VoLTE SIP encryption in Romania

 

22.08.2021

  • The phones (at least Samsung) sold by the Romanian operators do not use SIP encryption
  • If SIP encryption is enforced from the UE side, the network rejects the SIP Register with different  SIP Causes. This did not happen when the operators launched VoLTE, at that time the encryption was allowed if the phone was requesting it. 
  • Having encryption ON may cause problems while roaming since the Visiting Network might not allow this due to Lawful Intercept requirements. 👀👀👀
  • ealg (encryption algorithm) choices in Samsung IMS Settings Config:
  • aes-cbc
  • des-ede3-cbc
  • none (common setting for RO operators) 
  • all

 


 

 

Orange Romania, IMS Nokia

SIP/2.0 494 Security Agreement Required - 2047 No matching combination of algorithms found

 

Digi Mobil Romania, IMS Huawei

SIP/2.0 421 Extension Required +

Warning:  "Invalid security-client header and IPsecAKA is force on !"


 

Vodafone Romania, IMS Huawei

SIP/2.0 421 Extension Required +

Warning:  "Invalid security-client header and IPsecAKA is force on !"

No comments:

Post a Comment

Subscribe to: Posts (Atom)

Romanian Operators Sites and core vendors

 Orange  Bucharest  Cluj Vodafone Bucharest Cluj Digi Mobil  Bucharest Iasi Timisoara

  • Samsung VoLTE/VoWiFi settings
    Enable VoLTE & VoWiFi in rooted Samsung smartphones. Usually a VoLTE device, after the power creates the Internet connection us...
  • DIGI MOBIL VoLTE & VoWiFi info
    LISTELE NU MAI SUNT ACTUALIZATE DIN SEPTEMBRIE 2019 Ultimele informatii se afla pe site-ul Digi si pe forumul Softpedia:   https://forum.s...
  • VoLTE VoWiFi Digi Mobil Romania
    LISTELE NU MAI SUNT ACTUALIZATE DIN SEPTEMBRIE 2019 Ultimele informatii se afla pe site-ul Digi si pe forumul Softpedia:   https://forum.s...