced MikroTik 5 Modules 50+ Lab Hours Certificate
TZS 500,000
Full programme fee

Why this programme exists

There is no shortage of people in Dar es Salaam who can plug in a router and get a connection. There is a serious shortage of people who can design an addressing scheme that still makes sense in two years, segment a network so a compromised camera cannot reach the finance department, and find a fault at two in the morning without guessing.

The gap is not knowledge of the products. MikroTik is well documented and the menus are not difficult. The gap is in the discipline around the work: planning before configuring, understanding why a rule behaves as it does rather than copying it, and testing under the conditions the network will really face.

Ten weeks, five modules, more than fifty hours in the lab. Everything is built on equipment you configure yourself, from factory default, and then have to fix when it stops working.

At a glance

Duration10 weeks
Structure5 modules, 4 graded labs
Lab timeMore than 50 hours hands-on
LevelBeginner to advanced — starts from the OSI model
EquipmentMikroTik L009 routers, switches, wireless and IP CCTV
DeliveryFace-to-face, Mbezi Mshikamano, Dar es Salaam
CertificateKevajopa Certificate in Digital Networking
FeeTZS 500,000, full programme

What you will be able to do

  • Design an IPv4 addressing scheme for a multi-site organisation using VLSM, and defend every allocation in it.
  • Take a MikroTik router from factory default to a working office router — users, interfaces, DHCP, routing and NAT — without a guide open beside you.
  • Configure VLANs and inter-VLAN routing, and write the firewall rules that actually keep them separated.
  • Build a firewall rule set on RouterOS knowing the order rules are evaluated in, and diagnose one that looks correct but does nothing.
  • Deploy a WireGuard VPN site to site and for remote users, and prove it is up rather than assuming it.
  • Set up PPPoE with FreeRADIUS authentication the way an ISP signs on a subscriber.
  • Plan wireless coverage for a real building, including channel planning and interference.
  • Put IP CCTV onto a shared network without degrading everything else on it.
  • Apply bandwidth management and QoS so that a contended link stays usable.
  • Diagnose a fault systematically — deciding whether it is a cable, a switch, a router, a firewall rule or the ISP.

Who should attend

  • Aspiring network engineers
  • ISP technicians and field staff
  • IT administrators
  • University students in IT

Entry requirements. Basic computer literacy is the only prerequisite. Module 1 starts from the OSI model and assumes nothing. No prior networking experience, no programming, and no vendor certification is required. Adequate English is needed — equipment menus and documentation are in English, though sessions are delivered in English and Kiswahili.

How the programme is taught

Roughly a third of the time is instruction. The rest is on equipment. Every module ends with something built and working, and every configuration is done from factory default rather than from a saved file — so the sequence is learned, not the shortcut.

The lab scenarios are drawn from real Kevajopa deployments: a two-site financial services customer, a two-storey bank with CCTV and guest Wi-Fi, an ISP signing on subscribers. The requirements are the awkward ones that come from real clients, not the tidy ones that make a textbook example work first time.

Module by module

Module 1 · Weeks 1–2 · 12 hours

Networking Foundations

Before anything is configured, the ideas the rest of the programme stands on. Taught from zero — the only prerequisite is basic computer literacy.

  • The OSI and TCP/IP models, and how the seven layers map onto equipment you can actually put your hands on
  • IPv4 addressing and subnetting, worked by hand until it is automatic — VLSM, prefix lengths, usable ranges, broadcast addresses
  • Ethernet, switching and Spanning Tree: what a switch really does with a frame, and why loops bring a network down
  • TCP against UDP, ports and services, and reading real captured traffic in Wireshark
Module 2 · Weeks 3–4

Routing and Switching

The first router comes out of the box at factory default and does not leave the bench until it is a working office router.

  • MikroTik RouterOS and Winbox: connecting by MAC address, identity, users, and locking down the default admin account
  • Interfaces, addressing, DHCP server, default route and masquerade NAT — a complete working configuration built step by step
  • VLANs, trunking and inter-VLAN routing, including the firewall rules that keep VLANs apart
  • Static routing and OSPF: when each is the right answer
Module 3 · Weeks 5–6

Network Security

The firewall and the tunnel. Where most real networks are weakest, and where a misconfiguration is hardest to see.

  • MikroTik firewall architecture: chains, the order rules are evaluated in, and why a rule that looks right does nothing
  • Connection tracking, address lists and protecting the router itself, not just the clients behind it
  • WireGuard VPN deployment, site to site and for remote users, with handshake verification
  • FreeRADIUS and PPPoE authentication — the way an ISP actually signs a subscriber on
Module 4 · Weeks 7–8

Wireless Networking

Wireless in real buildings, with real interference — not in an empty room.

  • Wi-Fi standards, frequency bands, channel width and channel planning
  • Coverage design across floors, and the difference between signal and usable throughput
  • Guest networks, isolation and captive portals
  • Integrating IP CCTV onto the network without starving everything else of bandwidth
Module 5 · Weeks 9–10

ISP Infrastructure

The step from an office network to a network other people pay to use.

  • ISP network architecture end to end: core, distribution, access and subscriber termination
  • Bandwidth management, queues, QoS and fair sharing under contention
  • Subscriber billing integration and PPPoE at scale
  • Monitoring, alerting, logging and redundancy — knowing a link is down before the customer calls

The four graded labs

One hundred marks across the programme. Each lab is documented and submitted, and each is built on a scenario taken from real work.

Lab 1 · Module 1 · 90 minutes · 25 marks

IP Addressing and Subnetting Design

Design a VLSM addressing scheme for a two-site organisation — head office in Dar es Salaam, branch in Arusha — from a single /24 allocation, covering finance, IT, CCTV, management, sales and the WAN link. Documented in a structured table, with gateway addresses and remaining address space accounted for.

Lab 2 · Module 2 · 120 minutes · 30 marks

MikroTik RouterOS Configuration

Take a MikroTik L009 from factory default to a working office router: identity and user security, interface naming and addressing, DHCP server, default route and NAT, then two VLANs with a firewall rule between them. The same sequence Kevajopa uses on customer deployments.

Lab 3 · Module 3 · 120 minutes · 25 marks

Firewall Rules and WireGuard VPN

Build a firewall rule set that survives inspection, then deploy a WireGuard tunnel and prove it works — reaching the remote subnet, keeping local internet access, and showing the last handshake time from the peer table.

Lab 4 · Modules 4–5 · 90 minutes · 20 marks

VLAN, Wireless and CCTV Network Design

A full design for a two-storey bank: banking hall with thirty workstations, ten IP cameras, an ATM, a server room, management offices and guest Wi-Fi. VLAN scheme, firewall rules, wireless coverage plan and CCTV integration, written out ready for deployment.

Equipment

  • MikroTik L009 routers, configured from factory default by every participant
  • Managed switches for VLAN and trunking work
  • Wireless access points for coverage and channel planning
  • IP CCTV cameras and an NVR for the integration work in Modules 4 and 5
  • Winbox, Wireshark and a laptop per participant
  • Kevajopa lab sheets and documentation templates, which participants keep

Assessment and certification

Assessment is continuous and mostly practical. The four graded labs carry one hundred marks between them and are marked on the documented design and the working configuration, not on whether the right answer was reached by luck. A final assessment at the end of the programme combines multiple choice, short written answers and a practical task.

A Kevajopa Technologies Limited Certificate in Digital Networking is awarded on satisfactory completion of the labs and the final assessment, with a minimum 80% attendance recorded per session. The certificate is a Kevajopa award — it is not a MikroTik MTCNA or any other vendor certification, though the programme covers substantial ground in common with MTCNA and is useful preparation for it.

Where it leads

Network Engineer ISP Field Technician Systems Administrator Wireless Network Specialist

What this programme does not cover

  • Fibre splicing, OTDR testing and FTTx plant work — that is our Fibre Optic Technologies programme.
  • Cisco IOS. The concepts transfer, but the equipment and command syntax taught here are MikroTik.
  • Penetration testing and offensive security — our Cyber Security Professional Certificate covers that.
  • Structured cabling certification and civil works.
  • Any vendor certification examination. The certificate is a Kevajopa award, not a MikroTik MTCNA.

Fees and enrolment

TZS 500,000 for the full ten-week programme. That includes all instruction and lab time, use of all equipment, lab sheets and course materials, all assessment and marking, and the certificate. Kevajopa Technologies Limited is not VAT-registered; no VAT is charged and none should be added. Public entities deduct 2% withholding tax at source in accordance with Tanzanian law — the withholding certificate should be issued to Kevajopa Technologies Limited, TIN 172-177-301.

We do not publish a fixed calendar. An intake is scheduled once a group has confirmed, and confirmed participants receive at least ten working days’ notice of the start date. Group rates are available for three or more registering together, and corporate cohorts can be delivered at the client’s premises where facilities allow.

Ready to start?

Training centre in Mbezi Mshikamano, Dar es Salaam.

💬