아래를 사용하여 UE와 PCSCF 간의 IPSEC 연결을 설정하는 시나리오를 만들기 위해 SIPP 스크립트를 만들고 싶었습니다.
예를 들어:-
setkey -c << EOF
spdadd $pcscf/32[$port_pc] $ue/32[$port_us] tcp -P in ipsec esp/transport//require ;
spdadd $pcscf/32[$port_pc] $ue/32[$port_us] udp -P in ipsec esp/transport//require ;
add $pcscf $ue esp $spi_us -m transport -E $ealg $ck -A $alg $ik
EOF
4 SA가 생성되었으며 setkey -D를 사용하여 확인했습니다.
192.168.137.98 192.168.137.39
esp mode=transport spi=1024(0x00000400) reqid=16625(0x000040f1)
E: 3des-cbc d0c1e6cd d58c07f7 fe4a6715 83d60210 d0c1e6cd d58c07f7
A: hmac-md5 320fe4a8 ab88a62d f406ccb9 76346602
seq=0x00000000 replay=4 flags=0x00000000 state=mature
created: Jun 24 17:01:11 2019 current: Jun 24 17:01:22 2019
diff: 11(s) hard: 0(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=1 pid=9623 refcnt=0
192.168.137.98 192.168.137.39
esp mode=transport spi=2048(0x00000800) reqid=16624(0x000040f0)
E: 3des-cbc d0c1e6cd d58c07f7 fe4a6715 83d60210 d0c1e6cd d58c07f7
A: hmac-md5 320fe4a8 ab88a62d f406ccb9 76346602
seq=0x00000000 replay=4 flags=0x00000000 state=mature
created: Jun 24 17:01:11 2019 current: Jun 24 17:01:22 2019
diff: 11(s) hard: 0(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=2 pid=9623 refcnt=0
192.168.137.39 192.168.137.98
esp mode=transport spi=147047421(0x08c3c3fd) reqid=16623(0x000040ef)
E: 3des-cbc d0c1e6cd d58c07f7 fe4a6715 83d60210 d0c1e6cd d58c07f7
A: hmac-md5 320fe4a8 ab88a62d f406ccb9 76346602
seq=0x00000000 replay=4 flags=0x00000000 state=mature
created: Jun 24 17:01:11 2019 current: Jun 24 17:01:22 2019
diff: 11(s) hard: 0(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=3 pid=9623 refcnt=0
192.168.137.39 192.168.137.98
esp mode=transport spi=70783604(0x04381274) reqid=16622(0x000040ee)
E: 3des-cbc d0c1e6cd d58c07f7 fe4a6715 83d60210 d0c1e6cd d58c07f7
A: hmac-md5 320fe4a8 ab88a62d f406ccb9 76346602
seq=0x00000000 replay=4 flags=0x00000000 state=mature
created: Jun 24 17:01:11 2019 current: Jun 24 17:01:22 2019
diff: 11(s) hard: 0(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=0 pid=9623 refcnt=0
하지만 보안 UE 클라이언트 포트에서 PCSCF 보안 서버 포트로 두 번째 등록을 보낼 때. ESP 패킷으로 전송되지 않습니다. 도와주세요. 더 많은 정보가 필요하다면. 제가 제공할 수 있습니다.