Rhizomatica. OpenBSC

Similar documents
Running GPRS/EDGE Data Services with Osmocom

10 Call Set-up. Objectives After this chapter the student will: be able to describe the activities in the network during a call set-up.

Internal. GSM Fundamentals.

Chapter 3 GSM and Similar Architectures

Section 4 GSM Signaling BSSMAP

GSM System Overview. Ph.D. Phone Lin.

3GPP TS V8.0.0 ( )

GSM System Protocol Architecture

Osmocom Callular Infrastructure Roadmap. Harald Welte

UNIT-5. GSM System Operations (Traffic Cases) Registration, call setup, and location updating. Call setup. Interrogation phase

GLOBAL SYSTEM FOR MOBILE COMMUNICATION (2) ETI2511 Friday, 31 March 2017

CHAPTER 4 SYSTEM IMPLEMENTATION 4.1 INTRODUCTION

Interfacing with VoIP using osmo-sip-connector

Communication Networks 2 Signaling 2 (Mobile)

ETSI TS V ( ) Technical Specification

Cellular Communication

ETSI TS V ( )

ETSI TS V7.3.0 ( )

GSM. Course requirements: Understanding Telecommunications book by Ericsson (Part D PLMN) + supporting material (= these slides) GPRS

WIRELESS SYSTEM AND NETWORKING

Publication of specifications for the mobile network interfaces offered by Wind

GSM GSM TECHNICAL July 1996 SPECIFICATION Version 5.2.0

ETSI TS V8.0.1 ( )

GSM GSM TECHNICAL October 1997 SPECIFICATION Version 5.5.0

Chapter 1 : Historical Background of Mobile Communications Early Systems (World War II)

Pertemuan 7 GSM Network. DAHLAN ABDULLAH

E2-E3: CONSUMER MOBILITY. CHAPTER-5 CDMA x OVERVIEW (Date of Creation: )

Design of a Routing Mechanism to Provide Multiple Mobile Network Service on a Single SIM Card Boobalan. P, Krishna. P, Udhayakumar. P, Santhosh.

Mobile Communications

ETSI TS V7.0.0 ( )

Basics of GSM in depth

QualNet 4.5 Cellular Model Library

3GPP TS V8.0.0 ( )

GSM Open-source intelligence

EUROPEAN ETS TELECOMMUNICATION November 1996 STANDARD

Cellular Mobile Systems and Services (TCOM1010) GSM Architecture

DRAFT. sysmocom - s.f.m.c. GmbH. Osmo-GSM-Tester Manual. by Neels Hofmeyr. Osmo-GSM-Tester Manual. Copyright 2017 sysmocom - s.f.m.c.

TELE4652 Mobile and Satellite Communication Systems

Dimensioning, configuration and deployment of Radio Access Networks. part 1: General considerations. Mobile Telephony Networks

Connecting Mobile Phones to the Internet Simply (CoMPIS) IETF London DISPATCH WG Jim Forster, Mike Iedema, Harvind Samra - Range Networks Tim Panton

GSM Hacking. Wireless Mobile Phone Communication 30 th January 2014 UNRESTRICTED EXTERNAL

ETSI TS V7.1.0 ( )

Keysight Technologies UXM GSM/GPRS/EGPRS Application Feature Comparison

Advanced Computer Networks Exercise Session 4. Qin Yin Spring Semester 2013

GSM Security Overview

Mobility and Security Management in the GSM System

International Journal of Scientific & Engineering Research, Volume 4, Issue 11, November-2013 ISSN

General Packet Radio Service (GPRS) 13 年 5 月 17 日星期五

3GPP TS V8.0.0 ( )

3GPP TS V ( )

End-to-end IP Service Quality and Mobility - Lecture #5 -

RF OPTIMIZATION FOR QUALITY IMPROVEMENT IN GSM NETWORK

INTRODUCTION TO GSM DATA SERVICES. ETI25111 Monday, April 3, 2017

Range Networks. OpenBTS P2.8. Users Manual. Doc. Rev. 1. Copyright 2011, Range Networks, Inc., all rights reserved

ETSI TS V ( )

Abusing Calypso phones

Release Note for GSM Signaling

E3-E4 (CM MODULE) CDMA x & EV-DO. For internal circulation of BSNL only

ETSI TS V7.0.0 ( )

Introduction to Mobile Computing

3GPP TS V8.4.0 ( )

GSM Mobility Management

Product Brochure. For MD8470A Signalling Tester MX847016A. Multi-cell Network Simulator

Mobile Security Fall 2012

Communication Systems for the Mobile Information Society

Security of Cellular Networks: Man-in-the Middle Attacks

Semi-Active GSM Monitoring System SCL-5020SE

GSM security country report: Estonia

GSM Network and Services

ETSI TS V ( ) Technical Specification

ETSI TS V8.4.0 ( )

Data and Voice Signal Intelligence Interception Over The GSM Um Interface

TurboMAX BTS Installing and Configuring

Signaling Protocol Structure in GSM

Chapter 6. Mobile Network Planning

Nexus8610 Traffic Simulation System. Intersystem Handover Simulation. White Paper

Shadow Phone and Ghost SIM: A Step Toward Geolocation Anonymous Calling. Gerard Lawrence Pinto

EUROPEAN ETS TELECOMMUNICATION January 1999 STANDARD

Non-Strategic Change Request GSM 11.23

Evolution from 2G To 4G Mobile Telecommunication systems

International Telecommunication Union ITU-T E.807 (02/2014) TELECOMMUNICATION STANDARDIZATION SECTOR OF ITU

Wireless and Mobile Network Architecture

GSM Mobility Databases

osmo-gmr: Intro to receiving GMR-1 satphones

GSM and Similar Architectures Lesson 13 GPRS

Mobile Security Fall 2013

Understanding Carrier Wireless Systems

EUROPEAN ETS TELECOMMUNICATION August 1996 STANDARD

Index. 2G mobile networks G mobile networks GPP network, see LTE networks

FROM GSM TO LTE-ADVANCED: AN INTRODUCTION TO MOBILE NETWORKS AND MOBILE BROADBAND 2. GENERAL PACKET RADIO SERVICE (GPRS) AND EDGE

Evaluating GSM A5/1 security on hopping channels

Wireless Communication Systems. Lesson Outline

Outline. Introduction. Traditional Handover Scheme. al-antenna Handover Scheme. Simulation and Performance Analysis. Conclusion

ENSC 835: HIGH-PERFORMANCE NETWORKS CMPT 885: SPECIAL TOPICS: HIGH-PERFORMANCE NETWORKS

Virtual Coverage In Rural Environments

Attacking Mobile-Terminated Services in GSM

Network Security: Cellular Security. Tuomas Aura T Network security Aalto University, Nov-Dec 2013

OpenBTS Overview. مهند مصطفى أشرير

TS V5.1.1 ( )

GSM Interception IMSI Catcher and Voice Interception

Transcription:

Rhizomatica OpenBSC 1

OsmoNITB OsmoNITB implements part of GSM network (BSC, SMSC,MSC,VLR,HLR,AUC) in one element OsmoNITB implements ETSI/3GPP A-bis interface A-bis as spec TS 08.56(LAPD) TS08.58 (RSL) TS12.21(OML) In addition the A-bis supports multiple vendor specific implementation to connect with different BTSs. 2

OsmoNITB - BSC BSC implements GSM Base Station Controller functionality Configuring and bringing up BTSs and their TRXs and TSs Implementing A-bis protocol and signalling for voice data Processing management results of MSs, performing handover decision Terminating the Radio Resource from the MS 3

OsmoNITB - MSC Implements mobility management MM functions of the TS04.08 It can handle Call Control, with an internal MNCC handler Or using an external MNCC agent 4

OsmoNITB - SMSC Minimal store-and-forward server for SMS Supports MO (Mobile Originating) and MT (Mobile Terminating) SMS Supports multi-part messages 5

OsmoNITB HLR/AUC Implements subscriber database (HLR) Implements subscriber secret key storage for authentication (AUC) Contains IMSI and phone number of the subscribers Data stored in file-based SQLite3 database 6

OsmoBTS Implements the layer 2 (LADPm) Implements the A-bis interface including RSL and OML protocols Minimal configuration, most of the configuration for the BTS is loaded from the BSC 7

Osmo-TRX Specific to the umtrx Handles the low level interface Um protocol Based on the original OpenBTS transceiver 8

Configuration NiTB provides a file based or a VTY ( Virtual Tele Type) interface for configuration and administration The BTS VTY is accessible with telnet 127.0.0.1 4241 The BSC VTY is accessible with telnet 127.0.0.1 4242 The VTY has an enable mode to access to priviliged configurations 9

OsmoBTS Configuration Basic configuration for the BTS includes: GSM band type OML address to connect to (BSC) and bind address for RTP Transceiver related configuration Clock calibration 10

OsmoBTS Configuration Edit osmo-bts.cfg bts 0 band GSM850 ipa unit-id ID 0 oml remote-ip IPBSC rtp bind-ip LOCALIP rtp jitter-buffer 0 paging lifetime 0 fn-advance 20 ms-power-loop -10 timing-advance-loop trx 0 rxgain 12 power 10 11

OsmoBTS Configuration band: set the frequency band of this BTS ipa unit-id: Set the unit ID of this BTS. SiteID and UnitID oml remote-ip: OML IP address rtp bind-ip: RTP local bind address 12

OsmoBTS Configuration trx: Transceiver related configuration rxgain: Reception gain in db power: Transmission power in db 13

OsmoNITB Configuration Basic configuration for the BSC includes: Set the ARFCN MCC/MNC Channel configuration Codec selection 14

OsmoNITB Configuration Edit the osmo-bsc.cfg network network country code 1 mobile network code 1 short name MyNetwork long name MyNetwork auth policy token location updating reject cause 13 encryption a5 0 neci 1 paging any use tch 0 rrlp mode none mm info 1 handover 0 15

OsmoNITB Configuration bts 0 type sysmobts band GSM850 cell_identity 0 location_area_code 2 training_sequence_code 7 base_station_id_code 63 ip.access unit_id 1801 0 oml ip.access stream_id 255 line 0 neighbor-list mode automatic codec-support fr hr efr afs 16

OsmoNITB Configuration trx 0 rf_locked 0 arfcn 235 nominal power 23 max_power_red 0 rsl e1 tei 0 timeslot 0 phys_chan_config CCCH+SDCCH4 hopping enabled 0 timeslot 1 phys_chan_config SDCCH8 hopping enabled 0 timeslot 2 phys_chan_config TCH/F hopping enabled 0 timeslot 3 phys_chan_config TCH/F hopping enabled 0 timeslot 4 phys_chan_config TCH/F hopping enabled 0 timeslot 5 phys_chan_config TCH/F hopping enabled 0 timeslot 6 phys_chan_config TCH/F hopping enabled 0 timeslot 7 phys_chan_config TCH/F hopping enabled 0 17

OsmoNITB Configuration network country code: Set the GSM network country code mobile network code: Set the GSM mobile network code short name: Set network name auth policy: Set authentication policy, accept-all / closed / token 18

OsmoNITB Configuration encryption a5: 1 Enable/ 0 Disable A5 encryption paging any use tch: 1 Enable / 0 Disable. Assign a TCH when a paging any request handover: Handover specific configurations ip.access unit: Under bts settings. The ID has to match with the BTS configuration codec-support: Codec support selection 19

OsmoNITB Configuration arfcn: Set the Absolute Radio Frequency Channel Number for the trx timeslot: Select the timeslot on the phys_chan_config: Configure the channel type for the specific timeslot 20

OsmoNITB Configuration network country code: Set the GSM network country code mobile network code: Set the GSM mobile network code short name: Set network name auth policy: Set authentication policy, accept-all / closed / token 21