<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>A lot of devices these days need talk to an entitlement server before they even display WiFi calling.<br></div><div id="sig60525305"><div class="signature">-- <br></div><div class="signature"> Alan Evans<br></div><div class="signature"> <a href="mailto:alan@kageds.com">alan@kageds.com</a><br></div><div class="signature"><br></div></div><div><br></div><div><br></div><div>On Fri, Nov 5, 2021, at 10:13 PM, Hyunwoo Lee wrote:<br></div><blockquote type="cite" id="qt" style=""><div dir="ltr"><div>Dear,<br></div><div><br></div><div>I am Hyunwoo Lee. I am a newbie to configure the custom SIM card. <br></div><div>I have one question in configuring sysmoISIM-SJA2 to enable VoWiFi on COTS UEs. The UEs that I am working on are Samsung Galaxy A21, OnePlus 7T, and Motorola G Power. <br></div><div><br></div><div>I tried to make the UEs discover the ePDG by sending the DNS query and establish the IPsec channel with my IPsec server. I ran my own DNS server to reply with the IP address of my IPsec server on the DNS query. I tried to make it similar to the T-mobile setting since all of the UEs work well with the T-mobile SIM card. Unfortunately, I could not succeed in enabling VoWiFi on the UEs and I do not know why they do not work and what I can do further.<br></div><div><br></div><div>I would appreciate it if someone could help me with this. I described what I did in detail below the line.<br></div><div>Thank you in advance for your help!<br></div><div><br></div><div>Sincerely,<br></div><div>Hyunwoo Lee.<br></div><div><br></div><div>------------------------------<br></div><div><br></div><div>What I did is as follows:<br></div><div>1) Equipments<br></div><div> - Two sysmoISIM-SJA2<br></div><div> - PC/SC CCID ISO7816 USB Smart Card Reader<br></div><div> - UEs: Samsung Galaxy A21, OnePlus 7T, and Motorola G Power (all of them work well with the T-mobile SIM card)<br></div><div><br></div><div>2) Environment<br></div><div> - Ubuntu 18.04 LTS<br></div><div> - python 3.6.9<br></div><div> - pySim 1.0<br></div><div><br></div><div>3) Configuration of the SIM cards with pysim<br></div><div> - The command that I used to configure the SIM cards (to T-mobile) was:<br></div><div> : python3 pySim-prog.py -p 0 -a <adm value> -n name -x 310 -y 260 --imsi=3102601234567890 --msisdn=<telephone number> --epdgid=<a href="http://epdg.epc.mnc260.mcc310.pub.3gppnetwork.org">epdg.epc.mnc260.mcc310.pub.3gppnetwork.org</a> --epdgSelection=310260 --ims-hdomain=<a href="http://ims.mnc260.mcc310.3gppnetwork.org">ims.mnc260.mcc310.3gppnetwork.org</a> --impi=<a href="mailto:sip%3A3102601234567890@ims.mnc260.mcc310.3gppnetwork.org">sip:3102601234567890@ims.mnc260.mcc310.3gppnetwork.org</a> --impu=<a href="mailto:sip%3A3102601234567890@ims.mnc260.mcc310.3gppnetwork.org">sip:3102601234567890@ims.mnc260.mcc310.3gppnetwork.org</a> --iccid=<ICCID value><br></div><div> - The mnclen value is set to 3<br></div><div><br></div><div>4) UE behavior with the SIM card<br></div><div> - Samsung Galaxy A21<br></div><div> : It sends the DNS query for the ePDG, but does not execute the IKE protocol to establish the IPsec channel with the T-mobile core network.<br></div><div><br></div><div> - OnePlus 7T and Motorola G Power<br></div><div> : It does not send the DNS query for the ePDG.<br></div><div><br></div><div>5) Configuration result<br></div><div> - The command that I used to read the SIM card<br></div><div> : python3 pySim-read.py -p 0<br></div><div> - The result of the command<br></div><div>Using PC/SC reader interface<br></div><div><div>Reading ...<br></div><div>Autodetected card type: sysmoISIM-SJA2<br></div><div>ICCID: 8988211000000459514<br></div><div>IMSI: None<br></div><div>GID1: ffffffffffffffffffff<br></div><div>GID2: ffffffffffffffffffff<br></div><div>SMSP: ffffffffffffffffffffffffffffffffffffffffffffffffe1ffffffffffffffffffffffff0581005155f5ffffffffffff000000<br></div><div>SPN: name<br></div><div>Show in HPLMN: True<br></div><div>Hide in OPLMN: True<br></div><div>PLMNsel: 130062ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff<br></div><div>PLMNwAcT:<br></div><div> 130062ffff # MCC: 310 MNC: 260 AcT: UTRAN, E-UTRAN WB-S1, E-UTRAN NB-S1, GSM, GSM COMPACT, cdma2000 HRPD, cdma2000 1xRTT<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div><br></div><div>OPLMNwAcT:<br></div><div> 130062ffff # MCC: 310 MNC: 260 AcT: UTRAN, E-UTRAN WB-S1, E-UTRAN NB-S1, GSM, GSM COMPACT, cdma2000 HRPD, cdma2000 1xRTT<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div><br></div><div>HPLMNAcT:<br></div><div> 130062ffff # MCC: 310 MNC: 260 AcT: UTRAN, E-UTRAN WB-S1, E-UTRAN NB-S1, GSM, GSM COMPACT, cdma2000 HRPD, cdma2000 1xRTT<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div> ffffff0000 # unused<br></div><div><br></div><div>ACC: 0002<br></div><div>MSISDN (NPI=1 ToN=3): 17657759216<br></div><div>Administrative data: 00000003<br></div><div> MS operation mode: normal<br></div><div> Ciphering Indicator: disabled<br></div><div>SIM Service Table: ff33ffff3f003f0f300cf0c3f00000<br></div><div> Service 1 - CHV1 disable function<br></div><div> Service 2 - Abbreviated Dialling Numbers (ADN)<br></div><div> Service 3 - Fixed Dialling Numbers (FDN)<br></div><div> Service 4 - Short Message Storage (SMS)<br></div><div> Service 5 - Advice of Charge (AoC)<br></div><div> Service 6 - Capability Configuration Parameters (CCP)<br></div><div> Service 7 - PLMN selector<br></div><div> Service 8 - RFU<br></div><div> Service 9 - MSISDN<br></div><div> Service 10 - Extension1<br></div><div> Service 13 - Last Number Dialled (LND)<br></div><div> Service 14 - Cell Broadcast Message Identifier<br></div><div> Service 17 - Service Provider Name<br></div><div> Service 18 - Service Dialling Numbers (SDN)<br></div><div> Service 19 - Extension3<br></div><div> Service 20 - RFU<br></div><div> Service 21 - VGCS Group Identifier List (EFVGCS and EFVGCSS)<br></div><div> Service 22 - VBS Group Identifier List (EFVBS and EFVBSS)<br></div><div> Service 23 - enhanced Multi-Level Precedence and Pre-emption Service<br></div><div> Service 24 - Automatic Answer for eMLPP<br></div><div> Service 25 - Data download via SMS-CB<br></div><div> Service 26 - Data download via SMS-PP<br></div><div> Service 27 - Menu selection<br></div><div> Service 28 - Call control<br></div><div> Service 29 - Proactive SIM<br></div><div> Service 30 - Cell Broadcast Message Identifier Ranges<br></div><div> Service 31 - Barred Dialling Numbers (BDN)<br></div><div> Service 32 - Extension4<br></div><div> Service 33 - De-personalization Control Keys<br></div><div> Service 34 - Co-operative Network List<br></div><div> Service 35 - Short Message Status Reports<br></div><div> Service 36 - Network's indication of alerting in the MS<br></div><div> Service 37 - Mobile Originated Short Message control by SIM<br></div><div> Service 38 - GPRS<br></div><div> Service 49 - MExE<br></div><div> Service 50 - Reserved and shall be ignored<br></div><div> Service 51 - PLMN Network Name<br></div><div> Service 52 - Operator PLMN List<br></div><div> Service 53 - Mailbox Dialling Numbers<br></div><div> Service 54 - Message Waiting Indication Status<br></div><div> Service 57 - Multimedia Messaging Service (MMS)<br></div><div> Service 58 - Extension 8<br></div><div> Service 59 - MMS User Connectivity Parameters<br></div><div><br></div><div>EHPLMN:<br></div><div> 130062 # MCC: 310 MNC: 260<br></div><div> ffffff # unused<br></div><div> ffffff # unused<br></div><div> ffffff # unused<br></div><div><br></div><div>USIM Service Table: beff9f9de73e0408400170330006002e00000000<br></div><div> Service 2 - Fixed Dialling Numbers (FDN)<br></div><div> Service 3 - Extension 2<br></div><div> Service 4 - Service Dialling Numbers (SDN)<br></div><div> Service 5 - Extension3<br></div><div> Service 6 - Barred Dialling Numbers (BDN)<br></div><div> Service 8 - Outgoing Call Information (OCI and OCT)<br></div><div> Service 9 - Incoming Call Information (ICI and ICT)<br></div><div> Service 10 - Short Message Storage (SMS)<br></div><div> Service 11 - Short Message Status Reports (SMSR)<br></div><div> Service 12 - Short Message Service Parameters (SMSP)<br></div><div> Service 13 - Advice of Charge (AoC)<br></div><div> Service 14 - Capability Configuration Parameters 2 (CCP2)<br></div><div> Service 15 - Cell Broadcast Message Identifier<br></div><div> Service 16 - Cell Broadcast Message Identifier Ranges<br></div><div> Service 17 - Group Identifier Level 1<br></div><div> Service 18 - Group Identifier Level 2<br></div><div> Service 19 - Service Provider Name<br></div><div> Service 20 - User controlled PLMN selector with Access Technology<br></div><div> Service 21 - MSISDN<br></div><div> Service 24 - Enhanced Multi-Level Precedence and Pre-emption Service<br></div><div> Service 25 - Automatic Answer for eMLPP<br></div><div> Service 27 - GSM Access<br></div><div> Service 28 - Data download via SMS-PP<br></div><div> Service 29 - Data download via SMS-CB<br></div><div> Service 32 - RUN AT COMMAND command<br></div><div> Service 33 - shall be set to 1<br></div><div> Service 34 - Enabled Services Table<br></div><div> Service 35 - APN Control List (ACL)<br></div><div> Service 38 - GSM security context<br></div><div> Service 39 - CPBCCH Information<br></div><div> Service 40 - Investigation Scan<br></div><div> Service 42 - Operator controlled PLMN selector with Access Technology<br></div><div> Service 43 - HPLMN selector with Access Technology<br></div><div> Service 44 - Extension 5<br></div><div> Service 45 - PLMN Network Name<br></div><div> Service 46 - Operator PLMN List<br></div><div> Service 51 - Service Provider Display Information<br></div><div> Service 60 - User Controlled PLMN selector for I-WLAN access<br></div><div> Service 71 - Equivalent HPLMN<br></div><div> Service 73 - Equivalent HPLMN Presentation Indication<br></div><div> Service 85 - EPS Mobility Management Information<br></div><div> Service 86 - Allowed CSG Lists and corresponding indications<br></div><div> Service 87 - Call control on EPS PDN connection by USIM<br></div><div> Service 89 - eCall Data<br></div><div> Service 90 - Operator CSG Lists and corresponding indications<br></div><div> Service 93 - Communication Control for IMS by USIM<br></div><div> Service 94 - Extended Terminal Applications<br></div><div> Service 106 - ePDG configuration Information support<br></div><div> Service 107 - ePDG configuration Information configured<br></div><div> Service 122 - 5GS Mobility Management Information<br></div><div> Service 123 - 5G Security Parameters<br></div><div> Service 124 - Subscription identifier privacy support<br></div><div> Service 126 - UAC Access Identities support<br></div><div><br></div><div>ePDGId:<br></div><div> 657064672e6570632e6d6e633236302e6d63633331302e7075622e336770706e6574776f726b2e6f7267 # <a href="http://epdg.epc.mnc260.mcc310.pub.3gppnetwork.org">epdg.epc.mnc260.mcc310.pub.3gppnetwork.org</a><br></div><div><br></div><div>ePDGSelection:<br></div><div> 130062000100 # MCC: 310 MNC: 260 ePDG Priority: 0001 ePDG FQDN format: Operator Identifier FQDN<br></div><div> ffffffffffff # unused<br></div><div> ffffffffffff # unused<br></div><div> ffffffffffff # unused<br></div><div><br></div><div>P-CSCF:<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div><br></div><div>Home Network Domain Name: <a href="http://ims.mnc260.mcc310.3gppnetwork.org">ims.mnc260.mcc310.3gppnetwork.org</a><br></div><div>IMS private user identity: <a href="mailto:sip%3A3102601234567890@ims.mnc260.mcc310.3gppnetwork.org">sip:3102601234567890@ims.mnc260.mcc310.3gppnetwork.org</a><br></div><div>IMS public user identity:<br></div><div> <a href="mailto:sip%3A3102601234567890@ims.mnc260.mcc310.3gppnetwork.org">sip:3102601234567890@ims.mnc260.mcc310.3gppnetwork.org</a><br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div><br></div><div>UICC IARI:<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div> Not available<br></div><div><br></div><div>ISIM Service Table: 190200<br></div><div> Service 1 - P-CSCF address<br></div><div> Service 4 - GBA-based Local Key Establishment Mechanism<br></div><div> Service 5 - Support of P-CSCF discovery for IMS Local Break Out<br></div><div> Service 10 - Support of UICC access to IMS<br></div><div><br></div><div>Done !<br></div></div><div><br></div><div><div dir="ltr" class="qt-gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span class="font" style="font-family:나눔고딕, 굴림, gulim, 돋움, dotum, AppleGothic;"><span class="colour" style="color:rgb(51, 51, 51);"><span style=""><span class="size" style="font-size:12px;">Hyunwoo Lee, Ph. D.</span></span></span></span><br></div><div><span class="font" style="font-family:나눔고딕, 굴림, gulim, 돋움, dotum, AppleGothic;"><span class="colour" style="color:rgb(51, 51, 51);"><span style=""><span class="size" style="font-size:12px;">Network Security Researcher</span></span></span></span><br></div><div><br></div><div><span style="color:rgb(51, 51, 51);"><span class="font" style="font-family:나눔고딕, 굴림, gulim, 돋움, dotum, AppleGothic;"><span class="size" style="font-size:12px;">E-mail: <a href="mailto:hw5773@gmail.com" target="_blank">hw5773@gmail.com</a></span></span></span><br></div></div></div><div dir="ltr"><span style="color:rgb(51, 51, 51);"><span class="font" style="font-family:나눔고딕, 굴림, gulim, 돋움, dotum, AppleGothic;"><span class="size" style="font-size:12px;">Homepage: <a href="https://hw5773.github.io" target="_blank">https://hw5773.github.io</a></span></span></span><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></blockquote><div><br></div></body></html>