[prev in list] [next in list] [prev in thread] [next in thread]
List: sr-users
Subject: Re: [SR-Users] P-CSCF
From: Fred Schulz <FSchulz () blackned ! de>
Date: 2016-01-30 20:25:07
Message-ID: 86C53D16-3D08-4D0A-A745-FB44BCCF31E1 () blackned ! de
[Download RAW message or body]
[Attachment #2 (text/plain)]
Hi Jason,
thank you for your answer. But could you please explain how the UE is identified?
Is it the contact header? Or some other stuff .. I wasn't able to find any \
information.
And yes, we plan to use the Rx as well. I am can make some traces and logs at Monday.
Thank you
Fred
Am 28.01.2016 um 20:49 schrieb Jason Penton \
<jason.penton@smilecoms.com<mailto:jason.penton@smilecoms.com>>:
Hi Fred,
I can answer the 1st question only as I am not too clued up with mediaproxy module \
and server.
The pcscf_is_registered function is used to confirm that the UE you are sending the \
request from is actually registered to the IMS. If this is true, then the P-CSCF will \
assert the identity and forward the request to I-CSCF or S-CSCF, depending on state \
and request type. Normally the interface between UE and P-CSCF is via ipsec so it's \
almost a given that any traffic coming in on the ipsec pipe can be asserted. In the \
case without IPSEC however, there are various methods used to make sure the UE that \
is sending the request is actually registered to the IMS. There are a few algorithms \
that can be configured to check - ie you can check the contact host and port (this is \
only works for invites as MESSAGEs don't have contact headers generally), then you \
can check the received IP and port to make sure it's coming from a currently \
registered contact that used the same IP:PORT combination, etc, etc.
Alternatively you could remove the check and pass the request onto the S-CSCF without \
asserting (not per std though) and then challenge all "cost incurring" requests with \
a 407 on the S-CSCF.... One limitatoin of not getting this working correctly is that \
you will not be able to use the Rx interface unless you can match a contact on the \
P-CSCF (ims_qos module).... but perhaps you are not interested in Rx interface at the \
moment?
If you send me a trace (pcap) and logfile I'll take a look as soon as I get a chance \
and let you know what the problem is.
Cheers
Jason
On Thu, Jan 28, 2016 at 9:24 PM, Fred Schulz \
<FSchulz@blackned.de<mailto:FSchulz@blackned.de>> wrote: Hi all,
we're just playing around with an IMS setup bases on kamailio. Therefore the kamailio \
is used as P-,I- and S-CSCF. We where able to register two clients through all \
components. As we wan to start a call session, the P-CSCF answers with „403 - \
Forbidden. You must register with an S-CSCF"…
I found this snippet in kamailio.cfg:
if (!pcscf_is_registered("location")) { send_reply("403","Forbidden - You must \
register first with a S-CSCF"); break; }
Can one tell me what exactly the kamailio is checking there? As I figured out it is \
looking in database location table.
The table contains the registered users registered towards the IMS.
Another „problem" we faced with is the rtpproxy. As the ngcp-mediaproxy-ng is no \
longer available and replaced with rtpproxy we're trying to use it. But kamailio said \
that the proxy isn't answering the way expected.
ERROR: rtpengine [rtpengine.c:1622]: rtpp_test(): proxy responded with invalid \
response
Any advise would be nice.
Thank you
Fred
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org<mailto:sr-users@lists.sip-router.org>
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
--
Jason Penton
Senior Manager: Applications and Services
Smile Communications Pty (Ltd)
Mobile: +27 (0) 83 283 7000
Skype: jason.barry.penton
jason.penton@smilecoms.com<mailto:name.surname@smilecoms.com>
www.smilecoms.com<http://www.smilecoms.com/>
[http://196.33.227.129/~smlcoms/sigs/pty/images/smile_signature_07_09.jpg]
This email is subject to the disclaimer of Smile Communications at \
http://www.smilecoms.com/home/email-disclaimer/<http://www.smilecoms.com/disclaimer>
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org<mailto:sr-users@lists.sip-router.org>
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;" class=""> Hi Jason,
<div class=""><br class="">
</div>
<div class="">thank you for your answer. But could you please explain how the UE is \
identified?</div> <div class="">Is it the contact header? Or some other stuff .. I \
wasn't able to find any information.</div> <div class=""><br class="">
</div>
<div class="">And yes, we plan to use the Rx as well. I am can make some traces and \
logs at Monday.</div> <div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Thank you</div>
<div class="">Fred</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">Am 28.01.2016 um 20:49 schrieb Jason Penton <<a \
href="mailto:jason.penton@smilecoms.com" \
class="">jason.penton@smilecoms.com</a>>:</div> <br \
class="Apple-interchange-newline"> <div class="">
<div dir="ltr" class="">
<div class="">
<div class="">
<div class="">
<div class="">
<div class="">Hi Fred,<br class="">
<br class="">
</div>
I can answer the 1st question only as I am not too clued up with mediaproxy module \
and server.<br class=""> <br class="">
</div>
The pcscf_is_registered function is used to confirm that the UE you are sending the \
request from is actually registered to the IMS. If this is true, then the P-CSCF will \
assert the identity and forward the request to I-CSCF or S-CSCF, depending on state \
and request type. Normally the interface between UE and P-CSCF is via ipsec so it's \
almost a given that any traffic coming in on the ipsec pipe can be asserted. In the \
case without IPSEC however, there are various methods used to make sure the UE that \
is sending the request is actually registered to the IMS. There are a few algorithms \
that can be configured to check - ie you can check the contact host and port (this is \
only works for invites as MESSAGEs don't have contact headers generally), then you \
can check the received IP and port to make sure it's coming from a currently \
registered contact that used the same IP:PORT combination, etc, etc.<br class=""> <br \
class=""> </div>
<div class="">Alternatively you could remove the check and pass the request onto the \
S-CSCF without asserting (not per std though) and then challenge all "cost \
incurring" requests with a 407 on the S-CSCF.... One limitatoin of not getting \
this working correctly is that you will not be able to use the Rx interface unless \
you can match a contact on the P-CSCF (ims_qos module).... but perhaps you are not \
interested in Rx interface at the moment?<br class=""> </div>
<div class=""><br class="">
</div>
If you send me a trace (pcap) and logfile I'll take a look as soon as I get a chance \
and let you know what the problem is.<br class=""> <br class="">
</div>
Cheers<br class="">
</div>
Jason<br class="">
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Thu, Jan 28, 2016 at 9:24 PM, Fred Schulz <span dir="ltr" \
class=""> <<a href="mailto:FSchulz@blackned.de" target="_blank" \
class="">FSchulz@blackned.de</a>></span> wrote:<br class=""> <blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"> <div style="word-wrap:break-word" class="">Hi all,
<div class=""><br class="">
</div>
<div class="">we're just playing around with an IMS setup bases on kamailio. \
Therefore the kamailio is used as P-,I- and S-CSCF.</div> <div class="">We where able \
to register two clients through all components.</div> <div class="">As we wan to \
start a call session, the P-CSCF answers with „403 - Forbidden. You must register \
with an S-CSCF"…</div> <div class=""><br class="">
</div>
<div class="">I found this snippet in kamailio.cfg:</div>
<div class=""><br class="">
</div>
<div class=""></div>
<div class=""><span style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class="">if (!pcscf_is_registered(</span><span \
style="font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;color:rgb(24,54,145)" \
class=""><span class="">"</span>location<span class="">"</span></span><span \
style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class="">)) { </span><span \
style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap" class=""></span><span \
style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class="">send_reply(</span><span style="font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;color:rgb(24,54,145)" \
class=""><span class="">"</span>403<span class="">"</span></span><span \
style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class="">,</span><span style="font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;color:rgb(24,54,145)" \
class=""><span class="">"</span>Forbidden
- You must register first with a S-CSCF<span class="">"</span></span><span \
style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class="">)</span><span style="font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;color:rgb(150,152,150)" class="">; \
</span><span style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap" class=""></span><span \
style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class="">break</span><span style="font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;color:rgb(150,152,150)" class="">; \
</span><span style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class="">} </span></div>
<div class=""><span style="color:rgb(51,51,51);font-family:Consolas,'Liberation \
Mono',Menlo,Courier,monospace;white-space:pre-wrap;background-color:rgb(255,255,255)" \
class=""><br class=""> </span></div>
<div class="">Can one tell me what exactly the kamailio is checking there? As I \
figured out it is looking in database location table.</div> <div class=""><br \
class=""> </div>
<div class="">The table contains the registered users registered towards the \
IMS.</div> <div class=""><br class="">
</div>
<div class="">Another „problem" we faced with is the rtpproxy. As the <span \
style="color:rgb(51,51,51);font-family:Consolas,'Andale Mono WT','Andale \
Mono','Bitstream Vera Sans Mono','Nimbus Mono L',Monaco,'Courier \
New',monospace;font-size:14px;background-color:rgb(251,250,249)" \
class="">ngcp-mediaproxy-ng </span>is no longer available and replaced with \
rtpproxy we're trying to use it. But kamailio said that the proxy isn't answering the \
way expected.</div> <div class=""><br class="">
</div>
<div class="">
<div style="margin:0px;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(195,55,32)" \
class="">
ERROR: rtpengine [rtpengine.c:1622]: rtpp_test(): proxy responded with invalid \
response</div> </div>
<div class=""><br class="">
</div>
<div class="">Any advise would be nice.</div>
<div class=""><br class="">
</div>
<div class="">Thank you</div>
<span class="HOEnZb"><font color="#888888" class="">
<div class="">Fred</div>
<div class=""><br class="">
</div>
</font></span></div>
<br class="">
_______________________________________________<br class="">
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br class="">
<a href="mailto:sr-users@lists.sip-router.org" \
class="">sr-users@lists.sip-router.org</a><br class=""> <a \
href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" \
target="_blank" class="">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br \
class=""> <br class="">
</blockquote>
</div>
<br class="">
<br clear="all" class="">
<br class="">
-- <br class="">
<div class="gmail_signature">
<div dir="ltr" class="">
<div class="">
<table border="0" cellspacing="0" cellpadding="0" width="600" style="width:450pt" \
class=""> <tbody class="">
<tr class="">
<td valign="top" style="padding:0cm" class="">
<div class=""><br class="webkit-block-placeholder">
</div>
</td>
</tr>
</tbody>
</table>
<table width="320px" border="0" cellpadding="0" cellspacing="0" \
style="font-family:monospace" class=""> <tbody class="">
<tr class="">
<td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px" \
class=""> <strong class="">Jason Penton</strong></td>
</tr>
<tr class="">
<td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px" \
class=""> <strong class="">Senior Manager: Applications and Services</strong></td>
</tr>
<tr class="">
<td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:15px;padding-top:10px" \
class=""> <strong class="">Smile Communications Pty (Ltd)</strong></td>
</tr>
<tr class="">
<td class="">
<table cellpadding="0" cellspacing="0" width="100%" class="">
<tbody class="">
<tr class="">
<td width="27%" style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:15px;padding-top:10px" \
class=""> <strong class="">Mobile:</strong></td>
<td width="73%" style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:10px;padding-top:10px" \
class=""> +27 (0) 83 283 7000</td>
</tr>
<tr class="">
<td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:15px;padding-top:10px" \
class=""> <strong class="">Skype:</strong></td>
<td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:10px;padding-top:10px" \
class=""> jason.barry.penton</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr class="">
<td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px" \
class=""> <a href="mailto:name.surname@smilecoms.com" \
style="font-family:Arial;color:rgb(117,179,67);text-decoration:none" target="_blank" \
class="">jason.penton@smilecoms.com</a></td> </tr>
<tr class="">
<td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px" \
class=""> <a href="http://www.smilecoms.com/" \
style="font-family:Arial;color:rgb(117,179,67)" target="_blank" \
class="">www.smilecoms.com</a><br class=""> <img \
src="http://196.33.227.129/~smlcoms/sigs/pty/images/smile_signature_07_09.jpg" \
width="420" height="144" class=""><br class=""> </td>
</tr>
</tbody>
</table>
</div>
<br class="">
</div>
</div>
</div>
<br class="">
<span class=""><font color="#888888" class="">
<pre class="">This email is subject to the disclaimer of Smile Communications at <a \
href="http://www.smilecoms.com/home/email-disclaimer/" target="_blank" \
class="">http://www.smilecoms.com/home/<wbr class="">email-disclaimer/</a><a \
href="http://www.smilecoms.com/disclaimer" target="_blank" class=""></a></pre> \
</font></span>_______________________________________________<br class=""> SIP \
Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br class=""> <a \
href="mailto:sr-users@lists.sip-router.org" \
class="">sr-users@lists.sip-router.org</a><br class=""> \
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users<br class=""> </div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>
_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
sr-users@lists.sip-router.org
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
--===============1503868500==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic