BTS Configurations using rmanager

You are here:
< All Topics

BTS LabKit/SatSite can be configured using rmanager.

Accessing rmanager

Note: rmanager commands takes immediate effect but they are not persistent.

MBTS commands

To see the mbts commands when connected, just type “mbts” after connecting and press Tab after it. Yate will respond with the available mbts commands.

mbts 
alarms  audit   cellid  chans   config  crashme devconfig       freqcorr        gprs    help    load    noise   notices page    powerradio    rawconfig       regperiod       reload  rmconfig        rxgain  sgsn    shutdown        stats   sysinfo trxfactory      txatten       unconfig        uptime  version

alarms

This command lists the latest alarms.

audit

This command goes through the current configuration and reports the issues discovered. The command provides the following diagnosis information:

  • ERROR: referring to keys with invalid values
  • WARNING: referring to key values that are different from the factory radio calibration values
  • WARNING: referring to interacting values that might lead to errors
  • WARNING: referring to site values that are still default
  • INFO: referring to non-default values

Below is a sample output

> mbts audit 
+---------------------------------------------------------------------+
| ERROR : Invalid Values [key current-value (default)]                |
|   To use the default value again, execute: rmconfig key             |
+---------------------------------------------------------------------+
GPRS.LLC.PDUExpire "60000" ("60000")
GSM.RACH.AC "0x0400" ("0x0400")

+---------------------------------------------------------------------+
| WARNING : Site Values Which Are Still Default [key current-value]   |
|   These should be set to fit your installation: config key value    |
+---------------------------------------------------------------------+
GSM.Identity.BSIC.BCC "2"
GSM.Identity.BSIC.NCC "0"
GSM.Identity.MCC "001"
GSM.Identity.MNC "01"

+---------------------------------------------------------------------+
| INFO : Non-Default Values [key current-value (default)]             |
|   To use the default value again, execute: rmconfig key             |
+---------------------------------------------------------------------+
Control.GSMTAP.GPRS "off" ("no")
Control.GSMTAP.GSM "off" ("no")
Control.LUR.AttachDetach "on" ("yes")
Control.SMSCB "off" ("no")
Control.VEA "on" ("yes")
GGSN.IP.TossDuplicatePackets "off" ("no")
GGSN.Logfile.Name "ggsn.log" ("")
GPRS.ChannelCodingControl.RSSI "-20" ("-40")
GPRS.Debug "1" ("no")
GPRS.Enable "on" ("yes")
GPRS.LocalTLLI.Enable "on" ("yes")
GPRS.Reassign.Enable "on" ("yes")
GPRS.Release "4" ("2")
GPRS.SendIdleFrames "off" ("no")
GPRS.TBF.EST "on" ("yes")
GSM.Channels.C1sFirst "off" ("no")
GSM.Cipher.CCHBER "0.0" ("0")
GSM.Cipher.Encrypt "off" ("no")
GSM.Cipher.RandomNeighbor "0.0" ("0")
GSM.Cipher.ScrambleFiller "off" ("no")
GSM.Radio.Band "1800" ("900")
GSM.Radio.NeedBSIC "off" ("no")
GSM.Radio.PowerManager.MaxAttenDB "15" ("10")
GSM.Radio.PowerManager.MinAttenDB "15" ("0")
GSM.Radio.RSSITarget "-30" ("-50")
SGSN.Debug "off" ("no")
TRX.RadioFrequencyOffset "142" ("128")
TRX.TxAttenOffset "46" ("0")

+---------------------------------------------------------------------+
| INFO : Custom/Deprecated Key/Value Pairs [key current-value]        |
|   To clean up any extraneous keys, execute: rmconfig key            |
+---------------------------------------------------------------------+
GPRS.Channels.Max "4"
GPRS.FixDRX ""
GPRS.FixForeignTlli ""
GPRS.FixIAUsePoll ""
GPRS.FixIdleFrame ""
GPRS.FixTFIBug ""
GPRS.SGSN.Host ""
GPRS.ThreadAdvance ""
GPRS.UplinkDutyFactor ""
GPRS.WATCH ""
GSM.Channels.Randomize ""
GSM.SI3RO ""
GSM.SI3RO.CBQ ""
GSM.SI3RO.CRO ""
GSM.SI3RO.PENALTY_TIME ""
GSM.SI3RO.TEMPORARY_OFFSET ""
Handover.enable "on"
Handover.reason "GSM;text="Handover""
Log.Level.CLI.cpp ""
Log.Level.DCCHDispatch.cpp ""
Log.Level.GSMConfig.cpp ""
Log.Level.GSML1FEC.cpp ""
Log.Level.GSML2LAPDm.cpp ""
Log.Level.GSML3GPRSElements.cpp ""
Log.Level.GSML3RRMessages.cpp ""
Log.Level.GSMLogicalChannel.cpp ""
Log.Level.GSMLogicalChannel.h ""
Log.Level.GSMSAPMux.cpp ""
Log.Level.GenConnection.cpp ""
Log.Level.MAC.cpp ""
Log.Level.PowerManager.cpp ""
Log.Level.RadioResource.cpp ""
Log.Level.Reporting.cpp ""
Log.Level.SigConnection.cpp ""
Log.Level.TRXManager.cpp ""
Log.Level.iputils.cpp ""
Log.Level.miniggsn.cpp ""
TRX.MinimumRxRSSI "-63"
TRX.TX.OffsetI "0"
TRX.TX.OffsetQ "0"
TRX.clock_update_offset "16"
TRX.gsm_time_sync_check "0"
TRX.print_status "0"
TRX.print_status_bursts "on"
TRX.radio_latency_slots "5"
TRX.radio_read_priority "highest"
TRX.radio_send_priority "high"
TRX.tx_silence_debug_interval "5000"
TRX.tx_slots "16"

cellid

This command displays the following identity parameters:

  • MCC: Mobile Country Code, formed from three digits
  • MNC: Mobile Network Code, formed from two or three digits
  • LAC: Location Area Code, containing 16 bits, any from 0 to 65520 being valid values (note that values 0xFFxx are reserved)
  • CI: Cell Identity, containing 16 bits, any from 0 to 65535 being valid values
> mbts cellid    
MCC=001 MNC=01 LAC=1126 CI=1126

chans

This command displays the physical channel status for active dedicated channels from the channel table. The generated values are the following:

  • TN: The Timeslot Number
  • chan type: The type of the dedicated channel
  • transaction ID: The key for the corresponding entry in the transaction table that is currently using the channel
  • RSSI dB: The uplink RSSI at the basestation with a value expressed in dB according to the full scale
  • UPFER pct: The uplink frame erasure rate expressed as a percentage
  • TXPWR dBm The current transmitter power from the mobile station, expressed in dBm
  • TXTA sym: The timing advance in symbol periods
  • DNLEV dBM: The downlink RSSI with a value expressed in dBm, measured by the mobile station
  • DNBER pct: The downlink bit error rate expressed as percentage

You can see an output example below:

CN TN chan      transaction active recyc UPFER RSSI TXPWR TXTA DNLEV DNBER Neighbor Neighbor 
CN TN type      id                       pct    dB   dBm  sym   dBm   pct    ARFCN    dBm 

config

This command displays and modifies parameters in the configuration table. It is highly useful when operating the mbts interface and is typically used to create, check or modify a value in the configuration table.

To view the configurations, use the command without parameters

mbts config
Control.GSMTAP.GPRS off
Control.GSMTAP.GSM off
Control.GSMTAP.TargetIP 127.0.0.1     [default]
Control.LUR.AttachDetach on
Control.Reporting.PhysStatusTable (disabled)     [default]
Control.Reporting.StatsTable (disabled)     [default]
Control.SMSCB off
Control.VEA on
GGSN.DNS (disabled)     [default]
GGSN.Firewall.Enable 1     [default]
GGSN.IP.TossDuplicatePackets off
GGSN.MS.IP.Base 192.168.99.1     [default]
GGSN.MS.IP.MaxCount 254     [default]
GGSN.MS.IP.Route (disabled)     [default]
GGSN.ShellScript (disabled)     [default]
GPRS.CellOptions.AdvertiseEDGE no     [default]
GPRS.CellOptions.T3168Code 5     [default]
GPRS.CellOptions.T3192Code 0     [default]
GPRS.Channels.Min.C0 3     [default]
GPRS.Channels.Min.CN 0     [default]
GPRS.Enable on
GPRS.LocalTLLI.Enable on
GPRS.MS.Power.RSSIInterval 3     [default]
GPRS.MS.Power.RSSITarget -25     [default]
GPRS.Multislot.Max.Downlink 3     [default]
GPRS.Multislot.Max.Uplink 2     [default]
GPRS.NMO 2     [default]
GPRS.Reassign.Enable on
GPRS.TBF.EST on
GPRS.TBF.Retry 1     [default]
GSM.CCCH.AGCH.QMax 5     [default]
GSM.CCCH.CCCH-CONF 1     [default]
GSM.CellOptions.RADIO-LINK-TIMEOUT 15     [default]
GSM.CellSelection.CELL-RESELECT-HYSTERESIS 3     [default]
GSM.CellSelection.NCCsPermitted -1     [default]
GSM.CellSelection.NECI 1     [default]
GSM.Channels.C1sFirst off
GSM.Channels.NumC1s 7     [default]
GSM.Channels.NumC7s 0     [default]
GSM.Channels.SDCCHReserve 0     [default]
GSM.Cipher.CCHBER 0.0
GSM.Cipher.Encrypt off
GSM.Cipher.RandomNeighbor 0.0
GSM.Cipher.ScrambleFiller off
GSM.Handover.InitialHoldoff 5000     [default]
GSM.Handover.LocalRSSIMin -80     [default]
GSM.Handover.RepeatHoldoff 3000     [default]
GSM.Handover.ThresholdDelta 10     [default]
GSM.Identity.BSIC.BCC 2     [default]
GSM.Identity.BSIC.NCC 0     [default]
GSM.Identity.CI 1126
GSM.Identity.LAC 1126
GSM.Identity.MCC 001     [default]
GSM.Identity.MNC 01     [default]
GSM.MS.Power.Damping 50     [default]
GSM.MS.Power.Max 33     [default]
GSM.MS.Power.Min 5     [default]
GSM.MS.TA.Damping 50     [default]
GSM.MS.TA.Max 62     [default]
GSM.MaxSpeechLatency 2     [default]
GSM.Neighbors.NumToSend 8     [default]
GSM.Ny1 5     [default]
GSM.RACH.AC 0x0400     [default]
GSM.RACH.MaxRetrans 1     [default]
GSM.RACH.TxInteger 14     [default]
GSM.Radio.ARFCNs 1     [default]
GSM.Radio.Band 1800
GSM.Radio.C0 882
GSM.Radio.MaxExpectedDelaySpread 2     [default]
GSM.Radio.PowerManager.MaxAttenDB 15
GSM.Radio.PowerManager.MinAttenDB 15
GSM.Radio.RSSITarget -30
Handover.EUTRAN.EARFCN 0     [default]
Handover.EUTRAN.QRXLEVMIN -140     [default]
Handover.EUTRAN.priority 6     [default]
Handover.EUTRAN.thresh_priority_high 18     [default]
Handover.EUTRAN.thresh_priority_low 18     [default]
Handover.GSM.H_PRIO 0     [default]
Handover.GSM.T_reselection 0     [default]
Handover.GSM.priority 2     [default]
Handover.GSM.thresh_gsm_low 15     [default]
Log.Alarms.Max 20     [default]
Log.Level NOTICE     [default]
yate-sdr@ybts-officess> 
yate-sdr@ybts-officess> mbts config
Control.GSMTAP.GPRS off
Control.GSMTAP.GSM off
Control.GSMTAP.TargetIP 127.0.0.1     [default]
Control.LUR.AttachDetach on
Control.Reporting.PhysStatusTable (disabled)     [default]
Control.Reporting.StatsTable (disabled)     [default]
Control.SMSCB off
Control.VEA on
GGSN.DNS (disabled)     [default]
GGSN.Firewall.Enable 1     [default]
GGSN.IP.TossDuplicatePackets off
GGSN.MS.IP.Base 192.168.99.1     [default]
GGSN.MS.IP.MaxCount 254     [default]
GGSN.MS.IP.Route (disabled)     [default]
GGSN.ShellScript (disabled)     [default]
GPRS.CellOptions.AdvertiseEDGE no     [default]
GPRS.CellOptions.T3168Code 5     [default]
GPRS.CellOptions.T3192Code 0     [default]
GPRS.Channels.Min.C0 3     [default]
GPRS.Channels.Min.CN 0     [default]
GPRS.Enable on
GPRS.LocalTLLI.Enable on
GPRS.MS.Power.RSSIInterval 3     [default]
GPRS.MS.Power.RSSITarget -25     [default]
GPRS.Multislot.Max.Downlink 3     [default]
GPRS.Multislot.Max.Uplink 2     [default]
GPRS.NMO 2     [default]
GPRS.Reassign.Enable on
GPRS.TBF.EST on
GPRS.TBF.Retry 1     [default]
GSM.CCCH.AGCH.QMax 5     [default]
GSM.CCCH.CCCH-CONF 1     [default]
GSM.CellOptions.RADIO-LINK-TIMEOUT 15     [default]
GSM.CellSelection.CELL-RESELECT-HYSTERESIS 3     [default]
GSM.CellSelection.NCCsPermitted -1     [default]
GSM.CellSelection.NECI 1     [default]
GSM.Channels.C1sFirst off
GSM.Channels.NumC1s 7     [default]
GSM.Channels.NumC7s 0     [default]
GSM.Channels.SDCCHReserve 0     [default]
GSM.Cipher.CCHBER 0.0
GSM.Cipher.Encrypt off
GSM.Cipher.RandomNeighbor 0.0
GSM.Cipher.ScrambleFiller off
GSM.Handover.InitialHoldoff 5000     [default]
GSM.Handover.LocalRSSIMin -80     [default]
GSM.Handover.RepeatHoldoff 3000     [default]
GSM.Handover.ThresholdDelta 10     [default]
GSM.Identity.BSIC.BCC 2     [default]
GSM.Identity.BSIC.NCC 0     [default]
GSM.Identity.CI 1126
GSM.Identity.LAC 1126
GSM.Identity.MCC 001     [default]
GSM.Identity.MNC 01     [default]
GSM.MS.Power.Damping 50     [default]
GSM.MS.Power.Max 33     [default]
GSM.MS.Power.Min 5     [default]
GSM.MS.TA.Damping 50     [default]
GSM.MS.TA.Max 62     [default]
GSM.MaxSpeechLatency 2     [default]
GSM.Neighbors.NumToSend 8     [default]
GSM.Ny1 5     [default]
GSM.RACH.AC 0x0400     [default]
GSM.RACH.MaxRetrans 1     [default]
GSM.RACH.TxInteger 14     [default]
GSM.Radio.ARFCNs 1     [default]
GSM.Radio.Band 1800
GSM.Radio.C0 882
GSM.Radio.MaxExpectedDelaySpread 2     [default]
GSM.Radio.PowerManager.MaxAttenDB 15
GSM.Radio.PowerManager.MinAttenDB 15
GSM.Radio.RSSITarget -30
Handover.EUTRAN.EARFCN 0     [default]
Handover.EUTRAN.QRXLEVMIN -140     [default]
Handover.EUTRAN.priority 6     [default]
Handover.EUTRAN.thresh_priority_high 18     [default]
Handover.EUTRAN.thresh_priority_low 18     [default]
Handover.GSM.H_PRIO 0     [default]
Handover.GSM.T_reselection 0     [default]
Handover.GSM.priority 2     [default]
Handover.GSM.thresh_gsm_low 15     [default]
Log.Alarms.Max 20     [default]
Log.Level NOTICE     [default]

To change the configuration for any of the values:

  • To have a description of the key and a list of valid values , use the command with key you want to change : mbts cofig <key>
  • To change the value, use the command: mbts cofig <key> <value>

Below is an example to change min power from 15 dB to 10 dB:

> mbts config GSM.Radio.PowerManager.MinAttenDB
GSM.Radio.PowerManager.MinAttenDB 15
 - description:      Minimum transmitter attenuation level, in dB wrt full scale on the D/A output.  This sets the maximum power output level in the output power control loop.
 - units:            dB
 - type:             value range
 - default value:    0
 - visibility level: customer tune - should only be changed to tune an installation to better suit the physical environment or MS usage pattern
 - static:           0
 - valid values:     from 0 to 80

yate-sdr@ybts-officess> mbts config GSM.Radio.PowerManager.MinAttenDB 10
GSM.Radio.PowerManager.MinAttenDB changed from "15" to "10"

crashme

This command turns off and restarts the MBTS without actually turning off Yate.

devconfig

This command allows the configuration of certain parameters that are not commonly meant to be modified in a normal environment. However, when necessary, the devconfig command displays these parameters and allows them to be changed. Among them are the Control, GGSN, GPRS, GSM, SGSN, Log or TRX related parameters.

To view the configurations, use the command without arguments : mbts devconfig

> mbts devconfig 
Control.GSMTAP.GPRS off
Control.GSMTAP.GSM off
Control.GSMTAP.TargetIP 127.0.0.1     [default]
Control.LUR.AttachDetach on
Control.Reporting.PhysStatusTable (disabled)     [default]
Control.Reporting.StatsTable (disabled)     [default]
Control.SACCHTimeout.BumpDown 1     [default]
Control.SMSCB off
Control.VEA on
GGSN.DNS (disabled)     [default]
GGSN.Firewall.Enable 1     [default]
GGSN.IP.MaxPacketSize 1520     [default]
GGSN.IP.ReuseTimeout 180     [default]
GGSN.IP.TossDuplicatePackets off
GGSN.Logfile.Name ggsn.log
GGSN.MS.IP.Base 192.168.99.1     [default]
GGSN.MS.IP.MaxCount 254     [default]
GGSN.MS.IP.Route (disabled)     [default]
GGSN.ShellScript (disabled)     [default]
GGSN.TunName sgsntun     [default]
GPRS.CellOptions.AdvertiseEDGE no     [default]
GPRS.CellOptions.T3168Code 5     [default]
GPRS.CellOptions.T3192Code 0     [default]
GPRS.ChannelCodingControl.RSSI -20
GPRS.Channels.Congestion.Threshold 200     [default]
GPRS.Channels.Congestion.Timer 60     [default]
GPRS.Channels.Min.C0 3     [default]
GPRS.Channels.Min.CN 0     [default]
GPRS.Codecs.Downlink 14     [default]
GPRS.Codecs.Uplink 14     [default]
GPRS.Counters.Assign 10     [default]
GPRS.Counters.N3101 20     [default]
GPRS.Counters.N3103 8     [default]
GPRS.Counters.N3105 12     [default]
GPRS.Counters.Reassign 6     [default]
GPRS.Counters.TbfRelease 5     [default]
GPRS.Debug 1
GPRS.Downlink.KeepAlive 300     [default]
GPRS.Downlink.Persist 0     [default]
GPRS.Enable on
GPRS.LLC.PDUExpire 60000     [default]
GPRS.LocalTLLI.Enable on
GPRS.MS.KeepExpiredCount 20     [default]
GPRS.MS.Power.Alpha 10     [default]
GPRS.MS.Power.Gamma 31     [default]
GPRS.MS.Power.RSSIInterval 3     [default]
GPRS.MS.Power.RSSITarget -25     [default]
GPRS.MS.Power.T_AVG_T 15     [default]
GPRS.MS.Power.T_AVG_W 15     [default]
GPRS.Multislot.Max.Downlink 3     [default]
GPRS.Multislot.Max.Uplink 2     [default]
GPRS.NC.NetworkControlOrder 2     [default]
GPRS.NMO 2     [default]
GPRS.PRIORITY-ACCESS-THR 6     [default]
GPRS.RAC 0     [default]
GPRS.RA_COLOUR 0     [default]
GPRS.RRBP.Min 0     [default]
GPRS.Reassign.Enable on
GPRS.Release 4
GPRS.SGSN.port 1920     [default]
GPRS.SendIdleFrames off
GPRS.TBF.Downlink.Poll1 10     [default]
GPRS.TBF.EST on
GPRS.TBF.Expire 30000     [default]
GPRS.TBF.KeepExpiredCount 20     [default]
GPRS.TBF.Retry 1     [default]
GPRS.Timers.Channels.Idle 6000     [default]
GPRS.Timers.MS.Idle 600     [default]
GPRS.Timers.MS.NonResponsive 6000     [default]
GPRS.Timers.T3169 5000     [default]
GPRS.Timers.T3191 5000     [default]
GPRS.Timers.T3193 0     [default]
GPRS.Timers.T3195 5000     [default]
GPRS.Uplink.KeepAlive 300     [default]
GPRS.Uplink.Persist 4000     [default]
GPRS.advanceblocks 10     [default]
GSM.CCCH.AGCH.QMax 5     [default]
GSM.CCCH.CCCH-CONF 1     [default]
GSM.CellOptions.RADIO-LINK-TIMEOUT 15     [default]
GSM.CellSelection.CELL-RESELECT-HYSTERESIS 3     [default]
GSM.CellSelection.MS-TXPWR-MAX-CCH 0     [default]
GSM.CellSelection.NCCsPermitted -1     [default]
GSM.CellSelection.NECI 1     [default]
GSM.CellSelection.RXLEV-ACCESS-MIN 0     [default]
GSM.Channels.C1sFirst off
GSM.Channels.NumC1s 7     [default]
GSM.Channels.NumC7s 0     [default]
GSM.Channels.SDCCHReserve 0     [default]
GSM.Cipher.CCHBER 0.0
GSM.Cipher.Encrypt off
GSM.Cipher.RandomNeighbor 0.0
GSM.Cipher.ScrambleFiller off
GSM.Control.GPRSMaxIgnore 5     [default]
GSM.Handover.InitialHoldoff 5000     [default]
GSM.Handover.LocalRSSIMin -80     [default]
GSM.Handover.RepeatHoldoff 3000     [default]
GSM.Handover.ThresholdDelta 10     [default]
GSM.Identity.BSIC.BCC 2     [default]
GSM.Identity.BSIC.NCC 0     [default]
GSM.Identity.CI 1126
GSM.Identity.LAC 1126
GSM.Identity.MCC 001     [default]
GSM.Identity.MNC 01     [default]
GSM.MS.Power.Damping 50     [default]
GSM.MS.Power.Max 33     [default]
GSM.MS.Power.Min 5     [default]
GSM.MS.TA.Damping 50     [default]
GSM.MS.TA.Max 62     [default]
GSM.MaxSpeechLatency 2     [default]
GSM.Neighbors.NumToSend 8     [default]
GSM.Ny1 5     [default]
GSM.RACH.AC 0x0400     [default]
GSM.RACH.MaxRetrans 1     [default]
GSM.RACH.TxInteger 14     [default]
GSM.Radio.ARFCNs 1     [default]
GSM.Radio.Band 1800
GSM.Radio.C0 882
GSM.Radio.MaxExpectedDelaySpread 2     [default]
GSM.Radio.NeedBSIC off
GSM.Radio.PowerManager.MaxAttenDB 15
GSM.Radio.PowerManager.MinAttenDB 15
GSM.Radio.PowerManager.NumSamples 10     [default]
GSM.Radio.PowerManager.Period 6000     [default]
GSM.Radio.PowerManager.SamplePeriod 2000     [default]
GSM.Radio.PowerManager.TargetT3122 5000     [default]
GSM.Radio.RSSITarget -30
GSM.Radio.RxGain 0     [default]
GSM.Timer.T3103 5000     [default]
GSM.Timer.T3105 50     [default]
GSM.Timer.T3113 10000     [default]
GSM.Timer.T3122Max 255000     [default]
GSM.Timer.T3122Min 2000     [default]
GSM.Timer.T3212 24     [default]
Handover.EUTRAN.EARFCN 0     [default]
Handover.EUTRAN.QRXLEVMIN -140     [default]
Handover.EUTRAN.priority 6     [default]
Handover.EUTRAN.thresh_priority_high 18     [default]
Handover.EUTRAN.thresh_priority_low 18     [default]
Handover.GSM.H_PRIO 0     [default]
Handover.GSM.T_reselection 0     [default]
Handover.GSM.priority 2     [default]
Handover.GSM.thresh_gsm_low 15     [default]
Log.Alarms.Max 20     [default]
Log.File (disabled)     [default]
Log.Level NOTICE     [default]
SGSN.Debug off
SGSN.Timer.ImplicitDetach 3480     [default]
SGSN.Timer.MS.Idle 600     [default]
SGSN.Timer.RAUpdate 3240     [default]
SGSN.Timer.Ready 44     [default]
TRX.IgnoreDeath no     [default]
TRX.MaxRetries 5     [default]
TRX.Port 5700     [default]
TRX.RadioFrequencyOffset 142
TRX.Timeout.Clock 10     [default]
TRX.TxAttenOffset 46
Test.GSM.SimulatedFER.Downlink 0     [default]
Test.GSM.SimulatedFER.Uplink 0     [default]
Test.GSM.UplinkFuzzingRate 0     [default]

To change the configuration for any of the values:

  • To have a description of the key and a list of valid values , use the command with key you want to change : mbts devconfig <key>
  • To change the value, use the command: mbts devconfig <key> <value>

Below is an example to change Transmit Attenuation Offset from 46 to 45:

> mbts devconfig TRX.TxAttenOffset
TRX.TxAttenOffset 46
 - description:      Hardware-specific gain adjustment for transmitter, matched to the power amplifier, expessed as an attenuationi in dB.  Set at the factory.  Do not adjust without proper calibration.
 - units:            dB of attenuation
 - type:             value range
 - default value:    0
 - visibility level: factory - set once at the factory, should never be changed
 - static:           1
 - valid values:     from 0 to 100

yate-sdr@ybts-officess> mbts devconfig TRX.TxAttenOffset 45
TRX.TxAttenOffset is static; change takes effect on restart
TRX.TxAttenOffset changed from "46" to "45"

freqcorr

This command identifies the radio frequency offset and allows it to be modified.

To view the current value:

> mbts freqcorr
current freq. offset is 142

To change the value:

> mbts freqcorr 143
2020-07-08_10:41:37.321799 <bladerf/5:NOTE> Frequency calibration is stopping (changed by command) [0x7fbf700012c0]
current freq. offset is 142
new freq. offset is 143

gprs

This command enables access to a series of subcommands that control the GPRS radio mode. The syntax is the following mbts gprs <subcommand> <options…>.

list

The command is used for listing details about mobile stations, allocated temporary block flows and GPRS channels that are active for GPRS.

mbts gprs list [ms|tbf|ch] [-v] [-x] [-c] [id] 
MS parameters

Each mobile station has an allocated debug ID, which will be printed as MS#x where x is a number.

A parameter printed in format (val min= max= avg= N=) details the current value, minimum encountered value, maximum encountered value, the average of the value and the number of values measured and entered into the average.

The parameters associated with one mobile stations are:

  • TLLI : a comma separated list of TLLIs allocated to this MS. The first one is the ‘in use’ TLLI at the moment, the second, if present, is the old TLLI (used until a new one was allocated by our node).
  • rrmode : mode of the RR connection for this MS. It can be PacketIdle (when no TBFs are active – no data transmission) or PacketTransfer (when there are active TBFs transmitting data).
  • Bytes : number of bytes transferred in both directions (uplink/downlink). This refers to bytes pertaining to RLC data blocks.
  • Utilization : total number of blocks sent and received on all channels (uplink & downlink), decayed by 1/2 every 24 blocks.
  • GMM Context – Layer 3 parameters
    • imsi : Subscriber identity.
    • ptmsi : Allocated P-TMSI for this subscriber.
    • tlli : TLLI associated with MS at Layer 3.
    • imei : Mobile equipment identity/
    • state : Layer 3 state. Values can be:
      • GmmDeregistered (MS is not GPRS attached – as in not registered to SGSN)
      • GmmRegistrationPending (MS is in the process of attaching to GPRS services)
      • GmmRegisteredNormal(MS is GPRS attached)
      • GmmRegisteredSuspended (GPRS services are suspended due to CS services).
    • age : Time in seconds since the MS attached to GPRS services (GPRS Attach procedure was completed).
    • idle : Time in seconds since there was any kind of activity of the MS at GPRS L3 layer.
    • ConnId : YBTS connection ID assigned to this MS.
    • IPs : Allocated IPs to this MS. Only appears when the MS has an active PDP context.
  • Signal Quality parameters
    • TA : Last Timing Advance value ordered to the MS. Range is 0..63.
    • TE : The timing error of the bursts received from the MS.
    • RSSI : Received Signal Strength Indicator for the the bursts received from this MS. It details the last value received, the minimum, maximum and average value as well at the number of values received (practically the number of burst received for this MS). It is in dB, and maximum value was observed to be 1dB. Power control will try to keep this negative in order to not saturate the receiver.
    • CV : C value as reported by the MS in PacketResourceRequest/PacketDownlinkAckNack messages.
    • ILev I_LEVEL values reported by MS in PacketResourceRequest/PacketDownlinkAckNack messages. I_LEVELs are reported for each timeslot, but mbts gathers them all in a single statistic.
    • RXQual: Averaged received signal quality at MS, as reported in PacketDownlinkAckNack messages, please refer to RxQual.
    • SigVar : Averaged received signal variance parameter SIGN_VAR calculated by the MS (see 45.008, section 10.2.3.1.2) and provided in PacketResourceRequest/PacketDownlinkAckNack messages. Range is 0..63 and is mapped according to the rule 0.25 * SigVar(dB^2) < signal variance < 0.25 * (Sigvar + 1)(dB^2).
    • ChCoding : Channel coding scheme used for GPRS transmission. Range is 0..3, with 0 corresponding to CS-1 and 3 to CS-4. mbts supports only CS-1 and CS-4. CS-1 is always used for control messages. Data is transmitted using CS-1 or CS-4 according to configuration and RSSI.
    • RXLev : Averaged BTS signal level at the MS (see TS 45.008, section 8.1.4) and reported in PacketMeasurementReport messages. Range is -111..-48dBm (actually the range is the same as CV and calculated the same, only that the value is displayed already mapped).
    • mLastAlpha : Last Alpha parameter given to the MS in a downlink message (see 45.008, section 10.2.1 and Annex B). Alpha is parameter involved in the calculation of the MS output power for weighing the BTS output power. It is involved in the power control procedures. Range is 0..10. Please refer to Power Control Loop.
    • mLastGamma : Last GammaCh parameter given to the MS in a downlink message (see 45.008, section 10.2.1 and Annex B). Gamma is parameter involved in the calculation of the MS output power. It is involved in the power control procedures. 0…31 corresponding to 0…62dB, in 2dBm steps. Please refer to Power Control Loop.
    • mGamma : Next GammaCh parameter to be given to the MS in a downlink message (see 45.008, section 10.2.1 and Annex B). Gamma is parameter involved in the calculation of the MS output power. It is involved in the power control procedures. 0…31 corresponding to 0…62dB, in 2dBm steps. Please refer to Power Control Loop.
  • Statistic data
    • dataER : Total percentage of missed blocks both uplink and downlink from the total of allocated blocks for the MS.
    • recent : Percentage of missed blocks in the last 20 48-block-multiframes, which is approx one second.
    • low – if present, the biggest percentage of missed blocks in one of the 20 48-block-multiframes.
    • tbfER: : Percentage of TBFs terminated with error of total allocated TBFs for this MS.
    • rrbpER : Percentage of total missed RRBP reservations made for this MS.
    • recent : Percentage of missed RRBP reservations in the last 20 48-block-multiframes, which is approx one second.
    • low : If present, the biggest percentage of missed RRBP reservations in one of the 20 48-block-multiframes.
    • ccchER : Percentage of total missed CCCH reservations made for this MS
    • recent : Percentage of missed CCCH reservations in the last 20 48-block-multiframes, which is approx one second.
    • low : If present, the biggest percentage of missed CCCH reservations in one of the 20 48-block-multiframes.
 >mbts gprs list ms
 MS#1,TLLI=80010014,c0010001 rrmode=PacketIdle Bytes:692up/556down Utilization=8.3%
         GMM Context: imsi=001010000010981 ptmsi=0xc0010014 tlli=0xc0010014 imei=8610280392267378 state=GmmDeregistered age=0 idle=125 IPs=none
         TA=2 TE=(0.00) RSSI=(1 min=0 max=1 avg=0.77 N=448) CV=(18 min=0 max=18 avg=16.88 N=17) ILev=(0) RXQual=(4 min=4 max=5 avg=4.33 N=3) SigVar=(0) ChCoding=(0 min=0 max=3 avg=1.83 N=77) RXLev=(0) mLastAlpha=10 mLastGamma=31 mGamma=31
         dataER:.0% (2883) recent:.0% (122) low:1.0% (42) tbfER:.7% (25)
         rrbpER:.9% (373) recent:1.0% (18) low:1.0% (5) ccchER:.5% (34) recent:1.0% (9) low:1.0% (1)
TBF parameters

Each TBF (Temporary Block Flow) has an allocated debug ID which will be printed as TBF#x where x is a number.

The parameters associated with one TBF are:

  • TFI : Traffic flow identifier for this TBF.
  • TBF_TLLI : TLLI associated with this TBF.
  • mtMS : MS associated with this TBF. It prints the MS TLLIs and can be crosschecked with the TBF one.
  • mtDir : Indication if it’s a downlink or uplink TBF.
  • channels : Channel allocations for the MS associated with this MS.
    • down : Downlink allocations in ARFCN:Timeslot pairs.
    • up : Uplink allocations in ARFCN:Timeslot:USF triplets.
  • mtState : State of the TBF: waiting to establish the TBF, data transmit, TBF release.
  • mtAttached : Whether or not the TBF has allocated radio resources.
  • mtTFI : Traffic flow identifier for this TBF.
  • mtTlli : TLLI associated with this TBF.
  • size : Number of layer 3 PDUs awaiting transmission.

> mbts gprs list tbf
 TBF#33 TFI=1 TBF_TLLI=0x80010014 mtMS= MS#1,TLLI=80010014,c0010001 mtDir=RLCDir::Down
         channels: down=( 0:1 0:2 0:3) up=( 0:2,usf=0 0:3,usf=0)
         mtState==TBFState::Dead mtAttached=1 mtTFI=1 mtTlli=0x80010014 size=0
Channel parameters

For each channel used for GPRS there will be an entry like this: PDCH ARFCN=144 TN=3 FER=23%

where:

  • PDCH : Refers to the type of the channel.
  • ARFCN : Represents the channel’s frequency.
  • TN : Refers to the timeslot number of the channel.
  • FER : Represents the Frame Error Rate. This indicates the rate of bad received frames on the channel with a decay time of 20 frames.
To calculate FER:
decayFactor = 20 a = 1.0 / decayFactor b = 1.0 - a FER = b * FER + a * fail, where fail = 1 if frame is bad and fail = 0 if the frame is good
> mbts gprs list chans
 PDCH ARFCN=882 TN=1 FER=100%
 PDCH ARFCN=882 TN=2 FER=.8%
 PDCH ARFCN=882 TN=3 FER=43%
gprs list subcommands:

It lists active objects of a specified type. When the [id] is specified it refers to an id number of a mobile station or a temporary block flow (TBF).

The listing can:

  • [-v] : be verbose
  • [-x] : include expired rather than active entities
  • [-c] : include MS capabilities

stat

Shows GPRS statistics (number of channels, allocated TBF, mobile stations etc.)

> mbts gprs stat 
GSM FN=1942179 GPRS BSN=448197
Current number of PDCH=3 MS=1 TBF=1
Total number of PDCH=3 MS=2 TBF=669 RACH=194
Downlink utilization=0
 ServiceLoopTime=(0)

free

Deletes parameters from one entity

mbts gprs free ms|tbf|ch id

Where:

  • ms : The allocated debug ID, which will be printed as MS#x where x is a number.
  • tbf: The allocated debug ID for Temporary Block Flow.
  • ch: The channel used for GPRS
> mbts gprs free ms 2
Deleting  MS#2,TLLI=c0010002,80010001

freex

Deletes expired mobile stations and TBF structs.

> mbts gprs freex

debug

Sets debug level. level 0 turns off.

> mbts gprs debug 8
GPRSDebug=0x8

start

Starts GPRS and can optionally start it in a single-step-mode.

> mbts gprs start
gprs service thread already running.
allocated channel for gprs: PDCH#882:2

To start it in a single step mode:

> mbts gprs start step
gprs service thread already running.
allocated channel for gprs: PDCH#882:2

step

Performs single step in the MAC service loop and requires a start step.

> mbts gprs step

rach

Simulates a RACH that starts the GPRS service.

Below is part of the output:

> mbts gprs rach
2020-07-09_09:21:55.376099 <gsmtrx:NOTE> ARFCN[0]: Missing SYNC burst at 2719648 339956/0 T2=6 T3=41 [0x7f98b00131e0]
MBTS ready
2020-07-09_09:22:02.195563 <ybts:NOTE> State changed Running -> RadioUp

testbsn

Tests bsn<->frame number functions.

> mbts gprs testbsn
 fn=0 bsn=0 fn2=0
 fn=1 bsn=0 fn2=0
 fn=2 bsn=0 fn2=0
 fn=3 bsn=0 fn2=0
 fn=4 bsn=1 fn2=4
 fn=5 bsn=1 fn2=4
 fn=6 bsn=1 fn2=4
 fn=7 bsn=1 fn2=4
 fn=8 bsn=2 fn2=8
 fn=9 bsn=2 fn2=8
 fn=10 bsn=2 fn2=8
 fn=11 bsn=2 fn2=8
 fn=12 bsn=2 fn2=8
 fn=13 bsn=3 fn2=13
 fn=14 bsn=3 fn2=13
 fn=15 bsn=3 fn2=13
 fn=16 bsn=3 fn2=13
 fn=17 bsn=4 fn2=17
 fn=18 bsn=4 fn2=17
 fn=19 bsn=4 fn2=17
 fn=20 bsn=4 fn2=17
 fn=21 bsn=5 fn2=21
 fn=22 bsn=5 fn2=21
 fn=23 bsn=5 fn2=21
 fn=24 bsn=5 fn2=21
 fn=25 bsn=5 fn2=21
 fn=26 bsn=6 fn2=26
 fn=27 bsn=6 fn2=26
 fn=28 bsn=6 fn2=26
 fn=29 bsn=6 fn2=26
 fn=30 bsn=7 fn2=30
 fn=31 bsn=7 fn2=30
 fn=32 bsn=7 fn2=30
 fn=33 bsn=7 fn2=30
 fn=34 bsn=8 fn2=34
 fn=35 bsn=8 fn2=34
 fn=36 bsn=8 fn2=34
 fn=37 bsn=8 fn2=34
 fn=38 bsn=8 fn2=34
 fn=39 bsn=9 fn2=39
 fn=40 bsn=9 fn2=39
 fn=41 bsn=9 fn2=39
 fn=42 bsn=9 fn2=39
 fn=43 bsn=10 fn2=43
 fn=44 bsn=10 fn2=43
 fn=45 bsn=10 fn2=43
 fn=46 bsn=10 fn2=43
 fn=47 bsn=11 fn2=47
 fn=48 bsn=11 fn2=47
 fn=49 bsn=11 fn2=47
 fn=50 bsn=11 fn2=47
 fn=51 bsn=11 fn2=47
 fn=52 bsn=12 fn2=52
 fn=53 bsn=12 fn2=52
 fn=54 bsn=12 fn2=52
 fn=55 bsn=12 fn2=52
 fn=56 bsn=13 fn2=56
 fn=57 bsn=13 fn2=56
 fn=58 bsn=13 fn2=56
 fn=59 bsn=13 fn2=56
 fn=60 bsn=14 fn2=60
 fn=61 bsn=14 fn2=60
 fn=62 bsn=14 fn2=60
 fn=63 bsn=14 fn2=60
 fn=64 bsn=14 fn2=60
 fn=65 bsn=15 fn2=65
 fn=66 bsn=15 fn2=65
 fn=67 bsn=15 fn2=65
 fn=68 bsn=15 fn2=65
 fn=69 bsn=16 fn2=69
 fn=70 bsn=16 fn2=69
 fn=71 bsn=16 fn2=69
 fn=72 bsn=16 fn2=69
 fn=73 bsn=17 fn2=73
 fn=74 bsn=17 fn2=73
 fn=75 bsn=17 fn2=73
 fn=76 bsn=17 fn2=73
 fn=77 bsn=17 fn2=73
 fn=78 bsn=18 fn2=78
 fn=79 bsn=18 fn2=78
 fn=80 bsn=18 fn2=78
 fn=81 bsn=18 fn2=78
 fn=82 bsn=19 fn2=82
 fn=83 bsn=19 fn2=82
 fn=84 bsn=19 fn2=82
 fn=85 bsn=19 fn2=82
 fn=86 bsn=20 fn2=86
 fn=87 bsn=20 fn2=86
 fn=88 bsn=20 fn2=86
 fn=89 bsn=20 fn2=86
 fn=90 bsn=20 fn2=86
 fn=91 bsn=21 fn2=91
 fn=92 bsn=21 fn2=91
 fn=93 bsn=21 fn2=91
 fn=94 bsn=21 fn2=91
 fn=95 bsn=22 fn2=95
 fn=96 bsn=22 fn2=95
 fn=97 bsn=22 fn2=95
 fn=98 bsn=22 fn2=95
 fn=99 bsn=23 fn2=99

mem

Acts as a memory leak detector and prints the numbers of structs in use.

> mbts gprs mem    
Structs current total:
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        RLCMessage 0 7248
        RLCMsgPacketDownlinkDummyControlBlock 0 7248
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0
        unknown 0 0

help

This command lists all the mbts commands available. help followed by the name of a particular command gives more details about its role and functions.

> mbts help

Type "help" followed by the command name for help on that command.

alarms          audit           cellid
chans           config          crashme
devconfig       freqcorr        gprs
help            load            noise
notices         page            power
radio           rawconfig       regperiod
reload          rmconfig        rxgain
sgsn            shutdown        stats
sysinfo         trxfactory      txatten
unconfig        uptime          version

> mbts help chans
chans -- report PHY status for active channels

load

This command lists the current basestation load of active channels and queue lengths.

will generate the following results:

  • SDCCH load – the number of active SDCCHs from the total available
  • TCH/F load – the number of TCH/Fs from the total available
  • AGCH/PCH load – the number of queued messages waiting to be transmitted on the AGCH or PCH
  • Paging table sizes – the number of mobile stations being paged
  • Transactions/TMSIs – the number of active transactions in the basestation and the size of the TMSI Table
  • T3122 – the value of the T3122 hold-off timer expressed in seconds
  • current PDCHs – active GPRS channels
  • utilization % – the GPRS channel utilization
> mbts load 
== GSM ==
SDCCH load: 0/4
TCH/F load: 0/4
AGCH/PCH load: 0,0
Paging table size: 0
T3122: 2000 ms (target 5000 ms)
== GPRS ==
current PDCHs: 3

noise

This command generates the current level of receive noise in the RSSI dB as seen in the example below:

> mbts noise
noise RSSI is -51 dB wrt full scale
MS RSSI target is -30 dB wrt full scale
MS GPRS target is -25 dB wrt full scale

notices

This command prints the legal and copyright notices associated to the version of the installed YateBTS, as seen below:

> mbts notices 

Yate-BTS MBTS Component
Copyright 2008, 2009, 2010 Free Software Foundation, Inc.
Copyright 2010 Kestrel Signal Processing, Inc.
Copyright 2011, 2012, 2013 Range Networks, Inc.
Copyright 2013, 2014 Null Team Impex SRL
Copyright 2014 Legba, Inc.
"OpenBTS" is a registered trademark of Range Networks, Inc.

Contributors:
  SC Null Team Impex SRL:
    Paul Chitescu
  Legba, Inc.
    David Burgess
  Range Networks, Inc.:
    David Burgess, Harvind Samra, Donald Kirker, Doug Brown,
    Pat Thompson, Kurtis Heimerl
  Kestrel Signal Processing, Inc.:
    David Burgess, Harvind Samra, Raffi Sevlian, Roshan Baliga
  GNU Radio:
    Johnathan Corgan
  Others:
    Anne Kwong, Jacob Appelbaum, Joshua Lackey, Alon Levy
    Alexander Chemeris, Alberto Escudero-Pascual
Incorporated L/GPL libraries and components:
  libusb, LGPL 2.1, various copyright holders, www.libusb.org
Incorporated BSD/MIT-style libraries and components:
  A5/1 Pedagogical Implementation, Simplified BSD License,
    Copyright 1998-1999 Marc Briceno, Ian Goldberg, and David Wagner
Incorporated public domain libraries and components:
  sqlite3, released to public domain 15 Sept 2001, www.sqlite.org


This program comes with ABSOLUTELY NO WARRANTY.

Use of this software may be subject to other legal restrictions,
including patent licensing and radio spectrum licensing.
All users of this software are expected to comply with applicable
regulations and laws.  See the LEGAL file in the source code for
more information.

Release 6.1.1 formal build date May 15 2020 rev

power

This command allows viewing the downlink power parameters.

mbts power
current downlink power -15 dB wrt full scale
current attenuation bounds 15 to 15 dB

rawconfig

This command is similar to the config command, but has more features than the latter. It can be used to define and modify custom key-value pairs in the configuration table. Additionally, it allows experimental values to be added for existing configuration keys. The rawconfig command is typically used to set custom log levels for system components in troubleshooting cases.

> mbts rawconfig 
Control.GSMTAP.GPRS off
Control.GSMTAP.GSM off
Control.GSMTAP.TargetIP 127.0.0.1
Control.LUR.AttachDetach on
Control.Reporting.PhysStatusTable (disabled)
Control.Reporting.StatsTable (disabled)
Control.SACCHTimeout.BumpDown 1
Control.SMSCB off
Control.VEA on
GGSN.DNS (disabled)
GGSN.Firewall.Enable 1
GGSN.IP.MaxPacketSize 1520
GGSN.IP.ReuseTimeout 180
GGSN.IP.TossDuplicatePackets off
GGSN.Logfile.Name ggsn.log
GGSN.MS.IP.Base 192.168.99.1
GGSN.MS.IP.MaxCount 254
GGSN.MS.IP.Route (disabled)
GGSN.ShellScript (disabled)
GGSN.TunName sgsntun
GPRS.CellOptions.AdvertiseEDGE no
GPRS.CellOptions.T3168Code 5
GPRS.CellOptions.T3192Code 0
GPRS.ChannelCodingControl.RSSI -20
GPRS.Channels.Congestion.Threshold 200
GPRS.Channels.Congestion.Timer 60
GPRS.Channels.Max 4
GPRS.Channels.Min.C0 3
GPRS.Channels.Min.CN 0
GPRS.Codecs.Downlink 14
GPRS.Codecs.Uplink 14
GPRS.Counters.Assign 10
GPRS.Counters.N3101 20
GPRS.Counters.N3103 8
GPRS.Counters.N3105 12
GPRS.Counters.Reassign 6
GPRS.Counters.TbfRelease 5
GPRS.Debug 1
GPRS.Downlink.KeepAlive 300
GPRS.Downlink.Persist 0
GPRS.Enable on
GPRS.FixDRX (disabled)
GPRS.FixForeignTlli (disabled)
GPRS.FixIAUsePoll (disabled)
GPRS.FixIdleFrame (disabled)
GPRS.FixTFIBug (disabled)
GPRS.LLC.PDUExpire 60000
GPRS.LocalTLLI.Enable on
GPRS.MS.KeepExpiredCount 20
GPRS.MS.Power.Alpha 10
GPRS.MS.Power.Gamma 31
GPRS.MS.Power.RSSIInterval 3
GPRS.MS.Power.RSSITarget -25
GPRS.MS.Power.T_AVG_T 15
GPRS.MS.Power.T_AVG_W 15
GPRS.Multislot.Max.Downlink 3
GPRS.Multislot.Max.Uplink 2
GPRS.NC.NetworkControlOrder 2
GPRS.NMO 2
GPRS.PRIORITY-ACCESS-THR 6
GPRS.RAC 0
GPRS.RA_COLOUR 0
GPRS.RRBP.Min 0
GPRS.Reassign.Enable on
GPRS.Release 4
GPRS.SGSN.Host (disabled)
GPRS.SGSN.port 1920
GPRS.SendIdleFrames off
GPRS.TBF.Downlink.Poll1 10
GPRS.TBF.EST on
GPRS.TBF.Expire 30000
GPRS.TBF.KeepExpiredCount 20
GPRS.TBF.Retry 1
GPRS.ThreadAdvance (disabled)
GPRS.Timers.Channels.Idle 6000
GPRS.Timers.MS.Idle 600
GPRS.Timers.MS.NonResponsive 6000
GPRS.Timers.T3169 5000
GPRS.Timers.T3191 5000
GPRS.Timers.T3193 0
GPRS.Timers.T3195 5000
GPRS.Uplink.KeepAlive 300
GPRS.Uplink.Persist 4000
GPRS.UplinkDutyFactor (disabled)
GPRS.WATCH (disabled)
GPRS.advanceblocks 10
GSM.CCCH.AGCH.QMax 5
GSM.CCCH.CCCH-CONF 1
GSM.CellOptions.RADIO-LINK-TIMEOUT 15
GSM.CellSelection.CELL-RESELECT-HYSTERESIS 3
GSM.CellSelection.MS-TXPWR-MAX-CCH 0
GSM.CellSelection.NCCsPermitted -1
GSM.CellSelection.NECI 1
GSM.CellSelection.RXLEV-ACCESS-MIN 0
GSM.Channels.C1sFirst off
GSM.Channels.NumC1s 7
GSM.Channels.NumC7s 0
GSM.Channels.Randomize (disabled)
GSM.Channels.SDCCHReserve 0
GSM.Cipher.CCHBER 0.0
GSM.Cipher.Encrypt off
GSM.Cipher.RandomNeighbor 0.0
GSM.Cipher.ScrambleFiller off
GSM.Control.GPRSMaxIgnore 5
GSM.Handover.InitialHoldoff 5000
GSM.Handover.LocalRSSIMin -80
GSM.Handover.RepeatHoldoff 3000
GSM.Handover.ThresholdDelta 10
GSM.Identity.BSIC.BCC 2
GSM.Identity.BSIC.NCC 0
GSM.Identity.CI 1126
GSM.Identity.LAC 1126
GSM.Identity.MCC 001
GSM.Identity.MNC 01
GSM.MS.Power.Damping 50
GSM.MS.Power.Max 33
GSM.MS.Power.Min 5
GSM.MS.TA.Damping 50
GSM.MS.TA.Max 62
GSM.MaxSpeechLatency 2
GSM.Neighbors.NumToSend 8
GSM.Ny1 5
GSM.RACH.AC 0x0400
GSM.RACH.MaxRetrans 1
GSM.RACH.TxInteger 14
GSM.Radio.ARFCNs 1
GSM.Radio.Band 1800
GSM.Radio.C0 882
GSM.Radio.MaxExpectedDelaySpread 2
GSM.Radio.NeedBSIC off
GSM.Radio.PowerManager.MaxAttenDB 15
GSM.Radio.PowerManager.MinAttenDB 12
GSM.Radio.PowerManager.NumSamples 10
GSM.Radio.PowerManager.Period 6000
GSM.Radio.PowerManager.SamplePeriod 2000
GSM.Radio.PowerManager.TargetT3122 5000
GSM.Radio.RSSITarget -30
GSM.Radio.RxGain 0
GSM.SI3RO (disabled)
GSM.SI3RO.CBQ (disabled)
GSM.SI3RO.CRO (disabled)
GSM.SI3RO.PENALTY_TIME (disabled)
GSM.SI3RO.TEMPORARY_OFFSET (disabled)
GSM.Timer.T3103 5000
GSM.Timer.T3105 50
GSM.Timer.T3113 10000
GSM.Timer.T3122Max 255000
GSM.Timer.T3122Min 2000
GSM.Timer.T3212 24
Handover.EUTRAN.EARFCN 0
Handover.EUTRAN.QRXLEVMIN -140
Handover.EUTRAN.priority 6
Handover.EUTRAN.thresh_priority_high 18
Handover.EUTRAN.thresh_priority_low 18
Handover.GSM.H_PRIO 0
Handover.GSM.T_reselection 0
Handover.GSM.priority 2
Handover.GSM.thresh_gsm_low 15
Handover.enable on
Handover.reason GSM;text="Handover"
Log.File (disabled)
Log.Level NOTICE
Log.Level.CLI.cpp (disabled)
Log.Level.DCCHDispatch.cpp (disabled)
Log.Level.GSMConfig.cpp (disabled)
Log.Level.GSML1FEC.cpp (disabled)
Log.Level.GSML2LAPDm.cpp (disabled)
Log.Level.GSML3GPRSElements.cpp (disabled)
Log.Level.GSML3RRMessages.cpp (disabled)
Log.Level.GSMLogicalChannel.cpp (disabled)
Log.Level.GSMLogicalChannel.h (disabled)
Log.Level.GSMSAPMux.cpp (disabled)
Log.Level.GenConnection.cpp (disabled)
Log.Level.MAC.cpp (disabled)
Log.Level.PowerManager.cpp (disabled)
Log.Level.RadioResource.cpp (disabled)
Log.Level.Reporting.cpp (disabled)
Log.Level.SigConnection.cpp (disabled)
Log.Level.TRXManager.cpp (disabled)
Log.Level.iputils.cpp (disabled)
Log.Level.miniggsn.cpp (disabled)
SGSN.Debug off
SGSN.Timer.ImplicitDetach 3480
SGSN.Timer.MS.Idle 600
SGSN.Timer.RAUpdate 3240
SGSN.Timer.Ready 44
TRX.MaxRetries 5
TRX.MinimumRxRSSI -63
TRX.Port 5700
TRX.RadioFrequencyOffset 142
TRX.TX.OffsetI 0
TRX.TX.OffsetQ 0
TRX.Timeout.Clock 10
TRX.TxAttenOffset 46
TRX.clock_update_offset 16
TRX.gsm_time_sync_check 0
TRX.print_status 0
TRX.print_status_bursts on
TRX.radio_latency_slots 5
TRX.radio_read_priority highest
TRX.radio_send_priority high
TRX.tx_silence_debug_interval 5000
TRX.tx_slots 16
Test.GSM.SimulatedFER.Downlink 0
Test.GSM.SimulatedFER.Uplink 0
Test.GSM.UplinkFuzzingRate 0

regperiod

This command prints or sets the registration timer GSM T3212 and SIP registration period.

To see the value:

> mbts regperiod 
T3212 is 24 minutes
Note: The [GSM] stands for the value of GSM T3212 expressed in minutes and [SIP] is the value of the SIP registration period is also expressed in minutes. 
The [SIP] value has to be a factor of 6 and needs to be smaller than the value of the [GSM]. If it is set to \0", the periodic registration is disabled.

To change these two parameters, use the syntax mbts regperiod [GSM] [SIP]

> mbts regperiod 27 6

yate-sdr@ybts-officess> mbts regperiod     
T3212 is 27 minutes

reload

This command reloads the configuration table. Some parameters can by modified with this command, while others can be modified only after restarting the configuration. Use this command if the parameter you wish to change accepts being reloaded. Otherwise, restart the configuration.

> mbts reload
2020-07-09_10:22:50.898877 <mbts:NOTE> GSMConfig.cpp:82:regenerateBeacon: regenerating system information messages, changemark 2
Configuration reloaded

rmconfig

This command followed by a key will revert the parameter to its default value. If what follows after the command is a custom key, then the configuration parameter will be removed from the configuration table. It has the following syntax mbts rmconfig <key>

Below is an example for reverting the GSM.Timer.T3212 to its default value:

> mbts rmconfig GSM.Timer.T3212
GSM.Timer.T3212 set back to its default value

rxgain

This command displays or sets the receiver gain.

Using the command mbts rxgain without parameters, the command displays the current Rx gain, expressed in dB, stored in the GSM.Radio.RxGain parameter.

> mbts rxgain 
current RX gain is 0 dB

To change the value , add the value as argument for the command

> mbts rxgain 5
current RX gain is 0 dB
new RX gain is 5 dB

sgsn

This command allows access to control the SGSN/GGSN sub-commands. The syntax is the following mbts sgsn <subcommand> <options…>. These are the subcommands:

help

This subcommand is similar to using the command without arguments and it shows the help menu with subcommands

> mbts sgsn 
sgsn sub-commands to control SGSN/GGSN sub-system.  Syntax: sgsn subcommand <options...>
subcommands are:
        list  [(imsi|tlli) id]  # list all or specified MS
        free (imsi|tlli) id     # Delete something
        help                  # print this help

list

list the imsi & tlli id which displays a list of current GPRS sessions tracked by the SGSN.

> mbts sgsn list
 GMM Context: imsi=001010000010981 ptmsi=0x8d001 tlli=0xc008d001 state=GmmRegisteredNormal age=213 idle=1 MS#1,TLLI=c008d001,80010002 IPs=192.168.99.1

free

This command disconnects the gprs based on the selected imsi or tlli id

> mbts sgsn free imsi 001010000010981

sysinfo

This command displays the current system information messages.

> mbts sysinfo
RR System Information Type 1 cellChannelDescription=() RACHControlParameters=(maxRetrans=1 txInteger=14 cellBarAccess=0 RE=1 AC=0x400)
RR System Information Type 2 BCCHFrequencyList=(EXT-IND=0 BA-IND=0  ARFCNs=(882 )) NCCPermitted=(0x1) RACHControlParameters=(maxRetrans=1 txInteger=14 cellBarAccess=0 RE=1 AC=0x400)
RR System Information Type 2quater  SI2quaterRO=( EARFCN=0 E-UTRAN_PRIORITY=6 THRESH_E-UTRAN_HIGH=9 THRESH_E-UTRAN_LOW=9 E-UTRAN_QRXLEVMIN=0)
RR System Information Type 3 LAI=(MCC=001 MNC=01 LAC=0x466) CI=1126 controlChannelDescription=(ATT=1 BS_AG_BLKS_RES=2 CCCH_CONF=1 BS_PA_MFRMS=0 T3212=4) cellOptions=(PWRC=0 DTX=2 RADIO_LINK_TIMEOUT=15) cellSelectionParameters=(CELL-RESELECT-HYSTERESIS=3 MS-TXPWR-MAX-CCH=0 ACS=0 NECI=1 RXLEV-ACCESS-MIN=0) RACHControlParameters=(maxRetrans=1 txInteger=14 cellBarAccess=0 RE=1 AC=0x400) SI3RO=( RA_COLOUR=0)
RR System Information Type 4 LAI=(MCC=001 MNC=01 LAC=0x466) cellSelectionParameters=(CELL-RESELECT-HYSTERESIS=3 MS-TXPWR-MAX-CCH=0 ACS=0 NECI=1 RXLEV-ACCESS-MIN=0) RACHControlParameters=(maxRetrans=1 txInteger=14 cellBarAccess=0 RE=1 AC=0x400)GPRS enabled; RA_COLOUR=(0)
RR System Information Type 5 BCCHFrequencyList=(EXT-IND=0 BA-IND=0  ARFCNs=(882 ))
RR System Information Type 6 CI=1126 LAI=(MCC=001 MNC=01 LAC=0x466) cellOptions=(PWRC=0 DTX=2 RADIO_LINK_TIMEOUT=15) NCCPermitted=(0x1)

txatten

This command displays the transmitter attenuation, expressed in dB, when used without parameters.

> mbts txatten 
current TX attenuation is 46 dB

When used with parameters, the command will set the attenuation to the corresponding value.

> mbts txatten 50
current TX attenuation is 46 dB
new TX attenuation is 50 dB

uptime

This command displays the basestation uptime and the frame number.

> mbts uptime
Unix time 1594296267, Thu Jul  9 08:04:27 2020

uptime 32 minutes, frame 0:415464

version

This command prints the information about the the version of the installed YateBTS.

> mbts version 
release 6.1.1 built May 15 2020 rev 

NiPC commands

The below commands are only for NiPC working mode.

list

registered

Show a list of the current registered subscribers.

> nipc list registered 
IMSI            MSISDN          REGISTERED                 EXPIRES
--------------- ------------- -------------------------  --------------------------
001010000010981 | +88220981 | 09/07/2020 08:02:18GMT--4 | 19/07/2020 08:02:18GMT--4

sms

List of pending SMS

> nipc list sms
FROM_IMSI        FROM_MSISDN        TO_IMSI        TO_MSISDN
--------------- --------------- --------------- ---------------
001010000010981 | +88220981 | 001010000010981 | 88220981

rejected

Displays rejected IMSIs since the last Yate restart.

> nipc list rejected 
IMSI            No attempts register 
--------------- ---------------

accepted

Displays the subscribers seen and accepted by the BTS in the interval specified by TMSI expire.

> nipc list accepted 
IMSI            MSISDN 
--------------- -------------
001010000010981 | +88220981

reload

Reloads nipc configurations.

> nipc reload 
Finished updating subscribers and configurations.

ybts commands

status

Shows the status of the module ybts

> ybts status
name=ybts,type=varchans;state=RadioUp,state_time=3953

Start

Starts the BTS

> ybts start
MBTS connected to YBTS                                                                                                                
Yate-BTS MBTS Component                                                                                                               
Copyright 2008, 2009, 2010 Free Software Foundation, Inc.                                                                             
Copyright 2010 Kestrel Signal Processing, Inc.                                                                                        
Copyright 2011, 2012, 2013 Range Networks, Inc.                                                                                       
Copyright 2013, 2014 Null Team Impex SRL                                                                                              
Copyright 2014 Legba, Inc.                                                                                                            
"OpenBTS" is a registered trademark of Range Networks, Inc.                                                                           

Contributors:                                                                                                                         
  SC Null Team Impex SRL:                                                                                                             
    Paul Chitescu                                                                                                                     
  Legba, Inc.
    David Burgess
  Range Networks, Inc.:
    David Burgess, Harvind Samra, Donald Kirker, Doug Brown,
    Pat Thompson, Kurtis Heimerl
  Kestrel Signal Processing, Inc.:
    David Burgess, Harvind Samra, Raffi Sevlian, Roshan Baliga
  GNU Radio:
    Johnathan Corgan
  Others:
    Anne Kwong, Jacob Appelbaum, Joshua Lackey, Alon Levy
    Alexander Chemeris, Alberto Escudero-Pascual
Incorporated L/GPL libraries and components:
  libusb, LGPL 2.1, various copyright holders, www.libusb.org
Incorporated BSD/MIT-style libraries and components:
  A5/1 Pedagogical Implementation, Simplified BSD License,
    Copyright 1998-1999 Marc Briceno, Ian Goldberg, and David Wagner
Incorporated public domain libraries and components:
  sqlite3, released to public domain 15 Sept 2001, www.sqlite.org


This program comes with ABSOLUTELY NO WARRANTY.

Use of this software may be subject to other legal restrictions,
including patent licensing and radio spectrum licensing.
All users of this software are expected to comply with applicable
regulations and laws.  See the LEGAL file in the source code for
more information.

Release 6.1.1 formal build date May 15 2020 rev
Starting MBTS...
MBTS ready

stop

Stops the BTS.

> ybts stop
MBTS exiting

restart

Restarts the BTS

> ybts restart 
MBTS exiting                                                                                                                          
MBTS connected to YBTS                                                                                                                
Yate-BTS MBTS Component                                                                                                               
Copyright 2008, 2009, 2010 Free Software Foundation, Inc.                                                                             
Copyright 2010 Kestrel Signal Processing, Inc.                                                                                        
Copyright 2011, 2012, 2013 Range Networks, Inc.                                                                                       
Copyright 2013, 2014 Null Team Impex SRL                                                                                              
Copyright 2014 Legba, Inc.                                                                                                            
"OpenBTS" is a registered trademark of Range Networks, Inc.                                                                           

Contributors:                                                                                                                         
  SC Null Team Impex SRL:                                                                                                             
    Paul Chitescu                                                                                                                     
  Legba, Inc.
    David Burgess
  Range Networks, Inc.:
    David Burgess, Harvind Samra, Donald Kirker, Doug Brown,
    Pat Thompson, Kurtis Heimerl
  Kestrel Signal Processing, Inc.:
    David Burgess, Harvind Samra, Raffi Sevlian, Roshan Baliga
  GNU Radio:
    Johnathan Corgan
  Others:
    Anne Kwong, Jacob Appelbaum, Joshua Lackey, Alon Levy
    Alexander Chemeris, Alberto Escudero-Pascual
Incorporated L/GPL libraries and components:
  libusb, LGPL 2.1, various copyright holders, www.libusb.org
Incorporated BSD/MIT-style libraries and components:
  A5/1 Pedagogical Implementation, Simplified BSD License,
    Copyright 1998-1999 Marc Briceno, Ian Goldberg, and David Wagner
Incorporated public domain libraries and components:
  sqlite3, released to public domain 15 Sept 2001, www.sqlite.org


This program comes with ABSOLUTELY NO WARRANTY.

Use of this software may be subject to other legal restrictions,
including patent licensing and radio spectrum licensing.
All users of this software are expected to comply with applicable
regulations and laws.  See the LEGAL file in the source code for
more information.

Release 6.1.1 formal build date May 15 2020 rev
Starting MBTS...
MBTS ready
Table of Contents