Hi Oleg,
Can you check the ipsec SA in the OS and see that SA and policies are there or 
not:>> ip x s l>> ip x p l
BR,Hossein
    On Thursday, November 10, 2022 at 03:12:34 AM PST, Oleg Belousov 
<[email protected]> wrote:  
 
 Hi.Working on ims integration with the actual handset, have got a problem with 
ipsec establishment to complete registration. 
Initial steps are fine, including diameter exchange and 401 (with security 
server details) toward UE. On the next step UE and kamailio should establish 
ipsec connection, and UE to submit the next register with a response. As per 
trace UE is trying to establish the same (can see initial TCP SYN encapsulated 
onto ESP), using port-s, provided in Security-Server, but get an ICMP packet 
from server with destination/protocol unreachable. No more info either in 
P-SCSF log, no in kern.log. Proxy is listening to that port, it is tcp and 
available over telnet, so should not be a connectivity issue.Please let know if 
any ideas how to troubleshoot that further,--
obelousov.tel__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
[email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!
Edit mailing list options or unsubscribe:
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
  
__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions
[email protected]
Important: keep the mailing list in the recipients, do not reply only to the 
sender!
Edit mailing list options or unsubscribe:
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

Reply via email to