Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 1 | module BSC_ConnectionHandler { |
| 2 | |
| 3 | import from General_Types all; |
| 4 | import from Osmocom_Types all; |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 5 | import from Native_Functions all; |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 6 | import from GSM_Types all; |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 7 | import from IPL4asp_Types all; |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 8 | import from SCCPasp_Types all; |
| 9 | import from BSSAP_Types all; |
| 10 | import from BSSMAP_Emulation all; |
| 11 | import from BSSMAP_Templates all; |
| 12 | |
| 13 | import from GSUP_Types all; |
| 14 | import from GSUP_Emulation all; |
| 15 | |
| 16 | import from MNCC_Types all; |
| 17 | import from MNCC_Emulation all; |
| 18 | |
Harald Welte | 4aa970c | 2018-01-26 10:38:09 +0100 | [diff] [blame] | 19 | import from MGCP_Types all; |
| 20 | import from MGCP_Emulation all; |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 21 | import from MGCP_Templates all; |
| 22 | import from SDP_Types all; |
Harald Welte | 4aa970c | 2018-01-26 10:38:09 +0100 | [diff] [blame] | 23 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 24 | import from MobileL3_Types all; |
| 25 | import from MobileL3_CommonIE_Types all; |
| 26 | import from MobileL3_MM_Types all; |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 27 | import from MobileL3_CC_Types all; |
Harald Welte | f45efeb | 2018-04-09 18:19:24 +0200 | [diff] [blame] | 28 | import from MobileL3_SMS_Types all; |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 29 | import from L3_Templates all; |
Harald Welte | 158a7ca | 2018-02-16 18:11:31 +0100 | [diff] [blame] | 30 | import from L3_Common all; |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 31 | |
Harald Welte | f640a01 | 2018-04-14 17:49:21 +0200 | [diff] [blame] | 32 | import from SMPP_Emulation all; |
| 33 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 34 | /* this component represents a single subscriber connection */ |
Harald Welte | f640a01 | 2018-04-14 17:49:21 +0200 | [diff] [blame] | 35 | type component BSC_ConnHdlr extends BSSAP_ConnHdlr, MNCC_ConnHdlr, GSUP_ConnHdlr, MGCP_ConnHdlr, SMPP_ConnHdlr { |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 36 | var BSC_ConnHdlrPars g_pars; |
Harald Welte | a10db90 | 2018-01-27 12:44:49 +0100 | [diff] [blame] | 37 | timer g_Tguard := 60.0; |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 38 | } |
| 39 | |
Harald Welte | de37149 | 2018-01-27 23:44:41 +0100 | [diff] [blame] | 40 | type record BSC_ConnHdlrNetworkPars { |
| 41 | OCT1 kc_support, |
| 42 | boolean expect_tmsi, |
| 43 | boolean expect_auth, |
| 44 | boolean expect_ciph |
| 45 | } |
| 46 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 47 | type record BSC_ConnHdlrPars { |
| 48 | SCCP_PAR_Address sccp_addr_own, |
| 49 | SCCP_PAR_Address sccp_addr_peer, |
| 50 | BSSMAP_IE_CellIdentifier cell_id, |
Harald Welte | 256571e | 2018-01-24 18:47:19 +0100 | [diff] [blame] | 51 | hexstring imei, |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 52 | hexstring imsi, |
Harald Welte | 8260057 | 2018-01-21 20:54:08 +0100 | [diff] [blame] | 53 | hexstring msisdn, |
Harald Welte | 256571e | 2018-01-24 18:47:19 +0100 | [diff] [blame] | 54 | OCT4 tmsi optional, |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 55 | MobileStationClassmark1_V cm1, |
Harald Welte | 8260057 | 2018-01-21 20:54:08 +0100 | [diff] [blame] | 56 | BSSMAP_IE_ClassmarkInformationType2 cm2, |
Harald Welte | 1611428 | 2018-01-24 22:41:21 +0100 | [diff] [blame] | 57 | BSSMAP_IE_ClassmarkInformationType3 cm3 optional, |
Harald Welte | de37149 | 2018-01-27 23:44:41 +0100 | [diff] [blame] | 58 | AuthVector vec optional, |
Neels Hofmeyr | c1f105a | 2018-03-01 20:00:19 +0100 | [diff] [blame] | 59 | BSC_ConnHdlrNetworkPars net, |
| 60 | boolean send_early_cm |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 61 | }; |
| 62 | |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 63 | /* get a one-octet bitmaks of supported algorithms based on Classmark information */ |
| 64 | function f_alg_mask_from_cm(BSSMAP_IE_ClassmarkInformationType2 cm2) return OCT1 { |
| 65 | var BIT8 res := '00000001'B; /* A5/0 always supported */ |
| 66 | |
| 67 | if (cm2.a5_1 == '0'B) { |
| 68 | res := res or4b '00000010'B; |
| 69 | } |
| 70 | if (cm2.classmarkInformationType2_oct5.a5_2 == '1'B ) { |
| 71 | res := res or4b '00000100'B; |
| 72 | } |
| 73 | if (cm2.classmarkInformationType2_oct5.a5_3 == '1'B) { |
| 74 | res := res or4b '00001000'B; |
| 75 | } |
| 76 | /* TODO: CM3 for A5/4 and beyond */ |
| 77 | return bit2oct(res); |
| 78 | } |
| 79 | |
| 80 | /* determine the best algorithm available within the bit-mask */ |
| 81 | function f_best_alg_from_mask(OCT1 alg_in) return OCT1 { |
| 82 | var BIT8 alg := oct2bit(alg_in); |
| 83 | var BIT8 ordered_algs[8] := { |
| 84 | '10000000'B, '01000000'B, '00100000'B, '00010000'B, |
| 85 | '00001000'B, /* A5/3 */ |
| 86 | '00000010'B, /* A5/1 */ |
| 87 | '00000100'B, /* A5/2 */ |
| 88 | '00000001'B /* A5/0 */ } |
| 89 | for (var integer i := 0; i < sizeof(ordered_algs); i := i+1) { |
| 90 | if (alg and4b ordered_algs[i] != '00000000'B) { |
| 91 | return bit2oct(ordered_algs[i]); |
| 92 | } |
| 93 | } |
| 94 | return '00'O; |
| 95 | } |
| 96 | |
| 97 | /* return an integer like '1' for A5/1 based on a mask (with only one bit set */ |
| 98 | function f_alg_from_mask(OCT1 mask_in) return integer { |
| 99 | var BIT8 mask := oct2bit(mask_in); |
| 100 | for (var integer i := 0; i < 8; i := i+1) { |
| 101 | if (mask and4b ('00000001'B << i) != '00000000'B) { |
| 102 | return i; |
| 103 | } |
| 104 | } |
| 105 | return -1; |
| 106 | } |
| 107 | |
Harald Welte | a10db90 | 2018-01-27 12:44:49 +0100 | [diff] [blame] | 108 | /* altstep for the global guard timer */ |
| 109 | private altstep as_Tguard() runs on BSC_ConnHdlr { |
| 110 | [] g_Tguard.timeout { |
Daniel Willmann | 90829d6 | 2018-02-15 17:45:14 +0100 | [diff] [blame] | 111 | setverdict(fail, "Tguard timeout"); |
Harald Welte | a10db90 | 2018-01-27 12:44:49 +0100 | [diff] [blame] | 112 | self.stop; |
| 113 | } |
| 114 | } |
| 115 | |
| 116 | /* init function, called as first function in new BSC_ConnHdlr */ |
Harald Welte | ad2952e | 2018-01-27 14:12:46 +0100 | [diff] [blame] | 117 | function f_init_handler(BSC_ConnHdlrPars pars, float t_guard := 60.0) runs on BSC_ConnHdlr { |
Harald Welte | a10db90 | 2018-01-27 12:44:49 +0100 | [diff] [blame] | 118 | /* make parameters available via component variable */ |
| 119 | g_pars := pars; |
| 120 | /* Start guard timer and activate it as default */ |
Harald Welte | ad2952e | 2018-01-27 14:12:46 +0100 | [diff] [blame] | 121 | g_Tguard.start(t_guard); |
Harald Welte | a10db90 | 2018-01-27 12:44:49 +0100 | [diff] [blame] | 122 | activate(as_Tguard()); |
Harald Welte | f640a01 | 2018-04-14 17:49:21 +0200 | [diff] [blame] | 123 | /* Route all SMPP messages for our MSISDN to us */ |
| 124 | f_create_smpp_expect(hex2str(pars.msisdn)); |
Harald Welte | a10db90 | 2018-01-27 12:44:49 +0100 | [diff] [blame] | 125 | } |
| 126 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 127 | |
| 128 | /* Callback function from general BSSMAP_Emulation whenever a connectionless |
| 129 | * BSSMAP message arrives. Canreturn a PDU_BSSAPthat should be sent in return */ |
| 130 | private function BscUnitdataCallback(PDU_BSSAP bssap) |
| 131 | runs on BSSMAP_Emulation_CT return template PDU_BSSAP { |
| 132 | var template PDU_BSSAP resp := omit; |
| 133 | |
| 134 | log("BSSMAP_BscUnitdataCallback"); |
| 135 | /* answer all RESET with RESET ACK */ |
| 136 | if (match(bssap, tr_BSSMAP_Reset)){ |
| 137 | log("BSSMAP_BscUnitdataCallback: Responding to RESET with RESET-ACK"); |
| 138 | resp := ts_BSSMAP_ResetAck; |
| 139 | } |
| 140 | |
| 141 | /* FIXME: Handle paging, etc. */ |
| 142 | return resp; |
| 143 | } |
| 144 | |
| 145 | const BssmapOps BSC_BssmapOps := { |
| 146 | /* Create call-back for inbound connections from MSC (hand-over) */ |
| 147 | create_cb := refers(BSSMAP_Emulation.ExpectedCreateCallback), |
| 148 | unitdata_cb := refers(BscUnitdataCallback), |
| 149 | decode_dtap := true, |
Harald Welte | a4ca446 | 2018-02-09 00:17:14 +0100 | [diff] [blame] | 150 | role_ms := true, |
| 151 | sccp_addr_local := omit, |
| 152 | sccp_addr_peer := omit |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 153 | } |
| 154 | |
| 155 | |
| 156 | private function MnccUnitdataCallback(MNCC_PDU mncc) |
| 157 | runs on MNCC_Emulation_CT return template MNCC_PDU { |
| 158 | log("Ignoring MNCC", mncc); |
| 159 | return omit; |
| 160 | } |
| 161 | |
| 162 | const MnccOps BCC_MnccOps := { |
| 163 | create_cb := refers(MNCC_Emulation.ExpectedCreateCallback), |
| 164 | unitdata_cb := refers(MnccUnitdataCallback) |
| 165 | } |
| 166 | |
| 167 | |
| 168 | |
| 169 | template BSSAP_Conn_Req ts_BSSAP_Conn_Req(SCCP_PAR_Address peer, SCCP_PAR_Address own, PDU_BSSAP bssap) := { |
| 170 | addr_peer := peer, |
| 171 | addr_own := own, |
| 172 | bssap := bssap |
| 173 | }; |
| 174 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 175 | /* Encode 'l3' and ask BSSMAP_Emulation to create new connection with COMPL L3 INFO */ |
| 176 | function f_bssap_compl_l3(PDU_ML3_MS_NW l3) |
| 177 | runs on BSC_ConnHdlr { |
| 178 | log("Sending COMPL L3: ", l3); |
| 179 | var octetstring l3_enc := enc_PDU_ML3_MS_NW(l3); |
| 180 | BSSAP.send(ts_BSSAP_Conn_Req(g_pars.sccp_addr_peer, g_pars.sccp_addr_own, |
| 181 | valueof(ts_BSSMAP_ComplL3(g_pars.cell_id, l3_enc)))); |
Harald Welte | 71b6933 | 2018-01-21 20:43:53 +0100 | [diff] [blame] | 182 | alt { |
| 183 | [] BSSAP.receive(BSSAP_Conn_Prim:MSC_CONN_PRIM_CONF_IND) {} |
| 184 | [] BSSAP.receive(BSSAP_Conn_Prim:MSC_CONN_PRIM_DISC_IND) { |
| 185 | setverdict(fail, "DISC.ind from SCCP"); |
| 186 | self.stop; |
| 187 | } |
| 188 | } |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 189 | } |
| 190 | |
Harald Welte | 081b19a | 2018-02-10 09:11:13 +0100 | [diff] [blame] | 191 | type enumerated EstablishType { |
| 192 | EST_TYPE_MO_CALL, |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 193 | EST_TYPE_EMERG_CALL, |
Harald Welte | f45efeb | 2018-04-09 18:19:24 +0200 | [diff] [blame] | 194 | EST_TYPE_PAG_RESP, |
Vadim Yanitskiy | 20ee5e4 | 2018-05-27 17:54:21 +0700 | [diff] [blame] | 195 | EST_TYPE_MO_SMS, |
| 196 | EST_TYPE_SS_ACT |
Harald Welte | 081b19a | 2018-02-10 09:11:13 +0100 | [diff] [blame] | 197 | }; |
| 198 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 199 | /* helper function to fully establish a dedicated channel */ |
Harald Welte | b9e86fa | 2018-04-09 18:18:31 +0200 | [diff] [blame] | 200 | function f_establish_fully(EstablishType etype := EST_TYPE_MO_CALL) |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 201 | runs on BSC_ConnHdlr { |
Harald Welte | 081b19a | 2018-02-10 09:11:13 +0100 | [diff] [blame] | 202 | var PDU_ML3_MS_NW l3_info; |
Harald Welte | b9e86fa | 2018-04-09 18:18:31 +0200 | [diff] [blame] | 203 | var MobileIdentityLV mi; |
| 204 | |
| 205 | /* If we have a TMSI, use TMSI instead of IMSI */ |
| 206 | if (ispresent(g_pars.tmsi)) { |
| 207 | mi := valueof(ts_MI_TMSI_LV(g_pars.tmsi)); |
| 208 | } else { |
| 209 | mi := valueof(ts_MI_IMSI_LV(g_pars.imsi)); |
| 210 | } |
| 211 | |
Harald Welte | 081b19a | 2018-02-10 09:11:13 +0100 | [diff] [blame] | 212 | select (etype) { |
| 213 | case (EST_TYPE_MO_CALL) { |
| 214 | l3_info := valueof(ts_CM_SERV_REQ(CM_TYPE_MO_CALL, mi)); |
| 215 | } |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 216 | case (EST_TYPE_EMERG_CALL) { |
| 217 | l3_info := valueof(ts_CM_SERV_REQ(CM_TYPE_EMERG_CALL, mi)); |
| 218 | } |
Harald Welte | 081b19a | 2018-02-10 09:11:13 +0100 | [diff] [blame] | 219 | case (EST_TYPE_PAG_RESP) { |
| 220 | l3_info := valueof(ts_PAG_RESP(mi)); |
| 221 | } |
Harald Welte | f45efeb | 2018-04-09 18:19:24 +0200 | [diff] [blame] | 222 | case (EST_TYPE_MO_SMS) { |
| 223 | l3_info := valueof(ts_CM_SERV_REQ(CM_TYPE_MO_SMS, mi)); |
| 224 | } |
Vadim Yanitskiy | 20ee5e4 | 2018-05-27 17:54:21 +0700 | [diff] [blame] | 225 | case (EST_TYPE_SS_ACT) { |
| 226 | l3_info := valueof(ts_CM_SERV_REQ(CM_TYPE_SS_ACT, mi)); |
| 227 | } |
Harald Welte | 081b19a | 2018-02-10 09:11:13 +0100 | [diff] [blame] | 228 | } |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 229 | |
| 230 | /* Send BSSAP_Conn_Req with COMPL L3 INFO to MSC */ |
| 231 | f_bssap_compl_l3(l3_info); |
| 232 | |
Harald Welte | de37149 | 2018-01-27 23:44:41 +0100 | [diff] [blame] | 233 | f_mm_common(); |
| 234 | if (g_pars.net.expect_ciph) { |
Harald Welte | 148a708 | 2018-01-26 18:56:43 +0100 | [diff] [blame] | 235 | /* implicit CM SERVICE ACCEPT? */ |
| 236 | } else { |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 237 | if (etype != EST_TYPE_PAG_RESP) { |
Harald Welte | 081b19a | 2018-02-10 09:11:13 +0100 | [diff] [blame] | 238 | /* explicit CM SERVICE ACCEPT */ |
| 239 | BSSAP.receive(tr_PDU_DTAP_MT(tr_CM_SERV_ACC)); |
| 240 | } |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 241 | } |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 242 | } |
| 243 | |
| 244 | /* build a PDU_ML3_MS_NW containing a Location Update by IMSI */ |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 245 | function f_build_lu_imsi(hexstring imsi) runs on BSC_ConnHdlr return PDU_ML3_MS_NW |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 246 | { |
| 247 | var MobileIdentityLV mi := valueof(ts_MI_IMSI_LV(imsi)); |
| 248 | return f_build_lu(mi); |
| 249 | } |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 250 | function f_build_lu_imei(hexstring imei) runs on BSC_ConnHdlr return PDU_ML3_MS_NW |
Harald Welte | ba7b6d9 | 2018-01-23 21:32:34 +0100 | [diff] [blame] | 251 | { |
| 252 | var MobileIdentityLV mi := valueof(ts_MI_IMEI_LV(imei)); |
| 253 | return f_build_lu(mi); |
| 254 | } |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 255 | function f_build_lu_tmsi(OCT4 tmsi) runs on BSC_ConnHdlr return PDU_ML3_MS_NW |
Harald Welte | ba7b6d9 | 2018-01-23 21:32:34 +0100 | [diff] [blame] | 256 | { |
| 257 | var MobileIdentityLV mi := valueof(ts_MI_TMSI_LV(tmsi)); |
| 258 | return f_build_lu(mi); |
| 259 | } |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 260 | private function f_build_lu(MobileIdentityLV mi) runs on BSC_ConnHdlr return PDU_ML3_MS_NW |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 261 | { |
| 262 | var LocationAreaIdentification_V old_lai := { '62F220'O, '9999'O }; |
| 263 | var PDU_ML3_MS_NW l3_info := valueof(ts_ML3_MO_LU_Req(valueof(ts_ML3_IE_LuType_Attach), |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 264 | old_lai, mi, g_pars.cm1)); |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 265 | return l3_info; |
| 266 | } |
| 267 | |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 268 | function f_mm_auth() runs on BSC_ConnHdlr |
Harald Welte | 148a708 | 2018-01-26 18:56:43 +0100 | [diff] [blame] | 269 | { |
Harald Welte | de37149 | 2018-01-27 23:44:41 +0100 | [diff] [blame] | 270 | if (g_pars.net.expect_auth) { |
Harald Welte | 148a708 | 2018-01-26 18:56:43 +0100 | [diff] [blame] | 271 | g_pars.vec := f_gen_auth_vec_2g(); |
| 272 | var GSUP_IE auth_tuple := valueof(ts_GSUP_IE_AuthTuple2G(g_pars.vec.rand, |
| 273 | g_pars.vec.sres, |
| 274 | g_pars.vec.kc)); |
| 275 | GSUP.receive(tr_GSUP_SAI_REQ(g_pars.imsi)); |
| 276 | GSUP.send(ts_GSUP_SAI_RES(g_pars.imsi, auth_tuple)); |
| 277 | |
| 278 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_MM_AUTH_REQ(g_pars.vec.rand))); |
| 279 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MT_MM_AUTH_RESP_2G(g_pars.vec.sres))); |
| 280 | } |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 281 | } |
Harald Welte | 148a708 | 2018-01-26 18:56:43 +0100 | [diff] [blame] | 282 | |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 283 | function f_mm_common() runs on BSC_ConnHdlr |
| 284 | { |
| 285 | f_mm_auth(); |
Harald Welte | de37149 | 2018-01-27 23:44:41 +0100 | [diff] [blame] | 286 | if (g_pars.net.expect_ciph) { |
Harald Welte | 9de8479 | 2018-01-28 01:06:35 +0100 | [diff] [blame] | 287 | var OCT1 a5_net := f_alg_mask_from_cm(g_pars.cm2); |
| 288 | var OCT1 a5_intersect := g_pars.net.kc_support and4b a5_net; |
| 289 | alt { |
| 290 | [] BSSAP.receive(tr_BSSMAP_CipherModeCmd(a5_intersect, g_pars.vec.kc)) { |
| 291 | var OCT1 a5_chosen := f_best_alg_from_mask(a5_intersect); |
| 292 | var integer a5_nr := f_alg_from_mask(a5_chosen); |
| 293 | BSSAP.send(ts_BSSMAP_CipherModeCompl(int2oct(a5_nr+1, 1))); |
| 294 | } |
| 295 | [] BSSAP.receive(tr_BSSMAP_CipherModeCmd(?, g_pars.vec.kc)) { |
| 296 | setverdict(fail, "Wrong ciphering algorithm mask in CiphModCmd"); |
| 297 | self.stop; |
| 298 | } |
| 299 | } |
| 300 | /* FIXME: Send the best available algorithm */ |
Harald Welte | 148a708 | 2018-01-26 18:56:43 +0100 | [diff] [blame] | 301 | } |
| 302 | } |
| 303 | |
Neels Hofmeyr | c1f105a | 2018-03-01 20:00:19 +0100 | [diff] [blame] | 304 | function f_perform_lu() |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 305 | runs on BSC_ConnHdlr { |
| 306 | var PDU_ML3_MS_NW l3_lu := f_build_lu_imsi(g_pars.imsi) |
| 307 | var PDU_DTAP_MT dtap_mt; |
| 308 | |
| 309 | /* tell GSUP dispatcher to send this IMSI to us */ |
| 310 | f_create_gsup_expect(hex2str(g_pars.imsi)); |
| 311 | |
| 312 | /* Send BSSAP_Conn_Req with COMPL L3 INFO to MSC */ |
| 313 | f_bssap_compl_l3(l3_lu); |
| 314 | |
Neels Hofmeyr | c1f105a | 2018-03-01 20:00:19 +0100 | [diff] [blame] | 315 | if (g_pars.send_early_cm) { |
Harald Welte | 8a121b3 | 2018-01-22 03:00:41 +0100 | [diff] [blame] | 316 | BSSAP.send(ts_BSSMAP_ClassmarkUpd(g_pars.cm2, g_pars.cm3)); |
| 317 | } |
Harald Welte | 5c2622c | 2018-01-21 20:45:20 +0100 | [diff] [blame] | 318 | |
Harald Welte | de37149 | 2018-01-27 23:44:41 +0100 | [diff] [blame] | 319 | f_mm_common(); |
Harald Welte | 1611428 | 2018-01-24 22:41:21 +0100 | [diff] [blame] | 320 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 321 | /* Expect MSC to perform LU with HLR */ |
| 322 | GSUP.receive(tr_GSUP_UL_REQ(g_pars.imsi)); |
| 323 | GSUP.send(ts_GSUP_ISD_REQ(g_pars.imsi, g_pars.msisdn)); |
| 324 | GSUP.receive(tr_GSUP_ISD_RES(g_pars.imsi)); |
| 325 | GSUP.send(ts_GSUP_UL_RES(g_pars.imsi)); |
| 326 | |
| 327 | alt { |
| 328 | [] BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_LU_Acc)) -> value dtap_mt { |
| 329 | var PDU_ML3_LocationUpdateAccept lu_acc := dtap_mt.dtap.msgs.mm.locationUpdateAccept; |
Harald Welte | de37149 | 2018-01-27 23:44:41 +0100 | [diff] [blame] | 330 | if (g_pars.net.expect_tmsi) { |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 331 | if (not ispresent(lu_acc.mobileIdentityTLV) or |
| 332 | not ischosen(lu_acc.mobileIdentityTLV.mobileIdentityLV.mobileIdentityV.oddEvenInd_identity.tmsi_ptmsi)) { |
| 333 | setverdict(fail, "Expected TMSI but no TMSI was allocated"); |
| 334 | self.stop; |
| 335 | } else { |
Harald Welte | 256571e | 2018-01-24 18:47:19 +0100 | [diff] [blame] | 336 | g_pars.tmsi := lu_acc.mobileIdentityTLV.mobileIdentityLV.mobileIdentityV.oddEvenInd_identity.tmsi_ptmsi.octets; |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 337 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_TmsiRealloc_Cmpl)); |
| 338 | } |
| 339 | } else { |
| 340 | if (ispresent(lu_acc.mobileIdentityTLV) and |
| 341 | ischosen(lu_acc.mobileIdentityTLV.mobileIdentityLV.mobileIdentityV.oddEvenInd_identity.tmsi_ptmsi)) { |
| 342 | setverdict(fail, "Expected no TMSI but TMSI was allocated"); |
| 343 | self.stop; |
| 344 | } |
| 345 | } |
| 346 | } |
| 347 | [] BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_LU_Rej)) { |
| 348 | setverdict(fail, "Expected LU ACK, but received LU REJ"); |
| 349 | self.stop; |
| 350 | } |
| 351 | } |
| 352 | /* FIXME: there could be pending SMS or other common procedures by the MSC, let's ignore them */ |
| 353 | BSSAP.receive(tr_BSSMAP_ClearCommand); |
| 354 | BSSAP.send(ts_BSSMAP_ClearComplete); |
| 355 | BSSAP.receive(BSSAP_Conn_Prim:MSC_CONN_PRIM_DISC_IND); |
| 356 | setverdict(pass); |
| 357 | } |
| 358 | |
| 359 | function f_foo() runs on BSC_ConnHdlr{ |
| 360 | /* SCCP CC handled by BSSMAP_Emulation_CT.main() */ |
| 361 | /* Expect auth, if enabled */ |
| 362 | |
| 363 | /* TODO: ISD */ |
| 364 | /* Expect encr, if enabled */ |
| 365 | /* Expect encr, if enabled */ |
| 366 | /* Expect ASS CMD, if chan_type != requested */ |
| 367 | /* Send ASS CMPL in successful case */ |
| 368 | |
| 369 | /* Expect AoIP port/ip information for RTP stream */ |
| 370 | /* Expect MSC-originated MGCP to our simulated MGW */ |
| 371 | /* Verify Counters via CTRL */ |
| 372 | /* re-configure MSC behaviour via VTY */ |
| 373 | } |
| 374 | |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 375 | /* parameters related to a (MO?) voice call */ |
| 376 | type record CallParameters { |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 377 | /* CC related parameters */ |
| 378 | hexstring called_party, /* whom are we calling */ |
| 379 | integer transaction_id optional, /* which TS 04.08 CC transaction ID to use */ |
| 380 | BearerCapability_TLV bearer_cap, /* which bearer capabilities to claim */ |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 381 | boolean emergency, /* is this an emergency call? */ |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 382 | |
| 383 | /* MNCC related parameters */ |
| 384 | uint32_t mncc_callref optional, /* call reference on the MNCC side */ |
| 385 | MNCC_bearer_cap mncc_bearer_cap optional, /* MNCC-side bearer capabilities */ |
| 386 | |
| 387 | /* RTP related parameters */ |
| 388 | HostName bss_rtp_ip optional, /* BSS Side RTP IP */ |
| 389 | PortNumber bss_rtp_port optional, /* BSS Side RTP Port */ |
| 390 | HostName mss_rtp_ip optional, /* MSS Side RTP IP */ |
| 391 | PortNumber mss_rtp_port optional, /* MSS Side RTP Port */ |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 392 | HostName mgw_rtp_ip_bss, /* BSS-facing MGW RTP IP */ |
| 393 | PortNumber mgw_rtp_port_bss, /* BSS-facing MGW RTP Port */ |
| 394 | HostName mgw_rtp_ip_mss, /* MSS-facing MGW RTP IP */ |
| 395 | PortNumber mgw_rtp_port_mss, /* MSS-facing MGW RTP Port */ |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 396 | uint7_t rtp_payload_type, /* dynamic RTP payload type */ |
| 397 | charstring rtp_sdp_format, /* AMR/8000 or the like */ |
Philipp Maier | 2a98a73 | 2018-03-19 16:06:12 +0100 | [diff] [blame] | 398 | boolean mgw_drop_dlcx optional, /* Provoke errors by not responding to DLCX |
| 399 | (f_mt_call and f_mt_call) */ |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 400 | |
Philipp Maier | cd66857 | 2018-03-19 16:11:52 +0100 | [diff] [blame] | 401 | MgcpCallId mgcp_call_id optional, /* MGCP Call ID; CallAgent allocated */ |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 402 | MgcpEndpoint mgcp_ep optional /* MGCP Endpoint, CallAgent or MGW allocated */, |
| 403 | MgcpConnectionId mgcp_connection_id_bss, /* MGCP Connection ID BSS Side */ |
| 404 | MgcpConnectionId mgcp_connection_id_mss /* MGCP Connection ID MSS Side */ |
| 405 | } |
| 406 | |
| 407 | template (value) CallParameters t_CallParams(hexstring called, integer tid) := { |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 408 | called_party := called, |
| 409 | transaction_id := tid, |
| 410 | bearer_cap := valueof(ts_Bcap_voice), |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 411 | emergency := false, |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 412 | mncc_callref := omit, |
| 413 | mncc_bearer_cap := valueof(ts_MNCC_bcap_voice), |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 414 | bss_rtp_ip := "9.8.7.6", |
| 415 | bss_rtp_port := 9000, |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 416 | mss_rtp_ip := omit, |
| 417 | mss_rtp_port := omit, |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 418 | mgw_rtp_ip_bss := "1.1.1.1", |
| 419 | mgw_rtp_port_bss := 10000, |
| 420 | mgw_rtp_ip_mss := "1.1.1.1", |
| 421 | mgw_rtp_port_mss := 11000, |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 422 | rtp_payload_type := 98, |
| 423 | rtp_sdp_format := "AMR/8000", |
| 424 | mgcp_call_id := omit, |
| 425 | mgcp_ep := omit, |
| 426 | mgcp_connection_id_bss := '0'H,// |
| 427 | mgcp_connection_id_mss := '0'H // |
| 428 | }; |
| 429 | |
Philipp Maier | 3716a5e | 2018-03-21 15:53:35 +0100 | [diff] [blame] | 430 | function f_mt_call_establish(inout CallParameters cpars) |
Harald Welte | 33ec09b | 2018-02-10 15:34:46 +0100 | [diff] [blame] | 431 | runs on BSC_ConnHdlr { |
| 432 | |
Harald Welte | 33ec09b | 2018-02-10 15:34:46 +0100 | [diff] [blame] | 433 | var MNCC_PDU mncc; |
| 434 | var MgcpCommand mgcp_cmd; |
| 435 | |
| 436 | f_bssmap_register_imsi(g_pars.imsi, g_pars.tmsi); |
| 437 | |
| 438 | /* Allocate a call reference and send SETUP via MNCC to MSC */ |
| 439 | cpars.mncc_callref := f_rnd_int(2147483648); |
| 440 | MNCC.send(ts_MNCC_SETUP_req(cpars.mncc_callref, hex2str(g_pars.msisdn), |
| 441 | hex2str(cpars.called_party), hex2str(g_pars.imsi))); |
| 442 | /* BSC <- MSC: Expect paging. FIXME: By TMSI or not? */ |
| 443 | BSSAP.receive(tr_BSSMAP_Paging(g_pars.imsi)); |
| 444 | |
Harald Welte | b9e86fa | 2018-04-09 18:18:31 +0200 | [diff] [blame] | 445 | f_establish_fully(EST_TYPE_PAG_RESP); |
Harald Welte | 33ec09b | 2018-02-10 15:34:46 +0100 | [diff] [blame] | 446 | |
| 447 | /* MS <- MSC: Expect CC SETUP */ |
| 448 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_CC_SETUP(cpars.transaction_id, *, cpars.called_party))); |
| 449 | |
| 450 | /* MS -> MSC: ALERTING */ |
| 451 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_ALERTING(cpars.transaction_id))); |
| 452 | MNCC.receive(tr_MNCC_ALERT_ind(cpars.mncc_callref)); |
| 453 | |
| 454 | |
| 455 | /* Create MGCP expect */ |
| 456 | f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit}); |
| 457 | /* Ask MSC via MNCC to create the RTP socket on the MSC/MGW side */ |
| 458 | MNCC.send(ts_MNCC_RTP_CREATE(cpars.mncc_callref)); |
| 459 | |
| 460 | /* First MGCP CRCX (for BSS/RAN side) */ |
| 461 | MGCP.receive(tr_CRCX) -> value mgcp_cmd { |
| 462 | cpars.mgcp_call_id := f_MgcpCmd_extract_call_id(mgcp_cmd); |
Philipp Maier | 4b2692d | 2018-03-14 16:37:48 +0100 | [diff] [blame] | 463 | |
| 464 | /* When the endpoint contains a wildcard we keep the endpoint |
| 465 | * identifier we have set up in cpars. Otherwise we use the |
| 466 | * endpoint name that the call agent has supplied */ |
| 467 | if (match(mgcp_cmd.line.ep, t_MGCP_EP_wildcard) == false) { |
| 468 | cpars.mgcp_ep := mgcp_cmd.line.ep; |
| 469 | } |
| 470 | |
Harald Welte | 33ec09b | 2018-02-10 15:34:46 +0100 | [diff] [blame] | 471 | var SDP_Message sdp := valueof(ts_SDP(cpars.mgw_rtp_ip_bss, cpars.mgw_rtp_ip_bss, |
| 472 | hex2str(cpars.mgcp_call_id), "42", |
| 473 | cpars.mgw_rtp_port_bss, |
| 474 | { int2str(cpars.rtp_payload_type) }, |
| 475 | { valueof(ts_SDP_rtpmap(cpars.rtp_payload_type, |
| 476 | cpars.rtp_sdp_format)), |
| 477 | valueof(ts_SDP_ptime(20)) })); |
Philipp Maier | 4b2692d | 2018-03-14 16:37:48 +0100 | [diff] [blame] | 478 | var template MgcpResponse mgcp_resp; |
| 479 | mgcp_resp := ts_CRCX_ACK(mgcp_cmd.line.trans_id, cpars.mgcp_connection_id_bss, sdp); |
| 480 | f_mgcp_par_append(mgcp_resp.params, ts_MgcpParSpecEP(cpars.mgcp_ep)); |
| 481 | MGCP.send(mgcp_resp); |
Harald Welte | 33ec09b | 2018-02-10 15:34:46 +0100 | [diff] [blame] | 482 | } |
| 483 | /* Second MGCP CRCX (this time for MSS/CN side) */ |
| 484 | MGCP.receive(tr_CRCX(cpars.mgcp_ep)) -> value mgcp_cmd { |
| 485 | var SDP_Message sdp := valueof(ts_SDP(cpars.mgw_rtp_ip_mss, cpars.mgw_rtp_ip_mss, |
| 486 | hex2str(cpars.mgcp_call_id), "42", |
| 487 | cpars.mgw_rtp_port_mss, |
| 488 | { int2str(cpars.rtp_payload_type) }, |
| 489 | { valueof(ts_SDP_rtpmap(cpars.rtp_payload_type, |
| 490 | cpars.rtp_sdp_format)), |
| 491 | valueof(ts_SDP_ptime(20)) })); |
| 492 | MGCP.send(ts_CRCX_ACK(mgcp_cmd.line.trans_id, cpars.mgcp_connection_id_mss, sdp)); |
| 493 | /* MSC acknowledges the MNCC_CREATE to the MNCC handler */ |
| 494 | MNCC.receive(tr_MNCC_RTP_CREATE(cpars.mncc_callref)); |
| 495 | } |
| 496 | |
| 497 | /* expect the MSC to trigger a BSSMAP ASSIGNMENT */ |
| 498 | var BSSMAP_IE_AoIP_TransportLayerAddress tla_ass := |
| 499 | valueof(ts_BSSMAP_IE_AoIP_TLA4(f_inet_addr(cpars.mgw_rtp_ip_bss),cpars.mgw_rtp_port_bss)); |
| 500 | BSSAP.receive(tr_BSSMAP_AssignmentReq(omit, tla_ass)) { |
| 501 | var BSSMAP_IE_AoIP_TransportLayerAddress tla; |
| 502 | tla := valueof(ts_BSSMAP_IE_AoIP_TLA4(f_inet_addr(cpars.bss_rtp_ip), cpars.bss_rtp_port)); |
| 503 | BSSAP.send(ts_BSSMAP_AssignmentComplete(omit, tla)); |
| 504 | } |
| 505 | |
| 506 | /* MS -> MSC: ALERTING */ |
| 507 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_CONNECT(cpars.transaction_id))); |
| 508 | MNCC.receive(tr_MNCC_SETUP_cnf(cpars.mncc_callref)); |
| 509 | |
Harald Welte | 33ec09b | 2018-02-10 15:34:46 +0100 | [diff] [blame] | 510 | setverdict(pass); |
| 511 | } |
| 512 | |
Philipp Maier | 3716a5e | 2018-03-21 15:53:35 +0100 | [diff] [blame] | 513 | function f_mo_call_establish(inout CallParameters cpars) |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 514 | runs on BSC_ConnHdlr { |
| 515 | |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 516 | var MNCC_PDU mncc; |
| 517 | var MgcpCommand mgcp_cmd; |
Philipp Maier | 2a98a73 | 2018-03-19 16:06:12 +0100 | [diff] [blame] | 518 | var boolean respond_to_dlcx; |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 519 | |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 520 | if (cpars.emergency) { |
Harald Welte | b9e86fa | 2018-04-09 18:18:31 +0200 | [diff] [blame] | 521 | f_establish_fully(EST_TYPE_EMERG_CALL); |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 522 | } else { |
Harald Welte | b9e86fa | 2018-04-09 18:18:31 +0200 | [diff] [blame] | 523 | f_establish_fully(EST_TYPE_MO_CALL); |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 524 | } |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 525 | |
| 526 | /* Create MNCC and MGCP expect */ |
| 527 | f_create_mncc_expect(hex2str(cpars.called_party)); |
| 528 | f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit}); |
| 529 | |
Harald Welte | 0bef21e | 2018-02-10 09:48:23 +0100 | [diff] [blame] | 530 | if (cpars.emergency) { |
| 531 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_EMERG_SETUP(cpars.transaction_id))); |
| 532 | } else { |
| 533 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_SETUP(cpars.transaction_id, cpars.called_party))); |
| 534 | } |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 535 | interleave { |
| 536 | [] MNCC.receive(tr_MNCC_SETUP_ind(?, tr_MNCC_number(hex2str(cpars.called_party)))) -> value mncc { |
| 537 | cpars.mncc_callref := mncc.u.signal.callref; |
| 538 | /* Call Proceeding */ |
| 539 | MNCC.send(ts_MNCC_CALL_PROC_req(cpars.mncc_callref, cpars.mncc_bearer_cap)); |
| 540 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_CC_CALL_PROC(cpars.transaction_id))); |
| 541 | }; |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 542 | /* First MGCP CRCX (for BSS/RAN side) */ |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 543 | [] MGCP.receive(tr_CRCX) -> value mgcp_cmd { |
| 544 | cpars.mgcp_call_id := f_MgcpCmd_extract_call_id(mgcp_cmd); |
Philipp Maier | f1e02bb | 2018-03-15 16:30:00 +0100 | [diff] [blame] | 545 | |
| 546 | /* When the endpoint contains a wildcard we keep the endpoint |
| 547 | * identifier we have set up in cpars. Otherwise we use the |
| 548 | * endpoint name that the call agent has supplied */ |
| 549 | if (match(mgcp_cmd.line.ep, t_MGCP_EP_wildcard) == false) { |
| 550 | cpars.mgcp_ep := mgcp_cmd.line.ep; |
| 551 | } |
| 552 | |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 553 | var SDP_Message sdp := valueof(ts_SDP(cpars.mgw_rtp_ip_bss, cpars.mgw_rtp_ip_bss, |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 554 | hex2str(cpars.mgcp_call_id), "42", |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 555 | cpars.mgw_rtp_port_bss, |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 556 | { int2str(cpars.rtp_payload_type) }, |
| 557 | { valueof(ts_SDP_rtpmap(cpars.rtp_payload_type, |
| 558 | cpars.rtp_sdp_format)), |
| 559 | valueof(ts_SDP_ptime(20)) })); |
Philipp Maier | f1e02bb | 2018-03-15 16:30:00 +0100 | [diff] [blame] | 560 | |
| 561 | var template MgcpResponse mgcp_resp; |
| 562 | mgcp_resp := ts_CRCX_ACK(mgcp_cmd.line.trans_id, cpars.mgcp_connection_id_bss, sdp); |
| 563 | f_mgcp_par_append(mgcp_resp.params, ts_MgcpParSpecEP(cpars.mgcp_ep)); |
| 564 | MGCP.send(mgcp_resp); |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 565 | } |
| 566 | } |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 567 | /* Second MGCP CRCX (this time for MSS/CN side) */ |
| 568 | MGCP.receive(tr_CRCX(cpars.mgcp_ep)) -> value mgcp_cmd { |
| 569 | var SDP_Message sdp := valueof(ts_SDP(cpars.mgw_rtp_ip_mss, cpars.mgw_rtp_ip_mss, |
| 570 | hex2str(cpars.mgcp_call_id), "42", |
| 571 | cpars.mgw_rtp_port_mss, |
| 572 | { int2str(cpars.rtp_payload_type) }, |
| 573 | { valueof(ts_SDP_rtpmap(cpars.rtp_payload_type, |
| 574 | cpars.rtp_sdp_format)), |
| 575 | valueof(ts_SDP_ptime(20)) })); |
| 576 | MGCP.send(ts_CRCX_ACK(mgcp_cmd.line.trans_id, cpars.mgcp_connection_id_mss, sdp)); |
| 577 | } |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 578 | |
| 579 | /* Alerting */ |
| 580 | MNCC.send(ts_MNCC_ALERT_req(cpars.mncc_callref)); |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 581 | |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 582 | var BSSMAP_IE_AoIP_TransportLayerAddress tla_ass := |
| 583 | valueof(ts_BSSMAP_IE_AoIP_TLA4(f_inet_addr(cpars.mgw_rtp_ip_bss),cpars.mgw_rtp_port_bss)); |
| 584 | interleave { |
| 585 | [] BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_CC_ALERTING(cpars.transaction_id))) {} |
| 586 | /* expect AoIP IP/Port to match what we returned in CRCX_ACK above */ |
| 587 | [] BSSAP.receive(tr_BSSMAP_AssignmentReq(omit, tla_ass)) { |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 588 | var BSSMAP_IE_AoIP_TransportLayerAddress tla; |
| 589 | tla := valueof(ts_BSSMAP_IE_AoIP_TLA4(f_inet_addr(cpars.bss_rtp_ip), cpars.bss_rtp_port)); |
| 590 | BSSAP.send(ts_BSSMAP_AssignmentComplete(omit, tla)); |
| 591 | } |
| 592 | } |
| 593 | |
Harald Welte | 4017d55 | 2018-01-26 21:40:05 +0100 | [diff] [blame] | 594 | /* Answer. MNCC_SETUP_RSP -> CONNECT to MS; CONNECT_ACK from MS */ |
| 595 | MNCC.send(ts_MNCC_SETUP_rsp(cpars.mncc_callref)); |
| 596 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_CC_CONNECT(cpars.transaction_id))); |
| 597 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_CONNECT_ACK(cpars.transaction_id))); |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 598 | |
Philipp Maier | 3716a5e | 2018-03-21 15:53:35 +0100 | [diff] [blame] | 599 | setverdict(pass); |
| 600 | } |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 601 | |
Philipp Maier | 3716a5e | 2018-03-21 15:53:35 +0100 | [diff] [blame] | 602 | function f_call_hangup(inout CallParameters cpars, boolean release_by_ms) |
| 603 | runs on BSC_ConnHdlr { |
| 604 | |
| 605 | var MobileIdentityLV mi; |
| 606 | var MNCC_PDU mncc; |
| 607 | var MgcpCommand mgcp_cmd; |
| 608 | var boolean respond_to_dlcx; |
| 609 | |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 610 | MNCC.send(ts_MNCC_DISC_req(cpars.mncc_callref, valueof(ts_MNCC_cause(23)))); |
| 611 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_CC_DISC(cpars.transaction_id))); |
| 612 | |
Philipp Maier | 3716a5e | 2018-03-21 15:53:35 +0100 | [diff] [blame] | 613 | if (release_by_ms) { |
| 614 | /* B-side (MS) Release of call */ |
| 615 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_RELEASE(cpars.transaction_id, '1'B, '0000000'B))); |
| 616 | MNCC.receive(tr_MNCC_REL_ind(cpars.mncc_callref)); |
| 617 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_CC_REL_COMPL(cpars.transaction_id))); |
| 618 | } else { |
| 619 | /* A-side (PLMN) Release of call */ |
| 620 | MNCC.send(ts_MNCC_REL_req(cpars.mncc_callref, valueof(ts_MNCC_cause(42)))); |
| 621 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_CC_RELEASE(cpars.transaction_id))); |
| 622 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_REL_COMPL(cpars.transaction_id))); |
| 623 | } |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 624 | |
Philipp Maier | 2a98a73 | 2018-03-19 16:06:12 +0100 | [diff] [blame] | 625 | respond_to_dlcx := not (isbound(cpars.mgw_drop_dlcx) and valueof(cpars.mgw_drop_dlcx)); |
| 626 | |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 627 | /* clearing of radio channel */ |
| 628 | interleave { |
| 629 | [] BSSAP.receive(tr_BSSMAP_ClearCommand) { |
| 630 | BSSAP.send(ts_BSSMAP_ClearComplete); |
| 631 | BSSAP.receive(BSSAP_Conn_Prim:MSC_CONN_PRIM_DISC_IND); |
| 632 | } |
| 633 | [] MGCP.receive(tr_DLCX(?)) -> value mgcp_cmd { |
Philipp Maier | 2a98a73 | 2018-03-19 16:06:12 +0100 | [diff] [blame] | 634 | if (respond_to_dlcx) { |
| 635 | /* TODO: For one or all connections on EP? */ |
| 636 | MGCP.send(ts_DLCX_ACK2(mgcp_cmd.line.trans_id)); |
| 637 | f_create_mgcp_delete_ep(cpars.mgcp_ep); |
| 638 | } |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 639 | } |
| 640 | } |
Philipp Maier | 3716a5e | 2018-03-21 15:53:35 +0100 | [diff] [blame] | 641 | |
| 642 | setverdict(pass); |
| 643 | } |
| 644 | |
| 645 | function f_mt_call(inout CallParameters cpars) |
| 646 | runs on BSC_ConnHdlr { |
| 647 | |
| 648 | f_mt_call_establish(cpars); |
| 649 | |
| 650 | /* Hold the call for some time */ |
| 651 | f_sleep(3.0); |
| 652 | |
| 653 | f_call_hangup(cpars, true); |
| 654 | |
| 655 | setverdict(pass); |
| 656 | } |
| 657 | |
| 658 | function f_mo_call(inout CallParameters cpars) |
| 659 | runs on BSC_ConnHdlr { |
| 660 | |
| 661 | f_mo_call_establish(cpars); |
| 662 | |
| 663 | /* Hold the call for some time */ |
| 664 | f_sleep(3.0); |
| 665 | |
| 666 | f_call_hangup(cpars, false); |
| 667 | |
Harald Welte | b71901a | 2018-01-26 19:16:05 +0100 | [diff] [blame] | 668 | setverdict(pass); |
| 669 | } |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 670 | |
Daniel Willmann | 8b08437 | 2018-02-04 13:35:26 +0100 | [diff] [blame] | 671 | function f_mo_seq_dtmf_dup(inout CallParameters cpars) |
| 672 | runs on BSC_ConnHdlr { |
| 673 | |
| 674 | timer T := 1.0; |
Daniel Willmann | 8b08437 | 2018-02-04 13:35:26 +0100 | [diff] [blame] | 675 | var MNCC_PDU mncc; |
| 676 | var MgcpCommand mgcp_cmd; |
| 677 | var template PDU_ML3_MS_NW dtmf_dtap; |
| 678 | |
Harald Welte | b9e86fa | 2018-04-09 18:18:31 +0200 | [diff] [blame] | 679 | f_establish_fully(); |
Daniel Willmann | 8b08437 | 2018-02-04 13:35:26 +0100 | [diff] [blame] | 680 | |
| 681 | /* Create MNCC and MGCP expect */ |
| 682 | f_create_mncc_expect(hex2str(cpars.called_party)); |
| 683 | f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit}); |
| 684 | |
| 685 | BSSAP.send(ts_PDU_DTAP_MO(ts_ML3_MO_CC_SETUP(cpars.transaction_id, cpars.called_party))); |
| 686 | MNCC.receive(tr_MNCC_SETUP_ind(?, tr_MNCC_number(hex2str(cpars.called_party)))) -> value mncc; |
| 687 | cpars.mncc_callref := mncc.u.signal.callref; |
| 688 | |
| 689 | /* Send DTMF */ |
| 690 | dtmf_dtap := ts_ML3_MO_CC_START_DTMF(cpars.transaction_id, "2"); |
| 691 | dtmf_dtap.msgs.cc.startDTMF.nsd := int2bit(2, 2); |
Daniel Willmann | 92f6627 | 2018-02-06 15:50:52 +0100 | [diff] [blame] | 692 | BSSAP.send(ts_PDU_DTAP_MO(dtmf_dtap, '00'O, true)); |
Daniel Willmann | 8b08437 | 2018-02-04 13:35:26 +0100 | [diff] [blame] | 693 | T.start; |
| 694 | alt { |
| 695 | [] MNCC.receive(tr_MNCC_START_DTMF_ind(cpars.mncc_callref, "2")) {} |
| 696 | [] T.timeout { |
| 697 | setverdict(fail, "Timeout waiting for START_DTMF_ind"); |
| 698 | self.stop; |
| 699 | } |
| 700 | } |
| 701 | |
Daniel Willmann | 92f6627 | 2018-02-06 15:50:52 +0100 | [diff] [blame] | 702 | BSSAP.send(ts_PDU_DTAP_MO(dtmf_dtap, '00'O, true)); |
Daniel Willmann | 8b08437 | 2018-02-04 13:35:26 +0100 | [diff] [blame] | 703 | T.start; |
| 704 | alt { |
| 705 | [] MNCC.receive(tr_MNCC_START_DTMF_ind(cpars.mncc_callref, "2")) { |
| 706 | setverdict(fail, "Received duplicate START_DTMF_ind"); |
| 707 | self.stop; |
| 708 | } |
| 709 | [] T.timeout { } |
| 710 | } |
| 711 | |
| 712 | dtmf_dtap := ts_ML3_MO_CC_START_DTMF(cpars.transaction_id, "3"); |
| 713 | dtmf_dtap.msgs.cc.startDTMF.nsd := int2bit(3, 2); |
Daniel Willmann | 92f6627 | 2018-02-06 15:50:52 +0100 | [diff] [blame] | 714 | BSSAP.send(ts_PDU_DTAP_MO(dtmf_dtap, '00'O, true)); |
Daniel Willmann | 8b08437 | 2018-02-04 13:35:26 +0100 | [diff] [blame] | 715 | alt { |
| 716 | [] MNCC.receive(tr_MNCC_START_DTMF_ind(cpars.mncc_callref, "3")) { } |
| 717 | [] T.timeout { |
| 718 | setverdict(fail, "Received duplicate START_DTMF_ind"); |
| 719 | self.stop; |
| 720 | } |
| 721 | } |
| 722 | |
| 723 | setverdict(pass); |
| 724 | } |
Harald Welte | 1ddc716 | 2018-01-27 14:25:46 +0100 | [diff] [blame] | 725 | /* expect a clear command */ |
Harald Welte | 5946b33 | 2018-03-18 23:32:21 +0100 | [diff] [blame] | 726 | altstep as_clear_cmd_compl_disc(float t := 5.0) runs on BSC_ConnHdlr { |
| 727 | [] BSSAP.receive(tr_BSSMAP_ClearCommand) { |
| 728 | BSSAP.send(ts_BSSMAP_ClearComplete); |
| 729 | alt { |
| 730 | [] BSSAP.receive(BSSAP_Conn_Prim:MSC_CONN_PRIM_DISC_IND) { |
| 731 | setverdict(pass); |
| 732 | } |
| 733 | [] BSSAP.receive { |
| 734 | setverdict(fail, "Unexpected BSSMAP while waiting for SCCP Release"); |
| 735 | self.stop; |
| 736 | } |
| 737 | } |
| 738 | } |
| 739 | [] BSSAP.receive { |
| 740 | setverdict(fail, "Unexpected BSSMAP while waiting for ClearCommand"); |
| 741 | self.stop; |
| 742 | } |
| 743 | } |
| 744 | |
Harald Welte | 1ddc716 | 2018-01-27 14:25:46 +0100 | [diff] [blame] | 745 | function f_expect_clear(float t := 5.0) runs on BSC_ConnHdlr { |
| 746 | timer T := t; |
| 747 | |
| 748 | T.start; |
| 749 | alt { |
Harald Welte | 5946b33 | 2018-03-18 23:32:21 +0100 | [diff] [blame] | 750 | [] as_clear_cmd_compl_disc(t) { } |
Harald Welte | 1ddc716 | 2018-01-27 14:25:46 +0100 | [diff] [blame] | 751 | [] T.timeout { |
Harald Welte | 5946b33 | 2018-03-18 23:32:21 +0100 | [diff] [blame] | 752 | setverdict(fail, "Timeout waiting for ClearCommand/Release"); |
Harald Welte | 1ddc716 | 2018-01-27 14:25:46 +0100 | [diff] [blame] | 753 | self.stop; |
| 754 | } |
| 755 | } |
| 756 | } |
| 757 | |
Harald Welte | f45efeb | 2018-04-09 18:19:24 +0200 | [diff] [blame] | 758 | type record SmsParametersTp { |
| 759 | OCT1 msg_ref, |
| 760 | TP_DA da, |
| 761 | OCT1 pid, |
| 762 | OCT1 dcs, |
| 763 | integer udl, |
| 764 | octetstring ud |
| 765 | } |
| 766 | type record SmsParametersRp { |
| 767 | OCT1 msg_ref, |
| 768 | RP_NumberingPlan_and_NumberDigits orig optional, |
| 769 | RP_NumberingPlan_and_NumberDigits dest optional |
| 770 | } |
| 771 | type record SmsParameters { |
| 772 | SmsParametersTp tp, |
| 773 | SmsParametersRp rp, |
| 774 | uint3_t tid, |
| 775 | OCT1 dlci, |
| 776 | uint7_t exp_rp_err optional |
| 777 | } |
| 778 | |
| 779 | template (value) TP_DA ts_TP_DA(BIT4 npl, BIT3 ton, hexstring addr) := { |
| 780 | tP_DA_NoPad := { |
| 781 | tP_LengthIndicator := 0, /* overwritten */ |
| 782 | tP_NumberingPlanID := npl, |
| 783 | tP_TypeOfNumber := ton, |
| 784 | tp_Spare := '0'B, |
| 785 | tP_DAValue := addr |
| 786 | } |
| 787 | } |
| 788 | |
| 789 | template (value) SmsParameters t_SmsPars(hexstring tp_daddr := '12345'H) := { |
| 790 | tp := { |
| 791 | msg_ref := '23'O, |
| 792 | da := ts_TP_DA('0000'B, '000'B, tp_daddr), |
| 793 | pid := '00'O, |
| 794 | dcs := '00'O, |
| 795 | udl := 0, |
| 796 | ud := ''O |
| 797 | }, |
| 798 | rp := { |
| 799 | msg_ref := '42'O, |
| 800 | orig := omit, |
| 801 | dest := { '0000'B, '000'B, '0'B, '98765'H } |
| 802 | }, |
| 803 | tid := 0, |
| 804 | dlci := '03'O, |
| 805 | exp_rp_err := omit |
| 806 | } |
| 807 | |
| 808 | private altstep as_other_sms() runs on BSC_ConnHdlr { |
| 809 | [] BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_SMS(?, ?, ?), ?)) { |
| 810 | setverdict(fail, "Unexpected SMS related PDU from MSC"); |
| 811 | self.stop; |
| 812 | } |
| 813 | } |
| 814 | |
| 815 | /* Submit a MO-SMS over an already existing (and authenticated, ...) DTAP connection */ |
| 816 | function f_mo_sms(inout SmsParameters spars) |
| 817 | runs on BSC_ConnHdlr { |
| 818 | var template (value) TPDU_RP_DATA_MS_SGSN tp_mo; |
| 819 | var template (value) RPDU_MS_SGSN rp_mo; |
| 820 | var template (value) PDU_ML3_MS_NW l3_mo; |
| 821 | |
| 822 | var template TPDU_RP_DATA_SGSN_MS tp_mt; |
| 823 | var template RPDU_SGSN_MS rp_mt; |
| 824 | var template PDU_ML3_NW_MS l3_mt; |
| 825 | |
| 826 | var default d := activate(as_other_sms()); |
| 827 | |
Harald Welte | f640a01 | 2018-04-14 17:49:21 +0200 | [diff] [blame] | 828 | /* just in case this is routed to SMPP.. */ |
| 829 | f_create_smpp_expect(hex2str(spars.tp.da.tP_DA_NoPad.tP_DAValue)); |
| 830 | |
Harald Welte | f45efeb | 2018-04-09 18:19:24 +0200 | [diff] [blame] | 831 | tp_mo := ts_SMS_SUBMIT(spars.tp.msg_ref, spars.tp.da, spars.tp.pid, spars.tp.dcs, |
| 832 | spars.tp.udl, spars.tp.ud); |
| 833 | rp_mo := ts_RP_DATA_MO(spars.rp.msg_ref, spars.rp.orig, spars.rp.dest, tp_mo); |
| 834 | l3_mo := ts_ML3_MO_SMS(spars.tid, c_TIF_ORIG, ts_CP_DATA_MO(rp_mo)); |
| 835 | BSSAP.send(ts_PDU_DTAP_MO(l3_mo, spars.dlci, true)); |
| 836 | /* receive CP-ACK for CP-DATA above */ |
| 837 | BSSAP.receive(tr_PDU_DTAP_MT(tr_ML3_MT_SMS(spars.tid, c_TIF_REPL, tr_CP_ACK_MT), spars.dlci)); |
| 838 | |
| 839 | if (ispresent(spars.exp_rp_err)) { |
| 840 | /* expect an RP-ERROR message from MSC with given cause */ |
| 841 | rp_mt := tr_RP_ERROR_MT(spars.rp.msg_ref, spars.exp_rp_err); |
| 842 | l3_mt := tr_ML3_MT_SMS(spars.tid, c_TIF_REPL, tr_CP_DATA_MT(rp_mt)); |
| 843 | BSSAP.receive(tr_PDU_DTAP_MT(l3_mt, spars.dlci)); |
| 844 | /* send CP-ACK for CP-DATA just received */ |
| 845 | l3_mo := ts_ML3_MO_SMS(spars.tid, c_TIF_ORIG, ts_CP_ACK_MO); |
| 846 | BSSAP.send(ts_PDU_DTAP_MO(l3_mo, spars.dlci, true)); |
| 847 | } else { |
| 848 | /* expect RP-ACK for RP-DATA */ |
| 849 | rp_mt := tr_RP_ACK_MT(spars.rp.msg_ref); |
| 850 | l3_mt := tr_ML3_MT_SMS(spars.tid, c_TIF_REPL, tr_CP_DATA_MT(rp_mt)); |
| 851 | BSSAP.receive(tr_PDU_DTAP_MT(l3_mt, spars.dlci)); |
| 852 | /* send CP-ACO for CP-DATA just received */ |
| 853 | l3_mo := ts_ML3_MO_SMS(spars.tid, c_TIF_ORIG, ts_CP_ACK_MO); |
| 854 | BSSAP.send(ts_PDU_DTAP_MO(l3_mo, spars.dlci, true)); |
| 855 | } |
| 856 | deactivate(d); |
| 857 | setverdict(pass); |
| 858 | } |
| 859 | |
| 860 | /* receive MT-SMS delivered from the MSC/SMSC over an already existing DTAP connection */ |
| 861 | function f_mt_sms(inout SmsParameters spars) |
| 862 | runs on BSC_ConnHdlr { |
| 863 | var template (value) TPDU_RP_DATA_MS_SGSN tp_mo; |
| 864 | var template (value) RPDU_MS_SGSN rp_mo; |
| 865 | var template (value) PDU_ML3_MS_NW l3_mo; |
| 866 | |
| 867 | var template TPDU_RP_DATA_SGSN_MS tp_mt; |
| 868 | var template RPDU_SGSN_MS rp_mt; |
| 869 | var template PDU_ML3_NW_MS l3_mt; |
| 870 | |
| 871 | var PDU_DTAP_MT dtap_mt; |
| 872 | |
| 873 | var default d := activate(as_other_sms()); |
| 874 | |
| 875 | /* Expect CP-DATA(RP-DATA(SMS-DELIVER)) */ |
| 876 | tp_mt := tr_SMS_DELIVER(?, spars.tp.ud, spars.tp.pid, spars.tp.dcs, ?); |
| 877 | rp_mt := tr_RP_DATA_MT(?, ?, omit, tp_mt); |
| 878 | l3_mt := tr_ML3_MT_SMS(?, c_TIF_ORIG, tr_CP_DATA_MT(rp_mt)); |
| 879 | BSSAP.receive(tr_PDU_DTAP_MT(l3_mt, spars.dlci)) -> value dtap_mt; |
| 880 | /* Extract relevant identifiers */ |
| 881 | spars.tid := bit2int(dtap_mt.dtap.tiOrSkip.transactionId.tio); |
| 882 | spars.rp.msg_ref := dtap_mt.dtap.msgs.sms.cP_DATA.cP_User_Data.cP_RPDU.rP_DATA_SGSN_MS.rP_MessageReference; |
| 883 | |
| 884 | /* send CP-ACK for CP-DATA just received */ |
| 885 | l3_mo := ts_ML3_MO_SMS(spars.tid, c_TIF_REPL, ts_CP_ACK_MO); |
| 886 | BSSAP.send(ts_PDU_DTAP_MO(l3_mo, spars.dlci, true)); |
| 887 | |
| 888 | /* send RP-ACK for RP-DATA */ |
| 889 | rp_mo := ts_RP_ACK_MO(spars.rp.msg_ref); |
| 890 | l3_mo := ts_ML3_MO_SMS(spars.tid, c_TIF_REPL, ts_CP_DATA_MO(rp_mo)); |
| 891 | BSSAP.send(ts_PDU_DTAP_MO(l3_mo, spars.dlci, true)); |
| 892 | |
| 893 | /* expect CP-ACK for CP-DATA(RP-ACK) just sent */ |
Harald Welte | e008eea | 2018-04-14 21:05:48 +0200 | [diff] [blame] | 894 | l3_mt := tr_ML3_MT_SMS(spars.tid, c_TIF_ORIG, tr_CP_ACK_MT); |
Harald Welte | f45efeb | 2018-04-09 18:19:24 +0200 | [diff] [blame] | 895 | BSSAP.receive(tr_PDU_DTAP_MT(l3_mt, spars.dlci)); |
| 896 | |
| 897 | deactivate(d); |
| 898 | setverdict(pass); |
| 899 | } |
| 900 | |
Harald Welte | a49e36e | 2018-01-21 19:29:33 +0100 | [diff] [blame] | 901 | |
| 902 | |
| 903 | |
| 904 | } |
| 905 | |
| 906 | |