blob: 25dc0c8a21a3b4d7008b3b014a26d3edd6b5d2e2 [file] [log] [blame]
Harald Welte39315c42010-01-10 18:01:52 +01001/* ip.access nanoBTS specific code */
2
3/* (C) 2009-2010 by Harald Welte <laforge@gnumonks.org>
4 *
5 * All Rights Reserved
6 *
7 * This program is free software; you can redistribute it and/or modify
Harald Welte9af6ddf2011-01-01 15:25:50 +01008 * it under the terms of the GNU Affero General Public License as published by
9 * the Free Software Foundation; either version 3 of the License, or
Harald Welte39315c42010-01-10 18:01:52 +010010 * (at your option) any later version.
11 *
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
Harald Welte9af6ddf2011-01-01 15:25:50 +010015 * GNU Affero General Public License for more details.
Harald Welte39315c42010-01-10 18:01:52 +010016 *
Harald Welte9af6ddf2011-01-01 15:25:50 +010017 * You should have received a copy of the GNU Affero General Public License
18 * along with this program. If not, see <http://www.gnu.org/licenses/>.
Harald Welte39315c42010-01-10 18:01:52 +010019 *
20 */
21
22#include <sys/types.h>
Harald Weltef338a032011-01-14 15:55:42 +010023#include <arpa/inet.h>
24
25#include <osmocore/tlv.h>
Harald Welte39315c42010-01-10 18:01:52 +010026
27#include <openbsc/gsm_data.h>
Harald Weltef338a032011-01-14 15:55:42 +010028#include <openbsc/signal.h>
Harald Welte39315c42010-01-10 18:01:52 +010029#include <openbsc/abis_nm.h>
30
31static struct gsm_bts_model model_nanobts = {
32 .type = GSM_BTS_TYPE_NANOBTS,
Harald Welte09cefee2011-02-12 12:29:21 +010033 .name = "nanobts",
34 .oml_rcvmsg = &abis_nm_rcvmsg,
Harald Welte39315c42010-01-10 18:01:52 +010035 .nm_att_tlvdef = {
36 .def = {
37 /* ip.access specifics */
38 [NM_ATT_IPACC_DST_IP] = { TLV_TYPE_FIXED, 4 },
39 [NM_ATT_IPACC_DST_IP_PORT] = { TLV_TYPE_FIXED, 2 },
40 [NM_ATT_IPACC_STREAM_ID] = { TLV_TYPE_TV, },
Harald Welte39315c42010-01-10 18:01:52 +010041 [NM_ATT_IPACC_SEC_OML_CFG] = { TLV_TYPE_FIXED, 6 },
42 [NM_ATT_IPACC_IP_IF_CFG] = { TLV_TYPE_FIXED, 8 },
43 [NM_ATT_IPACC_IP_GW_CFG] = { TLV_TYPE_FIXED, 12 },
44 [NM_ATT_IPACC_IN_SERV_TIME] = { TLV_TYPE_FIXED, 4 },
45 [NM_ATT_IPACC_LOCATION] = { TLV_TYPE_TL16V },
46 [NM_ATT_IPACC_PAGING_CFG] = { TLV_TYPE_FIXED, 2 },
47 [NM_ATT_IPACC_UNIT_ID] = { TLV_TYPE_TL16V },
48 [NM_ATT_IPACC_UNIT_NAME] = { TLV_TYPE_TL16V },
49 [NM_ATT_IPACC_SNMP_CFG] = { TLV_TYPE_TL16V },
50 [NM_ATT_IPACC_PRIM_OML_CFG_LIST] = { TLV_TYPE_TL16V },
51 [NM_ATT_IPACC_NV_FLAGS] = { TLV_TYPE_TL16V },
52 [NM_ATT_IPACC_FREQ_CTRL] = { TLV_TYPE_FIXED, 2 },
53 [NM_ATT_IPACC_PRIM_OML_FB_TOUT] = { TLV_TYPE_TL16V },
54 [NM_ATT_IPACC_CUR_SW_CFG] = { TLV_TYPE_TL16V },
55 [NM_ATT_IPACC_TIMING_BUS] = { TLV_TYPE_TL16V },
56 [NM_ATT_IPACC_CGI] = { TLV_TYPE_TL16V },
57 [NM_ATT_IPACC_RAC] = { TLV_TYPE_TL16V },
58 [NM_ATT_IPACC_OBJ_VERSION] = { TLV_TYPE_TL16V },
59 [NM_ATT_IPACC_GPRS_PAGING_CFG]= { TLV_TYPE_TL16V },
60 [NM_ATT_IPACC_NSEI] = { TLV_TYPE_TL16V },
61 [NM_ATT_IPACC_BVCI] = { TLV_TYPE_TL16V },
62 [NM_ATT_IPACC_NSVCI] = { TLV_TYPE_TL16V },
63 [NM_ATT_IPACC_NS_CFG] = { TLV_TYPE_TL16V },
64 [NM_ATT_IPACC_BSSGP_CFG] = { TLV_TYPE_TL16V },
65 [NM_ATT_IPACC_NS_LINK_CFG] = { TLV_TYPE_TL16V },
66 [NM_ATT_IPACC_RLC_CFG] = { TLV_TYPE_TL16V },
67 [NM_ATT_IPACC_ALM_THRESH_LIST]= { TLV_TYPE_TL16V },
68 [NM_ATT_IPACC_MONIT_VAL_LIST] = { TLV_TYPE_TL16V },
69 [NM_ATT_IPACC_TIB_CONTROL] = { TLV_TYPE_TL16V },
70 [NM_ATT_IPACC_SUPP_FEATURES] = { TLV_TYPE_TL16V },
71 [NM_ATT_IPACC_CODING_SCHEMES] = { TLV_TYPE_TL16V },
72 [NM_ATT_IPACC_RLC_CFG_2] = { TLV_TYPE_TL16V },
73 [NM_ATT_IPACC_HEARTB_TOUT] = { TLV_TYPE_TL16V },
74 [NM_ATT_IPACC_UPTIME] = { TLV_TYPE_TL16V },
75 [NM_ATT_IPACC_RLC_CFG_3] = { TLV_TYPE_TL16V },
76 [NM_ATT_IPACC_SSL_CFG] = { TLV_TYPE_TL16V },
77 [NM_ATT_IPACC_SEC_POSSIBLE] = { TLV_TYPE_TL16V },
78 [NM_ATT_IPACC_IML_SSL_STATE] = { TLV_TYPE_TL16V },
79 [NM_ATT_IPACC_REVOC_DATE] = { TLV_TYPE_TL16V },
80 },
81 },
82};
83
Harald Weltef338a032011-01-14 15:55:42 +010084static unsigned char nanobts_attr_bts[] = {
85 NM_ATT_INTERF_BOUND, 0x55, 0x5b, 0x61, 0x67, 0x6d, 0x73,
86 /* interference avg. period in numbers of SACCH multifr */
87 NM_ATT_INTAVE_PARAM, 0x06,
88 /* conn fail based on SACCH error rate */
89 NM_ATT_CONN_FAIL_CRIT, 0x00, 0x02, 0x01, 0x10,
90 NM_ATT_T200, 0x1e, 0x24, 0x24, 0xa8, 0x34, 0x21, 0xa8,
91 NM_ATT_MAX_TA, 0x3f,
92 NM_ATT_OVERL_PERIOD, 0x00, 0x01, 10, /* seconds */
93 NM_ATT_CCCH_L_T, 10, /* percent */
94 NM_ATT_CCCH_L_I_P, 1, /* seconds */
95 NM_ATT_RACH_B_THRESH, 10, /* busy threshold in - dBm */
96 NM_ATT_LDAVG_SLOTS, 0x03, 0xe8, /* rach load averaging 1000 slots */
97 NM_ATT_BTS_AIR_TIMER, 128, /* miliseconds */
98 NM_ATT_NY1, 10, /* 10 retransmissions of physical config */
99 NM_ATT_BCCH_ARFCN, HARDCODED_ARFCN >> 8, HARDCODED_ARFCN & 0xff,
100 NM_ATT_BSIC, HARDCODED_BSIC,
101 NM_ATT_IPACC_CGI, 0, 7, 0x00, 0xf1, 0x10, 0x00, 0x01, 0x00, 0x00,
102};
103
104static unsigned char nanobts_attr_radio[] = {
105 NM_ATT_RF_MAXPOWR_R, 0x0c, /* number of -2dB reduction steps / Pn */
106 NM_ATT_ARFCN_LIST, 0x00, 0x02, HARDCODED_ARFCN >> 8, HARDCODED_ARFCN & 0xff,
107};
108
109static unsigned char nanobts_attr_nse[] = {
110 NM_ATT_IPACC_NSEI, 0, 2, 0x03, 0x9d, /* NSEI 925 */
111 NM_ATT_IPACC_NS_CFG, 0, 7, 3, /* (un)blocking timer (Tns-block) */
112 3, /* (un)blocking retries */
113 3, /* reset timer (Tns-reset) */
114 3, /* reset retries */
115 30, /* test timer (Tns-test) */
116 3, /* alive timer (Tns-alive) */
117 10, /* alive retrires */
118 NM_ATT_IPACC_BSSGP_CFG, 0, 11,
119 3, /* blockimg timer (T1) */
120 3, /* blocking retries */
121 3, /* unblocking retries */
122 3, /* reset timer */
123 3, /* reset retries */
124 10, /* suspend timer (T3) in 100ms */
125 3, /* suspend retries */
126 10, /* resume timer (T4) in 100ms */
127 3, /* resume retries */
128 10, /* capability update timer (T5) */
129 3, /* capability update retries */
130};
131
132static unsigned char nanobts_attr_cell[] = {
133 NM_ATT_IPACC_RAC, 0, 1, 1, /* routing area code */
134 NM_ATT_IPACC_GPRS_PAGING_CFG, 0, 2,
135 5, /* repeat time (50ms) */
136 3, /* repeat count */
137 NM_ATT_IPACC_BVCI, 0, 2, 0x03, 0x9d, /* BVCI 925 */
138 NM_ATT_IPACC_RLC_CFG, 0, 9,
139 20, /* T3142 */
140 5, /* T3169 */
141 5, /* T3191 */
142 200, /* T3193 */
143 5, /* T3195 */
144 10, /* N3101 */
145 4, /* N3103 */
146 8, /* N3105 */
147 15, /* RLC CV countdown */
148 NM_ATT_IPACC_CODING_SCHEMES, 0, 2, 0x0f, 0x00, /* CS1..CS4 */
149 NM_ATT_IPACC_RLC_CFG_2, 0, 5,
150 0x00, 250, /* T downlink TBF extension (0..500) */
151 0x00, 250, /* T uplink TBF extension (0..500) */
152 2, /* CS2 */
153#if 0
154 /* EDGE model only, breaks older models.
155 * Should inquire the BTS capabilities */
156 NM_ATT_IPACC_RLC_CFG_3, 0, 1,
157 2, /* MCS2 */
158#endif
159};
160
161static unsigned char nanobts_attr_nsvc0[] = {
162 NM_ATT_IPACC_NSVCI, 0, 2, 0x03, 0x9d, /* 925 */
163 NM_ATT_IPACC_NS_LINK_CFG, 0, 8,
164 0x59, 0xd8, /* remote udp port (23000) */
165 192, 168, 100, 11, /* remote ip address */
166 0x59, 0xd8, /* local udp port (23000) */
167};
168
169static void patch_16(uint8_t *data, const uint16_t val)
170{
171 memcpy(data, &val, sizeof(val));
172}
173
174static void patch_32(uint8_t *data, const uint32_t val)
175{
176 memcpy(data, &val, sizeof(val));
177}
178
179/*
180 * Patch the various SYSTEM INFORMATION tables to update
181 * the LAI
182 */
183static void patch_nm_tables(struct gsm_bts *bts)
184{
185 u_int8_t arfcn_low = bts->c0->arfcn & 0xff;
186 u_int8_t arfcn_high = (bts->c0->arfcn >> 8) & 0x0f;
187
188 /* patch ARFCN into BTS Attributes */
189 nanobts_attr_bts[42] &= 0xf0;
190 nanobts_attr_bts[42] |= arfcn_high;
191 nanobts_attr_bts[43] = arfcn_low;
192
193 /* patch the RACH attributes */
194 if (bts->rach_b_thresh != -1) {
195 nanobts_attr_bts[33] = bts->rach_b_thresh & 0xff;
196 }
197
198 if (bts->rach_ldavg_slots != -1) {
199 u_int8_t avg_high = bts->rach_ldavg_slots & 0xff;
200 u_int8_t avg_low = (bts->rach_ldavg_slots >> 8) & 0x0f;
201
202 nanobts_attr_bts[35] = avg_high;
203 nanobts_attr_bts[36] = avg_low;
204 }
205
206 /* patch BSIC */
207 nanobts_attr_bts[sizeof(nanobts_attr_bts)-11] = bts->bsic;
208
209 /* patch CGI */
210 abis_nm_ipaccess_cgi(nanobts_attr_bts+sizeof(nanobts_attr_bts)-7, bts);
211
212 /* patch the power reduction */
213 nanobts_attr_radio[1] = bts->c0->max_power_red / 2;
214
215 /* patch NSEI */
216 nanobts_attr_nse[3] = bts->gprs.nse.nsei >> 8;
217 nanobts_attr_nse[4] = bts->gprs.nse.nsei & 0xff;
218 memcpy(nanobts_attr_nse+8, bts->gprs.nse.timer,
219 ARRAY_SIZE(bts->gprs.nse.timer));
220 memcpy(nanobts_attr_nse+18, bts->gprs.cell.timer,
221 ARRAY_SIZE(bts->gprs.cell.timer));
222
223 /* patch NSVCI */
224 nanobts_attr_nsvc0[3] = bts->gprs.nsvc[0].nsvci >> 8;
225 nanobts_attr_nsvc0[4] = bts->gprs.nsvc[0].nsvci & 0xff;
226
227 /* patch IP address as SGSN IP */
228 patch_16(nanobts_attr_nsvc0 + 8,
229 htons(bts->gprs.nsvc[0].remote_port));
230 patch_32(nanobts_attr_nsvc0 + 10,
231 htonl(bts->gprs.nsvc[0].remote_ip));
232 patch_16(nanobts_attr_nsvc0 + 14,
233 htons(bts->gprs.nsvc[0].local_port));
234
235 /* patch BVCI */
236 nanobts_attr_cell[12] = bts->gprs.cell.bvci >> 8;
237 nanobts_attr_cell[13] = bts->gprs.cell.bvci & 0xff;
238 /* patch RAC */
239 nanobts_attr_cell[3] = bts->gprs.rac;
240
241 if (bts->gprs.mode == BTS_GPRS_EGPRS) {
242 /* patch EGPRS coding schemes MCS 1..9 */
243 nanobts_attr_cell[29] = 0x8f;
244 nanobts_attr_cell[30] = 0xff;
245 }
246}
247
248
249/* Callback function to be called whenever we get a GSM 12.21 state change event */
250static int nm_statechg_event(int evt, struct nm_statechg_signal_data *nsd)
251{
252 u_int8_t obj_class = nsd->obj_class;
253 void *obj = nsd->obj;
254 struct gsm_nm_state *new_state = nsd->new_state;
255
256 struct gsm_bts *bts;
257 struct gsm_bts_trx *trx;
258 struct gsm_bts_trx_ts *ts;
259 struct gsm_bts_gprs_nsvc *nsvc;
260
261 /* This event-driven BTS setup is currently only required on nanoBTS */
262
263 /* S_NM_STATECHG_ADM is called after we call chg_adm_state() and would create
264 * endless loop */
265 if (evt != S_NM_STATECHG_OPER)
266 return 0;
267
268 switch (obj_class) {
269 case NM_OC_SITE_MANAGER:
270 bts = container_of(obj, struct gsm_bts, site_mgr);
271 if ((new_state->operational == NM_OPSTATE_ENABLED &&
272 new_state->availability == NM_AVSTATE_OK) ||
273 (new_state->operational == NM_OPSTATE_DISABLED &&
274 new_state->availability == NM_AVSTATE_OFF_LINE))
275 abis_nm_opstart(bts, obj_class, 0xff, 0xff, 0xff);
276 break;
277 case NM_OC_BTS:
278 bts = obj;
279 if (new_state->availability == NM_AVSTATE_DEPENDENCY) {
280 patch_nm_tables(bts);
281 abis_nm_set_bts_attr(bts, nanobts_attr_bts,
282 sizeof(nanobts_attr_bts));
283 abis_nm_chg_adm_state(bts, obj_class,
284 bts->bts_nr, 0xff, 0xff,
285 NM_STATE_UNLOCKED);
286 abis_nm_opstart(bts, obj_class,
287 bts->bts_nr, 0xff, 0xff);
288 }
289 break;
290 case NM_OC_CHANNEL:
291 ts = obj;
292 trx = ts->trx;
293 if (new_state->operational == NM_OPSTATE_DISABLED &&
294 new_state->availability == NM_AVSTATE_DEPENDENCY) {
295 patch_nm_tables(trx->bts);
296 enum abis_nm_chan_comb ccomb =
297 abis_nm_chcomb4pchan(ts->pchan);
298 abis_nm_set_channel_attr(ts, ccomb);
299 abis_nm_chg_adm_state(trx->bts, obj_class,
300 trx->bts->bts_nr, trx->nr, ts->nr,
301 NM_STATE_UNLOCKED);
302 abis_nm_opstart(trx->bts, obj_class,
303 trx->bts->bts_nr, trx->nr, ts->nr);
304 }
305 break;
306 case NM_OC_RADIO_CARRIER:
307 trx = obj;
308 if (new_state->operational == NM_OPSTATE_DISABLED &&
309 new_state->availability == NM_AVSTATE_OK)
310 abis_nm_opstart(trx->bts, obj_class, trx->bts->bts_nr,
311 trx->nr, 0xff);
312 break;
313 case NM_OC_GPRS_NSE:
314 bts = container_of(obj, struct gsm_bts, gprs.nse);
315 if (bts->gprs.mode == BTS_GPRS_NONE)
316 break;
317 if (new_state->availability == NM_AVSTATE_DEPENDENCY) {
318 abis_nm_ipaccess_set_attr(bts, obj_class, bts->bts_nr,
319 0xff, 0xff, nanobts_attr_nse,
320 sizeof(nanobts_attr_nse));
321 abis_nm_opstart(bts, obj_class, bts->bts_nr,
322 0xff, 0xff);
323 }
324 break;
325 case NM_OC_GPRS_CELL:
326 bts = container_of(obj, struct gsm_bts, gprs.cell);
327 if (bts->gprs.mode == BTS_GPRS_NONE)
328 break;
329 if (new_state->availability == NM_AVSTATE_DEPENDENCY) {
330 abis_nm_ipaccess_set_attr(bts, obj_class, bts->bts_nr,
331 0, 0xff, nanobts_attr_cell,
332 sizeof(nanobts_attr_cell));
333 abis_nm_opstart(bts, obj_class, bts->bts_nr,
334 0, 0xff);
335 abis_nm_chg_adm_state(bts, obj_class, bts->bts_nr,
336 0, 0xff, NM_STATE_UNLOCKED);
337 abis_nm_chg_adm_state(bts, NM_OC_GPRS_NSE, bts->bts_nr,
338 0xff, 0xff, NM_STATE_UNLOCKED);
339 }
340 break;
341 case NM_OC_GPRS_NSVC:
342 nsvc = obj;
343 bts = nsvc->bts;
344 if (bts->gprs.mode == BTS_GPRS_NONE)
345 break;
346 /* We skip NSVC1 since we only use NSVC0 */
347 if (nsvc->id == 1)
348 break;
349 if (new_state->availability == NM_AVSTATE_OFF_LINE) {
350 abis_nm_ipaccess_set_attr(bts, obj_class, bts->bts_nr,
351 nsvc->id, 0xff,
352 nanobts_attr_nsvc0,
353 sizeof(nanobts_attr_nsvc0));
354 abis_nm_opstart(bts, obj_class, bts->bts_nr,
355 nsvc->id, 0xff);
356 abis_nm_chg_adm_state(bts, obj_class, bts->bts_nr,
357 nsvc->id, 0xff,
358 NM_STATE_UNLOCKED);
359 }
360 default:
361 break;
362 }
363 return 0;
364}
365
366/* Callback function to be called every time we receive a 12.21 SW activated report */
367static int sw_activ_rep(struct msgb *mb)
368{
369 struct abis_om_fom_hdr *foh = msgb_l3(mb);
370 struct gsm_bts *bts = mb->trx->bts;
371 struct gsm_bts_trx *trx = gsm_bts_trx_num(bts, foh->obj_inst.trx_nr);
372
373 if (!trx)
374 return -EINVAL;
375
376 if (trx->bts->type != GSM_BTS_TYPE_NANOBTS)
377 return 0;
378
379 switch (foh->obj_class) {
380 case NM_OC_BASEB_TRANSC:
381 abis_nm_chg_adm_state(trx->bts, foh->obj_class,
382 trx->bts->bts_nr, trx->nr, 0xff,
383 NM_STATE_UNLOCKED);
384 abis_nm_opstart(trx->bts, foh->obj_class,
385 trx->bts->bts_nr, trx->nr, 0xff);
386 /* TRX software is active, tell it to initiate RSL Link */
387 abis_nm_ipaccess_rsl_connect(trx, 0, 3003, trx->rsl_tei);
388 break;
389 case NM_OC_RADIO_CARRIER: {
390 /*
391 * Locking the radio carrier will make it go
392 * offline again and we would come here. The
393 * framework should determine that there was
394 * no change and avoid recursion.
395 *
396 * This code is here to make sure that on start
397 * a TRX remains locked.
398 */
399 int rc_state = trx->nm_state.administrative;
400 /* Patch ARFCN into radio attribute */
401 nanobts_attr_radio[5] &= 0xf0;
402 nanobts_attr_radio[5] |= trx->arfcn >> 8;
403 nanobts_attr_radio[6] = trx->arfcn & 0xff;
404 abis_nm_set_radio_attr(trx, nanobts_attr_radio,
405 sizeof(nanobts_attr_radio));
406 abis_nm_chg_adm_state(trx->bts, foh->obj_class,
407 trx->bts->bts_nr, trx->nr, 0xff,
408 rc_state);
409 abis_nm_opstart(trx->bts, foh->obj_class, trx->bts->bts_nr,
410 trx->nr, 0xff);
411 break;
412 }
413 }
414 return 0;
415}
416
417/* Callback function to be called every time we receive a signal from NM */
418static int nm_sig_cb(unsigned int subsys, unsigned int signal,
419 void *handler_data, void *signal_data)
420{
421 if (subsys != SS_NM)
422 return 0;
423
424 switch (signal) {
425 case S_NM_SW_ACTIV_REP:
426 return sw_activ_rep(signal_data);
427 case S_NM_STATECHG_OPER:
428 case S_NM_STATECHG_ADM:
429 return nm_statechg_event(signal, signal_data);
430 default:
431 break;
432 }
433 return 0;
434}
435
Harald Welte39315c42010-01-10 18:01:52 +0100436int bts_model_nanobts_init(void)
437{
Holger Hans Peter Freytherc8bf3c12010-06-21 18:11:37 +0800438 model_nanobts.features.data = &model_nanobts._features_data[0];
Harald Weltef3d8e922010-06-14 22:44:42 +0200439 model_nanobts.features.data_len = sizeof(model_nanobts._features_data);
440
441 gsm_btsmodel_set_feature(&model_nanobts, BTS_FEAT_GPRS);
442 gsm_btsmodel_set_feature(&model_nanobts, BTS_FEAT_EGPRS);
443
Harald Weltef338a032011-01-14 15:55:42 +0100444 register_signal_handler(SS_NM, nm_sig_cb, NULL);
445
Harald Welte39315c42010-01-10 18:01:52 +0100446 return gsm_bts_model_register(&model_nanobts);
447}