Cisco Cisco IOS Software Release 12.0(13)S7
Lawful Intercept on Cisco 12000 Series Router ISE Line Cards
Configuration Tasks
8
Part Number OL-8679-01 (Rev. A0) April 1, 2008
SNMP v3 Access for Lawful Intercept
SNMP v3 Access for Lawful Intercept is configured on the router. The configuration commands to setup
the configuration for SNMP v3 access are as follows:
the configuration for SNMP v3 access are as follows:
Note
The following configuration commands can be saved into NVRAM and do not need to be entered every
time the system boots up.
time the system boots up.
router(config)#snmp-server group group3 v3 auth read view3 write view3 notify view3
router(config)#snmp-server view view3 snmp-server view view3 cTapMIB included
router(config)#snmp-server view view3 ciscoUserConnectionTapMIB included
router(config)#snmp-server enable traps tty
router(config)#snmp-server view view3 snmp-server view view3 cTapMIB included
router(config)#snmp-server view view3 ciscoUserConnectionTapMIB included
router(config)#snmp-server enable traps tty
The following configuration command is not saved in NVRAM and must be entered every time the
router boots up:
router boots up:
router(config)#snmp-server user SS8user group3 v3 auth md5 cisco
In the above example, group3 is an SNMP v3 group, which can access the three MIBS specified in
read/write mode. SS8user is a user that belongs to group3 and can provision the specified MIBS securely.
You can change the names, SS8user and group3, to any value.
read/write mode. SS8user is a user that belongs to group3 and can provision the specified MIBS securely.
You can change the names, SS8user and group3, to any value.
Mediation Device Provisioning
Cisco 12000 series router provisioning is done on the mediation device by the mediation device vendor.
In this case, the SS8 mediation device is used as an example.
In this case, the SS8 mediation device is used as an example.
The mediation device
•
activates the intercept at the authorized time and remove it when the authorized time period has
elapsed.
elapsed.
•
periodically audits the elements in the network to ensure that all authorized intercepts are in place
and that only authorized intercepts are in place.
and that only authorized intercepts are in place.
The SS8 mediation device vendor must provision the following three functions to complete Lawful
Intercept provisioning on the SS8 mediation device for a Cisco 12000 series router:
Intercept provisioning on the SS8 mediation device for a Cisco 12000 series router:
•
Access Function Provisioning
•
Surveillance Function Provisioning
•
Collection Function Provisioning
Access Function Provisioning
The SS8 mediation device vendor must verify that the SS8 Access Function Table for Broadband
Telephony Softswitch (BTS) is populated with the correct data as shown in the examples in
Telephony Softswitch (BTS) is populated with the correct data as shown in the examples in
:
•
Access Function Configuration
•
Access Function Provisioning Interface
•
Access Function RADIUS Interface
•
Access Function BTS10200 Provisioning Interface
•
Access Function SNMPv3 Interface