In this section:

Related articles:

Note

Applicable only for CALEA users.

Overview

This section outlines the commands to configure the PCSI LI on the I-SBC. For more information about the PCSI LI configuration, refer to PCSI LI Configuration.

Note
  • As a prerequisite to configure the PCSI LI on the I-SBC, ensure that the Call Data Channel (CDC) and the Mediation Server are enabled and running.
  • You can configure the PCSI LI with only the default address context.
  • For more information on the parameters and their descriptions, refer to Intercept - CLI.
Note

The PCSI LI does not support the X2 interface.

Configuring PCSI LI on I-SBC

Tip

Perform a commit after each step.

% set addressContext default intercept callDataChannel <callDataChannel_name>
    interceptStandard packetcable
    vendorId ss8
    mediaIpInterfaceGroupName <mediaIpInterfaceGroup_name>

% set addressContext default intercept callDataChannel <callDataChannel_name> 
    mediationServer <mediationServer_name> media tcp
      ipAddress <IP_Address>
      portNumber <0-65535>


# To activate:
set addressContext default intercept callDataChannel <callDataChannel_name>
	mediationServer <mediationServer_name> media tcp
	state enabled
	mode inService

Configuring CDC for Intercept Flavor as PCSI LI

For other options of configuring the intercept flavor as PCSI LI, refer to Configuring SBC For Lawful Interception.

% set addressContext default intercept callDataChannel CDC interceptStandard packetCable vendorId ss8
% commit

Configuring CDC for Media Interception

Note

The PCSI LI supports configuring up to eight mediation servers under the CDC.


% set addressContext default intercept callDataChannel CDC interceptStandard mediationServer MS1
% commit

Configuring CDC for Media Interception over TCP

Note

You can configure the PCSI media interception only over TCP. You cannot configure the PCSI media interception over UDP.


% set addressContext default intercept callDataChannel CDC mediationServer MS1 media tcp ipAddress fc22:3200::230:7 portNumber 8765 dscpValue 0
% commit
% set addressContext default intercept callDataChannel CDC mediationServer MS1 media tcp mode inService state enabled
% commit
Note

You can also configure the TCP with the following parameters:

  • kaTime (default of 180)
  • kaInterval (default of 30)
  • kaProbe (default of 4)

Configuring CDC for RTCP Interception

% set addressContext default intercept callDataChannel CDC rtcpInterception enabled
% commit

Configuring IPsec for Media Interception

Configure IPsec as the admin user.

For an IPsec on the X3 interface of the I-SBC PCSI LI, configure the IPsec on the I-SBC.

Note

  • You must configure IPsec only when you want to send the intercepted media over a secure connection between the SBC and the mediation server.

  • The SBC does not support IPsec for media interception over UDP.
  • The SPD entry must create the following entries:

    • localIdentity ipAddress – The SBC interface group IP associated with the LI CDC.

    • remoteIdentity ipAddress – The mediation server IP configured in the LI CDC.

  • The recommended setting for LI IPsec mode is transport.

 

Note

For more information about IPsec configuration, refer to IP Security - CLI.