Sorry, I am newbie and have been using GUI RADIUS Server all through.

You have given *no* details about how or why or where this is coming from but >I'm guessing from your single example you are looking for:

---- /etc/freeradius/users ---- DEFAULT Calling-Station-Id !~ "[0-9]+%{User-Id}$", Auth-Type := Reject ----

I presume this expression would do the magic for me. But if for SQL authentication how do I enforce that from the SQL tables?

This assumes: 1) User-Id is an attribute, I'm guessing you actually mean UserName

Yes, I mean UserName. Cheers. Chris.