Hi,

I am writing not for the problem with SIP calls but for other potential problems related to IPSEC client/server ports.

As I see from your pcscf.cfg you have:

  #!define IPSEC_CLIENT_PORT 5062
#!define IPSEC_SERVER_PORT 5063 

This is not OK because if you have more than one connected UE the client port for the second UE will overlap the server port. Check ipsec_max_connections parameter.

I suggest changing the values of the server port to 5100 or something bigger.

On Mon, 13 Apr 2020 at 22:37, Pavithra M <pavimohan3096@gmail.com> wrote:

Hi ,

I have configured kamailio as an IMS server as VM based .

PCSCF - 10.x.x.179

ICSCF - 10.x.x.79

SCSCF - 10.x.x.73

HSS - 10.x.x.75

I am using zoiper client for testing the call flow . The registration is happening properly in my both zoiper clients for hss configured users (alice and bob).

When i am making an INVITE , I am getting 403 Forbidden - Domain not served error from SCSCF.

The Call Flow for invite is as follows . call from alice@sip.example.com

zoiper1 (UE) -> PCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )

PCSCF -> SCSCF (  INVITE sip:bob@sip.example.com;transport=UDP )

SCSCF -> PCSCF (100 trying)

SCSCF -> ICSCF   ( INVITE sip:bob@sip.example.com;transport=UDP )

ICSCF -> SCSCF (100 trying)

ICSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )

SCSCF -> ICSCF (100 trying)

SCSCF -> ICSCF (403 Forbidden - Domain not served)

ICSCF -> SCSCF (Request: ACK sip:bob@sip.example.com | )

ICSCF -> SCSCF ( 403 Forbidden - Domain not served )

SCSCF -> PCSCF ( 403 Forbidden - Domain not served )

PCSCF -> UE ( 403 Forbidden - Domain not served )

Below are the alias configuration i have done in pcscf,icscf,scscf nodes

PCSCF.CFG

# IP-Adress for incoming SIP-Traffic, in the following format:

# SIP / UDP
listen=udp:10.x.x.179:4060
# SIP / TCP
listen=tcp:10.x.x.179:4060
# SIP / TCP/TLS
listen=tls:10.x.x.179:4060

# IPSEC / UDP
#!define IPSEC_LISTEN_ADDR "0.0.0.0"
#!define IPSEC_CLIENT_PORT 5062
#!define IPSEC_SERVER_PORT 5063
#alias="sip.example.com:4060"
alias=pcscf.sip.example.com:4060

#!define MY_WS_PORT 80
#!define MY_WSS_PORT 443

#!define PCSCF_URL "sip:pcscf.sip.example.com:4060"

#!define TCP_PROCESSES 8

#!subst "/NETWORKNAME/sip.example.com/"
#!subst "/HOSTNAME/pcscf.sip.example.com/"

ICSCF.CFG

# SIP / UDP
listen=udp:10.x.x.79:4070
# SIP / TCP
listen=tcp:10.x.x.79:4070
# SIP / TCP/TLS
listen=tls:10.x.x.79:4071

alias="icscf.sip.example.com:4070"

#!define NETWORKNAME "sip.example.com"
#!define HOSTNAME "icscf.sip.example.com"

SCSCF.CFG

# SIP / UDP
listen=udp:10.x.x.73:4080
# SIP / TCP
listen=tcp:10.x.x.73:4080
# SIP / TCP/TLS
listen=tls:10.x.x.73:4081

#!define NETWORKNAME "sip.example.com"
#!define HOSTNAME "scscf.sip.example.com"
#!define URI "sip:scscf.sip.example.com:4080"
alias=scscf.sip.example.com:4080

# ENUM-Server to query:
#!define ENUM_SUFFIX "scscf.sip.example.com."

Kindly let me know where i am missing . Kindly need help in this issue since the registration is happening successfully and dropping in the INVITE level.

Kindly help.

_______________________________________________
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev

--

Best Regards,

Aleksandar Yosifov

_______________________________________________
Kamailio (SER) - Development Mailing List
sr-dev@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev