Lawful intercept

To perform LI for BNG CUPS, configurations are required on both the MAG-c and BNG-UP:

• The MAG-c supports reporting of subscriber and LI events; see the MAG-c Control Plane Function Guide and the MAG-c CLI Reference Guide for more information about MAG-c configuration.

• The BNG-UP supports the provisioning of LI targets and mirroring of LI packets.

After the LI mediation gateway identifies an LI subscriber through the MAG-c-reported events, the provisioning of the LI subscriber can be performed directly on the BNG-UP, using the configure li li-source commands as described in the 7450 ESS, 7750 SR, 7950 XRS, and VSR OAM and Diagnostics Guide. Provisioning can be performed using CLI or SNMPv3, however, SNMPv3 is the preferred platform.

When the MAG-c is configured, it notifies the LI mediation device about the UP subscriber IDs and IP addresses. The LI mediation device sends an SNMPv3 command directly to the BNG-UP IP address to set up an LI target. Li targets typically include the following parameters:

• mirror destination service; can be a layer 3 encapsulation or a SAP

• subscriber ID; for example, " _cups_549"

  Note: The BNG-UP automatically appends " _cups_" to the auto-generated subscriber ID.

• ingress and egress direction

• session ID and intercept ID, which allow the LI mediation device to correlate subscriber events and mirrored packets (optional); see the 7450 ESS, 7750 SR, 7950 XRS, and VSR OAM and Diagnostics Guide, section "Lawful Intercept" for information about additional parameters

When the subscriber logs out, the LI mediation device removes the subscriber from the LI source through SNMPv3. When the same subscriber logs in again, the system auto-generates a new BNG-UP subscriber ID.

For the procedure to configure SNMPv3 and BNG CUPS, see Provisioning SNMPv3 and LI subscribers for the BNG-UP