Hi , Actually in my case , I have disabled IPsec related configurations . After that I am facing these issues.

Thanks

On Tue, Apr 14, 2020, 7:02 PM Александър Йосифов alexyosifov@gmail.com wrote:

Hi, I am writing not for the problem with SIP calls but for other potential problems related to IPSEC client/server ports. As I see from your pcscf.cfg you have: #!define IPSEC_CLIENT_PORT 5062 #!define IPSEC_SERVER_PORT 5063 This is not OK because if you have more than one connected UE the client port for the second UE will overlap the server port. Check ipsec_max_connections https://www.kamailio.org/docs/modules/5.4.x/modules/ims_ipsec_pcscf.html#idm103 parameter. I suggest changing the values of the server port to 5100 or something bigger.

On Mon, 13 Apr 2020 at 22:37, Pavithra M pavimohan3096@gmail.com wrote:

...

Hi ,

I have configured kamailio as an IMS server as VM based .

PCSCF - 10.x.x.179 ICSCF - 10.x.x.79 SCSCF - 10.x.x.73 HSS - 10.x.x.75

I am using zoiper client for testing the call flow . The *registration is happening properly* in my both zoiper clients for hss configured users (alice and bob). When i am making an *INVITE , *I am getting *403 Forbidden - Domain not served *error from SCSCF.

The Call Flow for invite is as follows . call from alice@sip.example.com

zoiper1 (UE) -> PCSCF ( INVITE sip:bob@sip.example.com;transport=UDP ) PCSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP ) SCSCF -> PCSCF (100 trying) SCSCF -> ICSCF ( INVITE sip:bob@sip.example.com;transport=UDP ) ICSCF -> SCSCF (100 trying) ICSCF -> SCSCF ( INVITE sip:bob@sip.example.com;transport=UDP ) SCSCF -> ICSCF (100 trying) SCSCF -> ICSCF (*403 Forbidden - Domain not served*) ICSCF -> SCSCF (Request: ACK sip:bob@sip.example.com | ) ICSCF -> SCSCF ( 403 Forbidden - Domain not served ) SCSCF -> PCSCF ( 403 Forbidden - Domain not served ) PCSCF -> UE ( 403 Forbidden - Domain not served )

Below are the alias configuration i have done in pcscf,icscf,scscf nodes *PCSCF.CFG* # IP-Adress for incoming SIP-Traffic, in the following format:

# SIP / UDP listen=udp:10.x.x.179:4060 # SIP / TCP listen=tcp:10.x.x.179:4060 # SIP / TCP/TLS listen=tls:10.x.x.179:4060

# IPSEC / UDP #!define IPSEC_LISTEN_ADDR "0.0.0.0" #!define IPSEC_CLIENT_PORT 5062 #!define IPSEC_SERVER_PORT 5063 #alias="sip.example.com:4060" alias=pcscf.sip.example.com:4060

#!define MY_WS_PORT 80 #!define MY_WSS_PORT 443

#!define PCSCF_URL "sip:pcscf.sip.example.com:4060"

#!define TCP_PROCESSES 8

#!subst "/NETWORKNAME/sip.example.com/" #!subst "/HOSTNAME/pcscf.sip.example.com/"

*ICSCF.CFG*

# SIP / UDP listen=udp:10.x.x.79:4070 # SIP / TCP listen=tcp:10.x.x.79:4070 # SIP / TCP/TLS listen=tls:10.x.x.79:4071

alias="icscf.sip.example.com:4070"

#!define NETWORKNAME "sip.example.com" #!define HOSTNAME "icscf.sip.example.com"

*SCSCF.CFG*

# SIP / UDP listen=udp:10.x.x.73:4080 # SIP / TCP listen=tcp:10.x.x.73:4080 # SIP / TCP/TLS listen=tls:10.x.x.73:4081

#!define NETWORKNAME "sip.example.com" #!define HOSTNAME "scscf.sip.example.com" #!define URI "sip:scscf.sip.example.com:4080" alias=scscf.sip.example.com:4080

# ENUM-Server to query: #!define ENUM_SUFFIX "scscf.sip.example.com."

Kindly let me know where i am missing . Kindly need help in this issue since the registration is happening successfully and dropping in the INVITE level. Kindly help. _______________________________________________ Kamailio (SER) - Development Mailing List sr-dev@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev

-- Best Regards, Aleksandar Yosifov _______________________________________________ Kamailio (SER) - Development Mailing List sr-dev@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-dev