Hi all,
I've been tasked with setting up a Lawful Interception solution for our company. I have read quite a few documents and googled the crap out of this but for the life of me, I can't get the basics working.
My intention at this early stage is to send a few snmpset commands from the linux server towards the Cisco ASR1001-x device.
The first part is to set the mediator, which I did do successfully with the following:
snmpset -v3 -u LI-user -a MD5 -A LI-password -l AuthNoPriv 10.1.1.25 cTap2MediationStatus.2 i 4 cTap2MediationDestAddressType.2 i 1 cTap2MediationDestAddress.2 d "192 168 20 10" cTap2MediationDestPort.2 u 9995 cTap2MediationTransport.2 i 1 cTap2MediationTimeout.2 x "07 E7 08 14 00 00 00 00" cTap2MediationSrcInterface.2 i 0
The next part is to "describe" the subscriber to intercept - this is where things fall apart, and I can't figure out why.
snmpset -v3 -u LI-user -a MD5 -A LI-password -l AuthNoPriv 10.1.1.25 citapStreamAddrType.2.5 i 1 citapStreamDestinationAddress.2.5 d "10 61 61 2" citapStreamDestinationLength.2.5 u 0 citapStreamDestL4PortMin.2.5 u 0 citapStreamDestL4PortMax.2.5 u 65535 citapStreamSourceAddress.2.5 d "00" citapStreamSourceLength.2.5 u 32 citapStreamSourceL4PortMin.2.5 u 0 citapStreamSourceL4PortMax.2.5 u 65535 citapStreamFlowId.2.5 i -1 citapStreamProtocol.2.5 i -1 citapStreamTosByte.2.5 i 0 citapStreamTosByteMask.2.5 i 0 citapStreamInterface.2.5 i -1 citapStreamVRF.2.5 s "" citapStreamStatus.2.5 i 4
The error received is:
Error in packet.
Reason: inconsistentValue (The set value is illegal or unsupported in some way)
Failed object: CISCO-TAP2-MIB::cTap2StreamType.2.5
I'm not sure why this error is produced as it's pretty much identical to other config examples I have found - the main difference is that most examples are for either 7600's or ASR9k's (IOS-XR). I've tried changing the numbers in this part of the snmpset command (citapStreamAddrType.2.5 i 1) - however, it doesn't fix the issue.
Can anyone suggest where I'm going wrong with this?
Cheers,
Greg
