I have made some tests with openLTE and I am facing an issue related to the security mode command. I have tried to attach one ZTE MF880 dongle to openLTE, which is running with USRP B210 HW. The UE sent a security mode reject after received the security mode command. I suspect that this behavior is related to the MAC of security mode command which is show as 0x00000000 in pcap file. Have you ever faced this issue? Could you give me a tip about this problem?
I checked debug file you provided and MAC in SMC looks good (I mean it is not 0):
ie.:
10/06/2015 14:42:10.953382 info mme LTE_fdd_enb_mme.cc 1702 Sending Security Mode Command for RNTI=63, RB=SRB1 37ECA5EB6B00075D020002E0E0C1
My tips are:
1) Check if OP is provided properly. OP is used to generate OPc. OPc is used for further key generation. Sometimes you have given OPc that is programed on the card (not OP).
2) Check if UE see the same MNC/MCC that is configured. MNC+MCC is used for key generation.
Regards,
Przemek
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
I am trying to attach one dongle to OAI LTE branch, which is running with USRP B210 HW using nextEPC. The UE sent a security mode reject after received the security mode command. The NAS key set identifier is set to 0 in security mode command message. And it was able to attach with the other EPC, where the NAS key set identifier value is 1. What can be the issue ?
regards,
Sravya
Last edit: Sravya Keerthana 2019-11-29
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi Ben,
I have made some tests with openLTE and I am facing an issue related to the security mode command. I have tried to attach one ZTE MF880 dongle to openLTE, which is running with USRP B210 HW. The UE sent a security mode reject after received the security mode command. I suspect that this behavior is related to the MAC of security mode command which is show as 0x00000000 in pcap file. Have you ever faced this issue? Could you give me a tip about this problem?
Notes:
I set the OP variable in liblte_security.cc with the value used by my SIM card.
openLTE informs me: user authentication successful (many times)
* logs and pcap file: https://drive.google.com/file/d/0B1oI8-bD4zaPajBTcUw3cXZwNDg/view?usp=sharing
Best regards,
Henrique Duarte
Hi Henrique,
I checked debug file you provided and MAC in SMC looks good (I mean it is not 0):
ie.:
10/06/2015 14:42:10.953382 info mme LTE_fdd_enb_mme.cc 1702 Sending Security Mode Command for RNTI=63, RB=SRB1 37ECA5EB6B00075D020002E0E0C1
10/06/2015 14:42:11.193528 info mme LTE_fdd_enb_mme.cc 203 Received NAS message for RNTI=63 and RB=SRB1 075F18
My tips are:
1) Check if OP is provided properly. OP is used to generate OPc. OPc is used for further key generation. Sometimes you have given OPc that is programed on the card (not OP).
2) Check if UE see the same MNC/MCC that is configured. MNC+MCC is used for key generation.
Regards,
Przemek
Hi,
I am trying to attach one dongle to OAI LTE branch, which is running with USRP B210 HW using nextEPC. The UE sent a security mode reject after received the security mode command. The NAS key set identifier is set to 0 in security mode command message. And it was able to attach with the other EPC, where the NAS key set identifier value is 1. What can be the issue ?
regards,
Sravya
Last edit: Sravya Keerthana 2019-11-29