Customer is asking with Juniper lawful Interception, does it support:

Is Layer2 CCC supported in flowtap-lite in MX304? If yes, what config lines are required for l2circuit LI DTCP/Flowtap

Customer need know if JUNOS support LI(Lawful Interception) for L2 VPN/CCC and VPLS

Per Juniper technical document, https://www.juniper.net/documentation/us/en/software/junos/flow-monitoring/topics/concept/services-configuring-flowtaplite.html, starting in Junos OS Release 17.2R1, FlowTapLite supports the sampling of circuit cross connect (CCC) traffic. DTCP/0.8 is required to specify X-JTap-Filter-Family ccc. L3 parameters cannot be included in a DTCP/0.8 ADD request containing X-JTap-Filter-Family. To see which routers support this feature, seeFlowTapLite support for circuit cross connect traffic.

Sample configure shown as below, some common configure for FlowTapLite is not listed.

MX configure:

services {

   flow-tap {

       family {

           inet;

           inet6;

           ccc;

       }

       tunnel-interface vt-0/0/0.100;

   }                                  

}

DTCP configure file: 

New DTCP parameter added: X-JTap-Filter-Family

The values should be set to  “ccc” (for ccc L2 tap).

Encap supported will be ether-ccc and vlan-ccc, extended-vlan-ccc

Example:

This will tap all the input CCC traffic from interface et-0/1/0.100

# more add_ccc

ADD DTCP/0.8

Csource-ID: tac-jed-tap-su

Cdest-ID: cd1

X-JTap-Input-Interface: et-0/1/0.100

X-JTap-Filter-Family: ccc

Flags: STATIC

X-JTap-Cdest-Dest-Address: 10.127.212.89

X-JTap-Cdest-Dest-Port: 8001

X-Jtap-Cdest-Source-Address: 192.168.1.1

X-JTap-Cdest-Source-Port: 49153

X-JTap-Cdest-TTL: 255

Seq: 101