VoWIFI with COST issue

[TrusterBSW]

I'm currently trying to get the VoWIFI working.

As seen with the previous ticket, i can connect using the swu_client provided in the project from the same lan as the UE.

As UE, i'm using a OnePlus 9 with the latest crDroid release.

Here are the logs of the ePDG container :

Stream 238, 24 bytes
*DBG* gsup_server got {ipa,#Port<0.17>,
                           {osmo,5},
                           #{cn_domain => 1,
                             current_rat_type => rat_eutran_sgs,
                             imsi => <<"001010123456790">>,message_class => 5,
                             message_type => send_auth_info_req,
                             num_vectors_req => 1}}
*DBG* epdg_ue_fsm_001010123456790 receive call {auth_request,33,"*",#{}} from <0.3416.1> in state state_authenticating
19:16:46.628 [info] GSUP: Rx #{cn_domain => 1,current_rat_type => rat_eutran_sgs,imsi => <<"001010123456790">>,message_class => 5,message_type => send_auth_info_req,num_vectors_req => 1}
19:16:46.628 [info] ue_fsm auth_request
*DBG* epdg_ue_fsm_001010123456790 send ok to <0.3416.1>
*DBG* aaa_ue_fsm_001010123456790 receive call {rx_swm_der_auth_req,33,"*",#{}} from <0.201.0> in state state_new
*DBG* gsup_server new state {gsups_state,#Port<0.16>,4222,#Port<0.17>,
                                {ipa_ccm_options,"EPDG-00-00-00-00-00-00",
                                    "0/0/0","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "EPDG-00-00-00-00-00-00",false}}
*DBG* epdg_ue_fsm_001010123456790 consume call {auth_request,33,"*",#{}} from <0.3416.1> in state state_authenticating => state_wait_auth_resp
19:16:46.628 [info] ue_fsm state_authenticating event=auth_request {33, "*", #{}}, {ue_fsm_data,<<"001010123456790">>,"internet",[],undefined,false,0,false,false}
*DBG* epdg_ue_fsm_001010123456790 start_timer {state_timeout,10000,
                                               swm_der_timeout,[]} in state state_wait_auth_resp
19:16:46.628 [info] ue_fsm ev_rx_swm_der_auth_req
*DBG* aaa_ue_fsm_001010123456790 send ok to <0.201.0>
19:16:46.628 [info] ue_fsm state_new event=rx_swm_der_auth_req {33, "*", #{}}, {ue_fsm_data,"001010123456790","001010123456790@nai.epc.mnc042.mcc901.3gppnetwork.org","internet",true,true,undefined}
*DBG* aaa_ue_fsm_001010123456790 consume call {rx_swm_der_auth_req,33,"*",#{}} from <0.201.0> in state state_new => state_wait_swx_maa
19:16:46.629 [debug] Swx MAR: IPv4Opt=<<"����">> IPv6Opt=[]
19:16:46.629 [debug] Swx Tx MAR: {'MAR',["epdg.localdomain",";","1821369299",";","50",";","nonode@nohost"],1,undefined,undefined,undefined,"001010123456790",{'Vendor-Specific-Application-Id',10415,[16777265],[]},{'SIP-Auth-Data-Item',[],["EAP-AKA"],[],[],[],[],[],[],<<"����">>,[],[],[],[]},1,[],1,[],[],[],[],[],[],[],[]}
19:16:46.632 [info] SWx Rx MAA {<0.236.0>,{diameter_caps,{"aaa.epc.mnc001.mcc001.3gppnetwork.org","hss.epc.mnc001.mcc001.3gppnetwork.org"},{"epc.mnc001.mcc001.3gppnetwork.org","epc.mnc001.mcc001.3gppnetwork.org"},{[{127,0,0,1},{172,22,0,41}],[{172,22,0,3}]},{0,0},{"osmo-epdg","freediameter"},{[],[1759864153]},{[10415,13019,5535],[5535,10415,13019]},{[],[]},{[],[]},{[],[]},{[{'diameter_base_Vendor-Specific-Application-Id',10415,[16777265],[]}],[{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777216],[]},{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777251],[]},{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777265],[]}]},{[],[10500]},{[],[]}}}: {'MAA',"epdg.localdomain;1821369299;50;nonode@nohost",1,"hss.epc.mnc001.mcc001.3gppnetwork.org","epc.mnc001.mcc001.3gppnetwork.org",{'Vendor-Specific-Application-Id',10415,[16777265],[]},"001010123456790",[],[2001],[],[1],[{'SIP-Auth-Data-Item',[1],["EAP-AKA"],[[67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100,248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5]],[[247,101,93,177,12,108,157,127]],[],[[32,243,217,228,184,209,47,73,155,200,190,98,101,117,210,162]],[[195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,247]],[],[],[],[],[],[]}],[],[],[],[],[],[]}/ Errors [] 
*DBG* aaa_ue_fsm_001010123456790 receive call {rx_swx_maa,
         {ok,[{epdg_auth_tuple,
                  <<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,
                  <<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,
                  <<247,101,93,177,12,108,157,127>>,
                  <<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,
                    247>>,
                  <<32,243,217,228,184,209,47,73,155,200,190,98,101,117,
                    210,162>>}]}} from <0.3417.1> in state state_wait_swx_maa
19:16:46.632 [info] dia_sip2gsup: auth [67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100,248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5] authz [247,101,93,177,12,108,157,127] 
19:16:46.632 [info]   rand [67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100] autn [248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5] 
*DBG* aaa_ue_fsm_001010123456790 send ok to <0.3417.1>
*DBG* epdg_ue_fsm_001010123456790 receive call {received_swm_dea_auth_response,
         {ok,[{epdg_auth_tuple,
                  <<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,
                  <<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,
                  <<247,101,93,177,12,108,157,127>>,
                  <<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,
                    247>>,
                  <<32,243,217,228,184,209,47,73,155,200,190,98,101,117,
                    210,162>>}]}} from <0.213.0> in state state_wait_auth_resp
*DBG* aaa_ue_fsm_001010123456790 consume call {rx_swx_maa,
         {ok,[{epdg_auth_tuple,
                  <<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,
                  <<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,
                  <<247,101,93,177,12,108,157,127>>,
                  <<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,
                    247>>,
                  <<32,243,217,228,184,209,47,73,155,200,190,98,101,117,
                    210,162>>}]}} from <0.3417.1> in state state_wait_swx_maa => state_new
19:16:46.632 [info] ue_fsm ev_rx_swx_maa
*DBG* epdg_ue_fsm_001010123456790 send ok to <0.213.0>
*DBG* gsup_server got cast {auth_response,
                            {<<"001010123456790">>,
                             {ok,
                              [{epdg_auth_tuple,
                                <<67,18,242,233,24,117,247,217,233,138,140,34,
                                  68,158,48,100>>,
                                <<248,96,88,156,79,127,128,0,198,180,83,184,
                                  112,101,205,5>>,
                                <<247,101,93,177,12,108,157,127>>,
                                <<195,153,198,99,147,124,68,32,181,174,198,200,
                                  208,248,144,247>>,
                                <<32,243,217,228,184,209,47,73,155,200,
                                  190,98,101,117,210,162>>}]}}}
19:16:46.632 [info] ue_fsm state_wait_swx_maa event=rx_swx_maa, {ue_fsm_data,"001010123456790","001010123456790@nai.epc.mnc042.mcc901.3gppnetwork.org","internet",true,true,undefined}
*DBG* epdg_ue_fsm_001010123456790 consume call {received_swm_dea_auth_response,
         {ok,[{epdg_auth_tuple,
                  <<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,
                  <<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,
                  <<247,101,93,177,12,108,157,127>>,
                  <<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,
                    247>>,
                  <<32,243,217,228,184,209,47,73,155,200,190,98,101,117,
                    210,162>>}]}} from <0.213.0> in state state_wait_auth_resp => state_authenticating
*DBG* gsup_server new state {gsups_state,#Port<0.16>,4222,#Port<0.17>,
                                {ipa_ccm_options,"EPDG-00-00-00-00-00-00",
                                    "0/0/0","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "EPDG-00-00-00-00-00-00",false}}
19:16:46.632 [info] ue_fsm received_swm_dea_auth_response {ok,[{epdg_auth_tuple,<<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,<<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,<<247,101,93,177,12,108,157,127>>,<<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,247>>,<<32,243,217,228,184,209,47,73,155,200,190,98,101,117,210,162>>}]}
19:16:46.633 [info] ue_fsm state_wait_auth_resp event=received_swm_dea_auth_response Result={ok,[{epdg_auth_tuple,<<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,<<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,<<247,101,93,177,12,108,157,127>>,<<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,247>>,<<32,243,217,228,184,209,47,73,155,200,190,98,101,117,210,162>>}]}, {ue_fsm_data,<<"001010123456790">>,"internet",[],undefined,false,0,false,false}
19:16:46.633 [info] auth_response(<<"001010123456790">>): {ok,[{epdg_auth_tuple,<<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,<<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,<<247,101,93,177,12,108,157,127>>,<<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,247>>,<<32,243,217,228,184,209,47,73,155,200,190,98,101,117,210,162>>}]}
19:16:46.633 [info] auth_response for <<"001010123456790">>: {ok,[{epdg_auth_tuple,<<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,<<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,<<247,101,93,177,12,108,157,127>>,<<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,247>>,<<32,243,217,228,184,209,47,73,155,200,190,98,101,117,210,162>>}]}
19:16:46.633 [info] GSUP: Tx #{auth_tuples => [#{autn => <<248,96,88,156,79,127,128,0,198,180,83,184,112,101,205,5>>,ck => <<32,243,217,228,184,209,47,73,155,200,190,98,101,117,210,162>>,ik => <<195,153,198,99,147,124,68,32,181,174,198,200,208,248,144,247>>,rand => <<67,18,242,233,24,117,247,217,233,138,140,34,68,158,48,100>>,res => <<247,101,93,177,12,108,157,127>>}],imsi => <<"001010123456790">>,message_class => 5,message_type => send_auth_info_res}

From what i understand, it looks like the authentification works, so I don't know why it doesn't works.

I also tried with other phones, but none gave me the option to enable VoWIFI. Is there a way to enable the option in the settings ?

[herlesupreeth]

please attach a pcap taken on the machine running docker_open5gs machine when you attempt to attach the UE to Core Network

Is there a way to enable the option in the settings ?

This is quite tricky. You could try using CoIMS method (https://github.com/herlesupreeth/CoIMS_Wiki). I didnt manage to get VoWiFi working with OnePlus Nord 5G I have but Xiaomi and Oppo phones were quite straightforward to work with using CoIMS

[TrusterBSW]

Here is the pcap, the phone rebooted after the capture started.

alos, if it can help, here is the corresponding log in osmoePDG :

Stream 238, 24 bytes
*DBG* gsup_server got {ipa,#Port<0.17>,
                           {osmo,5},
                           #{cn_domain => 1,
                             current_rat_type => rat_eutran_sgs,
                             imsi => <<"001010123456790">>,message_class => 5,
                             message_type => send_auth_info_req,
                             num_vectors_req => 1}}
*DBG* epdg_ue_fsm_001010123456790 receive call {auth_request,33,"*",#{}} from <0.11074.1> in state state_authenticating
*DBG* epdg_ue_fsm_001010123456790 send ok to <0.11074.1>
*DBG* epdg_ue_fsm_001010123456790 consume call {auth_request,33,"*",#{}} from <0.11074.1> in state state_authenticating => state_wait_auth_resp
*DBG* aaa_ue_fsm_001010123456790 receive call {rx_swm_der_auth_req,33,"*",#{}} from <0.201.0> in state state_new
*DBG* gsup_server new state {gsups_state,#Port<0.16>,4222,#Port<0.17>,
                                {ipa_ccm_options,"EPDG-00-00-00-00-00-00",
                                    "0/0/0","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "EPDG-00-00-00-00-00-00",false}}
*DBG* epdg_ue_fsm_001010123456790 start_timer {state_timeout,10000,
                                               swm_der_timeout,[]} in state state_wait_auth_resp
23:00:47.142 [info] GSUP: Rx #{cn_domain => 1,current_rat_type => rat_eutran_sgs,imsi => <<"001010123456790">>,message_class => 5,message_type => send_auth_info_req,num_vectors_req => 1}
23:00:47.143 [info] ue_fsm auth_request
*DBG* aaa_ue_fsm_001010123456790 send ok to <0.201.0>
23:00:47.143 [info] ue_fsm state_authenticating event=auth_request {33, "*", #{}}, {ue_fsm_data,<<"001010123456790">>,"internet",[],undefined,false,0,false,false}
*DBG* aaa_ue_fsm_001010123456790 consume call {rx_swm_der_auth_req,33,"*",#{}} from <0.201.0> in state state_new => state_wait_swx_maa
23:00:47.143 [info] ue_fsm ev_rx_swm_der_auth_req
23:00:47.143 [info] ue_fsm state_new event=rx_swm_der_auth_req {33, "*", #{}}, {ue_fsm_data,"001010123456790","001010123456790@nai.epc.mnc042.mcc901.3gppnetwork.org","internet",true,true,undefined}
23:00:47.143 [debug] Swx MAR: IPv4Opt=<<"����">> IPv6Opt=[]
23:00:47.143 [debug] Swx Tx MAR: {'MAR',["epdg.localdomain",";","1821369299",";","52",";","nonode@nohost"],1,undefined,undefined,undefined,"001010123456790",{'Vendor-Specific-Application-Id',10415,[16777265],[]},{'SIP-Auth-Data-Item',[],["EAP-AKA"],[],[],[],[],[],[],<<"����">>,[],[],[],[]},1,[],1,[],[],[],[],[],[],[],[]}
23:00:47.148 [info] SWx Rx MAA {<0.236.0>,{diameter_caps,{"aaa.epc.mnc001.mcc001.3gppnetwork.org","hss.epc.mnc001.mcc001.3gppnetwork.org"},{"epc.mnc001.mcc001.3gppnetwork.org","epc.mnc001.mcc001.3gppnetwork.org"},{[{127,0,0,1},{172,22,0,41}],[{172,22,0,3}]},{0,0},{"osmo-epdg","freediameter"},{[],[1759864153]},{[10415,13019,5535],[5535,10415,13019]},{[],[]},{[],[]},{[],[]},{[{'diameter_base_Vendor-Specific-Application-Id',10415,[16777265],[]}],[{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777216],[]},{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777251],[]},{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777265],[]}]},{[],[10500]},{[],[]}}}: {'MAA',"epdg.localdomain;1821369299;52;nonode@nohost",1,"hss.epc.mnc001.mcc001.3gppnetwork.org","epc.mnc001.mcc001.3gppnetwork.org",{'Vendor-Specific-Application-Id',10415,[16777265],[]},"001010123456790",[],[2001],[],[1],[{'SIP-Auth-Data-Item',[1],["EAP-AKA"],[[77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109,113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64]],["�E�\f�!�d"],[],[[180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19]],[[18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101]],[],[],[],[],[],[]}],[],[],[],[],[],[]}/ Errors [] 
*DBG* aaa_ue_fsm_001010123456790 receive call {rx_swx_maa,
         {ok,[{epdg_auth_tuple,
                  <<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,
                  <<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,
                  <<"�E�\f�!�d">>,
                  <<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,
                  <<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}} from <0.11076.1> in state state_wait_swx_maa
23:00:47.148 [info] dia_sip2gsup: auth [77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109,113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64] authz "�E�\f�!�d" 
23:00:47.148 [info]   rand [77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109] autn [113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64] 
*DBG* aaa_ue_fsm_001010123456790 send ok to <0.11076.1>
*DBG* epdg_ue_fsm_001010123456790 receive call {received_swm_dea_auth_response,
         {ok,[{epdg_auth_tuple,
                  <<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,
                  <<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,
                  <<"�E�\f�!�d">>,
                  <<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,
                  <<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}} from <0.213.0> in state state_wait_auth_resp
23:00:47.148 [info] ue_fsm ev_rx_swx_maa
*DBG* aaa_ue_fsm_001010123456790 consume call {rx_swx_maa,
         {ok,[{epdg_auth_tuple,
                  <<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,
                  <<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,
                  <<"�E�\f�!�d">>,
                  <<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,
                  <<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}} from <0.11076.1> in state state_wait_swx_maa => state_new
23:00:47.148 [info] ue_fsm state_wait_swx_maa event=rx_swx_maa, {ue_fsm_data,"001010123456790","001010123456790@nai.epc.mnc042.mcc901.3gppnetwork.org","internet",true,true,undefined}
*DBG* epdg_ue_fsm_001010123456790 send ok to <0.213.0>
*DBG* gsup_server got cast {auth_response,
                            {<<"001010123456790">>,
                             {ok,
                              [{epdg_auth_tuple,
                                <<77,199,154,195,99,228,124,222,47,173,137,206,
                                  71,70,158,109>>,
                                <<113,191,130,181,110,13,128,0,254,204,138,71,
                                  240,94,232,64>>,
                                <<"�E�\f�!�d">>,
                                <<18,46,169,115,202,228,155,253,142,33,162,83,
                                  83,115,43,101>>,
                                <<180,100,205,57,235,9,114,23,13,227,250,
                                  229,52,74,103,19>>}]}}}
*DBG* epdg_ue_fsm_001010123456790 consume call {received_swm_dea_auth_response,
         {ok,[{epdg_auth_tuple,
                  <<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,
                  <<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,
                  <<"�E�\f�!�d">>,
                  <<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,
                  <<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}} from <0.213.0> in state state_wait_auth_resp => state_authenticating
23:00:47.148 [info] ue_fsm received_swm_dea_auth_response {ok,[{epdg_auth_tuple,<<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,<<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,<<"�E�\f�!�d">>,<<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,<<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}
*DBG* gsup_server new state {gsups_state,#Port<0.16>,4222,#Port<0.17>,
                                {ipa_ccm_options,"EPDG-00-00-00-00-00-00",
                                    "0/0/0","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "EPDG-00-00-00-00-00-00",false}}
23:00:47.149 [info] ue_fsm state_wait_auth_resp event=received_swm_dea_auth_response Result={ok,[{epdg_auth_tuple,<<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,<<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,<<"�E�\f�!�d">>,<<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,<<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}, {ue_fsm_data,<<"001010123456790">>,"internet",[],undefined,false,0,false,false}
23:00:47.149 [info] auth_response(<<"001010123456790">>): {ok,[{epdg_auth_tuple,<<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,<<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,<<"�E�\f�!�d">>,<<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,<<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}
23:00:47.149 [info] auth_response for <<"001010123456790">>: {ok,[{epdg_auth_tuple,<<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,<<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,<<"�E�\f�!�d">>,<<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,<<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>}]}
23:00:47.149 [info] GSUP: Tx #{auth_tuples => [#{autn => <<113,191,130,181,110,13,128,0,254,204,138,71,240,94,232,64>>,ck => <<180,100,205,57,235,9,114,23,13,227,250,229,52,74,103,19>>,ik => <<18,46,169,115,202,228,155,253,142,33,162,83,83,115,43,101>>,rand => <<77,199,154,195,99,228,124,222,47,173,137,206,71,70,158,109>>,res => <<"�E�\f�!�d">>}],imsi => <<"001010123456790">>,message_class => 5,message_type => send_auth_info_res}

vowifi.zip

[herlesupreeth]

@TrusterBSW Can you please re-take the pcap without any filters?

[TrusterBSW]

here it is with out any filters.

the correspondig logs :

_SHA2_256/MODP_2048
12[IKE] local host is behind NAT, sending keep alives
12[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(CHDLESS_SUP) N(MULT_AUTH) ]
12[NET] sending packet: from 172.22.0.41[500] to 10.5.1.204[40023] (456 bytes)
09[NET] received packet: from 10.5.1.204[40023] to 172.22.0.41[4500] (432 bytes)
09[ENC] parsed IKE_AUTH request 1 [ IDi N((51015)) N(INIT_CONTACT) IDr CPRQ(PCSCF6 DNS6 DNS6 ADDR6 PCSCF4 DNS DNS MASK ADDR) SA TSi TSr ]
09[CFG] looking for peer configs matching 172.22.0.41[ims]...10.5.1.204[0001010123456790@nai.epc.mnc001.mcc001.3gppnetwork.org]
09[CFG] selected peer config 'rw'
09[NET] epdg: gsupc: Send Auth Request for 001010123456790
09[NET] epdg: gsupc: Enqueuing message. Waiting 5000 ms for an answer
11[NET] epdg: gsupc: receive gsup message 001010123456790/10
11[NET] epdg: gsupc: 001010123456790/10: Informing requester. 0x7fc30c007790
09[LIB] proposing new reauthentication identity '2ccc8b3deb10cd04'
09[IKE] initiating EAP_AKA method (id 0xBE)
09[IKE] configured EAP-only authentication, but peer does not support it
09[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ]
09[NET] sending packet: from 172.22.0.41[4500] to 10.5.1.204[40023] (80 bytes)
09[NET] epdg_listener: updown: imsi 001010123456790: IKE_SA went down
09[NET] received packet: from 10.5.1.204[43524] to 172.22.0.41[500] (384 bytes)
09[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
09[IKE] 10.5.1.204 is initiating an IKE_SA
09[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
09[IKE] local host is behind NAT, sending keep alives
09[IKE] DH group MODP_1024 unacceptable, requesting MODP_2048
09[ENC] generating IKE_SA_INIT response 0 [ N(INVAL_KE) ]
09[NET] sending packet: from 172.22.0.41[500] to 10.5.1.204[43524] (38 bytes)
09[NET] epdg: Invalid NAI (null).
09[NET] epdg_listener: updown: imsi UNKNOWN: IKE_SA went down
13[NET] received packet: from 10.5.1.204[43524] to 172.22.0.41[500] (512 bytes)
13[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
13[IKE] 10.5.1.204 is initiating an IKE_SA
13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
13[IKE] local host is behind NAT, sending keep alives
13[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(CHDLESS_SUP) N(MULT_AUTH) ]
13[NET] sending packet: from 172.22.0.41[500] to 10.5.1.204[43524] (456 bytes)
08[NET] received packet: from 10.5.1.204[43524] to 172.22.0.41[4500] (432 bytes)
08[ENC] parsed IKE_AUTH request 1 [ IDi N((51015)) N(INIT_CONTACT) IDr CPRQ(PCSCF6 DNS6 DNS6 ADDR6 PCSCF4 DNS DNS MASK ADDR) SA TSi TSr ]
08[CFG] looking for peer configs matching 172.22.0.41[ims]...10.5.1.204[0001010123456790@nai.epc.mnc001.mcc001.3gppnetwork.org]
08[CFG] selected peer config 'rw'
08[NET] epdg: gsupc: Send Auth Request for 001010123456790
08[NET] epdg: gsupc: Enqueuing message. Waiting 5000 ms for an answer
07[NET] epdg: gsupc: receive gsup message 001010123456790/10
07[NET] epdg: gsupc: 001010123456790/10: Informing requester. 0x7fc308008280
08[LIB] proposing new reauthentication identity 'd161731d90b1729d'
08[IKE] initiating EAP_AKA method (id 0x78)
08[IKE] configured EAP-only authentication, but peer does not support it
08[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ]
08[NET] sending packet: from 172.22.0.41[4500] to 10.5.1.204[43524] (80 bytes)
08[NET] epdg_listener: updown: imsi 001010123456790: IKE_SA went down
12[NET] received packet: from 10.5.1.204[41341] to 172.22.0.41[500] (384 bytes)
12[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) ]
12[IKE] 10.5.1.204 is initiating an IKE_SA
12[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
12[IKE] local host is behind NAT, sending keep alives
12[IKE] DH group MODP_1024 unacceptable, requesting MODP_2048
12[ENC] generating IKE_SA_INIT response 0 [ N(INVAL_KE) ]
12[NET] sending packet: from 172.22.0.41[500] to 10.5.1.204[41341] (Stream 238, 24 bytes
*DBG* gsup_server got {ipa,#Port<0.17>,
                           {osmo,5},
                           #{cn_domain => 1,
                             current_rat_type => rat_eutran_sgs,
                             imsi => <<"001010123456790">>,message_class => 5,
                             message_type => send_auth_info_req,
                             num_vectors_req => 1}}
*DBG* epdg_ue_fsm_001010123456790 receive call {auth_request,33,"*",#{}} from <0.23942.1> in state state_authenticating
*DBG* epdg_ue_fsm_001010123456790 send ok to <0.23942.1>
*DBG* epdg_ue_fsm_001010123456790 consume call {auth_request,33,"*",#{}} from <0.23942.1> in state state_authenticating => state_wait_auth_resp
*DBG* aaa_ue_fsm_001010123456790 receive call {rx_swm_der_auth_req,33,"*",#{}} from <0.201.0> in state state_new
*DBG* gsup_server new state {gsups_state,#Port<0.16>,4222,#Port<0.17>,
                                {ipa_ccm_options,"EPDG-00-00-00-00-00-00",
                                    "0/0/0","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "EPDG-00-00-00-00-00-00",false}}
*DBG* epdg_ue_fsm_001010123456790 start_timer {state_timeout,10000,
                                               swm_der_timeout,[]} in state state_wait_auth_resp
23:57:44.315 [info] GSUP: Rx #{cn_domain => 1,current_rat_type => rat_eutran_sgs,imsi => <<"001010123456790">>,message_class => 5,message_type => send_auth_info_req,num_vectors_req => 1}
23:57:44.316 [info] ue_fsm auth_request
23:57:44.316 [info] ue_fsm state_authenticating event=auth_request {33, "*", #{}}, {ue_fsm_data,<<"001010123456790">>,"internet",[],undefined,false,0,false,false}
*DBG* aaa_ue_fsm_001010123456790 send ok to <0.201.0>
*DBG* aaa_ue_fsm_001010123456790 consume call {rx_swm_der_auth_req,33,"*",#{}} from <0.201.0> in state state_new => state_wait_swx_maa
23:57:44.316 [info] ue_fsm ev_rx_swm_der_auth_req
23:57:44.316 [info] ue_fsm state_new event=rx_swm_der_auth_req {33, "*", #{}}, {ue_fsm_data,"001010123456790","001010123456790@nai.epc.mnc042.mcc901.3gppnetwork.org","internet",true,true,undefined}
23:57:44.316 [debug] Swx MAR: IPv4Opt=<<"����">> IPv6Opt=[]
23:57:44.316 [debug] Swx Tx MAR: {'MAR',["epdg.localdomain",";","1821369299",";","53",";","nonode@nohost"],1,undefined,undefined,undefined,"001010123456790",{'Vendor-Specific-Application-Id',10415,[16777265],[]},{'SIP-Auth-Data-Item',[],["EAP-AKA"],[],[],[],[],[],[],<<"����">>,[],[],[],[]},1,[],1,[],[],[],[],[],[],[],[]}
23:57:44.320 [info] SWx Rx MAA {<0.236.0>,{diameter_caps,{"aaa.epc.mnc001.mcc001.3gppnetwork.org","hss.epc.mnc001.mcc001.3gppnetwork.org"},{"epc.mnc001.mcc001.3gppnetwork.org","epc.mnc001.mcc001.3gppnetwork.org"},{[{127,0,0,1},{172,22,0,41}],[{172,22,0,3}]},{0,0},{"osmo-epdg","freediameter"},{[],[1759864153]},{[10415,13019,5535],[5535,10415,13019]},{[],[]},{[],[]},{[],[]},{[{'diameter_base_Vendor-Specific-Application-Id',10415,[16777265],[]}],[{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777216],[]},{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777251],[]},{'diameter_base_Vendor-Specific-Application-Id',[10415],[16777265],[]}]},{[],[10500]},{[],[]}}}: {'MAA',"epdg.localdomain;1821369299;53;nonode@nohost",1,"hss.epc.mnc001.mcc001.3gppnetwork.org","epc.mnc001.mcc001.3gppnetwork.org",{'Vendor-Specific-Application-Id',10415,[16777265],[]},"001010123456790",[],[2001],[],[1],[{'SIP-Auth-Data-Item',[1],["EAP-AKA"],[[216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226,184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248]],[[181,234,21,174,229,33,203,53]],[],[[224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,18]],[[222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107]],[],[],[],[],[],[]}],[],[],[],[],[],[]}/ Errors [] 
*DBG* aaa_ue_fsm_001010123456790 receive call {rx_swx_maa,
         {ok,[{epdg_auth_tuple,
                  <<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,
                  <<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,
                  <<181,234,21,174,229,33,203,53>>,
                  <<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,
                  <<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,
                    18>>}]}} from <0.23944.1> in state state_wait_swx_maa
23:57:44.320 [info] dia_sip2gsup: auth [216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226,184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248] authz [181,234,21,174,229,33,203,53] 
23:57:44.320 [info]   rand [216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226] autn [184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248] 
*DBG* aaa_ue_fsm_001010123456790 send ok to <0.23944.1>
23:57:44.320 [info] ue_fsm ev_rx_swx_maa
*DBG* epdg_ue_fsm_001010123456790 receive call {received_swm_dea_auth_response,
         {ok,[{epdg_auth_tuple,
                  <<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,
                  <<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,
                  <<181,234,21,174,229,33,203,53>>,
                  <<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,
                  <<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,
                    18>>}]}} from <0.213.0> in state state_wait_auth_resp
23:57:44.321 [info] ue_fsm state_wait_swx_maa event=rx_swx_maa, {ue_fsm_data,"001010123456790","001010123456790@nai.epc.mnc042.mcc901.3gppnetwork.org","internet",true,true,undefined}
*DBG* aaa_ue_fsm_001010123456790 consume call {rx_swx_maa,
         {ok,[{epdg_auth_tuple,
                  <<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,
                  <<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,
                  <<181,234,21,174,229,33,203,53>>,
                  <<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,
                  <<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,
                    18>>}]}} from <0.23944.1> in state state_wait_swx_maa => state_new
23:57:44.321 [info] ue_fsm received_swm_dea_auth_response {ok,[{epdg_auth_tuple,<<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,<<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,<<181,234,21,174,229,33,203,53>>,<<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,<<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,18>>}]}
*DBG* epdg_ue_fsm_001010123456790 send ok to <0.213.0>
*DBG* gsup_server got cast {auth_response,
                            {<<"001010123456790">>,
                             {ok,
                              [{epdg_auth_tuple,
                                <<216,93,166,173,99,86,149,113,166,139,39,147,
                                  116,181,57,226>>,
                                <<184,166,38,160,132,201,128,0,38,169,26,137,
                                  113,162,52,248>>,
                                <<181,234,21,174,229,33,203,53>>,
                                <<222,146,89,189,35,141,244,236,31,235,225,199,
                                  105,40,4,107>>,
                                <<224,137,98,129,223,245,174,151,129,103,
                                  70,43,174,37,25,18>>}]}}}
23:57:44.321 [info] ue_fsm state_wait_auth_resp event=received_swm_dea_auth_response Result={ok,[{epdg_auth_tuple,<<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,<<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,<<181,234,21,174,229,33,203,53>>,<<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,<<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,18>>}]}, {ue_fsm_data,<<"001010123456790">>,"internet",[],undefined,false,0,false,false}
*DBG* epdg_ue_fsm_001010123456790 consume call {received_swm_dea_auth_response,
         {ok,[{epdg_auth_tuple,
                  <<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,
                  <<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,
                  <<181,234,21,174,229,33,203,53>>,
                  <<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,
                  <<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,
                    18>>}]}} from <0.213.0> in state state_wait_auth_resp => state_authenticating
23:57:44.321 [info] auth_response(<<"001010123456790">>): {ok,[{epdg_auth_tuple,<<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,<<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,<<181,234,21,174,229,33,203,53>>,<<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,<<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,18>>}]}
*DBG* gsup_server new state {gsups_state,#Port<0.16>,4222,#Port<0.17>,
                                {ipa_ccm_options,"EPDG-00-00-00-00-00-00",
                                    "0/0/0","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "00:00:00:00:00:00","00:00:00:00:00:00",
                                    "EPDG-00-00-00-00-00-00",false}}
23:57:44.322 [info] auth_response for <<"001010123456790">>: {ok,[{epdg_auth_tuple,<<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,<<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,<<181,234,21,174,229,33,203,53>>,<<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,<<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,18>>}]}
23:57:44.322 [info] GSUP: Tx #{auth_tuples => [#{autn => <<184,166,38,160,132,201,128,0,38,169,26,137,113,162,52,248>>,ck => <<224,137,98,129,223,245,174,151,129,103,70,43,174,37,25,18>>,ik => <<222,146,89,189,35,141,244,236,31,235,225,199,105,40,4,107>>,rand => <<216,93,166,173,99,86,149,113,166,139,39,147,116,181,57,226>>,res => <<181,234,21,174,229,33,203,53>>}],imsi => <<"001010123456790">>,message_class => 5,message_type => send_auth_info_res}

vowifi.zip

[herlesupreeth]

After Authentication vectors are sent your UE is not responding. This can mean that SIM details are incorrect (NOTE: OP is not equal to OPc)

[TrusterBSW]

I will check after work, but that looks odd to me as I can have LTE data & ims services with that SIM.

Maybe I change in between OPc to OP to test, and forgot to change it back, but I don't think so.

Can it be that the link between my phone and the core goes through a VPN, and mtu change in between ?

[herlesupreeth]

Can it be that the link between my phone and the core goes through a VPN, and mtu change in between ?

I havent attempted with this network topology so I am not sure. IMO, IKEv2 with NAT traversal should work (usage of port 4500)

[TrusterBSW]

I can confirm that I can register on LTE and VoLTE with that SIM :

I will try to go without the VPN this weekend, through public internet, so the mtu is not affected

[TrusterBSW]

even through public network with a standard MTU, not improvements are seen.

Here is the pcap, but there is the same issue,

Here is the last try i made, through public network if it can help.

There is not NAT on the core side before docker, there is a nat on the client side as usual consumer internet offer.

test.zip

[herlesupreeth]

Apologies for late reply. I have no clue why its failing to authenticate with ePDG

You try the following

1. Start all the services (ePDG etc.)
2. Inside the ePDG container run the following command i.e.

docker exec -ti osmoepdg bash
swanctl --list-sas

3. Attempt to attach the UE
4. Take all the logs (osmoedpg + the output from swanctl --list-sas after UE attempts to attach)

The output from swanctl --list-sas contains the keys needed to decrypt the ISAKMP (IKEv2) packets in Wireshark. This way we can know a bit more about the failure