[SR-Users] IPSec problem with P-CSCF

[Mojtaba]

Please check it with other IMS clients such as Boghe IMS client. It
supports all type of alg mode.
cheers

On Sun, Oct 9, 2022 at 8:58 PM Ali Akbar Hemmati <hemmati.ali.a at gmail.com>
wrote:

>  No, I'm not sure. Is there any way to check it?
>
> On Sunday, October 9, 2022, Mojtaba <mespio at gmail.com> wrote:
>
>> Are you sure, your client " User-Agent: IM-client/OMA1.0 HW-Rto/V1.0 "
>> use the AKAv1 algorithm for Authentication?
>>
>>
>> On Sun, Oct 9, 2022 at 12:22 PM Ali Akbar Hemmati <
>> hemmati.ali.a at gmail.com> wrote:
>>
>>> Yes, the pcap file is attached. The ip of the P-CSCF is 192.168.11.135.
>>> Also 192.168.11.60 is the ip from which UE reaches P-CSCF.
>>>
>>>
>>> On Sun, Oct 9, 2022 at 10:49 AM Mojtaba <mespio at gmail.com> wrote:
>>>
>>>> Hello Ali,
>>>> There are some critical points that should be checked for doing this
>>>> process, But would you please attach the pcap file of the registration
>>>> process,
>>>> Cheers
>>>>
>>>>
>>>> On Sat, Oct 8, 2022 at 2:24 PM Ali Akbar Hemmati <
>>>> hemmati.ali.a at gmail.com> wrote:
>>>>
>>>>> Hi everyone,
>>>>> I am using Kamailio as an IMS server. The UE first sends its SIP
>>>>> REGISTER over TCP and gets a 401 in response. Then the UE starts sending
>>>>> its packets over ESP. These ESP packets reach P-CSCF but are not delivered
>>>>> to its process by the kernel. We can see ESP packets in P-CSCF using
>>>>> wireshark. The ports used are correct (both client and server) based on
>>>>> their prior negotiations. We have also checked xfrm policies using the
>>>>> command `ip xfrm policy list` and seems right regarding prior negotiations.
>>>>> Our Linux kernel version is 5.4 and the OS is Ubuntu 20.04.  Has anyone any
>>>>> clue of the root cause of this problem? Any ideas are appreciated.
>>>>>
>>>>> Thanks,
>>>>> Aliakbar
>>>>> __________________________________________________________
>>>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>>>   * sr-users at lists.kamailio.org
>>>>> Important: keep the mailing list in the recipients, do not reply only
>>>>> to the sender!
>>>>> Edit mailing list options or unsubscribe:
>>>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>>
>>>>
>>>>
>>>> --
>>>> --Mojtaba Esfandiari.S
>>>> __________________________________________________________
>>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>>   * sr-users at lists.kamailio.org
>>>> Important: keep the mailing list in the recipients, do not reply only
>>>> to the sender!
>>>> Edit mailing list options or unsubscribe:
>>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>
>>> __________________________________________________________
>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>   * sr-users at lists.kamailio.org
>>> Important: keep the mailing list in the recipients, do not reply only to
>>> the sender!
>>> Edit mailing list options or unsubscribe:
>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>
>>
>>
>> --
>> --Mojtaba Esfandiari.S
>>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
>   * sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>


-- 
--Mojtaba Esfandiari.S
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20221011/40b3ee53/attachment.htm>