Hosted epdg playground¶

This page is going to document the playground that we're setting up for playing with the (in-development state) of osmo-epdg.
The setup is also described using ansible

Hosts¶

epdg¶

Hostname: epdg.osmocom.org (IPv4 + IPv6)

netdev	IP	Description
enp1s0	213.95.46.81 2001:780:45:1d::46:81	Public Internet
enp7s0	10.74.0.11-10.74.0.13	internal network

This is a Debian 12 VM where the osmo-epdg (consiting of modified strongswan code, erlang ePDG and linux kernel GTP) will run.

epc¶

Hostname: epc.epdg.osmocom.org (IPv6 only)

netdev	IP	Description
eth0	2001:780:45:1d::f046:1000	Public Internet
eth1	10.74.0.21-10.74.0.24	internal network

This is a Debian 12 lxc container where we'll run HSS + PGW (open5gs)

ims¶

Hostname: ims.epdg.osmocom.org (IPv6 only)

netdev	IP	Description
eth0	2001:780:45:1d::f046:1001	Public Internet
eth1	10.74.0.31-10.74.0.33	internal network

This is a Debian 12 lxc container VM where we'll run the IMS core (Kamailio)

Internal network¶

The hosts mentioned above share a private bridged network. That network has no DHCP server and no router. It's purely for communication between the network elements

How to use the playground:¶

Configure your local UE¶

Point your UE or use SWu-IKEv2 to use epdg.osmocom.org.
Alternative you can override the correct dns entries.
E.g. epdg.epc.mnc001.mcc001.pub.3gppnetwork.org -> 213.95.46.81

Get your Simcard into the database on epc.epdg.osmocom.org. Use open5gs-dbctl add

Development¶

To do a test run with the current development state:

osmo-epdg and strongswan are now managed by systemd units.

- to improve development speed, you should restart the smfd or you need to wait until it re-connects.
- The pcrfd also needs to be restarted because the smfd will otherwise reject Session. (It will also automatic re-connect, but takes time too).

ssh root@epc.epdg.osmocom.org systemctl restart open5gs-smfd
sleep 1
ssh root@epc.epdg.osmocom.org systemctl restart open5gs-pcrfd

Add an IMSI¶

ssh root@epc.epdg.osmocom.org
# imsi, ki, opc
open5gs-dbctl add 901700000000000 11111111111111111111111111111111 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
# take a free msisdn
open5gs-dbctl msisdn 901700000000000 0301234
# allow to use ims apn
open5gs-dbctl update_apn 901700000000000 ims 1