Lawful Intercept Commands

This module describes the Cisco IOS XR software commands used to configure lawful intercept (LI).

For detailed information about keychain management concepts, configuration tasks, and examples, see the Implementing Lawful Intercept inthe Cisco IOS XR Software the Configuration Module .

lawful-intercept disable

To disable the Lawful Intercept (LI) feature, use the lawful-intercept disable command in Global Configuration mode. To re-enable the LI feature, use the no form of this command.

lawful-intercept disable

Syntax Description

This command has no keywords or arguments.

Command Default

LI feature is enabled by default only if the LI package is installed.

Command Modes

Global Configuration mode

Command History

Release

Modification

Release 3.8.0

This command is introduced.

Release 4.3.2

By default, Lawful Intercept (LI) is not a part of the Cisco IOS XR software. The LI package needs to be installed separately by activating the hfr-li-px.pie. So this command is available only after installing and activating the hfr-li-px.pie.

Command History

Release

Modification

Release 4.1.0

This command is introduced.

Release 4.3.2

By default, Lawful Intercept (LI) is not a part of the Cisco IOS XR software. The LI image needs to be installed separately by activating the asr9k-li-px.pie. So this command is available only after installing and activating the asr9k-li-px.pie.

Usage Guidelines

If you disable lawful intercept, all Mediation Devices and associated TAPs are deleted.

To enable this command, you must install and activate the LI image.

Task ID

Task ID

Operations

li

read, write

Examples

This example shows how to configure the lawful-intercept disable command:

RP/0/RP0/CPU0:router(config)# lawful-intercept disable

overlap-tap enable

To configure traffic interception separately for two inter-communicating intercepted hosts, use the overlap-tap enable command in Global Configuration mode. To revert to the default configuration, use the no form of this command.

overlap-tap enable

Syntax Description

This command has no keywords or arguments.

Command Default

For two inter-communicating hosts where both the hosts are separately intercepted, only the ingress traffic on the ASR 9000 router related to one of the hosts is intercepted.

Command Modes

Global Configuration mode

Command History

Release Modification
Release 5.3.2

This command was introduced.

Usage Guidelines

To use overlap-tap enable command, you must have lawful intercept configured by installing and activating asr9k-li-px.pie.

Task ID

Task ID Operation

li

read

Examples

The following example shows how to configure interception of both the ingress and egress traffic on the ASR 9000 router related to two inter-communicating hosts. 


RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# overlap-tap enable