Hi,
Been using RB4011, hap ac, rb951G for quite some time now.(all running v6.48.6 long-term)
- rb951G as switch
- hap ac as AP
- rb4011 as router running CAPsMAN and PCC load balance role

I'm gonna upgrade mostly because of WireGuard/ ZeroTier and new implementation of OpenVPN(udp) in v7.x.
I need to know which v7.x and method of upgrading are best suited for me?
- v7.5 or 7.4.1 or ...?
- NetInstall or usual upgrade in winbox?

Thanks in advance

My take:

Upgrade normally using winbox (upgrade channel)
Then export config as rsc (terminal: export show-sensitive file=...)

Test, test, test ...

If something seems odd, netinstall, then import config again. (NO binary import from a ROS6 backup !!)

If nothing seems off, you can continue there (but you may not be out of the woods forever)
Coming from ROS6, you may have to do a netinstall sooner or later. So keep that in mind if starting from a certain version you see things go wrong for no apparent reason.

If however you really know what you're doing and have all details of your config available, be my guest and start from netinstall (7.5 is latest)
Clean install might save you some headaches later on

Others might have other suggestions.

Thank you.
I've never used NetInstall before and dunno what problems it might cause.(boot errors? bricking the device? or whatnot)

BTW do I have to upgrade devices other than rb4011 too?
Do I have to upgrade their firmwares to match ROS version too?
I'm asking these 2 questions because I've read somewhere that all APs should
have the same firmware and ROS.

Netinstall:
there are very little reports of people bricking their device using netinstall.
Usually that's the process UNbricking it when they goofed up somewhere
It can seem daunting at first but it really isn't.
You can always skip that part until you see 'ghosts' appearing

As for your other questions: not necessarily.
Only the device for which you want to use the newer features needs to be upgraded at minimum.
Since I see in your first post Zerotier being mentioned, be advised that one only runs on ARM/ARM64. So only applicable for RB4011 in your case.

Any reason why you keep the others on 6.48.6 (because it's long term ?) ? There is 6.49.6 as well (but it's not NEEDED to upgrade, let that be clear).

Thank you.

Since I see in your first post Zerotier being mentioned, be advised that one only runs on ARM/ARM64. So only applicable for RB4011 in your case.

Yes I'm goning to upgrade rb4011.

So to recap the upgrading process:
- better go with NetInstall
- Regarding CAPsMAN, there's normally no need to upgrade those other 2 RBs to v7.

Since you mention RB4011 and capsman ...

Your RB4011 is not the version with 5GHz Wifi, I suppose ?
If so, you are not planning on using wifiwave2 drivers as well ?

Because if you do choose to use wifiwave2 drivers (makes quite a difference on 5Ghz) you will
a) loose ability to use 2Ghz wifi on RB4011. Wifiwave2 drivers are not compatible with 2Ghz chip used on RB4011.
b) loose ability to use capsman for that 5Ghz radio on RB4011 since it's not compatible yet with wifiwave2 drivers

Just saying ... choose wisely.

PS Why capsman with only 1 AP ? Or do you have multiple ?

It's RB4011iGS+5HacQ2HnD.
It's running CAPsMAN and communicates with hap ac on both 2.4 and 5GHz.
I'm ok with the current wifi functionality & performace and don't need more than what I have now.
Is this wifiwave2 gonna replace old drivers automatically after upgrade or is it like an optional/extra package?

PS Why capsman with only 1 AP ? Or do you have multiple ?

capsman: 4011
aps: 4011 and hap ac

Is this wifiwave2 gonna replace old drivers automatically after upgrade or is it like an optional/extra package?

Extra optional package.

Watching this thread. I am using a 4011 (non WiFi version) that is running 6.49.6 that one of these days I will upgrade to v7. In my case it is just a router (firewall, DHCP, dual WANs without failover, lots of VLANs - no bridge). All switch functions are handled in separate switches. I have not been in any hurry to move to v7, but it's looking like it is getting pretty solid.

Take Backup before you upgrade. Both export and binary backup.

Take Backup before you upgrade. Both export and binary backup.

That I do automatically every night...