MikroTik hAP be lite: Specs, Features, Pros & Cons
The hAP be lite runs MikroTik's RouterOS v7, the operating system on the company's rack-mounted routers, in a small passively cooled case that takes its power from a USB-C socket. MikroTik includes a 5 V, 2.4 A adapter and puts the router's maximum consumption at 12 W, and it was tested at ambient temperatures from -40 to 122 degrees Fahrenheit. The case stands upright on a base plate or lies flat, and MikroTik publishes a wall-mounting drawing for it.
Inside is an AN7563PT dual-core ARM chip at 950 MHz with 512 MB of RAM. The wired side has one 2.5 Gigabit port, numbered first on MikroTik's block diagram, and three gigabit ports. There is no USB port for storage or a cellular modem.
The radio is dual-band Wi-Fi 7 with Multi-Link Operation, which lets a compatible phone or laptop hold links on 2.4 and 5 GHz at the same time. With no 6 GHz radio, the widest channels the standard allows are out of reach. MikroTik's product page describes the upper band as triple-chain, while its spec sheet lists two spatial streams on each band, so the third chain adds an antenna path and the link rates stay at two-stream figures.
With RouterOS come VLANs, VPNs, traffic shaping, detailed firewall rules and scripting, with no subscription and no feature tier, plus CAPsMAN, which manages other MikroTik access points from this unit. The same software assumes its owner knows what a bridge, a firewall chain and a DHCP server are, since RouterOS presents them as they are and leaves the design of the network to whoever configures it.
Category strengths
Where the MikroTik hAP be lite trails the median
- A much lower max wireless speed ?3,570 Mbps vs 7,876 Mbps (median)
- No 6 GHz band ?
- No multi-gig LAN ?
- No built-in security suite ?
- Much less RAM ?512 MB vs 1,024 MB (median)
- Fewer frequency bands ?2 vs 3 (median)
- Fewer USB ports ?0 vs 1 (median)
- Fewer LAN ports ?3 vs 4 (median)
- Fewer processor cores ?2 vs 4 (median)
How this VS Score was computed
Score 31: each known spec is measured against the median of all wi-fi routers (26 products), then weighted; 50 means level with that median. In classes of six or more, a value beyond the class’s 10th–90th percentile range counts as that limit, so one extreme product cannot set the scale. 59% of the scoreable weight could be used; unknown values, features not applicable to this class and proxies (battery capacity where a rated life exists) add or remove nothing.
| Specification | This product | Cohort median | Score weight | Points moved |
|---|---|---|---|---|
| Max wireless speed | 3,570 | 7,876 | 2 | −54.0 |
| 6 GHz band | No | 52% of the class have it | 1 | −48.0 |
| Multi-gig LAN | No | 69% of the class have it | 0.8 | −38.4 |
| Built-in security suite | No | 52% of the class have it | 0.5 | −24.0 |
| RAM | 512 | 1,024 | 0.7 | −17.5 |
| Frequency bands | 2 | 3 | 1 | −17.0 |
| USB ports | 0 | 1 | 0.3 | −14.4 |
| Processor cores | 2 | 4 | 0.5 | −12.5 |
| LAN ports | 3 | 4 | 1 | −12.0 |
| Wall-mountable | Yes — held to half its range (class of fewer than six) | 75% of the class have it | 0.2 | +5.0 |
| Wi-Fi standard | Wi-Fi 7 | Wi-Fi 7 | 2 | +0.0 |
| WAN port speed | 2.5 | 2.5 | 1.5 | +0.0 |
| Processor speed | 0.95 — capped at the class’s lower range (1.5) | 1.5 | 0.5 | +0.0 |
Not scored: Coverage area (unknown: not scored); MU-MIMO (unknown: not scored); OFDMA (unknown: not scored); Beamforming (unknown: not scored); Max connected devices (unknown: not scored); Link aggregation (standard for the class (80% have it)); Antennas (unknown: not scored); WPA3 (standard for the class (100% have it)); Mesh support (unknown: not scored); Guest network (unknown: not scored); Parental controls (unknown: not scored); Quality of Service (QoS) (standard for the class (100% have it)); VPN server (standard for the class (100% have it)); App control (standard for the class (100% have it)); Weight (unknown: not scored).
Editor’s note
MikroTik publishes its own RFC 2544 throughput tests for this router, and they answer the question its spec sheet leaves open. Routing on the fast path reaches about 3.6 Gbps across all ports with full-size packets. Add 25 firewall filter rules and the figure falls to about 1.4 Gbps, and a single IPsec tunnel using AES-128 with SHA1 manages roughly 350 Mbps.
A gigabit line behind a sensible firewall leaves the dual-core chip room to spare, and the 2.5G port earns its place for a NAS or a faster uplink as long as the rule list stays short. A site-to-site IPsec link is where the dual-core chip reaches its limit first, so a small office joining two locations should plan around that tunnel figure. I would not put this router in front of a multi-gig fiber line with a long list of rules.
The Wi-Fi is entry-level Wi-Fi 7, two streams per band and no third radio. A home with Wi-Fi 7 laptops that can use the newest band will get more from a tri-band unit, whatever software it runs.
Its best use is as a second or third MikroTik box. As a CAPsMAN-managed access point that can also route, it is MikroTik's entry route to adding Wi-Fi 7 to an existing RouterOS network, and it fits on a shelf or a wall where a larger router would not.
Specifications
Quality bars show where each figure sits between the lowest and highest of the 26 wi-fi routers this VS Score is measured against.
Wireless
Ports & wired
Hardware
Features & security
Design
Networking assessment
What the specification table does not say on its own: what this device needs to connect, what speeds are realistic, what costs extra, and where it falls short. Every statement below is read from the verified sheet or written by an editor — nothing is estimated.
Test environment
Research-based assessment: this brief is derived from the manufacturer’s published specifications for the MikroTik hAP be lite and the documents listed under Sources and verification. We have not run this unit on our own network, so nothing here is a measurement of ours.
Connection requirements
The WAN (internet) port is rated at 2.5 Gbps. An internet plan faster than that is capped at the router, and nothing on the network can download faster than this port regardless of the wireless figures.
There are 3 LAN ports, all Gigabit; a switch is needed for more wired devices.
Throughput expectations
The Wi-Fi 7 headline of 3,570 Mbps adds together the theoretical peak of every band. A single device connects to one band at a time, so no client ever sees the total, and real-world speeds run well below the link rate even in the same room.
There is no 6 GHz band, so the least congested spectrum available to new phones and laptops is not on offer here.
Firmware and subscriptions
The hAP be lite runs RouterOS v7, and MikroTik's upgrade server gives 7.24.5, published September 29, 2026, as the newest stable release. RouterOS is released in long-term, stable, testing and development channels, and the router's own update check reaches MikroTik's servers over HTTPS. MikroTik promises free software updates for the life of the product or at least five years from the date of purchase, with no subscriptions or locked features.
Set-up and management run through the manufacturer’s app; check whether a local web interface is offered as well.
VPN support is built in, which avoids a subscription to a third-party VPN router service for remote access.
Security support
WPA3 is supported, the current Wi-Fi encryption standard; devices that only speak WPA2 still connect in mixed mode.
Security-update cadence is not something manufacturers publish as a specification; see Support and updates below.
Known limitations
Not offered, according to the spec sheet: 6 GHz band, multi-gig LAN, built-in security suite.
10 specifications are not published by the manufacturer and are shown as Unknown rather than guessed.
Support and updates
Documentation lives on MikroTik's help portal, which covers RouterOS configuration in depth, and the router has its own quick guide and a wall-mounting drawing on its product page. Beyond that, MikroTik points owners to its public forum and to a directory of certified consultants.
Sources and verification
Where the specifications come from
- Official product pagemikrotik.com
- Datasheet or manualcdn.mikrotik.com
- Support and firmware documentationmikrotik.com
Verification
- First published
- Specifications last checked
- Sheet completeness
- 18 of 28 specifications verified; the rest show as Unknown and are never estimated or scored
- Page type
- Product specification page — Compiled from the manufacturer’s published specifications and the cited sources; this is not a hands-on test.
- Basis
- Research-based: specifications and editorial text were compiled from the documents listed here and the manufacturer’s published data. We have not tested this unit ourselves; where independent measurements are mentioned they belong to the linked publication.
Wi-Fi Routers with similar specs to the MikroTik hAP be lite
Ratings & reviews
No reviews yet. Be the first to share your experience.
The bottom line
The MikroTik hAP be lite earns a VS Score of 31, below the median of the 26 wi-fi routers it is measured against (a score of 50 is level with that median).
- Who it’s for
- Someone already running MikroTik gear, or keen to learn RouterOS, who wants VLANs, scripting and CAPsMAN in a small box and has an internet line of about a gigabit.
- Who should look elsewhere
- Anyone who wants a router set up from a phone in a few taps and then forgotten. RouterOS rewards owners who read its documentation, and this dual-band unit also leaves out the newest band.
- The trade-off that matters
- RouterOS will do almost anything, and the dual-core chip and two-stream radios decide how much of it runs at full speed.
- The main alternative
- TP-Link Archer BE230: the same dual-band Wi-Fi 7 class with a 2.5G WAN and a 2.5G LAN port and TP-Link's app-led setup, for a home that does not want to learn RouterOS.
The VS Score is calculated from the weighted specifications above, each measured against the median of comparable wi-fi routers — a shortlisting guide, not a substitute for your own priorities. See how we score.
