[SR-Users] IPSec problem with P-CSCF

[Ali Akbar Hemmati]

 No, I'm not sure. Is there any way to check it?

On Sunday, October 9, 2022, Mojtaba <mespio at gmail.com> wrote:

> Are you sure, your client " User-Agent: IM-client/OMA1.0 HW-Rto/V1.0 "
> use the AKAv1 algorithm for Authentication?
>
>
> On Sun, Oct 9, 2022 at 12:22 PM Ali Akbar Hemmati <hemmati.ali.a at gmail.com>
> wrote:
>
>> Yes, the pcap file is attached. The ip of the P-CSCF is 192.168.11.135.
>> Also 192.168.11.60 is the ip from which UE reaches P-CSCF.
>>
>>
>> On Sun, Oct 9, 2022 at 10:49 AM Mojtaba <mespio at gmail.com> wrote:
>>
>>> Hello Ali,
>>> There are some critical points that should be checked for doing this
>>> process, But would you please attach the pcap file of the registration
>>> process,
>>> Cheers
>>>
>>>
>>> On Sat, Oct 8, 2022 at 2:24 PM Ali Akbar Hemmati <
>>> hemmati.ali.a at gmail.com> wrote:
>>>
>>>> Hi everyone,
>>>> I am using Kamailio as an IMS server. The UE first sends its SIP
>>>> REGISTER over TCP and gets a 401 in response. Then the UE starts sending
>>>> its packets over ESP. These ESP packets reach P-CSCF but are not delivered
>>>> to its process by the kernel. We can see ESP packets in P-CSCF using
>>>> wireshark. The ports used are correct (both client and server) based on
>>>> their prior negotiations. We have also checked xfrm policies using the
>>>> command `ip xfrm policy list` and seems right regarding prior negotiations.
>>>> Our Linux kernel version is 5.4 and the OS is Ubuntu 20.04.  Has anyone any
>>>> clue of the root cause of this problem? Any ideas are appreciated.
>>>>
>>>> Thanks,
>>>> Aliakbar
>>>> __________________________________________________________
>>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>>   * sr-users at lists.kamailio.org
>>>> Important: keep the mailing list in the recipients, do not reply only
>>>> to the sender!
>>>> Edit mailing list options or unsubscribe:
>>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>
>>>
>>>
>>> --
>>> --Mojtaba Esfandiari.S
>>> __________________________________________________________
>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>   * sr-users at lists.kamailio.org
>>> Important: keep the mailing list in the recipients, do not reply only to
>>> the sender!
>>> Edit mailing list options or unsubscribe:
>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>
>> __________________________________________________________
>> Kamailio - Users Mailing List - Non Commercial Discussions
>>   * sr-users at lists.kamailio.org
>> Important: keep the mailing list in the recipients, do not reply only to
>> the sender!
>> Edit mailing list options or unsubscribe:
>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>
>
> --
> --Mojtaba Esfandiari.S
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20221009/ce01465e/attachment.htm>