[SR-Users] IPSec problem with P-CSCF

[Mojtaba]

Are you sure, your client " User-Agent: IM-client/OMA1.0 HW-Rto/V1.0 " use
the AKAv1 algorithm for Authentication?


On Sun, Oct 9, 2022 at 12:22 PM Ali Akbar Hemmati <hemmati.ali.a at gmail.com>
wrote:

> Yes, the pcap file is attached. The ip of the P-CSCF is 192.168.11.135.
> Also 192.168.11.60 is the ip from which UE reaches P-CSCF.
>
>
> On Sun, Oct 9, 2022 at 10:49 AM Mojtaba <mespio at gmail.com> wrote:
>
>> Hello Ali,
>> There are some critical points that should be checked for doing this
>> process, But would you please attach the pcap file of the registration
>> process,
>> Cheers
>>
>>
>> On Sat, Oct 8, 2022 at 2:24 PM Ali Akbar Hemmati <hemmati.ali.a at gmail.com>
>> wrote:
>>
>>> Hi everyone,
>>> I am using Kamailio as an IMS server. The UE first sends its SIP
>>> REGISTER over TCP and gets a 401 in response. Then the UE starts sending
>>> its packets over ESP. These ESP packets reach P-CSCF but are not delivered
>>> to its process by the kernel. We can see ESP packets in P-CSCF using
>>> wireshark. The ports used are correct (both client and server) based on
>>> their prior negotiations. We have also checked xfrm policies using the
>>> command `ip xfrm policy list` and seems right regarding prior negotiations.
>>> Our Linux kernel version is 5.4 and the OS is Ubuntu 20.04.  Has anyone any
>>> clue of the root cause of this problem? Any ideas are appreciated.
>>>
>>> Thanks,
>>> Aliakbar
>>> __________________________________________________________
>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>   * sr-users at lists.kamailio.org
>>> Important: keep the mailing list in the recipients, do not reply only to
>>> the sender!
>>> Edit mailing list options or unsubscribe:
>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>
>>
>>
>> --
>> --Mojtaba Esfandiari.S
>> __________________________________________________________
>> Kamailio - Users Mailing List - Non Commercial Discussions
>>   * sr-users at lists.kamailio.org
>> Important: keep the mailing list in the recipients, do not reply only to
>> the sender!
>> Edit mailing list options or unsubscribe:
>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>   * sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>


-- 
--Mojtaba Esfandiari.S
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20221009/b731c2ba/attachment.htm>