Command Or Action; Step 1 - Cisco ASR 9000 Series Configuration Manual

Per-session Lawful Intercept
DETAILED STEPS

Command or Action

Step 1

configure
Example:
RP/0/RSP0/CPU0:router# configure
Step 2 snmp-server view view-name ciscoTap2MIB
included
Example:
RP/0//CPU0:router(config)# snmp-server
view TapName ciscoTap2MIB included
Step 3 snmp-server view view-name
ciscoUserConnectionTapMIB included
Example:
RP/0//CPU0:router(config)# snmp-server
view TapName ciscoUserConnectionTapMIB
included
Step 4 snmp-server group group-name v3auth read
view-name write view-name notify view-name
Example:
RP/0//CPU0:router(config)# snmp-server
group TapGroup v3 auth read TapView write
TapView notify TapView
Step 5
snmp-server host ip-address traps version 3
auth username udp-port port-number
Example:
RP/0//CPU0:router(config)# snmp-server
host 223.255.254.224 traps version 3 auth
bgreen udp-port 2555
Step 6 snmp-server user mduser-id groupname v3
auth md5 md-password
Example:
RP/0//CPU0:router(config)# snmp-server
mduser-id TapGroup v3 auth md5 mdpassword
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide,
Release 4.3.x
224
Purpose
Enters global configuration mode.
Creates or modifies a view record and includes the CISCO-TAP2-MIB
family in the view. The SNMP management objects in the
CISCO-TAP2-MIB that controls lawful intercepts are included. This
MIB is used by the mediation device to configure and run lawful
intercepts on targets sending traffic through the router.
Creates or modifies a view record and includes the
CISCO-USER-CONNECTION-TAP-MIB family, to manage the Cisco
intercept feature for user connections. This MIB is used along with the
CISCO-TAP2-MIB to intercept and filter user traffic.
Configures a new SNMP group that maps SNMP users to SNMP views.
This group must have read, write, and notify privileges for the SNMP
view.
Specifies SNMP trap notifications, the version of SNMP to use, the
security level of the notifications, and the recipient (host) of the
notifications.
Configures the MD user as part of an SNMP group, using the v3 security
model and the HMAC MD5 algorithm, which you associate with the
MD password.
• The mduser-id and mdpassword must match that configured on
MD. Alternatively, these values must match those in use on the
router.
• Passwords must be eight characters or longer to comply with
SNMPv3 security minimums.
• Minimum Lawful Intercept security level is auth; The noauth
option will not work, as it indicates noAuthnoPriv security level.
Configuring Subscriber Features
OL-28375-03