I am using a B210 USRP with one antenna- Vert 900 connected to RF A TX/RX. I have trouble finding the PLMN network on my phone(IPhone 5). Using a LTE blank USIM and configured with k=11111111111111111111111111111111, op=63bfa50ee6523365ff14c1f45f88737d and imsi=111111111111111
I am providing the configuration information below. Please kindly help me with this.
1) When I telnet locahost 30000 and set the information as below:
add_user imsi 111111111111111 imei 013630004786389 k 11111111111111111111111111111111
ok
print_users
ok 1
imsi=111111111111111 imei=13630004786389 k=11111111111111111111111111111111
write tx_gain 65
ok
write rx_gain 35
ok
help System Configuration Parameters
Read parameters using read <param> format
Set parameters using write <param> <value> format
Commands:
start - Constructs the system information and starts the eNB
stop - Stops the eNB
shutdown - Stops the eNB and exits
construct_si - Constructs the new system information
help - Prints this screen
add_user imsi=<imsi> imei=<imei> k=<k> - Adds a user to the HSS (<imsi> and <imei> are 15 decimal digits, and <k> is 32 hex digits)
del_user imsi=<imsi> - Deletes a user from the HSS
print_users - Prints all the users in the HSS
Radio Parameters:
available_radios: (read-only)
0: no_rf
1: type=b200,name=8,serial=F4E610,product=B210
selected_radio_name (read-only) = type=b200,name=8,serial=F4E610,product=B210
selected_radio_idx = 1
tx_gain = 65
rx_gain = 35
clock_source = internal
System Parameters:
band = 1
bandwidth = 10
cell_id = 1
debug_level = radio phy mac rlc pdcp rrc mme gw user rb timer iface
debug_type = error warning info debug
dl_center_freq = 2112500000
dl_earfcn = 25
dns_addr = C0A80101
enable_pcap = 0
ip_addr_start = C0A80102
mcc = 001
mnc = 01
n_ant = 1
n_id_cell = 0
p0_nominal_pucch = -96
p0_nominal_pusch = -70
q_hyst = 0
q_rx_lev_min = -140
search_win_size = 0
sib3_present = 0
sib4_present = 0
sib5_present = 0
sib6_present = 0
sib7_present = 0
sib8_present = 0
tracking_area_code = 1
ul_center_freq = 1922500000
ul_earfcn = 18025
use_cnfg_file = 0
use_user_file = 0
start
ok
Should I change any other parameter? Also should I use 2 antennas, one connected to RF A TX/RX and the other one connected to RF B TX/RX?
2) When I run LTE_fdd_enodeb:
user@user-HP-Pavilion-15-Notebook-PC:~/Desktop/openlte_v00-18-00/LTE_fdd_enodeb$ LTE_fdd_enodeb
linux; GNU C++ version 4.9.1; Boost_105500; UHD_003.008.000-52-g2068af70
LTE FDD ENB
Please connect to control port 30000
-- Loading firmware image: /usr/local/share/uhd/images/usrp_b200_fw.hex... done
-- Loading FPGA image: /usr/local/share/uhd/images/usrp_b210_fpga.bin... done
-- Operating over USB 3.
-- Detecting internal GPSDO.... No GPSDO found
-- Initialize CODEC control...
-- Initialize Radio control...
-- Performing register loopback test... pass
-- Performing register loopback test... pass
-- Performing CODEC loopback test... pass
-- Performing CODEC loopback test... pass
-- Asking for clock rate 32.000000 MHz...
-- Actually got clock rate 32.000000 MHz.
-- Performing timer loopback test... pass
-- Performing timer loopback test... pass
-- Setting master clock rate selection to 'automatic'.
-- Asking for clock rate 30.720000 MHz...
-- Actually got clock rate 30.720000 MHz.
-- Performing timer loopback test... pass
-- Performing timer loopback test... pass
-- Tune Request: 2112.500000 MHz
-- The RF LO does not support the requested frequency:
-- Requested LO Frequency: 2112.500000 MHz
-- RF LO Result: 2112.499999 MHz
-- Attempted to use the DSP to reach the requested frequency:
-- Desired DSP Frequency: 0.000001 MHz
-- DSP Result: 0.000001 MHz
-- Successfully tuned to 2112.500000 MHz
--
-- Tune Request: 1922.500000 MHz
-- The RF LO does not support the requested frequency:
-- Requested LO Frequency: 1922.500000 MHz
-- RF LO Result: 1922.500000 MHz
-- Attempted to use the DSP to reach the requested frequency:
-- Desired DSP Frequency: -0.000000 MHz
-- DSP Result: -0.000000 MHzWhat
-- Successfully tuned to 1922.500000 MHz
--
ULLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLLULLLLLULLLLLULLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLULUULLUULLULLULULUULLULUULLLULLULULULULULUULULUULLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLULLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLULLLLULLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLOUUL
And it goes on like LLLOULLL.. I see no debug information here. What probably is the issue here? And what do these symbols L,O,U mean?
3) APN settings:
I am not able to see the network on my Iphone 5. In IPhone I was only able to set APN Name- gave "www.openLTE.com"
Should I change other settings like MCC, MNC etc? Because the default one is not 001/01 and I am not able to change that in my IPhone. Will that be an issue if I retain the default ones?
When I scan for networks manually I am able to see only the default caarriers, i.e.,PLMN-1-1 is not seen.
Please correct me if I am wrong somewhere.
Thanks,
Abhishek
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I could find the Test PLMN 1-1. I re-programmed the IMSI as 00101.... , so that the MCC and MNC will be taken as 001 and 01 by default respectively. So no rooting required.
But when I try to connect to Test PLMN 1-1, it says "Registering on Test PLMN 1-1" for a long time and it fails. Why is that so?
Last edit: Abhishek Balaji 2014-12-13
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I could find the Test PLMN 1-1. I re-programmed the IMSI as 00101.... , so
that the MCC and MNC will be taken as 001 and 01 by default respectively.
So no rooting required.
But when I try to connect to Test PLMN 1-1, it says "Registering on Test
PLMN 1-1" for a long time and it fails. Why is that so?
A whole lot of info is going on. Some of the messages:
....
1418651567.205430 info user LTE_fdd_enb_user_mgr.cc 572 C-RNTI allocation timer expiry C-RNTI=98
1418651567.205672 info user LTE_fdd_enb_user_mgr.cc 175 C-RNTI=98 released
1418651567.265334 info user LTE_fdd_enb_user_mgr.cc 572 C-RNTI allocation timer expiry C-RNTI=100
1418651567.265395 info user LTE_fdd_enb_user_mgr.cc 175 C-RNTI=100 released
....
1418651586.103653 error phy LTE_fdd_enb_phy.cc 647 PDSCH current_tti from MAC (6605) does not match PHY (6615)
1418651586.103756 error mac LTE_fdd_enb_mac.cc 314 RTS dl_current_tti incorrect: RTS 6618 but currently on 6613
1418651586.103790 error mac LTE_fdd_enb_mac.cc 340 RTS ul_current_tti incorrect: RTS 6615 but currently on 6610
1418651586.103951 error phy LTE_fdd_enb_phy.cc 647 PDSCH current_tti from MAC (6606) does not match PHY (6616)
....
1418651587.017164 error phy LTE_fdd_enb_phy.cc 405 Late DL subframe from MAC:7529, PHY is currently on 7530
1418651587.017199 error phy LTE_fdd_enb_phy.cc 445 Late UL subframe from MAC:7526, PHY is currently on 7527
1418651587.057520 error phy LTE_fdd_enb_phy.cc 445 Late UL subframe from MAC:7567, PHY is currently on 7568
....
Can you tell me why I am not able to see any successful connection messages and the MME related info? I am not able to see IMSI, k, IMEI info in the debug port as the UE is trying to connect to the USRP device via Test PLMN 1-1 network?
I feel there is some synchronoiztion problem? Has it got anything to do with frames or clock adjustment?
Thanks,
Abhishek
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Please post the entire contents of the debug port output. From the
snippets that you provided, it appears that parts of the registration are
working (I.e. there are multiple C-RNTIs being assigned). The full log
will show everything that is going on and where exactly the procedure is
breaking down. Also the pcap file that is generated would be helpful.
A whole lot of info is going on. Some of the messages:
....
1418651567.205430 info user LTE_fdd_enb_user_mgr.cc 572 C-RNTI allocation
timer expiry C-RNTI=98
1418651567.205672 info user LTE_fdd_enb_user_mgr.cc 175 C-RNTI=98 released
1418651567.265334 info user LTE_fdd_enb_user_mgr.cc 572 C-RNTI allocation
timer expiry C-RNTI=100
1418651567.265395 info user LTE_fdd_enb_user_mgr.cc 175 C-RNTI=100 released
....
1418651586.103653 error phy LTE_fdd_enb_phy.cc 647 PDSCH current_tti from
MAC (6605) does not match PHY (6615)
1418651586.103756 error mac LTE_fdd_enb_mac.cc 314 RTS dl_current_tti
incorrect: RTS 6618 but currently on 6613
1418651586.103790 error mac LTE_fdd_enb_mac.cc 340 RTS ul_current_tti
incorrect: RTS 6615 but currently on 6610
1418651586.103951 error phy LTE_fdd_enb_phy.cc 647 PDSCH current_tti from
MAC (6606) does not match PHY (6616)
....
1418651587.017164 error phy LTE_fdd_enb_phy.cc 405 Late DL subframe from
MAC:7529, PHY is currently on 7530
1418651587.017199 error phy LTE_fdd_enb_phy.cc 445 Late UL subframe from
MAC:7526, PHY is currently on 7527
1418651587.057520 error phy LTE_fdd_enb_phy.cc 445 Late UL subframe from
MAC:7567, PHY is currently on 7568
....
Can you tell me why I am not able to see any successful connection
messages and the MME related info? I am not able to see IMSI, k, IMEI info
in the debug port as the UE is trying to connect to the USRP device via
Test PLMN 1-1 network?
I feel there is some synchronoiztion problem? Has it got anything to do
with frames or clock adjustment?
I have attached the debug file. Please tell me why the registration is not successful. Also, the pcap file is not ngetting generated. The one in /tmp/LTE_fdd_enodeb.pcap is empty.
The following config is what I made: 2 antennas- one in RF A : TX/RX and another in RF A: RX2, and I have enabled pcap as 1, yet it doesn't capture packets. And in wireshark I am not able to capture packets on tun_openlte. Should I change the address as mentioned in the README.
It seems like from the log that the UE is RACHing correctly and getting the
RACH response message. It then correctly follows up with an RRC connection
request, however this is where things stop. You can see this in the log by
grepping for rrc. My suspicion is that this has something to do with a bug
in with N_ant=2. Please retry with N_ant=1 and see if you have better
success. Nothing else from your configuration looks incorrect.
I have attached the debug file. Please tell me why the registration is not
successful. Also, the pcap file is not ngetting generated. The one in
/tmp/LTE_fdd_enodeb.pcap is empty.
The following config is what I made: 2 antennas- one in RF A : TX/RX and
another in RF A: RX2, and I have enabled pcap as 1, yet it doesn't capture
packets. And in wireshark I am not able to capture packets on tun_openlte.
Should I change the address as mentioned in the README.
Ben and all,
I am using a B210 USRP with one antenna- Vert 900 connected to RF A TX/RX. I have trouble finding the PLMN network on my phone(IPhone 5). Using a LTE blank USIM and configured with k=11111111111111111111111111111111, op=63bfa50ee6523365ff14c1f45f88737d and imsi=111111111111111
I am providing the configuration information below. Please kindly help me with this.
1) When I telnet locahost 30000 and set the information as below:
add_user imsi 111111111111111 imei 013630004786389 k 11111111111111111111111111111111
ok
print_users
ok 1
imsi=111111111111111 imei=13630004786389 k=11111111111111111111111111111111
write tx_gain 65
ok
write rx_gain 35
ok
help
System Configuration Parameters
Read parameters using read <param> format
Set parameters using write <param> <value> format
Commands:
start - Constructs the system information and starts the eNB
stop - Stops the eNB
shutdown - Stops the eNB and exits
construct_si - Constructs the new system information
help - Prints this screen
add_user imsi=<imsi> imei=<imei> k=<k> - Adds a user to the HSS (<imsi> and <imei> are 15 decimal digits, and <k> is 32 hex digits)
del_user imsi=<imsi> - Deletes a user from the HSS
print_users - Prints all the users in the HSS
Radio Parameters:
available_radios: (read-only)
0: no_rf
1: type=b200,name=8,serial=F4E610,product=B210
selected_radio_name (read-only) = type=b200,name=8,serial=F4E610,product=B210
selected_radio_idx = 1
tx_gain = 65
rx_gain = 35
clock_source = internal
System Parameters:
band = 1
bandwidth = 10
cell_id = 1
debug_level = radio phy mac rlc pdcp rrc mme gw user rb timer iface
debug_type = error warning info debug
dl_center_freq = 2112500000
dl_earfcn = 25
dns_addr = C0A80101
enable_pcap = 0
ip_addr_start = C0A80102
mcc = 001
mnc = 01
n_ant = 1
n_id_cell = 0
p0_nominal_pucch = -96
p0_nominal_pusch = -70
q_hyst = 0
q_rx_lev_min = -140
search_win_size = 0
sib3_present = 0
sib4_present = 0
sib5_present = 0
sib6_present = 0
sib7_present = 0
sib8_present = 0
tracking_area_code = 1
ul_center_freq = 1922500000
ul_earfcn = 18025
use_cnfg_file = 0
use_user_file = 0
start
ok
Should I change any other parameter? Also should I use 2 antennas, one connected to RF A TX/RX and the other one connected to RF B TX/RX?
2) When I run LTE_fdd_enodeb:
user@user-HP-Pavilion-15-Notebook-PC:~/Desktop/openlte_v00-18-00/LTE_fdd_enodeb$ LTE_fdd_enodeb
linux; GNU C++ version 4.9.1; Boost_105500; UHD_003.008.000-52-g2068af70
LTE FDD ENB
Please connect to control port 30000
-- Loading firmware image: /usr/local/share/uhd/images/usrp_b200_fw.hex... done
-- Loading FPGA image: /usr/local/share/uhd/images/usrp_b210_fpga.bin... done
-- Operating over USB 3.
-- Detecting internal GPSDO.... No GPSDO found
-- Initialize CODEC control...
-- Initialize Radio control...
-- Performing register loopback test... pass
-- Performing register loopback test... pass
-- Performing CODEC loopback test... pass
-- Performing CODEC loopback test... pass
-- Asking for clock rate 32.000000 MHz...
-- Actually got clock rate 32.000000 MHz.
-- Performing timer loopback test... pass
-- Performing timer loopback test... pass
-- Setting master clock rate selection to 'automatic'.
-- Asking for clock rate 30.720000 MHz...
-- Actually got clock rate 30.720000 MHz.
-- Performing timer loopback test... pass
-- Performing timer loopback test... pass
-- Tune Request: 2112.500000 MHz
-- The RF LO does not support the requested frequency:
-- Requested LO Frequency: 2112.500000 MHz
-- RF LO Result: 2112.499999 MHz
-- Attempted to use the DSP to reach the requested frequency:
-- Desired DSP Frequency: 0.000001 MHz
-- DSP Result: 0.000001 MHz
-- Successfully tuned to 2112.500000 MHz
--
-- Tune Request: 1922.500000 MHz
-- The RF LO does not support the requested frequency:
-- Requested LO Frequency: 1922.500000 MHz
-- RF LO Result: 1922.500000 MHz
-- Attempted to use the DSP to reach the requested frequency:
-- Desired DSP Frequency: -0.000000 MHz
-- DSP Result: -0.000000 MHzWhat
-- Successfully tuned to 1922.500000 MHz
--
ULLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLLULLLLLULLLLLULLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLULUULLUULLULLULULUULLULUULLLULLULULULULULUULULUULLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLULLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLULLLLULLLLULLLLLULLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLOUUL
And it goes on like LLLOULLL.. I see no debug information here. What probably is the issue here? And what do these symbols L,O,U mean?
3) APN settings:
I am not able to see the network on my Iphone 5. In IPhone I was only able to set APN Name- gave "www.openLTE.com"
Should I change other settings like MCC, MNC etc? Because the default one is not 001/01 and I am not able to change that in my IPhone. Will that be an issue if I retain the default ones?
When I scan for networks manually I am able to see only the default caarriers, i.e.,PLMN-1-1 is not seen.
Please correct me if I am wrong somewhere.
Thanks,
Abhishek
Answering to my own question.
I could find the Test PLMN 1-1. I re-programmed the IMSI as 00101.... , so that the MCC and MNC will be taken as 001 and 01 by default respectively. So no rooting required.
But when I try to connect to Test PLMN 1-1, it says "Registering on Test PLMN 1-1" for a long time and it fails. Why is that so?
Last edit: Abhishek Balaji 2014-12-13
Abhishek,
Can you post the output from the debug port (30001)? This will show what
is going on during the attach procedure.
Thanks,
Ben
On Fri, Dec 12, 2014 at 9:43 PM, Abhishek Balaji abhishekrb19@users.sf.net
wrote:
Ben,
A whole lot of info is going on. Some of the messages:
....
1418651567.205430 info user LTE_fdd_enb_user_mgr.cc 572 C-RNTI allocation timer expiry C-RNTI=98
1418651567.205672 info user LTE_fdd_enb_user_mgr.cc 175 C-RNTI=98 released
1418651567.265334 info user LTE_fdd_enb_user_mgr.cc 572 C-RNTI allocation timer expiry C-RNTI=100
1418651567.265395 info user LTE_fdd_enb_user_mgr.cc 175 C-RNTI=100 released
....
1418651586.103653 error phy LTE_fdd_enb_phy.cc 647 PDSCH current_tti from MAC (6605) does not match PHY (6615)
1418651586.103756 error mac LTE_fdd_enb_mac.cc 314 RTS dl_current_tti incorrect: RTS 6618 but currently on 6613
1418651586.103790 error mac LTE_fdd_enb_mac.cc 340 RTS ul_current_tti incorrect: RTS 6615 but currently on 6610
1418651586.103951 error phy LTE_fdd_enb_phy.cc 647 PDSCH current_tti from MAC (6606) does not match PHY (6616)
....
1418651587.017164 error phy LTE_fdd_enb_phy.cc 405 Late DL subframe from MAC:7529, PHY is currently on 7530
1418651587.017199 error phy LTE_fdd_enb_phy.cc 445 Late UL subframe from MAC:7526, PHY is currently on 7527
1418651587.057520 error phy LTE_fdd_enb_phy.cc 445 Late UL subframe from MAC:7567, PHY is currently on 7568
....
Can you tell me why I am not able to see any successful connection messages and the MME related info? I am not able to see IMSI, k, IMEI info in the debug port as the UE is trying to connect to the USRP device via Test PLMN 1-1 network?
I feel there is some synchronoiztion problem? Has it got anything to do with frames or clock adjustment?
Thanks,
Abhishek
Abhishek,
Please post the entire contents of the debug port output. From the
snippets that you provided, it appears that parts of the registration are
working (I.e. there are multiple C-RNTIs being assigned). The full log
will show everything that is going on and where exactly the procedure is
breaking down. Also the pcap file that is generated would be helpful.
Thanks,
Ben
On Dec 15, 2014 9:44 AM, "Abhishek Balaji" abhishekrb19@users.sf.net
wrote:
Ben,
I have attached the debug file. Please tell me why the registration is not successful. Also, the pcap file is not ngetting generated. The one in /tmp/LTE_fdd_enodeb.pcap is empty.
The following config is what I made: 2 antennas- one in RF A : TX/RX and another in RF A: RX2, and I have enabled pcap as 1, yet it doesn't capture packets. And in wireshark I am not able to capture packets on tun_openlte. Should I change the address as mentioned in the README.
available_radios: (read-only)
0: no_rf
1: type=b200,name=,serial=E7R04Z0BT,product=B210
selected_radio_name (read-only) = type=b200,name=,serial=E7R04Z0BT,product=B210
selected_radio_idx = 1
tx_gain = 65
rx_gain = 35
clock_source = internal
System Parameters:
band = 1
bandwidth = 5
cell_id = 1
debug_level = radio phy mac rlc pdcp rrc mme gw user rb timer iface
debug_type = error warning info debug
dl_center_freq = 2112500000
dl_earfcn = 25
dns_addr = C0A80101
enable_pcap = 1
ip_addr_start = C0A80102 //Using the default one
mcc = 001
mnc = 01
n_ant = 2
n_id_cell = 0
p0_nominal_pucch = -96
p0_nominal_pusch = -70
q_hyst = 0
q_rx_lev_min = -140
search_win_size = 0
sib3_present = 0
sib4_present = 0
sib5_present = 0
sib6_present = 0
sib7_present = 0
sib8_present = 0
tracking_area_code = 1
ul_center_freq = 1922500000
ul_earfcn = 18025
use_cnfg_file = 0
use_user_file = 0
Can you please tell me where the procedure breaks down?
Thanks,
Abhishek
Abhishek,
It seems like from the log that the UE is RACHing correctly and getting the
RACH response message. It then correctly follows up with an RRC connection
request, however this is where things stop. You can see this in the log by
grepping for rrc. My suspicion is that this has something to do with a bug
in with N_ant=2. Please retry with N_ant=1 and see if you have better
success. Nothing else from your configuration looks incorrect.
Hope this helps,
Ben
On Wed, Dec 17, 2014 at 2:22 PM, Abhishek Balaji abhishekrb19@users.sf.net
wrote:
Hi,
Have you solved the problem above? I came accoss similar problem and had no idea.Thank you very much.