In this section:
For a D-SBC (S-SBC or M-SBC) cluster, configure the CLI on the OAM node for the cluster.
Unless otherwise stated, the LI configuration process is the same on Cloud-based and non-Cloud based systems. The SBC Core platforms support Lawful Intercept (LI) functionality using one of the following solutions: SBC ERE solution consisting of the ERE, a third-party IS and EMA (refer to Configuring LI on I-SBC using the EMA GUI) You can use the SBC EMA to configure only the default and IMS LI for the I-SBC. The SBC works in conjunction with the IS, as well as the ERE and EMA (or an external PSX and EMS) to provide call data and call content to law enforcement agencies for calls involving identified intercept subjects. When it receives matching LI criteria in a policy response from the ERE (or PSX), the SBC routes the call as directed and additionally reports call events to the IS. It also sends media stream (call content) to an IP address provided by the IS. The SBC supports three LI flavors: The following table describes the Call Data Channel (CDC) configuration information required to distinguish between Default LI, IMS LI, and PCSI (P-Com.Session-Info) LI. It also provides the LI flavors supported in different platforms: LI Flavors with Supported Platforms SupportedFlavors CDC Configuration Platforms Routing Policy LI Interface Stream Supported Intercept Standard Vendor Id D-SBC SBC SWe/SBC 5000/7000 Series External PSX ERE X1 X2 X3 D-SBC SBC SWe/SBC 5000/7000 Series Legacy LI (default) packetCable/packetCablePlusEtsi none/utimaco/verint Supported Supported Supported SOAP UDP Audio Only Audio Only PCSI LI packetCable ss8 Supported Supported Supported Not Supported TLS Not Supported All Streams Audio Only IMS LI threeGpp/etsi verint/utimaco/none/groupTwoThousand Supported Supported Supported Supported SOAP Audio Only All Streams
For information about using the EMS to configure the LI on the S-SBC, M-SBC, or I-SBC, refer to Configuring LI in SBC SWe N:1 or Cloud-Based Systems.
User "calea" must be created on SBC before attempting LI provisioning.
Create a CALEA user, by executing the following command:
% set oam localAuth user calea group Calea commit
You will see a system-generated password. Use this password when you log on to CALEA user for the first time.
You do not need to create a CALEA user for EMS registered D-SBC setups.
Select Calea from the Role drop-down menu.
Create CALEA User
Click Save.
The CALEA user saves with a temporary password, which appears in the Create User panel. Record the temporary password.
Temporary Password Example
A prompt to create a new password appears. Enter and confirm a new password.
Enter new Password Example
View the CALEA user status, by executing the following command:
> show status oam localAuth userStatus userStatus admin { currentStatus Enabled; userId 3000; } userStatus calea { currentStatus Enabled; userId 3329; } [ok]