Good Evening
We are using Hotspot with Mac authentication. Our network looks like this Radiusmanager3 MT->AP(172.20.1.x)->CPE(Wlan-172-20.1.x NATing to Lan-2.2.2.x)->(What ever the customer has). We are running into an issue where all of the enduser devices are trying to logon with the CPE Mac address. Which works fine until the cpe isnt the first device to try to login and it locks them out. I have attached a photo below of a log. In setting up the Hotspot we used the wizard. I am lost 
and could really use anything anyone has.
thanks,
johnsonnetwork
[admin@MikroTik] /ip firewall>> nat print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
1 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.50.1.0/24
2 chain=srcnat action=masquerade out-interface=E5*To-E1
3 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.50.2.0/24
4 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.50.3.0/24
3 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.50.2.0/24
4 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=172.50.3.0/24
