02-02-2012 12:57 AM
I have to config Lawful Intercept on 7600, IOS version 12.2(33)SRC6. Every step have be taken by "Cisco 7600 Lawful Intercept Configuration Guide".
Such as:
Router(config)# snmp-server view tapV ciscoTap2MIB included
Router(config)# snmp-server view tapV ciscoIpTapMIB included
Router(config)# snmp-server group tapGrp v3 auth read tapV write tapV notify tapV
Router(config)# snmp-server user ss8user tapGrp v3 auth md5 ********
Router(config)# snmp-server engineID local 1234
......
ThenRouter#show snmp mib There are:
citapStreamCapabilities
citapStreamInterface
.
.
.
cTap2MediationNewIndex
cTap2MediationDestAddressType
cTpa2MediationDessAddress
.
.
.
and so on
BUT
when I exec snmpwalk from snmp manager, most of LI objects have disappeared.
for example:
>snmpwalk -v 3 -U user -l authNoPriv -a md5 -A ******** 172.10.1.1 1.3.6.1.4.1.9.9.399
SNMPv2-SMI::enterprises.9.9.399.1.1.1.0 = INTEGER:1
SNMPv2-SMI::enterprises.9.9.399.1.1.3.0 = Hex-STRING:A0 00
SNMPv2-SMI::enterprises.9.9.399.1.3.1.0 = INTEGER:2
SNMPv2-SMI::enterprises.9.9.399.1.3.2.0 = INTEGER:100
where is cTap2MediationDestAddressType (1.3.6.1.4.1.9.9.399.1.1.2.1.2)?
Also cTap2MediationDestAddressType can't be set with snmpset.
So, config failed? or these objests should be created? or something?
This is what I came up with so far, if anyone can add to the list, I would appreciate it.
riddick
02-05-2012 04:58 PM
anyone help?
03-05-2012 04:01 AM
You would need to do SNMP set for all the objects.
cTap2MediationStatus.1 -i 5
cTap2MediationDestAddressType.1 -i 1
cTap2MediationDestAddress.1 -o "28 00 00 64" #IP in HEX
cTap2MediationDestPort.1 -g 5018 # MD Port
cTap2MediationSrcInterface.1 -i 0
cTap2MediationTimeout.1 -o "07 d7 07 19 00 00 00 00 2d 04 00" # Year Month DAY H M S in HEX
cTap2MediationTransport.1 -i udp
cTap2MediationDscp.1 -i 34
cTap2MediationDataType.1 -i 0
cTap2MediationNotificationEnable.1 1
cTap2MediationTransport.1 -i 1
cTap2MediationStatus.1 -i 1
cTap2StreamStatus.1.1 -i 5
cTap2StreamType.1.1 -i 1
cTap2StreamInterceptEnable.1.1 -i 1
cTap2StreamStatus.1.2 -i 5
cTap2StreamType.1.2 -i 1
cTap2StreamInterceptEnable.1.2 -i 1
citapStreamInterface.1.1 -i -1
citapStreamInterface.1.2 -i -1
citapStreamAddrType.1.1 -i 1
citapStreamAddrType.1.2 -i 1
citapStreamDestinationAddress.1.1 -x "00 00 00 00"
citapStreamDestinationAddress.1.1 -x "0A 00 00 0A" $ IP in HEX ie. 10.0.0.10
citapStreamDestinationLength.1.1 -u 0
citapStreamDestinationLength.1.2 -u 32
citapStreamSourceAddress.1.2 -x "00 00 00 00"
citapStreamSourceAddress.1.1 -x "0A 00 00 0A"
citapStreamSourceLength.1.2 -u 0
citapStreamSourceLength.1.1 -u 32
citapStreamFlowId.1.1 -i -1
citapStreamFlowId.1.2 -i -1
citapStreamProtocol.1.1 -i -1
citapStreamProtocol.1.2 -i -1
citapStreamDestL4PortMin.1.1 -u 0
citapStreamDestL4PortMin.1.2 -u 0
citapStreamDestL4PortMax.1.1 -u 65535
citapStreamDestL4PortMax.1.2 -u 65535
citapStreamSourceL4PortMin.1.1 -u 0
citapStreamSourceL4PortMin.1.2 -u 0
citapStreamSourceL4PortMax.1.1 -u 65535
citapStreamSourceL4PortMax.1.2 -u 65535
cTap2StreamStatus.1.1 -i 1
cTap2StreamStatus.1.2 -i 1
cTap2StreamInterceptEnable.1.1 -i 1
cTap2StreamInterceptEnable.1.2 -i 1
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide