[sr-dev] Unable to make SIP Calls (403 Forbidden - Domain Not Served)

Александър Йосифов alexyosifov at gmail.com
Tue Apr 14 15:30:57 CEST 2020


Hi,
I am writing not for the problem with SIP calls but for other potential
problems related to IPSEC client/server ports.
As I see from your pcscf.cfg you have:
  #!define IPSEC_CLIENT_PORT 5062
#!define IPSEC_SERVER_PORT 5063
This is not OK because if you have more than one connected UE the client
port for the second UE will overlap the server port. Check
ipsec_max_connections
<https://www.kamailio.org/docs/modules/5.4.x/modules/ims_ipsec_pcscf.html#idm103>
 parameter.
I suggest changing the values of the server port to 5100 or
something bigger.


On Mon, 13 Apr 2020 at 22:37, Pavithra M <pavimohan3096 at gmail.com> wrote:

> Hi ,
>
> I have configured kamailio as an IMS server as VM based .
>
> PCSCF - 10.x.x.179
> ICSCF - 10.x.x.79
> SCSCF - 10.x.x.73
> HSS - 10.x.x.75
>
> I am using zoiper client for testing the call flow . The *registration is
> happening properly* in my both zoiper clients for hss configured users
> (alice and bob).
> When i am making an *INVITE , *I am getting *403 Forbidden - Domain not
> served *error from SCSCF.
>
> The Call Flow for invite is as follows . call from alice at sip.example.com
>
> zoiper1 (UE) -> PCSCF ( INVITE sip:bob at sip.example.com;transport=UDP )
> PCSCF -> SCSCF (  INVITE sip:bob at sip.example.com;transport=UDP )
> SCSCF -> PCSCF (100 trying)
> SCSCF -> ICSCF   ( INVITE sip:bob at sip.example.com;transport=UDP )
> ICSCF -> SCSCF (100 trying)
> ICSCF -> SCSCF ( INVITE sip:bob at sip.example.com;transport=UDP )
> SCSCF -> ICSCF (100 trying)
> SCSCF -> ICSCF (*403 Forbidden - Domain not served*)
> ICSCF -> SCSCF (Request: ACK sip:bob at sip.example.com | )
> ICSCF -> SCSCF ( 403 Forbidden - Domain not served )
> SCSCF -> PCSCF ( 403 Forbidden - Domain not served )
> PCSCF -> UE ( 403 Forbidden - Domain not served )
>
> Below are the alias configuration i have done in pcscf,icscf,scscf nodes
> *PCSCF.CFG*
> # IP-Adress for incoming SIP-Traffic, in the following format:
>
> # SIP / UDP
> listen=udp:10.x.x.179:4060
> # SIP / TCP
> listen=tcp:10.x.x.179:4060
> # SIP / TCP/TLS
> listen=tls:10.x.x.179:4060
>
> # IPSEC / UDP
> #!define IPSEC_LISTEN_ADDR "0.0.0.0"
> #!define IPSEC_CLIENT_PORT 5062
> #!define IPSEC_SERVER_PORT 5063
> #alias="sip.example.com:4060"
> alias=pcscf.sip.example.com:4060
>
> #!define MY_WS_PORT 80
> #!define MY_WSS_PORT 443
>
> #!define PCSCF_URL "sip:pcscf.sip.example.com:4060"
>
> #!define TCP_PROCESSES 8
>
> #!subst "/NETWORKNAME/sip.example.com/"
> #!subst "/HOSTNAME/pcscf.sip.example.com/"
>
> *ICSCF.CFG*
>
> # SIP / UDP
> listen=udp:10.x.x.79:4070
> # SIP / TCP
> listen=tcp:10.x.x.79:4070
> # SIP / TCP/TLS
> listen=tls:10.x.x.79:4071
>
> alias="icscf.sip.example.com:4070"
>
> #!define NETWORKNAME "sip.example.com"
> #!define HOSTNAME "icscf.sip.example.com"
>
> *SCSCF.CFG*
>
> # SIP / UDP
> listen=udp:10.x.x.73:4080
> # SIP / TCP
> listen=tcp:10.x.x.73:4080
> # SIP / TCP/TLS
> listen=tls:10.x.x.73:4081
>
> #!define NETWORKNAME "sip.example.com"
> #!define HOSTNAME "scscf.sip.example.com"
> #!define URI "sip:scscf.sip.example.com:4080"
> alias=scscf.sip.example.com:4080
>
> # ENUM-Server to query:
> #!define ENUM_SUFFIX "scscf.sip.example.com."
>
>
> Kindly let me know where i am missing . Kindly need help in this issue
> since the registration is happening successfully and dropping in the INVITE
> level.
> Kindly help.
> _______________________________________________
> Kamailio (SER) - Development Mailing List
> sr-dev at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev
>


-- 
Best Regards,
Aleksandar Yosifov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-dev/attachments/20200414/49db8c10/attachment-0001.html>


More information about the sr-dev mailing list