cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1636
Views
0
Helpful
2
Replies

config Lawful Intercept failed on 7600

hcriddick
Level 1
Level 1

I have to config Lawful Intercept on 7600, IOS version 12.2(33)SRC6. Every step have be taken by "Cisco 7600 Lawful Intercept Configuration Guide".

Such as:

Router(config)# snmp-server view tapV ciscoTap2MIB included

Router(config)# snmp-server view tapV ciscoIpTapMIB included 
Router(config)# snmp-server group tapGrp v3 auth read tapV write tapV notify tapV 
Router(config)# snmp-server user ss8user tapGrp v3 auth md5 ******** 
Router(config)# snmp-server engineID local 1234
......
Then 
Router#show snmp mib
There are:

citapStreamCapabilities

citapStreamInterface

.

.

.

cTap2MediationNewIndex

cTap2MediationDestAddressType

cTpa2MediationDessAddress

.

.

.

and so on

BUT

when I exec snmpwalk from snmp manager, most of LI objects have disappeared.

for example:

>snmpwalk -v 3 -U user -l authNoPriv -a md5 -A ******** 172.10.1.1 1.3.6.1.4.1.9.9.399

SNMPv2-SMI::enterprises.9.9.399.1.1.1.0 = INTEGER:1

SNMPv2-SMI::enterprises.9.9.399.1.1.3.0 = Hex-STRING:A0 00

SNMPv2-SMI::enterprises.9.9.399.1.3.1.0 = INTEGER:2

SNMPv2-SMI::enterprises.9.9.399.1.3.2.0 = INTEGER:100

where is cTap2MediationDestAddressType (1.3.6.1.4.1.9.9.399.1.1.2.1.2)?

Also cTap2MediationDestAddressType can't be set with snmpset.

So, config failed? or these objests should be created? or something?

This is what I came up with so far, if anyone can add to the list, I would appreciate it.

riddick

2 Replies 2

hcriddick
Level 1
Level 1

anyone help?

verint
Level 1
Level 1

You would need to do SNMP set for all the objects.

cTap2MediationStatus.1 -i 5
cTap2MediationDestAddressType.1 -i 1
cTap2MediationDestAddress.1 -o "28 00 00 64"      #IP in HEX
cTap2MediationDestPort.1 -g 5018      # MD Port
cTap2MediationSrcInterface.1 -i 0
cTap2MediationTimeout.1 -o "07 d7 07 19 00 00 00 00 2d 04 00"   # Year Month DAY H M S in HEX
cTap2MediationTransport.1 -i udp
cTap2MediationDscp.1 -i 34
cTap2MediationDataType.1 -i 0
cTap2MediationNotificationEnable.1 1
cTap2MediationTransport.1 -i 1
cTap2MediationStatus.1 -i 1

cTap2StreamStatus.1.1 -i 5
cTap2StreamType.1.1 -i 1
cTap2StreamInterceptEnable.1.1 -i 1


cTap2StreamStatus.1.2 -i 5
cTap2StreamType.1.2 -i 1
cTap2StreamInterceptEnable.1.2 -i 1


citapStreamInterface.1.1 -i -1
citapStreamInterface.1.2 -i -1
citapStreamAddrType.1.1 -i 1
citapStreamAddrType.1.2 -i 1
citapStreamDestinationAddress.1.1 -x "00 00 00 00"
citapStreamDestinationAddress.1.1 -x "0A 00 00 0A"  $ IP in HEX ie. 10.0.0.10
citapStreamDestinationLength.1.1 -u 0
citapStreamDestinationLength.1.2 -u 32
citapStreamSourceAddress.1.2 -x "00 00 00 00"
citapStreamSourceAddress.1.1 -x  "0A 00 00 0A"
citapStreamSourceLength.1.2 -u 0
citapStreamSourceLength.1.1 -u 32
citapStreamFlowId.1.1 -i -1
citapStreamFlowId.1.2 -i -1
citapStreamProtocol.1.1 -i -1
citapStreamProtocol.1.2 -i -1
citapStreamDestL4PortMin.1.1 -u 0
citapStreamDestL4PortMin.1.2 -u 0
citapStreamDestL4PortMax.1.1 -u 65535
citapStreamDestL4PortMax.1.2 -u 65535
citapStreamSourceL4PortMin.1.1 -u 0
citapStreamSourceL4PortMin.1.2 -u 0
citapStreamSourceL4PortMax.1.1 -u 65535
citapStreamSourceL4PortMax.1.2 -u 65535

cTap2StreamStatus.1.1 -i 1
cTap2StreamStatus.1.2 -i 1
cTap2StreamInterceptEnable.1.1 -i 1
cTap2StreamInterceptEnable.1.2 -i 1

Review Cisco Networking for a $25 gift card