osmith
/
slides-pespin
forked from pespin/slides
1
0
Fork 0
Code Pull Requests Activity

osmodevcon2024: osmo-epdg: improve UE

This commit is contained in:
Alexander Couzens 2024-05-04 11:01:53 +02:00
parent 972c3a9122
commit f3584cb0d0
7 changed files with 58 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
2024/osmodevcon2024/osmo_epdg/Makefile
View File

@ -1,7 +1,8 @@
OSMO_GSM_MANUALS ?= "/home/$(USER)/projects/osmo-gsm-manuals/"
html: slides.html
slides.html: *.adoc
asciidoc slides.adoc
asciidoc -f "$(OSMO_GSM_MANUALS)/build/mscgen-filter.conf" slides.adoc
.PHONY: html

BIN
2024/osmodevcon2024/osmo_epdg/screenshot_iphone_ipsec_failure.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 23 KiB

BIN
2024/osmodevcon2024/osmo_epdg/screenshot_pixel7_wireshark_errors.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 93 KiB

BIN
2024/osmodevcon2024/osmo_epdg/screenshot_pixel7_wireshark_errors_correct.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 94 KiB

BIN
2024/osmodevcon2024/osmo_epdg/screenshot_pixel7_wireshark_errors_correct2.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 93 KiB

14
2024/osmodevcon2024/osmo_epdg/sip_register_msc_gen.dot Normal file
View File

@ -0,0 +1,14 @@
msc{
hscale = 2;
UE, DNS, ePDG, IMS;
UE => DNS [label="A/AAAA epdg.epc.mnc070.mcc901.pub.3gppnetwork.org"];
UE <= DNS [label="A 213.95.46.81"];
UE <=> ePDG [label="SWu/IKEv2 Setup, Authentication"];
--- [label="Tunnel between UE and IMS (via ePDG & PGW)"];
UE => IMS [label="SIP: Register"];
UE <= IMS [label="SIP: Unauthorized (AKA Challenge, ESP Port, ...)"];
UE => IMS [label="ESP: SIP Register (AKA Response)"];
UE <= IMS [label="ESP: SIP Success"];
}

45
2024/osmodevcon2024/osmo_epdg/slides.adoc
View File

@ -54,7 +54,8 @@ include::sip_register_msc_gen.dot[]
== Android
* use Open Mobile Network Toolkit
* Thanks to Peter
* Thanks to Peter, Johann, ...
* (usually) requires Android Carrier Settings
== Pixel (6/7/7a)
@ -85,11 +86,49 @@ include::sip_register_msc_gen.dot[]
image:screenshot_pixel7_wireshark.png[height=600]
=== iPhones
== Pixel 7/7a IMS
* Connect to IMS
* **Tries** SIP Auth/AKA
* Depends on the IMS
* Doesn't encode SIP auth fields correct
image:screenshot_pixel7_wireshark_errors.png[height=600]
== Pixel 7/7a IMS
* Connect to IMS
* **Tries** SIP Auth/AKA
* Depends on the IMS
* Doesn't encode SIP auth fields correct
image:screenshot_pixel7_wireshark_errors_correct.png[height=600]
== Pixel 7/7a IMS
* Connect to IMS
* **Tries** SIP Auth/AKA
* Depends on the IMS
* Doesn't encode SIP auth fields correct
image:screenshot_pixel7_wireshark_errors_correct2.png[height=600]
== iPhones
* Seems to be a good testing phone
* MCC 999 only support data! Skip 999
* Could you do SIP + ESP? No!
== iPhones
* Seems to be a good testing phone
* MCC 999 only support data!
image:screenshot_iphone_ipsec_failure.png[height=600]
== other phones?
* unsure
* Qualcomm seems problematic requires additional configs
== strongSwan