AMF V2.2.0 Integrity 5G-IA0 is accepted bypassing integrity check

Bug Description:

OpenAirInterface v2.2.0 accepts Security Mode Accept without any integrity protection. Configuration has supported integrity NIA1 and NIA2. But if an UE sends initial registration request with only security capability IA0, OpenAirInterface accepts and proceeds. This downgrade security context can lead to the possibility of replay attack.

Steps to reproduce:

Launch AMF. Configuration used

config.yaml

Send these NGAP messages (packet is in hex stream) sequentially

NGSetup

00 15 00 38 00 00 06 00 1b 00 08 00 00 f1 10 00 00 06 6c 00 52 40 05 01 00 52 41 4e 00 66 00 0d 00 00 00 00 07 00 00 f1 10 00 00 00 08 00 15 40 01 20 00 93 40 01 00 00 cc 40 01 00

InitialUEMessage (UE Security- IA0 supported only)

00 0f 40 45 00 00 05 00 55 00 02 00 01 00 26 00 1b 1a 7e 00 41 79 00 0d 01 00 f1 10 00 00 00 00 00 00 00 00 10 2e 02 80 80 10 01 00 00 79 00 0f 40 00 f1 10 00 00 00 00 00 00 f1 10 00 00 07 00 5a 40 01 18 00 70 40 01 00

UplinkNASTransport (Authentication Response)

00 2e 40 3c 00 00 04 00 0a 00 02 00 0a 00 55 00 02 00 01 00 26 00 16 15 7e 00 57 2d 10 0a 39 9e 7c af f8 ab 86 e9 fa 79 80 dc 57 7a 36 00 79 40 0f 40 00 f1 10 00 00 00 00 00 00 f1 10 00 00 07

UplinkNASTransport (Security Mode Command) with MAC field = 0

00 2e 40 31 00 00 04 00 0a 00 02 00 0a 00 55 00 02 00 01 00 26 00 0b 0a 7e 04 00 00 00 00 00 7e 00 5e 00 79 40 0f 40 00 f1 10 00 00 00 00 00 00 f1 10 00 00 07

Expected behavior:

AMF should reject the registration request during initial Registration Request as it shouldn't proceed with UE Capability with no integrity IA0 as per specification. It should reject immediately. And AMF configuration also suggests that it doesn't support IA0. No further state progression shouldn't happen.

Environment:

• OpenAirInterface Version: v2.2.0
• OS: Ubuntu 22.04 Server
• Deployment: Docker

PCAP:

issue_2.pcap

AMF Log:

[2026-01-21 16:13:56.460] [amf_n1] [debug] Handling Security Mode Complete ... [2026-01-21 16:13:56.460] [amf_n1] [warning] Message 94 is not expected for current procedure running [2026-01-21 16:13:56.460] [amf_n1] [debug] Create Registration Reject and send to UE [2026-01-21 16:13:56.460] [nas] [debug] Initiating RegistrationReject [2026-01-21 16:13:56.460] [nas_mm] [debug] Size of Registration Reject message 4 [2026-01-21 16:13:56.460] [nas] [debug] Encoding RegistrationReject message [2026-01-21 16:13:56.460] [nas] [debug] Encoding NasMmPlainHeader [2026-01-21 16:13:56.460] [nas] [debug] Encoded NasMmPlainHeader (len 3 octets) [2026-01-21 16:13:56.460] [nas] [debug] Encoding 5GMM Cause [2026-01-21 16:13:56.460] [nas] [debug] Encoded 5GMM Cause, len (1) [2026-01-21 16:13:56.460] [nas] [debug] IE GPRS Timer 2 is not available [2026-01-21 16:13:56.460] [nas] [debug] IE GPRS Timer 2 is not available [2026-01-21 16:13:56.460] [nas] [debug] IE EAP Message is not available [2026-01-21 16:13:56.460] [nas] [debug] IE Rejected NSSAI is not available [2026-01-21 16:13:56.460] [nas] [debug] Encoded RegistrationReject message len (4) [2026-01-21 16:13:56.460] [common] [debug] [amf_n1]Registration-Reject message buffer 7e 00 44 5f [2026-01-21 16:13:56.460] [amf_n1] [debug] Signal the UE CommunicationFailure Report Event notification for SUPI imsi-001010000000001 [2026-01-21 16:13:56.460] [amf_n2] [info] Received Downlink NAS Transport message, handling [2026-01-21 16:13:56.460] [amf_n2] [debug] Handle DL NAS Transport ... InitiatingMessage ::= { procedureCode: 4 criticality: 1 (ignore) value: DownlinkNASTransport ::= { protocolIEs: ProtocolIE-Container ::= { DownlinkNASTransport-IEs ::= { id: 10 criticality: 0 (reject) value: 2 } DownlinkNASTransport-IEs ::= { id: 85 criticality: 0 (reject) value: 0 } DownlinkNASTransport-IEs ::= { id: 38 criticality: 0 (reject) value: 7E 00 44 5F } } } } [2026-01-21 16:13:56.460] [ngap] [debug] Encoded size (28) [2026-01-21 16:13:56.460] [amf_n1] [debug] Send request to SBI to trigger UE Communication Failure Report (SUPI imsi-001010000000001 ) [2026-01-21 16:13:56.460] [sctp] [debug] [Socket 5, Assoc ID 3772] Sending buffer 0x76df040012e0 of 28 bytes on stream 0 with PPID 60 [2026-01-21 16:13:56.460] [nas] [debug] Decoding SecurityModeComplete message [2026-01-21 16:13:56.460] [nas] [debug] Decoding NasMmPlainHeader [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMmPlainHeader len (3 octets) [2026-01-21 16:13:56.460] [nas] [debug] Decoded_size (3) [2026-01-21 16:13:56.460] [nas] [debug] Decoding IEI (0x71) [2026-01-21 16:13:56.460] [sctp] [debug] Successfully sent 28 bytes on stream 0 [2026-01-21 16:13:56.460] [ngap] [debug] Free NGAP Message PDU [2026-01-21 16:13:56.460] [nas] [debug] Decoding NAS Message Container [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x7e [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x41 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x79 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0xd [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x1 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0xf1 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x10 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x10 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x2e [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x2 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0xf0 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NasMessageContainer value 0x70 [2026-01-21 16:13:56.460] [nas] [debug] Decoded NAS Message Container, len (26) [2026-01-21 16:13:56.460] [nas] [debug] Decoded SecurityModeComplete message len (29) [2026-01-21 16:13:56.460] [common] [debug] [amf_n1]Security Mode Complete message buffer 7e 00 5e 71 00 17 7e 00 41 79 00 0d 01 00 f1 10 00 00 00 00 00 00 00 00 10 2e 02 f0 70 [2026-01-21 16:13:56.460] [common] [debug] [amf_n1]NAS Message Container 7e 00 41 79 00 0d 01 00 f1 10 00 00 00 00 00 00 00 00 10 2e 02 f0 70 [2026-01-21 16:13:56.460] [amf_n1] [debug] NAS Message Container, Message Type 0x41 [2026-01-21 16:13:56.460] [amf_n1] [debug] Registration Request in NAS Message Container [2026-01-21 16:13:56.460] [nas] [debug] Decoding RegistrationRequest message [2026-01-21 16:13:56.461] [nas] [debug] Decoding NasMmPlainHeader [2026-01-21 16:13:56.461] [nas] [debug] Decoded NasMmPlainHeader len (3 octets) [2026-01-21 16:13:56.461] [nas] [debug] Decoding 5GSMobilityIdentity [2026-01-21 16:13:56.461] [nas] [debug] Decoded 5GSMobilityIdentity IE length 13 [2026-01-21 16:13:56.461] [nas] [debug] Decoding 5GSMobilityIdentity SUCI [2026-01-21 16:13:56.461] [nas] [debug] MCC 001, MNC 01 [2026-01-21 16:13:56.461] [nas] [debug] MCC 001, MNC 01 [2026-01-21 16:13:56.461] [nas] [debug] Decoded Routing Indicator 0000 [2026-01-21 16:13:56.461] [nas] [debug] Decoded MSIN 0000000001 [2026-01-21 16:13:56.461] [nas] [debug] Decoded 5GSMobilityIdentity SUCI SUPI format IMSI (len 13) [2026-01-21 16:13:56.461] [nas] [debug] Decoded SUCI (15 octets) [2026-01-21 16:13:56.461] [nas] [debug] Decoded 5GS Mobile Identity, len (15) [2026-01-21 16:13:56.461] [nas] [debug] First option IEI 0x2e [2026-01-21 16:13:56.461] [nas] [debug] IEI 0x2e [2026-01-21 16:13:56.461] [nas] [debug] Decoding IEI 0x2e [2026-01-21 16:13:56.461] [nas] [debug] Decoding UE Security Capability [2026-01-21 16:13:56.461] [nas] [debug] Decoded UE Security Capability, len (4) [2026-01-21 16:13:56.461] [nas] [debug] 5G EA 0xf0, 5G IA 0x70 [2026-01-21 16:13:56.461] [nas] [debug] Next IEI 0x0 [2026-01-21 16:13:56.461] [nas] [debug] Decoded RegistrationRequest message (len 23) [2026-01-21 16:13:56.461] [amf_n1] [debug] Optional IE RequestedNssai is not present [2026-01-21 16:13:56.461] [amf_n1] [debug] Optional IE UplinkDataStatus is not present [2026-01-21 16:13:56.461] [amf_n1] [debug] Optional IE PDUSessionStatus is not present [2026-01-21 16:13:56.461] [amf_n1] [debug] Verifying whether this AMF can handle the request... [2026-01-21 16:13:56.461] [amf_n1] [debug] Get the Slice Selection Subscription Data from UDM [2026-01-21 16:13:56.461] [amf_n1] [debug] Promise ID generated 4 [2026-01-21 16:13:56.461] [amf_sbi] [info] Receive Slice Selection Subscription Data Retrieval Request, handling ... [2026-01-21 16:13:56.461] [amf_sbi] [debug] Send Slice Selection Subscription Data Retrieval to UDM [2026-01-21 16:13:56.461] [amf_sbi] [info] Send HTTP message to http://oai-udm:8080/nudm-sdm/v1/imsi-001010000000001/nssai?plmn-id={"mcc":"001","mnc":"01"} [2026-01-21 16:13:56.461] [amf_sbi] [info] HTTP message Body: [2026-01-21 16:13:56.461] [amf_sbi] [debug] Send a simple HTTP request [2026-01-21 16:13:56.539] [amf_sbi] [info] Get response with HTTP code (404) [2026-01-21 16:13:56.539] [amf_app] [debug] Trigger process response: Set promise with ID 4 to ready [2026-01-21 16:13:56.539] [amf_n1] [debug] Got NSSAI from UDM: null [2026-01-21 16:13:56.544] [amf_n1] [debug] Could not get the Slice Selection Subscription Data from UDM [2026-01-21 16:13:56.544] [amf_app] [debug] AMF registers for 3GPP access with UDM [2026-01-21 16:13:56.544] [amf_sbi] [info] Receive AMF Registration for 3GPP Access message, handling ... [2026-01-21 16:13:56.544] [amf_app] [debug] Discovering PCF for the UE [2026-01-21 16:13:56.544] [amf_app] [debug] Perform AM Policy Association with PCF for the UE [2026-01-21 16:13:56.544] [amf_sbi] [debug] Send AMF Registration for 3GPP Access towards UDM [2026-01-21 16:13:56.544] [amf_sbi] [info] Send HTTP message to http://oai-udm:8080/nudm-uecm/v1/imsi-001010000000001/registrations/amf-3gpp-access [2026-01-21 16:13:56.544] [amf_sbi] [info] HTTP message Body: {"amfInstanceId":"1e867269-e64b-44d4-89cf-c363ab036df1","deregCallbackUri":"192.168.70.132:8080/namf-callback/v1v1/imsi-001010000000001/deregistration-notification","guami":{"amfId":"010041","plmnId":{"mcc":"001","mnc":"01"}},"initialRegistrationInd":true,"ratType":"NR"} [2026-01-21 16:13:56.544] [amf_sbi] [debug] Send a simple HTTP request [2026-01-21 16:13:56.545] [amf_n2] [debug] Getting common S-NSSAIs between gNB and AMF [2026-01-21 16:13:56.545] [amf_n2] [debug] Getting common S-NSSAIs between gNB and AMF [2026-01-21 16:13:56.545] [amf_n2] [debug] Common S-NSSAI (SST 0x1, SD FFFFFF) [2026-01-21 16:13:56.545] [amf_n2] [debug] Common S-NSSAI (SST 1, SD 16777215) [2026-01-21 16:13:56.545] [amf_n1] [debug] Allowed S-NSSAI (SST 0x1, SD 0xffffff) [2026-01-21 16:13:56.545] [amf_app] [debug] Random number generated: 2686657726 [2026-01-21 16:13:56.545] [amf_n1] [debug] Allocated GUTI 001010100412686657726 (TMSI 2686657726) [2026-01-21 16:13:56.545] [nas_mm] [debug] Size of Registration Accept message 49 [2026-01-21 16:13:56.545] [nas] [debug] Encoding RegistrationAccept message [2026-01-21 16:13:56.545] [nas] [debug] Encoding NasMmPlainHeader [2026-01-21 16:13:56.545] [nas] [debug] Encoded NasMmPlainHeader (len 3 octets) [2026-01-21 16:13:56.545] [nas] [debug] Encoding 5GS Registration Result [2026-01-21 16:13:56.545] [nas] [debug] Encoded 5GS Registration Result, len (2) [2026-01-21 16:13:56.545] [nas] [debug] Encoding 5GS Mobile Identity [2026-01-21 16:13:56.545] [nas] [debug] Encoding 5G-GUTI IEI 0x77 [2026-01-21 16:13:56.545] [nas] [debug] MNC digit 1: 0 [2026-01-21 16:13:56.545] [nas] [debug] Encoding MNC 2 digits [2026-01-21 16:13:56.545] [nas] [debug] MCC 001, MNC 01 [2026-01-21 16:13:56.545] [nas] [debug] Encoded 5G-GUTI IE (len 14 octets) [2026-01-21 16:13:56.545] [nas] [debug] Encoding 5GS Tracking Area Identity List [2026-01-21 16:13:56.545] [nas] [debug] MNC digit 1: 0 [2026-01-21 16:13:56.545] [nas] [debug] Encoding MNC 2 digits [2026-01-21 16:13:56.545] [nas] [debug] MCC 001, MNC 01 [2026-01-21 16:13:56.545] [nas] [debug] Encoded 5GS Tracking Area Identity List, len (9) [2026-01-21 16:13:56.545] [nas] [debug] IE PLMN List is not available [2026-01-21 16:13:56.545] [nas] [debug] Encoding NSSAI [2026-01-21 16:13:56.545] [nas] [debug] Encoded Nssai len (4) [2026-01-21 16:13:56.545] [nas] [debug] IE Rejected NSSAI is not available [2026-01-21 16:13:56.545] [nas] [debug] Encoding NSSAI [2026-01-21 16:13:56.545] [nas] [debug] Encoded Nssai len (4) [2026-01-21 16:13:56.545] [nas] [debug] Encoding 5GS Network Feature Support [2026-01-21 16:13:56.545] [nas] [debug] Encoded 5GS Network Feature Support, len (4) [2026-01-21 16:13:56.545] [nas] [debug] IE PDU Session Status is not available [2026-01-21 16:13:56.545] [nas] [debug] IE PDU Session Reactivation Result is not available [2026-01-21 16:13:56.545] [nas] [debug] IE PDU Session Reactivation Result Error Cause is not available [2026-01-21 16:13:56.545] [nas] [debug] Encoding LADN Information [2026-01-21 16:13:56.545] [nas] [debug] Encoded LADN Information, len (0) [2026-01-21 16:13:56.545] [nas] [debug] IE MICO Indication is not available [2026-01-21 16:13:56.545] [nas] [debug] IE Network Slicing Indication is not available [2026-01-21 16:13:56.545] [nas] [debug] IE Service Area List is not available [2026-01-21 16:13:56.545] [nas] [debug] Encoding GPRS Timer 3 [2026-01-21 16:13:56.545] [nas] [debug] Encoded GPRS Timer 3, len (3) [2026-01-21 16:13:56.545] [nas] [debug] IE GPRS Timer 2 is not available [2026-01-21 16:13:56.545] [nas] [debug] Encoding GPRS Timer 2 [2026-01-21 16:13:56.545] [nas] [debug] Encoded GPRS Timer 2, len (3) [2026-01-21 16:13:56.545] [nas] [debug] IE SOR Transparent Container is not available [2026-01-21 16:13:56.545] [nas] [debug] IE EAP Message is not available [2026-01-21 16:13:56.545] [nas] [debug] IE NSSAI Inclusion Mode is not available [2026-01-21 16:13:56.545] [nas] [debug] IE 5GS DRX Parameters is not available [2026-01-21 16:13:56.545] [nas] [debug] IE Non-3GPP NW Provided Policies is not available [2026-01-21 16:13:56.545] [nas] [debug] IE EPS Bearer Context Status is not available [2026-01-21 16:13:56.545] [nas] [debug] IE Extended DRX Parameters is not available [2026-01-21 16:13:56.545] [nas] [debug] IE GPRS Timer 3 is not available [2026-01-21 16:13:56.545] [nas] [debug] IE GPRS Timer 3 is not available [2026-01-21 16:13:56.545] [nas] [debug] IE GPRS Timer 3 is not available [2026-01-21 16:13:56.545] [nas] [debug] IE UE Radio Capability ID is not available [2026-01-21 16:13:56.545] [nas] [debug] IE NSSAI is not available [2026-01-21 16:13:56.545] [nas] [debug] Encoded RegistrationAccept message len (46) [2026-01-21 16:13:56.545] [common] [debug] [amf_n1]Registration-Accept message buffer 7e 00 42 01 01 77 00 0b f2 00 f1 10 01 00 41 a0 23 24 be 54 07 00 00 f1 10 00 00 07 15 02 01 01 31 02 01 01 21 02 01 00 5e 01 b6 16 01 0c [2026-01-21 16:13:56.545] [amf_n1] [debug] Encoding nas_message_protected... [2026-01-21 16:13:56.545] [amf_n1] [debug] Cipher protected with EA0_5G [2026-01-21 16:13:56.545] [common] [debug] [amf_n1]Parameters for NIA: Knas_int 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2026-01-21 16:13:56.545] [amf_n1] [debug] Parameters for NIA, count: 0x0 [2026-01-21 16:13:56.545] [amf_n1] [debug] Parameters for NIA, bearer: 0x1 [2026-01-21 16:13:56.545] [amf_n1] [debug] Parameters for NIA, direction: 0x1 [2026-01-21 16:13:56.545] [common] [debug] [amf_n1]Parameters for NIA, message: 00 7e 00 42 01 01 77 00 0b f2 00 f1 10 01 00 41 a0 23 24 be 54 07 00 00 f1 10 00 00 07 15 02 01 01 31 02 01 01 21 02 01 00 5e 01 b6 16 01 0c [2026-01-21 16:13:56.545] [amf_n1] [debug] Integrity with algorithms: 5G-IA0 [2026-01-21 16:13:56.545] [amf_n1] [debug] Derive Kgnb ... [2026-01-21 16:13:56.545] [common] [debug] [amf_n1]Kamf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2026-01-21 16:13:56.545] [amf_n1] [info] UE (IMSI 001010000000001, GUTI 001010100412686657726, current RAN ID 0, current AMF ID 2) has been registered to the network [2026-01-21 16:13:56.545] [amf_app] [debug] The UE's state (IMSI 001010000000001, State 5GMM-REGISTERED) has been successfully updated! [2026-01-21 16:13:56.545] [amf_n1] [debug] Set 5GMM state to 5GMM-REGISTERED [2026-01-21 16:13:56.545] [amf_n2] [info] Received Initial Context Setup Request message, handling [2026-01-21 16:13:56.545] [amf_n2] [debug] Handle Initial Context Setup Request ...

[2026-01-21 16:13:56.545] [amf_app] [info]
----------------------------------------------------------------------gNBs' Information---------------------------------------------------------------------
Index
1
------------------------------------------------------------------------------------------------------------------------------------------------------------

|-----------------------------------------------------------------------------------------------------------------------------------------------------------| |---------------------------------------------------------------------UEs' Information----------------------------------------------------------------------| | Index | 5GMM State | IMSI | GUTI | RAN UE NGAP ID | AMF UE NGAP ID | PLMN | Cell Id | | 1 | 5GMM-REGISTERED | 001010000000001 |00101010041268665772| 0x00 | 0x02 | 001,01 | 000000000 | |-----------------------------------------------------------------------------------------------------------------------------------------------------------|

[2026-01-21 16:13:56.545] [amf_n1] [debug] Signal the UE Location Report Event notification for SUPI imsi-001010000000001 [2026-01-21 16:13:56.546] [nas_mm] [debug] No IMEISV info available InitiatingMessage ::= { procedureCode: 14 criticality: 0 (reject) value: InitialContextSetupRequest ::= { protocolIEs: [2026-01-21 16:13:56.546] [amf_n1] [debug] Send request to SBI to trigger UE Location Report (SUPI imsi-001010000000001 ) ProtocolIE-Container ::= { InitialContextSetupRequestIEs ::= { id: 10 criticality: 0 (reject) value: [2026-01-21 16:13:56.546] [amf_n1] [debug] Signal the UE Registration State Event notification for SUPI imsi-001010000000001 [2026-01-21 16:13:56.546] [amf_n1] [debug] Send request to SBI to trigger UE Registration State Report (SUPI imsi-001010000000001 ) [2026-01-21 16:13:56.546] [amf_n1] [debug] Signal the UE Connectivity Status Event notification for SUPI imsi-001010000000001 2 } InitialContextSetupRequestIEs ::= { id: 85 criticality: 0 (reject) value: 0 } InitialContextSetupRequestIEs ::= { id: 28 criticality: 0 (reject) value: GUAMI ::= { pLMNIdentity: 00 F1 10 aMFRegionID: 01 aMFSetID: 00 40 (6 bits unused) aMFPointer: 04 (2 bits unused) } } InitialContextSetupRequestIEs ::= { id: 0 criticality: 0 (reject) value: AllowedNSSAI ::= { [2026-01-21 16:13:56.546] [amf_n1] [debug] Send request to SBI to trigger UE Connectivity State Report (SUPI imsi-001010000000001 ) AllowedNSSAI-Item ::= { s-NSSAI: S-NSSAI ::= { sST: 01 } } } } InitialContextSetupRequestIEs ::= { id: 119 criticality: 0 (reject) value: UESecurityCapabilities ::= { nRencryptionAlgorithms: 00 00 nRintegrityProtectionAlgorithms: E0 00 eUTRAencryptionAlgorithms: [2026-01-21 16:13:56.546] [amf_sbi] [info] Get response with HTTP code: 404 [2026-01-21 16:13:56.546] [amf_sbi] [debug] Get response with body ,

404 Not Found

404 Not Found

00 00 eUTRAintegrityProtectionAlgorithms: 00 00 } } InitialContextSetupRequestIEs ::= { id: 94 criticality: 0 (reject) value: A3 70 83 39 61 E1 B5 B5 0B 60 20 76 30 5F 07 61 27 FC A8 31 2C 51 BC EC 5F FF A1 30 5C F2 C0 F6 } InitialContextSetupRequestIEs ::= { id: 36 criticality: 1 (ignore) value: MobilityRestrictionList ::= { servingPLMN: 00 F1 10 } } InitialContextSetupRequestIEs ::= { id: 38 criticality: 1 (ignore) value: 7E 00 42 01 01 77 00 0B F2 00 F1 10 01 00 41 A0 23 24 BE 54 07 00 00 F1 10 00 00 07 15 02 01 01 31 02 01 01 21 02 01 00 5E 01 B6 16 01 0C } } } } [2026-01-21 16:13:56.546] [amf_sbi] [info] Receive AM Policy Association message, handling ... [2026-01-21 16:13:56.546] [ngap] [debug] Encoded size (145) [2026-01-21 16:13:56.546] [amf_sbi] [debug] Send AM Policy Association to PCF [2026-01-21 16:13:56.546] [sctp] [debug] [Socket 5, Assoc ID 3772] Sending buffer 0x76df040056b0 of 145 bytes on stream 0 with PPID 60 [2026-01-21 16:13:56.546] [amf_sbi] [info] Send HTTP message to /npcf-am-policy-control/v1/policies [2026-01-21 16:13:56.546] [amf_sbi] [info] HTTP message Body: {"notificationUri":"192.168.70.132:8080/namf-callback/v1v1/imsi-001010000000001/PolicyUpdateNotification","supi":"imsi-001010000000001","suppFeat":""}