>>>Why Works with both mac-cookies and cookies .. may only mac-cookes will be all right ?
>>>Why addresses-per-mac=2 ?
Because sometime the client can have fixed IP address (for example fixed address at work office) and the HotSpot transparently identifyng and translate this situation.
If you put =1 can not be able to work properly.
>>>diferences between idle-timeout and keepalive-timeout ?
remember: session-timeout must be 0 for mac-cookies to works!
idle-timeout:period of inactivity for UNAUTHENTICATED clients, after that time user is dropped from the HotSpot host list and its used address becomes available again.
keepalive-timeout: Value shows how long AUTHENTICATED host can stay out of reach, after that time the client is removed from the HotSpot active sessions (but the mac-cookies or normal cookies are not deteted!), and its used address becomes available again.
>>>Do you know that the livetime of the cookes is reset to the begining (3days) each time the router has power off ?
Everytime the machine reboot, all dynamic item disappear, like mac-cookies, address-list, etc.
I'm Italian, not English. Sorry for my imperfect grammar.