Far as I know, it works great on a Max 6000 (haven't worked with it enough on a TNT though; sorry). There is concern about performance issues when every packets has to be evaluated through a filter, but it is very minimal and since the Max 6000s only run T-1s, it shouldn't be a problem. Hi, We are wanting to setup a service where a dialin account can only access, a specific server or group of servers (local and on the internet). My inital reaction was to implement ACL's and define them in the customers radius profile, however, some concern was raised about using ACL's on Ascend gear. Does anyone have any comments or experiences with such implementations? How does it work on a TNT/6000 when assigning on a fairly large scale? Thanks _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com To get FAQ'd: <http://www.nealis.net/ascend/faq>