Commercial UEs tests

This page groups reported tests in 5G SA open source systems with commercial UEs

Please comment on this page, the moderator will integrate your input in the page

 

 

 

Starting point

A UICC, with Milenage authentication, HSS/UDR with same data: IMSI, Ki, OPc

The DNN is to set in the phone, according to the DNN in the 5GC

All UEs should work with any USIM, any PLMN, any UE HW supported bands, see Ericsson paper:

https://www.ericsson.com/en/blog/2020/1/5g-security-sim-card

These Rel 99+ USIMs can be used to access every generation of mobile networks, including 5G. Such backward and forward compatibility is achieved by the carefully designed offloading of some computations and storage to mobile phones.

It is E/// above document and 3GPP standard: any card should work, except the pure GSM ones (before 1999)

Now, we can face difficulties with today smartphones, that are NOT COMPLIANT (shame on them)

Voice over xxx

Many phones try to connect to IMS server: open a second PDU session on “ims” DNN/APN name.

Then connect to a IMS/SIP server (with open cells cards, see the FAQ for the SIP identifiers in 3GPP).

But, if this fails, some UEs simply abort all the radio link, including the default PDU session to internet.

So, if this is available in the phone menu, disable voice over xxx is a good idea for 99% of our use cases.

UEs table

Model type firmware frequency bands plmn gNB 5GC
sim type comment
Huawei
P40, P40 pro
smartp all 78 all OAI/develop OAI, free5GC open-cells Recent firmware  require cyphering

in OAI core config files – INT_ALGO_LIST=[“NIA1” , “NIA2”]
– CIPH_ALGO_LIST=[“NEA1” , “NEA2”]

Seems also to need to run a ISM server (Asterix is fine)

Huawei E6878-870 CPE all 78 all OAI/develop OAI, free5GC open-cells works
Quectel RM500Q-GL M.2 RM500QGL

ABR11A06M4G

Need firmware (AT+QGMR command)

For SA, at least

RM500QGLABR11A06M4G_01.001.01.001

For SA + mobility, handovers (neighbor measurements)

RM500QGLABR11A06M4G_02.200.02.200
78, 38, 41 all OAI/develop OAI, free5GC open-cells firmware before A06 doesn’t work

Windows driver works
band 38: 20MHz only

MBIM mode works much better for high throughput

PLMN restriction lists can be used  with AT+QMBNCFG=”Select”,”ROW_Commercial”

but it can’t be a void list

 

Quectel RM520N-GL M.2 RM520NGLAAR01A06M4G ? ? OAI SA gNB: tag: 2023.w16 OAI SA Core: tag: 2023.w04b open-cells works
Quectel RM502Q-AE M.2 ? ? 001/01 OAI OAI sysmocom works with IMS
tested up to 80MHz
Teltonika RUTX50 Industrial 5G router  RUTX_R_00.07.04.1
internal modem: Quectel RG501Q-EU
quectel version RG501QEUAAR12A07M4G_04.001.04.001
n78 001/01 OAI SA gNB: tag: 2023.w16 OAI SA Core: tag: 2023.w04b open-cells works
SIMCom SIM8262E-M2 Qualcomm Snapdragon X62 2212B03V03X62M44A-M2 n78 208/99 OAI/develop (wk40/22 but also newer versions) OAI/develop open-cells trigger PDU-Session establishment with at+netopen
SIM8200EA-M2 qualcomm SIM8200M44A-M2_B02V05_201201 n78 208.01 OAI/develop OAI CN open-cells Not working well

initial connection seems low, no success with 001/01.

AT commands: trigger PDU-Session establishment with at+netopen

google pixel

4a, 5, 5a, 6, 6a

smartp Android 12

Stock Google OS/GrapheneOS

another test:

pixel 4a, RQ2A.210305.006

6a: android 13 (graphenOS)

 

41, 78 001/01

reported not working with 209/99

OAI/develop open5GS open-cells optional:

*#*#4636*#*# menu, network type to NR only

OnePlus 9 smartp LE2115 41,78 001/01 OAI/develop open5gs open-cells works on Android 11. On Android 12, the UE first sends a PDU Session Establishment request with ims dnn before sending a second request with the regular OAI dnn– did not work when I tested previously (before multiple PDU session support was added to OAI)
OnePlus 9 pro 5G smartp LE2123

LE2123_11_C.61

? ? OAI/develop ? ? reported not working
Sierra Wireless EM9191 M.2 Generic 41,78 001/01 OAI/develop open5gs open-cells works with generic firmware, carrier-specific firmware not tested
Sierra Wireless EM9291 M.2 Generic 41,78 001/01 OAI/develop open5gs open-cells work well with ModemManager. AT commands are not needed for establishing PDU sessions
Moto G 5G (XT2113-3 ? ? ? ? OAI/develop ? ? reported working
Motorola Edge 2022 (Mediatek) smartp Android 12 n41 and n78 001-01 OAI/develop open5gs open-cells works
Motorola Edge+ 2022 (Qualcomm) smartp Android 12 n41 and n78 001-01 OAI/develop open5gs open-cells works
Dial *#*#4636#*#* code on the Motorola and switch to NR only, and make sure that the APN is set up and enabled (in Network Settings). Also, disable VoLTE/4G calling. It should initiate RA with the gNB in a few minutes (for the first time).
OnePlus Nord CE2 smartp Dimensity 900 Octa-core
Model: IV2201
android 11
78 ? OAI/develop oai open-cells reported working

may need to set NAS Integrity Protect 1

OnePlus Nord CE 5G smartp Snapdragon 750G
Model: EB2101
Android version: 11
? ? OAI/develop oai open-cells reported to work, but very slow to find the network
OpenPlus Nord N10 5G smartp Processor: Qualcomm Snapdragon 690
Model: BE2029
Android version: 11
n78 208/99 OAI/develop oai open-cells works fine, finds network fast
Oneplus Nord smartp AC2003 andEB2101

processor snapdragon 750G

n78 001/01

not working  209/99

oai/develop oai open-cells works only on 001/01
OPPO Reno7 Pro 5G smartp Dimensity 1200-Max Octa-core
Model: CPH2293
Android version: 11
n78 ? OAI/develop oai open-cells works
OPPO A54 ROM: Color OS 12.1, Android 12
Model: CPH2195
SRSran Open5GC sysmocom SJA2 can detect n1, n3, n7, n28

n78 not working. same device + SIM to see a live commercial 5G SA cell on n78 so the issue in this case is most likley either one or more of the TDD 15khz item, the need for a better GPSDO or possibly I need a better antenna for the band

Oppo Reno 5G

Snapdragon 765G Andriod V11.1 ? 001/01 OAI/develop (2023.w10b but also older versions), USRP B210, SA Open5GS/main, c0a61fb71, build from source

?

For UE, VoLTE Call should be enabled and 5G Network Mode should be SA+NSA even the gNB and 5GC are both in SA mode. The 5G Network Mode can be found in developer setting. It seems like it does not work with PLMN other than 00101.
Tested NOT work with 00102, 00201, 20893The UE connects to DNN “internet”

Telit FN908m

? ? ? ? OAI/develop OAI 5GC

sysmoUSIM-SJS1

not working

Telit FN990A40

M.2 all 41, 78 001/01 OAI/develop open5GS

open cells

work well with ModemManager. AT commands are not needed for establishing PDU sessions

Telit FN990A28

M.2 all 41, 78 001/01 OAI/develop open5GS

open cells

work well with ModemManager. AT commands are not needed for establishing PDU sessions

telit FN980

M.2 ? ? ? OAI/develop

 

?

?

tested with qmicli and AT commands to set before the APN/DNN
wwan0 as raw IP configurationReported issues with reconect procedure that still fails in OAI version of septemebr 2023
Sierra Wireless XR90 M.2 all/generic 78 208/99 OAI/develop Open5GS

open-cells

works
Samsung A33 5G smartp Processor: Exynos 1280
Model: SM-A336E/DS
Android version: 12
78 ? OAI/develop OAI 5GC

?

works
Samsung Galaxy A52S 5G sma Processor: Snapdragon 778G
Model: SM-A528B/DS
Android version: 11
78 ? OAI/develop OAI 5GC

?

works
galaxy S22+ smartp SM-S906B/DS 78 001/01 OAI/develop OAI 5GC open cells works
Samsung S23 smartp ? 001/01 and voLTE enabled OAI/develop OAI 5GC

sysmocom

BW up to 80MHz
VoLTE enabled.
sysmocom sim card with disabled 5G security calculations on simcard./pySim-shell.py -p0
verify_adm
select MF
select ADF.USIM
select EF.UST
ust_service_deactivate 124
Xperia 10 IV smartp Android 12 (stock) 41 and 78 001/01 OAI/develop Open5GS

open-cells

works

M.2 modules based on Qualcomm, usage with Linux

Access to AT commands

sudo screen /dev/ttyUSB2

Linux connection

sudo ip link set wwan0 down
echo 'Y' | sudo tee /sys/class/net/wwan0/qmi/raw_ip
sudo ip link set wwan0 up
sudo qmicli --device=/dev/cdc-wdm0 --device-open-proxy --dms-set-operating-mode=low-power
sudo qmicli --device=/dev/cdc-wdm0 --device-open-proxy --dms-set-operating-mode=online
sudo qmicli --device=/dev/cdc-wdm0 --device-open-proxy --wds-start-network="ip-type=4,apn=oai" --client-no-release-cid
sudo udhcpc -q -f -n -i wwan0

Swap airplane/normal mode

Add a data bearer to DNN “oai”

query the module to add IP address on the interface

SRSlte project page can help

 

77 thoughts on “Commercial UEs tests”

  1. Hi Laurent,

    OAI gNB tested successfully with following UEs:

    1. Model: Pixel 4a 5G/Pixel 5/Pixel 5a/Pixel 6
    Type: smartp
    firmware: Android 12 (Stock Google OS/GrapheneOS)
    frequency bands: n41 and n78
    plmn: 001-01
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works

    2. Model: OnePlus 8 (IN2013)
    Type: smartp
    firmware: All Android 11 releases (Stock OxygenOS)
    frequency bands: n41
    plmn: 001-01
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works on Android 11. On Android 12, the UE first sends a PDU Session Establishment request with ims dnn before sending a second request with the regular OAI dnn– did not work when I tested previously (before multiple PDU session support was added to OAI)

    3. Model: OnePlus 9 (LE2115)
    Type: smartp
    firmware: All Android 11 releases (Stock OxygenOS)
    frequency bands: n41 and n78
    plmn: 001-01
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works on Android 11. On Android 12, the UE first sends a PDU Session Establishment request with ims dnn before sending a second request with the regular OAI dnn– did not work when I tested previously (before multiple PDU session support was added to OAI)

    4. Model: Sierra Wireless EM9191
    Type: M.2
    firmware: All (Generic)
    frequency bands: n41 and n78
    plmn: 001-01/All
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works with generic firmware, carrier-specific firmware not tested

      1. Hi Laurent,
        Please update TESTING_GNB_W_COTS_UE.md file under doc folder with below UE’s as I have tested OAI gNB 5G-SA successfully:
        1) Device Name: OnePlus Nord CE 2
        Processor: Dimensity 900 Octa-core
        Model: IV2201
        Android version: 11
        Band: n78
        2) Device Name: OPPO Reno7 Pro 5G
        Processor: Dimensity 1200-Max Octa-core
        Model: CPH2293
        Android version: 11
        Band: n78
        Note:- Hopefully Reno8 Pro 5G should also work but till now i did not tested it.
        3) Device Name: OnePlus Nord CE 5G
        Processor: Snapdragon 750G
        Model: EB2101
        Android version: 11
        Band: n78
        Note: It attached in 5G but it takes much time, so i don’t prefer this

          1. Hi Asheesh Ji,

            I have succesfully tested on below devices
            UE Status
            One Plus Nord CE 5G Working
            One Plus Nord CE 2 Working
            Oppo Reno 7 Pro 5G Working
            Samsung A33 5G Working
            Samsung M33 5G Working
            Samsung 52S Working

          2. Dear dsksh,
            May you share with everybody more details, especially the Samsung brand phones.
            Thanks in advance
            Laurent

          3. Hi Laurent,
            I have tested below devices using OAI gNB and Core successfully
            1) Device Name: OnePlus Nord CE 2
            Processor: Dimensity 900 Octa-core
            Model: IV2201
            Android version: 11
            Band: n78
            2) Device Name: OPPO Reno7 Pro 5G
            Processor: Dimensity 1200-Max Octa-core
            Model: CPH2293
            Android version: 11
            Band: n78
            3) Device Name: OnePlus Nord CE 5G
            Processor: Snapdragon 750G
            Model: EB2101
            Android version: 11
            Band: n78
            4) Device Name: Samsung A33 5G
            Processor: Exynos 1280
            Model: SM-A336E/DS
            Android version: 12
            Band: n78
            5) Device Name: Samsung Galaxy A52S 5G
            Processor: Snapdragon 778G
            Model: SM-A528B/DS
            Android version: 11
            Band: n78

          4. Dear Daksh Maan,
            Thanks for you contribution, i will copy it immediately in the table with a successful usage of S22+ from another person.
            What SIM have you used ?
            On Samsung, and likely other brands, it seems we have to disable Voice over xxx because some UE break the link if they can’t finish the IMS registration (that needs to install a SIP server aside the OAI core)
            Thanks again

  2. Model: Sierra Wireless XR90
    Type: M.2
    firmware: All (Generic)
    frequency bands: n78
    plmn: 208/99
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works.

  3. Hi Laurent,
    we have tested OAI gNB with following UEs and msg3 error:
    1. Model: Poco F3 xiaomi,Galaxy A42 5G samsung
    Type: smartphone
    firmware: Android 12
    frequency bands: n41 and n78(24 prb and 106 prb)
    plmn: 001-01,208-99
    gNB: OAI/develop
    5GC: Open5GS,OAI 5GC
    comment: SIB1 was providing wrong information to the phone, so the Msg1 was ok, but not Msg3

    this is the nr-softmodem log:

    /openairinterface5g/cmake_targets/ran_build/build$ sudo ./nr-softmodem -O ~/gnb.sa.band78.fr1.106PRB.usrpb210.conf –sa -E –continuous-tx
    CMDLINE: “./nr-softmodem” “-O” “/home/oai/gnb.sa.band41.fr1.106PRB.usrpb210.conf” “–sa” “-E”
    [CONFIG] get parameters from libconfig /home/oai/gnb.sa.band41.fr1.106PRB.usrpb210.conf , debug flags: 0x00000000
    [LIBCONFIG] Path for include directive set to: /home/oai
    [CONFIG] function config_libconfig_init returned 0
    [CONFIG] config module libconfig loaded
    [LIBCONFIG] config: 1/1 parameters successfully set, (1 to default value)
    [LIBCONFIG] log_config: 3/3 parameters successfully set, (1 to default value)
    [LIBCONFIG] log_config: 55/55 parameters successfully set, (47 to default value)
    [LIBCONFIG] log_config: 55/55 parameters successfully set, (55 to default value)
    [LIBCONFIG] log_config: 16/16 parameters successfully set, (16 to default value)
    [LIBCONFIG] log_config: 16/16 parameters successfully set, (16 to default value)
    log init done
    [HW] # /dev/cpu_dma_latency set to 2 us
    Reading in command-line options
    [LIBCONFIG] (root): 36/36 parameters successfully set, (32 to default value)
    [LIBCONFIG] (root): 5/5 parameters successfully set, (4 to default value)
    [ENB_APP] nfapi running mode: MONOLITHIC
    [GNB_APP] Getting GNBSParams
    [LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
    [LIBCONFIG] THREAD_STRUCT.[0]: 2/2 parameters successfully set, (0 to default value)
    [LIBCONFIG] THREAD_STRUCT.[0]: 2/2 parameters successfully set, (0 to default value)
    [CONFIG] parallel_conf is set to 0
    [CONFIG] worker_conf is set to 1
    Configuration: nb_rrc_inst 1, nb_nr_L1_inst 1, nb_ru 1
    [LIBCONFIG] TTracer: 4/4 parameters successfully set, (4 to default value)
    configuring for RAU/RRU
    CPU Freq is 3.504236
    [ITTI] Starting itti queue: TASK_UNKNOWN as task 0
    [ITTI] Starting itti queue: TASK_TIMER as task 1
    [ITTI] Starting itti queue: TASK_L2L1 as task 2
    [ITTI] Starting itti queue: TASK_BM as task 3
    [ITTI] Starting itti queue: TASK_PHY_ENB as task 4
    [ITTI] Starting itti queue: TASK_MAC_ENB as task 5
    [ITTI] Starting itti queue: TASK_RLC_ENB as task 6
    [ITTI] Starting itti queue: TASK_RRC_ENB_NB_IoT as task 7
    [ITTI] Starting itti queue: TASK_PDCP_ENB as task 8
    [ITTI] Starting itti queue: TASK_DATA_FORWARDING as task 9
    [ITTI] Starting itti queue: TASK_END_MARKER as task 10
    [ITTI] Starting itti queue: TASK_RRC_ENB as task 11
    [ITTI] Starting itti queue: TASK_RRC_GNB as task 12
    [ITTI] Starting itti queue: TASK_RAL_ENB as task 13
    [ITTI] Starting itti queue: TASK_S1AP as task 14
    [ITTI] Starting itti queue: TASK_NGAP as task 15
    [ITTI] Starting itti queue: TASK_X2AP as task 16
    [ITTI] Starting itti queue: TASK_M2AP_ENB as task 17
    [ITTI] Starting itti queue: TASK_M2AP_MCE as task 18
    [ITTI] Starting itti queue: TASK_M3AP as task 19
    [ITTI] Starting itti queue: TASK_M3AP_MME as task 20
    [ITTI] Starting itti queue: TASK_M3AP_MCE as task 21
    [ITTI] Starting itti queue: TASK_SCTP as task 22
    [ITTI] Starting itti queue: TASK_ENB_APP as task 23
    [ITTI] Starting itti queue: TASK_GNB_APP as task 24
    [ITTI] Starting itti queue: TASK_MCE_APP as task 25
    [ITTI] Starting itti queue: TASK_MME_APP as task 26
    [ITTI] Starting itti queue: TASK_FLEXRAN_AGENT as task 27
    [ITTI] Starting itti queue: TASK_PHY_UE as task 28
    [ITTI] Starting itti queue: TASK_MAC_UE as task 29
    [ITTI] Starting itti queue: TASK_RLC_UE as task 30
    [ITTI] Starting itti queue: TASK_PDCP_UE as task 31
    [ITTI] Starting itti queue: TASK_RRC_UE as task 32
    [ITTI] Starting itti queue: TASK_RRC_NRUE as task 33
    [ITTI] Starting itti queue: TASK_NAS_UE as task 34
    [ITTI] Starting itti queue: TASK_RAL_UE as task 35
    [ITTI] Starting itti queue: TASK_GTPV1_U as task 36
    [ITTI] Starting itti queue: TASK_CU_F1 as task 37
    [ITTI] Starting itti queue: TASK_DU_F1 as task 38
    [ITTI] Starting itti queue: TASK_RRC_UE_SIM as task 39
    [ITTI] Starting itti queue: TASK_RRC_GNB_SIM as task 40
    [ITTI] Starting itti queue: TASK_RRC_NSA_UE as task 41
    [ITTI] Starting itti queue: TASK_RRC_NSA_NRUE as task 42
    [ITTI] Starting itti queue: TASK_NAS_NRUE as task 43
    [LIBCONFIG] opt: 3/3 parameters successfully set, (3 to default value)
    [OPT] OPT disabled
    [HW] Version: Branch: develop Abrev. Hash: add469e7ca Date: Thu Jul 28 11:59:36 2022 +0000
    [LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
    [LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
    [NR_PHY] PRB blacklist
    [NR_PHY] RC.gNB = 0x559eb64c0400
    [LIBCONFIG] L1s.[0]: 15/15 parameters successfully set, (10 to default value)
    [NR_PHY] RC.gNB[0] = 0x7f1aa9597010
    [NR_PHY] Copying 0 blacklisted PRB to L1 context
    Initializing northbound interface for L1
    [PHY] l1_north_init_gNB() RC.nb_nr_L1_inst:1
    [PHY] Installing callbacks for IF_Module – UL_indication
    [MAC] Allocating shared L1/L2 interface structure for instance 0 @ 0x559eb64c2b20
    [PHY] l1_north_init_gNB() RC.gNB[0] installing callbacks
    [ITTI] Created Posix thread TASK_SCTP
    [LIBCONFIG] eNBs.[0]: 1/1 parameters successfully set, (1 to default value)
    [LIBCONFIG] gNBs.[0]: 1/1 parameters successfully set, (1 to default value)
    [X2AP] X2AP is disabled.
    [LIBCONFIG] gNBs.[0].NETWORK_INTERFACES: 10/10 parameters successfully set, (3 to default value)
    [NGAP] Configuration in the file: lo.
    [NGAP] Configuration in the file: 127.0.100.1/24.
    [NGAP] Starting NGAP layer
    [ITTI] Created Posix thread TASK_NGAP
    [PHY] gNB_app_task() Task ready initialize structures
    [ITTI] Created Posix thread TASK_GNB_APP
    [NR_RRC] Creating NR RRC gNB Task
    [LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
    [LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
    [NR_PHY] PRB blacklist
    [LIBCONFIG] L1s.[0]: 15/15 parameters successfully set, (10 to default value)
    [NR_PHY] Copying 0 blacklisted PRB to L1 context
    Initializing northbound interface for L1
    [PHY] l1_north_init_gNB() RC.nb_nr_L1_inst:1
    [PHY] Installing callbacks for IF_Module – UL_indication
    [PHY] l1_north_init_gNB() RC.gNB[0] installing callbacks
    [LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
    [LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
    [LIBCONFIG] MACRLCs.[0]: 32/32 parameters successfully set, (26 to default value)
    [MAC] [MAIN] Init function start:nb_nr_macrlc_inst=1
    [NR_RRC] Entering main loop of NR_RRC message task
    [ITTI] Created Posix thread TASK_RRC_GNB
    [PHY] Installing callbacks for IF_Module – UL_indication
    [NR_MAC] PUSCH Target 150, PUCCH Target 200, PUCCH Failure 10, PUSCH Failure 10
    [PHY] gNB_app_task() RC.nb_nr_L1_inst:1
    [PHY] l1_north_init_gNB() RC.nb_nr_L1_inst:1
    [PHY] Installing callbacks for IF_Module – UL_indication
    [PHY] l1_north_init_gNB() RC.gNB[0] installing callbacks
    [GNB_APP] Allocating gNB_RRC_INST for 1 instances
    [PHY] gNB_app_task() RC.nb_nr_inst:1 RC.nrrrc:0x7f1aa0007270
    [PHY] gNB_app_task() Creating RRC instance RC.nrrrc[0]:0x7f1aa0007290 (1 of 1)
    [LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
    [LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
    [LIBCONFIG] gNBs.[0].pdcch_ConfigSIB1.[0]: 2/2 parameters successfully set, (0 to default value)
    [LIBCONFIG] gNBs.[0].servingCellConfigCommon.[0]: 60/60 parameters successfully set, (9 to default value)
    [RRC] Read in ServingCellConfigCommon (PhysCellId 0, ABSFREQSSB 518670, DLBand 41, ABSFREQPOINTA 514854, DLBW 106,RACH_TargetReceivedPower -96
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
    [LIBCONFIG] gNBs.[0].servingCellConfigDedicated.[0]: 42/42 parameters successfully set, (21 to default value)
    [RRC] Read in ServingCellConfigDedicated UL (FreqDensity_0 -1, FreqDensity_1 -1, TimeDensity_0 -1, TimeDensity_1 -1, TimeDensity_2 -1, RE offset -1, First_active_BWP_ID 1 SCS 1, LocationandBW 28875
    [GNB_APP] DL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
    [GNB_APP] DL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
    [GNB_APP] DL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
    [GNB_APP] UL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
    [GNB_APP] UL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
    [GNB_APP] UL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
    NRRRC 0: Southbound Transport local_mac
    [NR_RRC] Setting node_type to ngran_gNB
    [LIBCONFIG] gNBs.[0].plmn_list.[0]: 3/3 parameters successfully set, (0 to default value)
    [GNB_APP] pdsch_AntennaPorts N1 1
    [GNB_APP] pdsch_AntennaPorts N2 1
    [GNB_APP] pdsch_AntennaPorts XP 1
    [GNB_APP] pusch_AntennaPorts 1
    [GNB_APP] minTXRXTIME 2
    [GNB_APP] SIB1 TDA 1
    [GNB_APP] Do CSI-RS 1
    [GNB_APP] Do SRS 1
    [GNB_APP] 256 QAM: may be on
    [GNB_APP] SDAP layer is disabled
    [LIBCONFIG] security: 4/4 parameters successfully set, (0 to default value)
    [GNB_APP] RRC starting with node type 2
    [GNB_APP] Sending configuration message to NR_RRC task
    [PDCP] pdcp init,usegtp
    [LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
    [NR_RRC] Received message NRRRC_CONFIGURATION_REQ
    [NR_RRC] [gNB 0] Received NRRRC_CONFIGURATION_REQ : 0x7f1aa00088e0
    [NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI 0] Init…
    [LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
    [LIBCONFIG] gNBs.[0].plmn_list.[0]: 3/3 parameters successfully set, (0 to default value)
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [LIBCONFIG] gNBs.[0].plmn_list.[0].snssaiList.[0]: 2/2 parameters successfully set, (0 to default value)
    [NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
    [NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI 0] Checking release
    [LIBCONFIG] gNBs.[0].amf_ip_address.[0]: 4/4 parameters successfully set, (0 to default value)
    [LIBCONFIG] gNBs.[0].SCTP: 2/2 parameters successfully set, (0 to default value)
    [NR_RRC] SIB1 freq: absoluteFrequencySSB 518670, absoluteFrequencyPointA 514854
    [NR_RRC] SIB1 freq: absolute_diff 3816, 2*(absolute_diff/(12*6) – 10) 86
    [LIBCONFIG] gNBs.[0].NETWORK_INTERFACES: 10/10 parameters successfully set, (3 to default value)

    [GNB_APP] default drx 0

    -65
    [GTPU] Configuring GTPu

    [LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)

    0
    0
    1

    0
    1

    000000000000000000000001

    000000000000000000000000111000000000

    [LIBCONFIG] gNBs.[0].NETWORK_INTERFACES: 10/10 parameters successfully set, (3 to default value)

    [GTPU] SA mode

    41

    86

    0

    106

    28875

    12
    0

    1
    0

    10000000000000

    5
    0

    0
    [GTPU] Configuring GTPu address : 127.0.100.1 -> 164007f

    2

    10000000000000

    [GNB_APP] [gNB 0] gNB_app_register for instance 0
    [NGAP] Registered new gNB[0] and macro gNB id 3584

    [NGAP] [gNB 0] check the amf registration state

    7
    0

    10000000000000

    0
    7
    5
    1

    40

    54

    57

    1

    0

    0

    106

    23

    28875

    [NGAP] 3584 -> 0000e000

    98

    0
    13
    -96

    19

    1

    2

    41

    2

    38

    7

    38

    1
    -90

    0

    40
    -90

    [NGAP] servedGUAMIs.list.count 1

    [NGAP] PLMNSupportList.list.count 1

    [NGAP] PLMNSupportList.list.count 1

    [GNB_APP] [gNB 0] Received NGAP_REGISTER_GNB_CNF: associated AMF 1

    10000000

    7
    6
    2
    4

    -25

    [NR_RRC] do_SIB23_NR, size 9
    [NR_RRC] Done init_NR_SI
    [NR_MAC] Configuring common parameters from NR ServingCellConfig
    [NR_MAC] config_common() dl_BandwidthP:40
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] Computing frequency (pointA 514854 => 2574270 KHz (freq_min 2496000 KHz, NR band 41 N_OFFs 499200))
    [NR_MAC] config_common() dl_BandwidthP:40
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] Computing frequency (pointA 514854 => 2574270 KHz (freq_min 2496000 KHz, NR band 41 N_OFFs 499200))
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
    [NR_MAC] Set RX antenna number to 1, Set TX antenna number to 1 (num ssb 1: 80000000,0)
    [NR_MAC] Setting TDD configuration period to 6
    [NR_MAC] TDD has been properly configurated
    DL frequency 2593350000: band 41, UL frequency 2593350000
    [PHY] DL frequency 2593350000 Hz, UL frequency 2593350000 Hz: band 41, uldl offset 0 Hz
    [PHY] Configuring MIB for instance 0, : (Nid_cell 0,DL freq 2593350000, UL freq 2593350000)
    [PHY] Initializing frame parms for mu 1, N_RB 106, Ncp 0
    [PHY] Init: N_RB_DL 106, first_carrier_offset 900, nb_prefix_samples 108,nb_prefix_samples0 132
    [GTPU] Initializing UDP for local address 127.0.100.1 with port 2152
    [ITTI] Created Posix thread TASK_GTPV1_U
    [PHY] Doing symbol rotation calculation for gNB TX/RX, f0 2593350000.000000 Hz, Nsymb 28
    [PHY] Symbol rotation 0/28 => (22004,24278)
    [PHY] Symbol rotation 1/28 => tl 0.000036 (32137,-6393) (0.031250)
    [PHY] Symbol rotation 2/28 => tl 0.000072 (11038,-30852) (0.195313)
    [PHY] Symbol rotation 3/28 => tl 0.000108 (-20788,-25330) (0.359375)
    [PHY] Symbol rotation 4/28 => tl 0.000143 (-32413,4807) (0.523438)
    [PHY] Symbol rotation 5/28 => tl 0.000179 (-12540,30272) (0.687500)
    [PHY] Symbol rotation 6/28 => tl 0.000215 (19519,26318) (0.851563)
    [PHY] Symbol rotation 7/28 => tl 0.000250 (32609,-3212) (0.015625)
    [PHY] Symbol rotation 8/28 => tl 0.000286 (14009,-29622) (0.179688)
    [GTPU] Created gtpu instance id: 96
    [PHY] Symbol rotation 9/28 => tl 0.000322 (-18205,-27245) (0.343750)
    [PHY] Symbol rotation 10/28 => tl 0.000357 (-32728,1607) (0.507813)
    [PHY] Symbol rotation 11/28 => tl 0.000393 (-15447,28897) (0.671875)
    [PHY] Symbol rotation 12/28 => tl 0.000429 (16845,28105) (0.835938)
    [PHY] Symbol rotation 13/28 => tl 0.000464 (32767,-1) (0.000000)
    [PHY] Symbol rotation 14/28 => tl 0.000500 (22004,24278) (0.867188)
    [PHY] Symbol rotation 15/28 => tl 0.000536 (32137,-6393) (0.031250)
    [PHY] Symbol rotation 16/28 => tl 0.000572 (11038,-30852) (0.195313)
    [PHY] Symbol rotation 17/28 => tl 0.000608 (-20788,-25330) (0.359375)
    [PHY] Symbol rotation 18/28 => tl 0.000643 (-32413,4807) (0.523438)
    [PHY] Symbol rotation 19/28 => tl 0.000679 (-12540,30272) (0.687500)
    [PHY] Symbol rotation 20/28 => tl 0.000715 (19519,26318) (0.851562)
    [PHY] Symbol rotation 21/28 => tl 0.000750 (32609,-3212) (0.015625)
    [PHY] Symbol rotation 22/28 => tl 0.000786 (14009,-29622) (0.179688)
    [PHY] Symbol rotation 23/28 => tl 0.000822 (-18205,-27245) (0.343750)
    [PHY] Symbol rotation 24/28 => tl 0.000857 (-32728,1607) (0.507812)
    [PHY] Symbol rotation 25/28 => tl 0.000893 (-15447,28897) (0.671875)
    [PHY] Symbol rotation 26/28 => tl 0.000929 (16845,28105) (0.835938)
    [PHY] Symbol rotation 27/28 => tl 0.000964 (32767,0) (1.000000)
    [PHY] Doing symbol rotation calculation for gNB TX/RX, f0 2593350000.000000 Hz, Nsymb 28
    [PHY] Symbol rotation 0/28 => (22004,24278)
    [PHY] Symbol rotation 1/28 => tl 0.000036 (32137,-6393) (0.031250)
    [PHY] Symbol rotation 2/28 => tl 0.000072 (11038,-30852) (0.195313)
    [PHY] Symbol rotation 3/28 => tl 0.000108 (-20788,-25330) (0.359375)
    [PHY] Symbol rotation 4/28 => tl 0.000143 (-32413,4807) (0.523438)
    [PHY] Symbol rotation 5/28 => tl 0.000179 (-12540,30272) (0.687500)
    [PHY] Symbol rotation 6/28 => tl 0.000215 (19519,26318) (0.851563)
    [PHY] Symbol rotation 7/28 => tl 0.000250 (32609,-3212) (0.015625)
    [PHY] Symbol rotation 8/28 => tl 0.000286 (14009,-29622) (0.179688)
    [PHY] Symbol rotation 9/28 => tl 0.000322 (-18205,-27245) (0.343750)
    [PHY] Symbol rotation 10/28 => tl 0.000357 (-32728,1607) (0.507813)
    [PHY] Symbol rotation 11/28 => tl 0.000393 (-15447,28897) (0.671875)
    [PHY] Symbol rotation 12/28 => tl 0.000429 (16845,28105) (0.835938)
    [PHY] Symbol rotation 13/28 => tl 0.000464 (32767,-1) (0.000000)
    [PHY] Symbol rotation 14/28 => tl 0.000500 (22004,24278) (0.867188)
    [PHY] Symbol rotation 15/28 => tl 0.000536 (32137,-6393) (0.031250)
    [PHY] Symbol rotation 16/28 => tl 0.000572 (11038,-30852) (0.195313)
    [PHY] Symbol rotation 17/28 => tl 0.000608 (-20788,-25330) (0.359375)
    [PHY] Symbol rotation 18/28 => tl 0.000643 (-32413,4807) (0.523438)
    [PHY] Symbol rotation 19/28 => tl 0.000679 (-12540,30272) (0.687500)
    [PHY] Symbol rotation 20/28 => tl 0.000715 (19519,26318) (0.851562)
    [PHY] Symbol rotation 21/28 => tl 0.000750 (32609,-3212) (0.015625)
    [PHY] Symbol rotation 22/28 => tl 0.000786 (14009,-29622) (0.179688)
    [PHY] Symbol rotation 23/28 => tl 0.000822 (-18205,-27245) (0.343750)
    [PHY] Symbol rotation 24/28 => tl 0.000857 (-32728,1607) (0.507812)
    [PHY] Symbol rotation 25/28 => tl 0.000893 (-15447,28897) (0.671875)
    [PHY] Symbol rotation 26/28 => tl 0.000929 (16845,28105) (0.835938)
    [PHY] Symbol rotation 27/28 => tl 0.000964 (32767,0) (1.000000)
    [PHY] Timeshift symbol rotation 0 => (32767,0) 0.000000
    [PHY] Timeshift symbol rotation 1 => (32721,1742) -0.053178
    [PHY] Timeshift symbol rotation 2 => (32582,3478) -0.106356
    [PHY] Timeshift symbol rotation 3 => (32351,5205) -0.159534
    [PHY] Timeshift symbol rotation 4 => (32028,6917) -0.212712
    [PHY] Timeshift symbol rotation 5 => (31616,8610) -0.265890
    [PHY] Timeshift symbol rotation 6 => (31113,10278) -0.319068
    [PHY] Timeshift symbol rotation 7 => (30523,11918) -0.372246
    [PHY] Timeshift symbol rotation 8 => (29846,13523) -0.425424
    [PHY] Timeshift symbol rotation 9 => (29085,15090) -0.478602
    [PHY] gNB 0 configured
    [NR_MAC] In rrc_mac_config_req_gNB: slot 0 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 1 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 2 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 3 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 4 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 5 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 6 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 7 DL 1 UL 1
    [NR_MAC] In rrc_mac_config_req_gNB: slot 8 DL 0 UL 1
    [NR_MAC] In rrc_mac_config_req_gNB: slot 9 DL 0 UL 1
    [NR_MAC] In rrc_mac_config_req_gNB: slot 10 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 11 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 12 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 13 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 14 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 15 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 16 DL 1 UL 0
    [NR_MAC] In rrc_mac_config_req_gNB: slot 17 DL 1 UL 1
    [NR_MAC] In rrc_mac_config_req_gNB: slot 18 DL 0 UL 1
    [NR_MAC] In rrc_mac_config_req_gNB: slot 19 DL 0 UL 1
    [NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI 0] gNB:OPENAIR NR RRC IN….
    NFAPI MODE:MONOLITHIC
    START MAIN THREADS
    RC.nb_nr_L1_inst:1
    Initializing gNB threads single_thread_flag:1 wait_for_sync:0
    [PHY] Initializing gNB 0 single_thread_flag:1
    [PHY] Initializing gNB 0
    [PHY] Registering with MAC interface module (before 0x559eb64c2b20)
    [PHY] Installing callbacks for IF_Module – UL_indication
    [PHY] Registering with MAC interface module (after 0x559eb64c2b20)
    [PHY] Setting indication lists
    [PHY] [nr-gnb.c] gNB structure allocated
    wait_gNBs()
    Waiting for gNB L1 instances to all get configured … sleeping 50ms (nb_nr_sL1_inst 1)
    gNB L1 are configured
    About to Init RU threads RC.nb_RU:1
    Initializing RU threads
    configuring RU from file
    [LIBCONFIG] RUs.[0]: 33/33 parameters successfully set, (22 to default value)
    Set RU mask to 1
    Creating RC.ru[0]:0x559eb64c5340
    [PHY] RU clock source set as internal
    [PHY] Setting time source to internal
    Setting function for RU 0 to gNodeB_3GPP
    [RU 0] Setting nr_flag 0, nr_band 41, nr_scs_for_raster 1
    [PHY] number of L1 instances 1, number of RU 1, number of CPU cores 12
    [PHY] DJP – delete code above this /home/oai/openairinterface5g_develop/executables/nr-ru.c:1946
    [PHY] Copying frame parms from gNB in RC to gNB 0 in ru 0 and frame_parms in ru
    configuring ru_id 0 (start_rf 0x559eb304d9c0)
    [PHY] Starting ru_thread 0
    [PHY] Initializing RU proc 0 (,synch_to_ext_device),
    [PHY] Starting RU 0 (,synch_to_ext_device),
    [PHY] Initializing frame parms for mu 1, N_RB 106, Ncp 0
    [PHY] Init: N_RB_DL 106, first_carrier_offset 900, nb_prefix_samples 108,nb_prefix_samples0 132
    [PHY] fp->scs=30000
    [PHY] fp->ofdm_symbol_size=1536
    [PHY] fp->nb_prefix_samples0=132
    [PHY] fp->nb_prefix_samples=108
    [PHY] fp->slots_per_subframe=2
    [PHY] fp->samples_per_subframe_wCP=43008
    [PHY] fp->samples_per_frame_wCP=430080
    [PHY] fp->samples_per_subframe=46080
    [PHY] fp->samples_per_frame=460800
    [PHY] fp->dl_CarrierFreq=2593350000
    [PHY] fp->ul_CarrierFreq=2593350000
    [PHY] Channel 0: setting tx_gain offset 6, rx_gain offset 108, tx_freq 2593350000 Hz, rx_freq 2593350000 Hz, tune_offset 0 Hz
    [PHY] Initializing RU signal buffers (if_south local RF) nb_tx 1, nb_rx 1
    [PHY] [INIT] common.txdata[0] = 0x7f1aa4072040 (1844480 bytes,sf_extension 320)
    [PHY] [INIT] common.txdata[0] = 0x7f1aa4072540
    [PHY] nb_tx 1
    [PHY] rxdata_7_5kHz[0] 0x7f1a9d583040 for RU 0
    [PHY] [INIT] common.txdata_BF= 0x7f1a88000b00 (8 bytes)
    [PHY] txdataF_BF[0] 0x7f1aa956c040 for RU 0
    [PHY] rxdataF[0] 0x7f1aa401d040 for RU 0
    [PHY] [INIT] nr_phy_init_RU() ru->num_gNB:1
    [LIBCONFIG] device.recplay: 8/8 parameters successfully set, (8 to default value)
    [LIBCONFIG] device: 1/1 parameters successfully set, (1 to default value)
    [LIBCONFIG] loader: 2/2 parameters successfully set, (2 to default value)
    [LIBCONFIG] loader.oai_device: 2/2 parameters successfully set, (1 to default value)
    shlib_path liboai_device.so
    [PHY] init feptx thread 0
    [LOADER] library liboai_device.so successfully loaded
    [HW] openair0_cfg[0].sdr_addrs == ‘(null)’
    [HW] openair0_cfg[0].clock_source == ‘0’ (internal = 0, external = 1)
    [HW] UHD version 4.2.0.0-0ubuntu1~bionic1 (4.2.0)
    [PHY] init feptx thread 1
    wait RUs
    [PHY] Waiting for RUs to be configured … RC.ru_mask:01
    [INFO] [UHD] linux; GNU C++ version 7.5.0; Boost_106501; UHD_4.2.0.0-0ubuntu1~bionic1
    [HW] Found USRP b200
    [INFO] [B200] Detected Device: B210
    [INFO] [B200] Operating over USB 3.
    [INFO] [B200] Initialize CODEC control…
    [INFO] [B200] Initialize Radio control…
    [INFO] [B200] Performing register loopback test…
    [INFO] [B200] Register loopback test passed
    [INFO] [B200] Performing register loopback test…
    [INFO] [B200] Register loopback test passed
    [INFO] [B200] Asking for clock rate 30.720000 MHz…
    [INFO] [B200] Actually got clock rate 30.720000 MHz.
    [HW] Setting clock source to internal
    [HW] Setting time source to internal
    — Using calibration table: calib_table_b210_38
    [INFO] [B200] Asking for clock rate 46.080000 MHz…
    [INFO] [B200] Actually got clock rate 46.080000 MHz.
    [HW] cal 0: freq 3500000000.000000, offset 44.000000, diff 906650000.000000
    [HW] cal 1: freq 2660000000.000000, offset 49.800000, diff 66650000.000000
    [HW] cal 2: freq 2300000000.000000, offset 51.000000, diff 293350000.000000
    [HW] cal 3: freq 1880000000.000000, offset 53.000000, diff 713350000.000000
    [HW] cal 4: freq 816000000.000000, offset 57.000000, diff 1777350000.000000
    [HW] RX Gain 0 108.000000 (49.800000) => 58.200000 (max 76.000000)
    [HW] USRP TX_GAIN:83.75 gain_range:89.75 tx_gain:6.00
    [HW] Actual master clock: 46.080000MHz…
    [HW] Actual clock source internal…
    [HW] Actual time source internal…
    [HW] RF board max packet size 1916, size for 100µs jitter 4608
    [HW] rx_max_num_samps 1916
    [HW] setting rx channel 0
    [HW] RX Channel 0
    [HW] Actual RX sample rate: 46.080000MSps…
    [HW] Actual RX frequency: 2.593350GHz…
    [HW] Actual RX gain: 58.000000…
    [HW] Actual RX bandwidth: 40.000000M…
    [HW] Actual RX antenna: RX2…
    [HW] TX Channel 0
    [HW] Actual TX sample rate: 46.080000MSps…
    [HW] Actual TX frequency: 2.593350GHz…
    [HW] Actual TX gain: 83.750000…
    [HW] Actual TX bandwidth: 40.000000M…
    [HW] Actual TX antenna: TX/RX…
    [HW] Actual TX packet size: 1916
    [HW] Device timestamp: 2.168541…
    [HW] [RAU] has loaded USRP B200 device.
    setup_RU_buffers: frame_parms = 0x559eb64c8c10
    [PHY] RU 0 Setting N_TA_offset to 600 samples (factor 1.500000, UL Freq 2574270, N_RB 106, mu 1)
    [PHY] Signaling main thread that RU 0 is ready, sl_ahead 6
    waiting for sync (ru_thread,-1/0x559eb3caa2b4,0x559eb4a5b720,0x559eb48b0800)
    RC.ru_mask:00
    [PHY] RUs configured
    ALL RUs READY!
    RC.nb_RU:1
    ALL RUs ready – init gNBs
    Not NFAPI mode – call init_eNB_afterRU()
    [PHY] init_eNB_afterRU() RC.nb_nr_inst:1
    [PHY] RC.nb_nr_CC[inst:0]:0x7f1aa9597010
    [PHY] [gNB 0] phy_init_nr_gNB() About to wait for gNB to be configured
    [LIBCONFIG] loader.dfts: 2/2 parameters successfully set, (1 to default value)
    shlib_path libdfts.so
    [LOADER] library libdfts.so successfully loaded
    [LIBCONFIG] loader.ldpc: 2/2 parameters successfully set, (1 to default value)
    shlib_path libldpc.so
    [LOADER] library libldpc.so successfully loaded
    [PHY] Initialise nr transport
    [PHY] Allocating Transport Channel Buffers for PUCCH 0/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 1/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 2/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 3/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 4/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 5/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 6/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 7/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 8/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 9/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 10/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 11/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 12/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 13/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 14/16
    [PHY] Allocating Transport Channel Buffers for PUCCH 15/16
    [PHY] Allocating Transport Channel Buffers for SRS 0/16
    [PHY] Allocating Transport Channel Buffers for SRS 1/16
    [PHY] Allocating Transport Channel Buffers for SRS 2/16
    [PHY] Allocating Transport Channel Buffers for SRS 3/16
    [PHY] Allocating Transport Channel Buffers for SRS 4/16
    [PHY] Allocating Transport Channel Buffers for SRS 5/16
    [PHY] Allocating Transport Channel Buffers for SRS 6/16
    [PHY] Allocating Transport Channel Buffers for SRS 7/16
    [PHY] Allocating Transport Channel Buffers for SRS 8/16
    [PHY] Allocating Transport Channel Buffers for SRS 9/16
    [PHY] Allocating Transport Channel Buffers for SRS 10/16
    [PHY] Allocating Transport Channel Buffers for SRS 11/16
    [PHY] Allocating Transport Channel Buffers for SRS 12/16
    [PHY] Allocating Transport Channel Buffers for SRS 13/16
    [PHY] Allocating Transport Channel Buffers for SRS 14/16
    [PHY] Allocating Transport Channel Buffers for SRS 15/16
    [PHY] Allocating Transport Channel Buffers for ULSCH 0/8
    [PHY] Allocating Transport Channel Buffers for ULSCH 1/8
    [PHY] Allocating Transport Channel Buffers for ULSCH 2/8
    [PHY] Allocating Transport Channel Buffers for ULSCH 3/8
    [PHY] Allocating Transport Channel Buffers for ULSCH 4/8
    [PHY] Allocating Transport Channel Buffers for ULSCH 5/8
    [PHY] Allocating Transport Channel Buffers for ULSCH 6/8
    [PHY] Allocating Transport Channel Buffers for ULSCH 7/8
    [PHY] Mapping RX ports from 1 RUs to gNB 0
    [PHY] gNB->num_RU:1
    [PHY] Attaching RU 0 antenna 0 to gNB antenna 0
    [PHY] Number of threads requested in config file: 4, Number of threads available on this machine: 12
    create a thread for core -1
    create a thread for core -1
    create a thread for core -1
    create a thread for core -1
    [PHY] Allocating Transport Channel Buffers for DLSCH 0/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 1/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 2/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 3/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 4/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 5/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 6/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 7/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 0/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 1/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 2/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 3/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 4/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 5/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 6/8
    [PHY] Allocating Transport Channel Buffers for DLSCH 7/8
    waiting for sync (L1_stats_thread,-1/0x559eb3caa2b4,0x559eb4a5b720,0x559eb48b0800)
    ALL RUs ready – ALL gNBs ready
    Sending sync to all threads
    About to call end_configmodule() from main() /home/oai/openairinterface5g_develop/executables/nr-softmodem.c:790
    Called end_configmodule() from main() /home/oai/openairinterface5g_develop/executables/nr-softmodem.c:795
    got sync (ru_thread)
    got sync (L1_stats_thread)
    TYPE TO TERMINATE
    Entering ITTI signals handler
    [PHY] RU 0 rf device ready
    [PHY] RU 0 RF started
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    [NR_MAC] Frame.Slot 128.0

    [NR_MAC] Frame.Slot 256.0

    [NR_MAC] Frame.Slot 384.0
    [NR_MAC] Frame.Slot 512.0

    [NR_MAC] Frame.Slot 640.0

    [NR_PHY] [gNB 0][RAPROC] Frame 699, slot 19 Initiating RA procedure with preamble 62, energy 23.2 dB (I0 103, thres 120), delay 21 start symbol 0 freq index 0
    [NR_PHY] [gNB 0][RAPROC] Frame 699, slot 19 Initiating RA procedure with preamble 10, energy 24.0 dB (I0 118, thres 120), delay 0 start symbol 4 freq index 0
    [MAC] UL_info[Frame 699, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:699/19
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 699 Activating Msg2 generation in frame 700, slot 7 using RA rnti 10b SSB, new rnti 50d9 index 0 RA index 0
    [MAC] UL_info[Frame 700, Slot 0] Calling initiate_ra_proc RACH:SFN/SLOT:699/19
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 699 Activating Msg2 generation in frame 700, slot 7 using RA rnti 10b SSB, new rnti c8ca index 0 RA index 1
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 700, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
    [NR_MAC] [gNB 0][RAPROC] Frame 700, Subframe 7: rnti 50d9 RA state 2
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 700, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
    [NR_MAC] [gNB 0][RAPROC] Frame 700, Subframe 7: rnti c8ca RA state 2
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] handle harq for rnti 50d9, in RA process
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] handle harq for rnti c8ca, in RA process
    [NR_MAC] [gNB 0][RAPROC] Frame 701, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (701,17)
    [NR_MAC] [gNB 0][RAPROC] Frame 701, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (701,17)
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] handle harq for rnti 50d9, in RA process
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] handle harq for rnti c8ca, in RA process
    [NR_MAC] [gNB 0][RAPROC] Frame 702, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (702,17)
    [NR_MAC] [gNB 0][RAPROC] Frame 702, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (702,17)
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] handle harq for rnti 50d9, in RA process
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] handle harq for rnti c8ca, in RA process
    [NR_MAC] [gNB 0][RAPROC] Frame 703, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (703,17)
    [NR_MAC] [gNB 0][RAPROC] Frame 703, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (703,17)
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] to remove in mac rnti_to_remove[0] = 0x50d9
    [NR_MAC] Search for not existing rnti (ignore for RA): 50d9
    [NR_MAC] handle harq for rnti 50d9, in RA process
    [NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x50d9 in PUSCH
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] to remove in mac rnti_to_remove[1] = 0xc8ca
    [NR_MAC] Search for not existing rnti (ignore for RA): c8ca
    [NR_MAC] handle harq for rnti c8ca, in RA process
    [NR_MAC] handle_nr_ul_harq(): unknown RNTI 0xc8ca in PUSCH
    [NR_PHY] to remove rnti 0x50d9
    [NR_PHY] to remove rnti 0xc8ca
    [NR_PHY] to remove rnti_to_remove_count=2, up_removed=2 down_removed=0 pucch_removed=0
    [NR_MAC] Frame.Slot 768.0

    1. Thanks for sharing this,
      Are you sure the RACH is coming from the UEs ?
      To verify, if the mobiles are of (or airplane mode), there are no detected RACH ?
      Wrong RACH can be detected if the Rx amplifier gain is high or if other networks operate on same band.

      If the RACH is coming from Xiaomi and Samsung, this is very interesting, as these brands usually don’t work (no RACH)

      1. Hi Laurent,
        My problem is exactly like previous comment. In my case most of the errors are about “RNTI”, for example in gNB output we have:

        warning: [NR_MAC] Search for not existing RNTI (ignore for RA)
        Error: [NR_MAC] handle_nr_ul_harq(): unknown RNTI 0xc8ca in PUSCH

        According to your response to the previous comment, I changed TX or RX gain and test with different bands, but the issue of the UE connection remained. I can not see any PRACH message. May this problem is because of USIM parameters?

        1. Hi Hassan,
          RACH is not related to any SIM data, expect the decision to send a RACH (for example, the UE should not send a RACH to a cell in a PLMN that is in the forbidden list)
          The SIM security data will be used much after the RACH
          Have you tried first with rfsim to verify the RAN+core is working fine ?

      1. I just tested n7 using srsRAN and that also worked.

        I also have used the same device + SIM to see a live commercial 5G SA cell on n78 so the issue in this case is most likley either one or more of the TDD 15khz item, the need for a better GPSDO or possibly I need a better antenna for the band.

        Other config notes:

        bands: 1, 3, 7, 28
        core: Open5GC
        SIM: sysmoISIM-SJA2
        ROM: Color OS 12.1, Android 12
        Model: CPH2195

    1. Chris, would you mind sharing your srsran rr.conf settings for band 1 and 28? Specifically what ARFCN and CORESET values are you using? I’d also like to take a look at your enb.conf as well. Thank you!

  4. Hi Laurent,
    following setup works, you can add this to your table:
    Device Name: OnePlus Nord N10 5G
    Processor: Qualcomm Snapdragon 690
    Model: BE2029
    Android version: 11
    Band: n78
    plmn: 208/99
    gNB: OAI/develop
    5GC: OAI/develop
    sim-type: open-cells
    comment: works fine, finds network fast.

  5. Hi Laurent,
    I executed OAI gnb (no core network installed)
    $ sudo ./nr-softmodem -O ../../../targets/PROJECTS/GENERIC-NR-5GC/CONF/gnb.sa.band78.fr1.106PRB.usrpb210.conf –sa -E –continuous-tx
    The following message is displayed

    Entering ITTI signals handler
    [PHY] RU 0 rf device ready
    [PHY] RU 0 RF started
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    sleep…
    [NR_MAC] Frame.Slot 128.0
    [NR_MAC] Frame.Slot 256.0
    [NR_MAC] Frame.Slot 384.0
    [NR_MAC] Frame.Slot 512.0

    I think gnb is running and usrp-b210 has lights on
    But when I opened nemo handy and Netmonster with Samsung s21, it didn’t detect this gnb.
    may I ask if this is normal?
    Or do I need to change the phone to re-detect?
    thanks!

    1. Hi,
      If your phone is supporting band 78, it should detect the gNB, regardless the SIM.
      But, many phones have internal restrictions
      It seems Samsung using Snapdragon works, but not the Samsung modem chip based.
      We don’t know where is the issue
      Regards,

      1. Hi Laurent,

        I also get similar message with the friend above. The UE can detect other 5G networks but not the OAI.

        The problem I think is that I cannot establish communication with the 5GS AMF.
        I am not sure why NGAP communication is not initiated between the two.
        I add the IP settings correctly but nothing.

        For the OAI gNB, I am using the latest develop branch with the b210 106 RB config file.
        For the 5GS I installed it.. Did not build it from sources.
        Any sugestions?

        Thanks,
        Micha

        1. Hi,
          To install OAI, this tutorial is very good:
          https://gitlab.eurecom.fr/oai/openairinterface5g/-/blob/develop/doc/NR_SA_CN5G_gNB_USRP_COTS_UE_Tutorial.md

          For your question:
          start wireshark, select ‘any’ interface and set the filter to “sctp”
          start the gNB
          you should see the NGAP messages between the gNB and the 5GC
          if you don’t see the decoded packets, you have to enable the 5G protocols in wireshark

          Later, when you can observe NGAP setup success, connect the UE, that will trace also very clearly in wireshark if it starts to establish a connection to the core network

          Regards,
          Laurent

  6. Hi,I also use OnePlus Nord N10 5G
    Android version: 11
    Model: BE2028,n78 is not supported
    gNB: OAI/develop with USRP X310
    5GC: OAI/develop
    Band: n41
    plmn: 001/01

    After PDUSessionSetupResponse,I got:
    [NR_PHY] [gNB 0][RAPROC] Frame 367, slot 19 Initiating RA procedure with preamble 21, energy 54.9 dB (I0 241, thres 120), delay 3 start symbol 0 freq index 0
    [MAC] UL_info[Frame 367, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:367/19
    [NR_MAC] Search for not existing rnti (ignore for RA): 932a
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 367 Activating Msg2 generation in frame 368, slot 7 using RA rnti 10b SSB, new rnti 932a index 0 RA index 0
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 368, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
    [NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 368 k2 7 Msg3_tda_id 2
    [NR_MAC] [gNB 0][RAPROC] Frame 368, Subframe 7: rnti 932a RA state 2
    [NR_MAC] Search for not existing rnti (ignore for RA): 932a
    [NR_MAC] Adding UE with rnti 0x932a
    [NR_MAC] [gNB 0][RAPROC] PUSCH with TC_RNTI 0x932a received correctly, adding UE MAC Context RNTI 0x932a
    [NR_MAC] [RAPROC] RA-Msg3 received (sdu_lenP 7)
    [NR_MAC] Received UL_SCH_LCID_C_RNTI with C-RNTI 0xc9db
    [RRC] Frame 368, Subframe 17: UE c9db UL failure reset, deactivating timer
    [NR_MAC] Activating scheduling RA-Msg4 for TC_RNTI 0xc9db (state 4)
    [NR_MAC] Unexpected ULSCH HARQ PID 0 (have -1) for RNTI 0x932a (ignore this warning for RA)
    [NR_MAC] Generate msg4, rnti: c9db
    [RLC] remove UE 932a
    [RLC] /home/oai/workspace/develop/openairinterface5g/openair2/LAYER2/nr_rlc/nr_rlc_ue_manager.c:122:nr_rlc_manager_remove_ue: warning: ue 932a not found
    [NR_MAC] Remove NR rnti 0x932a
    [NR_MAC] to remove in mac rnti_to_remove[0] = 0x932a
    [NR_MAC] [gNB 0] [RAPROC] CC_id 0 Frame 369, slotP 3: Generating RA-Msg4 DCI, state 4
    [NR_MAC] (ue rnti 0xc9db) CBRA procedure succeeded!
    [NR_MAC] Adding SchedulingRequestconfig
    [NR_MAC] Adding BSR config
    [NR_MAC] Adding TAG config
    [NR_MAC] Adding PHR config
    [NR_MAC] Switching to DL-BWP 0
    [NR_MAC] Switching to UL-BWP 0
    [NR_PHY] to remove rnti 0x932a
    [NR_PHY] to remove rnti_to_remove_count=1, up_removed=1 down_removed=0 pucch_removed=0
    [NR_MAC] 369. 4 UE c9db Scheduling BWP switch from DL_BWP 0 to 1 and from UL_BWP 0 to 1
    [NR_MAC] Adding SchedulingRequestconfig
    [NR_MAC] Adding BSR config
    [NR_MAC] Adding TAG config
    [NR_MAC] Adding PHR config
    [NR_RRC] send RRC_DCCH_DATA_REQ to PDCP
    [NR_MAC] Activating RRC processing timer for UE c9db with 16 ms
    [NR_MAC] expected HARQ pid 14 feedback at 369. 8, but is at 369. 7 instead (HARQ feedback is in the future)
    [NR_MAC] Oh no! Could not find a harq in handle_nr_uci_pucch_0_1!
    [NR_MAC] (371.2) De-activating RRC processing timer for UE c9db
    [NR_MAC] Modified rnti c9db with CellGroup
    [NR_MAC] Adding SchedulingRequestconfig
    [NR_MAC] Adding BSR config
    [NR_MAC] Adding TAG config
    [NR_MAC] Adding PHR config
    [NR_MAC] Switching to DL-BWP 1
    [NR_MAC] Switching to UL-BWP 1
    [NR_MAC] Detected UL Failure on PUSCH after 10 PUSCH DTX, stopping scheduling
    [RLC] max RETX reached on SRB 1
    [NR_PHY] [gNB 0][RAPROC] Frame 375, slot 19 Initiating RA procedure with preamble 12, energy 54.0 dB (I0 239, thres 120), delay 3 start symbol 0 freq index 0
    [MAC] UL_info[Frame 375, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:375/19
    [NR_MAC] Search for not existing rnti (ignore for RA): 9b6d
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 375 Activating Msg2 generation in frame 376, slot 7 using RA rnti 10b SSB, new rnti 9b6d index 0 RA index 0
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 376, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
    [NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 376 k2 7 Msg3_tda_id 2
    [NR_MAC] [gNB 0][RAPROC] Frame 376, Subframe 7: rnti 9b6d RA state 2
    [NR_MAC] Search for not existing rnti (ignore for RA): 9b6d
    [NR_MAC] Adding UE with rnti 0x9b6d
    [NR_MAC] [gNB 0][RAPROC] PUSCH with TC_RNTI 0x9b6d received correctly, adding UE MAC Context RNTI 0x9b6d
    [NR_MAC] [RAPROC] RA-Msg3 received (sdu_lenP 7)
    [NR_MAC] Received UL_SCH_LCID_C_RNTI with C-RNTI 0xc9db
    [RRC] Frame 376, Subframe 17: UE c9db UL failure reset, deactivating timer
    [NR_MAC] Activating scheduling RA-Msg4 for TC_RNTI 0xc9db (state 4)
    [NR_MAC] Unexpected ULSCH HARQ PID 0 (have -1) for RNTI 0x9b6d (ignore this warning for RA)
    [NR_MAC] Generate msg4, rnti: c9db
    [RLC] remove UE 9b6d
    [RLC] /home/oai/workspace/develop/openairinterface5g/openair2/LAYER2/nr_rlc/nr_rlc_ue_manager.c:122:nr_rlc_manager_remove_ue: warning: ue 9b6d not found
    [NR_MAC] Remove NR rnti 0x9b6d
    [NR_MAC] to remove in mac rnti_to_remove[0] = 0x9b6d
    [NR_MAC] [gNB 0] [RAPROC] CC_id 0 Frame 377, slotP 3: Generating RA-Msg4 DCI, state 4
    [NR_MAC] (ue rnti 0xc9db) CBRA procedure succeeded!
    [NR_MAC] Adding SchedulingRequestconfig
    [NR_MAC] Adding BSR config
    [NR_MAC] Adding TAG config
    [NR_MAC] Adding PHR config
    [NR_MAC] Switching to DL-BWP 0
    [NR_MAC] Switching to UL-BWP 0
    [NR_PHY] to remove rnti 0x9b6d
    [NR_PHY] to remove rnti_to_remove_count=1, up_removed=1 down_removed=0 pucch_removed=0
    [NR_MAC] 377. 4 UE c9db Scheduling BWP switch from DL_BWP 0 to 1 and from UL_BWP 0 to 1
    [NR_MAC] Adding SchedulingRequestconfig
    [NR_MAC] Adding BSR config
    [NR_MAC] Adding TAG config
    [NR_MAC] Adding PHR config
    [NR_RRC] send RRC_DCCH_DATA_REQ to PDCP
    [NR_MAC] Activating RRC processing timer for UE c9db with 16 ms
    [NR_MAC] expected HARQ pid 1 feedback at 377. 8, but is at 377. 7 instead (HARQ feedback is in the future)
    [NR_MAC] Oh no! Could not find a harq in handle_nr_uci_pucch_0_1!
    [NR_MAC] (379.2) De-activating RRC processing timer for UE c9db
    [NR_MAC] Modified rnti c9db with CellGroup
    [NR_MAC] Adding SchedulingRequestconfig
    [NR_MAC] Adding BSR config
    [NR_MAC] Adding TAG config
    [NR_MAC] Adding PHR config
    [NR_MAC] Switching to DL-BWP 1
    [NR_MAC] Switching to UL-BWP 1
    [NR_MAC] Detected UL Failure on PUSCH after 10 PUSCH DTX, stopping scheduling
    [NR_MAC] Detected UL Failure on PUSCH after 11 PUSCH DTX, stopping scheduling
    [RLC] max RETX reached on SRB 1
    [NR_MAC] Frame.Slot 384.0
    UE RNTI c9db (1) PH 42 dB PCMAX 11 dBm, average RSRP 0 (0 meas)
    UE c9db: CQI 0, RI 1, PMI (0,0)
    UE c9db: dlsch_rounds 271/15/7/6, dlsch_errors 5, pucch0_DTX 27, BLER 0.13051 MCS 7
    UE c9db: dlsch_total_bytes 104314
    UE c9db: ulsch_rounds 1232/305/194/154, ulsch_DTX 553, ulsch_errors 144, BLER 0.76663 MCS 6
    UE c9db: ulsch_total_bytes_scheduled 182101, ulsch_total_bytes_received 91341
    UE c9db: LCID 1: 21785 bytes TX
    UE c9db: LCID 4: 42154 bytes TX
    UE c9db: LCID 4: 27731 bytes RX

    [NR_PHY] [gNB 0][RAPROC] Frame 409, slot 19 Initiating RA procedure with preamble 48, energy 47.8 dB (I0 217, thres 120), delay 2 start symbol 0 freq index 0
    [MAC] UL_info[Frame 409, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:409/19
    [NR_MAC] Search for not existing rnti (ignore for RA): e08a
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 409 Activating Msg2 generation in frame 410, slot 7 using RA rnti 10b SSB, new rnti e08a index 0 RA index 0
    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 410, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
    [NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 410 k2 7 Msg3_tda_id 2
    [NR_MAC] [gNB 0][RAPROC] Frame 410, Subframe 7: rnti e08a RA state 2
    [NR_MAC] Search for not existing rnti (ignore for RA): e08a
    [NR_MAC] Adding UE with rnti 0xe08a
    [NR_MAC] [gNB 0][RAPROC] PUSCH with TC_RNTI 0xe08a received correctly, adding UE MAC Context RNTI 0xe08a
    [NR_MAC] [RAPROC] RA-Msg3 received (sdu_lenP 7)
    [RLC] activated srb0 for UE with RNTI 0xe08a
    [MAC] [RAPROC] Received SDU for CCCH length 6 for UE e08a
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
    [NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
    [NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
    [NR_RRC] SRS configured with 1 ports
    [NR_RRC] SRS configured with 1 ports
    [NR_RRC] SRS configured with 1 ports
    [NR_MAC] Activating scheduling RA-Msg4 for TC_RNTI 0xe08a (state 4)
    [NR_MAC] Unexpected ULSCH HARQ PID 0 (have -1) for RNTI 0xe08a (ignore this warning for RA)
    [RRC] initial UL RRC message nr_cellid 0 does not match RRC’s 12345678
    [NR_RRC] Decoding CCCH: RNTI e08a, inst 0, payload_size 6
    [NR_RRC] receive rrcReestablishmentRequest message
    [NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI e08a] NR_RRCReestablishmentRequest cause Other Failure
    [NR_RRC] c_rnti is c9db
    [NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI e08a] [RAPROC] Logical Channel DL-DCCH, Generating NR_RRCReestablishment (bytes 2)

    Assertion (0) failed!
    In dl_rrc_message() /home/oai/workspace/develop/openairinterface5g/openair2/LAYER2/NR_MAC_gNB/mac_rrc_dl_handler.c:57
    rrcReject not implemented yet

    Exiting execution
    Aborted

    1. Hi,
      You reach a known bug around reestablishment procedure because your mobile try multiple re-connections. People try to fix it.

      I suggest to check the dialog with the 5GC to see if it started (with wireshark) because the UE reached “CBRA procedure succeeded” so the random access is successful.
      You need to find out why the procedure doesn’t continue after: either radio link is poor or radio paramters are wrong or there is a protocol problem with the 5GC

      Regards,
      Laurent

    2. Oh,Maybe the PC performance is insufficient. After I reduced the value of BWP1, this problem was solved.
      Anyway, thank you all very much. This website has helped me a lot and I am very grateful!!!

  7. Hi Laurent,

    Adding some more UEs to the list:

    1. Model: Pixel 6a

    Type: smartp

    firmware: Android 13 (GrapheneOS)

    frequency bands: n41 and n78

    plmn: 001-01

    gNB: OAI/develop

    5GC: open5gs

    sim-type: open-cells

    comment: works

    2. Model: Xperia 10 IV

    Type: smartp

    firmware: Android 12 (Stock)

    frequency bands: n41 and n78

    plmn: 001-01

    gNB: OAI/develop

    5GC: open5gs

    sim-type: open-cells

    comment: works

    1. Hi Laurent and Ahan,

      I’m also using OAI gNB(plmn 00101, band 78) and Open5GS as my core network, but I found Xperia 10 dosen’t see the network, can you give me some suggestion here? Is there anything I missed?

      Thanks!

  8. Hi Everyone,
    I am using Google Pixel 6a for the connection with OAI gNB 2023.w10 branch, OAI CN v1.5.
    I have used PLMN 001/01.
    My pixel is not getting attached to the CN.

    Can you please let me know what can be the possible problems. I am using N320 usrp with UHD 4.3.0.0.

    1. Dear Bharat,
      Pixel works fine.
      I suggest you start by rfsim and OAI UE to be sure the logic is in place
      Regards,
      Laurent

  9. Hi Laurent,

    I tried to connect Huawei P40 Pro using USRP B210. I was able to see the registration at the AMF but the UE didn’t get an IP address. At the same time, I got the following error log on the terminal of the gNB

    [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 968, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
    [NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 968 k2 7 Msg3_tda_id 3
    [NR_MAC] [gNB 0][RAPROC] Frame 968, Subframe 7: rnti 0187 RA state 2
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] handle harq for rnti 0187, in RA process
    [NR_MAC] [gNB 0][RAPROC] Frame 969, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (969,17)
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] handle harq for rnti 0187, in RA process
    [NR_MAC] [gNB 0][RAPROC] Frame 970, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (970,17)
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] handle harq for rnti 0187, in RA process
    [NR_MAC] [gNB 0][RAPROC] Frame 971, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (971,17)
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] Random Access 2 failed at state 2 (Reached msg3 max harq rounds)
    [NR_MAC] to remove in mac rnti_to_remove[0] = 0x0187
    [NR_MAC] Search for not existing rnti (ignore for RA): 0187
    [NR_MAC] handle harq for rnti 0187, in RA process
    [NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x0187 in PUSCH

    Thank you for your help!

    1. Hi,
      The UE probably decodes the SIB, then emit the RACH (or Msg1)
      The gNB receives MSg1/RACH, emits Msg2, but never get Msg3.
      Unfortunately, there can be multiple causes.
      First test: verify the gNB doesn’t decode Msg1 when the UE is shutdown (or in airplane mode)

      1. First of all thank you Laurent for your response!

        I checked if the gNB again and I found that on the terminal we have this log even if the UE is shutdown.

        [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 968, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
        [NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 968 k2 7 Msg3_tda_id 3
        [NR_MAC] [gNB 0][RAPROC] Frame 968, Subframe 7: rnti 0187 RA state 2
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] handle harq for rnti 0187, in RA process
        [NR_MAC] [gNB 0][RAPROC] Frame 969, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (969,17)
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] handle harq for rnti 0187, in RA process
        [NR_MAC] [gNB 0][RAPROC] Frame 970, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (970,17)
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] handle harq for rnti 0187, in RA process
        [NR_MAC] [gNB 0][RAPROC] Frame 971, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (971,17)
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] Random Access 2 failed at state 2 (Reached msg3 max harq rounds)
        [NR_MAC] to remove in mac rnti_to_remove[0] = 0x0187
        [NR_MAC] Search for not existing rnti (ignore for RA): 0187
        [NR_MAC] handle harq for rnti 0187, in RA process
        [NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x0187 in PUSCH

        1. Dear Raf,
          So, it is the way to tune the Rx gain in gNB configuration.
          You should get a few false RACH detections, a rate near 1 false detection by 1 second is a decent value.
          You can even get down to 1 false detection per minute, that reduces a bit the covered range, but we don’t care at this stage.
          So, when you have tuned the Rx gain, when you turn on the UE (airplane mode off), you should see a serie of RACH trials (if it fails) or a radio attach going further (Msg4, …)
          Regards,
          Laurent

          1. Hello Laurent,

            My issue like with Raf, but I use rfsim with oai ue, oai cn. I run the oai gnb based in docker containers with ubuntu OS. The UE can’t access, hoped for your help for this matter.
            The gnb command: sudo ./nr-softmodem -O ../../../targets/PROJECTS/GENERIC-NR-5GC/CONF/gnb.sa.band78.fr1.106PRB.usrpb210.conf –rfsim –sa –rfsimulator.options chanmod –rfsimulator.modelname AWGN -E

            The oai ue command:
            sudo ./nr-uesoftmodem -r 106 –numerology 1 –band 78 -C 3619200000 –rfsim –sa –nokrnmod -E -O ../../../targets/PROJECTS/GENERIC-NR-5GC/CONF/ue.conf

            And the error log of gnb as below:

            [MAC] UL_info[Frame 685, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:685/19
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 685 Activating Msg2 generation in frame 686, slot 7 using RA rnti 10b SSB, new rnti 5400 index 0 RA index 0
            [NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 686, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
            [NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 686 k2 7 Msg3_tda_id 3
            [NR_MAC] [gNB 0][RAPROC] Frame 686, Subframe 7: rnti 5400 RA state 2
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] handle harq for rnti 5400, in RA process
            [NR_MAC] [gNB 0][RAPROC] Frame 687, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (687,17)
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] handle harq for rnti 5400, in RA process
            [NR_MAC] [gNB 0][RAPROC] Frame 688, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (688,17)
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] handle harq for rnti 5400, in RA process
            [NR_MAC] [gNB 0][RAPROC] Frame 689, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (689,17)
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] Random Access 0 failed at state 2 (Reached msg3 max harq rounds)
            [NR_MAC] Search for not existing rnti (ignore for RA): 5400
            [NR_MAC] handle harq for rnti 5400, in RA process
            [NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x5400 in PUSCH

            Regards,
            Bergen

          2. The gNB doesn’t receive Msg3 (Msg1 is the RACH, Msg2 is the RAR (random access response)), Msg3 and Msg4 are the end of the random access procedure

  10. Hi Laurent,

    I’m not sure if you’ve had this happen to you. But, the Pixel 6 and above seem to get disconnected after about 5-10 minutes. The Pixel 4a/5/5a can stay connected for hours. I haven’t had much time to look into it, just sharing my observations.

    That said, adding a few more UEs.

    1. Model: Motorola Edge 2022 (Mediatek)
    Type: smartp
    firmware: Android 12
    frequency bands: n41 and n78
    plmn: 001-01
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works

    2. Model: Motorola Edge+ 2022 (Qualcomm)
    Type: smartp
    firmware: Android 12
    frequency bands: n41 and n78
    plmn: 001-01
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works

    1. Hi Ahan,

      I have tried Motorola Edge+ 2022(Qualcomm) with OAI gNB(band 78 and plmn, USRP B210) and Open5gs, the Motorola finds the network, but from the gNB side I didn’t see any message from the Motorola… Is there any thing/settings I missed?

      Thanks!

      1. Hi Kai,

        Dial the *#*#4636#*#* code on the Motorola and switch to NR only, and make sure that the APN is set up and enabled (in Network Settings). Also, disable VoLTE/4G calling. It should initiate RA with the gNB in a few minutes (for the first time).

        If it still fails to attach (after a few tries), you can try connecting your B210 to an external clock source.

        Hope this helps!

        1. Hi,
          We just tried to connect Motorola Edge Plus but we have problem, UE finds network (5G NR) only when VoLTE is active (enabled in menu) but then registration fails due to lack of VoLTE activated on RAN side.
          When VoLTE is disabled, UE not finding OAI network 5G NR) also with manual search 🙁

          1. Dear Kamil,

            My note on this is the firmware is incoherent and doesn’t comply to 3GPP+GSMA specifications.

            Have you tried PLMN 001/01 ?

            I will try to make a tutorial to install OAI RAN + OAI core + Asterisk, so VoXXX will work.

            It is quite easy, using the good tutorial in OAI/doc directory to setup 5GC+RAN+UE+SIM, only install Asterisk to add and some configuration to make.

            Regards,
            Laurent

  11. Hi Laurent,
    following setup works fine:
    Model: SIMCom SIM8262E-M2
    Processor: Qualcomm Snapdragon X62
    Firmware version: 2212B03V03X62M44A-M2
    Band: n78
    PLMN: 208/99
    gNB: OAI/develop (wk40/22 but also newer versions)
    5GC: OAI/develop
    sim-type: open-cells
    comment: trigger PDU-Session establishment with at+netopen

  12. Hi Laurent,

    Don’t know why the newlines are disappered. Posting it again to see if layouts better.

    Thank you for maintaining these valuable info.

    following setup works fine: Model: Oppo Reno 5G
    Processor: Snapdragon 765G
    Firmware version: Andriod V11.1
    Band: n78 PLMN: 001/01
    gNB: OAI/develop (2023.w10b but also older versions), USRP B210, SA
    5GC: Open5GS/main, c0a61fb71, build from source
    sim-type: Not sure

    comment: For UE, VoLTE Call should be enabled and 5G Network Mode should be SA+NSA even the gNB and 5GC are both in SA mode. The 5G Network Mode can be found in developer setting. It seems like it does not work with PLMN other than 00101.
    Tested NOT work with 00102, 00201, 20893.

    Once the UE is registered, it has access to the WLAN. And the connection failed within 3 minutes, due to some paging error that I am not familiar with. The UE does send some APN(or DNN) other than “internet”, which triggers warnings in Open5GS log. But it does not stop it from registration and connecting to WLAN.

  13. Succesfully connected the Quectel RM520N-GL module and Industrial 5G router: Teltonika RUTX50

      1. Some details that i didn’t post earlier:

        –For RUTX50:

        Firmware version: RUTX_R_00.07.04.1
        Model: Quectel RG501Q-EU
        Internal modem firmware version: RG501QEUAAR12A07M4G_04.001.04.001

        — For the Quectel RM520N-GL
        Revision: RM520NGLAAR01A06M4G

        For both devuces i used opencell sim cards with PLMN 00101

        Band N78

        OAI SA gNB: (git log: commit 6022fe5acd1943d104f68717b762a56d6a128740 (HEAD -> develop, tag: 2023.w16, origin/develop))

        OAI SA Core: (git git log: commit 52a1be68ea3707e4bfcdc16b8a49657933129aca (HEAD -> master, tag: 2023.w04b, origin/master, origin/HEAD))

        Hope it helps!

        1. Dear Pavlos,
          Thanks for sharing, i will update the table.
          I think it will help people, no doubts.
          I will also add soon a tutorial to add IMS server because a lot of phones need IMS DNN/APN and to register for voice over IP.
          Regards,
          Laurent

  14. Hi,
    i want to confirm that we successfully using Samsung S23 with market SW to connect with OAI (2023.w19 and fresher) with new OAI-CN iteration (IMS included).
    We found that it’s more stable than Motorola Edge 30 Neo and Sony Xperia IV and results of TCP TP we achieved is around 250/270 Mbit/s.

    PLMN 00101
    BW up to 80MHz
    VoLTE enabled.
    sysmocom sim card with disabled 5G security calculations on simcard
    —-
    ./pySim-shell.py -p0
    verify_adm
    select MF
    select ADF.USIM
    select EF.UST
    ust_service_deactivate 124

  15. We can confirm that Quectel RM502Q-AE connect with OAI (2023.w19 and fresher) with new OAI-CN iteration (IMS included).

    PLMN 00101
    BW up to 80MHz
    sysmocom sim card

  16. Hi Laurent,

    Adding some more modems to the list.

    1. Model: Sierra Wireless EM9291
    Type: M.2
    firmware: All (Generic)
    frequency bands: n41 and n78
    plmn: 001-01/All
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works with generic firmware.

    2. Model: Telit FN990A40
    Type: M.2
    firmware: All
    frequency bands: n41 and n78
    plmn: 001-01/All
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works with generic firmware.

    3. Model: Telit FN990A28
    Type: M.2
    firmware: All
    frequency bands: n41 and n78
    plmn: 001-01/All
    gNB: OAI/develop
    5GC: open5gs
    sim-type: open-cells
    comment: works with generic firmware.

    Note: All 3 modems work well with ModemManager. AT commands are not needed for establishing PDU sessions.

  17. Hi Laurent,
    Adding one more modem to the list.
    Model: SIM8200EA-M2
    Type: M.2
    Revision: SIM8200M44A-M2_B02V05_201201
    frequency bands: n78
    plmn: 208/01
    gNB: OAI/develop
    5GC: OAI CN
    sim-type: open-cells
    Comment: initial connection seems low, no success with 001/01. AT commands: trigger PDU-Session establishment with at+netopen

    1. Thanks,
      I add it
      I think some people managed to use SIM8200EA.
      Like you, we had one and we gave up to use it.
      I will email you the discussion with the supplier
      Regards

  18. Hi Laurent,

    Does the SIM card support other authentication algorithms besides Milenage? For example, XOR. I’d like to use it for testing.

    1. Dear Max,
      No, sorry, we do only milenage.
      We actively look for a true 5G supplier: TUAK instead of Milenage and IMSI concealment, but no success until now.
      Regards,
      Laurent

  19. Dear all,
    was somebody able to connect a Nordic nRF9160 based UE over LTE M1 to an OAI 2.0.0 eNB (SDR: B210)?
    Best regards,
    Peter

  20. Dear Laurent,

    Did you ever tested a smartphone on the band n77 ?

    I need to use this frequency band and I don’t know which device to use .

    Regards

  21. Hello all,
    Reporting a success with Telit FN980, OAIdevelop, basically everything according to the actual (10/2023) OAI COTS UE guide. Works ok with both N310 and b210 USRP. Except the AT commands,… I use qmicli to control the modem.

    Few catches to be shared.
    – An AT command to set up/save the APN setting must always be issued, even if no AT commands are used to control the modem otherwise.
    -wwan0 has to be set to rawIP before connecting
    -the modem has to be kept offline/flight mode whenever not connected properly, since its own uncontrolled attempts to access the network can (and most probably will) crash your gNB.
    -the time between turning off the flight mode and attempting to connect matters. Too low and the modem will not properly smell the network before connecting, so the connection fails on “no-service”. Too high and the modem tries to register itself even without being ordered, and the subsequent “qmicli –wds-start-network…” command crashes the gnb. 4 seconds sleep works for me.
    -also, the core is better to be just freshly started before the connect attempt.

    My guess is that all the upper problems have something to do with probably incomplete implementation of “reconnect” procedures in OAI. So if anyone (gNB, modem, or even core) thinks that the modem has already been registered/seen before, the registration/connect procedure gets slightly different than what works, and either the modem just do not connect or even the gNB crashes.

    Regards
    Jan

  22. Dear Laurent,

    I’m struggling to connect Samsung S23+, Pixel 7 Pro, and HUAWEI P40 Pro to USRP X310 with gNB of OAI 2023_w37, and all trials have been failed.

    So I post the questions on connecting COTS UE to USRP. I’m not sure that is it proper to post question here, but I’ve got stucked more than a week and there is no one to help me. If this question is not appropriate, I’ll delete it myself.

    My question: What configurations are used to connect COTS UE in general and how can I debug the problem? (Do you use GPSDO or specialized antenna?)

    Tested bands: 7, 41, 77, 78

    My situation: I’ve got stucked in random access procedure. Pixel 7 Pro and Samsung s23+ hardly try RACH to gNB and I could hardly see msg3 procedure. P40 Pro is better, I could see msg4 procedure, but also msg4 fails. I guess this is not the problem of RF, since I find msg4 failure in band7, which I tested well with srsLTE.

    Best regards,
    Goodsol.

    1. Hi,

      As long as you see a rach, the UE decided to connect, so your problem is not directly related to this page focus for mow.

      Let’s discuss anyway:
      your Rx and Tx gains are probably not good, or
      the antennas very badly tuned for the frequency you use.

      GPDDO: i don’t think you need it

  23. Hi,

    with your suggestions, I focus on band 41, which also used in srsLTE.

    I tested this band with my antenna in srsLTE, and find that connection was successful.

    However, still openairtnteface5G does not work..

    RUs = (
    {
    local_rf = “yes”
    nb_tx = 2
    nb_rx = 2
    att_tx = 0
    att_rx = 0;
    bands = [41];
    max_pdschReferenceSignalPower = -27;
    max_rxgain = 75;
    sf_extension = 0;
    eNB_instances = [0];
    #beamforming 1×4 matrix:
    bf_weights = [0x00007fff, 0x0000, 0x0000, 0x0000];
    clock_src = “internal”;
    }
    );

    Here’s my setting, and when there is RACH, soon I can see Detected UL failure and the connection fails.

Leave a Reply

Your email address will not be published. Required fields are marked *