The document discusses GSM-GPRS network operations including:
1. Network identity parameters such as MCC, MNC, LAC, CI which allow identification of network elements and location of mobile stations.
2. Idle mode operations which include cell selection, location updating, and allow mobile stations to receive system information when not in a call.
3. Location update and handover procedures which update the network on a mobile station's location area and allow calls to be maintained as a mobile station moves between cells.
This document discusses various causes and troubleshooting steps related to 2G call drops and unsuccessful handovers. It addresses issues like low signal strength, interference, incorrect parameter settings, transmission faults, hardware faults, and more. The key performance indicators of TCH Drop Rate and Handover Failure Rate are defined. Causes of dropped calls on traffic channels include excessive timing advance, low signal strength, poor quality, sudden loss of connection, and other factors. Investigation steps provided include checking error logs, parameters, neighboring cell definitions, transmission quality, antenna installation, and more.
The document discusses SDCCH (Standalone Dedicated Control Channel) configuration and usage in GSM networks. It describes possible SDCCH configurations including SDCCH/8 and SDCCH/4. It also discusses SDCCH holding times for different functions, reasons for SDCCH congestion, and methods to prevent congestion through proper dimensioning of SDCCH resources.
This document provides an overview of location area (LA), routing area (RA), and UTRAN registration area (URA) planning in WCDMA networks. It defines these key areas and describes their purposes in mobility management. LAs are used for circuit-switched services, RAs for packet-switched services, and URAs exist within the UTRAN domain. The document examines the relationships between the areas and discusses factors involved in optimizing their sizes such as update load balancing and paging load. Practical guidance is provided on planning and optimization of LAs, RAs, and URAs for different network scenarios.
2 g and 3g kpi improvement by parameter optimization (nsn, ericsson, huawei) ...Jean de la Sagesse
The document discusses key performance indicators (KPIs) for 2G and 3G networks and how top telecom vendors like Ericsson, Huawei, and NSN optimize parameters to improve these KPIs. It outlines techniques for reducing TCH blocking, SD blocking, TCH drop, HOSR, TASR, SD drop, and improving paging success rate through actions like changing configuration parameters, enabling features, addressing hardware issues, and optimizing cells physically. The optimization of these parameters can help maintain balance between network throughput, capacity and radio quality while ensuring a seamless transition between 2G and 3G.
Nokia gsm-kpi-analysis-based-on-daily-monitoring-basis-presentationmohammed khairy
This document discusses key performance indicators (KPIs) for monitoring a GSM network and reasons for and solutions to common issues. It provides relationships between different network elements and describes concepts like SD blocking, SD drop, TCH blocking, TCH assignment, TCH drop, and handover success rate (HOSR). For each KPI, it outlines potential causes for degradation and recommendations to address hardware faults, interference, parameter misconfiguration, and other problems.
The document discusses working with BSC nodes in ENM and provides the following key points:
- BSC node configuration is done through managed objects (MOs) below the BscM object which have non-standard behavior for create, update, and delete operations.
- There are limitations when making changes to BscM MOs including only allowing 100 operations per command and only one user making changes at a time.
- Commands on BscM MOs can partially succeed, with some attributes or objects succeeding and others failing. It is important to review any failed operations carefully.
This document discusses key performance indicators (KPIs) related to a mobile network. It provides information on the relationships between different network elements like BSCs, BTSs, TRXs. It defines terms like SD blocking, SD drop, TCH blocking, TCH assignment, TCH drop and reasons they may occur. Solutions for reducing each issue are provided like changing parameters, adding hardware, improving coverage. Reports for analyzing each problem are listed.
This document discusses various causes and troubleshooting steps related to 2G call drops and unsuccessful handovers. It addresses issues like low signal strength, interference, incorrect parameter settings, transmission faults, hardware faults, and more. The key performance indicators of TCH Drop Rate and Handover Failure Rate are defined. Causes of dropped calls on traffic channels include excessive timing advance, low signal strength, poor quality, sudden loss of connection, and other factors. Investigation steps provided include checking error logs, parameters, neighboring cell definitions, transmission quality, antenna installation, and more.
The document discusses SDCCH (Standalone Dedicated Control Channel) configuration and usage in GSM networks. It describes possible SDCCH configurations including SDCCH/8 and SDCCH/4. It also discusses SDCCH holding times for different functions, reasons for SDCCH congestion, and methods to prevent congestion through proper dimensioning of SDCCH resources.
This document provides an overview of location area (LA), routing area (RA), and UTRAN registration area (URA) planning in WCDMA networks. It defines these key areas and describes their purposes in mobility management. LAs are used for circuit-switched services, RAs for packet-switched services, and URAs exist within the UTRAN domain. The document examines the relationships between the areas and discusses factors involved in optimizing their sizes such as update load balancing and paging load. Practical guidance is provided on planning and optimization of LAs, RAs, and URAs for different network scenarios.
2 g and 3g kpi improvement by parameter optimization (nsn, ericsson, huawei) ...Jean de la Sagesse
The document discusses key performance indicators (KPIs) for 2G and 3G networks and how top telecom vendors like Ericsson, Huawei, and NSN optimize parameters to improve these KPIs. It outlines techniques for reducing TCH blocking, SD blocking, TCH drop, HOSR, TASR, SD drop, and improving paging success rate through actions like changing configuration parameters, enabling features, addressing hardware issues, and optimizing cells physically. The optimization of these parameters can help maintain balance between network throughput, capacity and radio quality while ensuring a seamless transition between 2G and 3G.
Nokia gsm-kpi-analysis-based-on-daily-monitoring-basis-presentationmohammed khairy
This document discusses key performance indicators (KPIs) for monitoring a GSM network and reasons for and solutions to common issues. It provides relationships between different network elements and describes concepts like SD blocking, SD drop, TCH blocking, TCH assignment, TCH drop, and handover success rate (HOSR). For each KPI, it outlines potential causes for degradation and recommendations to address hardware faults, interference, parameter misconfiguration, and other problems.
The document discusses working with BSC nodes in ENM and provides the following key points:
- BSC node configuration is done through managed objects (MOs) below the BscM object which have non-standard behavior for create, update, and delete operations.
- There are limitations when making changes to BscM MOs including only allowing 100 operations per command and only one user making changes at a time.
- Commands on BscM MOs can partially succeed, with some attributes or objects succeeding and others failing. It is important to review any failed operations carefully.
This document discusses key performance indicators (KPIs) related to a mobile network. It provides information on the relationships between different network elements like BSCs, BTSs, TRXs. It defines terms like SD blocking, SD drop, TCH blocking, TCH assignment, TCH drop and reasons they may occur. Solutions for reducing each issue are provided like changing parameters, adding hardware, improving coverage. Reports for analyzing each problem are listed.
The document summarizes the simplified call flow signaling process for a 2G/3G voice call. It shows that UE1 establishes a connection with the access network and core network to page UE2. UE2 responds and a connection is established between the two user equipments through the core network, with a notification that they are now connected.
The document discusses GPRS operations and procedures. It provides an overview of GPRS architecture, protocols used in GPRS, mobility management procedures like GPRS attach and routing area update, and location management in GPRS. Diagrams are included to illustrate logical architecture, data transfer between network elements, and mobility states of a GPRS mobile station.
The document describes the call flow procedures for mobile originating and mobile terminating calls in a GSM network.
For a mobile originating call, the MS requests a dedicated channel and indicates it wants to set up a call. The MSC receives the call setup message and checks for call barring before establishing a link with the BSC. The BSC assigns a traffic channel for the call.
For a mobile terminating call, the call is routed to the GMSC serving the called subscriber's home network. The GMSC queries the HLR for routing information. The HLR provides a roaming number to route the call to the subscriber's current MSC. The MSC pages the subscriber through the BSCs in their
This document describes the ZXSDR BS8700 software defined radio base station, which consists of a BBU and series of RRUs. Key features include:
- Integrating GSM and UMTS radio networks into a single network to reduce costs by using a single base station that can be flexibly configured for GSM or UMTS via software.
- Adopting a distributed architecture with a baseband unit and remote radio units connected via optical fiber for increased flexibility and capacity.
- Supporting both single-mode GSM, UMTS, or dual-mode GSM/UMTS configurations through software settings to provide converged 2G and 3G network functionality.
This document discusses radio resource optimization parameters in GSM networks. It covers topics like idle parameter optimization, power control, handover control, radio resource administration, measurement processing, signaling channel mapping, traffic channel mapping, paging parameters, access grant channel parameters, frequency reuse, and frequency hopping techniques. Diagrams and examples are provided to illustrate concepts like TDMA frame structure, logical and physical channel organization, and capacity calculations.
3 g huawei ran resource monitoring and management recommendedMery Koto
The document discusses monitoring resources in a Huawei WCDMA network to avoid congestion and blockages. It describes monitoring resources at the NodeB and cell levels like CE cards, licenses, OVSF codes, power levels, and Iub bandwidth. Counters are presented to monitor traffic, KPIs, resource usage, and rejections due to congestion. The resource consumption of different services is also analyzed to understand network characteristics and identify if resources are sufficient for desired services.
This document provides guidance on optimizing call setup time (CST) in GSM networks. It defines CST, lists influencing factors like procedure configuration, parameter settings, routing, and hardware issues. It describes the analysis process and provides optimization methods for each factor. Specific optimization cases are also presented, like long CST due to inconsistent signaling procedures between vendors. The document aims to help operators analyze CST issues and identify optimization solutions.
This documents will help to understand the details procedure of GSM IDLE Mode Behavior. GSM Idle mode behavior starting from PLMN selection, GSM Cell Camp, Cell Selection, Cell Reselection, Location Update, Paging, System Information to Measurements procedures have been captured in this document.
Mobile networks have evolved over several generations from 1G analog cellular to 4G LTE networks. This document provides an overview of the fundamental concepts and evolution of mobile networks including discussions of 2G, 3G, 4G networks and the Evolved Packet Core. It describes the core network functions and interfaces as well as basic network scenarios.
This document discusses L3 messages and system information messages in GSM networks. L3 messages are used for controlling mobile station behavior in idle and dedicated modes and for location updates. System information messages are downlink messages sent on the BCCH or SACCH channels to provide mobile stations with needed network information like cell parameters and neighbor cell lists. Examples of system information messages and their contents are provided.
The document provides an overview of Huawei's Core-CS Network and the evolution of WCDMA networks from Release 99 to Release 5. It discusses key aspects of MSC pool networks including improved resource utilization, enhanced network reliability, and reduced signaling traffic. It also covers AOIP and AOTDM, noting that AOIP allows for end-to-end Transcoder Free Operation and uses lower-cost IP networks for transmission on the A interface user plane.
This document discusses cell selection and reselection in GSM networks. It explains:
1) Cell selection is performed when a mobile first turns on to select an initial "camped-on" cell. Reselection occurs when the mobile moves to ensure it remains on the best cell.
2) C1 and C2 criteria are used for selection and reselection. C1 compares signal levels and C2 adds offsets.
3) In the scenario, the mobile selects the 900MHz cell using C1/C2 criteria. To prefer the 1800MHz cell instead, the document suggests using the C2 formula without offsets by setting the penalty time lower.
This document describes the process of optimizing GSM900/1800 mobile networks. Key metrics are monitored daily, weekly, and monthly to check network health using a tool called Optima. Daily counters include call setup success rate, dropped calls, handover failures, and congestion. Issues like low call success rates could be due to problems like SDCCH congestion, phantom RACHs, CM service rejects, or TCH failures. Weekly and monthly statistics provide further insight into trends, retention, accessibility, load, and overall performance. Reports evaluate capacity and optimization progress.
The document provides definitions and analysis methods for optimizing the Call Setup Success Rate (CSSR) in GSM networks. It defines the CSSR, lists influencing factors, and describes a three-step analysis and optimization process. The process involves identifying causes of low CSSR related to assignment success rate, immediate assignment success rate, or SDCCH drop rate. An optimization case from Vietnam addresses a difference in core network mechanisms that lowered the CSSR.
The document discusses different types of location updating procedures in mobile networks:
1. Location updating type normal occurs when a mobile subscriber (MS) moves to a new location area and needs to update the network of its new location.
2. IMSI attach is used when the MS powers back on in the same location area it was in when it entered detached mode.
3. Periodic registration is used to avoid unnecessary paging and prevent database failures. The MS registers at periodic intervals set by the network operator, from every 6 minutes to every hour.
This document provides information about link budget design for UMTS networks, including typical sensitivity levels for NodeBs and UEs, maximum output powers, antenna gains, path losses, and other key link budget parameters. It also discusses concepts like processing gain, Eb/No targets, soft handover gain, and pole capacity calculations for different services. The document aims to equip the reader with an understanding of the technical considerations and design objectives involved in developing an optimal UMTS network link budget.
The document describes traffic counter systems in RNCs (Radio Network Controllers) and cells in 3G WCDMA networks. It discusses key performance indicators for traffic, including Erlang load, throughput, number of radio bearers, and more. Counters are grouped by their measurement location (RNC or cell) and type (traffic, radio bearers, HSDPA, transmit power). The purpose is to understand and monitor traffic patterns and performance at different levels of the 3G network.
Mobile Networks Architecture and Security (2G to 5G)
+ Mobile Networks History 2G/3G/4G/LTE/5G
+ CS/PS/EPC/5GC Core Network Elements Overview
+ Mobile Networks Basic Scenarios
+ Mobile Network Security
+ Authentication / Ciphering
Difference in Rrc procedures lte and 3GPraveen Kumar
- RRC in LTE has only two states - RRC_IDLE and RRC_CONNECTED, compared to five states in 3G. This simplifies RRC state handling and RRM algorithms.
- Signaling radio bearers are simplified to SRB0, SRB1, and SRB2 (still being finalized) compared to four SRBs in 3G.
- RRC procedures and messages are simplified in LTE compared to 3G. This reduces signaling overhead and complexity.
LAC-CI is a unique identifier for cells in mobile networks that consists of the Location Area Code (LAC) and Cell Identity (CI). The LAC identifies a serving area, while the CI identifies a specific cell. Properly configuring LAC-CI is important for call establishment and routing, charging subscribers correctly, and ensuring operation and business support systems have valid location data. Invalid LAC-CI configuration could result in subscribers being charged the wrong rates or systems producing invalid information.
The document summarizes the simplified call flow signaling process for a 2G/3G voice call. It shows that UE1 establishes a connection with the access network and core network to page UE2. UE2 responds and a connection is established between the two user equipments through the core network, with a notification that they are now connected.
The document discusses GPRS operations and procedures. It provides an overview of GPRS architecture, protocols used in GPRS, mobility management procedures like GPRS attach and routing area update, and location management in GPRS. Diagrams are included to illustrate logical architecture, data transfer between network elements, and mobility states of a GPRS mobile station.
The document describes the call flow procedures for mobile originating and mobile terminating calls in a GSM network.
For a mobile originating call, the MS requests a dedicated channel and indicates it wants to set up a call. The MSC receives the call setup message and checks for call barring before establishing a link with the BSC. The BSC assigns a traffic channel for the call.
For a mobile terminating call, the call is routed to the GMSC serving the called subscriber's home network. The GMSC queries the HLR for routing information. The HLR provides a roaming number to route the call to the subscriber's current MSC. The MSC pages the subscriber through the BSCs in their
This document describes the ZXSDR BS8700 software defined radio base station, which consists of a BBU and series of RRUs. Key features include:
- Integrating GSM and UMTS radio networks into a single network to reduce costs by using a single base station that can be flexibly configured for GSM or UMTS via software.
- Adopting a distributed architecture with a baseband unit and remote radio units connected via optical fiber for increased flexibility and capacity.
- Supporting both single-mode GSM, UMTS, or dual-mode GSM/UMTS configurations through software settings to provide converged 2G and 3G network functionality.
This document discusses radio resource optimization parameters in GSM networks. It covers topics like idle parameter optimization, power control, handover control, radio resource administration, measurement processing, signaling channel mapping, traffic channel mapping, paging parameters, access grant channel parameters, frequency reuse, and frequency hopping techniques. Diagrams and examples are provided to illustrate concepts like TDMA frame structure, logical and physical channel organization, and capacity calculations.
3 g huawei ran resource monitoring and management recommendedMery Koto
The document discusses monitoring resources in a Huawei WCDMA network to avoid congestion and blockages. It describes monitoring resources at the NodeB and cell levels like CE cards, licenses, OVSF codes, power levels, and Iub bandwidth. Counters are presented to monitor traffic, KPIs, resource usage, and rejections due to congestion. The resource consumption of different services is also analyzed to understand network characteristics and identify if resources are sufficient for desired services.
This document provides guidance on optimizing call setup time (CST) in GSM networks. It defines CST, lists influencing factors like procedure configuration, parameter settings, routing, and hardware issues. It describes the analysis process and provides optimization methods for each factor. Specific optimization cases are also presented, like long CST due to inconsistent signaling procedures between vendors. The document aims to help operators analyze CST issues and identify optimization solutions.
This documents will help to understand the details procedure of GSM IDLE Mode Behavior. GSM Idle mode behavior starting from PLMN selection, GSM Cell Camp, Cell Selection, Cell Reselection, Location Update, Paging, System Information to Measurements procedures have been captured in this document.
Mobile networks have evolved over several generations from 1G analog cellular to 4G LTE networks. This document provides an overview of the fundamental concepts and evolution of mobile networks including discussions of 2G, 3G, 4G networks and the Evolved Packet Core. It describes the core network functions and interfaces as well as basic network scenarios.
This document discusses L3 messages and system information messages in GSM networks. L3 messages are used for controlling mobile station behavior in idle and dedicated modes and for location updates. System information messages are downlink messages sent on the BCCH or SACCH channels to provide mobile stations with needed network information like cell parameters and neighbor cell lists. Examples of system information messages and their contents are provided.
The document provides an overview of Huawei's Core-CS Network and the evolution of WCDMA networks from Release 99 to Release 5. It discusses key aspects of MSC pool networks including improved resource utilization, enhanced network reliability, and reduced signaling traffic. It also covers AOIP and AOTDM, noting that AOIP allows for end-to-end Transcoder Free Operation and uses lower-cost IP networks for transmission on the A interface user plane.
This document discusses cell selection and reselection in GSM networks. It explains:
1) Cell selection is performed when a mobile first turns on to select an initial "camped-on" cell. Reselection occurs when the mobile moves to ensure it remains on the best cell.
2) C1 and C2 criteria are used for selection and reselection. C1 compares signal levels and C2 adds offsets.
3) In the scenario, the mobile selects the 900MHz cell using C1/C2 criteria. To prefer the 1800MHz cell instead, the document suggests using the C2 formula without offsets by setting the penalty time lower.
This document describes the process of optimizing GSM900/1800 mobile networks. Key metrics are monitored daily, weekly, and monthly to check network health using a tool called Optima. Daily counters include call setup success rate, dropped calls, handover failures, and congestion. Issues like low call success rates could be due to problems like SDCCH congestion, phantom RACHs, CM service rejects, or TCH failures. Weekly and monthly statistics provide further insight into trends, retention, accessibility, load, and overall performance. Reports evaluate capacity and optimization progress.
The document provides definitions and analysis methods for optimizing the Call Setup Success Rate (CSSR) in GSM networks. It defines the CSSR, lists influencing factors, and describes a three-step analysis and optimization process. The process involves identifying causes of low CSSR related to assignment success rate, immediate assignment success rate, or SDCCH drop rate. An optimization case from Vietnam addresses a difference in core network mechanisms that lowered the CSSR.
The document discusses different types of location updating procedures in mobile networks:
1. Location updating type normal occurs when a mobile subscriber (MS) moves to a new location area and needs to update the network of its new location.
2. IMSI attach is used when the MS powers back on in the same location area it was in when it entered detached mode.
3. Periodic registration is used to avoid unnecessary paging and prevent database failures. The MS registers at periodic intervals set by the network operator, from every 6 minutes to every hour.
This document provides information about link budget design for UMTS networks, including typical sensitivity levels for NodeBs and UEs, maximum output powers, antenna gains, path losses, and other key link budget parameters. It also discusses concepts like processing gain, Eb/No targets, soft handover gain, and pole capacity calculations for different services. The document aims to equip the reader with an understanding of the technical considerations and design objectives involved in developing an optimal UMTS network link budget.
The document describes traffic counter systems in RNCs (Radio Network Controllers) and cells in 3G WCDMA networks. It discusses key performance indicators for traffic, including Erlang load, throughput, number of radio bearers, and more. Counters are grouped by their measurement location (RNC or cell) and type (traffic, radio bearers, HSDPA, transmit power). The purpose is to understand and monitor traffic patterns and performance at different levels of the 3G network.
Mobile Networks Architecture and Security (2G to 5G)
+ Mobile Networks History 2G/3G/4G/LTE/5G
+ CS/PS/EPC/5GC Core Network Elements Overview
+ Mobile Networks Basic Scenarios
+ Mobile Network Security
+ Authentication / Ciphering
Difference in Rrc procedures lte and 3GPraveen Kumar
- RRC in LTE has only two states - RRC_IDLE and RRC_CONNECTED, compared to five states in 3G. This simplifies RRC state handling and RRM algorithms.
- Signaling radio bearers are simplified to SRB0, SRB1, and SRB2 (still being finalized) compared to four SRBs in 3G.
- RRC procedures and messages are simplified in LTE compared to 3G. This reduces signaling overhead and complexity.
LAC-CI is a unique identifier for cells in mobile networks that consists of the Location Area Code (LAC) and Cell Identity (CI). The LAC identifies a serving area, while the CI identifies a specific cell. Properly configuring LAC-CI is important for call establishment and routing, charging subscribers correctly, and ensuring operation and business support systems have valid location data. Invalid LAC-CI configuration could result in subscribers being charged the wrong rates or systems producing invalid information.
This document discusses the evolution of wireless network technologies including GSM, GPRS, 3G CDMA, CDMA2000, and WCDMA. It provides timelines showing the development of these technologies from 1995 through 2006, including the introduction of capabilities like increased data speeds, packet-optimized networks, and all-IP architectures. The document also examines trends in wireless market growth and the status of internet usage in different Asian countries.
This document discusses trends in wireless technology and networks. It begins by outlining trends in the wireless market and access networks from 1999 to the present. These include a transition from standalone voice services to integrated voice and data services on mobile devices. The document then analyzes the stages of market development from nascent to mature and the accompanying challenges at each stage. Finally, population and internet usage statistics are presented for countries in Asia to provide regional context.
This document discusses trends in wireless technology and networks. It begins with an overview of market trends, noting that by 2005, 60% of speech became mobile and devices fit in the hand. It then covers the evolution of access networks, including the growth of technologies like GSM and GPRS to support increasing mobile data usage. The document also analyzes internet penetration rates and population sizes across Asian countries.
This document discusses GSM-GPRS antenna operation and related equipment. It covers various antenna types including omnidirectional and directional antennas. It also describes key antenna properties such as gain, polarization, beamwidth, downtilt, front-to-back ratio and intermodulation. Additionally, it discusses other network elements like masthead amplifiers and boosters that are used to improve coverage. The document provides an overview of GSM-GPRS antenna fundamentals and network infrastructure components.
The document discusses GSM air interface and channel mapping. It introduces GSM frequency bands, channel numbering, physical channels, and logical channels. It explains that logical channels must be mapped to physical channels, with different burst types used for different channel types during transmission. TDMA is used to allocate timeslots on each radio frequency channel for multiple users. Precise synchronization is required for the channel mapping and transmission.
The document provides information on various GSM traffic cases including call setup, location updating, and call handover. It describes the processes for mobile originated and mobile terminated calls. Location updating includes normal location updating, IMSI attach, and periodic registration. It also outlines different types of call handover such as intra-BTS, inter-BTS intra-BSC, inter-BSC, and inter-MSC handovers.
This document discusses parameters related to idle mode in GSM-GPRS networks. It describes the structure of BSS parameters including those for the BSC, BTS, handover control, power control, and adjacent cells. It then explains various aspects of idle mode including cell selection, cell reselection using criteria C1 and C2, and how parameters like cellReselectOffset and temporaryOffset can influence cell priority. It also covers cell reselection hysteresis and provides an example of how these parameters can be used in a dual-band network to optimize call setup between different layers.
The document discusses GSM-GPRS channel configuration and dimensioning. It covers:
1. Channel configuration options including combined, non-combined, and hybrid configurations and how logical channels are mapped to timeslots.
2. Signaling channel (SDCCH) dimensioning based on call setup load and location update load to determine the number of subscribers that can be supported.
3. Common control channel (CCCH) load calculation including RACH, PCH, and AGCH capacities and how they are used to page mobiles and grant channel access.
Philippe Langlois - SCTPscan Finding entry points to SS7 Networks & Telecommu...P1Security
This document discusses the history of telecommunications security and exploring signaling networks. It begins with the origins of "phreaking" in the 1960s and blue boxes. It then covers more modern threats like SIP account hacking and SS7/SIGTRAN hacking. The document reviews digital telephony concepts and how SS7 networks are organized. It explains how SIGTRAN moved SS7 to TCP/IP using SCTP. It discusses discovering SS7 networks through SCTP scanning and fingerprinting SCTP stacks. The presentation demonstrates SCTPscan and analyzing higher layer protocols with Ethereal.
This document discusses GSM-GPRS antenna operation and related equipment. It covers various antenna types including omnidirectional and directional antennas. It describes key antenna properties such as gain, polarization, beamwidth, downtilt, front-to-back ratio and intermodulation. It also discusses antenna development trends and network elements like masthead amplifiers and boosters. The document provides an overview of important concepts regarding antennas and equipment used for GSM-GPRS networks.
GRX is the global private network where telecom network operators exchange GPRS roaming traffic of their users. It’s also used for all M2M networks where roaming is used, and that is the case from some company’s truck fleet management system down to intelligence GPS location spybug tracking system.
GPRS has been there from 2.5G GSM networks to the upcoming LTE Advanced networks, and is now quite widespread technology, along with its attacks. GRX has had a structuring role in the global telecom world at a time where IP dominance was beginning to be acknowledged. Now it has expanded to a lightweight structure using both IP technologies and ITU-originated protocols.
In this presentation, we’ll see how this infrastructure is protected and how it can be attacked. We’ll discover the issues with specific telco equipment inside GRX, namely GGSN and SGSN but also now PDN Gateways in LTE and LTE Advanced “Evolved Packet Core”. We will see the implications of this with GTP protocol, DNS infrastructure, AAA servers and core network technologies such as MPLS, IPsec VPNs and their associated routing protocols. These network elements were rarely evaluated for security, and during our engagements with vulnerability analysis, we’ve seen several vulnerabilities that we will be showing in this speech.
We will demo some of the attacks on a simulated “PS Domain” network, that it the IP part of the Telecom Core Network that transports customers’ traffic, and investigate its relationships with legacy SS7, SIGTRAN IP backbones, M2M private corporate VPNs and telecom billing systems. We will also seem how automation enable us to succeed at attacks which are hard to perform and will show how a “sentinel” attack was able to compromise a telecom Core Network during one penetration test.
This document summarizes key radio parameters in GSM networks. It describes parameters for network identification like CGI and BSIC, which help identify cells and distinguish neighboring base stations. It also covers system control parameters for random access, including MAXRETRANS, Tx_Integer, and AC. Finally, it discusses cell selection parameters and network function parameters that control aspects like paging and location updating.
Gsm architecture, gsm network identities, network cases, cell planning, and c...Zorays Solar Pakistan
This document discusses GSM network architecture and components. It describes the key elements like the MSC, HLR, VLR and their functions. It explains cell planning and frequency reuse. It also covers network identities, attaching and roaming processes, call setup, and charging systems like triggered charging for calls and SMS. Compound charging processes for originating calls, voucher refills through IVR are summarized.
The document provides an overview of the GSM architecture, which is divided into three main subsystems:
1. The Base Station Subsystem (BSS) which includes the Base Transceiver Station (BTS) and Base Station Controller (BSC).
2. The Network Switching Subsystem (NSS) which includes the Mobile Switching Center (MSC), Home Location Register (HLR), Visitor Location Register (VLR), and Authentication Center (AUC).
3. The Operations and Support Subsystem (OSS) which handles maintenance of the network.
The Mobile Station (MS) consists of the Mobile Equipment (ME) and the Subscriber Identity Module (SIM) card. The SIM card provides
The document discusses the key components and subsystems of a GSM network. It describes the network subsystem which handles call functions, the radio subsystem which manages radio connections, and the operations and maintenance subsystem which operates and maintains GSM equipment. It provides an overview of the main elements including the BTS, BSC, MSC, HLR, VLR and how they interact and manage subscriber data, authentication, encryption, and call routing in the network.
Hi.....
Add 4G parameters in tems window||
https://www.youtube.com/watch?v=FmKi0O9dWpQ&t=3s
Training of 2G+3G+4G ON TEMS
https://www.youtube.com/watch?v=F2Ly5n4S8Xs
Like subscribe and share
1. The document discusses idle mode operation in a mobile network. The key functions of a mobile station (MS) in idle mode are to camp on the best suitable cell to receive system information, initiate calls, and be located for incoming calls/SMS.
2. The MS selects a cell based on PLMN selection, cell selection, and cell reselection parameters like signal strength and cell identifiers. It performs location updates to register its location area with the network when the area changes.
3. Location updates allow the network to page the MS for incoming calls and keep track of its location. There is a tradeoff between frequent location updates increasing signalling load versus less frequent updates hindering paging.
The document describes the architecture of GSM networks. It discusses the key components including the mobile station, base station subsystem (BSS), and network subsystem (NSS). The mobile station consists of mobile equipment and a subscriber identity module (SIM) card. The BSS comprises base transceiver stations and a base station controller. The NSS combines switches like the mobile switching center with databases like the home location register and visitor location register that track subscriber locations and identities.
The document provides an overview of GSM system components and protocols. It discusses key aspects of GSM including that it uses TDMA and FDD, describes the development of GSM standards over time, and outlines the main network components like the BTS, BSC, MSC, HLR, VLR, and interfaces between them. It also discusses protocols like IMSI, TMSI, IMEI, LAI and their roles in the GSM network.
This document provides an overview of the GSM network architecture. It describes the basic network structures including cells, location areas, MSC service areas, PLMN service areas, and GSM service areas. It also describes the functions of key network elements like the mobile station, base station system, visitor location register, home location register, equipment identity register, and authentication center. Finally, it discusses the operations and maintenance center and its functions for monitoring and controlling the network.
This document discusses cell parameters in GSM networks. It explains that cell parameters contain important information used by mobile devices to access the network, perform cell selection and reselection, and cooperate with the network. It describes several key cell parameters, including location area code (LAC), cell identity (CI), base station identity code (BSIC), and common control channel configuration (CCCH Conf). The goal of these parameters is to uniquely identify cells and networks, enable location services, and optimize signaling load through proper configuration of common channels.
The document contains questions about mobile telecommunication networks. It tests knowledge in several areas:
1) Network components such as the BTS, BSC, MSC, HLR, VLR and their functions.
2) Signaling systems like CCS7 and protocols like LAPD.
3) Radio interface technologies including GSM, DCS, TDMA, frequency channels.
4) Mobility management procedures like authentication, location update, and handover.
5) Identification numbers and parameters used like IMSI, TMSI, LAC, CGI for subscriber and network identification.
GSM is a standard for digital cellular networks that allows subscribers to use their phones globally. It uses FDMA to divide the spectrum into channels and TDMA to divide each channel into timeslots. The network consists of MSCs, HLRs, VLRs, BSCs, BTSs and cells. The MSC handles calls and interfaces with other networks. HLRs store subscriber data and VLRs temporarily store data for subscribers in the local area. BSCs control BTSs which transmit signals to mobile devices within cells. Key identifiers include IMSI, IMEI, MSISDN and MSRN.
The document describes the network structure and components of a GSM network. It discusses the hierarchy of network areas including cells, location areas covered by base transceiver stations (BTS), MSC service areas composed of location areas, PLMN service areas of an entire operator network, and the overall GSM service area. It also describes the functions of key network elements like the mobile station (MS), base station system (BSS), visitor location register (VLR), home location register (HLR), authentication center (AUC), and operations and maintenance center (OMC).
The document discusses the basics of mobile communication and GSM technology. It introduces the concept of cellular networks using small cells with frequency reuse. It describes the different types of cells used and how capacity is increased through sectorization and cell splitting. The document outlines the key components of GSM architecture including the BTS, BSC, MSC, HLR, VLR, EIR and their functions. It also discusses GSM identities, frequency bands, and the evolution of mobile communication technologies.
The document discusses several advantages of CDMA technology, including frequency reuse, large coverage area, high spectrum capacity, privacy, soft handoff, good voice quality, and smooth migration to 3G. It also provides details on ZTE's involvement with CDMA technology development and key components of a CDMA network such as the BTS, BSC, MSC, VLR, and HLR.
The document discusses several advantages of CDMA technology, including frequency reuse, large coverage area, high spectrum capacity, privacy, soft handoff, good voice quality, and smooth migration to 3G. It also provides details on ZTE's involvement with CDMA technology development and key components of a CDMA network such as the BSC, BTS, MSC, VLR, and HLR.
The document discusses several advantages of CDMA technology, including frequency reuse, large coverage area, high spectrum capacity, privacy, soft handoff, good voice quality, and smooth migration to 3G. It also provides details on ZTE's involvement with CDMA technology development and key components of a CDMA network such as the BTS, BSC, MSC, VLR, and HLR.
This document provides an overview of the GSM network architecture. It describes the key components and their functions, including cells, location areas, MSC service areas, PLMN service areas, and the GSM service area. It also discusses the relationships between these areas. Additionally, it explains the roles of key network elements like the mobile station, base station subsystem, visitor location register, home location register, equipment identity register, authentication center, and operations and maintenance center.
This presentation was provided by Steph Pollock of The American Psychological Association’s Journals Program, and Damita Snow, of The American Society of Civil Engineers (ASCE), for the initial session of NISO's 2024 Training Series "DEIA in the Scholarly Landscape." Session One: 'Setting Expectations: a DEIA Primer,' was held June 6, 2024.
This presentation includes basic of PCOS their pathology and treatment and also Ayurveda correlation of PCOS and Ayurvedic line of treatment mentioned in classics.
Walmart Business+ and Spark Good for Nonprofits.pdfTechSoup
"Learn about all the ways Walmart supports nonprofit organizations.
You will hear from Liz Willett, the Head of Nonprofits, and hear about what Walmart is doing to help nonprofits, including Walmart Business and Spark Good. Walmart Business+ is a new offer for nonprofits that offers discounts and also streamlines nonprofits order and expense tracking, saving time and money.
The webinar may also give some examples on how nonprofits can best leverage Walmart Business+.
The event will cover the following::
Walmart Business + (https://business.walmart.com/plus) is a new shopping experience for nonprofits, schools, and local business customers that connects an exclusive online shopping experience to stores. Benefits include free delivery and shipping, a 'Spend Analytics” feature, special discounts, deals and tax-exempt shopping.
Special TechSoup offer for a free 180 days membership, and up to $150 in discounts on eligible orders.
Spark Good (walmart.com/sparkgood) is a charitable platform that enables nonprofits to receive donations directly from customers and associates.
Answers about how you can do more with Walmart!"
A workshop hosted by the South African Journal of Science aimed at postgraduate students and early career researchers with little or no experience in writing and publishing journal articles.
This slide is special for master students (MIBS & MIFB) in UUM. Also useful for readers who are interested in the topic of contemporary Islamic banking.
How to Add Chatter in the odoo 17 ERP ModuleCeline George
In Odoo, the chatter is like a chat tool that helps you work together on records. You can leave notes and track things, making it easier to talk with your team and partners. Inside chatter, all communication history, activity, and changes will be displayed.
it describes the bony anatomy including the femoral head , acetabulum, labrum . also discusses the capsule , ligaments . muscle that act on the hip joint and the range of motion are outlined. factors affecting hip joint stability and weight transmission through the joint are summarized.
4. kris.sujatmoko@gmail.com 4
Network Identification Parameters
Untuk mengidentifikasi setiap elemen jaringan
pada suatu wilayah/area tertentu, GSM
membuat suatu penomoran yang bertujuan
untuk :
Memampukan MS secara benar mengidentifikasi ID
jaringan pada saat ini,
Memampukan jaringan mendapatkan informasi
secara real time keberadaan geografis sebuah MS.
Memampukan MS melaporkan secara benar
informasi tentang suatu cell dan tetangganya,
sehingga jaringan dapat melakukan proses handover
untuk menjaga kontinuitas percakapan.
5. kris.sujatmoko@gmail.com 5
CGI MCC MNC LAC CI
LAI
CC NDC SNMSISDN
MCC MNC MSINIMSI
X1 X2 X3 X4 X5 X6 X7 X8HLR-ID
Introduction: Codes & Identities
6. kris.sujatmoko@gmail.com 6
International
Area Layanan
Kode
National
MCC: Mobile Country Code
CC: Country Code
1 OperatorPLMN
MNC: Mobile Network Code
NDC: National Destination Code
MSC / SGSN „Switch“
Location Area LA
LA1
LA2
LAC: Location Area Code
LAI: Location Area Identity
Cell CI: Cell Identity
CGI: Cell Global Identity
MSC-Identity
Hierarki
Area
Layanan/
Kode GSM
7. kris.sujatmoko@gmail.com 7
Kode Negara & PLMN
Indonesia
CC = 62
MCC = 510
XL
INDOSAT
Telkomsel
NDC = 817,818,819
MNC = 11
NDC = 855,856,815,816
MNC = 10
NDC = 811,812,813,852
MNC = 01
CC NDC SN
Subscriber Number
MSISDN
Mobile Subscriber ISDN Number
MCC MNC MSIN
Mobile Subscriber Id. No.
IMSI
International Mobile Subscriber Identity
X1 X2 X3 X4 X5 X6 X7 X8HLR-ID
Subscriber Identities
8. kris.sujatmoko@gmail.com 8
Identifier:
MSC / VLR - Identity
LAI = MCC + MNC + LAC
CGI = LAI + CI
MSC / VLR
MSC / VLR
MSC / VLR
MSC / VLR
MSC / VLR
LA
LA
LA
LA
LA
Cell
Cell
MCC MNC LAC CI
LAI
MSC, Location & Cell Area
9. kris.sujatmoko@gmail.com 9
Cell Global Identity (CGI)
CGI MCC MNC LAC CI
LAI = Location Area Identity
ITU mengatur pengalokasian MCC. MCC Indonesia
adalah 510 (decimal).
MNC diatur oleh regulator di tiap negara.
LAC dikodekan secara berbeda setiap negara. Biasanya,
location area harus cukup luas.
Dua atau lebih cell yang berada pada area yang sama
tidak diperbolehkan memiliki CI yang sama.
Setting CGI:
10. kris.sujatmoko@gmail.com 10
CGI
• MCC = Mobile Country Code: berisi 3 digit desimal,
bernilai 000 - 999.
• MNC = Mobile Network Code: berisi 2 digit desimal,
bernilai 00 - 99.
• LAC = Location Area Code :
bernilai antara 1-65535.
• CI = Cell Identity:
bernilai antara 0-65535.
Country MCC Operator MNC
Indonesia 510 TELKOMSEL 01
INDOSAT 10
XL 11
China 460 CHINA UNICOM 01
CHINA MOBILE 02
Myanmar 410 MPT 00
Srilanka 403 CELLTEL 00
11. kris.sujatmoko@gmail.com 11
Role of CGI
• Informasi CGI dikirimkan secara broadcast pada setiap
cell.
• Ketika MS menerima informasi sistem, MS akan meng-
ekstrak informasi CGI dan menentukan cell berdasarkan
MCC dan MNC yang di-spesifikasi-kan dalam CGI.
• Dalam saat yang sama, hal ini juga menentukan apakah
location area-nya berubah atau tidak, kemudian
menentukan apakah perlu dilakukan proses location
update. Selama proses location update, MS akan
melaporkan ke jaringan mengenai cell mana yang
melayani dia pada saat itu.
12. kris.sujatmoko@gmail.com 12
Mobile
station
Base
station
Category Logical
Channel
SYNC CHANNEL INFORMATION
Carrier sine wave
SYSTEM INFORMATION TYPE3
CHANNEL REQUEST
IMMEDIATE ASSIGNMENT
LOCATION UPDATING REQUEST
AUTHENTICATION REQUEST
CIPHERING MODE COMMAND
CIPHERING MODE ACK
LOCATION UPDATING ACCEPT
TMSI ALLOCATION COMPLETE
AUTHENTICATION RESPONSE
CHANNEL RELEASE
RRM
RRM
RRM
RRM
MM
MM
MM
MM
MM
RRM
RRM
RRM
FCCH
SCH
BCCH
RACH
AGCH
SDCCH
SDCCH
SDCCH
SDCCH
SDCCH
SDCCH
SDCCH
SDCCH
Prosedur Location-Update
13. kris.sujatmoko@gmail.com 13
BSIC (Base Station Identity Code)
Para sistem GSM, masing-masing BTS dialokasikan
suatu kode “color code” yg disebut base station
identity code (BSIC).
Jika pada suatu saat, sebuah MS dapat menerima
BCCH TRX dari dua cell pada saat yang bersamaan
dan memiliki nomor kanal yang sama, maka MS
akan membedakan dua cell tersebut berdasarkan
BSIC.
NCC bernilai 0-7. BCC berilai 0-7.
BSIC NCC BCC
NCC = Network Color Code
BCC = Base Station Color
Code
14. kris.sujatmoko@gmail.com 14
BSIC = NCC and BCC
In the connection mode (during conversation), the MS
must measure the signals in the adjacent cells and report
the result to the network.
As each measurement report sent by the MS can only
contain the contents of six cells, so it is necessary to
control the MS so as to only report the information of cells
factually related to the cell concerned. The high 3 bits (i.e.
NCC) in the BSIC serve this purpose.
The BCC is used to identify different BS using the same
BCCH in the same GSM PLMN.
15. kris.sujatmoko@gmail.com 15
BSIC Configuration Principle
CBA
FED
In general, it is required that Cells A, B, C, D, E
and F use different BSIC. When the BSIC
resources are not enough, the cells close to each
other may take the priority to use different BSIC.
17. kris.sujatmoko@gmail.com 17
The Purposes
Secondly, the parameters related to idle
mode operation must be specified.
Idle mode signalling is directly relevant to
LA design, and dedicated mode signalling
is relevant to measurement reporting, HOC,
and POC.
When the mobile station is in idle mode,
it needs some information from the
network in order to know the right
frequencies, and find the right cells and
channel configuration.
18. kris.sujatmoko@gmail.com 18
IDLE MODE OPERATION
When the MS is switched ON
When there is no dedicated connection
To camp on the best suitable cell
For MS to receive system info from the NW on DL
For MS to be able to initiate a call whenever needed
For the NW to be able to locate the MS when there is a MT call/SMS
When?
Why?
Why to camp on a specific cell?
20. kris.sujatmoko@gmail.com 20
Idle Mode Operation Procedure
Search all the RF channels , take samples during
3-5 s and calculate averages. And put them in
ascending order with respect to signal level.
Then tune to the strongest RF channel.
Search for the frequency correction burst in that
carrier in order to varify if it is a BCCH carrier
Camp on the cell
Try to synchronize to the carrier and read
the BCCH data.
Is it a BCCH
carrier?
Is it a correct
PLMN ?
Is the cell barred?
Is C1>0
Tune to the next highest
RF channel which is not
tried before
No
No
No
No
Yes
Yes
Yes
Yes
22. kris.sujatmoko@gmail.com 22
IDLE MODE OPERATIONIDLE MODE OPERATION
BaseStation Identity Code (BSIC)BaseStation Identity Code (BSIC)
• BSIC is a combination of NCC and BCC
• Reported in Measurement Results to BSC
• Can be listed in Hex or Decimal
NCC (0...7) BCC (0...7)
4 2 U 4 2 U
32 16 8 4 2 U Range
0 0 0 x x x 0 - 7
0 0 1 x x x 8 - 15
0 1 0 x x x 16 - 23
0 1 1 x x x 24 - 31
1 0 0 x x x 32 - 39
1 0 1 x x x 40 - 47
1 1 0 x x x 48 - 55
1 1 1 x x x 56 - 63
23. kris.sujatmoko@gmail.com 23
IDLE MODE OPERATION
Base Station Colour Code
MNC = Operator e.g Telkomsel
MCC = Country e.g Indonesia
LAC 1 = Jakarta LAC 2
LAC 3 LAC 4
f1
f2
f3
f1
f1
bcc = 1
bcc = 2
bcc = 3
Neighbour list of f3:
f1
f2
...
Location Area Code
BSC
BTS BTS BTS
1 2 n
24. kris.sujatmoko@gmail.com 24
initialFrequency 1 ... 124 GSM 900
512 … 885 GSM 1800
512 … 810 GSM 1900
Parameter Value
bCCHAllocation-ID 1 ... 128 in GSM
bCCHAllocationList 1 ... 124 in GSM ( max. 32 freq. for all bands)
idleStateBCCHAllocation 0 (BCCH list is taken from the adjacent cell)
1 ... 128 (number of the BCCH list used)
measurementBCCHAllocation Dedicated Mode
ADJ (BCCH frequency list taken from adj. cell)
IDLE (active MS uses the same list as MS
in IDLE mode)
IDLE MODE OPERATION
Frequencies
25. kris.sujatmoko@gmail.com 25
plmnpermitted 0 ... 7
Parameter Value
NOTE This parameter is confusing. It’s not used for network selection. It’s used AFTER
a network has been selected so that only measurements from one PLMN are reported
IDLE MODE OPERATION
PLMN Selection
Two Modes
Automatic
Manual
Three Types of Lists
Preferred
Found
Forbidden
26. kris.sujatmoko@gmail.com 26
IDLE MODE OPERATION
Cell Selection in Idle Mode
Two methods:
a) Normal cell selection
b) Stored list cell selection (opt)
If no suitable cell found with method b) then a) is tried.
27. kris.sujatmoko@gmail.com 27
• timerPeriodicUpdateMS 0.0 ... 25.5 (hours)
• allowIMSIAttachDetach Yes/No
Parameter Value
IDLE MODE OPERATION
Location Update
MS => MSC / VLR
Mobile Station switched ON
No IMSI Attach / Detach
Same Location Area => No Location Update
Different Location Area => Location Update
Change of the Location Area
Location Area under the same MSC / VLR
Location Area under another MSC /VLR => HLR will be updated
Service is rejected (MS unknown in VLR)
Time Periodic (MS -> MSC/VLR)
30. kris.sujatmoko@gmail.com 30
LAI =
2620533
MS
BTS
BCCH:
CGI =
26205A64B...
Location
Registration/
Update
• Location Registration: initial MS registration in PLMN
• Location Update
• no LU during connection!
request
Location Update
3 types of Location Update:
• normal
• periodic
• with IMSI attach
31. kris.sujatmoko@gmail.com 31
Intra-cell
BSCBTS
f 1, TS 1
f 2, TS 2
Intra-BSS
BSC
BTS
BTS
MSC
Handover
performed
Intra-MSC
MSC
BSS
BSS
Inter-MSC
MSC - BMSC - A
MSC - C
basic
subsequent
MSC
Handover
performed
Handover
32. kris.sujatmoko@gmail.com 32
Measurement:
connection quality & strength:
strength of serving BTS &
surrounding BTSs
Handover
Decision
MS
Measurement:
connection quality & strength,
distance measurement (TA)
BTS
Measurement report
Timing Advance,
Power control
BSC
HO
decision
Measurement value processing
(averaging, limit values,..)
Evaluation list
(suitable BTSs for HO...)
Initiation of HO type
Handover
BSC/
MSC
Measurement
report
{"27":"MODIFIED\nWhen the MS is switched on, the action taken by the location updating process is :\na) SIM present and no LU needed (because of the status of the stored LAI and "attach" flag): The MS is in the update state UPDATED;\nb) SIM present and LU needed: A LU request is made;\nc) No SIM present: The MS enters the update state Idle, NO IMSI.\nFurthermore, an LU request indicating Normal Location Updating is also made when the response to an outgoing request shows that the MS is unknown in the VLR.\nThe timer for the Periodic Location Updating is broadcast by the Nw in the System Info 3 within the CCCH description. This timer is T3212.\nA timer in the MS is started randomly and when it reaches T3212 a Periodic LU is required.\nPeriodic Location Update is a compromise between the load in terms of signalling between the MS and the VLR (!) for frequent periodic LU and the risk of the MS not being reached in case of a MTC if for some reason the information in the VLR looses its validity or is lost.\nThe BCCH will contain an indicator indicating whether or not IMSI attach/detach operation is mandatory :\nallowIMSIAttachDetach\nWhen IMSI attach/detach operation applies, a MS shall send the IMSI detach message to the network when the MS is powered down.\nWhen the MS returns to the active state, the MS shall perform an LU request indicating IMSI attach, provided that the MS still is in the same location area. If the location area has changed, an LU request indicating Normal Location Updating shall be performed.\n","16":"","5":"","33":"","22":"","11":"","28":"","17":"","6":"","23":"TWO SLIDES TOGETHER\n","12":"","1":"","29":"","18":"New\nSummary:\nWhen an MS is switched on, it attempts to make contact with a GSM public land mobile network (PLMN). The particular PLMN to be contacted may be selected either automatically or manually. The MS looks for a suitable cell of the chosen PLMN and chooses that cell to provide available services, and tunes to its control channel. This choosing is known as "camping on the cell". The MS will then register its presence in the registration area of the chosen cell if necessary, by means of a location registration (LR), GPRS attach or IMSI attach procedure. If the MS loses coverage of a cell, it reselects onto the most suitable alternative cell of the selected PLMN and camps on that cell. If the new cell is in a different registration area, an LR request is performed. If the MS loses coverage of a PLMN, either a new PLMN is selected automatically, or an indication of which PLMNs are available is given to the user, so that a manual selection can be made. \n","7":"","24":"InitialFrequency is a TRX parameter that defines the ARFCN in use for that TRX. The problem is when the Cell uses RF Hopping. In that case in fact the frequency is a sort of reference to be used when hopping is disabled.\nBcchAllocationId defined in the BSC, identifies one of 128 lists of frequencies that can be defined in the BSC. \nBcchAllocationListdefined in the BSC, contains a list of ARFCNs, with a maximum of 32 frequencies. They are interpreted by the MS as BCCH frequencies to listen to.\nIdleStateBcchAllocation BTS parameter specifies which set of BCCH frequencies, the MS should listen to.\nMeasurementBcchAllocation specifies if in dedicated mode the MS should use the real list of neighbour or the list of BCCH defined for the idle mode.\n","13":"","2":"","30":"","19":"New\nSo the Idle mode tasks are three.\n","8":"","25":"The MS leaves a PLMN if \na) the user decides so \nb) the serving PLMN cannot give coverage anymore\nThe Home PLMN is always a priority PLMN to select.\nFORBIDDEN PLMN's LIST\nThe set of PLMN where the MS can make roaming is changing all the time. Therefore the information is dynamically handled in the SIM based on the attempts to register in the PLMN.\nWhen the MS finds a new PLMN it may try to register into it the NW rejects the attempt and the PLMN is inserted in the list.\nFOUND PLMN's LIST\nIn manual mode the Mobile scans the GSM band and the list of the PLMNs found is presented to the user, independently from the PLMN being forbidden or not. Then the user can choose one of the PLMN and try the registration.\nPREFERRED PLMN's LIST\nIt's a list of PLMN (at least 8) stored in order of priority in the SIM. The selection of the PLMN in automatic mode will consider the PLMNs of the FOUND LIST and sort them according to the PREFERRED LIST provided that they are not in the FORBIDDEN LIST.\nThe PREFERRED LIST can be created by the Operator and then modified by the subscriber. \nPLMNpermitted is a parameter defined in GSM 05.08 par. 7.2 as a bitmap of 8 bits to select the NCC of the cells that can be measured and reported by the MS in dedicated mode.\n","14":"","3":"","31":"","20":"","9":"","26":"New\nStored list is the list of the BCCH frequencies used in the NW. Maybe achived during the previous contact with that PLMN?????\n","15":"","4":"","32":"","21":"We first mention about the Ids and ID codes which are very important for the identification of network elements.\nAnd frequencies.\nSLIGHTLY MODIFIED\nNetwork Colour Code and Base Station Colour Code form the BSIC and are transmitted on the SCH channel . They are decoded by the MS. Note that they are both coded with 3 bits, but in some cases the 6 bits are put together, thus creating some problems of decoding.\nE.g. BSIC 6,3 = 110 , 011 => 110011 = 51\nFor Broadcast and and common control channels, the Training Sequence Code must be equal to the BCC (GSM 05.02 paragraph 5.2.2)\n","10":""}