I expose my problem together with a network scheme.
I have a CCR1009, in the ether7 port I have a hotspot configured, at the other end there is an AP WIFI.
The hotspot is limited to one user per mac. The problem is that the mikrotik CCR1009 detects the MAC of the AP (FF) and the users connected with wifi can not authenticate MAC (AA, BB or CC).
And how is this AP configured? Is it in Bridge mode? Is it still running a DCHP-Client or a DHCP-Server? Sounds like the AP is the only device the Mikrotik is seeing in this scenario so the AP is considered the “user”.