Hi guys,
On a mt wiki, there is a table which hardware encryption type is supported by particular router.
https://wiki.mikrotik.com/wiki/Manual:IP/IPsec

At rb750 Gr3 there are four asterisks: ****. At legend bellow table, there is explanation at four asterisks: 3DES only, but in table there is noted, that Gr3 supports also AES CBC md5, sha1 and sha256...

I don't have gr3 on my table to test it. Would someone clarify, if possible with real life experience, how does perform gr3 with aes cbc sha1 and sha256 encryption...
Thanks...

It was a little misleading. I updated the wiki page. Both 3DES and AES-CBC is supported in hardware on RB750Gr3.

I have one RB750Gr3 connecting to a 3011 using L2TP/IPSec and it uses SHA256 and aes-256-cbc. You cannot see the H under installed SA in winbox (bug) but if you use console or webfig I can see that the hardware offload is working. I have a 100 Mbit connection to it and I can easily push that connection full without the RB750Gr3 having any issues.
Before I had issues with 3011 as it did not have any hardware offload but that is solved now

You cannot see the H under installed SA in winbox (bug) [..]

Are you sure that Hardware AEAD is greyed out in SA detail screen status bar? Otherwise you can see H flag by enlarging the first grid column.

Thank you for quick response...

You cannot see the H under installed SA in winbox (bug) [..]

Are you sure that Hardware AEAD is greyed out in SA detail screen status bar? Otherwise you can see H flag by enlarging the first grid column.

Jesus Christ I use Excel to much. I'm so use to dubbel clicking on the column separator that it did not occur to me that I could slide it.
Yes after sliding it a bit to the right I can see the H. So no bug in Winbox but it would be nice it they extended the column so it would show at least 2 characters default