467 lines
13 KiB
C
467 lines
13 KiB
C
/* A hackish minimal BSC (+MSC +HLR) implementation */
|
|
|
|
/* (C) 2008-2010 by Harald Welte <laforge@gnumonks.org>
|
|
* (C) 2009 by Holger Hans Peter Freyther <zecke@selfish.org>
|
|
* All Rights Reserved
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
#include <openbsc/gsm_data.h>
|
|
#include <osmocom/gsm/gsm_utils.h>
|
|
#include <openbsc/gsm_04_08.h>
|
|
#include <openbsc/abis_rsl.h>
|
|
#include <openbsc/abis_nm.h>
|
|
#include <openbsc/debug.h>
|
|
#include <openbsc/misdn.h>
|
|
#include <osmocom/vty/telnet_interface.h>
|
|
#include <openbsc/system_information.h>
|
|
#include <openbsc/paging.h>
|
|
#include <openbsc/signal.h>
|
|
#include <openbsc/chan_alloc.h>
|
|
#include <osmocom/core/talloc.h>
|
|
#include <openbsc/ipaccess.h>
|
|
|
|
/* global pointer to the gsm network data structure */
|
|
extern struct gsm_network *bsc_gsmnet;
|
|
|
|
static void patch_nm_tables(struct gsm_bts *bts);
|
|
|
|
/* Callback function for NACK on the OML NM */
|
|
static int oml_msg_nack(struct nm_nack_signal_data *nack)
|
|
{
|
|
int i;
|
|
|
|
if (nack->mt == NM_MT_SET_BTS_ATTR_NACK) {
|
|
|
|
LOGP(DNM, LOGL_FATAL, "Failed to set BTS attributes. That is fatal. "
|
|
"Was the bts type and frequency properly specified?\n");
|
|
exit(-1);
|
|
} else {
|
|
LOGP(DNM, LOGL_ERROR, "Got a NACK going to drop the OML links.\n");
|
|
for (i = 0; i < bsc_gsmnet->num_bts; ++i) {
|
|
struct gsm_bts *bts = gsm_bts_num(bsc_gsmnet, i);
|
|
if (is_ipaccess_bts(bts))
|
|
ipaccess_drop_oml(bts);
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
/* Callback function to be called every time we receive a signal from NM */
|
|
static int nm_sig_cb(unsigned int subsys, unsigned int signal,
|
|
void *handler_data, void *signal_data)
|
|
{
|
|
struct nm_nack_signal_data *nack;
|
|
|
|
switch (signal) {
|
|
case S_NM_NACK:
|
|
nack = signal_data;
|
|
return oml_msg_nack(nack);
|
|
default:
|
|
break;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
int bsc_shutdown_net(struct gsm_network *net)
|
|
{
|
|
struct gsm_bts *bts;
|
|
|
|
llist_for_each_entry(bts, &net->bts_list, list) {
|
|
LOGP(DNM, LOGL_NOTICE, "shutting down OML for BTS %u\n", bts->nr);
|
|
dispatch_signal(SS_GLOBAL, S_GLOBAL_BTS_CLOSE_OM, bts);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int generate_and_rsl_si(struct gsm_bts_trx *trx, enum osmo_sysinfo_type i)
|
|
{
|
|
struct gsm_bts *bts = trx->bts;
|
|
int si_len, rc, j;
|
|
|
|
/* Only generate SI if this SI is not in "static" (user-defined) mode */
|
|
if (!(bts->si_mode_static & (1 << i))) {
|
|
rc = gsm_generate_si(bts, i);
|
|
if (rc < 0)
|
|
return rc;
|
|
si_len = rc;
|
|
}
|
|
|
|
DEBUGP(DRR, "SI%s: %s\n", gsm_sitype_name(i),
|
|
hexdump(GSM_BTS_SI(bts, i), GSM_MACBLOCK_LEN));
|
|
|
|
switch (i) {
|
|
case SYSINFO_TYPE_5:
|
|
case SYSINFO_TYPE_5bis:
|
|
case SYSINFO_TYPE_5ter:
|
|
case SYSINFO_TYPE_6:
|
|
if (trx->bts->type == GSM_BTS_TYPE_HSL_FEMTO) {
|
|
/* HSL has mistaken SACCH INFO MODIFY for SACCH FILLING,
|
|
* so we need a special workaround here */
|
|
/* This assumes a combined BCCH and TCH on TS1...7 */
|
|
for (j = 0; j < 4; j++)
|
|
rsl_sacch_info_modify(&trx->ts[0].lchan[j],
|
|
gsm_sitype2rsl(i),
|
|
GSM_BTS_SI(bts, i), si_len);
|
|
for (j = 1; j < 8; j++) {
|
|
rsl_sacch_info_modify(&trx->ts[j].lchan[0],
|
|
gsm_sitype2rsl(i),
|
|
GSM_BTS_SI(bts, i), si_len);
|
|
rsl_sacch_info_modify(&trx->ts[j].lchan[1],
|
|
gsm_sitype2rsl(i),
|
|
GSM_BTS_SI(bts, i), si_len);
|
|
}
|
|
} else
|
|
rc = rsl_sacch_filling(trx, gsm_sitype2rsl(i),
|
|
GSM_BTS_SI(bts, i), rc);
|
|
break;
|
|
default:
|
|
rc = rsl_bcch_info(trx, gsm_sitype2rsl(i),
|
|
GSM_BTS_SI(bts, i), rc);
|
|
break;
|
|
}
|
|
|
|
return rc;
|
|
}
|
|
|
|
/* set all system information types */
|
|
static int set_system_infos(struct gsm_bts_trx *trx)
|
|
{
|
|
int i, rc;
|
|
struct gsm_bts *bts = trx->bts;
|
|
|
|
bts->si_common.cell_sel_par.ms_txpwr_max_ccch =
|
|
ms_pwr_ctl_lvl(bts->band, bts->ms_max_power);
|
|
bts->si_common.cell_sel_par.neci = bts->network->neci;
|
|
|
|
/* First, we determine which of the SI messages we actually need */
|
|
|
|
if (trx == bts->c0) {
|
|
/* 1...4 are always present on a C0 TRX */
|
|
for (i = SYSINFO_TYPE_1; i <= SYSINFO_TYPE_4; i++)
|
|
bts->si_valid |= (1 << i);
|
|
|
|
/* 13 is always present on a C0 TRX of a GPRS BTS */
|
|
if (bts->gprs.mode != BTS_GPRS_NONE)
|
|
bts->si_valid |= (1 << SYSINFO_TYPE_13);
|
|
}
|
|
|
|
/* 5 and 6 are always present on every TRX */
|
|
bts->si_valid |= (1 << SYSINFO_TYPE_5);
|
|
bts->si_valid |= (1 << SYSINFO_TYPE_6);
|
|
|
|
/* Second, we generate and send the selected SI via RSL */
|
|
for (i = SYSINFO_TYPE_1; i < _MAX_SYSINFO_TYPE; i++) {
|
|
if (!(bts->si_valid & (1 << i)))
|
|
continue;
|
|
|
|
rc = generate_and_rsl_si(trx, i);
|
|
if (rc < 0)
|
|
goto err_out;
|
|
}
|
|
|
|
return 0;
|
|
err_out:
|
|
LOGP(DRR, LOGL_ERROR, "Cannot generate SI %u for BTS %u, most likely "
|
|
"a problem with neighbor cell list generation\n",
|
|
i, bts->nr);
|
|
return rc;
|
|
}
|
|
|
|
/* Produce a MA as specified in 10.5.2.21 */
|
|
static int generate_ma_for_ts(struct gsm_bts_trx_ts *ts)
|
|
{
|
|
/* we have three bitvecs: the per-timeslot ARFCNs, the cell chan ARFCNs
|
|
* and the MA */
|
|
struct bitvec *cell_chan = &ts->trx->bts->si_common.cell_alloc;
|
|
struct bitvec *ts_arfcn = &ts->hopping.arfcns;
|
|
struct bitvec *ma = &ts->hopping.ma;
|
|
unsigned int num_cell_arfcns, bitnum, n_chan;
|
|
int i;
|
|
|
|
/* re-set the MA to all-zero */
|
|
ma->cur_bit = 0;
|
|
ts->hopping.ma_len = 0;
|
|
memset(ma->data, 0, ma->data_len);
|
|
|
|
if (!ts->hopping.enabled)
|
|
return 0;
|
|
|
|
/* count the number of ARFCNs in the cell channel allocation */
|
|
num_cell_arfcns = 0;
|
|
for (i = 1; i < 1024; i++) {
|
|
if (bitvec_get_bit_pos(cell_chan, i))
|
|
num_cell_arfcns++;
|
|
}
|
|
|
|
/* pad it to octet-aligned number of bits */
|
|
ts->hopping.ma_len = num_cell_arfcns / 8;
|
|
if (num_cell_arfcns % 8)
|
|
ts->hopping.ma_len++;
|
|
|
|
n_chan = 0;
|
|
for (i = 1; i < 1024; i++) {
|
|
if (!bitvec_get_bit_pos(cell_chan, i))
|
|
continue;
|
|
/* set the corresponding bit in the MA */
|
|
bitnum = (ts->hopping.ma_len * 8) - 1 - n_chan;
|
|
if (bitvec_get_bit_pos(ts_arfcn, i))
|
|
bitvec_set_bit_pos(ma, bitnum, 1);
|
|
else
|
|
bitvec_set_bit_pos(ma, bitnum, 0);
|
|
n_chan++;
|
|
}
|
|
|
|
/* ARFCN 0 is special: It is coded last in the bitmask */
|
|
if (bitvec_get_bit_pos(cell_chan, 0)) {
|
|
n_chan++;
|
|
/* set the corresponding bit in the MA */
|
|
bitnum = (ts->hopping.ma_len * 8) - 1 - n_chan;
|
|
if (bitvec_get_bit_pos(ts_arfcn, 0))
|
|
bitvec_set_bit_pos(ma, bitnum, 1);
|
|
else
|
|
bitvec_set_bit_pos(ma, bitnum, 0);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void bootstrap_rsl(struct gsm_bts_trx *trx)
|
|
{
|
|
unsigned int i;
|
|
|
|
LOGP(DRSL, LOGL_NOTICE, "bootstrapping RSL for BTS/TRX (%u/%u) "
|
|
"on ARFCN %u using MCC=%u MNC=%u LAC=%u CID=%u BSIC=%u TSC=%u\n",
|
|
trx->bts->nr, trx->nr, trx->arfcn, bsc_gsmnet->country_code,
|
|
bsc_gsmnet->network_code, trx->bts->location_area_code,
|
|
trx->bts->cell_identity, trx->bts->bsic, trx->bts->tsc);
|
|
set_system_infos(trx);
|
|
|
|
for (i = 0; i < ARRAY_SIZE(trx->ts); i++)
|
|
generate_ma_for_ts(&trx->ts[i]);
|
|
}
|
|
|
|
/* Callback function to be called every time we receive a signal from INPUT */
|
|
static int inp_sig_cb(unsigned int subsys, unsigned int signal,
|
|
void *handler_data, void *signal_data)
|
|
{
|
|
struct input_signal_data *isd = signal_data;
|
|
struct gsm_bts_trx *trx = isd->trx;
|
|
int ts_no, lchan_no;
|
|
|
|
if (subsys != SS_INPUT)
|
|
return -EINVAL;
|
|
|
|
switch (signal) {
|
|
case S_INP_TEI_UP:
|
|
if (isd->link_type == E1INP_SIGN_RSL)
|
|
bootstrap_rsl(trx);
|
|
break;
|
|
case S_INP_TEI_DN:
|
|
LOGP(DMI, LOGL_ERROR, "Lost some E1 TEI link: %d %p\n", isd->link_type, trx);
|
|
|
|
if (isd->link_type == E1INP_SIGN_OML)
|
|
counter_inc(trx->bts->network->stats.bts.oml_fail);
|
|
else if (isd->link_type == E1INP_SIGN_RSL)
|
|
counter_inc(trx->bts->network->stats.bts.rsl_fail);
|
|
|
|
/*
|
|
* free all allocated channels. change the nm_state so the
|
|
* trx and trx_ts becomes unusable and chan_alloc.c can not
|
|
* allocate from it.
|
|
*/
|
|
for (ts_no = 0; ts_no < ARRAY_SIZE(trx->ts); ++ts_no) {
|
|
struct gsm_bts_trx_ts *ts = &trx->ts[ts_no];
|
|
|
|
for (lchan_no = 0; lchan_no < ARRAY_SIZE(ts->lchan); ++lchan_no) {
|
|
if (ts->lchan[lchan_no].state != LCHAN_S_NONE)
|
|
lchan_free(&ts->lchan[lchan_no]);
|
|
lchan_reset(&ts->lchan[lchan_no]);
|
|
}
|
|
|
|
ts->nm_state.operational = 0;
|
|
ts->nm_state.availability = 0;
|
|
}
|
|
|
|
trx->nm_state.operational = 0;
|
|
trx->nm_state.availability = 0;
|
|
trx->bb_transc.nm_state.operational = 0;
|
|
trx->bb_transc.nm_state.availability = 0;
|
|
|
|
abis_nm_clear_queue(trx->bts);
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int bootstrap_bts(struct gsm_bts *bts)
|
|
{
|
|
int i, n;
|
|
|
|
/* FIXME: What about secondary TRX of a BTS? What about a BTS that has TRX
|
|
* in different bands? Why is 'band' a parameter of the BTS and not of the TRX? */
|
|
switch (bts->band) {
|
|
case GSM_BAND_1800:
|
|
if (bts->c0->arfcn < 512 || bts->c0->arfcn > 885) {
|
|
LOGP(DNM, LOGL_ERROR, "GSM1800 channel must be between 512-885.\n");
|
|
return -EINVAL;
|
|
}
|
|
break;
|
|
case GSM_BAND_1900:
|
|
if (bts->c0->arfcn < 512 || bts->c0->arfcn > 810) {
|
|
LOGP(DNM, LOGL_ERROR, "GSM1900 channel must be between 512-810.\n");
|
|
return -EINVAL;
|
|
}
|
|
break;
|
|
case GSM_BAND_900:
|
|
if (bts->c0->arfcn < 1 ||
|
|
(bts->c0->arfcn > 124 && bts->c0->arfcn < 955) ||
|
|
bts->c0->arfcn > 1023) {
|
|
LOGP(DNM, LOGL_ERROR, "GSM900 channel must be between 1-124, 955-1023.\n");
|
|
return -EINVAL;
|
|
}
|
|
break;
|
|
case GSM_BAND_850:
|
|
if (bts->c0->arfcn < 128 || bts->c0->arfcn > 251) {
|
|
LOGP(DNM, LOGL_ERROR, "GSM850 channel must be between 128-251.\n");
|
|
return -EINVAL;
|
|
}
|
|
break;
|
|
default:
|
|
LOGP(DNM, LOGL_ERROR, "Unsupported frequency band.\n");
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (bts->network->auth_policy == GSM_AUTH_POLICY_ACCEPT_ALL &&
|
|
!bts->si_common.rach_control.cell_bar)
|
|
LOGP(DNM, LOGL_ERROR, "\nWARNING: You are running an 'accept-all' "
|
|
"network on a BTS that is not barred. This "
|
|
"configuration is likely to interfere with production "
|
|
"GSM networks and should only be used in a RF "
|
|
"shielded environment such as a faraday cage!\n\n");
|
|
|
|
/* Control Channel Description */
|
|
bts->si_common.chan_desc.att = 1;
|
|
bts->si_common.chan_desc.bs_pa_mfrms = RSL_BS_PA_MFRMS_5;
|
|
bts->si_common.chan_desc.bs_ag_blks_res = 1;
|
|
|
|
/* T3212 is set from vty/config */
|
|
|
|
/* Set ccch config by looking at ts config */
|
|
for (n=0, i=0; i<8; i++)
|
|
n += bts->c0->ts[i].pchan == GSM_PCHAN_CCCH ? 1 : 0;
|
|
|
|
switch (n) {
|
|
case 0:
|
|
bts->si_common.chan_desc.ccch_conf = RSL_BCCH_CCCH_CONF_1_C;
|
|
break;
|
|
case 1:
|
|
bts->si_common.chan_desc.ccch_conf = RSL_BCCH_CCCH_CONF_1_NC;
|
|
break;
|
|
case 2:
|
|
bts->si_common.chan_desc.ccch_conf = RSL_BCCH_CCCH_CONF_2_NC;
|
|
break;
|
|
case 3:
|
|
bts->si_common.chan_desc.ccch_conf = RSL_BCCH_CCCH_CONF_3_NC;
|
|
break;
|
|
case 4:
|
|
bts->si_common.chan_desc.ccch_conf = RSL_BCCH_CCCH_CONF_4_NC;
|
|
break;
|
|
default:
|
|
LOGP(DNM, LOGL_ERROR, "Unsupported CCCH timeslot configuration\n");
|
|
return -EINVAL;
|
|
}
|
|
|
|
/* some defaults for our system information */
|
|
bts->si_common.cell_options.radio_link_timeout = 7; /* 12 */
|
|
|
|
/* allow/disallow DTXu */
|
|
if (bts->network->dtx_enabled)
|
|
bts->si_common.cell_options.dtx = 0;
|
|
else
|
|
bts->si_common.cell_options.dtx = 2;
|
|
|
|
bts->si_common.cell_options.pwrc = 0; /* PWRC not set */
|
|
|
|
bts->si_common.cell_sel_par.acs = 0;
|
|
|
|
bts->si_common.ncc_permitted = 0xff;
|
|
|
|
paging_init(bts);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int bsc_bootstrap_network(int (*mncc_recv)(struct gsm_network *, struct msgb *),
|
|
const char *config_file)
|
|
{
|
|
struct telnet_connection dummy_conn;
|
|
struct gsm_bts *bts;
|
|
int rc;
|
|
|
|
/* initialize our data structures */
|
|
bsc_gsmnet = gsm_network_init(1, 1, mncc_recv);
|
|
if (!bsc_gsmnet)
|
|
return -ENOMEM;
|
|
|
|
bsc_gsmnet->name_long = talloc_strdup(bsc_gsmnet, "OpenBSC");
|
|
bsc_gsmnet->name_short = talloc_strdup(bsc_gsmnet, "OpenBSC");
|
|
|
|
/* our vty command code expects vty->priv to point to a telnet_connection */
|
|
dummy_conn.priv = bsc_gsmnet;
|
|
rc = vty_read_config_file(config_file, &dummy_conn);
|
|
if (rc < 0) {
|
|
LOGP(DNM, LOGL_FATAL, "Failed to parse the config file: '%s'\n", config_file);
|
|
return rc;
|
|
}
|
|
|
|
rc = telnet_init(tall_bsc_ctx, bsc_gsmnet, 4242);
|
|
if (rc < 0)
|
|
return rc;
|
|
|
|
register_signal_handler(SS_NM, nm_sig_cb, NULL);
|
|
register_signal_handler(SS_INPUT, inp_sig_cb, NULL);
|
|
|
|
llist_for_each_entry(bts, &bsc_gsmnet->bts_list, list) {
|
|
rc = bootstrap_bts(bts);
|
|
|
|
switch (bts->type) {
|
|
case GSM_BTS_TYPE_NANOBTS:
|
|
case GSM_BTS_TYPE_HSL_FEMTO:
|
|
break;
|
|
default:
|
|
rc = e1_reconfig_bts(bts);
|
|
break;
|
|
}
|
|
|
|
if (rc < 0) {
|
|
fprintf(stderr, "Error in E1 input driver setup\n");
|
|
exit (1);
|
|
}
|
|
}
|
|
|
|
/* initialize nanoBTS support omce */
|
|
rc = ipaccess_setup(bsc_gsmnet);
|
|
rc = hsl_setup(bsc_gsmnet);
|
|
|
|
return 0;
|
|
}
|