We have a some IPSEC tunnel working normally on Routeros V6.49.8. I upgraded to V7.11 and the IPSEC tunnels established normally but the flow between the remote hosts not. I checked and the packages ICMP send a go back, to the router but not to the hosts.

I downgraded to V6.49.8 and restore the backup config and it's worked normally.

Have same change I need to make?

I'd start by running /ip/ipsec/export before and after the upgrade to make sure that the configuration was preserved.

Thanks Kentzo!

I have made that. But if the tunnels UP, I think the IPSEC configuration it's OK.

I check the flush of the packets and I could see (ping for example) go to the remote host and came back, but the router not unpack it.

Maybe a new rule in firewall is necessary on V7, that not necessary in V6.