This is something that never worked for me by using the "Client MAC Address equals <mac with colons>"
What works for me is doing "Client MAC Address starts-with <mac without colons>"
See image below and see if this works for you. Not sure why the equals option does not work. It also forces you to use the colons in the mac address.
