Review
MikroTik hAP be lite Review: Wi-Fi 7 at $79
Launch review of the MikroTik hAP be lite — BE3600 Wi-Fi 7 with MLO, a 2.5G port, RouterOS v7 L4, and whether a $79 CPE is ready for ISP fleets.
Summary The MikroTik hAP be lite (A42G-HbeP) brings dual-band Wi-Fi 7 with Multi-Link Operation, a 2.5 Gigabit Ethernet port, and full RouterOS v7 with a Level 4 license to a $79 price point. Announced in MikroTik’s June 2026 newsletter, it is the cheapest path yet to Wi-Fi 7 on RouterOS. For ISPs, it reframes the CPE math: modern wireless and a >1G uplink at the cost tier previously occupied by Wi-Fi 5 hardware.
What Is the MikroTik hAP be lite?
The MikroTik hAP be lite is a compact Wi-Fi 7 router and access point built around a dual-core ARM CPU at 950 MHz with 512 MB of DDR3 RAM, a BE3600-class dual-band 802.11be radio with Multi-Link Operation (MLO), one 2.5 Gigabit Ethernet port, three Gigabit Ethernet ports, and USB-C power drawing up to 12 W. It ships with RouterOS v7 and a Level 4 license, which means VLANs, VPNs, firewall, queues, CAPsMAN, and scripting with no subscription and no locked features. At $79 (US street price at launch), it follows the hAP be³ Media — MikroTik’s first Wi-Fi 7 router — as the affordable entry point to the be generation.
That last sentence is the story. Wi-Fi 7 hardware has existed in MikroTik’s lineup, but not at a price an operator can roll out by the hundreds. The hAP be lite puts 802.11be in the same budget slot where many fleets still deploy Wi-Fi 5 devices like the hAP ac² — see our hAP ac² review for that baseline.
Hardware snapshot
- CPU: Dual-core ARM @ 950 MHz
- RAM: 512 MB DDR3
- Wi-Fi: Dual-band Wi-Fi 7 (802.11be), BE3600 class, with MLO
- Ethernet: 1× 2.5 Gigabit + 3× Gigabit
- Power: USB-C, up to 12 W
- License: RouterOS v7, Level 4
- SKU: A42G-HbeP (US: A42G-HbeP-US)
Two things stand out against the spec sheet of every previous “lite” hAP: the 2.5G port and the RAM. 512 MB is double what the hAP ac³ carries, which matters once you stack a TR-069 client, monitoring, and a VPN tunnel on the same box.
What does MLO actually change for subscribers?
Multi-Link Operation is Wi-Fi 7’s headline feature: a client can use the 2.4 GHz and 5 GHz bands simultaneously instead of choosing one. In practice this buys lower latency under congestion and smoother roaming between bands — the failure mode where a phone clings to a weak 5 GHz signal while 2.4 GHz sits idle largely disappears with MLO-capable clients.
Be honest with expectations, though. BE3600 is a dual-band class — there is no 6 GHz radio here — so peak throughput gains over a good Wi-Fi 6 setup are modest. The win is consistency, not headline speed. The environment still dominates: channel planning and AP placement advice from our Wi-Fi 6 on MikroTik AX guide applies unchanged to the be generation.
The 2.5G port changes the CPE math
A Gigabit WAN port caps what a CPE can sell. As fiber operators introduce 1.5G and 2G residential tiers, the bottleneck stops being the access network and becomes the box in the customer’s living room. One 2.5 Gigabit port means the hAP be lite can terminate a multi-gig ONU uplink, with the three Gigabit ports covering wired LAN. The dual-core CPU will set the real-world routing ceiling — FastTrack and a lean firewall remain mandatory, exactly as we outlined in the hAP ac³ ISP CPE guide — but the physical layer no longer caps the service tier.
RouterOS v7 Level 4: the part consumer Wi-Fi 7 routers can’t match
Consumer Wi-Fi 7 routers at this price are appliances. The hAP be lite is a RouterOS device: PPPoE client or server, VLAN-per-service, WireGuard and IPsec, queue trees, CAPsMAN so the same box can serve as a centrally managed AP, and full scripting. For an ISP that means one image, one provisioning template, and one operational playbook across the fleet — no per-feature licensing surprises.
The flip side is the usual RouterOS responsibility: it ships powerful and must be hardened. Disable unused services, restrict the management plane, and standardize the firewall baseline before the first unit ships to a customer. Our Winbox security best practices apply from day one, and the current 7.23 release train should be your floor — RouterOS 7.23.1 (June 2026) fixed BGP memory leaks and DHCPv4-snooping stability issues among others.
Where it fits in an ISP fleet
Choose the hAP be lite when you are standardizing a residential CPE for tiers from a few hundred Mbps up to the multi-gig entry level, want MLO for fewer “Wi-Fi is slow” tickets in dense housing, and value RouterOS provisioning over consumer firmware. Stay with cheaper Wi-Fi 5 stock for legacy ≤300 Mbps tiers where it still clears the bar, and step up to MikroTik’s larger AX/BE routers when homes need more radio chains, 6 GHz, or heavy per-subscriber QoS on the CPE itself.
Tips for early adopters
- Pilot before fleet-wide rollout: be-generation drivers are young; validate your exact config under load.
- Keep 2.4 GHz on 20 MHz channels; MLO does not repeal airtime physics.
- Use the 2.5G port as WAN even on 1G tiers — it future-proofs the install for free.
- Bake remote management into the provisioning template, not the truck roll.
Take the next step
A $79 Wi-Fi 7 CPE only pays off if you can manage every unit without rolling a truck. MKController centralizes configuration, monitoring, and upgrades for MikroTik fleets, and NATCloud reaches each hAP be lite behind CGNAT with no port forwarding — so the modern CPE comes with modern operations attached.