He approached the problem differently than most people. He already had a database with the MAC addresses. Due to a deployment mistake in the past he did not have the passwords from each of 500 EAP clients. So rather than going out and changing those addresses he matches up the MAC address with a paying customer from the database. The person is in charge of a wireless ISP so scheduling 500 home visits was a worse option than writing some code to authorize the CPE. David From: Russell Mike [mailto:radius.sir@gmail.com] Sent: Sunday, February 24, 2013 10:00 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: MAC-Auth + Freeradius + MySQL Database On Sun, Feb 24, 2013 at 1:55 PM, David Peterson <davidp@wirelessconnections.net> wrote: I know of one person doing something similar to what you are looking to do. If your NAS sends the MAC of the device with the EAP request, you can extract the MAC from the request using unlang and check that against a database of MACs. No clue how to do this, I just know it can be done. David Dear David, thanks for attending to the request, what do you mean when you say "one person doing something similar to what you are looking to do". Does other do the MAC-Auth in different way i am doing? I read the response from Mr. Alan De. about storing MAC in to Database. Following wiki also explain how to rewrite calling-station-id using unlang and further compair against file or DB. <http://wiki.freeradius.org/guide/Mac-Auth#Mac-Auth-authorisation-by-SSID-SQ L> http://wiki.freeradius.org/guide/Mac-Auth#Mac-Auth-authorisation-by-SSID-SQL Your information is appreciable. Thanks / Regards RM --