(And the new administrative MAC addresses make the MAC cookie even less valuable). By using RADIUS authentication at the wifi association we eliminate the link amongst the Radius login and the Portal consumer login and boundaries./ip firewall filter add action=acknowledge chain=input disabled=no dst-port=8291 in-interface=pppoe-out protocol=tcpIf I