Raja's Exocortex

VoWiFi Firewall Policies Airtel/Jio

#TODO to be completed

Airtel/Jio Voice over WiFi creates an IPSec tunnel to connect to the Airtel/Jio EPDG infrastructure.

Service proivders use the 3gppnetwork.org domain to resolve their VoWiFi endpoints.

Each Mobile company in each country has a DNS name for WiFi calling : epdg.epc.mnc###.mcc###.pub.3gppnetwork.org

List of all MCC and MNC codes.

Jio: mcc405 Airtel: mcc404

Firewall Policies For WiFi Calling

To make Airtel/Jio WiFi calling work, we need to enable below:

WiFi calling IPs Permit: UDP:500, UDP:4500 (IKEv2) Subnet: 49.44.59.0/24 (Jio epdg gateway subnet) Subnet: 106.200.66.16 (Airtel epdg gateway single IP)

Jio TN: dig epdg.epc.mnc869.mcc405.pub.3gppnetwork.org +short @8.8.8.8 Jio has all epdg for all states/circles in single 49.44.59.0/24 subnet

Airtel TN: dig epdg.epc.mnc094.mcc404.pub.3gppnetwork.org +short @8.8.8.8 Airtel has all epdg for all states/circles in different subnets, TN IP is: 106.200.66.16. We enable only this IP.