So I have been running Mikrotik for my large hotspot around 4 years and works great except for MAC login.
I use a Radius Server to authenticate username for people who sign up using the captive portal.
I do not authenticate MAC Address to radius I want to do it localy on the Mikrotik.

So I add a customers MAC address as a user then find the MAC in the hosts tab of hotspot it has a H for DHCP i remove it and i usally pops back in quick or i just have them try a website and they pop back with a A for Authenticated and H for DHCP and everything works fine.

Now customers laptop maybe drops from the wireless or roams to another AP on the same Layer 2 network or they simply shutdown for a while. When they
come back on they might pull a diferent IP address and end up in the Hosts tab with a H but no A. Same mac address that is in users tab I remove the entry in hosts tab and it pops back in as authenticated. This happens alot and is kinda anoying especialy when vendors are trying to use service to run credit cards and they have to call me up to reset.

Is this a Bug or am I missing something? I would seem if the mac is in there it should authenticate no matter how often the change IP?

Router OS 5.20 on X86

Another Customer with mac authentication got stuck at the login page because the Hotspot didnt authenticate the MAC even though it was in the hotspot users tab. I removed the mac from the hosts tab and it popped back in as authenticated with the same ip address as it had when i removed it so why was it not authenticated. Mikrotik, Please some input on this?

Submit to. RoS 5.21 (two mikrotiks over vrrp with radius MAC auth over hotspot)

another work with script by scheduler (sample 30 sec)
/ip hotspot host remove [find !authorized ]
from top http://forum.mikrotik.com/viewtopic.php?f=2&t=47231