[c-nsp] IOS and Calea Feature Set

Forrest W Christian fwc at mt.net
Thu Oct 30 14:10:40 EDT 2008


I'm working on improving my CALEA compliance here.   One of the big 
things I need to handle is better extraction of frames out of several 
cisco routers we have scattered around our network. 

Today, we handle our CALEA requests by using a span/mirroring port on a 
switch plugged into a CALEA collection device which conforms to the 
WISPA CALEA standard.   That way, we can capture all of the internet and 
most of the on-network traffic, but not quite 100% since traffic which 
never leaves the border router doesn't ever exit the border router so it 
can't be captured for Law Enforcement.

It looks like the IP Traffic Export would allow me to basically use the 
tools we already have in place for this.   But, I also am looking at the 
CALEA features in the later IOS'es.   Unfortunately, the documentation 
is written in CALEA-speak, which makes for confusing reading, especially 
when you are trying to figure out what pieces you need to make this work.

I'm curious if someone on-list  has gotten the CALEA features to work in 
a Broadband provider setting, and if so, if they could perhaps point me 
in the right direction as far as what pieces we need (aka specific 
products instead of "functions") other than the Cisco router w/CALEA 
features?

-forrest


More information about the cisco-nsp mailing list