This page groups reported tests in 5G SA open source systems with commercial UEs
Please comment on this page, the moderator will integrate your input in the page
Starting point
A UICC, with Milenage authentication, HSS/UDR with same data: IMSI, Ki, OPc
The DNN is to set in the phone, according to the DNN in the 5GC
All UEs should work with any USIM, any PLMN, any UE HW supported bands, see Ericsson paper:
https://www.ericsson.com/en/blog/2020/1/5g-security-sim-card
These Rel 99+ USIMs can be used to access every generation of mobile networks, including 5G. Such backward and forward compatibility is achieved by the carefully designed offloading of some computations and storage to mobile phones.
It is E/// above document and 3GPP standard: any card should work, except the pure GSM ones (before 1999)
Now, we can face difficulties with today smartphones, that are NOT COMPLIANT (shame on them)
Voice over xxx
Many phones try to connect to IMS server: open a second PDU session on “ims” DNN/APN name.
Then connect to a IMS/SIP server (with open cells cards, see the FAQ for the SIP identifiers in 3GPP).
But, if this fails, some UEs simply abort all the radio link, including the default PDU session to internet.
So, if this is available in the phone menu, disable voice over xxx is a good idea for 99% of our use cases.
UEs table
Model | type | firmware | frequency bands | plmn | gNB | 5GC |
sim type | comment |
Huawei P40, P40 pro |
smartp | all | 78 | all | OAI/develop | OAI, free5GC | open-cells | Recent firmware require cyphering
in OAI core config files – INT_ALGO_LIST=[“NIA1” , “NIA2”] Seems also to need to run a ISM server (Asterix is fine) |
Huawei E6878-870 | CPE | all | 78 | all | OAI/develop | OAI, free5GC | open-cells | works |
Quectel RM500Q-GL | M.2 | RM500QGL
ABR11A06M4G Need firmware (AT+QGMR command) For SA, at least RM500QGLABR11A06M4G_01.001.01.001 For SA + mobility, handovers (neighbor measurements) RM500QGLABR11A06M4G_02.200.02.200 |
78, 38, 41 | all | OAI/develop | OAI, free5GC | open-cells | firmware before A06 doesn’t work
Windows driver works MBIM mode works much better for high throughput PLMN restriction lists can be used with AT+QMBNCFG=”Select”,”ROW_Commercial” but it can’t be a void list
|
Quectel RM520N-GL | M.2 | RM520NGLAAR01A06M4G | ? | ? | OAI SA gNB: tag: 2023.w16 | OAI SA Core: tag: 2023.w04b | open-cells | works |
Quectel RM502Q-AE | M.2 | ? | ? | 001/01 | OAI | OAI | sysmocom | works with IMS tested up to 80MHz |
Teltonika RUTX50 | Industrial 5G router | RUTX_R_00.07.04.1 internal modem: Quectel RG501Q-EU quectel version RG501QEUAAR12A07M4G_04.001.04.001 |
n78 | 001/01 | OAI SA gNB: tag: 2023.w16 | OAI SA Core: tag: 2023.w04b | open-cells | works |
SIMCom SIM8262E-M2 | Qualcomm Snapdragon X62 | 2212B03V03X62M44A-M2 | n78 | 208/99 | OAI/develop (wk40/22 but also newer versions) | OAI/develop | open-cells | trigger PDU-Session establishment with at+netopen |
SIM8200EA-M2 | qualcomm | SIM8200M44A-M2_B02V05_201201 | n78 | 208.01 | OAI/develop | OAI CN | open-cells | Not working well
initial connection seems low, no success with 001/01. AT commands: trigger PDU-Session establishment with at+netopen |
google pixel
4a, 5, 5a, 6, 6a |
smartp | Android 12
Stock Google OS/GrapheneOS another test: pixel 4a, RQ2A.210305.006 6a: android 13 (graphenOS)
|
41, 78 | 001/01
reported not working with 209/99 |
OAI/develop | open5GS | open-cells | optional:
*#*#4636*#*# menu, network type to NR only |
OnePlus 9 | smartp | LE2115 | 41,78 | 001/01 | OAI/develop | open5gs | open-cells | works on Android 11. On Android 12, the UE first sends a PDU Session Establishment request with ims dnn before sending a second request with the regular OAI dnn– did not work when I tested previously (before multiple PDU session support was added to OAI) |
OnePlus 9 pro 5G | smartp | LE2123
LE2123_11_C.61 |
? | ? | OAI/develop | ? | ? | reported not working |
Sierra Wireless EM9191 | M.2 | Generic | 41,78 | 001/01 | OAI/develop | open5gs | open-cells | works with generic firmware, carrier-specific firmware not tested |
Sierra Wireless EM9291 | M.2 | Generic | 41,78 | 001/01 | OAI/develop | open5gs | open-cells | work well with ModemManager. AT commands are not needed for establishing PDU sessions |
Moto G 5G (XT2113-3 | ? | ? | ? | ? | OAI/develop | ? | ? | reported working |
Motorola Edge 2022 (Mediatek) | smartp | Android 12 | n41 and n78 | 001-01 | OAI/develop | open5gs | open-cells | works |
Motorola Edge+ 2022 (Qualcomm) | smartp | Android 12 | n41 and n78 | 001-01 | OAI/develop | open5gs | open-cells | works Dial *#*#4636#*#* code on the Motorola and switch to NR only, and make sure that the APN is set up and enabled (in Network Settings). Also, disable VoLTE/4G calling. It should initiate RA with the gNB in a few minutes (for the first time). |
OnePlus Nord CE2 | smartp | Dimensity 900 Octa-core Model: IV2201 android 11 |
78 | ? | OAI/develop | oai | open-cells | reported working
may need to set NAS Integrity Protect 1 |
OnePlus Nord CE 5G | smartp | Snapdragon 750G Model: EB2101 Android version: 11 |
? | ? | OAI/develop | oai | open-cells | reported to work, but very slow to find the network |
OpenPlus Nord N10 5G | smartp | Processor: Qualcomm Snapdragon 690 Model: BE2029 Android version: 11 |
n78 | 208/99 | OAI/develop | oai | open-cells | works fine, finds network fast |
Oneplus Nord | smartp | AC2003 andEB2101
processor snapdragon 750G |
n78 | 001/01
not working 209/99 |
oai/develop | oai | open-cells | works only on 001/01 |
OPPO Reno7 Pro 5G | smartp | Dimensity 1200-Max Octa-core Model: CPH2293 Android version: 11 |
n78 | ? | OAI/develop | oai | open-cells | works |
OPPO A54 | ROM: Color OS 12.1, Android 12 Model: CPH2195 |
SRSran | Open5GC | sysmocom SJA2 | can detect n1, n3, n7, n28
n78 not working. same device + SIM to see a live commercial 5G SA cell on n78 so the issue in this case is most likley either one or more of the TDD 15khz item, the need for a better GPSDO or possibly I need a better antenna for the band |
|||
Oppo Reno 5G |
Snapdragon 765G | Andriod V11.1 | ? | 001/01 | OAI/develop (2023.w10b but also older versions), USRP B210, SA | Open5GS/main, c0a61fb71, build from source |
? |
For UE, VoLTE Call should be enabled and 5G Network Mode should be SA+NSA even the gNB and 5GC are both in SA mode. The 5G Network Mode can be found in developer setting. It seems like it does not work with PLMN other than 00101. Tested NOT work with 00102, 00201, 20893The UE connects to DNN “internet” |
Telit FN908m |
? | ? | ? | ? | OAI/develop | OAI 5GC |
sysmoUSIM-SJS1 |
not working |
Telit FN990A40 |
M.2 | all | 41, 78 | 001/01 | OAI/develop | open5GS |
open cells |
work well with ModemManager. AT commands are not needed for establishing PDU sessions |
Telit FN990A28 |
M.2 | all | 41, 78 | 001/01 | OAI/develop | open5GS |
open cells |
work well with ModemManager. AT commands are not needed for establishing PDU sessions |
telit FN980 |
M.2 | ? | ? | ? | OAI/develop
|
? |
? |
tested with qmicli and AT commands to set before the APN/DNN wwan0 as raw IP configurationReported issues with reconect procedure that still fails in OAI version of septemebr 2023 |
Sierra Wireless XR90 | M.2 | all/generic | 78 | 208/99 | OAI/develop | Open5GS |
open-cells |
works |
Samsung A33 5G | smartp | Processor: Exynos 1280 Model: SM-A336E/DS Android version: 12 |
78 | ? | OAI/develop | OAI 5GC |
? |
works |
Samsung Galaxy A52S 5G | sma | Processor: Snapdragon 778G Model: SM-A528B/DS Android version: 11 |
78 | ? | OAI/develop | OAI 5GC |
? |
works |
galaxy S22+ | smartp | SM-S906B/DS | 78 | 001/01 | OAI/develop | OAI 5GC | open cells | works |
Samsung S23 | smartp | ? | 001/01 and voLTE enabled | OAI/develop | OAI 5GC |
sysmocom |
BW up to 80MHz VoLTE enabled. sysmocom sim card with disabled 5G security calculations on simcard./pySim-shell.py -p0 verify_adm select MF select ADF.USIM select EF.UST ust_service_deactivate 124 |
|
Xperia 10 IV | smartp | Android 12 (stock) | 41 and 78 | 001/01 | OAI/develop | Open5GS |
open-cells |
works |
M.2 modules based on Qualcomm, usage with Linux
Access to AT commands
sudo screen /dev/ttyUSB2
Linux connection
sudo ip link set wwan0 down echo 'Y' | sudo tee /sys/class/net/wwan0/qmi/raw_ip sudo ip link set wwan0 up
sudo qmicli --device=/dev/cdc-wdm0 --device-open-proxy --dms-set-operating-mode=low-power sudo qmicli --device=/dev/cdc-wdm0 --device-open-proxy --dms-set-operating-mode=online sudo qmicli --device=/dev/cdc-wdm0 --device-open-proxy --wds-start-network="ip-type=4,apn=oai" --client-no-release-cid sudo udhcpc -q -f -n -i wwan0
Swap airplane/normal mode
Add a data bearer to DNN “oai”
query the module to add IP address on the interface
Hi Laurent,
OAI gNB tested successfully with following UEs:
1. Model: Pixel 4a 5G/Pixel 5/Pixel 5a/Pixel 6
Type: smartp
firmware: Android 12 (Stock Google OS/GrapheneOS)
frequency bands: n41 and n78
plmn: 001-01
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works
2. Model: OnePlus 8 (IN2013)
Type: smartp
firmware: All Android 11 releases (Stock OxygenOS)
frequency bands: n41
plmn: 001-01
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works on Android 11. On Android 12, the UE first sends a PDU Session Establishment request with ims dnn before sending a second request with the regular OAI dnn– did not work when I tested previously (before multiple PDU session support was added to OAI)
3. Model: OnePlus 9 (LE2115)
Type: smartp
firmware: All Android 11 releases (Stock OxygenOS)
frequency bands: n41 and n78
plmn: 001-01
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works on Android 11. On Android 12, the UE first sends a PDU Session Establishment request with ims dnn before sending a second request with the regular OAI dnn– did not work when I tested previously (before multiple PDU session support was added to OAI)
4. Model: Sierra Wireless EM9191
Type: M.2
firmware: All (Generic)
frequency bands: n41 and n78
plmn: 001-01/All
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works with generic firmware, carrier-specific firmware not tested
thanks for your big contribution
Hi Laurent,
Please update TESTING_GNB_W_COTS_UE.md file under doc folder with below UE’s as I have tested OAI gNB 5G-SA successfully:
1) Device Name: OnePlus Nord CE 2
Processor: Dimensity 900 Octa-core
Model: IV2201
Android version: 11
Band: n78
2) Device Name: OPPO Reno7 Pro 5G
Processor: Dimensity 1200-Max Octa-core
Model: CPH2293
Android version: 11
Band: n78
Note:- Hopefully Reno8 Pro 5G should also work but till now i did not tested it.
3) Device Name: OnePlus Nord CE 5G
Processor: Snapdragon 750G
Model: EB2101
Android version: 11
Band: n78
Note: It attached in 5G but it takes much time, so i don’t prefer this
Thanks Asheesh for your contribution
Hi Asheesh Ji,
I have succesfully tested on below devices
UE Status
One Plus Nord CE 5G Working
One Plus Nord CE 2 Working
Oppo Reno 7 Pro 5G Working
Samsung A33 5G Working
Samsung M33 5G Working
Samsung 52S Working
Dear dsksh,
May you share with everybody more details, especially the Samsung brand phones.
Thanks in advance
Laurent
Hi Laurent,
I have tested below devices using OAI gNB and Core successfully
1) Device Name: OnePlus Nord CE 2
Processor: Dimensity 900 Octa-core
Model: IV2201
Android version: 11
Band: n78
2) Device Name: OPPO Reno7 Pro 5G
Processor: Dimensity 1200-Max Octa-core
Model: CPH2293
Android version: 11
Band: n78
3) Device Name: OnePlus Nord CE 5G
Processor: Snapdragon 750G
Model: EB2101
Android version: 11
Band: n78
4) Device Name: Samsung A33 5G
Processor: Exynos 1280
Model: SM-A336E/DS
Android version: 12
Band: n78
5) Device Name: Samsung Galaxy A52S 5G
Processor: Snapdragon 778G
Model: SM-A528B/DS
Android version: 11
Band: n78
Dear Daksh Maan,
Thanks for you contribution, i will copy it immediately in the table with a successful usage of S22+ from another person.
What SIM have you used ?
On Samsung, and likely other brands, it seems we have to disable Voice over xxx because some UE break the link if they can’t finish the IMS registration (that needs to install a SIP server aside the OAI core)
Thanks again
Model: Sierra Wireless XR90
Type: M.2
firmware: All (Generic)
frequency bands: n78
plmn: 208/99
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works.
thanks Luong
Hi Laurent,
we have tested OAI gNB with following UEs and msg3 error:
1. Model: Poco F3 xiaomi,Galaxy A42 5G samsung
Type: smartphone
firmware: Android 12
frequency bands: n41 and n78(24 prb and 106 prb)
plmn: 001-01,208-99
gNB: OAI/develop
5GC: Open5GS,OAI 5GC
comment: SIB1 was providing wrong information to the phone, so the Msg1 was ok, but not Msg3
this is the nr-softmodem log:
/openairinterface5g/cmake_targets/ran_build/build$ sudo ./nr-softmodem -O ~/gnb.sa.band78.fr1.106PRB.usrpb210.conf –sa -E –continuous-tx
CMDLINE: “./nr-softmodem” “-O” “/home/oai/gnb.sa.band41.fr1.106PRB.usrpb210.conf” “–sa” “-E”
[CONFIG] get parameters from libconfig /home/oai/gnb.sa.band41.fr1.106PRB.usrpb210.conf , debug flags: 0x00000000
[LIBCONFIG] Path for include directive set to: /home/oai
[CONFIG] function config_libconfig_init returned 0
[CONFIG] config module libconfig loaded
[LIBCONFIG] config: 1/1 parameters successfully set, (1 to default value)
[LIBCONFIG] log_config: 3/3 parameters successfully set, (1 to default value)
[LIBCONFIG] log_config: 55/55 parameters successfully set, (47 to default value)
[LIBCONFIG] log_config: 55/55 parameters successfully set, (55 to default value)
[LIBCONFIG] log_config: 16/16 parameters successfully set, (16 to default value)
[LIBCONFIG] log_config: 16/16 parameters successfully set, (16 to default value)
log init done
[HW] # /dev/cpu_dma_latency set to 2 us
Reading in command-line options
[LIBCONFIG] (root): 36/36 parameters successfully set, (32 to default value)
[LIBCONFIG] (root): 5/5 parameters successfully set, (4 to default value)
[ENB_APP] nfapi running mode: MONOLITHIC
[GNB_APP] Getting GNBSParams
[LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
[LIBCONFIG] THREAD_STRUCT.[0]: 2/2 parameters successfully set, (0 to default value)
[LIBCONFIG] THREAD_STRUCT.[0]: 2/2 parameters successfully set, (0 to default value)
[CONFIG] parallel_conf is set to 0
[CONFIG] worker_conf is set to 1
Configuration: nb_rrc_inst 1, nb_nr_L1_inst 1, nb_ru 1
[LIBCONFIG] TTracer: 4/4 parameters successfully set, (4 to default value)
configuring for RAU/RRU
CPU Freq is 3.504236
[ITTI] Starting itti queue: TASK_UNKNOWN as task 0
[ITTI] Starting itti queue: TASK_TIMER as task 1
[ITTI] Starting itti queue: TASK_L2L1 as task 2
[ITTI] Starting itti queue: TASK_BM as task 3
[ITTI] Starting itti queue: TASK_PHY_ENB as task 4
[ITTI] Starting itti queue: TASK_MAC_ENB as task 5
[ITTI] Starting itti queue: TASK_RLC_ENB as task 6
[ITTI] Starting itti queue: TASK_RRC_ENB_NB_IoT as task 7
[ITTI] Starting itti queue: TASK_PDCP_ENB as task 8
[ITTI] Starting itti queue: TASK_DATA_FORWARDING as task 9
[ITTI] Starting itti queue: TASK_END_MARKER as task 10
[ITTI] Starting itti queue: TASK_RRC_ENB as task 11
[ITTI] Starting itti queue: TASK_RRC_GNB as task 12
[ITTI] Starting itti queue: TASK_RAL_ENB as task 13
[ITTI] Starting itti queue: TASK_S1AP as task 14
[ITTI] Starting itti queue: TASK_NGAP as task 15
[ITTI] Starting itti queue: TASK_X2AP as task 16
[ITTI] Starting itti queue: TASK_M2AP_ENB as task 17
[ITTI] Starting itti queue: TASK_M2AP_MCE as task 18
[ITTI] Starting itti queue: TASK_M3AP as task 19
[ITTI] Starting itti queue: TASK_M3AP_MME as task 20
[ITTI] Starting itti queue: TASK_M3AP_MCE as task 21
[ITTI] Starting itti queue: TASK_SCTP as task 22
[ITTI] Starting itti queue: TASK_ENB_APP as task 23
[ITTI] Starting itti queue: TASK_GNB_APP as task 24
[ITTI] Starting itti queue: TASK_MCE_APP as task 25
[ITTI] Starting itti queue: TASK_MME_APP as task 26
[ITTI] Starting itti queue: TASK_FLEXRAN_AGENT as task 27
[ITTI] Starting itti queue: TASK_PHY_UE as task 28
[ITTI] Starting itti queue: TASK_MAC_UE as task 29
[ITTI] Starting itti queue: TASK_RLC_UE as task 30
[ITTI] Starting itti queue: TASK_PDCP_UE as task 31
[ITTI] Starting itti queue: TASK_RRC_UE as task 32
[ITTI] Starting itti queue: TASK_RRC_NRUE as task 33
[ITTI] Starting itti queue: TASK_NAS_UE as task 34
[ITTI] Starting itti queue: TASK_RAL_UE as task 35
[ITTI] Starting itti queue: TASK_GTPV1_U as task 36
[ITTI] Starting itti queue: TASK_CU_F1 as task 37
[ITTI] Starting itti queue: TASK_DU_F1 as task 38
[ITTI] Starting itti queue: TASK_RRC_UE_SIM as task 39
[ITTI] Starting itti queue: TASK_RRC_GNB_SIM as task 40
[ITTI] Starting itti queue: TASK_RRC_NSA_UE as task 41
[ITTI] Starting itti queue: TASK_RRC_NSA_NRUE as task 42
[ITTI] Starting itti queue: TASK_NAS_NRUE as task 43
[LIBCONFIG] opt: 3/3 parameters successfully set, (3 to default value)
[OPT] OPT disabled
[HW] Version: Branch: develop Abrev. Hash: add469e7ca Date: Thu Jul 28 11:59:36 2022 +0000
[LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
[LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
[NR_PHY] PRB blacklist
[NR_PHY] RC.gNB = 0x559eb64c0400
[LIBCONFIG] L1s.[0]: 15/15 parameters successfully set, (10 to default value)
[NR_PHY] RC.gNB[0] = 0x7f1aa9597010
[NR_PHY] Copying 0 blacklisted PRB to L1 context
Initializing northbound interface for L1
[PHY] l1_north_init_gNB() RC.nb_nr_L1_inst:1
[PHY] Installing callbacks for IF_Module – UL_indication
[MAC] Allocating shared L1/L2 interface structure for instance 0 @ 0x559eb64c2b20
[PHY] l1_north_init_gNB() RC.gNB[0] installing callbacks
[ITTI] Created Posix thread TASK_SCTP
[LIBCONFIG] eNBs.[0]: 1/1 parameters successfully set, (1 to default value)
[LIBCONFIG] gNBs.[0]: 1/1 parameters successfully set, (1 to default value)
[X2AP] X2AP is disabled.
[LIBCONFIG] gNBs.[0].NETWORK_INTERFACES: 10/10 parameters successfully set, (3 to default value)
[NGAP] Configuration in the file: lo.
[NGAP] Configuration in the file: 127.0.100.1/24.
[NGAP] Starting NGAP layer
[ITTI] Created Posix thread TASK_NGAP
[PHY] gNB_app_task() Task ready initialize structures
[ITTI] Created Posix thread TASK_GNB_APP
[NR_RRC] Creating NR RRC gNB Task
[LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
[LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
[NR_PHY] PRB blacklist
[LIBCONFIG] L1s.[0]: 15/15 parameters successfully set, (10 to default value)
[NR_PHY] Copying 0 blacklisted PRB to L1 context
Initializing northbound interface for L1
[PHY] l1_north_init_gNB() RC.nb_nr_L1_inst:1
[PHY] Installing callbacks for IF_Module – UL_indication
[PHY] l1_north_init_gNB() RC.gNB[0] installing callbacks
[LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
[LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
[LIBCONFIG] MACRLCs.[0]: 32/32 parameters successfully set, (26 to default value)
[MAC] [MAIN] Init function start:nb_nr_macrlc_inst=1
[NR_RRC] Entering main loop of NR_RRC message task
[ITTI] Created Posix thread TASK_RRC_GNB
[PHY] Installing callbacks for IF_Module – UL_indication
[NR_MAC] PUSCH Target 150, PUCCH Target 200, PUCCH Failure 10, PUSCH Failure 10
[PHY] gNB_app_task() RC.nb_nr_L1_inst:1
[PHY] l1_north_init_gNB() RC.nb_nr_L1_inst:1
[PHY] Installing callbacks for IF_Module – UL_indication
[PHY] l1_north_init_gNB() RC.gNB[0] installing callbacks
[GNB_APP] Allocating gNB_RRC_INST for 1 instances
[PHY] gNB_app_task() RC.nb_nr_inst:1 RC.nrrrc:0x7f1aa0007270
[PHY] gNB_app_task() Creating RRC instance RC.nrrrc[0]:0x7f1aa0007290 (1 of 1)
[LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
[LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
[LIBCONFIG] gNBs.[0].pdcch_ConfigSIB1.[0]: 2/2 parameters successfully set, (0 to default value)
[LIBCONFIG] gNBs.[0].servingCellConfigCommon.[0]: 60/60 parameters successfully set, (9 to default value)
[RRC] Read in ServingCellConfigCommon (PhysCellId 0, ABSFREQSSB 518670, DLBand 41, ABSFREQPOINTA 514854, DLBW 106,RACH_TargetReceivedPower -96
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
[LIBCONFIG] gNBs.[0].servingCellConfigDedicated.[0]: 42/42 parameters successfully set, (21 to default value)
[RRC] Read in ServingCellConfigDedicated UL (FreqDensity_0 -1, FreqDensity_1 -1, TimeDensity_0 -1, TimeDensity_1 -1, TimeDensity_2 -1, RE offset -1, First_active_BWP_ID 1 SCS 1, LocationandBW 28875
[GNB_APP] DL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
[GNB_APP] DL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
[GNB_APP] DL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
[GNB_APP] UL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
[GNB_APP] UL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
[GNB_APP] UL PTRS frequencyDensity 1 not set. Assuming PTRS not present!
NRRRC 0: Southbound Transport local_mac
[NR_RRC] Setting node_type to ngran_gNB
[LIBCONFIG] gNBs.[0].plmn_list.[0]: 3/3 parameters successfully set, (0 to default value)
[GNB_APP] pdsch_AntennaPorts N1 1
[GNB_APP] pdsch_AntennaPorts N2 1
[GNB_APP] pdsch_AntennaPorts XP 1
[GNB_APP] pusch_AntennaPorts 1
[GNB_APP] minTXRXTIME 2
[GNB_APP] SIB1 TDA 1
[GNB_APP] Do CSI-RS 1
[GNB_APP] Do SRS 1
[GNB_APP] 256 QAM: may be on
[GNB_APP] SDAP layer is disabled
[LIBCONFIG] security: 4/4 parameters successfully set, (0 to default value)
[GNB_APP] RRC starting with node type 2
[GNB_APP] Sending configuration message to NR_RRC task
[PDCP] pdcp init,usegtp
[LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
[NR_RRC] Received message NRRRC_CONFIGURATION_REQ
[NR_RRC] [gNB 0] Received NRRRC_CONFIGURATION_REQ : 0x7f1aa00088e0
[NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI 0] Init…
[LIBCONFIG] gNBs.[0]: 27/27 parameters successfully set, (18 to default value)
[LIBCONFIG] gNBs.[0].plmn_list.[0]: 3/3 parameters successfully set, (0 to default value)
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[LIBCONFIG] gNBs.[0].plmn_list.[0].snssaiList.[0]: 2/2 parameters successfully set, (0 to default value)
[NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
[NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI 0] Checking release
[LIBCONFIG] gNBs.[0].amf_ip_address.[0]: 4/4 parameters successfully set, (0 to default value)
[LIBCONFIG] gNBs.[0].SCTP: 2/2 parameters successfully set, (0 to default value)
[NR_RRC] SIB1 freq: absoluteFrequencySSB 518670, absoluteFrequencyPointA 514854
[NR_RRC] SIB1 freq: absolute_diff 3816, 2*(absolute_diff/(12*6) – 10) 86
[LIBCONFIG] gNBs.[0].NETWORK_INTERFACES: 10/10 parameters successfully set, (3 to default value)
[GNB_APP] default drx 0
-65
[GTPU] Configuring GTPu
[LIBCONFIG] (root): 2/2 parameters successfully set, (0 to default value)
0
0
1
0
1
000000000000000000000001
000000000000000000000000111000000000
[LIBCONFIG] gNBs.[0].NETWORK_INTERFACES: 10/10 parameters successfully set, (3 to default value)
[GTPU] SA mode
41
86
0
106
28875
12
0
1
0
10000000000000
5
0
0
[GTPU] Configuring GTPu address : 127.0.100.1 -> 164007f
2
10000000000000
[GNB_APP] [gNB 0] gNB_app_register for instance 0
[NGAP] Registered new gNB[0] and macro gNB id 3584
[NGAP] [gNB 0] check the amf registration state
7
0
10000000000000
0
7
5
1
40
54
57
1
0
0
106
23
28875
[NGAP] 3584 -> 0000e000
98
0
13
-96
19
1
2
41
2
38
7
38
1
-90
0
40
-90
[NGAP] servedGUAMIs.list.count 1
[NGAP] PLMNSupportList.list.count 1
[NGAP] PLMNSupportList.list.count 1
[GNB_APP] [gNB 0] Received NGAP_REGISTER_GNB_CNF: associated AMF 1
10000000
7
6
2
4
-25
[NR_RRC] do_SIB23_NR, size 9
[NR_RRC] Done init_NR_SI
[NR_MAC] Configuring common parameters from NR ServingCellConfig
[NR_MAC] config_common() dl_BandwidthP:40
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] Computing frequency (pointA 514854 => 2574270 KHz (freq_min 2496000 KHz, NR band 41 N_OFFs 499200))
[NR_MAC] config_common() dl_BandwidthP:40
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] Computing frequency (pointA 514854 => 2574270 KHz (freq_min 2496000 KHz, NR band 41 N_OFFs 499200))
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
[NR_MAC] Set RX antenna number to 1, Set TX antenna number to 1 (num ssb 1: 80000000,0)
[NR_MAC] Setting TDD configuration period to 6
[NR_MAC] TDD has been properly configurated
DL frequency 2593350000: band 41, UL frequency 2593350000
[PHY] DL frequency 2593350000 Hz, UL frequency 2593350000 Hz: band 41, uldl offset 0 Hz
[PHY] Configuring MIB for instance 0, : (Nid_cell 0,DL freq 2593350000, UL freq 2593350000)
[PHY] Initializing frame parms for mu 1, N_RB 106, Ncp 0
[PHY] Init: N_RB_DL 106, first_carrier_offset 900, nb_prefix_samples 108,nb_prefix_samples0 132
[GTPU] Initializing UDP for local address 127.0.100.1 with port 2152
[ITTI] Created Posix thread TASK_GTPV1_U
[PHY] Doing symbol rotation calculation for gNB TX/RX, f0 2593350000.000000 Hz, Nsymb 28
[PHY] Symbol rotation 0/28 => (22004,24278)
[PHY] Symbol rotation 1/28 => tl 0.000036 (32137,-6393) (0.031250)
[PHY] Symbol rotation 2/28 => tl 0.000072 (11038,-30852) (0.195313)
[PHY] Symbol rotation 3/28 => tl 0.000108 (-20788,-25330) (0.359375)
[PHY] Symbol rotation 4/28 => tl 0.000143 (-32413,4807) (0.523438)
[PHY] Symbol rotation 5/28 => tl 0.000179 (-12540,30272) (0.687500)
[PHY] Symbol rotation 6/28 => tl 0.000215 (19519,26318) (0.851563)
[PHY] Symbol rotation 7/28 => tl 0.000250 (32609,-3212) (0.015625)
[PHY] Symbol rotation 8/28 => tl 0.000286 (14009,-29622) (0.179688)
[GTPU] Created gtpu instance id: 96
[PHY] Symbol rotation 9/28 => tl 0.000322 (-18205,-27245) (0.343750)
[PHY] Symbol rotation 10/28 => tl 0.000357 (-32728,1607) (0.507813)
[PHY] Symbol rotation 11/28 => tl 0.000393 (-15447,28897) (0.671875)
[PHY] Symbol rotation 12/28 => tl 0.000429 (16845,28105) (0.835938)
[PHY] Symbol rotation 13/28 => tl 0.000464 (32767,-1) (0.000000)
[PHY] Symbol rotation 14/28 => tl 0.000500 (22004,24278) (0.867188)
[PHY] Symbol rotation 15/28 => tl 0.000536 (32137,-6393) (0.031250)
[PHY] Symbol rotation 16/28 => tl 0.000572 (11038,-30852) (0.195313)
[PHY] Symbol rotation 17/28 => tl 0.000608 (-20788,-25330) (0.359375)
[PHY] Symbol rotation 18/28 => tl 0.000643 (-32413,4807) (0.523438)
[PHY] Symbol rotation 19/28 => tl 0.000679 (-12540,30272) (0.687500)
[PHY] Symbol rotation 20/28 => tl 0.000715 (19519,26318) (0.851562)
[PHY] Symbol rotation 21/28 => tl 0.000750 (32609,-3212) (0.015625)
[PHY] Symbol rotation 22/28 => tl 0.000786 (14009,-29622) (0.179688)
[PHY] Symbol rotation 23/28 => tl 0.000822 (-18205,-27245) (0.343750)
[PHY] Symbol rotation 24/28 => tl 0.000857 (-32728,1607) (0.507812)
[PHY] Symbol rotation 25/28 => tl 0.000893 (-15447,28897) (0.671875)
[PHY] Symbol rotation 26/28 => tl 0.000929 (16845,28105) (0.835938)
[PHY] Symbol rotation 27/28 => tl 0.000964 (32767,0) (1.000000)
[PHY] Doing symbol rotation calculation for gNB TX/RX, f0 2593350000.000000 Hz, Nsymb 28
[PHY] Symbol rotation 0/28 => (22004,24278)
[PHY] Symbol rotation 1/28 => tl 0.000036 (32137,-6393) (0.031250)
[PHY] Symbol rotation 2/28 => tl 0.000072 (11038,-30852) (0.195313)
[PHY] Symbol rotation 3/28 => tl 0.000108 (-20788,-25330) (0.359375)
[PHY] Symbol rotation 4/28 => tl 0.000143 (-32413,4807) (0.523438)
[PHY] Symbol rotation 5/28 => tl 0.000179 (-12540,30272) (0.687500)
[PHY] Symbol rotation 6/28 => tl 0.000215 (19519,26318) (0.851563)
[PHY] Symbol rotation 7/28 => tl 0.000250 (32609,-3212) (0.015625)
[PHY] Symbol rotation 8/28 => tl 0.000286 (14009,-29622) (0.179688)
[PHY] Symbol rotation 9/28 => tl 0.000322 (-18205,-27245) (0.343750)
[PHY] Symbol rotation 10/28 => tl 0.000357 (-32728,1607) (0.507813)
[PHY] Symbol rotation 11/28 => tl 0.000393 (-15447,28897) (0.671875)
[PHY] Symbol rotation 12/28 => tl 0.000429 (16845,28105) (0.835938)
[PHY] Symbol rotation 13/28 => tl 0.000464 (32767,-1) (0.000000)
[PHY] Symbol rotation 14/28 => tl 0.000500 (22004,24278) (0.867188)
[PHY] Symbol rotation 15/28 => tl 0.000536 (32137,-6393) (0.031250)
[PHY] Symbol rotation 16/28 => tl 0.000572 (11038,-30852) (0.195313)
[PHY] Symbol rotation 17/28 => tl 0.000608 (-20788,-25330) (0.359375)
[PHY] Symbol rotation 18/28 => tl 0.000643 (-32413,4807) (0.523438)
[PHY] Symbol rotation 19/28 => tl 0.000679 (-12540,30272) (0.687500)
[PHY] Symbol rotation 20/28 => tl 0.000715 (19519,26318) (0.851562)
[PHY] Symbol rotation 21/28 => tl 0.000750 (32609,-3212) (0.015625)
[PHY] Symbol rotation 22/28 => tl 0.000786 (14009,-29622) (0.179688)
[PHY] Symbol rotation 23/28 => tl 0.000822 (-18205,-27245) (0.343750)
[PHY] Symbol rotation 24/28 => tl 0.000857 (-32728,1607) (0.507812)
[PHY] Symbol rotation 25/28 => tl 0.000893 (-15447,28897) (0.671875)
[PHY] Symbol rotation 26/28 => tl 0.000929 (16845,28105) (0.835938)
[PHY] Symbol rotation 27/28 => tl 0.000964 (32767,0) (1.000000)
[PHY] Timeshift symbol rotation 0 => (32767,0) 0.000000
[PHY] Timeshift symbol rotation 1 => (32721,1742) -0.053178
[PHY] Timeshift symbol rotation 2 => (32582,3478) -0.106356
[PHY] Timeshift symbol rotation 3 => (32351,5205) -0.159534
[PHY] Timeshift symbol rotation 4 => (32028,6917) -0.212712
[PHY] Timeshift symbol rotation 5 => (31616,8610) -0.265890
[PHY] Timeshift symbol rotation 6 => (31113,10278) -0.319068
[PHY] Timeshift symbol rotation 7 => (30523,11918) -0.372246
[PHY] Timeshift symbol rotation 8 => (29846,13523) -0.425424
[PHY] Timeshift symbol rotation 9 => (29085,15090) -0.478602
[PHY] gNB 0 configured
[NR_MAC] In rrc_mac_config_req_gNB: slot 0 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 1 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 2 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 3 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 4 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 5 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 6 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 7 DL 1 UL 1
[NR_MAC] In rrc_mac_config_req_gNB: slot 8 DL 0 UL 1
[NR_MAC] In rrc_mac_config_req_gNB: slot 9 DL 0 UL 1
[NR_MAC] In rrc_mac_config_req_gNB: slot 10 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 11 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 12 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 13 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 14 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 15 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 16 DL 1 UL 0
[NR_MAC] In rrc_mac_config_req_gNB: slot 17 DL 1 UL 1
[NR_MAC] In rrc_mac_config_req_gNB: slot 18 DL 0 UL 1
[NR_MAC] In rrc_mac_config_req_gNB: slot 19 DL 0 UL 1
[NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI 0] gNB:OPENAIR NR RRC IN….
NFAPI MODE:MONOLITHIC
START MAIN THREADS
RC.nb_nr_L1_inst:1
Initializing gNB threads single_thread_flag:1 wait_for_sync:0
[PHY] Initializing gNB 0 single_thread_flag:1
[PHY] Initializing gNB 0
[PHY] Registering with MAC interface module (before 0x559eb64c2b20)
[PHY] Installing callbacks for IF_Module – UL_indication
[PHY] Registering with MAC interface module (after 0x559eb64c2b20)
[PHY] Setting indication lists
[PHY] [nr-gnb.c] gNB structure allocated
wait_gNBs()
Waiting for gNB L1 instances to all get configured … sleeping 50ms (nb_nr_sL1_inst 1)
gNB L1 are configured
About to Init RU threads RC.nb_RU:1
Initializing RU threads
configuring RU from file
[LIBCONFIG] RUs.[0]: 33/33 parameters successfully set, (22 to default value)
Set RU mask to 1
Creating RC.ru[0]:0x559eb64c5340
[PHY] RU clock source set as internal
[PHY] Setting time source to internal
Setting function for RU 0 to gNodeB_3GPP
[RU 0] Setting nr_flag 0, nr_band 41, nr_scs_for_raster 1
[PHY] number of L1 instances 1, number of RU 1, number of CPU cores 12
[PHY] DJP – delete code above this /home/oai/openairinterface5g_develop/executables/nr-ru.c:1946
[PHY] Copying frame parms from gNB in RC to gNB 0 in ru 0 and frame_parms in ru
configuring ru_id 0 (start_rf 0x559eb304d9c0)
[PHY] Starting ru_thread 0
[PHY] Initializing RU proc 0 (,synch_to_ext_device),
[PHY] Starting RU 0 (,synch_to_ext_device),
[PHY] Initializing frame parms for mu 1, N_RB 106, Ncp 0
[PHY] Init: N_RB_DL 106, first_carrier_offset 900, nb_prefix_samples 108,nb_prefix_samples0 132
[PHY] fp->scs=30000
[PHY] fp->ofdm_symbol_size=1536
[PHY] fp->nb_prefix_samples0=132
[PHY] fp->nb_prefix_samples=108
[PHY] fp->slots_per_subframe=2
[PHY] fp->samples_per_subframe_wCP=43008
[PHY] fp->samples_per_frame_wCP=430080
[PHY] fp->samples_per_subframe=46080
[PHY] fp->samples_per_frame=460800
[PHY] fp->dl_CarrierFreq=2593350000
[PHY] fp->ul_CarrierFreq=2593350000
[PHY] Channel 0: setting tx_gain offset 6, rx_gain offset 108, tx_freq 2593350000 Hz, rx_freq 2593350000 Hz, tune_offset 0 Hz
[PHY] Initializing RU signal buffers (if_south local RF) nb_tx 1, nb_rx 1
[PHY] [INIT] common.txdata[0] = 0x7f1aa4072040 (1844480 bytes,sf_extension 320)
[PHY] [INIT] common.txdata[0] = 0x7f1aa4072540
[PHY] nb_tx 1
[PHY] rxdata_7_5kHz[0] 0x7f1a9d583040 for RU 0
[PHY] [INIT] common.txdata_BF= 0x7f1a88000b00 (8 bytes)
[PHY] txdataF_BF[0] 0x7f1aa956c040 for RU 0
[PHY] rxdataF[0] 0x7f1aa401d040 for RU 0
[PHY] [INIT] nr_phy_init_RU() ru->num_gNB:1
[LIBCONFIG] device.recplay: 8/8 parameters successfully set, (8 to default value)
[LIBCONFIG] device: 1/1 parameters successfully set, (1 to default value)
[LIBCONFIG] loader: 2/2 parameters successfully set, (2 to default value)
[LIBCONFIG] loader.oai_device: 2/2 parameters successfully set, (1 to default value)
shlib_path liboai_device.so
[PHY] init feptx thread 0
[LOADER] library liboai_device.so successfully loaded
[HW] openair0_cfg[0].sdr_addrs == ‘(null)’
[HW] openair0_cfg[0].clock_source == ‘0’ (internal = 0, external = 1)
[HW] UHD version 4.2.0.0-0ubuntu1~bionic1 (4.2.0)
[PHY] init feptx thread 1
wait RUs
[PHY] Waiting for RUs to be configured … RC.ru_mask:01
[INFO] [UHD] linux; GNU C++ version 7.5.0; Boost_106501; UHD_4.2.0.0-0ubuntu1~bionic1
[HW] Found USRP b200
[INFO] [B200] Detected Device: B210
[INFO] [B200] Operating over USB 3.
[INFO] [B200] Initialize CODEC control…
[INFO] [B200] Initialize Radio control…
[INFO] [B200] Performing register loopback test…
[INFO] [B200] Register loopback test passed
[INFO] [B200] Performing register loopback test…
[INFO] [B200] Register loopback test passed
[INFO] [B200] Asking for clock rate 30.720000 MHz…
[INFO] [B200] Actually got clock rate 30.720000 MHz.
[HW] Setting clock source to internal
[HW] Setting time source to internal
— Using calibration table: calib_table_b210_38
[INFO] [B200] Asking for clock rate 46.080000 MHz…
[INFO] [B200] Actually got clock rate 46.080000 MHz.
[HW] cal 0: freq 3500000000.000000, offset 44.000000, diff 906650000.000000
[HW] cal 1: freq 2660000000.000000, offset 49.800000, diff 66650000.000000
[HW] cal 2: freq 2300000000.000000, offset 51.000000, diff 293350000.000000
[HW] cal 3: freq 1880000000.000000, offset 53.000000, diff 713350000.000000
[HW] cal 4: freq 816000000.000000, offset 57.000000, diff 1777350000.000000
[HW] RX Gain 0 108.000000 (49.800000) => 58.200000 (max 76.000000)
[HW] USRP TX_GAIN:83.75 gain_range:89.75 tx_gain:6.00
[HW] Actual master clock: 46.080000MHz…
[HW] Actual clock source internal…
[HW] Actual time source internal…
[HW] RF board max packet size 1916, size for 100µs jitter 4608
[HW] rx_max_num_samps 1916
[HW] setting rx channel 0
[HW] RX Channel 0
[HW] Actual RX sample rate: 46.080000MSps…
[HW] Actual RX frequency: 2.593350GHz…
[HW] Actual RX gain: 58.000000…
[HW] Actual RX bandwidth: 40.000000M…
[HW] Actual RX antenna: RX2…
[HW] TX Channel 0
[HW] Actual TX sample rate: 46.080000MSps…
[HW] Actual TX frequency: 2.593350GHz…
[HW] Actual TX gain: 83.750000…
[HW] Actual TX bandwidth: 40.000000M…
[HW] Actual TX antenna: TX/RX…
[HW] Actual TX packet size: 1916
[HW] Device timestamp: 2.168541…
[HW] [RAU] has loaded USRP B200 device.
setup_RU_buffers: frame_parms = 0x559eb64c8c10
[PHY] RU 0 Setting N_TA_offset to 600 samples (factor 1.500000, UL Freq 2574270, N_RB 106, mu 1)
[PHY] Signaling main thread that RU 0 is ready, sl_ahead 6
waiting for sync (ru_thread,-1/0x559eb3caa2b4,0x559eb4a5b720,0x559eb48b0800)
RC.ru_mask:00
[PHY] RUs configured
ALL RUs READY!
RC.nb_RU:1
ALL RUs ready – init gNBs
Not NFAPI mode – call init_eNB_afterRU()
[PHY] init_eNB_afterRU() RC.nb_nr_inst:1
[PHY] RC.nb_nr_CC[inst:0]:0x7f1aa9597010
[PHY] [gNB 0] phy_init_nr_gNB() About to wait for gNB to be configured
[LIBCONFIG] loader.dfts: 2/2 parameters successfully set, (1 to default value)
shlib_path libdfts.so
[LOADER] library libdfts.so successfully loaded
[LIBCONFIG] loader.ldpc: 2/2 parameters successfully set, (1 to default value)
shlib_path libldpc.so
[LOADER] library libldpc.so successfully loaded
[PHY] Initialise nr transport
[PHY] Allocating Transport Channel Buffers for PUCCH 0/16
[PHY] Allocating Transport Channel Buffers for PUCCH 1/16
[PHY] Allocating Transport Channel Buffers for PUCCH 2/16
[PHY] Allocating Transport Channel Buffers for PUCCH 3/16
[PHY] Allocating Transport Channel Buffers for PUCCH 4/16
[PHY] Allocating Transport Channel Buffers for PUCCH 5/16
[PHY] Allocating Transport Channel Buffers for PUCCH 6/16
[PHY] Allocating Transport Channel Buffers for PUCCH 7/16
[PHY] Allocating Transport Channel Buffers for PUCCH 8/16
[PHY] Allocating Transport Channel Buffers for PUCCH 9/16
[PHY] Allocating Transport Channel Buffers for PUCCH 10/16
[PHY] Allocating Transport Channel Buffers for PUCCH 11/16
[PHY] Allocating Transport Channel Buffers for PUCCH 12/16
[PHY] Allocating Transport Channel Buffers for PUCCH 13/16
[PHY] Allocating Transport Channel Buffers for PUCCH 14/16
[PHY] Allocating Transport Channel Buffers for PUCCH 15/16
[PHY] Allocating Transport Channel Buffers for SRS 0/16
[PHY] Allocating Transport Channel Buffers for SRS 1/16
[PHY] Allocating Transport Channel Buffers for SRS 2/16
[PHY] Allocating Transport Channel Buffers for SRS 3/16
[PHY] Allocating Transport Channel Buffers for SRS 4/16
[PHY] Allocating Transport Channel Buffers for SRS 5/16
[PHY] Allocating Transport Channel Buffers for SRS 6/16
[PHY] Allocating Transport Channel Buffers for SRS 7/16
[PHY] Allocating Transport Channel Buffers for SRS 8/16
[PHY] Allocating Transport Channel Buffers for SRS 9/16
[PHY] Allocating Transport Channel Buffers for SRS 10/16
[PHY] Allocating Transport Channel Buffers for SRS 11/16
[PHY] Allocating Transport Channel Buffers for SRS 12/16
[PHY] Allocating Transport Channel Buffers for SRS 13/16
[PHY] Allocating Transport Channel Buffers for SRS 14/16
[PHY] Allocating Transport Channel Buffers for SRS 15/16
[PHY] Allocating Transport Channel Buffers for ULSCH 0/8
[PHY] Allocating Transport Channel Buffers for ULSCH 1/8
[PHY] Allocating Transport Channel Buffers for ULSCH 2/8
[PHY] Allocating Transport Channel Buffers for ULSCH 3/8
[PHY] Allocating Transport Channel Buffers for ULSCH 4/8
[PHY] Allocating Transport Channel Buffers for ULSCH 5/8
[PHY] Allocating Transport Channel Buffers for ULSCH 6/8
[PHY] Allocating Transport Channel Buffers for ULSCH 7/8
[PHY] Mapping RX ports from 1 RUs to gNB 0
[PHY] gNB->num_RU:1
[PHY] Attaching RU 0 antenna 0 to gNB antenna 0
[PHY] Number of threads requested in config file: 4, Number of threads available on this machine: 12
create a thread for core -1
create a thread for core -1
create a thread for core -1
create a thread for core -1
[PHY] Allocating Transport Channel Buffers for DLSCH 0/8
[PHY] Allocating Transport Channel Buffers for DLSCH 1/8
[PHY] Allocating Transport Channel Buffers for DLSCH 2/8
[PHY] Allocating Transport Channel Buffers for DLSCH 3/8
[PHY] Allocating Transport Channel Buffers for DLSCH 4/8
[PHY] Allocating Transport Channel Buffers for DLSCH 5/8
[PHY] Allocating Transport Channel Buffers for DLSCH 6/8
[PHY] Allocating Transport Channel Buffers for DLSCH 7/8
[PHY] Allocating Transport Channel Buffers for DLSCH 0/8
[PHY] Allocating Transport Channel Buffers for DLSCH 1/8
[PHY] Allocating Transport Channel Buffers for DLSCH 2/8
[PHY] Allocating Transport Channel Buffers for DLSCH 3/8
[PHY] Allocating Transport Channel Buffers for DLSCH 4/8
[PHY] Allocating Transport Channel Buffers for DLSCH 5/8
[PHY] Allocating Transport Channel Buffers for DLSCH 6/8
[PHY] Allocating Transport Channel Buffers for DLSCH 7/8
waiting for sync (L1_stats_thread,-1/0x559eb3caa2b4,0x559eb4a5b720,0x559eb48b0800)
ALL RUs ready – ALL gNBs ready
Sending sync to all threads
About to call end_configmodule() from main() /home/oai/openairinterface5g_develop/executables/nr-softmodem.c:790
Called end_configmodule() from main() /home/oai/openairinterface5g_develop/executables/nr-softmodem.c:795
got sync (ru_thread)
got sync (L1_stats_thread)
TYPE TO TERMINATE
Entering ITTI signals handler
[PHY] RU 0 rf device ready
[PHY] RU 0 RF started
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
[NR_MAC] Frame.Slot 128.0
[NR_MAC] Frame.Slot 256.0
[NR_MAC] Frame.Slot 384.0
[NR_MAC] Frame.Slot 512.0
[NR_MAC] Frame.Slot 640.0
[NR_PHY] [gNB 0][RAPROC] Frame 699, slot 19 Initiating RA procedure with preamble 62, energy 23.2 dB (I0 103, thres 120), delay 21 start symbol 0 freq index 0
[NR_PHY] [gNB 0][RAPROC] Frame 699, slot 19 Initiating RA procedure with preamble 10, energy 24.0 dB (I0 118, thres 120), delay 0 start symbol 4 freq index 0
[MAC] UL_info[Frame 699, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:699/19
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 699 Activating Msg2 generation in frame 700, slot 7 using RA rnti 10b SSB, new rnti 50d9 index 0 RA index 0
[MAC] UL_info[Frame 700, Slot 0] Calling initiate_ra_proc RACH:SFN/SLOT:699/19
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 699 Activating Msg2 generation in frame 700, slot 7 using RA rnti 10b SSB, new rnti c8ca index 0 RA index 1
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 700, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [gNB 0][RAPROC] Frame 700, Subframe 7: rnti 50d9 RA state 2
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 700, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [gNB 0][RAPROC] Frame 700, Subframe 7: rnti c8ca RA state 2
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] handle harq for rnti 50d9, in RA process
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] handle harq for rnti c8ca, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 701, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (701,17)
[NR_MAC] [gNB 0][RAPROC] Frame 701, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (701,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] handle harq for rnti 50d9, in RA process
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] handle harq for rnti c8ca, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 702, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (702,17)
[NR_MAC] [gNB 0][RAPROC] Frame 702, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (702,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] handle harq for rnti 50d9, in RA process
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] handle harq for rnti c8ca, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 703, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (703,17)
[NR_MAC] [gNB 0][RAPROC] Frame 703, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (703,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] to remove in mac rnti_to_remove[0] = 0x50d9
[NR_MAC] Search for not existing rnti (ignore for RA): 50d9
[NR_MAC] handle harq for rnti 50d9, in RA process
[NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x50d9 in PUSCH
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] to remove in mac rnti_to_remove[1] = 0xc8ca
[NR_MAC] Search for not existing rnti (ignore for RA): c8ca
[NR_MAC] handle harq for rnti c8ca, in RA process
[NR_MAC] handle_nr_ul_harq(): unknown RNTI 0xc8ca in PUSCH
[NR_PHY] to remove rnti 0x50d9
[NR_PHY] to remove rnti 0xc8ca
[NR_PHY] to remove rnti_to_remove_count=2, up_removed=2 down_removed=0 pucch_removed=0
[NR_MAC] Frame.Slot 768.0
Thanks for sharing this,
Are you sure the RACH is coming from the UEs ?
To verify, if the mobiles are of (or airplane mode), there are no detected RACH ?
Wrong RACH can be detected if the Rx amplifier gain is high or if other networks operate on same band.
If the RACH is coming from Xiaomi and Samsung, this is very interesting, as these brands usually don’t work (no RACH)
Hi Laurent,
My problem is exactly like previous comment. In my case most of the errors are about “RNTI”, for example in gNB output we have:
warning: [NR_MAC] Search for not existing RNTI (ignore for RA)
Error: [NR_MAC] handle_nr_ul_harq(): unknown RNTI 0xc8ca in PUSCH
According to your response to the previous comment, I changed TX or RX gain and test with different bands, but the issue of the UE connection remained. I can not see any PRACH message. May this problem is because of USIM parameters?
Hi Hassan,
RACH is not related to any SIM data, expect the decision to send a RACH (for example, the UE should not send a RACH to a cell in a PLMN that is in the forbidden list)
The SIM security data will be used much after the RACH
Have you tried first with rfsim to verify the RAN+core is working fine ?
Hi Laurent,
The Oppo A54 5G works with the srsRAN gNB. Using an external GPSDO I can see n1, n3 and n28:
https://www.gsmarena.com/oppo_a54_5g-10866.php
I note that the srsRAN project reports that TDD bands may not work currently due to a limitation on the sub-carrier spacing, so perhaps the Oppo will also see the TDD bands if using the OAI gNB.
thanks for contributing
I just tested n7 using srsRAN and that also worked.
I also have used the same device + SIM to see a live commercial 5G SA cell on n78 so the issue in this case is most likley either one or more of the TDD 15khz item, the need for a better GPSDO or possibly I need a better antenna for the band.
Other config notes:
bands: 1, 3, 7, 28
core: Open5GC
SIM: sysmoISIM-SJA2
ROM: Color OS 12.1, Android 12
Model: CPH2195
Thanks for your contribution
Chris, would you mind sharing your srsran rr.conf settings for band 1 and 28? Specifically what ARFCN and CORESET values are you using? I’d also like to take a look at your enb.conf as well. Thank you!
Hi Laurent,
following setup works, you can add this to your table:
Device Name: OnePlus Nord N10 5G
Processor: Qualcomm Snapdragon 690
Model: BE2029
Android version: 11
Band: n78
plmn: 208/99
gNB: OAI/develop
5GC: OAI/develop
sim-type: open-cells
comment: works fine, finds network fast.
Thanks for your contribution
Hi Laurent,
I executed OAI gnb (no core network installed)
$ sudo ./nr-softmodem -O ../../../targets/PROJECTS/GENERIC-NR-5GC/CONF/gnb.sa.band78.fr1.106PRB.usrpb210.conf –sa -E –continuous-tx
The following message is displayed
Entering ITTI signals handler
[PHY] RU 0 rf device ready
[PHY] RU 0 RF started
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
sleep…
[NR_MAC] Frame.Slot 128.0
[NR_MAC] Frame.Slot 256.0
[NR_MAC] Frame.Slot 384.0
[NR_MAC] Frame.Slot 512.0
I think gnb is running and usrp-b210 has lights on
But when I opened nemo handy and Netmonster with Samsung s21, it didn’t detect this gnb.
may I ask if this is normal?
Or do I need to change the phone to re-detect?
thanks!
Hi,
If your phone is supporting band 78, it should detect the gNB, regardless the SIM.
But, many phones have internal restrictions
It seems Samsung using Snapdragon works, but not the Samsung modem chip based.
We don’t know where is the issue
Regards,
Thank you! I will try again
Hi Laurent,
I also get similar message with the friend above. The UE can detect other 5G networks but not the OAI.
The problem I think is that I cannot establish communication with the 5GS AMF.
I am not sure why NGAP communication is not initiated between the two.
I add the IP settings correctly but nothing.
For the OAI gNB, I am using the latest develop branch with the b210 106 RB config file.
For the 5GS I installed it.. Did not build it from sources.
Any sugestions?
Thanks,
Micha
Hi,
To install OAI, this tutorial is very good:
https://gitlab.eurecom.fr/oai/openairinterface5g/-/blob/develop/doc/NR_SA_CN5G_gNB_USRP_COTS_UE_Tutorial.md
For your question:
start wireshark, select ‘any’ interface and set the filter to “sctp”
start the gNB
you should see the NGAP messages between the gNB and the 5GC
if you don’t see the decoded packets, you have to enable the 5G protocols in wireshark
Later, when you can observe NGAP setup success, connect the UE, that will trace also very clearly in wireshark if it starts to establish a connection to the core network
Regards,
Laurent
Hi,I also use OnePlus Nord N10 5G
Android version: 11
Model: BE2028,n78 is not supported
gNB: OAI/develop with USRP X310
5GC: OAI/develop
Band: n41
plmn: 001/01
After PDUSessionSetupResponse,I got:
[NR_PHY] [gNB 0][RAPROC] Frame 367, slot 19 Initiating RA procedure with preamble 21, energy 54.9 dB (I0 241, thres 120), delay 3 start symbol 0 freq index 0
[MAC] UL_info[Frame 367, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:367/19
[NR_MAC] Search for not existing rnti (ignore for RA): 932a
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 367 Activating Msg2 generation in frame 368, slot 7 using RA rnti 10b SSB, new rnti 932a index 0 RA index 0
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 368, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 368 k2 7 Msg3_tda_id 2
[NR_MAC] [gNB 0][RAPROC] Frame 368, Subframe 7: rnti 932a RA state 2
[NR_MAC] Search for not existing rnti (ignore for RA): 932a
[NR_MAC] Adding UE with rnti 0x932a
[NR_MAC] [gNB 0][RAPROC] PUSCH with TC_RNTI 0x932a received correctly, adding UE MAC Context RNTI 0x932a
[NR_MAC] [RAPROC] RA-Msg3 received (sdu_lenP 7)
[NR_MAC] Received UL_SCH_LCID_C_RNTI with C-RNTI 0xc9db
[RRC] Frame 368, Subframe 17: UE c9db UL failure reset, deactivating timer
[NR_MAC] Activating scheduling RA-Msg4 for TC_RNTI 0xc9db (state 4)
[NR_MAC] Unexpected ULSCH HARQ PID 0 (have -1) for RNTI 0x932a (ignore this warning for RA)
[NR_MAC] Generate msg4, rnti: c9db
[RLC] remove UE 932a
[RLC] /home/oai/workspace/develop/openairinterface5g/openair2/LAYER2/nr_rlc/nr_rlc_ue_manager.c:122:nr_rlc_manager_remove_ue: warning: ue 932a not found
[NR_MAC] Remove NR rnti 0x932a
[NR_MAC] to remove in mac rnti_to_remove[0] = 0x932a
[NR_MAC] [gNB 0] [RAPROC] CC_id 0 Frame 369, slotP 3: Generating RA-Msg4 DCI, state 4
[NR_MAC] (ue rnti 0xc9db) CBRA procedure succeeded!
[NR_MAC] Adding SchedulingRequestconfig
[NR_MAC] Adding BSR config
[NR_MAC] Adding TAG config
[NR_MAC] Adding PHR config
[NR_MAC] Switching to DL-BWP 0
[NR_MAC] Switching to UL-BWP 0
[NR_PHY] to remove rnti 0x932a
[NR_PHY] to remove rnti_to_remove_count=1, up_removed=1 down_removed=0 pucch_removed=0
[NR_MAC] 369. 4 UE c9db Scheduling BWP switch from DL_BWP 0 to 1 and from UL_BWP 0 to 1
[NR_MAC] Adding SchedulingRequestconfig
[NR_MAC] Adding BSR config
[NR_MAC] Adding TAG config
[NR_MAC] Adding PHR config
[NR_RRC] send RRC_DCCH_DATA_REQ to PDCP
[NR_MAC] Activating RRC processing timer for UE c9db with 16 ms
[NR_MAC] expected HARQ pid 14 feedback at 369. 8, but is at 369. 7 instead (HARQ feedback is in the future)
[NR_MAC] Oh no! Could not find a harq in handle_nr_uci_pucch_0_1!
[NR_MAC] (371.2) De-activating RRC processing timer for UE c9db
[NR_MAC] Modified rnti c9db with CellGroup
[NR_MAC] Adding SchedulingRequestconfig
[NR_MAC] Adding BSR config
[NR_MAC] Adding TAG config
[NR_MAC] Adding PHR config
[NR_MAC] Switching to DL-BWP 1
[NR_MAC] Switching to UL-BWP 1
[NR_MAC] Detected UL Failure on PUSCH after 10 PUSCH DTX, stopping scheduling
[RLC] max RETX reached on SRB 1
[NR_PHY] [gNB 0][RAPROC] Frame 375, slot 19 Initiating RA procedure with preamble 12, energy 54.0 dB (I0 239, thres 120), delay 3 start symbol 0 freq index 0
[MAC] UL_info[Frame 375, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:375/19
[NR_MAC] Search for not existing rnti (ignore for RA): 9b6d
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 375 Activating Msg2 generation in frame 376, slot 7 using RA rnti 10b SSB, new rnti 9b6d index 0 RA index 0
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 376, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 376 k2 7 Msg3_tda_id 2
[NR_MAC] [gNB 0][RAPROC] Frame 376, Subframe 7: rnti 9b6d RA state 2
[NR_MAC] Search for not existing rnti (ignore for RA): 9b6d
[NR_MAC] Adding UE with rnti 0x9b6d
[NR_MAC] [gNB 0][RAPROC] PUSCH with TC_RNTI 0x9b6d received correctly, adding UE MAC Context RNTI 0x9b6d
[NR_MAC] [RAPROC] RA-Msg3 received (sdu_lenP 7)
[NR_MAC] Received UL_SCH_LCID_C_RNTI with C-RNTI 0xc9db
[RRC] Frame 376, Subframe 17: UE c9db UL failure reset, deactivating timer
[NR_MAC] Activating scheduling RA-Msg4 for TC_RNTI 0xc9db (state 4)
[NR_MAC] Unexpected ULSCH HARQ PID 0 (have -1) for RNTI 0x9b6d (ignore this warning for RA)
[NR_MAC] Generate msg4, rnti: c9db
[RLC] remove UE 9b6d
[RLC] /home/oai/workspace/develop/openairinterface5g/openair2/LAYER2/nr_rlc/nr_rlc_ue_manager.c:122:nr_rlc_manager_remove_ue: warning: ue 9b6d not found
[NR_MAC] Remove NR rnti 0x9b6d
[NR_MAC] to remove in mac rnti_to_remove[0] = 0x9b6d
[NR_MAC] [gNB 0] [RAPROC] CC_id 0 Frame 377, slotP 3: Generating RA-Msg4 DCI, state 4
[NR_MAC] (ue rnti 0xc9db) CBRA procedure succeeded!
[NR_MAC] Adding SchedulingRequestconfig
[NR_MAC] Adding BSR config
[NR_MAC] Adding TAG config
[NR_MAC] Adding PHR config
[NR_MAC] Switching to DL-BWP 0
[NR_MAC] Switching to UL-BWP 0
[NR_PHY] to remove rnti 0x9b6d
[NR_PHY] to remove rnti_to_remove_count=1, up_removed=1 down_removed=0 pucch_removed=0
[NR_MAC] 377. 4 UE c9db Scheduling BWP switch from DL_BWP 0 to 1 and from UL_BWP 0 to 1
[NR_MAC] Adding SchedulingRequestconfig
[NR_MAC] Adding BSR config
[NR_MAC] Adding TAG config
[NR_MAC] Adding PHR config
[NR_RRC] send RRC_DCCH_DATA_REQ to PDCP
[NR_MAC] Activating RRC processing timer for UE c9db with 16 ms
[NR_MAC] expected HARQ pid 1 feedback at 377. 8, but is at 377. 7 instead (HARQ feedback is in the future)
[NR_MAC] Oh no! Could not find a harq in handle_nr_uci_pucch_0_1!
[NR_MAC] (379.2) De-activating RRC processing timer for UE c9db
[NR_MAC] Modified rnti c9db with CellGroup
[NR_MAC] Adding SchedulingRequestconfig
[NR_MAC] Adding BSR config
[NR_MAC] Adding TAG config
[NR_MAC] Adding PHR config
[NR_MAC] Switching to DL-BWP 1
[NR_MAC] Switching to UL-BWP 1
[NR_MAC] Detected UL Failure on PUSCH after 10 PUSCH DTX, stopping scheduling
[NR_MAC] Detected UL Failure on PUSCH after 11 PUSCH DTX, stopping scheduling
[RLC] max RETX reached on SRB 1
[NR_MAC] Frame.Slot 384.0
UE RNTI c9db (1) PH 42 dB PCMAX 11 dBm, average RSRP 0 (0 meas)
UE c9db: CQI 0, RI 1, PMI (0,0)
UE c9db: dlsch_rounds 271/15/7/6, dlsch_errors 5, pucch0_DTX 27, BLER 0.13051 MCS 7
UE c9db: dlsch_total_bytes 104314
UE c9db: ulsch_rounds 1232/305/194/154, ulsch_DTX 553, ulsch_errors 144, BLER 0.76663 MCS 6
UE c9db: ulsch_total_bytes_scheduled 182101, ulsch_total_bytes_received 91341
UE c9db: LCID 1: 21785 bytes TX
UE c9db: LCID 4: 42154 bytes TX
UE c9db: LCID 4: 27731 bytes RX
[NR_PHY] [gNB 0][RAPROC] Frame 409, slot 19 Initiating RA procedure with preamble 48, energy 47.8 dB (I0 217, thres 120), delay 2 start symbol 0 freq index 0
[MAC] UL_info[Frame 409, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:409/19
[NR_MAC] Search for not existing rnti (ignore for RA): e08a
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 409 Activating Msg2 generation in frame 410, slot 7 using RA rnti 10b SSB, new rnti e08a index 0 RA index 0
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 410, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 410 k2 7 Msg3_tda_id 2
[NR_MAC] [gNB 0][RAPROC] Frame 410, Subframe 7: rnti e08a RA state 2
[NR_MAC] Search for not existing rnti (ignore for RA): e08a
[NR_MAC] Adding UE with rnti 0xe08a
[NR_MAC] [gNB 0][RAPROC] PUSCH with TC_RNTI 0xe08a received correctly, adding UE MAC Context RNTI 0xe08a
[NR_MAC] [RAPROC] RA-Msg3 received (sdu_lenP 7)
[RLC] activated srb0 for UE with RNTI 0xe08a
[MAC] [RAPROC] Received SDU for CCCH length 6 for UE e08a
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
[NR_MAC] NR band duplex spacing is 0 KHz (nr_bandtable[20].band = 41)
[NR_MAC] NR band 41, duplex mode TDD, duplex spacing = 0 KHz
[NR_RRC] SRS configured with 1 ports
[NR_RRC] SRS configured with 1 ports
[NR_RRC] SRS configured with 1 ports
[NR_MAC] Activating scheduling RA-Msg4 for TC_RNTI 0xe08a (state 4)
[NR_MAC] Unexpected ULSCH HARQ PID 0 (have -1) for RNTI 0xe08a (ignore this warning for RA)
[RRC] initial UL RRC message nr_cellid 0 does not match RRC’s 12345678
[NR_RRC] Decoding CCCH: RNTI e08a, inst 0, payload_size 6
[NR_RRC] receive rrcReestablishmentRequest message
[NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI e08a] NR_RRCReestablishmentRequest cause Other Failure
[NR_RRC] c_rnti is c9db
[NR_RRC] [FRAME 00000][gNB][MOD 00][RNTI e08a] [RAPROC] Logical Channel DL-DCCH, Generating NR_RRCReestablishment (bytes 2)
Assertion (0) failed!
In dl_rrc_message() /home/oai/workspace/develop/openairinterface5g/openair2/LAYER2/NR_MAC_gNB/mac_rrc_dl_handler.c:57
rrcReject not implemented yet
Exiting execution
Aborted
Hi,
You reach a known bug around reestablishment procedure because your mobile try multiple re-connections. People try to fix it.
I suggest to check the dialog with the 5GC to see if it started (with wireshark) because the UE reached “CBRA procedure succeeded” so the random access is successful.
You need to find out why the procedure doesn’t continue after: either radio link is poor or radio paramters are wrong or there is a protocol problem with the 5GC
Regards,
Laurent
Oh,Maybe the PC performance is insufficient. After I reduced the value of BWP1, this problem was solved.
Anyway, thank you all very much. This website has helped me a lot and I am very grateful!!!
Hi Laurent,
Adding some more UEs to the list:
1. Model: Pixel 6a
Type: smartp
firmware: Android 13 (GrapheneOS)
frequency bands: n41 and n78
plmn: 001-01
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works
2. Model: Xperia 10 IV
Type: smartp
firmware: Android 12 (Stock)
frequency bands: n41 and n78
plmn: 001-01
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works
Thank you for your contribution
Hi Laurent and Ahan,
I’m also using OAI gNB(plmn 00101, band 78) and Open5GS as my core network, but I found Xperia 10 dosen’t see the network, can you give me some suggestion here? Is there anything I missed?
Thanks!
Hi Everyone,
I am using Google Pixel 6a for the connection with OAI gNB 2023.w10 branch, OAI CN v1.5.
I have used PLMN 001/01.
My pixel is not getting attached to the CN.
Can you please let me know what can be the possible problems. I am using N320 usrp with UHD 4.3.0.0.
Dear Bharat,
Pixel works fine.
I suggest you start by rfsim and OAI UE to be sure the logic is in place
Regards,
Laurent
Hi Laurent,
I tried to connect Huawei P40 Pro using USRP B210. I was able to see the registration at the AMF but the UE didn’t get an IP address. At the same time, I got the following error log on the terminal of the gNB
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 968, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 968 k2 7 Msg3_tda_id 3
[NR_MAC] [gNB 0][RAPROC] Frame 968, Subframe 7: rnti 0187 RA state 2
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 969, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (969,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 970, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (970,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 971, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (971,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Random Access 2 failed at state 2 (Reached msg3 max harq rounds)
[NR_MAC] to remove in mac rnti_to_remove[0] = 0x0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x0187 in PUSCH
Thank you for your help!
Hi,
The UE probably decodes the SIB, then emit the RACH (or Msg1)
The gNB receives MSg1/RACH, emits Msg2, but never get Msg3.
Unfortunately, there can be multiple causes.
First test: verify the gNB doesn’t decode Msg1 when the UE is shutdown (or in airplane mode)
First of all thank you Laurent for your response!
I checked if the gNB again and I found that on the terminal we have this log even if the UE is shutdown.
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 968, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 968 k2 7 Msg3_tda_id 3
[NR_MAC] [gNB 0][RAPROC] Frame 968, Subframe 7: rnti 0187 RA state 2
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 969, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (969,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 970, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (970,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 971, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (971,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] Random Access 2 failed at state 2 (Reached msg3 max harq rounds)
[NR_MAC] to remove in mac rnti_to_remove[0] = 0x0187
[NR_MAC] Search for not existing rnti (ignore for RA): 0187
[NR_MAC] handle harq for rnti 0187, in RA process
[NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x0187 in PUSCH
Dear Raf,
So, it is the way to tune the Rx gain in gNB configuration.
You should get a few false RACH detections, a rate near 1 false detection by 1 second is a decent value.
You can even get down to 1 false detection per minute, that reduces a bit the covered range, but we don’t care at this stage.
So, when you have tuned the Rx gain, when you turn on the UE (airplane mode off), you should see a serie of RACH trials (if it fails) or a radio attach going further (Msg4, …)
Regards,
Laurent
Hello Laurent,
My issue like with Raf, but I use rfsim with oai ue, oai cn. I run the oai gnb based in docker containers with ubuntu OS. The UE can’t access, hoped for your help for this matter.
The gnb command: sudo ./nr-softmodem -O ../../../targets/PROJECTS/GENERIC-NR-5GC/CONF/gnb.sa.band78.fr1.106PRB.usrpb210.conf –rfsim –sa –rfsimulator.options chanmod –rfsimulator.modelname AWGN -E
The oai ue command:
sudo ./nr-uesoftmodem -r 106 –numerology 1 –band 78 -C 3619200000 –rfsim –sa –nokrnmod -E -O ../../../targets/PROJECTS/GENERIC-NR-5GC/CONF/ue.conf
And the error log of gnb as below:
[MAC] UL_info[Frame 685, Slot 19] Calling initiate_ra_proc RACH:SFN/SLOT:685/19
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 685 Activating Msg2 generation in frame 686, slot 7 using RA rnti 10b SSB, new rnti 5400 index 0 RA index 0
[NR_MAC] [gNB 0][RAPROC] CC_id 0 Frame 686, slotP 7: Generating RA-Msg2 DCI, rnti 0x10b, state 1, CoreSetType 2
[NR_MAC] [RAPROC] Msg3 slot 17: current slot 7 Msg3 frame 686 k2 7 Msg3_tda_id 3
[NR_MAC] [gNB 0][RAPROC] Frame 686, Subframe 7: rnti 5400 RA state 2
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] handle harq for rnti 5400, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 687, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (687,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] handle harq for rnti 5400, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 688, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (688,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] handle harq for rnti 5400, in RA process
[NR_MAC] [gNB 0][RAPROC] Frame 689, Slot 10 : CC_id 0 Scheduling retransmission of Msg3 in (689,17)
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] Random Access 0 failed at state 2 (Reached msg3 max harq rounds)
[NR_MAC] Search for not existing rnti (ignore for RA): 5400
[NR_MAC] handle harq for rnti 5400, in RA process
[NR_MAC] handle_nr_ul_harq(): unknown RNTI 0x5400 in PUSCH
Regards,
Bergen
The gNB doesn’t receive Msg3 (Msg1 is the RACH, Msg2 is the RAR (random access response)), Msg3 and Msg4 are the end of the random access procedure
Hi Laurent,
I’m not sure if you’ve had this happen to you. But, the Pixel 6 and above seem to get disconnected after about 5-10 minutes. The Pixel 4a/5/5a can stay connected for hours. I haven’t had much time to look into it, just sharing my observations.
That said, adding a few more UEs.
1. Model: Motorola Edge 2022 (Mediatek)
Type: smartp
firmware: Android 12
frequency bands: n41 and n78
plmn: 001-01
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works
2. Model: Motorola Edge+ 2022 (Qualcomm)
Type: smartp
firmware: Android 12
frequency bands: n41 and n78
plmn: 001-01
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works
Thanks for your contribution, i will update the list
Hi Ahan,
I have tried Motorola Edge+ 2022(Qualcomm) with OAI gNB(band 78 and plmn, USRP B210) and Open5gs, the Motorola finds the network, but from the gNB side I didn’t see any message from the Motorola… Is there any thing/settings I missed?
Thanks!
Hi Kai,
Dial the *#*#4636#*#* code on the Motorola and switch to NR only, and make sure that the APN is set up and enabled (in Network Settings). Also, disable VoLTE/4G calling. It should initiate RA with the gNB in a few minutes (for the first time).
If it still fails to attach (after a few tries), you can try connecting your B210 to an external clock source.
Hope this helps!
Dear Ahan,
Thanks i added this in the table of UEs,
Regards,
Laurent
Hi Ahan,
I have got this problem solved! Thank you very much!
Hi,
We just tried to connect Motorola Edge Plus but we have problem, UE finds network (5G NR) only when VoLTE is active (enabled in menu) but then registration fails due to lack of VoLTE activated on RAN side.
When VoLTE is disabled, UE not finding OAI network 5G NR) also with manual search 🙁
Dear Kamil,
My note on this is the firmware is incoherent and doesn’t comply to 3GPP+GSMA specifications.
Have you tried PLMN 001/01 ?
I will try to make a tutorial to install OAI RAN + OAI core + Asterisk, so VoXXX will work.
It is quite easy, using the good tutorial in OAI/doc directory to setup 5GC+RAN+UE+SIM, only install Asterisk to add and some configuration to make.
Regards,
Laurent
Hi Laurent,
following setup works fine:
Model: SIMCom SIM8262E-M2
Processor: Qualcomm Snapdragon X62
Firmware version: 2212B03V03X62M44A-M2
Band: n78
PLMN: 208/99
gNB: OAI/develop (wk40/22 but also newer versions)
5GC: OAI/develop
sim-type: open-cells
comment: trigger PDU-Session establishment with at+netopen
Thanks for your contribution, I will update the list
Hi Laurent,
Don’t know why the newlines are disappered. Posting it again to see if layouts better.
Thank you for maintaining these valuable info.
following setup works fine: Model: Oppo Reno 5G
Processor: Snapdragon 765G
Firmware version: Andriod V11.1
Band: n78 PLMN: 001/01
gNB: OAI/develop (2023.w10b but also older versions), USRP B210, SA
5GC: Open5GS/main, c0a61fb71, build from source
sim-type: Not sure
comment: For UE, VoLTE Call should be enabled and 5G Network Mode should be SA+NSA even the gNB and 5GC are both in SA mode. The 5G Network Mode can be found in developer setting. It seems like it does not work with PLMN other than 00101.
Tested NOT work with 00102, 00201, 20893.
Once the UE is registered, it has access to the WLAN. And the connection failed within 3 minutes, due to some paging error that I am not familiar with. The UE does send some APN(or DNN) other than “internet”, which triggers warnings in Open5GS log. But it does not stop it from registration and connecting to WLAN.
Thanks, i add in the list
Succesfully connected the Quectel RM520N-GL module and Industrial 5G router: Teltonika RUTX50
Dear Pavlos Basaras,
thanks for your contribution
Some details that i didn’t post earlier:
–For RUTX50:
Firmware version: RUTX_R_00.07.04.1
Model: Quectel RG501Q-EU
Internal modem firmware version: RG501QEUAAR12A07M4G_04.001.04.001
— For the Quectel RM520N-GL
Revision: RM520NGLAAR01A06M4G
For both devuces i used opencell sim cards with PLMN 00101
Band N78
OAI SA gNB: (git log: commit 6022fe5acd1943d104f68717b762a56d6a128740 (HEAD -> develop, tag: 2023.w16, origin/develop))
OAI SA Core: (git git log: commit 52a1be68ea3707e4bfcdc16b8a49657933129aca (HEAD -> master, tag: 2023.w04b, origin/master, origin/HEAD))
Hope it helps!
Dear Pavlos,
Thanks for sharing, i will update the table.
I think it will help people, no doubts.
I will also add soon a tutorial to add IMS server because a lot of phones need IMS DNN/APN and to register for voice over IP.
Regards,
Laurent
Hi,
i want to confirm that we successfully using Samsung S23 with market SW to connect with OAI (2023.w19 and fresher) with new OAI-CN iteration (IMS included).
We found that it’s more stable than Motorola Edge 30 Neo and Sony Xperia IV and results of TCP TP we achieved is around 250/270 Mbit/s.
PLMN 00101
BW up to 80MHz
VoLTE enabled.
sysmocom sim card with disabled 5G security calculations on simcard
—-
./pySim-shell.py -p0
verify_adm
select MF
select ADF.USIM
select EF.UST
ust_service_deactivate 124
thanks, i will update the tabel
We can confirm that Quectel RM502Q-AE connect with OAI (2023.w19 and fresher) with new OAI-CN iteration (IMS included).
PLMN 00101
BW up to 80MHz
sysmocom sim card
thanks i will update the table
done
Hi Laurent,
Adding some more modems to the list.
1. Model: Sierra Wireless EM9291
Type: M.2
firmware: All (Generic)
frequency bands: n41 and n78
plmn: 001-01/All
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works with generic firmware.
2. Model: Telit FN990A40
Type: M.2
firmware: All
frequency bands: n41 and n78
plmn: 001-01/All
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works with generic firmware.
3. Model: Telit FN990A28
Type: M.2
firmware: All
frequency bands: n41 and n78
plmn: 001-01/All
gNB: OAI/develop
5GC: open5gs
sim-type: open-cells
comment: works with generic firmware.
Note: All 3 modems work well with ModemManager. AT commands are not needed for establishing PDU sessions.
Dear Ahan,
Thanks for your contribution
Hi Laurent,
Adding one more modem to the list.
Model: SIM8200EA-M2
Type: M.2
Revision: SIM8200M44A-M2_B02V05_201201
frequency bands: n78
plmn: 208/01
gNB: OAI/develop
5GC: OAI CN
sim-type: open-cells
Comment: initial connection seems low, no success with 001/01. AT commands: trigger PDU-Session establishment with at+netopen
Thanks,
I add it
I think some people managed to use SIM8200EA.
Like you, we had one and we gave up to use it.
I will email you the discussion with the supplier
Regards
Hi Laurent,
Does the SIM card support other authentication algorithms besides Milenage? For example, XOR. I’d like to use it for testing.
Dear Max,
No, sorry, we do only milenage.
We actively look for a true 5G supplier: TUAK instead of Milenage and IMSI concealment, but no success until now.
Regards,
Laurent
Dear all,
was somebody able to connect a Nordic nRF9160 based UE over LTE M1 to an OAI 2.0.0 eNB (SDR: B210)?
Best regards,
Peter
Dear Peter,
Maybe ask on the OAI mailing list
Regards,
Laurent
Dear Laurent,
Did you ever tested a smartphone on the band n77 ?
I need to use this frequency band and I don’t know which device to use .
Regards
All tests reported are in the table
Hello all,
Reporting a success with Telit FN980, OAIdevelop, basically everything according to the actual (10/2023) OAI COTS UE guide. Works ok with both N310 and b210 USRP. Except the AT commands,… I use qmicli to control the modem.
Few catches to be shared.
– An AT command to set up/save the APN setting must always be issued, even if no AT commands are used to control the modem otherwise.
-wwan0 has to be set to rawIP before connecting
-the modem has to be kept offline/flight mode whenever not connected properly, since its own uncontrolled attempts to access the network can (and most probably will) crash your gNB.
-the time between turning off the flight mode and attempting to connect matters. Too low and the modem will not properly smell the network before connecting, so the connection fails on “no-service”. Too high and the modem tries to register itself even without being ordered, and the subsequent “qmicli –wds-start-network…” command crashes the gnb. 4 seconds sleep works for me.
-also, the core is better to be just freshly started before the connect attempt.
My guess is that all the upper problems have something to do with probably incomplete implementation of “reconnect” procedures in OAI. So if anyone (gNB, modem, or even core) thinks that the modem has already been registered/seen before, the registration/connect procedure gets slightly different than what works, and either the modem just do not connect or even the gNB crashes.
Regards
Jan
Dear Jan,
thanks for your contribution
Regards,
Laurent
Dear Laurent,
I’m struggling to connect Samsung S23+, Pixel 7 Pro, and HUAWEI P40 Pro to USRP X310 with gNB of OAI 2023_w37, and all trials have been failed.
So I post the questions on connecting COTS UE to USRP. I’m not sure that is it proper to post question here, but I’ve got stucked more than a week and there is no one to help me. If this question is not appropriate, I’ll delete it myself.
My question: What configurations are used to connect COTS UE in general and how can I debug the problem? (Do you use GPSDO or specialized antenna?)
Tested bands: 7, 41, 77, 78
My situation: I’ve got stucked in random access procedure. Pixel 7 Pro and Samsung s23+ hardly try RACH to gNB and I could hardly see msg3 procedure. P40 Pro is better, I could see msg4 procedure, but also msg4 fails. I guess this is not the problem of RF, since I find msg4 failure in band7, which I tested well with srsLTE.
Best regards,
Goodsol.
Hi,
As long as you see a rach, the UE decided to connect, so your problem is not directly related to this page focus for mow.
Let’s discuss anyway:
your Rx and Tx gains are probably not good, or
the antennas very badly tuned for the frequency you use.
GPDDO: i don’t think you need it
I have a Samsung S22+, US version. From https://www.gsmarena.com/samsung_galaxy_s22+_5g-11252.php, I see that this phone does not support band 78 in the US. It supports band 41. Has anybody tested with the OAI CN + OAI gNB + USRP B210 and successfully connected to Samsung S22+? Which band?
Hi,
with your suggestions, I focus on band 41, which also used in srsLTE.
I tested this band with my antenna in srsLTE, and find that connection was successful.
However, still openairtnteface5G does not work..
RUs = (
{
local_rf = “yes”
nb_tx = 2
nb_rx = 2
att_tx = 0
att_rx = 0;
bands = [41];
max_pdschReferenceSignalPower = -27;
max_rxgain = 75;
sf_extension = 0;
eNB_instances = [0];
#beamforming 1×4 matrix:
bf_weights = [0x00007fff, 0x0000, 0x0000, 0x0000];
clock_src = “internal”;
}
);
Here’s my setting, and when there is RACH, soon I can see Detected UL failure and the connection fails.