try a lowercase "and"...(at least that's what did it for me) [matthew@MPLSMNLY] /ip hotspot user> print where name="user1" AND comment="test1" Flags: X - disabled, D - dynamic # SERVER NAME ADDRESS PROFILE UPTIME [matthew@MPLSMNLY] /ip hotspot user> print where name=&qu...

Level 5 should meet your needs just fine.
Here's a table to help.

http://wiki.mikrotik.com/wiki/Manual:License_levels

Ideally, you should apply QoS policies at all points of your network... Each node should be configured in such a way that it knows what the maximum bandwidth is, so it can choke other traffic. Also keeping in mind whether or not your link is full-duplex (a lot of wireless links aren't...) It's been ...

Have you tried disabling the SIP profile in the firewall? I had this exact same problem, and turning it off took care of it. I have yet to see a SIP "helper" that actually worked correctly (MikroTik or otherwise), particularly if your service provider is already trying to do NAT traversal ...