Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 180

How to Configure SNMP v3 Access for Lawful Intercept on the Router
Do not disable LI if there is an active TAP, or the TAP will be deleted.
Note
Configuring the Inband Management Plane Protection Feature
You do not need to configure the MPP feature to enable the SNMP server to communicate with the
mediation device for the purpose of lawful intercept unless you have previously configured MPP to work
with any other protocol. In such a case only, you must specifically configure MPP as an inband interface
to allow SNMP commands to be accepted by the router, using a specified interface or using all interfaces.
If you have recently migrated to Cisco IOS XR software from Cisco IOS and you had MPP configured
Note
for a given protocol, you may still need to perform this task.
For the purpose of lawful intercept, a loopback interface is often the destination of choice for SNMP
messages. If you choose this interface type, you must include it in your inband management
configuration.
For the configuration procedure, see the
Inband Interface" section on page
Management Plane Protection Feature: Example, page
For a more detailed discussion of the Inband Management Interface, see the
Interface" section on page
Enabling the Mediation Device to Intercept VoIP and Data Sessions
The following SNMP server configuration tasks enable the Cisco SII feature on a router running
Cisco IOS XR software by allowing the mediation device to intercept VoIP or data sessions.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-174
SC-183.
configure
snmp-server view view-name ciscoTap2MIB included
snmp-server view view-name ciscoIpTapMIB included
snmp-server view view-name snmpTrapOID
snmp-server view view-name sysUpTime
snmp-server group group-name v3 auth read view-name write view-name notify view-name
snmp-server host ip-address traps version 3 priv username udp-port port-number
snmp-server user mduser-id groupname v3 auth md5 md-password
end
or
commit
show snmp group
show snmp users
show snmp view
Implementing Lawful Intercept on Cisco IOS XR Software
"Configuring a Device for Management Plane Protection for an
SC-185. For an LI-related example of this, see
SC-177.
Configuring the Inband
"Inband Management
OL-20382-01