blob: 6c7b2bd57bd68a748ac54a4c1355a59806f891cf [file] [log] [blame]
Harald Welte39315c42010-01-10 18:01:52 +01001/* ip.access nanoBTS specific code */
2
3/* (C) 2009-2010 by Harald Welte <laforge@gnumonks.org>
4 *
5 * All Rights Reserved
6 *
7 * This program is free software; you can redistribute it and/or modify
Harald Welte9af6ddf2011-01-01 15:25:50 +01008 * it under the terms of the GNU Affero General Public License as published by
9 * the Free Software Foundation; either version 3 of the License, or
Harald Welte39315c42010-01-10 18:01:52 +010010 * (at your option) any later version.
11 *
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
Harald Welte9af6ddf2011-01-01 15:25:50 +010015 * GNU Affero General Public License for more details.
Harald Welte39315c42010-01-10 18:01:52 +010016 *
Harald Welte9af6ddf2011-01-01 15:25:50 +010017 * You should have received a copy of the GNU Affero General Public License
18 * along with this program. If not, see <http://www.gnu.org/licenses/>.
Harald Welte39315c42010-01-10 18:01:52 +010019 *
20 */
21
22#include <sys/types.h>
Harald Weltef338a032011-01-14 15:55:42 +010023#include <arpa/inet.h>
24
25#include <osmocore/tlv.h>
Harald Welte39315c42010-01-10 18:01:52 +010026
27#include <openbsc/gsm_data.h>
Harald Weltef338a032011-01-14 15:55:42 +010028#include <openbsc/signal.h>
Harald Welte39315c42010-01-10 18:01:52 +010029#include <openbsc/abis_nm.h>
30
31static struct gsm_bts_model model_nanobts = {
32 .type = GSM_BTS_TYPE_NANOBTS,
33 .nm_att_tlvdef = {
34 .def = {
35 /* ip.access specifics */
36 [NM_ATT_IPACC_DST_IP] = { TLV_TYPE_FIXED, 4 },
37 [NM_ATT_IPACC_DST_IP_PORT] = { TLV_TYPE_FIXED, 2 },
38 [NM_ATT_IPACC_STREAM_ID] = { TLV_TYPE_TV, },
Harald Welte39315c42010-01-10 18:01:52 +010039 [NM_ATT_IPACC_SEC_OML_CFG] = { TLV_TYPE_FIXED, 6 },
40 [NM_ATT_IPACC_IP_IF_CFG] = { TLV_TYPE_FIXED, 8 },
41 [NM_ATT_IPACC_IP_GW_CFG] = { TLV_TYPE_FIXED, 12 },
42 [NM_ATT_IPACC_IN_SERV_TIME] = { TLV_TYPE_FIXED, 4 },
43 [NM_ATT_IPACC_LOCATION] = { TLV_TYPE_TL16V },
44 [NM_ATT_IPACC_PAGING_CFG] = { TLV_TYPE_FIXED, 2 },
45 [NM_ATT_IPACC_UNIT_ID] = { TLV_TYPE_TL16V },
46 [NM_ATT_IPACC_UNIT_NAME] = { TLV_TYPE_TL16V },
47 [NM_ATT_IPACC_SNMP_CFG] = { TLV_TYPE_TL16V },
48 [NM_ATT_IPACC_PRIM_OML_CFG_LIST] = { TLV_TYPE_TL16V },
49 [NM_ATT_IPACC_NV_FLAGS] = { TLV_TYPE_TL16V },
50 [NM_ATT_IPACC_FREQ_CTRL] = { TLV_TYPE_FIXED, 2 },
51 [NM_ATT_IPACC_PRIM_OML_FB_TOUT] = { TLV_TYPE_TL16V },
52 [NM_ATT_IPACC_CUR_SW_CFG] = { TLV_TYPE_TL16V },
53 [NM_ATT_IPACC_TIMING_BUS] = { TLV_TYPE_TL16V },
54 [NM_ATT_IPACC_CGI] = { TLV_TYPE_TL16V },
55 [NM_ATT_IPACC_RAC] = { TLV_TYPE_TL16V },
56 [NM_ATT_IPACC_OBJ_VERSION] = { TLV_TYPE_TL16V },
57 [NM_ATT_IPACC_GPRS_PAGING_CFG]= { TLV_TYPE_TL16V },
58 [NM_ATT_IPACC_NSEI] = { TLV_TYPE_TL16V },
59 [NM_ATT_IPACC_BVCI] = { TLV_TYPE_TL16V },
60 [NM_ATT_IPACC_NSVCI] = { TLV_TYPE_TL16V },
61 [NM_ATT_IPACC_NS_CFG] = { TLV_TYPE_TL16V },
62 [NM_ATT_IPACC_BSSGP_CFG] = { TLV_TYPE_TL16V },
63 [NM_ATT_IPACC_NS_LINK_CFG] = { TLV_TYPE_TL16V },
64 [NM_ATT_IPACC_RLC_CFG] = { TLV_TYPE_TL16V },
65 [NM_ATT_IPACC_ALM_THRESH_LIST]= { TLV_TYPE_TL16V },
66 [NM_ATT_IPACC_MONIT_VAL_LIST] = { TLV_TYPE_TL16V },
67 [NM_ATT_IPACC_TIB_CONTROL] = { TLV_TYPE_TL16V },
68 [NM_ATT_IPACC_SUPP_FEATURES] = { TLV_TYPE_TL16V },
69 [NM_ATT_IPACC_CODING_SCHEMES] = { TLV_TYPE_TL16V },
70 [NM_ATT_IPACC_RLC_CFG_2] = { TLV_TYPE_TL16V },
71 [NM_ATT_IPACC_HEARTB_TOUT] = { TLV_TYPE_TL16V },
72 [NM_ATT_IPACC_UPTIME] = { TLV_TYPE_TL16V },
73 [NM_ATT_IPACC_RLC_CFG_3] = { TLV_TYPE_TL16V },
74 [NM_ATT_IPACC_SSL_CFG] = { TLV_TYPE_TL16V },
75 [NM_ATT_IPACC_SEC_POSSIBLE] = { TLV_TYPE_TL16V },
76 [NM_ATT_IPACC_IML_SSL_STATE] = { TLV_TYPE_TL16V },
77 [NM_ATT_IPACC_REVOC_DATE] = { TLV_TYPE_TL16V },
78 },
79 },
80};
81
Harald Weltef338a032011-01-14 15:55:42 +010082static unsigned char nanobts_attr_bts[] = {
83 NM_ATT_INTERF_BOUND, 0x55, 0x5b, 0x61, 0x67, 0x6d, 0x73,
84 /* interference avg. period in numbers of SACCH multifr */
85 NM_ATT_INTAVE_PARAM, 0x06,
86 /* conn fail based on SACCH error rate */
87 NM_ATT_CONN_FAIL_CRIT, 0x00, 0x02, 0x01, 0x10,
88 NM_ATT_T200, 0x1e, 0x24, 0x24, 0xa8, 0x34, 0x21, 0xa8,
89 NM_ATT_MAX_TA, 0x3f,
90 NM_ATT_OVERL_PERIOD, 0x00, 0x01, 10, /* seconds */
91 NM_ATT_CCCH_L_T, 10, /* percent */
92 NM_ATT_CCCH_L_I_P, 1, /* seconds */
93 NM_ATT_RACH_B_THRESH, 10, /* busy threshold in - dBm */
94 NM_ATT_LDAVG_SLOTS, 0x03, 0xe8, /* rach load averaging 1000 slots */
95 NM_ATT_BTS_AIR_TIMER, 128, /* miliseconds */
96 NM_ATT_NY1, 10, /* 10 retransmissions of physical config */
97 NM_ATT_BCCH_ARFCN, HARDCODED_ARFCN >> 8, HARDCODED_ARFCN & 0xff,
98 NM_ATT_BSIC, HARDCODED_BSIC,
99 NM_ATT_IPACC_CGI, 0, 7, 0x00, 0xf1, 0x10, 0x00, 0x01, 0x00, 0x00,
100};
101
102static unsigned char nanobts_attr_radio[] = {
103 NM_ATT_RF_MAXPOWR_R, 0x0c, /* number of -2dB reduction steps / Pn */
104 NM_ATT_ARFCN_LIST, 0x00, 0x02, HARDCODED_ARFCN >> 8, HARDCODED_ARFCN & 0xff,
105};
106
107static unsigned char nanobts_attr_nse[] = {
108 NM_ATT_IPACC_NSEI, 0, 2, 0x03, 0x9d, /* NSEI 925 */
109 NM_ATT_IPACC_NS_CFG, 0, 7, 3, /* (un)blocking timer (Tns-block) */
110 3, /* (un)blocking retries */
111 3, /* reset timer (Tns-reset) */
112 3, /* reset retries */
113 30, /* test timer (Tns-test) */
114 3, /* alive timer (Tns-alive) */
115 10, /* alive retrires */
116 NM_ATT_IPACC_BSSGP_CFG, 0, 11,
117 3, /* blockimg timer (T1) */
118 3, /* blocking retries */
119 3, /* unblocking retries */
120 3, /* reset timer */
121 3, /* reset retries */
122 10, /* suspend timer (T3) in 100ms */
123 3, /* suspend retries */
124 10, /* resume timer (T4) in 100ms */
125 3, /* resume retries */
126 10, /* capability update timer (T5) */
127 3, /* capability update retries */
128};
129
130static unsigned char nanobts_attr_cell[] = {
131 NM_ATT_IPACC_RAC, 0, 1, 1, /* routing area code */
132 NM_ATT_IPACC_GPRS_PAGING_CFG, 0, 2,
133 5, /* repeat time (50ms) */
134 3, /* repeat count */
135 NM_ATT_IPACC_BVCI, 0, 2, 0x03, 0x9d, /* BVCI 925 */
136 NM_ATT_IPACC_RLC_CFG, 0, 9,
137 20, /* T3142 */
138 5, /* T3169 */
139 5, /* T3191 */
140 200, /* T3193 */
141 5, /* T3195 */
142 10, /* N3101 */
143 4, /* N3103 */
144 8, /* N3105 */
145 15, /* RLC CV countdown */
146 NM_ATT_IPACC_CODING_SCHEMES, 0, 2, 0x0f, 0x00, /* CS1..CS4 */
147 NM_ATT_IPACC_RLC_CFG_2, 0, 5,
148 0x00, 250, /* T downlink TBF extension (0..500) */
149 0x00, 250, /* T uplink TBF extension (0..500) */
150 2, /* CS2 */
151#if 0
152 /* EDGE model only, breaks older models.
153 * Should inquire the BTS capabilities */
154 NM_ATT_IPACC_RLC_CFG_3, 0, 1,
155 2, /* MCS2 */
156#endif
157};
158
159static unsigned char nanobts_attr_nsvc0[] = {
160 NM_ATT_IPACC_NSVCI, 0, 2, 0x03, 0x9d, /* 925 */
161 NM_ATT_IPACC_NS_LINK_CFG, 0, 8,
162 0x59, 0xd8, /* remote udp port (23000) */
163 192, 168, 100, 11, /* remote ip address */
164 0x59, 0xd8, /* local udp port (23000) */
165};
166
167static void patch_16(uint8_t *data, const uint16_t val)
168{
169 memcpy(data, &val, sizeof(val));
170}
171
172static void patch_32(uint8_t *data, const uint32_t val)
173{
174 memcpy(data, &val, sizeof(val));
175}
176
177/*
178 * Patch the various SYSTEM INFORMATION tables to update
179 * the LAI
180 */
181static void patch_nm_tables(struct gsm_bts *bts)
182{
183 u_int8_t arfcn_low = bts->c0->arfcn & 0xff;
184 u_int8_t arfcn_high = (bts->c0->arfcn >> 8) & 0x0f;
185
186 /* patch ARFCN into BTS Attributes */
187 nanobts_attr_bts[42] &= 0xf0;
188 nanobts_attr_bts[42] |= arfcn_high;
189 nanobts_attr_bts[43] = arfcn_low;
190
191 /* patch the RACH attributes */
192 if (bts->rach_b_thresh != -1) {
193 nanobts_attr_bts[33] = bts->rach_b_thresh & 0xff;
194 }
195
196 if (bts->rach_ldavg_slots != -1) {
197 u_int8_t avg_high = bts->rach_ldavg_slots & 0xff;
198 u_int8_t avg_low = (bts->rach_ldavg_slots >> 8) & 0x0f;
199
200 nanobts_attr_bts[35] = avg_high;
201 nanobts_attr_bts[36] = avg_low;
202 }
203
204 /* patch BSIC */
205 nanobts_attr_bts[sizeof(nanobts_attr_bts)-11] = bts->bsic;
206
207 /* patch CGI */
208 abis_nm_ipaccess_cgi(nanobts_attr_bts+sizeof(nanobts_attr_bts)-7, bts);
209
210 /* patch the power reduction */
211 nanobts_attr_radio[1] = bts->c0->max_power_red / 2;
212
213 /* patch NSEI */
214 nanobts_attr_nse[3] = bts->gprs.nse.nsei >> 8;
215 nanobts_attr_nse[4] = bts->gprs.nse.nsei & 0xff;
216 memcpy(nanobts_attr_nse+8, bts->gprs.nse.timer,
217 ARRAY_SIZE(bts->gprs.nse.timer));
218 memcpy(nanobts_attr_nse+18, bts->gprs.cell.timer,
219 ARRAY_SIZE(bts->gprs.cell.timer));
220
221 /* patch NSVCI */
222 nanobts_attr_nsvc0[3] = bts->gprs.nsvc[0].nsvci >> 8;
223 nanobts_attr_nsvc0[4] = bts->gprs.nsvc[0].nsvci & 0xff;
224
225 /* patch IP address as SGSN IP */
226 patch_16(nanobts_attr_nsvc0 + 8,
227 htons(bts->gprs.nsvc[0].remote_port));
228 patch_32(nanobts_attr_nsvc0 + 10,
229 htonl(bts->gprs.nsvc[0].remote_ip));
230 patch_16(nanobts_attr_nsvc0 + 14,
231 htons(bts->gprs.nsvc[0].local_port));
232
233 /* patch BVCI */
234 nanobts_attr_cell[12] = bts->gprs.cell.bvci >> 8;
235 nanobts_attr_cell[13] = bts->gprs.cell.bvci & 0xff;
236 /* patch RAC */
237 nanobts_attr_cell[3] = bts->gprs.rac;
238
239 if (bts->gprs.mode == BTS_GPRS_EGPRS) {
240 /* patch EGPRS coding schemes MCS 1..9 */
241 nanobts_attr_cell[29] = 0x8f;
242 nanobts_attr_cell[30] = 0xff;
243 }
244}
245
246
247/* Callback function to be called whenever we get a GSM 12.21 state change event */
248static int nm_statechg_event(int evt, struct nm_statechg_signal_data *nsd)
249{
250 u_int8_t obj_class = nsd->obj_class;
251 void *obj = nsd->obj;
252 struct gsm_nm_state *new_state = nsd->new_state;
253
254 struct gsm_bts *bts;
255 struct gsm_bts_trx *trx;
256 struct gsm_bts_trx_ts *ts;
257 struct gsm_bts_gprs_nsvc *nsvc;
258
259 /* This event-driven BTS setup is currently only required on nanoBTS */
260
261 /* S_NM_STATECHG_ADM is called after we call chg_adm_state() and would create
262 * endless loop */
263 if (evt != S_NM_STATECHG_OPER)
264 return 0;
265
266 switch (obj_class) {
267 case NM_OC_SITE_MANAGER:
268 bts = container_of(obj, struct gsm_bts, site_mgr);
269 if ((new_state->operational == NM_OPSTATE_ENABLED &&
270 new_state->availability == NM_AVSTATE_OK) ||
271 (new_state->operational == NM_OPSTATE_DISABLED &&
272 new_state->availability == NM_AVSTATE_OFF_LINE))
273 abis_nm_opstart(bts, obj_class, 0xff, 0xff, 0xff);
274 break;
275 case NM_OC_BTS:
276 bts = obj;
277 if (new_state->availability == NM_AVSTATE_DEPENDENCY) {
278 patch_nm_tables(bts);
279 abis_nm_set_bts_attr(bts, nanobts_attr_bts,
280 sizeof(nanobts_attr_bts));
281 abis_nm_chg_adm_state(bts, obj_class,
282 bts->bts_nr, 0xff, 0xff,
283 NM_STATE_UNLOCKED);
284 abis_nm_opstart(bts, obj_class,
285 bts->bts_nr, 0xff, 0xff);
286 }
287 break;
288 case NM_OC_CHANNEL:
289 ts = obj;
290 trx = ts->trx;
291 if (new_state->operational == NM_OPSTATE_DISABLED &&
292 new_state->availability == NM_AVSTATE_DEPENDENCY) {
293 patch_nm_tables(trx->bts);
294 enum abis_nm_chan_comb ccomb =
295 abis_nm_chcomb4pchan(ts->pchan);
296 abis_nm_set_channel_attr(ts, ccomb);
297 abis_nm_chg_adm_state(trx->bts, obj_class,
298 trx->bts->bts_nr, trx->nr, ts->nr,
299 NM_STATE_UNLOCKED);
300 abis_nm_opstart(trx->bts, obj_class,
301 trx->bts->bts_nr, trx->nr, ts->nr);
302 }
303 break;
304 case NM_OC_RADIO_CARRIER:
305 trx = obj;
306 if (new_state->operational == NM_OPSTATE_DISABLED &&
307 new_state->availability == NM_AVSTATE_OK)
308 abis_nm_opstart(trx->bts, obj_class, trx->bts->bts_nr,
309 trx->nr, 0xff);
310 break;
311 case NM_OC_GPRS_NSE:
312 bts = container_of(obj, struct gsm_bts, gprs.nse);
313 if (bts->gprs.mode == BTS_GPRS_NONE)
314 break;
315 if (new_state->availability == NM_AVSTATE_DEPENDENCY) {
316 abis_nm_ipaccess_set_attr(bts, obj_class, bts->bts_nr,
317 0xff, 0xff, nanobts_attr_nse,
318 sizeof(nanobts_attr_nse));
319 abis_nm_opstart(bts, obj_class, bts->bts_nr,
320 0xff, 0xff);
321 }
322 break;
323 case NM_OC_GPRS_CELL:
324 bts = container_of(obj, struct gsm_bts, gprs.cell);
325 if (bts->gprs.mode == BTS_GPRS_NONE)
326 break;
327 if (new_state->availability == NM_AVSTATE_DEPENDENCY) {
328 abis_nm_ipaccess_set_attr(bts, obj_class, bts->bts_nr,
329 0, 0xff, nanobts_attr_cell,
330 sizeof(nanobts_attr_cell));
331 abis_nm_opstart(bts, obj_class, bts->bts_nr,
332 0, 0xff);
333 abis_nm_chg_adm_state(bts, obj_class, bts->bts_nr,
334 0, 0xff, NM_STATE_UNLOCKED);
335 abis_nm_chg_adm_state(bts, NM_OC_GPRS_NSE, bts->bts_nr,
336 0xff, 0xff, NM_STATE_UNLOCKED);
337 }
338 break;
339 case NM_OC_GPRS_NSVC:
340 nsvc = obj;
341 bts = nsvc->bts;
342 if (bts->gprs.mode == BTS_GPRS_NONE)
343 break;
344 /* We skip NSVC1 since we only use NSVC0 */
345 if (nsvc->id == 1)
346 break;
347 if (new_state->availability == NM_AVSTATE_OFF_LINE) {
348 abis_nm_ipaccess_set_attr(bts, obj_class, bts->bts_nr,
349 nsvc->id, 0xff,
350 nanobts_attr_nsvc0,
351 sizeof(nanobts_attr_nsvc0));
352 abis_nm_opstart(bts, obj_class, bts->bts_nr,
353 nsvc->id, 0xff);
354 abis_nm_chg_adm_state(bts, obj_class, bts->bts_nr,
355 nsvc->id, 0xff,
356 NM_STATE_UNLOCKED);
357 }
358 default:
359 break;
360 }
361 return 0;
362}
363
364/* Callback function to be called every time we receive a 12.21 SW activated report */
365static int sw_activ_rep(struct msgb *mb)
366{
367 struct abis_om_fom_hdr *foh = msgb_l3(mb);
368 struct gsm_bts *bts = mb->trx->bts;
369 struct gsm_bts_trx *trx = gsm_bts_trx_num(bts, foh->obj_inst.trx_nr);
370
371 if (!trx)
372 return -EINVAL;
373
374 if (trx->bts->type != GSM_BTS_TYPE_NANOBTS)
375 return 0;
376
377 switch (foh->obj_class) {
378 case NM_OC_BASEB_TRANSC:
379 abis_nm_chg_adm_state(trx->bts, foh->obj_class,
380 trx->bts->bts_nr, trx->nr, 0xff,
381 NM_STATE_UNLOCKED);
382 abis_nm_opstart(trx->bts, foh->obj_class,
383 trx->bts->bts_nr, trx->nr, 0xff);
384 /* TRX software is active, tell it to initiate RSL Link */
385 abis_nm_ipaccess_rsl_connect(trx, 0, 3003, trx->rsl_tei);
386 break;
387 case NM_OC_RADIO_CARRIER: {
388 /*
389 * Locking the radio carrier will make it go
390 * offline again and we would come here. The
391 * framework should determine that there was
392 * no change and avoid recursion.
393 *
394 * This code is here to make sure that on start
395 * a TRX remains locked.
396 */
397 int rc_state = trx->nm_state.administrative;
398 /* Patch ARFCN into radio attribute */
399 nanobts_attr_radio[5] &= 0xf0;
400 nanobts_attr_radio[5] |= trx->arfcn >> 8;
401 nanobts_attr_radio[6] = trx->arfcn & 0xff;
402 abis_nm_set_radio_attr(trx, nanobts_attr_radio,
403 sizeof(nanobts_attr_radio));
404 abis_nm_chg_adm_state(trx->bts, foh->obj_class,
405 trx->bts->bts_nr, trx->nr, 0xff,
406 rc_state);
407 abis_nm_opstart(trx->bts, foh->obj_class, trx->bts->bts_nr,
408 trx->nr, 0xff);
409 break;
410 }
411 }
412 return 0;
413}
414
415/* Callback function to be called every time we receive a signal from NM */
416static int nm_sig_cb(unsigned int subsys, unsigned int signal,
417 void *handler_data, void *signal_data)
418{
419 if (subsys != SS_NM)
420 return 0;
421
422 switch (signal) {
423 case S_NM_SW_ACTIV_REP:
424 return sw_activ_rep(signal_data);
425 case S_NM_STATECHG_OPER:
426 case S_NM_STATECHG_ADM:
427 return nm_statechg_event(signal, signal_data);
428 default:
429 break;
430 }
431 return 0;
432}
433
Harald Welte39315c42010-01-10 18:01:52 +0100434int bts_model_nanobts_init(void)
435{
Holger Hans Peter Freytherc8bf3c12010-06-21 18:11:37 +0800436 model_nanobts.features.data = &model_nanobts._features_data[0];
Harald Weltef3d8e922010-06-14 22:44:42 +0200437 model_nanobts.features.data_len = sizeof(model_nanobts._features_data);
438
439 gsm_btsmodel_set_feature(&model_nanobts, BTS_FEAT_GPRS);
440 gsm_btsmodel_set_feature(&model_nanobts, BTS_FEAT_EGPRS);
441
Harald Weltef338a032011-01-14 15:55:42 +0100442 register_signal_handler(SS_NM, nm_sig_cb, NULL);
443
Harald Welte39315c42010-01-10 18:01:52 +0100444 return gsm_bts_model_register(&model_nanobts);
445}