Cisco ASR 9000 Series Configuration Manual page 239

Configuring Subscriber Features
Command or Action
Step 2
aaa intercept
Example:
RP/0/RSP0/CPU0:router(config)# aaa
intercept
Step 3
aaa server radius dynamic-author
Example:
RP/0/RSP0/CPU0:router(config)# aaa server
radius dynamic-author
Step 4 port port_number
Example:
RP/0/RSP0/CPU0:router(config-Dynamic
Author)# port 1600
Step 5 server-key [0|7] word
Example:
RP/0/RSP0/CPU0:router(config-Dynamic
Author)# server-key cisco
Step 6 client hostname{ vrf vrf_name | server-key [0|7]
word }
Example:
RP/0/RSP0/CPU0:router(config-Dynamic
Author)# client 3.0.0.28 vrf default
server-key cisco
Step 7 Use the commit or end command.
Enabling RADIUS-based Lawful Intercept: An example
configure
aaa intercept
aaa server radius dynamic-author
port 1600
OL-28375-03
Cisco ASR 9000 Series Aggregation Services Router Broadband Network Gateway Configuration Guide, Release
Purpose
Enables the radius-based lawful intercept feature.
This command is available only after installing and
Note
activating asr9k-li-px.pie.
When you disable aaa intercept, all radius-based taps are
removed from the Cisco ASR 9000 Series Router.
Configures the lawful intercept as a AAA server and enters the
dynamic authorization local server configuration mode.
Specifies the RADIUS server port. The default port number is 1700.
Specifies the encryption key shared with the RADIUS client.
Specifies the client with which the AAA server will be
communicating.
Note You can configure the server key in a global mode and also
as a per client type key.
commit—Saves the configuration changes and remains within the
configuration session.
end—Prompts user to take one of these actions:
• Yes— Saves configuration changes and exits the configuration
session.
• No—Exits the configuration session without committing the
configuration changes.
• Cancel—Remains in the configuration mode, without
committing the configuration changes.
Radius-based Lawful Intercept
4.3.x
227