Page History

Add_workflow_for_techpubsAUTH1REV5REV6REV3REV1

Panel

In this section:

Table of Contents

maxLevel	4

Info

icon	false

Anchor
Configure the CDC
Configure the CDC
Configuring the

Call Data Channel

To configure Call Data Channel (CDC):

AnchorConfigure CDC with IP Interface GroupConfigure CDC with IP Interface GroupConfiguring CDC with IP Interface Group NoteTo create CDC, refer to the section Configuring SBC For Lawful Interception

IMS LI

This section outlines how to configure the node number and IPsec for the IMS LI.

For information about configuring the IMS LI on the S-SBC, M-SBC, or I-SBC, refer to the following pages:

Configuring the Node Number

As the Calea user, use the following command to configure the LI.

Code Block

language	none

% set addressContext default intercept callDataChannel CDC ipInterfaceGroupName LIG1
commit

Note
Mediation server’s `ipInterfaceGroup` must be different from other signaling `ipInterface` groups. This ensures that LI doesn't use signaling `ipAddress` to send intercepted traffic (media/signaling) towards Mediation Server.

AnchorConfiguring CDC for Intercept Flavor as IMS LIConfiguring CDC for Intercept Flavor as IMS LIConfiguring CDC for Intercept Flavor as IMS LI

For other options of configuring the intercept flavor as IMS LI, refer to the section Configuring SBC For Lawful Interception.

Code Block

language	none

% set addressContext default intercept callDataChannel CDC interceptStandard etsi vendorId verint
commit

AnchorConfiguring CDC for Media Interception Over TCPConfiguring CDC for Media Interception Over TCPConfiguring CDC for Media Interception Over TCP

nodeNumber 7788

Include Page

	CDC_Configured_through_EMS
	CDC_Configured_through_EMS

Configuring IPsec for Signaling and Media Interception

As the admin user, use the following commands to configure the IPsec.

Info

title	Note

This configuration is mandatory only when you must send the intercepted traffic over a secure connection between the
Spacevars
0 product
and the mediation server.
The SBC supports IPsec for media interception over UDP.
The SPD entry must create the following entries:
- localIdentity ipAddress – The SBC interface group IP associated with the LI CDC.
- remoteIdentity ipAddress – The mediation server IP configured in the LI CDC.
The recommended setting for LI IPsec mode is transport.

Info

title	Info

For more information about IPsec configuration, refer to IP Security - CLI.

Code Block

### create and configure IKE and IPsec protection profiles
   
set profiles security ipsecProtectionProfile PRGGSX2_IPSEC_PROT_PROF saLifetimeTime 28800
set profiles security ipsecProtectionProfile PRGGSX2_IPSEC_PROT_PROF espAlgorithms integrity hmacSha1,hmacMd5
set profiles security ipsecProtectionProfile PRGGSX2_IPSEC_PROT_PROF espAlgorithms encryption aesCbc128,_3DesCbc
  
set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF saLifetimeTime 28800
set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF algorithms encryption aesCbc128,_3DesCbc
set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF algorithms integrity hmacSha1,hmacMd5
set profiles security ikeProtectionProfile PRGGSX2_IKE_PROT_PROF dpdInterval noDpd
  
### create IKE peer
  
set addressContext default ipsec peer PRGGSX2 ipAddress 10.54.78.20 preSharedKey 00000000000000000000000000000000 localIdentity type ipV4Addr ipAddress 10.220.41.161
set addressContext default ipsec peer PRGGSX2 remoteIdentity type ipV4Addr

Code Block

language	none

% set addressContext default intercept callDataChannel CDC mediationServer MS1 media tcp ipAddress 10.54.78.20 portNumber 65120
commit
% set addressContext default intercept callDataChannel CDC mediationServer MS1 media tcp state enabled mode inService
commit

AnchorConfiguring CDC for Media Interception Over UDPConfiguring CDC for Media Interception Over UDPConfiguring CDC for Media Interception Over UDP

Code Block

language	none

% set addressContext default intercept callDataChannel CDC mediationServer MS1 media udp ipAddress 10.54.78.20 portNumber 65200
commit
% set addressContext default intercept callDataChannel CDC mediationServer MS1 media udp
set addressContext default ipsec peer PRGGSX2 protocol ikev1 protectionProfile PRGGSX2_IKE_PROT_PROF
  
### create an SPD rule for this IKE peer
  
set addressContext default ipsec spd PRGGSX2_SPD state enabled modeprecedence inService
commit

AnchorConfiguring CDC for Signaling InterceptionConfiguring CDC for Signaling InterceptionConfiguring CDC for Signaling Interception

Code Block

language	none

% 1001
set addressContext default ipsec interceptspd callDataChannelPRGGSX2_SPD CDC mediationServer MS1 signaling ipAddresslocalIpAddr 10.220.41.161 localIpPrefixLen 32 remoteIpAddr 10.54.78.25 portNumber 65300 protocolType tcp
commit
% 20 remoteIpPrefixLen 32
set addressContext default ipsec spd PRGGSX2_SPD action protect
set addressContext default ipsec spd PRGGSX2_SPD protocol 0
set addressContext default intercept callDataChannel CDC mediationServer MS1 signaling state enabled mode inService
commit

Note
The `protocolType` "`udp`" is not supported for Signaling interception in this release.

AnchorConfiguring CDC for RTCP InterceptionConfiguring CDC for RTCP InterceptionConfiguring CDC for RTCP Interception

Code Block

language	none

%  ipsec spd PRGGSX2_SPD protectionProfile PRGGSX2_IPSEC_PROT_PROF
set addressContext default ipsec spd PRGGSX2_SPD mode transport
set addressContext default intercept callDataChannel CDC rtcpInterception enabled
commit

Note
The `rtcpInterception` parameter is visible, when `interceptStandard` and `vendorId` is configured as IMS LI

AnchorConfiguring CDC for "Li Pol Dip For Regd Ood Msg"Configuring CDC for "Li Pol Dip For Regd Ood Msg"Configuring CDC for "Li Pol Dip For Regd Ood Msg"

The parameter liPolDipForRegdOodMsg when enabled is used to indicate SBC to send policy request to PSX for registered Out-Of-Dialog requests(messages) to be intercepted. When this parameter is disabled, policy request is not sent to PSX for registered Out-Of-Dialog requests (messages).

Enable the support for Policy dip, for registered users out-of-dialog messages, to decide on interception, by executing the command

Code Block

language	none

% ipsec spd PRGGSX2_SPD peer PRGGSX2
  
### enable IPsec on the IP interface group
  
set addressContext default interceptipInterfaceGroup callDataChannelLIG1 CDC liPolDipForRegdOodMsg enabled
commit

Note
The `liPolDipForRegdOodMsg` parameter is visible, when `interceptStandard` and `vendorId` is configured as IMS LI.

enabled

Info

title	Note

The SBC supports IMS LI for PS-to-PS handover scenarios. This support does not impact the IMS routing.

Noprint

Back to Top

Viewing IMS LI Configuration

Enter the show commands to view the configurations.

Anchor
Viewing the Intercept Details
Viewing the Intercept Details
Viewing the Intercept Details

To Use the following command to view the intercept details, execute the following command:.

Code Block

language	none

 > show status addressContext default intercept callDataChannel
callDataChannel CDC {
    mediationServerMediaStatus MS1 {
        tcpChannelstatus outOfServiceinService;
        tcpPacketsSent   0;
        tcpPacketsLost   0;
        udpPacketsSent   0;
        udpPacketsLost   0;
    }
    mediationServerSignalingStatus MS1 {
        tcpChannelStatus outOfServiceinService;
        DSRSuccess       0;
        DSRFailures      0;
    }
}
[ok]

Anchor
Viewing the CDC Configuration
Viewing the CDC Configuration
Viewing the CDC Configuration

To Use the following command to view the CDC configuration, execute the following command:.

Back to Top

Code Block

language	none

 % show addressContext default intercept
nodeNumber 7788;
callDataChannel CDC {
    dsrProtocolVersion    0;
	interceptStandard     threeGppetsi;
    vendorId              utimacoverint;
    ipInterfaceGroupName  LIG1;
    liPolDipForRegdOodMsg enabled;
    rtcpInterception      enabled;
    mediaIpInterfaceGroupName LIG1;
    mediationServer MS1 {
        signaling {
            ipAddress    10.7054.5478.4820;
            portNumber 9632;
   65300;
            protocolType tcp;
            mode         inService;
            state        enabled;
        }
        media {
            tcp {
                ipAddress  10.7054.5478.4820;
                portNumber 800765120;
                mode       inService;
                state      enabled;
            }
            udp {
                ipAddress  10.7054.5478.4820;
                portNumber 724165200;
                mode       inService;
                state      enabled;
            }
        }
    }
}
[ok]

Noprint

Pagebreak

Space shortcuts

Page tree

Versions Compared

Old Version 5

New Version Current

Key

Anchor
Configure the CDC
Configure the CDC
Configuring the

IMS LI

Configuring the Node Number

Configuring IPsec for Signaling and Media Interception

Viewing IMS LI Configuration

Anchor
Viewing the Intercept Details
Viewing the Intercept Details
Viewing the Intercept Details

Anchor
Viewing the CDC Configuration
Viewing the CDC Configuration
Viewing the CDC Configuration

Space shortcuts

Page tree

Page History

Versions Compared

Old Version 5

New Version Current

Key

AnchorConfigure the CDCConfigure the CDCConfiguring the

IMS LI

Configuring the Node Number

Configuring IPsec for Signaling and Media Interception

Viewing IMS LI Configuration

AnchorViewing the Intercept DetailsViewing the Intercept DetailsViewing the Intercept Details

AnchorViewing the CDC ConfigurationViewing the CDC ConfigurationViewing the CDC Configuration

Anchor
Configure the CDC
Configure the CDC
Configuring the

Anchor
Viewing the Intercept Details
Viewing the Intercept Details
Viewing the Intercept Details

Anchor
Viewing the CDC Configuration
Viewing the CDC Configuration
Viewing the CDC Configuration