Concept Guide

291 | Services Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide
In the United States, SPs are required to ensure LI compliance based on Communications Assistance for Law
Enforcement Act (CALEA) specifications.
Instant supports CALEA integration in a hierarchical and flat topology, mesh W-IAP network, the wired and
wireless networks.
Enable this feature only if lawful interception is authorized by a law enforcement agency.
CALEA Server Integration
To support CALEA integration and ensure LI compliance, you can configure the W-IAPs to replicate a specific or
selected client traffic and send it to a remote CALEA server.
Traffic Flow from IAP to CALEA Server
You can configure a W-IAP to send GRE encapsulated packets to the CALEA server and replicate client traffic
within the GRE tunnel. Each W-IAP sends GRE encapsulated packets only for its associated or connected clients.
The following figure illustrates the traffic flow from the W-IAP to the CALEA server.
Figure 81 IAP to CALEA Server
Traffic Flow from IAP to CALEA Server through VPN
You can also deploy the CALEA server with the controller and configure an additional IPSec tunnel for corporate
access. When CALEA server is configured with the controller, the client traffic is replicated by the slave W-IAP
and client data is encapsulated by GRE on slave, and routed to the master W-IAP. The master IAP sends the
IPsec client traffic to the controller. The controller handles the IPSec client traffic while GRE data is routed to
the CALEA server. The following figure illustrates the traffic flow from W-IAP to the CALEA server through VPN.