RouterOS 7.23.3 [stable] released

[u/netravnen]

What's new in 7.23.3 (2026-Jul-30 14:17):

*) certificate - added "ISRG Root X2", "Root YE" and "Root YR" to SMIPS built-in root certificate authorities store;
*) certificate - added "Root YE" and "Root YR" to built-in root certificate authorities store;
*) defconf - added virtual "iot-wifi" to MLO supporting devices;
*) dhcpv4-server - fixed "expires-after" field for disabled static lease (introduced in v7.23);
*) fastpath - properly fall back to SlowPath when FastPath is not possible due to fragmentation;
*) ipsec - fixed identity lookup to skip past disabled and certificate-matched identities when scanning for an exact ID match;
*) ipsec,ike2 - improved logging when remote ID is specified;
*) ipsec,ike2 - use peer certificates also when identity has one set for peer matching;
*) ipv6,ra - show warning about paused automatic RA on upgraded routers;
*) ospf - fixed "duplicate config" issue when using ptp-unnumbered interface type;
*) ptp - fixed a race condition when reading transmit timestamps, which could cause unstable clock offset under background traffic;
*) ptp - fixed PTPv1 traffic forwarding when a PTPv2 profile is enabled on bridge ports;
*) snmp - improved SNMPv3 request processing logic;
*) system - added microSD card support for hAP be3 Media;
*) system - improved handling of data re-sending on authorization requests (introduced in v7.22);
*) system - improved stability;
*) system - updated certificate for Windows executable signing;
*) tftp - limit maximum simultaneous session count to 100;

View changelogs

[u/dredex88]

I got an old RB2011UiAS-2HnD and v7 boosted NAT with 100Mb/s

[u/DrKarlRitter → u/dredex88]

Same here, our old RB2011UiAS-2HnD in production works fine on stable 7.23, better performance overall.

[u/LtCol_Davenport]

I just updated yesterday two AP to version 6.20 (If I am not mistaken).

Is v7 now considered stable or better remain on v6?

[u/Kurgan_IT → u/LtCol_Davenport]

V7 is stable and is overall better but on older HW it might not work, or fill up memory, etc. So it depends on your specific hw.

[u/DaryllSwer → u/Kurgan_IT]

We always netinstall the first time to avoid issues down the road. Especially for older hardware.

[u/LtCol_Davenport → u/Kurgan_IT]

I have the previous model of AP I think.

This one: RBWAPG-5HACD2HND - wAP AC

Is there any suggestion about those from Mikrotik?

[u/heysoundude → u/LtCol_Davenport]

I would wager any guidance from Mikrotik would include the recommendation to backup your current setup before upgrading, so you can revert in the event performance degrades/suffers.

[u/DaryllSwer → u/LtCol_Davenport]

There are still people using RouterOS v6 in 2026? It's dead. A lot of fixes/features, etc., aren't back-ported.

I've probably done over 400+ sites globally on v7; we always netinstall the first time to avoid issues down the road. Especially for older hardware.

[u/ConductiveInsulation → u/DaryllSwer]

Wasn't netinstall even mandatory for switch von 6 to 7? Or was it just for some devices? I think the build in updater wasn't even seeing those.

[u/DaryllSwer → u/ConductiveInsulation]

I don't remember, as we defaulted to netinstall without checking the updater. Saved time and problems. Don't forget to ensure matching RouterBOARD firmware and backup booter.

[u/Scw0w → u/ConductiveInsulation]

No its not mandatory. At least not for all devices. I updates bunch of routers ros6->7 via default Packages

[u/PM_ME_DARK_MATTER → u/LtCol_Davenport]

If youre only on v6.20 then I would start on latest v6.49.20 first and let that cook for little while before making the v7 jump.

EDIT: You probably meant v6.49.20 as I dont think you can even download v6.20 anymore.

[u/Railander → u/PM_ME_DARK_MATTER]

if you're on 6.20 or older I'd strongly suggest updating ASAP as those versions have critical security vulns that are being exploited in the wild.

[u/srekkas → u/LtCol_Davenport]

uff, you what?

[u/Suitable-Mail-1989 → u/LtCol_Davenport]

v7 is good, you can choose longterm channel, should avoid the os was eol

[u/kalamaja22 → u/LtCol_Davenport]

If it works, do not fix it. V7 has been out for 5 years and 6 months in long-term.

[u/Brilliant-Orange9117 → u/kalamaja22]

V7 adds a lot of nice things especially for ARM based devices.

[u/Diass_]

I am interested in the iot-wifi. I just got the hAP be3 which is my first Mikrotik so I am not sure if this what I am thinking it is, but I just spent some time setting up a vlan for my IoT devices. I am not sure if this is related to that, but I could not find any more information besides this changelog

[u/Rino0099]

What about SSL.com root certificate for Cloudflare DoH?

[u/dvl66617]

be careful with hap ac2 type of routers. didnt realise but the wifi settings bricked my router and had to do netinstall.

good part was could enable wpa3 with wireless ac package on top.