Hi Ankur,

Thanks for your valuable information.
I am seeing two SPI value are used in between two normal UDP socket
communication.
Below is the wireshark snippet
[image: Inline image 2]

Could you please clarify me why is it happening ?
Do we have any scenario where UDP will use two SPI values ?


On Mon, Jun 1, 2015 at 9:39 PM, ankur bansal <abh.an...@gmail.com> wrote:

> Hi
>
> 1. Do we need two(server and client) spi values at the time of
> communication over UDP or TCP ?
>       Yes two Spi values required mostly for tcp
>        UDP case : UE sending Register to PCSCF uses Spi-c(UE) and P-CSCF
> sends response back using Spi-c(PCSCF)
>
>        TCP case : UE sending Register to PCSCF uses Spi-c(UE) and P-CSCF
> sends response back using Spi-s(PCSCF)
>                         As Same socket will be used for sending responses
> on which request came
>
> 2. At the time of communication how can we share the pre-shared key ?
>
>     Keys to encrypt,decrypt is communicated to PCSCF during
> Registration-401 flow where
>     S-CSCF will send IK,CK keys in 401 response towards P-CSCF which P-CSCF
>     will remove before relaying 401 to UE .UE would generate these keys
> from SIM .
>
> Thanks
> Ankur Bansal
>
> On Mon, Jun 1, 2015 at 12:53 PM, Priyaranjan Nayak <
> priyaranjan4...@gmail.com> wrote:
>
>> Hi All,
>>
>> We have a SIP client (endpoint) and wanted to integrate IPSec to the SIP
>> Client.
>> The client will sent the Security-Client header to server and server will
>> sent the Security-server header to the client. In these messages client
>> and
>> server are sending the spi-c and sip-s value to each other for further
>> communication. Could you please clarify me  below questions ?
>>
>> 1. Do we need two(server and client) spi values at the time of
>> communication over UDP or TCP ?
>> 2. At the time of communication how can we share the pre-shared key ?
>>
>> Thanks
>> Priyaranjan
>> _______________________________________________
>> Sip-implementors mailing list
>> Sip-implementors@lists.cs.columbia.edu
>> https://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
>>
>
>


-- 
Thanks
Priyaranjan
_______________________________________________
Sip-implementors mailing list
Sip-implementors@lists.cs.columbia.edu
https://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to