I’m still getting duplicate logins for PPPoE connections, in spite of the fact that I have “Only One” enabled everywhere. The “ghost” connections sometimes don’t show that they are using encryption, and I have encryption set to “required” everywhere, also. It seems that a connection is being created somehow for each of some users, and then it cannot be removed except by rebooting the tower. There are no routes for the rouge IP addresses, nor are they sometimes listed in the Winbox PPP Active Sessions list while still showing up at the same time using “ppp active print” at the command line. Even after doing a “ppp active remove 0”, the session is still listed. I cannot even remove it after disabling the Access Point interface altogether, I can only make it go away be rebooting. The largest problem this causes me is the fact that this ghost connection will prevent a true connetion from taking place, when the AP is set to only allow one login per user. If I turn off one login per user, I sometimes get as many as 10 logins for each user(and they show that they are not using encoding, even though it is set to “required”). I have tried adding "idle-timeout"s, but they do not seem to help any. As can be seen in the following report, the user ending in “
AE” is logged in twice, the first listing being a non-functional “phantom” connection, that cannot be removed. I turned off “Only One” long enough to allow “AE” back on, but turned it back off before “:96:CD” could log back in, and as you can see in the list, he cannot log back on at all with a real connection(this is bad 
)…
ADDRESS UPTIME ENCODING
:AB:AE 10.100.20.199 35m30s
:96:CD 10.100.20.197 35m30s
10.150.40.2 46m20s MPPE128...
:AB:AE 10.100.20.193 27m5s MPPE128...
:85:F2 10.100.20.198 27m4s MPPE128...
:7A:54 10.100.20.196 27m4s MPPE128...
:83:AE 10.100.20.195 27m4s MPPE128...
:84:53 10.100.20.194 27m3s MPPE128...
The Caller-IDs have been truncated above, and the 3rd line displayed is the backhaul. The tower unit is an Intel based 2.9rc5, and the clients are all RB532s running 2.9rc5, those with the problem and without all running the same versions with identical configurations. Examining the logs and behaviour of the client device show no evident signs of multiple logins. I thought this might be a hacker attempt at first, but these connections persist even with the Access Point completely disabled. When these connections are first initiated, the only client radios present are those that are supposed to be there, and the additional connections are created without the client never actually losing wireless registration(this can be seen by the “uptime”). Any help or thoughts would be greatly, greatly appreciated…
Hitek