srsRAN_4G icon indicating copy to clipboard operation
srsRAN_4G copied to clipboard

srsUE can't attach commercial network with LimeSDR-USB

Open PYH2017 opened this issue 2 years ago • 2 comments

Issue Description

I'm trying to connect LimeSDR-USB with srsUE on a linux PC to a real commercial LTE network, using a pcsc card reader to read a real commercial sim card. srsUE can find the cell and RRC connections can be implemented, but UE can't attach and get the IP address

Setup Details

srsRAN version 19.12 Soapy version v0.7.2 LimeSuiteGUI version 20.01.0

The UE configuration is as follows: [rf] dl_earfcn = 300 freq_offset = 0 tx_gain = 60 rx_gain = 60 device_name = soapy device_args = rxant=LNAW,txant=BAND1 [usim] mode = pcsc algo = xor opc = 63BFA50EE6523365FF14C1F45F88737D k = 00112233445566778899aabbccddeeff imsi = 001010123456789 imei = 353490069873319 [rrc] ue_category = 4 release = 10

ueconf.txt ue.log

Expected Behavior

[What you expect to happen]

Actual Behaviour

Found Cell: Mode=FDD, PCI=435, PRB=75, Ports=1, CFO=-0.8 KHz [INFO] RX LPF configured Set Rx bandwidth to 11.52 MHz [INFO] Rx calibration finished [INFO] Filter calibrated. Filter order-4th, filter bandwidth set to 11.52 MHz.Real pole 1st order filter set to 2.5 MHz. Preemphasis filter not active [INFO] TX LPF configured Set Tx bandwidth to 11.52 MHz [INFO] Filter calibrated. Filter order-2nd, set to 50 MHz [INFO] TX LPF configured Set Tx bandwidth to 50.00 MHz [INFO] Tx calibration finished RF status: O=0, U=0, L=1 Found PLMN: Id=46011, TAC=30090 Random Access Transmission: seq=2, ra-rnti=0x2 LRandom Access Transmission: seq=4, ra-rnti=0x2 Random Access Complete. c-rnti=0x768a, ta=0 RRC Connected RF status: O=0, U=0, L=2 Scheduling request failed: releasing RRC connection... LRandom Access Transmission: seq=31, ra-rnti=0x2 LRandom Access Transmission: seq=7, ra-rnti=0x2 LRandom Access Transmission: seq=14, ra-rnti=0x2 LRandom Access Transmission: seq=20, ra-rnti=0x2 LRandom Access Transmission: seq=30, ra-rnti=0x2 LRandom Access Transmission: seq=10, ra-rnti=0x2 LRandom Access Transmission: seq=20, ra-rnti=0x2 LRandom Access Transmission: seq=19, ra-rnti=0x2 LRandom Access Transmission: seq=1, ra-rnti=0x2 LRandom Access Transmission: seq=6, ra-rnti=0x2 Warning: Detected Radio-Link Failure RF status: O=0, U=0, L=11 RF status: O=0, U=0, L=2 RRC IDLE Failed to Attach

Steps to reproduce the problem

[Tell us how to reproduce this issue e.g. RF setup, application config files]

Additional Information

In order to set the dl_earfcn correctly, I use a commercial cat4 module with the same sim card and get the serving cell using AT commands.

PYH2017 avatar Feb 19 '22 06:02 PYH2017

Hi, I'm by no means an expert but I've spent a good deal of time recently looking into the RA/RRC system within srsUE. It appears as though you've hit the maximum transmission count for RACH (which is 10), without receiving a Random Access Response (RAR), which contains information such as timing advance, temp C-RNTI and others. When RAR is received, the UE then sends MSG3 and continues with the attach sequence. However, after 10 RACH transmissions without an RAR, the system checks for whether or not any of the relevant timers are still running. If it detects that no timers are ongoing, it then triggers an RLF.

While I don't quite have the expertise to know why this is occurring, the above describes the nature of the issue you're experiencing. I'm also working on getting srsUE synced up with a real eNB (see #816), so if you'd like to compare notes we can correspond on the forum, or you can shoot me an email at the address in my profile.

Best of luck!

sonium-labs avatar Mar 03 '22 18:03 sonium-labs

Same Problem here, is there any news? There are my srsue logs Active RF plugins: libsrsran_rf_uhd.so libsrsran_rf_soapy.so libsrsran_rf_blade.so libsrsran_rf_zmq.so Inactive RF plugins: Reading configuration file ue.conf... WARNING: cpu0 scaling governor is not set to performance mode. Realtime processing could be compromised. Consider setting it to performance mode before running the application.

Built in Release mode using commit f2dff0b7a on branch master.

Opening 1 channels in RF device=soapy with args=driver=lime,soapy=0,rxant=LNAH,txant=BAND2 Supported RF device list: UHD soapy bladeRF zmq file Soapy has found device #0: addr=24607:1027, driver=lime, label=LimeSDR Mini [USB 3.0] 1D4C426044C88F, media=USB 3.0, module=FT601, name=LimeSDR Mini, serial=1D4C426044C88F, Selecting Soapy device: 0 [INFO] Make connection: 'LimeSDR Mini [USB 3.0] 1D4C426044C76F' [INFO] Reference clock 40.00 MHz [INFO] Device name: LimeSDR-Mini [INFO] Reference: 40 MHz [INFO] LMS7002M register cache: Disabled Setting up Rx stream with 1 channel(s) Setting up Tx stream with 1 channel(s) [INFO] RX LPF configured [INFO] Filter calibrated. Filter order-4th, filter bandwidth set to 5 MHz.Real pole 1st order filter set to 2.5 MHz. Preemphasis filter not active [INFO] TX LPF configured Available device sensors:

  • clock_locked
  • lms7_temp Available sensors for Rx channel 0:
  • lo_locked Setting Rx channel 0 antenna to LNAH Setting Tx channel 0 antenna to BAND2 State of gain elements for Rx channel 0 (AGC not supported):
  • TIA: 9.00 dB
  • LNA: 30.00 dB
  • PGA: -7.00 dB State of gain elements for Tx channel 0 (AGC not supported):
  • PAD: 0.00 dB
  • IAMP: 0.00 dB Rx antenna set to LNAH Tx antenna set to BAND2 Waiting PHY to initialize ... done! Attaching UE... [INFO] Tx calibration finished [INFO] Rx calibration finished . Found Cell: Mode=FDD, PCI=310, PRB=75, Ports=4, CP=Normal, CFO=0.4 KHz [INFO] RX LPF configured [INFO] Filter calibrated. Filter order-4th, filter bandwidth set to 15.36 MHz.Real pole 1st order filter set to 2.5 MHz. Preemphasis filter not active [INFO] TX LPF configured Found PLMN: Id=302655, TAC=28420 Could not find Home PLMN Id=302655, trying to connect to PLMN Id=302655 Random Access Transmission: seq=16, tti=4411, ra-rnti=0x2 LRandom Access Transmission: seq=43, tti=4431, ra-rnti=0x2 RRC Connected Random Access Complete. c-rnti=0x6ab, ta=22 /home/sunny/gsm/srsRAN/lib/src/phy/phch/ra_dl.c:529: Reserved codebook index (nof_tb=2, pinfo=47) /home/sunny/gsm/srsRAN/lib/src/phy/phch/ra_dl.c:592: Configuring MIMO PMI RF status: O=0, U=0, L=1 Scheduling request failed: releasing RRC connection... LRandom Access Transmission: seq=44, tti=5861, ra-rnti=0x2 LRandom Access Transmission: seq=41, tti=5881, ra-rnti=0x2 LRandom Access Transmission: seq=21, tti=5901, ra-rnti=0x2 LRandom Access Transmission: seq=48, tti=5921, ra-rnti=0x2 LRandom Access Transmission: seq=18, tti=5941, ra-rnti=0x2 LRandom Access Transmission: seq=32, tti=5961, ra-rnti=0x2 LRandom Access Transmission: seq=14, tti=5981, ra-rnti=0x2 LRandom Access Transmission: seq=19, tti=6001, ra-rnti=0x2 LRandom Access Transmission: seq=43, tti=6021, ra-rnti=0x2 LRandom Access Transmission: seq=26, tti=6041, ra-rnti=0x2 Warning: Detected Radio-Link Failure RRC IDLE RF status: O=0, U=0, L=10 Attach failed (attempt 1/5)

Here is my ue.conf [rf] freq_offset = 0 tx_gain = 90 rx_gain = 90 device_name = soapy device_args = driver=lime,soapy=0,rxant=LNAH,txant=BAND2

[rat.eutra] dl_earfcn = 2825 [pcap] enable = mac,nas,mac_nr mac_filename = /tmp/ue_mac.pcap mac_nr_filename = /tmp/ue_mac_nr.pcap nas_filename = /tmp/ue_nas.pcap

[log] all_level = warning phy_lib_level = none all_hex_limit = 32 filename = /tmp/ue.log file_max_size = -1

[usim] mode = pcsc reader = algo = milenage [rrc] ue_category = 4 release = 10 [gui] enable = false

sunbytez avatar Jul 01 '22 23:07 sunbytez