english

AP-6000

2PRMT Confidential Proprietary

Air Protocol AnalyzerAir Protocol Analyzer


Main Characteristics & Benefits


System DiagramSystem Diagram

• The AP-6000 is designed to analyze the air interface (Uu) in WCDMA Networks

DL – DownlinkUL – UplinkUu – UE/UTRAN InterfaceIub – Node B/RNC Interface

Iu CS/PS

Node B

RNC

Iub

Iub

UL

DL

UL

DL

Traced UE

AP-6000Air Protocol Analyzer

Node B• Does not require

any physical connection to UE, Node B or target Network

Uu


Main CharacteristicsMain Characteristics

• Displays the signaling and information of Layers 1, 2 and 3 of the UTRAN Air Protocol

• Provides Control Plane and User Plane information

• Fully compliant with 3GPP specifications – Release ’99, 5 and 6 (HSUPA)


Main CharacteristicsMain Characteristics

• UE & BTS vendor Independent

• Auto & Manual modes

• Follows UE throughout the whole communication process by decoding RRC messages


BenefitsBenefits

• Allows a complete analysis of the Uu protocol as well as data for higher level applications

• Auto mode: a fast way to find a Cell, UE and start analysis

• Manual mode: parameter setting provides R&D engineers with a flexible and powerful tool to analyze a wide range of scenarios


BenefitsBenefits

• Provides an independent and reliable source for protocol analysis between UE and Node B

• Off line analysis provides R&D and IOT engineers critical data:‑– Form L1 signaling to L2, L3 messages, C plane and U plane‑ ‑

Reduce testing time & time to market


AP-6000 basics

HW and SW


System ConfigurationSystem Configuration

• The Main Unit requires the Console PC for configuration and operation

• Off-line data is analyzed in console PC

• Full stand alone operation of Main Unit is under development. It’ll use the Touch Screen LCD for Main Unit configuration and call capture

LAN Connection

Main Unit

On Board PC & Boards

IQ Inputs

RF Inputs

Touch Screen LCDConsole PC


RF ConfigurationRF Configuration

• Integrated RF units monitor WCDMA, GSM and InterRAT calls

• Each RF units captures the UL and DL radio signals between UE and Node Bs

RF Unit 2 – DL & UL WCDMA

RF Unit 1 – DL & UL WCDMA

RF Unit 3 – DL & UL GSM (Optional)


RF SpecificationsRF Specifications

• WCDMA: Dual RF / Quad Band units provide the capacity to follow inter-frequency HO

• GSM Option


BoardsBoards

• The AP-6000 has an on-board PC to control all the Main Unit’s functions

• 4 Standard WCDMA Boards + 1 Optional GSM Board

• Call information is stored in Console PC

GSM Board (Optional)

WCDMA HSDPA Board

WCDMA DL Board 2 (RF Unit 2)

WCDMA DL Board 1 (RF Unit 1)

WCDMA UL Board

On-board PC


BoardsBoards

• Board’s configuration is stored in CF memories

• HSUPA option does not require a separate board

Each board stores its configuration and code in CF memories

On-board PC


SoftwareSoftware

• The AP-6000 system software consist of five parts

– Console software running on Windows XP

– Firmware running on Main Unit

– FPGA configuration in Main Unit’s Boards

– DSP code in Main Unit’s Boards

– On-board Main Unit’s PC

• Software uploads are made through the Console PC


In/Out Synch InterfacesIn/Out Synch Interfaces

• The AP-6000 provides input and output interfaces to synchronize with other equipments

• Output: 10msec pulse controlled by DL or UL RRC messages

• Input: 10msec or 100µsec pulse

Sync In Sync Out


Understanding AP-6000’s operation and basic features


Basic FeaturesBasic Features

• The AP-6000 has three main steps in its operation:

– Configuration

– Real Time Capture

– Off-line Analysis



– Configuration

• Allows to set up parameters on how the AP is going to work

• Band & Frequency

• Auto or Manual modes

• Which UE to follow



– Real Time Capture

• Trace a particular UE following RRC messages

– Off-line Analysis

• The console software provides several ways to display signaling information as well as control and user plane data

• Allows to export data such as SIB, TPC at frame and time slot level, U-plane data


Configuration – Auto ModeConfiguration – Auto Mode

• The first step is to create a SCENE and configure basic parameters

• The SCENE will contain all the calls we record

• A file is created with each SCENE and the calls are automatically saved

Auto or Manual Mode

Band and DL Frequency

# of cells to be detected (idle mode)



• Once the Band and Frequency have been set, the SCH can be detected

SCH Profile *

Node Bs detected with:•SCH strength in dBm *•Primary SCR Code *

* The information displayed here is from a simulation.



• Configure if the call is going to be carried out in one or two frequencies (Inter-Freq HO)

• In the case of Inter-Freq HO, AP only needs to know the first DL Freq. Changes in Freq are followed according to InterFreqMeasurmentInfo, or RRC messages containing info on the second Freq.

Single or Multiple Freq



• There are three ways to trace a UE

– First FACH

– First RACH

– Specify a UE ID by its IMSI, TIMSI, P-TIMSI or IMEI

• The console SW allows to store the 16 most used UEs

Way to trace a UE



• AP has built in the KASUMI algorithm used for encryption in UMTS

• In order to properly decode all messages the AP needs to know the CK used by the UE

• Four options:– Enter the CK values– Use a Test USIM and enter the K value– Use the RS-232 port in the Console PC to

enter the CK values from the UE as they change during the call. This required a special modified UE with access to CK values

– USIM reader

Ciphering Options



• Fifth option– Using a UE that does not support ciphering

Note: If CKs are unknown it is possible to decode the common channels but not the dedicated channels

Ciphering Options


Real Time CaptureReal Time Capture

• Start recording a call

– Once the configuration is done, it is time to record a call

• Recording a call is known as a TAKE

• There can be many TAKES in on SCENE file

• Each individual TAKE can be saved without the need of keeping the original SCENE file

Start a Take



• Real time Window

– Physical and Transport Channel signaling is shown during a Take

HSDPA Channels

HSUPA Channels

WCDMA Channels

RRC Messages



• Real time Window

– The yellow vertical timeline advances with every frame, that is every 10msec

– For WCDMA channels, each line represents a Transport Channel

– For HSDPA/HSUPA channels, each line represents a 2msec sub-frame

Timeline

Tr Channels

Timeline

2msec sub-frames

Note:

Green: CRC-OK or ACK*

Red: CRC-Error or NACK*

Yellow: Data w/o CRC or None*

* Depending on the type of channel


Off-line AnalysisOff-line Analysis

• The Off-line Analysis give the options to see detailed information in all 3 layers as well as control and user plane

• RRC Messages

• Power control

• PDUs

PDU protocol data unit

SDU service data unit



• Main Screens:

– Layer 1 Graphic View

– Layer 1 Data Dump

– BCH Analysis

– C-Plane RRC/NAS Analysis

– U-Plane Analysis

– Online Messages

– C-Plane RLC Analysis

– U-Plane RLC Analysis



• Layer 1 Graphic View

– It provides a similar view to the Real Time Window plus Transport and Physical channels data

Physical and Transport Channels signaling

Transport Channels Data

Physical Channels Data(Control information TFCI, TPC)



• Layer 1 Data Dump– It provides information on the selected Transport and Physical

channels

Transport Channels

Physical Channels(Control information TFCI, TPC)

Filter



• C-Plane RRC/NAS Analysis

RRC Messages

L3 SDU

L2 MAC SDU

L2 RLC SDU

Tr CH Data

RRC Messages ASN.1

RB Inf.

• RRC Messages with RLC sequence No. & RLC Control PDUs

• RRC/NAS ASN.1 display

• RRC PDU data

• RLC & MAC Layer data

• Transport Channel data

Efficient way to Troubleshooting



• U-Plane Analysis• U-Plane data in units of RLC

SDUs & sequence No.

• IPv4 Header display with Hex and ASCIIdump of data payload

• RLC, MAC, Tr CH layer dataTCP/IP analysis (by Ethereal)

• Detailed TCP/IP Analysis

• Evaluation for UE application



• C & U-Plane RRC/NAS Analysis

• Statistic information

• Total Data PDU

• Total Data PDU with Polling bit

• Resend Data

• Reset PDU

• Reset ACK PDU

• Status PDU

Statistical Information



• C & U-Plane RRC/NAS Analysis

RRC Messages ASN.1

• RLC sequence information

• Direction (UL/DL)

• Transaction of RLC PDU

• Resend data, Ack & Nack PDU

• Reason of Re-send is estimated

Evaluate Service Quality


Options


OptionsOptions

• HSUPA Analysis Software

Software upgrade to support HSUPA. No additional hardware required (Based on 3GPP Dec 2005 version)

• InterRAT Monitoring (GSM/GPRS)

Factory upgrade of AP-6000 for InterRAT monitoring. Additional GSM/GPRS module, RF unit and InterRAT monitoring software is required

• Off-line viewer software license

Off line viewer can process AP log files on a local PC. It has the same analyzing features of the console software


OptionsOptions

• U-plane data PCAP format file exportFile export function. PCAP format file can be created from user plane data in the AP log database

• LSC format file exportFile export function. LSC format file can be created form RRC message on the AP log database (Anritsu LSC software can use the file as input)

• U-plane data PPP on UDI PCAP format file exportFile export function. PCAP format file can be created from PPP protocol data on UDI user plane in AP log database

UDI - Unrestricted Digital Information This is an ISDN (Integrated Services Digital Network) term to describe the ability to transfer any bit pattern over a digital channel.


OptionsOptions

• SS (Supplementary Services) message analysisAnalysis function for upper layer message on control plane data

• U-plane data H.245 decodeUser plane data analysis function. TV call protocol H.245 header can be decoded and displayed on the user plane data analysis window

• MBMS

• HSPA+

• Remote Control

Customization: Special requirements can be evaluated and implemented


Options – Options – LSC Format File ExportLSC Format File Export

LSC format file export

• Conversion of AP log file data to LSC format

• Anritsu LSC software generates test scenario for MD8480 signaling tester

• Reduce programming time

Note:The “LSC Log Scenario Converter” software is sold by Anritsu Engineering

LSC Format Fileslsc_bch.txtlsc_flow.txt

Data conversion softwareAP log file to LSC format Log Scenario Covert

Software loads LSC files and creates test scenario for

MD8480

Anritsu MD8480

TestMobile

LabScenario Duplication


Options – Options – LSC Format File ExportLSC Format File Export

LSC format file export

Note:The “LSC Log Scenario Converter” software is sold by Anritsu Engineering

lsc_bch.txt

lsc_flow.txt

Scenario Compiler


U-plane data PPP on UDI PCAP format file export

• U-plane data PPP on UDI packets can be exported to PCAP format file to be analyzed by third party TCP-IP analysis software – i.e. Ethereal

• Packet data is a digital circuit packet communication on UDI

Options – U-plane Data ConversionOptions – U-plane Data Conversion

PCAP Format<FileName>.log

Data conversion softwareAP log file to PCAP format

TCP-IP Analysis software (3rd party software)• TCP header• TCP-IP protocol sequence• TCP-IP user data • Web access data• e-mail data


GSM/InterRAT

• Allows the AP monitoring GSM calls as well as InterRAT WCDMA GSM handovers

• Factory upgrade option for standard AP-6000

• Additional board, RF Unit and Software

Options – GSMOptions – GSM

GSM BS

GSM DLGSM/WCDMACapable UE

AP-6000With GSM Option

WCDMA Node B

WCDMA DL


FAQs and AP answers


FAQs - HandoversFAQs - Handovers

• How do I see Inter-Frequency HO?

– Real Time Window and Off-line: The AP displays DPCH 1 and 2 corresponding to RF1 and RF2 during Inter-Frequency Handover

– Online RRC messages such as PhysicalChannelReconfiguration

Inter-Freq HO shown in the DL

Inter-Freq HO shown in the UL



• How do I see Inter-Frequency HO?

– Off-line: Detailed RRC message sequence and ASN.1 details

RRC messages list:PhysicalChannelReconfiguration

RRC messages list ASN.1



• How do I see Intra-Frequency HO?

– Real Time Window and Off-line: The AP combines all DPCH involved in the Intra-Freq HO so it is not possible to see the HO in a graphical way

– Off-line: It is possible to see the RRC messages such as ActiveSetUpdate adding or releasing RLs

– In this case new RL is added at ITC 46076 with SCR 18



– Then, we can see in Layer 1 Data Dump Physical CHs that at ITC 4607B, 50msec later, there are 3 DPCCHs (0, 1 and 2) in the DL

– It is possible to see detailed information such as RSSI, RSCP and SFN


FAQs – Power ControlFAQs – Power Control

• How do I see Power Control?

Power Control can be seen in two different ways:

Method 1– Using the TPC Save option for DPCH or UDPCH– It generates a .CSV file that can be opened with Excel and display the

TPC at a Frame level– The TPC is calculated as an average of TPC bits in each time slot– The result gives an indication in the power in a frame was up or down



Method 1 Result




Method 2

– Layer 1 Data Dump Physical CHs contains the TPC information for each Transport Channel at a time slot level

– Using the Log Save option the data can be exported to a .CSV file that can be opened with Excel




Note:

– RSSI and RSCP show in the DL are in dBm

– RSCP in the UL is calculated on the UL-DPCH but it is not an absolute value

– UL RSCP in the range of -90dBm -/+5 is accurate

DL RSSI & RSCP

UL RSCP


FAQs – Connection SetupFAQs – Connection Setup

• How do I know if the connection setup sequence is correct?

– Checking signalling and messages during connection procedure

– AP can show if a message is missing

– Ability to see PRACH preamble signature and AICH response


FAQs – Connection SetupFAQs – Connection Setup

• How do I know if the connection setup sequence is correct?

– AP can indicate if PRACH preamble and/or message is transmitted at an illegal time (3GPP specs. 25.211 / 7.1 & 7.3)

1 UL PRACH Preamble 2 DL AICH 3 UL RRC Connection Request

(PRACH message)

4 DL RRC Connection Setup

(S-CCPCH)


FAQs - SensitivityFAQs - Sensitivity

• What is the AP-6000 sensitivity?

– The AP-6000 complies with the 3GPP specifications 25.101 “User Equipment (UE) radio transmission and reception (FDD)” section 7.3.1 “Receiver characteristics - Reference sensitivity level - Minimum requirement”

– BER test are performed to verify AP compliance with 25.101

– Tests are carried out in all frequency bands supported by the AP, for both RF Units and in the DL & UL



– Sample BER Tests Results - DL

1.9GHz – UNIT 1 BERDownlink (DCH 12.2kbps)

1.0E-05

1.0E-04

1.0E-03

1.0E-02

1.0E-01

1.0E+00

-120 -110 -100 -90 -80 -70 -60 -50 -40 -30 -20 -10 0

RF Input Level[dBm]

BER

CASE34466055(unit1)

Channel : DPCH (Slot format = 11)

measurement : DPCH 106 samples

BER<10-3 Range : -108.7dBm


1.0E-05

1.0E-04

1.0E-03

1.0E-02

1.0E-01

1.0E+00

-120 -110 -100 -90 -80 -70 -60 -50 -40 -30 -20 -10 0

RF Input Level[dBm]

BER

CASE34466055(unit1)

Channel : DPCH (Slot format = 2)

measurement : DPCH 106 samples

BER<10-3 Range : -111.3dBm


– Sample BER Tests Results - UL

1.9GHz – UNIT 1 BERUplink (DCH 12.2kbps)



– Recommended AP-6000 / UE RF connection - Lab

UE

WCDMA Network Emulator

AP6000

Attenuator < 10dBCirculator

Power Divider



– Recommended AP-6000 / UE RF connection - Field

AP6000

Shared RF between UE and AP-6000

UE

Node B

Pacific Rim Mobile Technologies

english

Technology

main unit configuration

operation of main unit

ul wcdmarf unit

main unitfpga configuration

main units boardsdsp

node bsrf unit

interrat callseach rf

separate boardeach board