Cisco Cisco IOS Software Release 12.2(33)SB

You cannot use the SNMP-VACM-MIB to create a view that includes the Lawful Intercept MIBs. 

The default SNMP view excludes the following MIBs:

CISCO-TAP2-MIB 
CISCO-IP-TAP-MIB 
CISCO-USER-CONNECTION-TAP-MIB
SNMP-COMMUNITY-MIB
SNMP-USM-MIB
SNMP-VACM-MIB 

See the 

 for additional considerations. Also see the 

. 

To maintain router performance, lawful intercept is limited to no more than .2% of active calls. 
For example, if the router is handling 4000 calls, 8 of those calls can be intercepted. 

Cisco IOS Release 12.2(31)SB2 supports VRF-aware IP taps using the citapStreamVRF OID in the 
CISCO-IP-TAP-MIB. VRF-based interception is in the PXF and supported on the PRE2 and PRE3. 

Cisco IOS Release 12.2(28)SB does not support VRF-aware lawful intercept. 

Lawful intercepts are not supported on a PRE1. 

Voice and data interception are supported in Cisco IOS Release 12.2(7)XI and later releases. 

Tapping of multicast packets is achieved using Layer 3 intercepts, except where the target identity 
is the MAC address. 

Taps are not allowed on subnets that span multiple routes in the route table. 

 describes the lawful intercept capabilities by Cisco IOS release.

In summary, IOS Release 12.2(28)SB Layer 2 intercepts are processed by the PXF and Layer 3 intercepts 
are processed by the RP. In IOS Release 12.2(31)SB2, both PRE2 and PRE3 Layer 3 intercepts are 
processed by the PXF. 

1.

Each intercepted packet is processed by the Route Processor (RP) or Parallel Express Forwarding (PXF). 

Release 12.3(7)XI 

Layer 3 SNMPv3 

Total of 6.4Mbps for 
all active taps

PRE2 CISCO-TAP-MIB 

RP

Release 12.2(28)SB 

Layer 2 RADIUS 

4095 concurrent taps

PRE2 

CISCO-TAP2-MIB PXF 

Layer 3 SNMPv3 

Total of 6.4Mbps for 
all active taps

PRE2

RP 

Release 12.2(31)SB2

Layer 2 RADIUS

4095 concurrent taps

PRE2, PRE3

CISCO-TAP2-MIB

PXF 

Layer 3 SNMPv3 

4095 concurrent taps

PRE2, PRE3

PXF