[SR-Users] IPSec problem with P-CSCF

[Ali Akbar Hemmati]

Thank you dear Mojtaba for your support. The problem is resolved now. We
had a gateway between our UE and P-CSCF that was NATing UE's packets. By
deleting the NAT rules everything worked and P-CSCF sent 200 code back to
the UE. Thanks again. Regards

On Tue, Oct 11, 2022 at 2:42 PM Mojtaba <mespio at gmail.com> wrote:

> Please check it with other IMS clients such as Boghe IMS client. It
> supports all type of alg mode.
> cheers
>
> On Sun, Oct 9, 2022 at 8:58 PM Ali Akbar Hemmati <hemmati.ali.a at gmail.com>
> wrote:
>
>>  No, I'm not sure. Is there any way to check it?
>>
>> On Sunday, October 9, 2022, Mojtaba <mespio at gmail.com> wrote:
>>
>>> Are you sure, your client " User-Agent: IM-client/OMA1.0 HW-Rto/V1.0 "
>>> use the AKAv1 algorithm for Authentication?
>>>
>>>
>>> On Sun, Oct 9, 2022 at 12:22 PM Ali Akbar Hemmati <
>>> hemmati.ali.a at gmail.com> wrote:
>>>
>>>> Yes, the pcap file is attached. The ip of the P-CSCF is 192.168.11.135.
>>>> Also 192.168.11.60 is the ip from which UE reaches P-CSCF.
>>>>
>>>>
>>>> On Sun, Oct 9, 2022 at 10:49 AM Mojtaba <mespio at gmail.com> wrote:
>>>>
>>>>> Hello Ali,
>>>>> There are some critical points that should be checked for doing this
>>>>> process, But would you please attach the pcap file of the registration
>>>>> process,
>>>>> Cheers
>>>>>
>>>>>
>>>>> On Sat, Oct 8, 2022 at 2:24 PM Ali Akbar Hemmati <
>>>>> hemmati.ali.a at gmail.com> wrote:
>>>>>
>>>>>> Hi everyone,
>>>>>> I am using Kamailio as an IMS server. The UE first sends its SIP
>>>>>> REGISTER over TCP and gets a 401 in response. Then the UE starts sending
>>>>>> its packets over ESP. These ESP packets reach P-CSCF but are not delivered
>>>>>> to its process by the kernel. We can see ESP packets in P-CSCF using
>>>>>> wireshark. The ports used are correct (both client and server) based on
>>>>>> their prior negotiations. We have also checked xfrm policies using the
>>>>>> command `ip xfrm policy list` and seems right regarding prior negotiations.
>>>>>> Our Linux kernel version is 5.4 and the OS is Ubuntu 20.04.  Has anyone any
>>>>>> clue of the root cause of this problem? Any ideas are appreciated.
>>>>>>
>>>>>> Thanks,
>>>>>> Aliakbar
>>>>>> __________________________________________________________
>>>>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>>>>   * sr-users at lists.kamailio.org
>>>>>> Important: keep the mailing list in the recipients, do not reply only
>>>>>> to the sender!
>>>>>> Edit mailing list options or unsubscribe:
>>>>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> --Mojtaba Esfandiari.S
>>>>> __________________________________________________________
>>>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>>>   * sr-users at lists.kamailio.org
>>>>> Important: keep the mailing list in the recipients, do not reply only
>>>>> to the sender!
>>>>> Edit mailing list options or unsubscribe:
>>>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>>
>>>> __________________________________________________________
>>>> Kamailio - Users Mailing List - Non Commercial Discussions
>>>>   * sr-users at lists.kamailio.org
>>>> Important: keep the mailing list in the recipients, do not reply only
>>>> to the sender!
>>>> Edit mailing list options or unsubscribe:
>>>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>>
>>>
>>>
>>> --
>>> --Mojtaba Esfandiari.S
>>>
>> __________________________________________________________
>> Kamailio - Users Mailing List - Non Commercial Discussions
>>   * sr-users at lists.kamailio.org
>> Important: keep the mailing list in the recipients, do not reply only to
>> the sender!
>> Edit mailing list options or unsubscribe:
>>   * https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>
>
>
> --
> --Mojtaba Esfandiari.S
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions
> sr-users at lists.kamailio.org
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
> Edit mailing list options or unsubscribe:
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20221011/5ed88207/attachment.htm>