[c-nsp] IOS and Calea Feature Set
Forrest W Christian
fwc at mt.net
Thu Oct 30 14:10:40 EDT 2008
I'm working on improving my CALEA compliance here. One of the big
things I need to handle is better extraction of frames out of several
cisco routers we have scattered around our network.
Today, we handle our CALEA requests by using a span/mirroring port on a
switch plugged into a CALEA collection device which conforms to the
WISPA CALEA standard. That way, we can capture all of the internet and
most of the on-network traffic, but not quite 100% since traffic which
never leaves the border router doesn't ever exit the border router so it
can't be captured for Law Enforcement.
It looks like the IP Traffic Export would allow me to basically use the
tools we already have in place for this. But, I also am looking at the
CALEA features in the later IOS'es. Unfortunately, the documentation
is written in CALEA-speak, which makes for confusing reading, especially
when you are trying to figure out what pieces you need to make this work.
I'm curious if someone on-list has gotten the CALEA features to work in
a Broadband provider setting, and if so, if they could perhaps point me
in the right direction as far as what pieces we need (aka specific
products instead of "functions") other than the Cisco router w/CALEA
features?
-forrest
More information about the cisco-nsp
mailing list