Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Section
Column
Panel

In this section:

Table of Contents
maxLevel4

Column
width40%
Info
iconfalse

Related articles:

Overview

Div
classexcerptdiv
Excerpt

Spacevars
0series4
acting as P-CSCF or I-BCF is configurable to intercept IMS sessions using Lawful Interception (LI)  techniques (legally sanctioned official access to private communications). This feature can also be used in non-IMS deployments to intercept audio, clear mode and fax streams.

At a high level, SBC Lawful Intercept functionality includes:

  • Support of Encapsulation mode (multimedia) for all signaling messages and media streams; Encapsulation mode signifies intercepting the received or sent signaling or media stream, by appending an header with extra information, towards the Mediation Server.
  • Support for SIP URI and DN based interception
  • Support for intercepting RTP media types such as audio, image (fax), clearmode
  • Support for intercepting any SIP signaling messages
  • Support for sending intercepted signaling messages over TCP, using an optional IPSec tunnel

Note

 Perform these steps if not already configured in EMS. The LI license is provisioned before interception, using EMS. For more details to provision LI license, refer to EMS User Guide.

Anchor
Configure the CDC
Configure the CDC
Configuring the Call Data Channel

To configure Call Data Channel (CDC), perform the following steps:

Anchor
Configure CDC with IP Interface Group
Configure CDC with IP Interface Group

...

Configuring CDC with IP Interface Group

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC ipInterfaceGroupName LIG1
commit
Note

Mediation server’s ipInterfaceGroup must be different from other signaling ipInterface groups. This ensures that LI doesn't use signaling ipAddress to send intercepted traffic (media/signaling) towards Mediation Server.

Anchor
Configuring CDC for Intercept Flavor as IMS LI
Configuring CDC for Intercept Flavor as IMS LI
Configuring CDC for Intercept Flavor as IMS LI

...

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC mediationServer MS1 media tcp ipAddress 10.54.78.20 portNumber 65120
commit
% set addressContext default intercept callDataChannel CDC mediationServer MS1 media tcp state enabled mode inService
commit 
Note

Mediation server’s ipInterfaceGroup must be different from other signaling ipInterface groups. This ensures that LI doesn't use signaling ipAddress to send intercepted traffic (media/signaling) towards Mediation Server.

Anchor
Configuring CDC for Media Interception Over UDP
Configuring CDC for Media Interception Over UDP
Configuring CDC for Media Interception Over UDP

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC mediationServer MS1 media udp ipAddress 10.54.78.20 portNumber 65200
commit
% set addressContext default intercept callDataChannel CDC mediationServer MS1 media udp state enabled mode inService
commit 
Note
The protocolType "udp" is not supported for Signaling interception in this release.

 
Anchor
Configuring CDC for Signaling Interception
Configuring CDC for Signaling Interception
Configuring CDC for Signaling Interception

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC mediationServer MS1 signaling ipAddress 10.54.78.25 portNumber 65300 protocolType tcp
commit
% set addressContext default intercept callDataChannel CDC mediationServer MS1 signaling state enabled mode inService
commit
Note

The protocolType "udp" is not supported for Signaling interception in this release.

Anchor
Configuring CDC for RTCP Interception
Configuring CDC for RTCP Interception
Configuring CDC for RTCP Interception

...

Enter the show commands to view the configurations.

...

Anchor
Viewing the Intercept Details
Viewing the Intercept Details
Viewing the Intercept Details

View To view the intercept details, by executing execute the following command:

Code Block
languagenone
 > show status addressContext default intercept interceptCallDataChannelStatistics default
primaryChannelStatuscallDataChannel
callDataChannel CDC {
    outOfService;
secondaryChannelStatusmediationServerMediaStatus MS1 outOfService;{
StartSuccess        tcpChannelstatus    0outOfService;
StartFailures        tcpPacketsSent   0;
StopSuccess        tcpPacketsLost     0;
StopFailures        udpPacketsSent    0;
CallAnswerSuccess       0;
CallAnswerFailures udpPacketsLost     0;
CallDisconnectSuccess   0;
CallDisconnectFailures  0;}
ServiceInstanceSuccess  0;
ServiceInstanceFailures 0;
IndicationSuccess  mediationServerSignalingStatus MS1 {
   0;
IndicationFailures     tcpChannelStatus 0outOfService;
KeepAliveSuccess        0;
KeepAliveFailuresDSRSuccess       0;
RestartSuccess          0;
RestartFailures   DSRFailures      0;
RadiusAckReceived       0;
StartResponsesReceived  0;}
}
[ok]

...

Anchor
Viewing the CDC Configuration
Viewing the CDC Configuration
Viewing the CDC Configuration

View To view the CDC configuration, by executing execute the following command:

Code Block
languagenone
 % show addressContext default intercept callDataChannel CDC
interceptStandard    etsi threeGpp;
vendorId             verint utimaco;
ipInterfaceGroupName  LIG1;
liPolDipForRegdOodMsg enabled;
rtcpInterception      enabled;
mediationServer MS1 {
    signaling {
        ipAddress  10.70.54.48;
        portNumber 9632;
        mode       inService;
        state      enabled;
    }
    media {
        tcp {
            ipAddress  10.54.78.2070.54.48;
            portNumber 8007;
            mode       inService;
            state      enabled;
        }
        udp {
            ipAddress  10.70.54.48;
            portNumber 651207241;
            mode       inService;
            state      enabled;
        }
    }
}
[ok]

...