hi,
nothing to do with firewall/nat/masquerade...
just plain dhcp server and stations in lan
station in lan asks mikrotik dhcp server for an IP and incluides client-id field
dhcp server asks for autentication on radius but such client-id field is not informed...