Optimizing MikroTik hAP ax³ (C53UiG+5HPaxD2HPaxD) WiFi Speeds

Check the last post, update to 7.18 or newer, cause it fixes all the wifi problems i had till now (after 7.15.3)
This one https://forum.mikrotik.com/viewtopic.php?p=1128996#p1128996


EXTREMELY RECOMMENDED to use routerOS and wifi-qcom v7.15.3
IMPORTANT INFO: Version 7.13 till 7.15.2 works “ok”, but the best for me was 7.15.3, 7.16 and later versions just makes 5Ghz an absolute crap for me, maybe you’re lucky, 7.16 and newer ones keeps connecting the clients at A/N protocol, it gets absolute horrible to use wifi like that

Everything here was tested on hAP ax³ (C53UiG+5HPaxD2HPaxD) by me

# Reset WiFi interfaces
/interface wifi reset numbers=0,1

# 2.4GHz Configuration (wifi2)
/interface wifi
set [ find default-name=wifi2 ] \
  channel.frequency=2401-2483 \
  channel.skip-dfs-channels=all \
  channel.width=20/40mhz \
  configuration.country="YOUR_COUNTRY_HERE" \
  configuration.dtim-period=3 \
  disabled=no \
  mode=ap \
  mtu=1500 \
  name=2.4Ghz \
  security.authentication-types=wpa2-psk,wpa3-psk \
  security.passphrase="YOUR_STRONG_PASSWORD" \
  security.ft=yes \
  security.ft-over-ds=yes \
  security.wps=disable \
  ssid="YOUR_NETWORK_NAME" \
  steering.rrm=yes \
  steering.wnm=yes

# 5GHz Configuration (wifi1)
set [ find default-name=wifi1 ] \
  channel.frequency=5170-5835 \
  channel.skip-dfs-channels=all \
  channel.width=20/40/80mhz \
  configuration.country="YOUR_COUNTRY_HERE" \
  configuration.dtim-period=3 \
  disabled=no \
  mode=ap \
  mtu=1500 \
  name=5.0Ghz \
  security.authentication-types=wpa2-psk,wpa3-psk \
  security.passphrase="YOUR_STRONG_PASSWORD" \
  security.ft=yes \
  security.ft-over-ds=yes \
  security.wps=disable \
  ssid="YOUR_NETWORK_NAME" \
  steering.rrm=yes \
  steering.wnm=yes

=============
Critical Notes:

  1. Must use RouterOS + wifi-qcom v7.15.3 - Newer versions have different AX behavior
  2. Uses non-DFS 5GHz channels (UNII-1/2/3) for stability
  3. WPA3+WPA2 with Fast Transition (802.11r) for security+roaming
  4. WPS disabled for security hardening

===========
Verification:

/system package print
/interface wifi print

===============
Troubleshooting:

  • If config fails: Confirm package versions first!
  • Slow speeds: Check client “Tx Rate/Rx Rate” in registration table
    registration.png
  • Connection issues: Try disabling WPA3 temporarily

PSA: Stick with RouterOS 7.15.3 for Stable WiFi (Issues in 7.16.x and 7.17.x)

Hey MikroTik community,

I need to correct my earlier post about RouterOS 7.17.2 working perfectly. After further testing, I’ve realized that WiFi stability issues persist in all versions after 7.15.3. Here’s a detailed update based on my experience:

I initially thought 7.17.2 was working fine, but after a few time (3 ~ 4 hours), I started experiencing random disconnects (from roaming), sluggish speeds (incorrect connection protocol), and erratic behavior. To confirm, I tested the following versions:

  • 7.16 - problems already at boot
  • 7.16.1 - problems already at boot
  • 7.16.2 - problems already at boot
  • 7.17 - problems after ~ 5 minutes
  • 7.17.1 - problems after ~15 minutes
  • 7.17.2 (latest stable)

All of them exhibited similar WiFi issues, while rolling back to 7.15.3 restored stability.

If you’re struggling with WiFi on newer versions, here’s my configuration for 7.15.3 that works flawlessly for 2.4GHz and 5GHz bands (WPA2/WPA3 + 802.11r).

Why Stay on 7.15.3?

  • WiFi stability: Versions after 7.15.3 introduce unpredictable drops (my experience).
  • Latest “stable” one: 7.15.3 was the latest i could test that proved to work without any hiccups, i tested all available after 7.8 and 7.15.3 gave me the best results.

Working Configuration (RouterOS 7.15.3)

[b]Step 1: Reset WiFi Interfaces[/b]  
/interface wifi reset numbers=0,1  

[b]2.4GHz Configuration (wifi2)[/b]  
/interface wifi
set [ find default-name=wifi2 ] \
    aaa.interim-update=disabled \
    .mac-caching=disabled \
    channel.frequency=2401-2483 \
    .skip-dfs-channels=all \
    .width=20/40mhz \
    configuration.country="YOUR_COUNTRY_HERE" \
    .dtim-period=3 \
    .mode=ap \
    .multicast-enhance=enabled \
    .ssid="YOUR_SSID_NAME_HERE" \
    datapath.bridge-cost=1 \
    .client-isolation=no \
    disabled=no \
    interworking.esr=no \
    .hotspot20=no \
    .hotspot20-dgaf=no \
    .internet=no \
    .uesa=no \
    .wan-at-capacity=no \
    .wan-symmetric=no \
    mtu=1500 \
    name=wifi2 \
    security.authentication-types=wpa2-psk,wpa3-psk \
    .security.passphrase="YOUR_STRONG_PASSWORD_HERE" \
    .connect-priority=1/2 \
    .disable-pmkid=no \
    .eap-accounting=no \
    .ft=yes \
    .ft-mobility-domain=0x1 \
    .ft-over-ds=yes \
    .ft-preserve-vlanid=no \
    .sae-anti-clogging-threshold=disabled \
    .sae-max-failure-rate=disabled \
    .wps=disable \
    steering.rrm=yes \
    .wnm=yes

[b]5GHz Configuration (wifi1)[/b]  

/interface wifi 
set [ find default-name=wifi1 ] \
    aaa.interim-update=disabled \
    .mac-caching=disabled \
    channel.frequency=5170-5835 \
    .skip-dfs-channels=all \
    .width=20/40/80mhz \
    configuration.country="YOUR_COUNTRY_HERE" \
    .dtim-period=3 \
    .mode=ap \
    .multicast-enhance=enabled \
    .ssid="YOUR_SSID_NAME_HERE" \
    datapath.bridge-cost=1 \
    .client-isolation=no \
    disabled=no \
    interworking.esr=no \
    .hotspot20=no \
    .hotspot20-dgaf=no \
    .internet=no \
    .uesa=no \
    .wan-at-capacity=no \
    .wan-symmetric=no \
    mtu=1500 \
    name=wifi1 \
    security.authentication-types=wpa2-psk,wpa3-psk \
    .security.passphrase="YOUR_STRONG_PASSWORD_HERE" \
    .connect-priority=0/1 \
    .disable-pmkid=no \
    .eap-accounting=no \
    .ft=yes \
    .ft-mobility-domain=0x1 \
    .ft-over-ds=yes \
    .ft-preserve-vlanid=no \
    .sae-anti-clogging-threshold=disabled \
    .sae-max-failure-rate=disabled \
    .wps=disable \
    steering.rrm=yes \
    .wnm=yes

Notes:

  • Replace YOUR_COUNTRY_HERE, YOUR_WIFI_NAME_HERE and YOUR_STRONG_PASSWORD_HERE.
  • FT (802.11r): Critical for fast roaming—works reliably on 7.15.3.
  • Multicast Enhance: Reduces broadcast clutter.

TL;DR: If it ain’t broke, don’t upgrade. 7.15.3 + this config = no headaches.

Anyone else seeing WiFi regressions in 7.16.x or 7.17.x? Share your experiences below!



Working WiFi Configuration for 2.4GHz/5GHz (RouterOS v7.17.2)

Hey everyone!

After some trial and error, I finally got my MikroTik WiFi setup working smoothly on > RouterOS 7.17.2> . Sharing my config here in case it helps anyone else. This includes both 2.4GHz and 5GHz bands with WPA2/WPA3 and Fast Transition (802.11r) enabled.

Configuration:
Reset WiFi interfaces > (optional, but I did it for a clean start)

/interface wifi reset numbers=0,1

>
> **2.4GHz Configuration (wifi2)**
>
> ```text
/interface wifi
set [ find default-name=wifi2 ] \
  aaa.interim-update=disabled \
  mac-caching=disabled \
  channel.frequency=2401-2483 \
  channel.skip-dfs-channels=all \
  channel.width=20/40mhz \
  configuration.country="United States" \
  configuration.dtim-period=3 \
  disabled=no \
  mode=ap \
  multicast-enhance=enabled \
  ssid="YOUR_WIFI_NAME_HERE" \
  station-roaming=no \
  datapath.bridge-cost=1 \
  client-isolation=no \
  interworking.esr=no \
  hotspot20=no \
  hotspot20-dgaf=no \
  internet=no \
  uesa=no \
  wan-at-capacity=no \
  wan-symmetric=no \
  mtu=1500 \
  name=2.4Ghz \
  security.authentication-types=wpa2-psk,wpa3-psk \
  security.passphrase="YOUR_STRONG_PASSWORD" \
  security.connect-priority=1/2 \
  security.disable-pmkid=no \
  security.eap-accounting=no \
  security.ft=yes \
  security.ft-mobility-domain=0x1 \
  security.ft-over-ds=yes \
  security.ft-preserve-vlanid=no \
  security.sae-anti-clogging-threshold=disabled \
  security.sae-max-failure-rate=disabled \
  security.wps=disable \
  steering.rrm=yes \
  steering.wnm=yes

5GHz Configuration (wifi1)

/interface wifi
set [ find default-name=wifi1 ]
aaa.interim-update=disabled
.mac-caching=disabled
channel.frequency=5170-5835
.skip-dfs-channels=all
.width=20/40/80mhz
configuration.country=“United States”
.dtim-period=3
.mode=ap
.multicast-enhance=enabled
.ssid=“YOUR_WIFI_NAME_HERE”
datapath.bridge-cost=1
.client-isolation=no
disabled=no
interworking.esr=no
.hotspot20=no
.hotspot20-dgaf=no
.internet=no
.uesa=no
.wan-at-capacity=no
.wan-symmetric=no
mtu=1500
name=wifi1
security.authentication-types=wpa2-psk,wpa3-psk
.security.passphrase=“YOUR_STRONG_PASSWORD_HERE”
.connect-priority=0/1
.disable-pmkid=no
.eap-accounting=no
.ft=yes
.ft-mobility-domain=0x1
.ft-over-ds=yes
.ft-preserve-vlanid=no
.sae-anti-clogging-threshold=disabled
.sae-max-failure-rate=disabled
.wps=disable
steering.rrm=yes
.wnm=yes

>
> **Notes:**
>
> * Replace > _YOUR_WIFI_NAME_ > and > _YOUR_STRONG_PASSWORD_ > with your actual SSID and password.
> * Some settings were included from experiments. No clue if they matter, but I left them in since everything works! > 😅
>
> **PSA:** > If you’re copy-pasting, double-check interface names (> _wifi1_> /> _wifi2_> ) for your device—they might differ!
>
> Feel free to ask questions or suggest improvements. Happy to share more details!

RouterOS 7.18 fixed everything for me, recommend to UPDATE IT ASAP, the configuration is exactly the same as 7.15.3, but now it oprates even better, it connects devices correctly as AX and AC, not the A/N weird connection

Just use the same configuration as the first post, it works perfectly now, with no extra steps

# Reset WiFi interfaces
/interface wifi reset numbers=0,1

# 2.4GHz Configuration (wifi2)
/interface wifi
set [ find default-name=wifi2 ] \
  channel.frequency=2401-2483 \
  channel.skip-dfs-channels=all \
  channel.width=20/40mhz \
  configuration.country="YOUR_COUNTRY_HERE" \
  configuration.dtim-period=3 \
  disabled=no \
  mode=ap \
  mtu=1500 \
  name=2.4Ghz \
  security.authentication-types=wpa2-psk,wpa3-psk \
  security.passphrase="YOUR_STRONG_PASSWORD_HERE" \
  security.ft=yes \
  security.ft-over-ds=yes \
  security.wps=disable \
  ssid="YOUR_WIFI_NAME_HERE" \
  steering.rrm=yes \
  steering.wnm=yes

# 5GHz Configuration (wifi1)
set [ find default-name=wifi1 ] \
  channel.frequency=5170-5835 \
  channel.skip-dfs-channels=all \
  channel.width=20/40/80mhz \
  configuration.country="YOUR_COUNTRY_HERE" \
  configuration.dtim-period=3 \
  disabled=no \
  mode=ap \
  mtu=1500 \
  name=5.0Ghz \
  security.authentication-types=wpa2-psk,wpa3-psk \
  security.passphrase="YOUR_STRONG_PASSWORD_HERE" \
  security.ft=yes \
  security.ft-over-ds=yes \
  security.wps=disable \
  ssid="YOUR_WIFI_NAME_HERE" \
  steering.rrm=yes \
  steering.wnm=yes

Notes:

  • Replace YOUR_COUNTRY_HERE, YOUR_WIFI_NAME_HERE and YOUR_STRONG_PASSWORD_HERE.

Thanks for the Wifi guide!

Strictly wifi, correct, no capsman right!