[c-nsp] IOS and CALEA intercepts?

[david raistrick]

On Wed, 24 Jan 2007, Joe Provo wrote:

> Different parties' legal teams have interpreted it differently,
> but the crux is the definition of 'facilities-based broadband
> internet provider'.  Sit down with your legal counsel and a
> bottomless cup of coffee.

Yup.  And the advice I've gotten boils down to:  Anyone providing circuits 
of 200kb/s or better to customers.  Even if it's just ethernet across your 
colo facility.   Managed servers and hosting are except since they're not 
providing circuits but services.

The definition of 'facilities' has been defined for the purposes of CALEA 
to be much broader than it used to be:

http://edocket.access.gpo.gov/2005/05-20606.htm

"19. Applicability of CALEA to Broadband Internet Access Services.
In this section, we find that facilities-based providers of any type of
broadband Internet access service, including but not limited to
wireline, cable modem, satellite, wireless, fixed wireless, and
broadband access via powerline are subject to CALEA."



As far as the technical details of how to provide intercept data or what 
format that data should be in, etc?  THAT appears to still be open to 
interpretation......they seem to want "us" to create a standard for how 
we'll give them the data.


> As far as cisco gear - the 2003 SII (Service independent intercept)
> architecture is what you want to read up on, including  CISCO-TAP-MIB.
> See RFC 3924  Cisco Architecture for Lawful Intercept in IP Networks
> or google "site:cisco.com SII"


Thanks, I'll look into this!


---
david raistrick        http://www.netmeister.org/news/learn2quote.html
drais at atlasta.net             http://www.expita.com/nomime.html