Hi 1. Do we need two(server and client) spi values at the time of communication over UDP or TCP ? Yes two Spi values required mostly for tcp UDP case : UE sending Register to PCSCF uses Spi-c(UE) and P-CSCF sends response back using Spi-c(PCSCF)
TCP case : UE sending Register to PCSCF uses Spi-c(UE) and P-CSCF sends response back using Spi-s(PCSCF) As Same socket will be used for sending responses on which request came 2. At the time of communication how can we share the pre-shared key ? Keys to encrypt,decrypt is communicated to PCSCF during Registration-401 flow where S-CSCF will send IK,CK keys in 401 response towards P-CSCF which P-CSCF will remove before relaying 401 to UE .UE would generate these keys from SIM . Thanks Ankur Bansal On Mon, Jun 1, 2015 at 12:53 PM, Priyaranjan Nayak < priyaranjan4...@gmail.com> wrote: > Hi All, > > We have a SIP client (endpoint) and wanted to integrate IPSec to the SIP > Client. > The client will sent the Security-Client header to server and server will > sent the Security-server header to the client. In these messages client and > server are sending the spi-c and sip-s value to each other for further > communication. Could you please clarify me below questions ? > > 1. Do we need two(server and client) spi values at the time of > communication over UDP or TCP ? > 2. At the time of communication how can we share the pre-shared key ? > > Thanks > Priyaranjan > _______________________________________________ > Sip-implementors mailing list > Sip-implementors@lists.cs.columbia.edu > https://lists.cs.columbia.edu/mailman/listinfo/sip-implementors > _______________________________________________ Sip-implementors mailing list Sip-implementors@lists.cs.columbia.edu https://lists.cs.columbia.edu/mailman/listinfo/sip-implementors