Okay - so I'm doing some more reading, always a good thing - and actually what I should have done is a

'show sess username'

...and it does in fact show a filter as being applied:

HiPer>> sho ses username

INFORMATION FOR SESSION     username
Service Type:                            Framed
Framed Protocol:                         PPP
Idle Timeout:                            1200
Speed of Connection:                     Auto
NAS IP Address:                          x.x.x.x
Login Service:                           Telnet
Interface Name:                          slot:12/mod:19
Active Session ID:                       5898560
Traffic Threshold:                       0
Keep Alive Interval:                     0
Framed IP Netmask:                       0.0.0.0
MLPPP Fragmentation Threshold:             0
Framed Routing:                          None
Framed Callback Identifier:              0
Framed MTU:                              1500
Compression Algorithm:                   None
Compression Reset Mode:                  Auto
Filter Id Input:                         adult.in
Receive Acc Map:                         0
Transmit Acc Map:                        0
Filter Id Output:                        adult.out

BUT, I'm not smoking crack that we do see cases where filters - although there - do not appear to function at all.

Also - does anyone know what I should be seeing with:

set packet_logging all

HiPer>> show packet_logging

PACKET LOGGING SETTINGS
Logging Packet Type: ALL
Logging Packet Size: 0

I have yet to see anything - I don't see any examples of what kind of syslog message one might expect to see, and I don't end up seeing any.

What I'm wanting to see is not unlike the 'log' at end of a Cisco access-list; a syslog entry indicating what port was allowed/blocked.

Any clarity one can lend on that?

----- Original Message -----

Sent: Monday, November 18, 2002 2:16 PM

Subject: [USR-TC] Filters - me no understand

Well, it seems every so often that my filters no longer work - as in not being applied.

Now is one of those times, and I'd like to understand what is going on.

Looking at an interface, of a logged-in user, I see:

INTERFACE slot:10/mod:16 SETTINGS
Description:                              GWC Modem Driver
Type:                                     RS232
Speed:                                    28800
High Speed:                               0
Administrative Status:                    Up
Operational Status:                       Up
Link Up/Down Traps:                       DISABLED
Promiscuous Mode:                         FALSE
Connector Present:                        TRUE
Filter Access:                            ON
Last Change:                              18d 23:41:04
Policy Access:                            Private
Policy File:
Input Filter:
Output Filter:
Host Type:                                SELECT
Connection Type:                          NORMAL
Port Type:                                LOGIN_NETWORK
User Name:
Access:                                   TWO_WAY

Cojent being the "Filter Access: ON"

Input Filter:
Output Filter:

Even though this user has, as applied upon login from RADIUS:

Framed-Filter-Id = adult

And I do have the filters on there:

adult.in NORMAL IP
adult.out NORMAL IP

Why then, does it not appear to have applied a filter?

System Version: V5.3.3/Non-Encr

...but this craziness seems to happen regardless of version.

I used 'set modem_groups all filter_access on' to begin with, and that doesn't seem to be an issue.

I've got to be missing something here - can anyone help??