Open5gs: IMS Install Ubuntu 22.04
Sumber: https://open5gs.org/open5gs/docs/tutorial/02-VoLTE-setup/
Asumsi Konfigurasi
- OS Ubuntu 22.04
- Open5GS & IMS satu mesin
- Satu Interface enp0s3
- IP Statik enp0s3 192.168.0.5/24 gateway 192.168.0.222
- IP Statik ogstun 10.45.0.1/16 & 2001:db8:cafe::1/48
- Domain mnc070.mcc999.3gppnetwork.org
- APN internet
- MCC 999 MNC 70
Install aplikasi pendukung ubuntu 22.04
apt update apt upgrade -y apt install -y mysql-server tcpdump screen ntp ntpdate git dkms gcc flex bison \ libmysqlclient-dev make libssl-dev libcurl4-openssl-dev libxml2-dev \ libpcre3-dev bash-completion g++ autoconf rtpproxy libmnl-dev libsctp-dev strongswan \ libradcli-dev libradcli4 python3-dev
Install MySQL mariadb
apt update apt upgrade apt -y install mariadb-server
Install Kamailio
Referensi: https://computingforgeeks.com/how-to-install-kamailio-sip-server-on-ubuntu/?expand_article=1
sudo apt -y install kamailio kamailio-mysql-modules kamailio-ims-modules kamailio-outbound-modules kamailio-presence-modules kamailio-xml-modules kamailio-tls-modules kamailio-utils-modules kamailio-sctp-modules kamailio-xmpp-modules
Edit kamctlrc
sudo vi /etc/kamailio/kamctlrc
DBENGINE=MYSQL DBHOST=localhost
Restart
sudo systemctl restart kamailio sudo systemctl enable kamailio sudo systemctl status kamailio
Beberapa hal yang penting dari Kamailio. File binary dan script ada di,
/usr/sbin
Beberapa file binary penting,
kamailio - Kamailio SIP server kamdbctl - script to create and manage the Databases kamctl - script to manage and control Kamailio SIP server kamcmd - CLI - command line tool to interface with Kamailio SIP server
Kamailio module di
/usr/lib/x86_64-linux-gnu/kamailio/modules
Kamailio documentation di
/usr/share/doc/kamailio
Kamailio konfigurasi
/etc/kamailio/
Setup MySQL database dengan kamctlrc
Set nilai SIP_DOMAIN dan DBENGINE. Edit kamctlrc
vi /etc/kamailio/kamctlrc
Cek IP address server anda, pastikan isi kamctlrc
SIP_DOMAIN=ims.mnc070.mcc999.3gppnetwork.org SIP_DOMAIN=192.168.0.5 # jika tidak ada DNS server / BIND DBENGINE=MYSQL
Run,
kamdbctl create
Masukan password, dan ketik
<ENTER> utf32 y <ENTER> y <ENTER> y <ENTER>
Cek database,
mysql
SHOW databases; USE kamailio; SHOW tables; SELECT * FROM subscriber; QUIT
kamdbctl akan menambahkan dua user di MySQL username:password
kamailio:kamailiorw - user untuk full access ke database kamailio kamailioro:kamailioro - user untuk read-only ke database kamailio
Edit rtpproxy
Edit konfigurasi rtpproxy
vi /etc/default/rtpproxy
Ubah menjadi,
# Defaults for rtpproxy # The control socket. #CONTROL_SOCK="unix:/var/run/rtpproxy/rtpproxy.sock" # To listen on an UDP socket, uncomment this line: #CONTROL_SOCK=udp:127.0.0.1:22222 CONTROL_SOCK=udp:127.0.0.1:7722 # Additional options that are passed to the daemon. # EXTRA_OPTS="" # EXTRA_OPTS="-l 172.24.15.30 -d DBUG:LOG_LOCAL0" EXTRA_OPTS="-l 192.168.0.5 -d DBUG:LOG_LOCAL0"
Dimana, -l <PUBLIC_IP> tergantung jaringan kita misalnya kita hanya beroperasi di LAN bisa menjadi 192.168.0.5
Restart,
systemctl restart rtpproxy systemctl enable rtpproxy systemctl status rtpproxy
Edit file konfigurasi untuk VoIP platform
Edit file
vi /etc/kamailio/kamailio.cfg
Cek IP address server. Masukan parameter ini ke file konfigurasi kamailio.cfg. Contoh
#!define WITH_MYSQL #!define WITH_AUTH #!define WITH_USRLOCDB #!define WITH_NAT (uncomment line ini) auto_aliases=no (uncomment line dan masuk hostname) alias="ims.mnc070.mcc999.3gppnetwork.org" (uncomment line, IP internal 10.4.128.21 and IP public 172.24.15.30) listen=udp:10.4.128.21:5060 advertise 172.24.15.30:5060 listen=tcp:10.4.128.21:5060 advertise 172.24.15.30:5060
Contoh untuk IP server 192.168.0.5,
#!define WITH_MYSQL #!define WITH_AUTH #!define WITH_USRLOCDB #!define WITH_NAT /* uncomment the next line to disable the auto discovery of local aliases * based on reverse DNS on IPs (default on) */ auto_aliases=no /* add local domain aliases - it can be set many times */ alias="ims.mnc070.mcc999.3gppnetwork.org" alias="192.168.0.5" /* listen sockets - if none set, Kamailio binds to all local IP addresses * - basic prototype (full prototype can be found in Wiki - Core Cookbook): * listen=[proto]:[localip]:[lport] advertise [publicip]:[pport] * - it can be set many times to add more sockets to listen to */ listen=udp:192.168.0.5:5060 listen=udp:10.45.0.1:5060
Kita perlu memodifikasi rtpproxy_sock agar cocok CONTROL_SOCK di RTPProxy /etc/default/rtpproxy
modparam("rtpproxy", "rtpproxy_sock", "udp:127.0.0.1:7722")
Jika password user ‘kamailio’ untuk MySQL diubah, kita perlu update nilai ‘DBURL’ parameter.
Cek,
systemctl restart kamailio systemctl status kamailio
kamcmd rtpproxy.list
init.d Kamailio
Edit
vi /etc/default/kamailio
Pastikan,
RUN_KAMAILIO=yes
Create the directory for pid file:
mkdir -p /var/run/kamailio
Restart kamailio,
systemctl daemon-reload systemctl start kamailio.service systemctl restart kamailio.service systemctl enable kamailio.service systemctl status kamailio.service
Cek kamailio yang running,
ps ax |grep kamailio
Cek SIP server
Buat subsciber account menggunakan
kamctl add <username> <password>
Jika di tanya MySQL password, gunakan password kamailio@localhost: type kamailiorw seperti kamailio.cfg
kamctl add test testpasswd kamctl add test2 testpasswd
Setting SIP Phone,
username password server outbound proxy server transport type: UDP
Buat mysql database untuk pcscf, scscf and icscf
Download source code kamailio
sudo su mkdir -p /usr/local/src/
cd /usr/local/src/ git clone https://github.com/herlesupreeth/kamailio cd kamailio git checkout -b 5.7 origin/5.7
Create database,
mysql
DROP DATABASE pcscf; DROP DATABASE scscf; DROP DATABASE icscf; CREATE DATABASE pcscf; CREATE DATABASE scscf; CREATE DATABASE icscf; QUIT
Lakukan perintah di bawah, jika di tanya mysql root user tekan ENTER.
cd /usr/local/src/kamailio/utils/kamctl/mysql
mysql -u root -p pcscf < standard-create.sql mysql -u root -p pcscf < presence-create.sql mysql -u root -p pcscf < ims_usrloc_pcscf-create.sql mysql -u root -p pcscf < ims_dialog-create.sql mysql -u root -p scscf < standard-create.sql mysql -u root -p scscf < presence-create.sql mysql -u root -p scscf < ims_usrloc_scscf-create.sql mysql -u root -p scscf < ims_dialog-create.sql mysql -u root -p scscf < ims_charging-create.sql cd /usr/local/src/kamailio/misc/examples/ims/icscf mysql -u root -p icscf < icscf.sql
Verify that following tables are present in respective databases by logging into mysql
mysql
USE pcscf; SHOW tables;
+-----------------+ | Tables_in_pcscf | +-----------------+ | active_watchers | | dialog_in | | dialog_out | | dialog_vars | | location | | presentity | | pua | | version | | watchers | | xcap | +-----------------+
USE scscf; SHOW tables; +-----------------+ | Tables_in_scscf | +-----------------+ | active_watchers | | contact | | dialog_in | | dialog_out | | dialog_vars | | impu | | impu_contact | | impu_subscriber | | presentity | | pua | | ro_session | | subscriber | | version | | watchers | | xcap | +-----------------+
USE icscf; SHOW tables; +---------------------+ | Tables_in_icscf | +---------------------+ | nds_trusted_domains | | s_cscf | | s_cscf_capabilities | +---------------------+
grant delete,insert,select,update on pcscf.* to pcscf@localhost identified by 'heslo'; grant delete,insert,select,update on scscf.* to scscf@localhost identified by 'heslo'; grant delete,insert,select,update on icscf.* to icscf@localhost identified by 'heslo'; grant delete,insert,select,update on icscf.* to provisioning@localhost identified by 'provi'; GRANT ALL PRIVILEGES ON pcscf.* TO 'pcscf'@'%' identified by 'heslo'; GRANT ALL PRIVILEGES ON scscf.* TO 'scscf'@'%' identified by 'heslo'; GRANT ALL PRIVILEGES ON icscf.* TO 'icscf'@'%' identified by 'heslo'; GRANT ALL PRIVILEGES ON icscf.* TO 'provisioning'@'%' identified by 'provi'; FLUSH PRIVILEGES; QUIT
Selanjutnya (butuh setup DNS / BIND yang benar),
mysql
USE icscf; INSERT INTO `nds_trusted_domains` VALUES (1,'ims.mnc070.mcc999.3gppnetwork.org'); INSERT INTO `s_cscf` VALUES (1,'First and only S-CSCF','sip:scscf.ims.mnc070.mcc999.3gppnetwork.org:6060'); INSERT INTO `s_cscf_capabilities` VALUES (1,1,0),(2,1,1); QUIT
alternatif (jika DNS belum beres, gunakan IP address),
mysql USE icscf; INSERT INTO nds_trusted_domains VALUES (1,'192.168.0.5'); INSERT INTO s_cscf VALUES (1,'First and only S-CSCF','sip:192.168.0.5:6060'); INSERT INTO s_cscf_capabilities VALUES (1,1,0),(2,1,1); QUIT
Copy file konfigurasi pcscf, icscf & scscf ke folder /etc dan edit
Copy konfigurasi
cd /usr/local/src/ && git clone https://github.com/herlesupreeth/Kamailio_IMS_Config cd Kamailio_IMS_Config cp -r kamailio_icscf /etc cp -r kamailio_pcscf /etc cp -r kamailio_scscf /etc
ICSCF Edit supaya Domain mnc070.mcc999.3gppnetwork.org & IP 10.45.0.1
vi /etc/kamailio_icscf/icscf.cfg
# SIP / UDP listen=udp:10.45.0.1:4060 # listen=udp:10.4.128.21:4060 #listen=udp:10.4.128.21:4060 advertise 172.24.15.30:4060 # SIP / TCP listen=tcp:10.45.0.1:4060 # listen=tcp:10.4.128.21:4060 #listen=tcp:10.4.128.21:4060 advertise 172.24.15.30:4060 # SIP / TCP/TLS #listen=tls:11.22.33.44:4061 alias=ims.mnc070.mcc999.3gppnetwork.org #!define NETWORKNAME "ims.mnc070.mcc999.3gppnetwork.org" #!define HOSTNAME "icscf.ims.mnc099.mcc999.3gppnetwork.org" #!subst "/NETWORKNAME/ims.mnc070.mcc999.3gppnetwork.org/" #!subst "/HSS_REALM/ims.mnc070.mcc999.3gppnetwork.org/" #!define ENUM_SUFFIX "ims.mnc070.mcc999.3gppnetwork.org." # SIP-Address of capturing node, if not set, capturing is disabled. ##!define CAPTURE_NODE "sip:127.0.0.1:9060" # Connection URL for the database: #!define DB_URL "mysql://icscf:heslo@localhost/icscf" ##!define DB_URL2 "con2=>mysql://icscf:heslo@127.0.0.1/icscf"
vi /etc/kamailio_icscf/icscf.xml
<?xml version="1.0" encoding="UTF-8"?>
<DiameterPeer
FQDN="icscf.ims.mnc070.mcc999.3gppnetwork.org"
Realm="ims.mnc070.mcc999.3gppnetwork.org"
Vendor_Id="10415"
Product_Name="CDiameterPeer"
AcceptUnknownPeers="1"
DropUnknownOnDisconnect="1"
Tc="30"
Workers="16"
QueueLength="32"
TransactionTimeout="5"
SessionsHashSize="128"
DefaultAuthSessionTimeout="3600"
MaxAuthSessionTimeout="3600"
>
<Peer FQDN="hss.ims.mnc070.mcc999.3gppnetwork.org" Realm="ims.mnc070.mcc999.3gppnetwork.org" port="3868"/>
<Acceptor port="3869" bind="10.45.0.1"/>
<Auth id="16777216" vendor="10415"/>
<Auth id="16777216" vendor="4491"/>
<Auth id="16777216" vendor="13019"/>
<Auth id="16777216" vendor="0"/>
<SupportedVendor vendor="10415" />
<DefaultRoute FQDN="hss.ims.mnc070.mcc999.3gppnetwork.org" metric="10"/>
</DiameterPeer>
PCSCF Edit supaya Domain mnc070.mcc999.3gppnetwork.org & IP 10.45.0.1
vi /etc/kamailio_pcscf/pcscf.cfg
# IP-Adress for incoming SIP-Traffic, in the following format: # SIP / UDP listen=udp:10.45.0.1:5060 # listen=udp:10.4.128.21:5060 # Uncomment the below line only when UE is behind double NAT (e.g. VoIP calling over WiFi/ CN behind a NAT) #listen=udp:10.4.128.21:5060 advertise 172.24.15.30:5060 # SIP / TCP listen=tcp:10.45.0.1:5060 # listen=tcp:10.4.128.21:5060 # Uncomment the below line only when UE is behind double NAT (e.g. VoIP calling over WiFi/ CN behind a NAT) #listen=tcp:10.4.128.21:5060 advertise 172.24.15.30:5060 # SIP / TCP/TLS #listen=tls:11.22.33.44:5061 # IPSEC / UDP #!define IPSEC_LISTEN_ADDR "10.45.0.1" ##!define IPSEC_LISTEN_ADDR "10.4.128.21" #!define IPSEC_CLIENT_PORT 5100 #!define IPSEC_SERVER_PORT 6100 #!define IPSEC_MAX_CONN 10 # IP used in Rx_AAR_Register - IP of this P-CSCF, to be used in the flow for the AF-signaling #!define RX_AF_SIGNALING_IP "10.45.0.1" ##!define RX_AF_SIGNALING_IP "10.4.128.21" # Uncomment the below line only when UE is behind double NAT (e.g. VoIP calling over WiFi/ CN behind a NAT) ##!define RX_AF_SIGNALING_IP "172.24.15.30" alias=pcscf.ims.mnc070.mcc999.3gppnetwork.org #!define MY_WS_PORT 80 #!define MY_WSS_PORT 443 #!define PCSCF_URL "sip:pcscf.ims.mnc070.mcc999.3gppnetwork.org:5060" #!define TCP_PROCESSES 8 #!subst "/NETWORKNAME/ims.mnc070.mcc999.3gppnetwork.org/" #!subst "/HOSTNAME/pcscf.ims.mnc070.mcc999.3gppnetwork.org/" #!subst "/PCRF_REALM/epc.mnc070.mcc999.3gppnetwork.org/" # SIP-Address of capturing node, if not set, capturing is disabled. ##!define CAPTURE_NODE "sip:127.0.0.1:9060" # Allowed IPs for XML-RPC-Queries ##!define XMLRPC_WHITELIST_1 "127.0.0.1" ##!define XMLRPC_WHITELIST_2 "127.0.0.1" ##!define XMLRPC_WHITELIST_3 "127.0.0.1" # Databases: #!define DB_URL "mysql://pcscf:heslo@127.0.0.1/pcscf" ##!define DB_URL2 "con2=>mysql://pcscf:heslo@127.0.0.1/pcscf" #!define SQLOPS_DBURL "pcscf=>mysql://pcscf:heslo@127.0.0.1/pcscf" #! Optional: Server-URL for Websocket-Requests ##!define WEBSOCKET_WEBSERVER "phone.ng-voice.com" ##!define TRF_FUNCTION "trf.ims.mnc070.mcc999.3gppnetwork.org"
vi /etc/kamailio_pcscf/pcscf.xml
<?xml version="1.0" encoding="UTF-8"?>
<DiameterPeer
FQDN="pcscf.ims.mnc070.mcc999.3gppnetwork.org"
Realm="ims.mnc070.mcc999.3gppnetwork.org"
Vendor_Id="10415"
Product_Name="CDiameterPeer"
AcceptUnknownPeers="1"
DropUnknownOnDisconnect="1"
Tc="30"
Workers="4"
QueueLength="8"
TransactionTimeout="5"
SessionsHashSize="128"
DefaultAuthSessionTimeout="3600"
MaxAuthSessionTimeout="3600"
>
<Peer FQDN="pcrf.epc.mnc070.mcc999.3gppnetwork.org" Realm="epc.mnc070.mcc999.3gppnetwork.org" port="3868"/>
<Acceptor port="3871" bind="10.45.0.1"/>
<Auth id="16777236" vendor="10415"/>
<Auth id="16777236" vendor="0"/>
<DefaultRoute FQDN="pcrf.epc.mnc070.mcc999.3gppnetwork.org" metric="10"/>
</DiameterPeer>
SCSCF Edit supaya Domain mnc070.mcc999.3gppnetwork.org & IP 10.45.0.1
vi /etc/kamailio_scscf/scscf.cfg
# SIP / UDP listen=udp:10.45.0.1:6060 #listen=udp:10.4.128.21:6060 #listen=udp:10.4.128.21:6060 advertise 172.24.15.30:6060 # SIP / TCP listen=tcp:10.45.0.1:6060 #listen=tcp:10.4.128.21:6060 #listen=tcp:10.4.128.21:6060 advertise 172.24.15.30:6060 # SIP / TCP/TLS #listen=tls:11.22.33.44:6061 #!define NETWORKNAME "ims.mnc070.mcc999.3gppnetwork.org" #!define NETWORKNAME_ESC "ims\.mnc070\.mcc999\.3gppnetwork\.org" #!define HOSTNAME "scscf.ims.mnc070.mcc999.3gppnetwork.org" #!define HOSTNAME_ESC "scscf\.ims\.mnc070\.mcc999\.3gppnetwork\.org" #!define URI "sip:scscf.ims.mnc070.mcc999.3gppnetwork.org:6060" #!subst "/NETWORKNAME/ims.mnc070.mcc999.3gppnetwork.org/" #!subst "/HSS_REALM/ims.mnc070.mcc999.3gppnetwork.org/" alias=scscf.ims.mnc070.mcc999.3gppnetwork.org # ENUM-Server to query: #!define ENUM_SUFFIX "ims.mnc070.mcc999.3gppnetwork.org." # SIP-Address of capturing node, if not set, capturing is disabled. ##!define CAPTURE_NODE "sip:127.0.0.1:9060" # Connection URL for the database: # For use with a single database: #!define DB_URL "mysql://scscf:heslo@127.0.0.1/scscf" # For use with DB_Cluster: con1 (primary), con2 (backup) ##!define DB_URL "con1=>mysql://scscf:heslo@127.0.0.1/scscf" ##!define DB_URL2 "con2=>mysql://scscf:heslo@127.0.0.1/scscf"
vi /etc/kamailio_scscf/scscf.xml
<?xml version="1.0" encoding="UTF-8"?>
<DiameterPeer
FQDN="scscf.ims.mnc070.mcc999.3gppnetwork.org"
Realm="ims.mnc070.mcc999.3gppnetwork.org"
Vendor_Id="10415"
Product_Name="CDiameterPeer"
AcceptUnknownPeers="1"
DropUnknownOnDisconnect="1"
Tc="30"
Workers="16"
QueueLength="32"
TransactionTimeout="5"
SessionsHashSize="128"
DefaultAuthSessionTimeout="3600"
MaxAuthSessionTimeout="3600"
>
<Peer FQDN="hss.ims.mnc070.mcc999.3gppnetwork.org" Realm="ims.mnc070.mcc999.3gppnetwork.org" port="3868"/>
<Acceptor port="3870" bind="10.45.0.1"/>
<Auth id="16777216" vendor="10415"/>
<Auth id="16777216" vendor="4491"/>
<Auth id="16777216" vendor="13019"/>
<Auth id="16777216" vendor="0"/>
<Auth id="4" vendor="10415"/>
<Acct id="4" vendor="10415" />
<SupportedVendor vendor="10415" />
<DefaultRoute FQDN="hss.ims.mnc070.mcc999.3gppnetwork.org" metric="10"/>
</DiameterPeer>
Running I-CSCF, P-CSCF and S-CSCF as separate process
First, stop the default kamailio SIP server
systemctl stop kamailio systemctl disable kamailio systemctl mask kamailio
Run all the process as root and NOT sudo
mkdir -p /var/run/kamailio_pcscf kamailio -f /etc/kamailio_pcscf/kamailio_pcscf.cfg -P /kamailio_pcscf.pid -DD -E -e mkdir -p /var/run/kamailio_scscf kamailio -f /etc/kamailio_scscf/kamailio_scscf.cfg -P /kamailio_scscf.pid -DD -E -e mkdir -p /var/run/kamailio_icscf kamailio -f /etc/kamailio_icscf/kamailio_icscf.cfg -P /kamailio_icscf.pid -DD -E -e
Install Open5GS di mesin yang sama dengan Kamailio IMS
Please refer to instructions at https://open5gs.org/open5gs/docs/guide/02-building-open5gs-from-sources/
Instal Open5GS dan Kamailio IMS pada mesin yang sama menjadi penting karena Framed-IP-Address di AAR request via Rx interface akan mengambil received IP address dan port di ims_qos module, oleh karenanya, jika Open5GS berbeda VM/mesin, akan di NAT sehingga kemungkian AAR request akan gagal.
Silahkan ikuti petunjuk konfigurasi Open5GS. Pada dasarnya yang dilakukan adalah,
- Ubah realm ke epc.mnc070.mcc999.3gppnetwork.org
- Define IP pool APN yang digunakan satu untuk APN default (internet) dan satu untuk IMS APN
- Define P-CSCF address dalam konfigurasi pgw
- Define ConnectPeer untuk pcscf.ims.mnc070.mcc777.3gppnetwork.org dengan IP port seperti PCRF freediameter configuration
- Setup IP tables untuk UE pool untuk tun interface
ufw disable
Add user dengan setting APN berikut di Open5GS:
Konfigurasi APN:
--------------------------------------------------------------------------------------------------------------------- | APN | Type | QCI | ARP | Capability | Vulnerablility | MBR DL/UL(Kbps) | GBR DL/UL(Kbps) | PGW IP | --------------------------------------------------------------------------------------------------------------------- | internet | IPv4 | 9 | 8 | Disabled | Disabled | unlimited/unlimited | | | --------------------------------------------------------------------------------------------------------------------- | ims | IPv4 | 5 | 1 | Disabled | Disabled | 3850/1530 | | | | | | 1 | 2 | Enabled | Enabled | 128/128 | 128/128 | | | | | 2 | 4 | Enabled | Enabled | 128/128 | 128/128 | | ---------------------------------------------------------------------------------------------------------------------
Akhirnya, pastikan hal ini di Open5GS
- PCO option mengindikasikan address dari Proxy-CSCF
- Perlu di indikasikan support untuk Voice-over-Packet-Switched (VoPS) di NAS message ke UE dari EPC
Setup FoHSS agar bisa berbicara dengan I-CSCF dan S-CSCF
Untuk kebutuhan FoHSS: Install Java JDK and ant
Jika menggunakan Oracle Java
- Buat account via
- Download Oracle Java 7 JDK dari link berikut,
Install menggunakan perintah,
mkdir -p /usr/lib/jvm/ tar -zxf java.tar.gz -C /usr/lib/jvm/ update-alternatives --install /usr/bin/java java /usr/lib/jvm/jdk1.7.0_79/bin/java 100 update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/jdk1.7.0_79/bin/javac 100
Jika menggunakan OpenJDK
Install,
apt update apt -y install openjdk-17-jdk apt -y install openjdk-8-jdk apt -y install default-jdk apt -y install openjdk-19-jdk
Verifikasi java berhasil di konfigurasi dengan baik, jalankan
update-alternatives --display java
akan keluar kira2,
java - manual mode link best version is /usr/lib/jvm/java-19-openjdk-amd64/bin/java link currently points to /usr/lib/jvm/java-11-openjdk-amd64/bin/java link java is /usr/bin/java slave java.1.gz is /usr/share/man/man1/java.1.gz /usr/lib/jvm/java-11-openjdk-amd64/bin/java - priority 1111 slave java.1.gz: /usr/lib/jvm/java-11-openjdk-amd64/man/man1/java.1.gz /usr/lib/jvm/java-17-openjdk-amd64/bin/java - priority 1711 slave java.1.gz: /usr/lib/jvm/java-17-openjdk-amd64/man/man1/java.1.gz /usr/lib/jvm/java-19-openjdk-amd64/bin/java - priority 1911 slave java.1.gz: /usr/lib/jvm/java-19-openjdk-amd64/man/man1/java.1.gz /usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java - priority 1081 slave java.1.gz: /usr/lib/jvm/java-8-openjdk-amd64/jre/man/man1/java.1.gz
run,
update-alternatives --display javac
akan keluar kira2,
javac - manual mode link best version is /usr/lib/jvm/java-19-openjdk-amd64/bin/javac link currently points to /usr/lib/jvm/java-11-openjdk-amd64/bin/javac link javac is /usr/bin/javac slave javac.1.gz is /usr/share/man/man1/javac.1.gz /usr/lib/jvm/java-11-openjdk-amd64/bin/javac - priority 1111 slave javac.1.gz: /usr/lib/jvm/java-11-openjdk-amd64/man/man1/javac.1.gz /usr/lib/jvm/java-17-openjdk-amd64/bin/javac - priority 1711 slave javac.1.gz: /usr/lib/jvm/java-17-openjdk-amd64/man/man1/javac.1.gz /usr/lib/jvm/java-19-openjdk-amd64/bin/javac - priority 1911 slave javac.1.gz: /usr/lib/jvm/java-19-openjdk-amd64/man/man1/javac.1.gz /usr/lib/jvm/java-8-openjdk-amd64/bin/javac - priority 1081 slave javac.1.gz: /usr/lib/jvm/java-8-openjdk-amd64/man/man1/javac.1.gz
Pilih java
update-alternatives --config java
There are 4 choices for the alternative java (providing /usr/bin/java). Selection Path Priority Status ------------------------------------------------------------ 0 /usr/lib/jvm/java-19-openjdk-amd64/bin/java 1911 auto mode * 1 /usr/lib/jvm/java-11-openjdk-amd64/bin/java 1111 manual mode 2 /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1711 manual mode 3 /usr/lib/jvm/java-19-openjdk-amd64/bin/java 1911 manual mode 4 /usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java 1081 manual mode Press <enter> to keep the current choice[*], or type selection number: 3 update-alternatives: using /usr/lib/jvm/java-19-openjdk-amd64/bin/java to provide /usr/bin/java (java) in manual mode
Run,
update-alternatives --config javac
There are 4 choices for the alternative javac (providing /usr/bin/javac). Selection Path Priority Status ------------------------------------------------------------ 0 /usr/lib/jvm/java-19-openjdk-amd64/bin/javac 1911 auto mode * 1 /usr/lib/jvm/java-11-openjdk-amd64/bin/javac 1111 manual mode 2 /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1711 manual mode 3 /usr/lib/jvm/java-19-openjdk-amd64/bin/javac 1911 manual mode 4 /usr/lib/jvm/java-8-openjdk-amd64/bin/javac 1081 manual mode Press <enter> to keep the current choice[*], or type selection number: 3 update-alternatives: using /usr/lib/jvm/java-19-openjdk-amd64/bin/javac to provide /usr/bin/javac (javac) in manual mode
Check java version
java -version
akan keluar kira2,
openjdk version "17.0.8" 2023-07-18 OpenJDK Runtime Environment (build 17.0.8+7-Ubuntu-122.04) OpenJDK 64-Bit Server VM (build 17.0.8+7-Ubuntu-122.04, mixed mode, sharing)
atau
openjdk version "1.8.0_382" OpenJDK Runtime Environment (build 1.8.0_382-8u382-ga-1~22.04.1-b05) OpenJDK 64-Bit Server VM (build 25.382-b05, mixed mode)
atau
openjdk version "11.0.20" 2023-07-18 OpenJDK Runtime Environment (build 11.0.20+8-post-Ubuntu-1ubuntu122.04) OpenJDK 64-Bit Server VM (build 11.0.20+8-post-Ubuntu-1ubuntu122.04, mixed mode, sharing)
atau
openjdk version "19.0.2" 2023-01-17 OpenJDK Runtime Environment (build 19.0.2+7-Ubuntu-0ubuntu322.04) OpenJDK 64-Bit Server VM (build 19.0.2+7-Ubuntu-0ubuntu322.04, mixed mode, sharing)
Install Ant
Install,
sudo apt update sudo apt -y install ant
Verfiy ant version as:
ant -version
Apache Ant(TM) version 1.10.12 compiled on January 17 1970
Install FHoSS
Install
rm -Rf /opt/OpenIMSCore mkdir /opt/OpenIMSCore cd /opt/OpenIMSCore git clone https://github.com/herlesupreeth/FHoSS
Compile:
cd /opt/OpenIMSCore/FHoSS export JAVA_HOME="/usr/lib/jvm/java-17-openjdk-amd64/" export CLASSPATH="/usr/share/gdb/auto-load/usr/lib/jvm/java-17-openjdk-amd64/jre/lib" ant compile deploy | tee ant_compile_deploy.txt
atau,
cd /opt/OpenIMSCore/FHoSS export JAVA_HOME="/usr/lib/jvm/java-8-openjdk-amd64/" export CLASSPATH="/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/" ant compile deploy | tee ant_compile_deploy.txt
atau,
cd /opt/OpenIMSCore/FHoSS export JAVA_HOME="/usr/lib/jvm/java-11-openjdk-amd64/" export CLASSPATH="/usr/share/gdb/auto-load/usr/lib/jvm/java-11-openjdk-amd64/jre/lib/" ant compile deploy | tee ant_compile_deploy.txt
atau,
cd /opt/OpenIMSCore/FHoSS export JAVA_HOME="/usr/lib/jvm/java-19-openjdk-amd64/" export CLASSPATH="/usr/share/gdb/auto-load/usr/lib/jvm/java-19-openjdk-amd64/jre/lib/" ant compile deploy | tee ant_compile_deploy.txt
Buat configurator.sh menggunakan script berikut untuk mengubah domain name dan IP address di semua file konfigurasi
cd deploy vi configurator.sh
Masukan,
#!/bin/bash
# Initialization & global vars
# if you execute this script for the second time
# you should change these variables to the latest
# domain name and ip address
DDOMAIN="open-ims\.test"
DSDOMAIN="open-ims\\\.test"
DEFAULTIP="127\.0\.0\.1"
CONFFILES=`ls *.cfg *.xml *.sql *.properties 2>/dev/null`
# Interaction
printf "Domain Name:"
read domainname
printf "IP Adress:"
read ip_address
# input domain is to be slashed for cfg regexes
slasheddomain=`echo $domainname | sed 's/\./\\\\\\\\\./g'`
if [ $# != 0 ]
then
printf "changing: "
for j in $*
do
sed -i -e "s/$DDOMAIN/$domainname/g" $j
sed -i -e "s/$DSDOMAIN/$slasheddomain/g" $j
sed -i -e "s/$DEFAULTIP/$ip_address/g" $j
printf "$j "
done
echo
else
printf "File to change [\"all\" for everything, \"exit\" to quit]:"
# loop
while read filename ;
do
if [ "$filename" = "exit" ]
then
printf "exitting...\n"
break ;
elif [ "$filename" = "all" ]
then
printf "changing: "
for i in $CONFFILES
do
sed -i -e "s/$DDOMAIN/$domainname/g" $i
sed -i -e "s/$DSDOMAIN/$slasheddomain/g" $i
sed -i -e "s/$DEFAULTIP/$ip_address/g" $i
printf "$i "
done
echo
break;
elif [ -w $filename ]
then
printf "changing $filename \n"
sed -i -e "s/$DDOMAIN/$domainname/g" $filename
sed -i -e "s/$DSDOMAIN/$slasheddomain/g" $filename
sed -i -e "s/$DEFAULTIP/$ip_address/g" $filename
else
printf "cannot access file $filename. skipping... \n"
fi
printf "File to Change:"
done
fi
Save, dan ijinkan untuk di excute,
chmod +x configurator.sh ./configurator.sh
Domain Name:ims.mnc070.mcc999.3gppnetwork.org IP Adress:10.45.0.1 File to change ["all" for everything, "exit" to quit]:all changing: c3p0.properties DiameterPeerHSS.xml hibernate.properties hss.properties log4j.properties
Cek domain open-ims untuk di ubah menjadi ims.mnc070.mcc999.3gppnetwork.org
grep -r "open-ims"
Edit
vi webapps/hss.web.console/WEB-INF/web.xml
Pastikan,
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>ims.mnc070.mcc999.3gppnetwork.org</realm-name>
</login-config>
Cek,
vi hibernate.properties
Pastikan
##hibernate.connection.url=jdbc:mysql://10.45.0.1:3306/hss_db hibernate.connection.url=jdbc:mysql://127.0.0.1:3306/hss_db
Lakukan,
cp configurator.sh ../scripts/ cd ../scripts grep -r "open-ims" ./configurator.sh
Domain Name:ims.mnc070.mcc999.3gppnetwork.org IP Adress:10.45.0.1 File to change ["all" for everything, "exit" to quit]:all changing: hss_db_migrate_as_register.sql hss_db_migrate_dsai.sql hss_db.sql userdata.sql
Lakukan,
cp configurator.sh ../config/ cd ../config ./configurator.sh
Domain Name:ims.mnc070.mcc999.3gppnetwork.org IP Adress:10.45.0.1 File to change ["all" for everything, "exit" to quit]:all changing: c3p0.properties DiameterPeerHSS.xml hibernate.properties hss.properties log4j.properties
cd ../src-web vi WEB-INF/web.xml
Ubah open-ims.org ke ims.mnc070.mcc999.3gppnetwork.org
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>ims.mnc070.mcc999.3gppnetwork.org</realm-name>
</login-config>
Persiapkan database mysql,
mysql DROP DATABASE hss_db; CREATE DATABASE hss_db; QUIT
Edit,
vi /opt/OpenIMSCore/FHoSS/scripts/hss_db.sql
Pastikan,
# DB access rights grant delete,insert,select,update on hss_db.* to hss@localhost identified by 'hss'; grant delete,insert,select,update on hss_db.* to hss@'%' identified by 'hss';
Import database dari /opt/OpenIMSCore ke hss_db
cd /opt/OpenIMSCore mysql -u root -p hss_db < FHoSS/scripts/hss_db.sql mysql -u root -p hss_db < FHoSS/scripts/userdata.sql
Cek database bahwa domain, privileges dll semua OK
mysql -u root -p SHOW databases; USE hss_db; SELECT * from impu; QUIT
+----+---------------------------------------------+------+---------+------------+-------+-----------------+------------------+--------------+--------------+----------------+--------------+ | id | identity | type | barring | user_state | id_sp | id_implicit_set | id_charging_info | wildcard_psi | display_name | psi_activation | can_register | +----+---------------------------------------------+------+---------+------------+-------+-----------------+------------------+--------------+--------------+----------------+--------------+ | 1 | sip:alice@ims.mnc070.mcc999.3gppnetwork.org | 0 | 0 | 0 | 1 | 1 | 1 | | | 0 | 1 | | 2 | sip:bob@ims.mnc070.mcc999.3gppnetwork.org | 0 | 0 | 0 | 1 | 2 | 1 | | | 0 | 1 | +----+---------------------------------------------+------+---------+------------+-------+-----------------+------------------+--------------+--------------+----------------+--------------+
Siapkan script-file, start HSS. Copy startup.sh ke hss.sh di root directory
cp /opt/OpenIMSCore/FHoSS/deploy/startup.sh /root/hss.sh
dan, tambahkan pada hss.sh sebelum echo "Building Classpath"
cd /opt/OpenIMSCore/FHoSS/deploy JAVA_HOME="/usr/lib/jvm/java-17-openjdk-amd64/" CLASSPATH="/usr/share/gdb/auto-load/usr/lib/jvm/java-17-openjdk-amd64/jre/lib"
atau
cd /opt/OpenIMSCore/FHoSS/deploy JAVA_HOME="/usr/lib/jvm/java-8-openjdk-amd64/" CLASSPATH="/usr/lib/jvm/java-8-openjdk-amd64/jre/lib"
atau
cd /opt/OpenIMSCore/FHoSS export JAVA_HOME="/usr/lib/jvm/java-11-openjdk-amd64/" export CLASSPATH="/usr/share/gdb/auto-load/usr/lib/jvm/java-11-openjdk-amd64/jre/lib/"
atau
cd /opt/OpenIMSCore/FHoSS export JAVA_HOME="/usr/lib/jvm/java-19-openjdk-amd64/" export CLASSPATH="/usr/share/gdb/auto-load/usr/lib/jvm/java-19-openjdk-amd64/jre/lib/"
Sehingga isi hss.sh menjadi,
vi /root/hss.sh
Start HSS menggunakan hss.sh #!/bin/bash # -------------------------------------------------------------- # Include JAR Files # -------------------------------------------------------------- cd /opt/OpenIMSCore/FHoSS export JAVA_HOME="/usr/lib/jvm/java-19-openjdk-amd64/" export CLASSPATH="/usr/share/gdb/auto-load/usr/lib/jvm/java-19-openjdk-amd64/jre/lib/" echo "Building Classpath" CLASSPATH=$CLASSPATH:log4j.properties:. for i in lib/*.jar; do CLASSPATH="$i":"$CLASSPATH"; done echo "Classpath is $CLASSPATH." # -------------------------------------------------------------- # Start-up # -------------------------------------------------------------- $JAVA_HOME/bin/java -cp $CLASSPATH de.fhg.fokus.hss.main.HSSContainer $1 $2 $3 $4 $5 $6 $7 $8 $9
Jalankan hss.sh,
cd /root/ ./hss.sh
ERROR
Building Classpath Classpath is lib/xml-apis.jar:lib/xercesImpl.jar:lib/xerces-2.4.0.jar:lib/xalan- 2.4.0.jar:lib/struts.jar:lib/servlet-api.jar:lib/mysql-connector-java-5.1.49-bin.jar:lib/mx4j-3.0.1.jar:lib/log4j.jar:lib/junit.jar:lib/junitee.jar:lib/jta.jar:lib/jsp-api.jar:lib/jdp.jar:lib/hibernate3.jar:lib/ehcache-1.1.jar:lib/dom4j-1.6.1.jar:lib/commons-validator.jar:lib/commons-logging.jar:lib/commons-logging-1.0.4.jar:lib/commons-lang.jar:lib/commons-fileupload.jar:lib/commons-digester.jar:lib/commons-collections-3.1.jar:lib/commons-beanutils.jar:lib/cglib-2.1.3.jar:lib/catalina-optional.jar:lib/catalina.jar:lib/c3p0-0.9.1.jar:lib/base64.jar:lib/asm.jar:lib/asm-attrs.jar:lib/antlr-2.7.6.jar:/usr/share/gdb/auto-load/usr/lib/jvm/java-19-openjdk-amd64/jre/lib/:log4j.properties:.. Error: Could not find or load main class de.fhg.fokus.hss.main.HSSContainer Caused by: java.lang.ClassNotFoundException: de.fhg.fokus.hss.main.HSSContainer
Padahal ada
/opt/OpenIMSCore/FHoSS/bin/de/fhg/fokus/hss/main/HSSContainer.class /opt/OpenIMSCore/FHoSS/deploy/webapps/hss.web.console/WEB-INF/classes/de/fhg/fokus/hss/main/HSSContainer.class /opt/OpenIMSCore/FHoSS/src/de/fhg/fokus/hss/main/HSSContainer.java
Access HSS Web
http://<IMS_VM_FLOATING_IP>:8080/hss.web.console/ http://172.24.15.30:8080/hss.web.console/ http://192.168.0.5:8080/hss.web.console/
user: hssAdmin password: hss
Edit /etc/hosts masukan contoh:
cat /etc/hosts
127.0.0.1 localhost 127.0.0.1 epc-ims
Add IMS subscription use in FoHSS as follows from the Web GUI
Assuming IMSI of the user as 001010123456791 and MSISDN is 0198765432100
Login to the HSS web console. Navigate to the User Identities page Create the IMSU Click IMS Subscription / Create Enter: Name = 001010123456791 Capabilities Set = cap_set1 Preferred S-CSCF = scsf1 Click Save
Create the IMPI and Associate the IMPI to the IMSU Click Create & Bind new IMPI Enter: Identity = 001010123456791@ims.mnc070.mcc999.3gppnetwork.org Secret Key = 8baf473f2f8fd09487cccbd7097c6862 (Ki value as in Open5GS HSS database) Authentication Schemes - All Default = Digest-AKAv1-MD5 AMF = 8000 (As in Open5GS HSS database) OP = 11111111111111111111111111111111 (As in Open5GS HSS database) SQN = 000000021090 (SQN value as in Open5GS HSS database) Click Save
Create and Associate IMPI to IMPU Click Create & Bind new IMPU Enter: Identity = sip:001010123456791@ims.mnc070.mcc999.3gppnetwork.org Barring = Yes Service Profile = default_sp Charging-Info Set = default_charging_set IMPU Type = Public_User_Identity Click Save
Add Visited Network to IMPU Enter: Visited Network = ims.mnc070.mcc999.3gppnetwork.org Click Add
Now, goto Public User Identity and create further IMPUs as following
Public User Identity -IMPU- Identity = tel:0198765432100 Service Profile = default_sp Charging-Info Set = default_charging_set Can Register = Yes IMPU Type = Public_User_Identity Click Save
Add Visited Network to IMPU
Enter: Visited Network = ims.mnc070.mcc999.3gppnetwork.org Click Add
Associate IMPI(s) to IMPU
IMPI Identity = 001010123456791@ims.mnc070.mcc999.3gppnetwork.org Click Add
2. sip:0198765432100@ims.mnc070.mcc999.3gppnetwork.org
Public User Identity -IMPU- Identity = sip:0198765432100@ims.mnc070.mcc999.3gppnetwork.org Service Profile = default_sp Charging-Info Set = default_charging_set Can Register = Yes IMPU Type = Public_User_Identity Click Save
Add Visited Network to IMPU
Enter: Visited Network = ims.mnc070.mcc999.3gppnetwork.org Click Add
Associate IMPI(s) to IMPU
IMPI Identity = 001010123456791@ims.mnc070.mcc999.3gppnetwork.org Click Add
And, finally add these IMPUs as implicit set of IMSI derived IMPU in HSS i.e sip:001010123456791@ims.mnc070.mcc999.3gppnetwork.org as follows:
1. Goto to IMPU sip:001010123456791@ims.mnc070.mcc999.3gppnetwork.org 2. In "Add IMPU(s) to Implicit-Set" section give IMPU Identity created above to be added to this IMPU
APN setting
Buang semua APN setting sebelumnya. Buat APN sebagai berikut,
- Create internet APN, APN name: internet, APN type: default –> Save APN
- Create ims APN, APN name: ims, APN type: ims –> Save APN
eNB setting
Yang perlu di set di eNB:
- Support QoS
- Support Dedicated radio bearer creation
- Pastikan konfigurasi DRB untuk QCI dari APN (QCI 5 untuk ims)
Pada mesin eNB tambahkan routiung statik berikut (karena internal IP of the VM akan di advertised S1AP messages dan UE tidak akan mencapai core di Uplink)
ip r add 10.45.0.1/32 via 192.168.0.5 ip r add 10.45.0.1/32 via 172.24.15.30
USIM and UE settings
Pastikan SQN check disable di Sysmocom SIM card menggunakan sysmo-usim-tool tool
https://github.com/herlesupreeth/sysmo-usim-tool
Test menggunakan OnePlus 5 menggunakan methoda berikut, (Official Google method lebih di rekomendasikan agar handphone tidak rusak)
- (Official Google method) - Ikuti instruksi link @herlesupreeth/CoIMS_Wiki untuk memaksa VoLTE enable menggunakan Carrier Privilege
- (Risky method) Modifikasi untuk memaksa registrasi IMS atau UE tidak akan berusaha untuk connect ke P-CSCF. Perlu apply fix setelah setiap update. https://forum.xda-developers.com/oneplus-5t/how-to/guide-volte-vowifi-german-carriers-t3817542
Test voice call
user1
- IMSI 001010123456791
- MSISDN 0198765432100
user2
- IMSI 001010123456792
- MSISDN 0298765432100
Coba call user1 dan user2
Untuk Debugging
Debug menggunakan wireshark pada Open5GS machine dan menggunakan wireshark display filter
s1ap || gtpv2 || pfcp || diameter || diameter.3gpp || sip
Juga,
Debugging Diameter messages antara PCRF dan P-CSCF di Wireshark jika TCP/SCTP port bukan 3868
Open Wireshark –> Preferences –> Protocols –> Diameter –> Ubah ke port yang digunakan
Referensi