[SR-Users] IPSec problem with P-CSCF

[Ali Akbar Hemmati]

Hi everyone,
I am using Kamailio as an IMS server. The UE first sends its SIP REGISTER
over TCP and gets a 401 in response. Then the UE starts sending its packets
over ESP. These ESP packets reach P-CSCF but are not delivered to its
process by the kernel. We can see ESP packets in P-CSCF using wireshark.
The ports used are correct (both client and server) based on
their prior negotiations. We have also checked xfrm policies using the
command `ip xfrm policy list` and seems right regarding prior negotiations.
Our Linux kernel version is 5.4 and the OS is Ubuntu 20.04.  Has anyone any
clue of the root cause of this problem? Any ideas are appreciated.

Thanks,
Aliakbar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20221008/0d8871d4/attachment.htm>