diff --git a/raddb/policy.d/packetfence b/raddb/policy.d/packetfence
index e640a0c1eb0b..715df153e257 100644
--- a/raddb/policy.d/packetfence
+++ b/raddb/policy.d/packetfence
@@ -1,3 +1,5 @@
+# normalize MAC addresses
+mac-addr-regexp = '([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})'
 # packetfence-local-auth
 # Try to get the Cleartext-Password from any of the pfguest, pfsponsor or pfsms
 # databases.
@@ -47,6 +49,7 @@ request-timing {
     }
 }
 
+
 packetfence-eap-mac-policy {
     if ( &EAP-Type ) {