Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

...

Section
Column
Panel

In this section:

Table of Contents
maxLevel4

Column
width40%
Info
iconfalse
titleRelated articles:

Include Page
Not_for_SWe
Not_for_SWe

...

Include Page
IP_IGs_ServedBySeperateProcessors
IP_IGs_ServedBySeperateProcessors

Lawful Intercept Configuration

Command Syntax

As user 'Calea', use the following commands to configure LI:

Code Block
languagenone
% set addressContext <default> intercept 
   callDataChannel <callDataChannel> 
   nodeNumber <integer>

Command Parameters

Caption
0Table
1Intercept Parameters
3Intercept Parameters

Parameter

Length/Range

Description

CallDataChannel

1-23

The user-configurable LI Call Data Control Channel name.

(See Call Data Channel Parameters table below for parameter details)

nodeNumber

0-9999999

The unique global node number to assign to the 

Spacevars
0product
which is used by the LI server for identification purposes.

Call Data Channel Configuration

As user 'Calea', use the following command to establish the LI call data channel configuration:

Note

The parameter mediaTypeIntercepted must be set to "multimedia" in order to access TCPMediaTransport and UDPMediaTransport parameters.

Command Syntax

Code Block
languagenone
titleCall Data Channel Syntax
% set addressContext <default> intercept callDataChannel <callDataChannel_name>
	TCPMediaTransport
		tcpMediaIpAddress <tcp media ip address>
		tcpMediaPort <0-65535>
	UDPMediaTransport
		udpMediaIpAddress <udp media ip address>
		udpMediaPort <0-65535>
	dsrTcpPort <0-65535>
	interceptStandard < etsi | packetcable | threeGpp>
	ipInterfaceGroupName <ipInterfaceGroup_Name> 
	mediationServer  (See "Mediation Server Syntax" below)
	kaTimer <kaTimer_name>
	liPolDipForRegdOodMsgs <disabled | enabled>
	mediaTypeIntercepted <default | multimedia>
	priIpAddress <value> 
	priMode <outofservice | standby> 
	priPort <priPort_name> 
	priState <disabled | enabled> 
	retries <value>
	rtcpInterception <disabled | enabled>
	secIpAddress <IP_Address> 
	secMode <active | outofservice | standby> 
	secState <disabled | enabled>

As user 'Calea', use the following command in System-level mode to retrieve the LI statistics:

Code Block
> show status addressContext <addressContext name> intercept
	vendorId <none | ss8 | utimaco | verint>

Command Parameters

1-23The user-configurable LI Control name.(See Intercept CallDataChannel table below for parameter details)
Caption
0Table
1Intercept Call Data Channel Parameters
3Intercept Parameters

Parameter

Length/Range

Description

CallDataChannel

Call Data
Channel
Parameters

nodeNumber

0-9999999

The unique global node number to assign to the 

Spacevars
0product
which is used by the LI server for identification purposes.

Caption
0Table
1Intercept CallDataChannel Parameters
3Intercept CallDataChannel Parameters

Parameter

Length/Range

Description

TCPMediaTransport N/A

Specifies the media details of LI Server using TCP mode of transport.

  • tcpMediaIpAddress <ip address> – The LI Server's TCP media IP address where the media is sent.
  • tcpMediaPort <port #> – The LI Server's TCP port where the media is sent. (range: 0-65535)
Note

The parameter mediaTypeIntercepted must be set to "multimedia" to view/configure this parameter.

UDPMediaTransport N/A

Specifies the media details of LI Server using UDP mode of transport.

  • udpMediaIpAddress <ip address> – The LI Server's UDP media IP address where the media is sent.
  • udpMediaPort <port #> – The LI Server's UDP port where the media is sent. (range: 0-65535)
Note

The parameter mediaTypeIntercepted must be set to "multimedia" to view/configure this parameter.

dsrTcpPort  0-65535 <port#> – The LI Server's TCP port where DSR messages are sent. This value is set when mediaTypeIntercepted is set to multimedia.

interceptStandard

N/A

The Intercept Standard to use for this Call Data Channel.

  • etsi
  • packetcable (default)
  • threeGpp

ipInterfaceGroupName

0-23

<IPIG name> – Name of the IP interface group used to stream to the LI Server.

kaTimer

0-65535

<# seconds> (default = 5) – The keep-alive timer value, in seconds.

liPolDipForRegdOodMsgs N/A

 Use this flag to control the sending of the policy dip to PSX for registered user's Out-Of-Dialog messages.

  • disabled (default) – SBC does not send policy request to PSX for registered out-of-dialog requests (messages).
  • enabled – SBC sends policy request to PSX for registered out-of-dialog requests for interception.
mediationServer1-8

<name> – Name of the Mediation Server. See Mediation Server Parameters table below for parameter details.

Note

The mediationServer parameter is only visible when interceptStandard and vendorId are configured for IMS LI (see table Configuring SBC for Different LI Flavors).

mediaTypeIntercepted N/A

Specifies the type of media interception.

  • default (default) – audio, fax

  • multimedia – audio, fax, clearmode streams in Encapsulation mode.

Note

Direct Signaling Report (DSR) messages are also supported. DSR messages are signaling messages generated by SBC, when a call is intercepted. The DSR message contains extra information in the header along with the actual signaling message PDUs.

priIpAddress

N/A

The primary LI Server's IPv4 address where Call Data Channel messages are sent. (default = 0.0.0.0)

priMode

N/A

Mode of the primary server. Options are:

  • active (default)
  • outOfService
  • standby

priPort

0-65535

The primary LI Server's UDP port where Call Data Channel messages are sent. (default = 0)

pristate

N/A

Use this flag to enable/disable communication to the primary LI Server.

  • enabled (default)
  • disabled

retries

N/A

Number of retries before the LI Call Data Channel is considered as failed. (default = 3)

rtcpInterception

N/A

Enable this flag to intercept RTCP information for IMS LI.

  • disabled (default)
  • enabled
Note

secIpAddress

N/A

Secondary LI Server's IPv4 address where Call Data Channel messages are sent. (default = = 0.0.0.0)

secMode

N/A

Mode of the secondary server. Options are:

  • active
  • outOfService (default)
  • standby

secState

N/A

Use this flag to enable/disable communication to secondary LI Server.

  • enabled (default)
  • disabled

vendorId

N/A

The vendor name of the LI server.

  • none (default)
  • ss8
  • utimaco
  • verint

Media Server Configuration

Command

...

Syntax

calea@SBC01a> show status addressContext default intercept callDataChannel CDC; interceptCallDataChannelStatistics default { primaryChannelStatus outOfService; secondaryChannelStatus outOfService; StartSuccess 7967; StartFailures 0; StopSuccess 7967; StopFailures 0; CallAnswerSuccess 7929; CallAnswerFailures 0; CallDisconnectSuccess 7965; CallDisconnectFailures 0; ServiceInstanceSuccess 0; ServiceInstanceFailures 0; IndicationSuccess 185; IndicationFailures 0; KeepAliveSuccess 665; KeepAliveFailures 0; RestartSuccess 1; RestartFailures 0; RadiusAckReceived 53064; StartResponsesReceived 7967; primaryTCPChannelStatus outOfService; secondaryTCPChannelStatus outOfService; DSRSuccess 0; DSRFailures 0; }
Code Block
languagenone
titleMediation Server Syntax
% set addressContext <addressContext name> intercept callDataChannel <CDC name> mediationServer <mediationServer name>
	media <tcp | udp>
	signaling
		dscpValue <0-63>
		ipAddress <IPv4/IPv6 address>
		mode <inService | outOfService>
		portNumber <0-65535>
		protocolType <tcp | udp>
		state <disabled | enabled> 

Command Parameters

Caption
0Table
1Mediation Server Parameters
3Mediation Server Parameters
ParameterDescriptions

media

Mediation server media properties.

  • tcp – Use TCP to transport mediation server details.
  • udp – Use UDP to transport mediation server details.

signaling

Mediation server signaling interception settings.

  • dscpValue – The DSCP value for intercepted signaling/media packets sent on this port. (range: 0-63 / default = 16)
  • ipAddress – The IPv4/IPv6 Address of the mediation server for media/signaling interception over TCP/UDP port.
  • mode – The operational mode of the signaling/media connection towards the mediation server.
    • inService
    • outOfService (default)
  • portNumber – The UDP/TCP port number of the mediation server for media/signaling interception. (range: 0-65536 / default = 0)
  • protocolType – The protocol used by the mediation server for signaling interception. This parameter applies to mediation server Signaling properties only.
    • tcp (default)
    • udp
  • state – The administrative state of the signaling/media connection towards the mediation server.
    • disabled (default)
    • enabled
Note

The protocolType "udp" is not supported for Signaling interception in this release.

As user 'Calea', use the following command in System-level mode to retrieve the LI statistics:

Code Block
> show status addressContext <addressContext name> intercept

Configuring SBC for Different LI Flavors

The following table depicts the interceptStandard and verndorId configuration options to configure SBC for the the various LI flavors.

Caption
0Table
1Configuring SBC for Different LI Flavors
3LI Flavors
Configuration Settings

 

LI Flavor

interceptStandardvendorId
packetcablenone/utimaco/verintLegacy LI (default)
packetcabless8SS8 LI
threeGpp/etsinone/utimaco/verintIMS LI

Command Examples

To configure intercept standard:

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC interceptStandard etsi 

To configure the vendor ID:

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC interceptStandard etsi vendorId verint

To configure mediation server for media interception:

Note

Mediation server’s ipInterfaceGroup must be different from other signaling ipInterface groups. This ensures that LI doesn't use signaling ipAddress to send intercepted traffic (media/signaling) towards Mediation Server.

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC interceptStandard etsi vendorId verint mediationServer ms1 

To configure mediation server for media interception over TCP:

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC mediationServer ms1 media tcp dscpValue 0 ipAddress 10.54.66.67 portNumber 7870
commit
% set addressContext default intercept callDataChannel CDC mediationServer ms1 media tcp mode inService state enabled 
commit

To configure mediation server for media interception over UDP:

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC mediationServer ms1 media udp dscpValue 0 ipAddress 10.54.66.57 portNumber 7881
commit
% set addressContext default intercept callDataChannel CDC mediationServer ms1 media udp mode inService state enabled 
commit

To configure mediation server for signaling interception:

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC mediationServer ms1 signaling dscpValue 0 ipAddress 10.54.64.80 portNumber 7880 protocolType tcp
commit
% set addressContext default intercept callDataChannel CDC mediationServer ms1 signaling mode inService state enabled
commit

To configure RTCP interception:

Code Block
languagenone
% set addressContext default intercept callDataChannel CDC rtcpInterception enabled

 

Pagebreak