SC-174
Implementing Lawful Intercept on Cisco IOS XR Software
How to Configure SNMP v3 Access for Lawful Intercept on the Router
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Note Do not disable LI if there is an active TAP, or the TAP will be deleted.
Configuring the Inband Management Plane Protection Feature
Yo u do not need to configure the MPP feature to enable the SNMP server to communicate with the
mediation device for the purpose of lawful intercept unless you have previously configured MPP to work
with any other protocol. In such a case only, you must specifically configure MPP as an inband interface
to allow SNMP commands to be accepted by the router, using a specified interface or using all interfaces.
Note If you have recently migrated to Cisco IOS XR software from Cisco IOS and you had MPP configured
for a given protocol, you may still need to perform this task.
For the purpose of lawful intercept, a loopback interface is often the destination of choice for SNMP
messages. If you choose this interface type, you must include it in your inband management
configuration.
For the configuration procedure, see the “Configuring a Device for Management Plane Protection for an
Inband Interface” section on page SC-185. For an LI-related example of this, see Configuring the Inband
Management Plane Protection Feature: Example, page SC-177.
For a more detailed discussion of the Inband Management Interface, see the “Inband Management
Interface” section on page SC-183.
Enabling the Mediation Device to Intercept VoIP and Data Sessions
The following SNMP server configuration tasks enable the Cisco SII feature on a router running
Cisco
IOS XR software by allowing the mediation device to intercept VoIP or data sessions.
SUMMARY STEPS
1. configure
2. snmp-server view view-name ciscoTap2MIB included
3. snmp-server view view-name ciscoIpTapMIB included
4. snmp-server view view-name snmpTrapOID
5. snmp-server view view-name sysUpTime
6. snmp-server group group-name v3 auth read view-name write view-name notify view-name
7. snmp-server host ip-address traps version 3 priv username udp-port port-number
8. snmp-server user mduser-id groupname v3 auth md5 md-password
9. end
or
commit
10. show snmp group
11. show snmp users
12. show snmp view
To Next Page
Loading...
