diff --git a/raddb/mods-available/files b/raddb/mods-available/files
index cb9658c42d208..10d4033bd39f1 100644
--- a/raddb/mods-available/files
+++ b/raddb/mods-available/files
@@ -70,3 +70,12 @@ files files_accounting {
 #	key = "%{Stripped-User-Name || User-Name}"
 	filename = ${modconfdir}/files/accounting
 }
+
+#
+#  ## An instance of the `files` module for authorizing access for WiFi clients
+#  ## via their MAC address
+#  ## Based on https://wiki.freeradius.org/guide/Mac-Auth
+#
+files authorized_macs {
+	key = "%{Calling-Station-ID}"
+}
diff --git a/raddb/mods-config/authorized_macs/accounting b/raddb/mods-config/authorized_macs/accounting
new file mode 100644
index 0000000000000..185c79d14133c
--- /dev/null
+++ b/raddb/mods-config/authorized_macs/accounting
@@ -0,0 +1,5 @@
+#  This is like the 'users' file, but it is processed only for
+#  accounting packets.
+#
+#  See the `accounting` file in the files mod for examples
+
diff --git a/raddb/mods-config/authorized_macs/authorize b/raddb/mods-config/authorized_macs/authorize
new file mode 100644
index 0000000000000..77f25ab157011
--- /dev/null
+++ b/raddb/mods-config/authorized_macs/authorize
@@ -0,0 +1,14 @@
+#
+# 	Configuration file for the rlm_files module.
+# 	Please see rlm_files documentation for more information.
+#
+# 	This file contains authentication security and configuration
+#	information for each user.  Accounting requests are NOT processed
+#	through this file.  Instead, see the 'accounting' file in this directory.
+#
+#	This file follows the same format as other instances of the files mod, see
+#	the `files/authorize` for more details and examples
+#
+#	An example entry is below
+#00-00-5E-00-53-FF
+#        Reply-Message = "Device with MAC Address %{Calling-Station-Id} authorized for network access"