Hello and thanks to all who help me out with this issue.
First a little background we are a 15 year old small ISP that is getting ready to a deploy 5GHz wisp. I am not new to wired networking and ISP foo but a bit new to wireless so this may just be a misconfiguration on my part. We are using Hotspot + Mac auth via radius and I am having trouble keeping CPEs authenticated. What I see in the Mikrtoik is multiple IPS per mac in the Hosts View in Hotpspot and the IPS are coming from the users local LAN. The customers CPE is a WDS bridge to the sectors on our tower and is routed mode for the customers lan. It seems like each connection to a web site or other client assigned an additional IP from the IP Pool to the mac. The other thing I see is every time a CPE Mac is assigned a new IP it re-auths on our Radius server which will reject the auth for multiple IPS per mac. I tried setting the number of IPs to 2 and to 1 and this still does not work as then the Mikrotik rejects the auth and never sends it to radius due to too many ips per mac. The other problem is as the Mikrotik assigns new ips it re auths on the radius server so I have hundreds of auths on the radius for a single client machine. In my test setup I have 9 pcs behind the CPE and this causes all kinds of havoc. I tried using just a single laptop connected to the CPE and I still get multiple IPS per CPE mac. The only way I can get the CPE to work is to bind it and bypass the hotspot all together. I am still not sure if the problem is in the Mikrotik or if its a problem with the Ubiquity gear. I am sure there is more info you guys will need but I have included a crude network diagram to help describe our set up.
The mikrotik is a 450 RB 4.0
The CPEs are Ubiquity Nanostations
The APs a Ubiquity Rocket M5s
