This is documented. Routers are required to have the ability to intercept traffic in response to a warrant, but the router's administrator must manually create an intercept and grant the government access to data. There is no "backdoor."

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_cfg/conf...