Per-Session Lawful Intercept - Cisco ASR 9000 Series Configuration Manual

Configuring Subscriber Features
Cisco ASR 9000 Series Router supports the Cisco Service Independent Intercept (SII) architecture and
PacketCable
customer compliance with applicable regulations but rather provide tools that can be used by SPs and ISPs
to construct an Lawful Intercept compliant network.
BNG supports the
This guide does not address legal obligations for the implementation of lawful intercept. Service providers
Caution
are responsible for ensuring that network complies with applicable lawful intercept statutes and regulations.
It is recommended that legal advice be sought to determine obligations.
Note For more information about Lawful Intercept-related router configuration, see Implementing Lawful
Intercept chapter in Cisco ASR 9000 Series Aggregation Services Router System Security Configuration
Guide.

Per-session Lawful Intercept

Lawful interception of all Layer 2 or Layer 3 traffic on a specified subscriber interface, on both ingress as
well egress directions, and sending the replicated stream to mediation device, is called the per-session Lawful
Intercept. This Lawful Intercept implements IPv4, IPv6, and multicast traffic interception using the
Cisco-defined MIBs. By default, the SNMP-based Lawful Intercept feature is enabled on the Cisco ASR 9000
Series Router, which allows you to configure the taps. For more information about disabling SNMP-based
Lawful Intercept, see
The subscriber session is identified by Account-session-ID, which acts as a key in identifying the specified
subscriber interface for the subscriber user, whose traffic is getting intercepted.
Lawful Intercept, in general, can be implemented using either SII architecture or PacketCable
The Cisco IOS-XR implementation of SNMP-based Lawful Intercept is based on service-independent intercept
(SII) architecture. SNMPv3 authenticates data origin and ensures that the connection from Cisco ASR 9000
Series Router to the mediation device is secure. This ensures that unauthorized parties cannot forge an intercept
target.
1 PacketCable
TM
architecture addresses device interoperability and product compliance issues using the PacketCable
OL-26148-02
TM1
Lawful Intercept architecture. The Lawful Intercept components by themselves do not ensure
Per-session Lawful Intercept
Disabling SNMP-based Lawful Intercept, on page
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
for subscribers.
134.
™
Per-session Lawful Intercept
TM
specifications.
Specifications.
4.2.x
133