14 Apr
2020
14 Apr
'20
3:30 p.m.
Hi,
I am writing not for the problem with SIP calls but for other potential
problems related to IPSEC client/server ports.
As I see from your pcscf.cfg you have:
#!define IPSEC_CLIENT_PORT 5062
#!define IPSEC_SERVER_PORT 5063
This is not OK because if you have more than one connected UE the client
port for the second UE will overlap the server port. Check
ipsec_max_connections
<https://www.kamailio.org/docs/modules/5.4.x/modules/ims_ipsec_pcscf.html#idm103>
parameter.
I suggest changing the values of the server port to 5100 or
something bigger.
On Mon, 13 Apr 2020 at 22:37, Pavithra M <pavimohan3096(a)gmail.com> wrote:
Hi ,
I have configured kamailio as an IMS server as VM based .
PCSCF - 10.x.x.179
ICSCF - 10.x.x.79
SCSCF - 10.x.x.73
HSS - 10.x.x.75
I am using zoiper client for testing the call flow . The *registration is
happening properly* in my both zoiper clients for hss configured users
(alice and bob).
When i am making an *INVITE , *I am getting *403 Forbidden - Domain not
served *error from SCSCF.
The Call Flow for invite is as follows . call from alice(a)sip.example.com
zoiper1 (UE) -> PCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
PCSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
SCSCF -> PCSCF (100 trying)
SCSCF -> ICSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
ICSCF -> SCSCF (100 trying)
ICSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP )
SCSCF -> ICSCF (100 trying)
SCSCF -> ICSCF (*403 Forbidden - Domain not served*)
ICSCF -> SCSCF (Request: ACK sip:bob@sip.example.com | )
ICSCF -> SCSCF ( 403 Forbidden - Domain not served )
SCSCF -> PCSCF ( 403 Forbidden - Domain not served )
PCSCF -> UE ( 403 Forbidden - Domain not served )
Below are the alias configuration i have done in pcscf,icscf,scscf nodes
*PCSCF.CFG*
# IP-Adress for incoming SIP-Traffic, in the following format:
# SIP / UDP
listen=udp:10.x.x.179:4060
# SIP / TCP
listen=tcp:10.x.x.179:4060
# SIP / TCP/TLS
listen=tls:10.x.x.179:4060
# IPSEC / UDP
#!define IPSEC_LISTEN_ADDR "0.0.0.0"
#!define IPSEC_CLIENT_PORT 5062
#!define IPSEC_SERVER_PORT 5063
#alias="sip.example.com:4060"
alias=pcscf.sip.example.com:4060
#!define MY_WS_PORT 80
#!define MY_WSS_PORT 443
#!define PCSCF_URL "sip:pcscf.sip.example.com:4060"
#!define TCP_PROCESSES 8
#!subst "/NETWORKNAME/sip.example.com/"
#!subst "/HOSTNAME/pcscf.sip.example.com/"
*ICSCF.CFG*
# SIP / UDP
listen=udp:10.x.x.79:4070
# SIP / TCP
listen=tcp:10.x.x.79:4070
# SIP / TCP/TLS
listen=tls:10.x.x.79:4071
alias="icscf.sip.example.com:4070"
#!define NETWORKNAME "sip.example.com"
#!define HOSTNAME "icscf.sip.example.com"
*SCSCF.CFG*
# SIP / UDP
listen=udp:10.x.x.73:4080
# SIP / TCP
listen=tcp:10.x.x.73:4080
# SIP / TCP/TLS
listen=tls:10.x.x.73:4081
#!define NETWORKNAME "sip.example.com"
#!define HOSTNAME "scscf.sip.example.com"
#!define URI "sip:scscf.sip.example.com:4080"
alias=scscf.sip.example.com:4080
# ENUM-Server to query:
#!define ENUM_SUFFIX "scscf.sip.example.com."
Kindly let me know where i am missing . Kindly need help in this issue
since the registration is happening successfully and dropping in the INVITE
level.
Kindly help.
_______________________________________________
Kamailio (SER) - Development Mailing List
sr-dev(a)lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev
--
Best Regards,
Aleksandar Yosifov