630 likes | 861 Views
AP-6000. HSDPA. InterRat. GPRS. GSM. WCDMA. HSUPA. Air Protocol Analyzer. Main Characteristics & Benefits. RNC. Node B. Node B. AP-6000 Air Protocol Analyzer. System Diagram. The AP-6000 is designed to analyze the air interface (Uu) in WCDMA Networks. Iu CS/PS. Iub. DL. Iub.
E N D
HSDPA InterRat GPRS GSM WCDMA HSUPA Air Protocol Analyzer
RNC Node B Node B AP-6000 Air Protocol Analyzer System Diagram • The AP-6000 is designed to analyze the air interface (Uu) in WCDMA Networks IuCS/PS Iub DL Iub Traced UE UL Uu UL DL • Does not require any physical connection to UE, Node B or target Network DL – Downlink UL – Uplink Uu – UE/UTRAN Interface Iub – Node B/RNC Interface
Main Characteristics • Displays the signaling and information of Layers 1, 2 and 3 of the UTRAN Air Protocol • Provides Control Plane and User Plane information • Fully compliant with 3GPP specifications – Release ’99, 5 and 6 (HSUPA)
Main Characteristics • UE & BTS vendor Independent • Auto & Manual modes • Follows UE throughout the whole communication process by decoding RRC messages
Benefits • Allows a complete analysis of the Uu protocol as well as data for higher level applications • Auto mode: a fast way to find a Cell, UE and start analysis • Manual mode: parameter setting provides R&D engineers with a flexible and powerful tool to analyze a wide range of scenarios
Benefits • Provides an independent and reliable source for protocol analysis between UE and Node B • Off‑line analysis provides R&D and IOT engineers critical data: • Form L1 signaling to L2, L3 messages, C‑plane and U‑plane • Reduce testing time & time to market
AP-6000 basics HW and SW
System Configuration • The Main Unit requires the Console PC for configuration and operation • Off-line data is analyzed in console PC • Full stand alone operation of Main Unit is under development. It’ll use the Touch Screen LCD for Main Unit configuration and call capture LAN Connection On Board PC & Boards IQ Inputs RF Inputs Touch Screen LCD Console PC Main Unit
RF Configuration • Integrated RF units monitor WCDMA, GSM and InterRAT calls • Each RF units captures the UL and DL radio signals between UE and Node Bs RF Unit 3 – DL & UL GSM (Optional) RF Unit 2 – DL & UL WCDMA RF Unit 1 – DL & UL WCDMA
RF Specifications • WCDMA: Dual RF / Quad Band units provide the capacity to follow inter-frequency HO • GSM Option
Boards • The AP-6000 has an on-board PC to control all the Main Unit’s functions • 4 Standard WCDMA Boards + 1 Optional GSM Board • Call information is stored in Console PC On-board PC WCDMA UL Board WCDMA DL Board 1 (RF Unit 1) WCDMA DL Board 2 (RF Unit 2) WCDMA HSDPA Board GSM Board (Optional)
Boards • Board’s configuration is stored in CF memories • HSUPA option does not require a separate board On-board PC Each board stores its configuration and code in CF memories
Software • The AP-6000 system software consist of five parts • Console software running on Windows XP • Firmware running on Main Unit • FPGA configuration in Main Unit’s Boards • DSP code in Main Unit’s Boards • On-board Main Unit’s PC • Software uploads are made through the Console PC
In/Out Synch Interfaces • The AP-6000 provides input and output interfaces to synchronize with other equipments • Output: 10msec pulse controlled by DL or UL RRC messages • Input: 10msec or 100µsec pulse Sync In Sync Out
Basic Features • The AP-6000 has three main steps in its operation: • Configuration • Real Time Capture • Off-line Analysis
Basic Features • Configuration • Allows to set up parameters on how the AP is going to work • Band & Frequency • Auto or Manual modes • Which UE to follow
Basic Features • Real Time Capture • Trace a particular UE following RRC messages • Off-line Analysis • The console software provides several ways to display signaling information as well as control and user plane data • Allows to export data such as SIB, TPC at frame and time slot level, U-plane data
Configuration – Auto Mode • The first step is to create a SCENE and configure basic parameters • The SCENE will contain all the calls we record • A file is created with each SCENE and the calls are automatically saved Auto or Manual Mode Band and DL Frequency # of cells to be detected (idle mode)
Configuration – Auto Mode • Once the Band and Frequency have been set, the SCH can be detected SCH Profile * • Node Bs detected with: • SCH strength in dBm * • Primary SCR Code * * The information displayed here is from a simulation.
Configuration – Auto Mode • Configure if the call is going to be carried out in one or two frequencies (Inter-Freq HO) • In the case of Inter-Freq HO, AP only needs to know the first DL Freq. Changes in Freq are followed according to InterFreqMeasurmentInfo, or RRC messages containing info on the second Freq. Single or Multiple Freq
Configuration – Auto Mode • There are three ways to trace a UE • First FACH • First RACH • Specify a UE ID by its IMSI, TIMSI, P-TIMSI or IMEI • The console SW allows to store the 16 most used UEs Way to trace a UE
Configuration – Auto Mode • AP has built in the KASUMI algorithm used for encryption in UMTS • In order to properly decode all messages the AP needs to know the CK used by the UE • Four options: • Enter the CK values • Use a Test USIM and enter the K value • Use the RS-232 port in the Console PC to enter the CK values from the UE as they change during the call. This required a special modified UE with access to CK values • USIM reader Ciphering Options
Configuration – Auto Mode • Fifth option • Using a UE that does not support ciphering Note: If CKs are unknown it is possible to decode the common channels but not the dedicated channels Ciphering Options
Real Time Capture • Start recording a call • Once the configuration is done, it is time to record a call • Recording a call is known as a TAKE • There can be many TAKES in on SCENE file • Each individual TAKE can be saved without the need of keeping the original SCENE file Start a Take
Real Time Capture • Real time Window • Physical and Transport Channel signaling is shown during a Take HSDPA Channels WCDMA Channels RRC Messages HSUPA Channels
Real Time Capture • Real time Window • The yellow vertical timeline advances with every frame, that is every 10msec • For WCDMA channels, each line represents a Transport Channel • For HSDPA/HSUPA channels, each line represents a 2msec sub-frame Timeline Timeline Tr Channels 2msec sub-frames Note: Green: CRC-OK or ACK* Red: CRC-Error or NACK* Yellow: Data w/o CRC or None* * Depending on the type of channel
Off-line Analysis • The Off-line Analysis give the options to see detailed information in all 3 layers as well as control and user plane • RRC Messages • Power control • PDUs PDU protocol data unit SDU service data unit
Off-line Analysis • Main Screens: • Layer 1 Graphic View • Layer 1 Data Dump • BCH Analysis • C-Plane RRC/NAS Analysis • U-Plane Analysis • Online Messages • C-Plane RLC Analysis • U-Plane RLC Analysis
Off-line Analysis • Layer 1 Graphic View • It provides a similar view to the Real Time Window plus Transport and Physical channels data Physical and Transport Channels signaling Transport Channels Data Physical Channels Data (Control information TFCI, TPC)
Off-line Analysis • Layer 1 Data Dump • It provides information on the selected Transport and Physical channels Transport Channels Filter Physical Channels (Control information TFCI, TPC)
Off-line Analysis • C-Plane RRC/NAS Analysis • RRC Messages with RLC sequence No. & RLC Control PDUs • RRC/NAS ASN.1 display • RRC PDU data • RLC & MAC Layer data • Transport Channel data • Efficient way to Troubleshooting RRC Messages RB Inf. L3 SDU L2 MAC SDU L2 RLC SDU RRC Messages ASN.1 Tr CH Data
TCP/IP analysis (by Ethereal) Off-line Analysis • U-Plane Analysis • U-Plane data in units of RLC SDUs & sequence No. • IPv4 Header display with Hex and ASCIIdump of data payload • RLC, MAC, Tr CH layer data • Detailed TCP/IP Analysis • Evaluation for UE application
Off-line Analysis • C & U-Plane RRC/NAS Analysis • Statistic information • Total Data PDU • Total Data PDU with Polling bit • Resend Data • Reset PDU • Reset ACK PDU • Status PDU Statistical Information
Off-line Analysis • C & U-Plane RRC/NAS Analysis • RLC sequence information • Direction (UL/DL) • Transaction of RLC PDU • Resend data, Ack & Nack PDU • Reason of Re-send is estimated • Evaluate Service Quality RRC Messages ASN.1
Options • HSUPA Analysis Software Software upgrade to support HSUPA. No additional hardware required (Based on 3GPP Dec 2005 version) • InterRAT Monitoring (GSM/GPRS) Factory upgrade of AP-6000 for InterRAT monitoring. Additional GSM/GPRS module, RF unit and InterRAT monitoring software is required • Off-line viewer software license Off line viewer can process AP log files on a local PC. It has the same analyzing features of the console software
Options • U-plane data PCAP format file export File export function. PCAP format file can be created from user plane data in the AP log database • LSC format file export File export function. LSC format file can be created form RRC message on the AP log database (Anritsu LSC software can use the file as input) • U-plane data PPP on UDI PCAP format file export File export function. PCAP format file can be created from PPP protocol data on UDI user plane in AP log database UDI - Unrestricted Digital Information This is an ISDN (Integrated Services Digital Network) term to describe the ability to transfer any bit pattern over a digital channel.
Options • SS (Supplementary Services) message analysis Analysis function for upper layer message on control plane data • U-plane data H.245 decode User plane data analysis function. TV call protocol H.245 header can be decoded and displayed on the user plane data analysis window • MBMS • HSPA+ • Remote Control Customization: Special requirements can be evaluated and implemented
Lab Scenario Duplication LSC Format Files lsc_bch.txt lsc_flow.txt Log Scenario Covert Software loads LSC files and creates test scenario for MD8480 Anritsu MD8480 Data conversion software AP log file to LSC format Test Mobile Options – LSC Format File Export LSC format file export • Conversion of AP log file data to LSC format • Anritsu LSC software generates test scenario for MD8480 signaling tester • Reduce programming time Note: The “LSC Log Scenario Converter” software is sold by Anritsu Engineering
Options – LSC Format File Export LSC format file export lsc_bch.txt lsc_flow.txt Scenario Compiler Note: The “LSC Log Scenario Converter” software is sold by Anritsu Engineering
PCAP Format <FileName>.log Data conversion software AP log file to PCAP format • TCP-IP Analysis software (3rd party software) • TCP header • TCP-IP protocol sequence • TCP-IP user data • Web access data • e-mail data Options – U-plane Data Conversion U-plane data PPP on UDI PCAP format file export • U-plane data PPP on UDI packets can be exported to PCAP format file to be analyzed by third party TCP-IP analysis software – i.e. Ethereal • Packet data is a digital circuit packet communication on UDI
GSM/WCDMA Capable UE AP-6000 With GSM Option Options – GSM GSM/InterRAT • Allows the AP monitoring GSM calls as well as InterRAT WCDMA GSM handovers • Factory upgrade option for standard AP-6000 • Additional board, RF Unit and Software GSM DL GSM BS WCDMA Node B WCDMA DL
FAQs - Handovers • How do I see Inter-Frequency HO? • Real Time Window and Off-line: The AP displays DPCH 1 and 2 corresponding to RF1 and RF2 during Inter-Frequency Handover • Online RRC messages such as PhysicalChannelReconfiguration Inter-Freq HO shown in the DL Inter-Freq HO shown in the UL
FAQs - Handovers • How do I see Inter-Frequency HO? • Off-line: Detailed RRC message sequence and ASN.1 details RRC messages list: PhysicalChannelReconfiguration RRC messages list ASN.1
FAQs - Handovers • How do I see Intra-Frequency HO? • Real Time Window and Off-line: The AP combines all DPCH involved in the Intra-Freq HO so it is not possible to see the HO in a graphical way • Off-line: It is possible to see the RRC messages such as ActiveSetUpdate adding or releasing RLs • In this case new RL is added at ITC 46076 with SCR 18
FAQs - Handovers • Then, we can see in Layer 1 Data Dump Physical CHs that at ITC 4607B, 50msec later, there are 3 DPCCHs (0, 1 and 2) in the DL • It is possible to see detailed information such as RSSI, RSCP and SFN