Actually that is a good idea, didn't think of that originally.
On a side note, the reference of "Connection:Client-Mac-Address" and "Radius-IETF:Calling-Station-Id" both work. Come to find out later, the MAC address in the SHL was not the one that was being tested, that's why it wasn't matching. Basically we tested a personal device, and not a whitelisted one.
Thanks for the insight, I think I might setup something like MAC Trac for this, might make it easier.