Active Directory and Calling-Station-Id

[Ethariel]

Thks a lot.
I indeed think I don't really get the difference between := and ==.
I've read several examples and doc but not so sure.
I think the last entry (with the reject) is what is missing in my conf
to prevent AD authentication when the CLI is not correct.
I'll try asap and let you know.
I can't access the site for a few days, but I'll return here with the
conclusions.