Cisco Cisco IOS Software Release 12.0(13)S7

Pagina di 18
 
Lawful Intercept on Cisco 12000 Series Router ISE Line Cards
Feature Overview
5
Part Number OL-8679-01 (Rev. A0) April 1, 2008
Figure 2
Cisco 12000 Series Router in a Dial-up Access Network 
The following components are used in the network topology for a Voice over IP (VoIP) Lawful Intercept 
solution:
Media Gateway Control Protocol (MGCP) call agent
Mediation device, such as SS8 or Verint
Cisco 12000 series router
When an Media Gateway Control Protocol (MGCP) call agent must support the interface with the 
mediation device to provide the SDP signaling information. The router must support the mediation 
device extracts the intercept target's local IP/UDP address from the SDP signaling information to do the 
SNMPv3 Lawful Intercept provisioning.  As long as the mediation device can use CISCO-TAP-MIB to 
provision an intercept, the router will be able to intercept the call. 
Note
Currently, PGW and BTS are the only two Media Gateway Control Protocol (MGCP) call agents that are 
supported.
The following components are used in the network topology for a dial-up access Lawful Intercept 
solution:
AAA radius server
TopLayer sniffer device
Mediation device (Cisco recommends SS8)
Cisco 12000 series router
For the dial-up Lawful Intercept solution, the sniffer device software caches the RADIUS server 
information. The mediation device obtains the Lawful Intercept provisioning information (such as the 
account session ID) from the sniffer. The mediation device provisions the intercept through the SNMPv3 
interface using the CISCO-TAP-MIB.
Benefits
The Lawful Intercept feature provides service provides with the ability to meet law enforcement 
requirements and gives law enforcement agencies the ability to intercept Voice over IP (VoIP) and data 
traffic as it passes through edge routers.
PSTN
LI admin
Mediation
device
LEA
Intercept
related
information
AAA
server &
IC
Cisco 12000
Router
T1/E1/
T3/STM1
RADIUS info
request &
response
Content of
communication
138263
RADIUS
info.
SNMPv3
provisioning
Intercepted user
communication data