Re: IPv6 on VoLTE

2018-11-08 Thread Tarko Tikan

hey,


IMS 3GPP specification requires SIP integrity and confidentiality. You
may see IPsec/IPsec security association on the device when it is
communicating and/or registered with P-CSCF (uses SIP protocol).


Correct. While IPsec might be an option, all popular terminals support 
SIP-TLS. Our VoLTE implementation happily uses SIP-TLS + IPv6 only 
bearer without any IPsec.



With
VoWiFi IPsec is used to establish a tunnel between UE (user
equipment/phone) and mobile network operator packet core (EPDG node).


Correct, ePDG usecase is totally different and also applicable for more 
services than just voice.


--
tarko


Re: IPv6 on VoLTE

2018-11-08 Thread Yury Shefer
IMS 3GPP specification requires SIP integrity and confidentiality. You
may see IPsec/IPsec security association on the device when it is
communicating and/or registered with P-CSCF (uses SIP protocol). With
VoWiFi IPsec is used to establish a tunnel between UE (user
equipment/phone) and mobile network operator packet core (EPDG node).
So they're two different use cases.

More info:
[0] https://en.wikipedia.org/wiki/IMS_security#IMS_Access_Security_for_SIP
[1] 3G Security: 3GPP TS 33.203 - https://www.3gpp.org/DynaReport/33203.htm
[2] Access to the 3GPP Evolved Packet Core (EPC) via non-3GPP access
networks (VoWiFi) / 3GPP TS24.302- www.3gpp.org/dynareport/24302.htm
On Thu, Nov 8, 2018 at 2:15 AM Tarko Tikan  wrote:
>
> hey,
>
> > This might be confusing VoLTE with VoWiFI.  The latter will use IPSEC.
>
> Correct. What probably happened is that together with activating VoLTE,
> VoWIFI was also activated on the device. Makes sense as VoLTE users are
> typically moved to IMS environment.
>
> --
> tarko



--
Yury.


Re: IPv6 on VoLTE

2018-11-08 Thread Angela Fice

NOT ME REMOVE ME OR I AM REPORTING TO RCMP CYBER FRAUD DEPARTMENT




On 11/8/2018 12:57 AM, E Support wrote:


Dear Customer,

Greetings from Airtel!

This is in reference to your email regarding your concern for your 
Airtel number.


Kindly note that I am unable to open your profile with the given 
details. To enable us to process your request, please write back with 
the exact Airtel fixed line number along with the STD code or the 
account number as mentioned in the bill.


I request you to revert with your exact query/requirement as the 
details in your mail is not clear.


I regret for the inconvenience caused.

Thanks for reaching out to us.

Regards
Rameshvar Mahadal
Advisor – Customer Experience
Bharti Airtel Ltd


On Thu, 08 Nov 2018 at 09:45 AM  wrote:

抱歉,我不懂英文,如能译成中文,万分感谢!

发自我的 iPhone

> 在 2018年11月8日,上午10:44,Mikael Abrahamsson 
写道:

image001.png (679×133)



***
This email and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to whom they 
are addressed. If you have received this email in error please notify 
the system manager. This message contains confidential information and 
is intended only for the individual named. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received 
this e-mail by mistake and delete this e-mail from your system. If you 
are not the intended recipient you are notified that disclosing, 
copying, distributing or taking any action in reliance on the contents 
of this information is strictly prohibited . The information contained 
in this mail is propriety and strictly confidential.

***


“CONFIDENTIALITY NOTICE This e-mail message and any attachments are 
only for the use of the intended recipient and may contain information 
that is privileged, confidential or exempt from disclosure under 
applicable law. If you are not the intended recipient, any disclosure, 
distribution or other use of this e-mail message or attachments is 
prohibited. If you have received this e-mail message in error, please 
delete and notify the sender immediately. Thank you.” 




Re: IPv6 on VoLTE

2018-11-08 Thread 解为庆
抱歉,我不懂英文

发自我的 iPhone

> 在 2018年11月8日,下午6:15,Tarko Tikan  写道:
> 
> hey,
> 
>> This might be confusing VoLTE with VoWiFI.  The latter will use IPSEC.
> 
> Correct. What probably happened is that together with activating VoLTE, 
> VoWIFI was also activated on the device. Makes sense as VoLTE users are 
> typically moved to IMS environment.
> 
> -- 
> tarko


Re: IPv6 on VoLTE

2018-11-08 Thread Tarko Tikan

hey,


This might be confusing VoLTE with VoWiFI.  The latter will use IPSEC.


Correct. What probably happened is that together with activating VoLTE, 
VoWIFI was also activated on the device. Makes sense as VoLTE users are 
typically moved to IMS environment.


--
tarko


Re: IPv6 on VoLTE

2018-11-08 Thread Bjørn Mork
Mikael Abrahamsson  writes:

> I have not heard of VoLTE using IPSEC, that's not how it was supposed
> to work at least when I looked into this 5 years ago. Instead it
> should have additional bearer on mobile interface to handle this
> traffic.

This might be confusing VoLTE with VoWiFI.  The latter will use IPSEC.


Bjørn


Re: IPv6 on VoLTE

2018-11-07 Thread E Support
Dear Customer,



Greetings from Airtel!



This is in reference to your email regarding your concern for your Airtel 
number.



Kindly note that I am unable to open your profile with the given details. To 
enable us to process your request, please write back with the exact Airtel 
fixed line number along with the STD code or the account number as mentioned in 
the bill.



I request you to revert with your exact query/requirement as the details in 
your mail is not clear.



I regret for the inconvenience caused.



Thanks for reaching out to us.



Regards
Rameshvar Mahadal
Advisor �C Customer Experience
Bharti Airtel Ltd

On Thu, 08 Nov 2018 at 09:45 AM  wrote:
抱歉,我不懂英文,如能译成中文,万分感谢!

发自我的 iPhone

> 在 2018年11月8日,上午10:44,Mikael Abrahamsson  写道:
[http://www.airtel.in/transparency/banner1.png]
***
This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this email in error please notify the system manager. This 
message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this e-mail by mistake and delete 
this e-mail from your system. If you are not the intended recipient you are 
notified that disclosing, copying, distributing or taking any action in 
reliance on the contents of this information is strictly prohibited . The 
information contained in this mail is propriety and strictly confidential.
***
“CONFIDENTIALITY NOTICE This e-mail message and any attachments are only for 
the use of the intended recipient and may contain information that is 
privileged, confidential or exempt from disclosure under applicable law. If you 
are not the intended recipient, any disclosure, distribution or other use of 
this e-mail message or attachments is prohibited. If you have received this 
e-mail message in error, please delete and notify the sender immediately. Thank 
you.”

Re: IPv6 on VoLTE

2018-11-07 Thread 解为庆
抱歉,我不懂英文,如能译成中文,万分感谢!

发自我的 iPhone

> 在 2018年11月8日,上午10:44,Mikael Abrahamsson  写道:
> 
>> On Wed, 7 Nov 2018, Anurag Bhatia wrote:
>> 
>> I recently got VoLTE from my provider (AS9498). I noticed that after
>> VoLTE is enabled, device is creating two IPsec tunnels and also has
>> IPv6 address on those IPsec tunnels.
>> 
>> Was wondering if someone can point me to any paper/documentation on
>> how VoLTE works and how this IPv6 over ipsec works in the background?
> 
> https://en.wikipedia.org/wiki/Voice_over_LTE , there should be links to the 
> 3GPP specifications.
> 
> I have not heard of VoLTE using IPSEC, that's not how it was supposed to work 
> at least when I looked into this 5 years ago. Instead it should have 
> additional bearer on mobile interface to handle this traffic.
> 
> How are you identifying this as IPSEC tunnels? What kind of device is it 
> you're looking at?
> 
> -- 
> Mikael Abrahamssonemail: swm...@swm.pp.se


Re: IPv6 on VoLTE

2018-11-07 Thread Mikael Abrahamsson

On Wed, 7 Nov 2018, Anurag Bhatia wrote:


I recently got VoLTE from my provider (AS9498). I noticed that after
VoLTE is enabled, device is creating two IPsec tunnels and also has
IPv6 address on those IPsec tunnels.

Was wondering if someone can point me to any paper/documentation on
how VoLTE works and how this IPv6 over ipsec works in the background?


https://en.wikipedia.org/wiki/Voice_over_LTE , there should be links to 
the 3GPP specifications.


I have not heard of VoLTE using IPSEC, that's not how it was supposed to 
work at least when I looked into this 5 years ago. Instead it should have 
additional bearer on mobile interface to handle this traffic.


How are you identifying this as IPSEC tunnels? What kind of device is it 
you're looking at?


--
Mikael Abrahamssonemail: swm...@swm.pp.se