From c4b5b2c808abb659b69a6376be8a1e15e8096652 Mon Sep 17 00:00:00 2001 From: Andreas Eversberg Date: Wed, 11 Dec 2013 16:13:28 +0100 Subject: [WIP] HO: VTY test option to fake a better neighbor cell to force handover The handover is forced by reporting perfect measurement results of a given neighbor cell. All other neighbor cells and the serving cell is reported as poor. The falke report will sustain until the connection is released or a new 'better' cell is specified. Change-Id: Ie9245dbbb9142f14459ed13b2ff29a6c2dbf3d6c --- .../layer23/include/osmocom/bb/mobile/gsm48_rr.h | 3 ++ src/host/layer23/src/mobile/gsm48_rr.c | 46 ++++++++++++++++++++++ src/host/layer23/src/mobile/vty_interface.c | 38 +++++++++++++++++- 3 files changed, 86 insertions(+), 1 deletion(-) diff --git a/src/host/layer23/include/osmocom/bb/mobile/gsm48_rr.h b/src/host/layer23/include/osmocom/bb/mobile/gsm48_rr.h index 44540a0f..2ade1b71 100644 --- a/src/host/layer23/include/osmocom/bb/mobile/gsm48_rr.h +++ b/src/host/layer23/include/osmocom/bb/mobile/gsm48_rr.h @@ -195,6 +195,8 @@ struct gsm48_rrlayer { /* counter for access bursts */ uint16_t hando_new_cell_arfcn; uint8_t hando_new_cell_bsic; + int hando_fake_report; /* perform fake reporting */ + uint16_t hando_fake_report_arfcn; /* good cell */ /* BA range */ uint8_t ba_ranges; @@ -233,5 +235,6 @@ int gsm48_rr_tx_voice(struct osmocom_ms *ms, struct msgb *msg); int gsm48_rr_audio_mode(struct osmocom_ms *ms, uint8_t mode); int gsm48_rr_meas_ind(struct osmocom_ms *ms, uint16_t band_arfcn, uint8_t rx_lev, uint8_t bsic, int16_t toa); +const char *gsm48_rr_force_handover(struct osmocom_ms *ms, uint16_t arfcn); #endif /* _GSM48_RR_H */ diff --git a/src/host/layer23/src/mobile/gsm48_rr.c b/src/host/layer23/src/mobile/gsm48_rr.c index 2e0a0d0e..a11d3778 100644 --- a/src/host/layer23/src/mobile/gsm48_rr.c +++ b/src/host/layer23/src/mobile/gsm48_rr.c @@ -366,6 +366,8 @@ static void new_rr_state(struct gsm48_rrlayer *rr, int state) stop_rr_t_starting(rr); /* stop handover timer */ stop_rr_t3124(rr); + /* stop faking measurement report */ + rr->hando_fake_report = 0; } rr->state = state; @@ -2831,6 +2833,17 @@ static int gsm48_rr_tx_meas_rep(struct osmocom_ms *ms) serv_rxqual_full = serv_rxqual_sub = 0; // FIXME } + /* fake serving cell, if wanted */ + if (rr->hando_fake_report) { + struct gsm322_cellsel *cs = &ms->cellsel; + + if (rr->hando_fake_report_arfcn == cs->sel_arfcn) + serv_rxlev_full = serv_rxlev_sub = 63; /* -47 dBm */ + else + serv_rxlev_full = serv_rxlev_sub = 10; /* -100 dBm */ + serv_rxqual_full = serv_rxqual_sub = 0; // quality is ok + } + memset(&rxlev_nc, 0, sizeof(rxlev_nc)); memset(&bsic_nc, 0, sizeof(bsic_nc)); memset(&bcch_f_nc, 0, sizeof(bcch_f_nc)); @@ -2873,6 +2886,15 @@ static int gsm48_rr_tx_meas_rep(struct osmocom_ms *ms) rxlev_nc[n] = rrmeas->nc_rxlev_dbm[index] + 110; bsic_nc[n] = rrmeas->nc_bsic[index]; bcch_f_nc[n] = index; + + /* fake neighbor cell, if wanted */ + if (rr->hando_fake_report) { + if (rr->hando_fake_report_arfcn + == rrmeas->nc_arfcn[index]) + rxlev_nc[n] = 63; /* -47 dBm */ + else + rxlev_nc[n] = 10; /* -100 dBm */ + } } } @@ -4793,6 +4815,30 @@ static int gsm48_rr_rx_phys_info(struct osmocom_ms *ms, struct msgb *msg) return gsm48_rr_resume_after_handover(ms); } +/* force handover to given ARFCN, by faking measurement report */ +const char *gsm48_rr_force_handover(struct osmocom_ms *ms, uint16_t arfcn) +{ + struct gsm48_rrlayer *rr = &ms->rrlayer; + struct gsm48_rr_meas *rrmeas = &rr->meas; + int i; + + if (rr->state != GSM48_RR_ST_DEDICATED) + return "No dedicated connection"; + + if (rrmeas->nc_num == 0) + return "No Neighbor cells given by BTS"; + + for (i = 0; i < rrmeas->nc_num; i++) { + if (rrmeas->nc_arfcn[i] == arfcn) { + rr->hando_fake_report = 1; + rr->hando_fake_report_arfcn = arfcn; + return 0; + } + } + + return "Given ARFCN is not a neighbor cell"; +} + /* * radio ressource requests */ diff --git a/src/host/layer23/src/mobile/vty_interface.c b/src/host/layer23/src/mobile/vty_interface.c index 2001b882..9e097cc3 100644 --- a/src/host/layer23/src/mobile/vty_interface.c +++ b/src/host/layer23/src/mobile/vty_interface.c @@ -975,8 +975,11 @@ DEFUN(service, service_cmd, "service MS_NAME (*#06#|*#21#|*#67#|*#61#|*#62#" return CMD_SUCCESS; } +#define TEST_STR "Test functions\n" + DEFUN(test_reselection, test_reselection_cmd, "test re-selection NAME", - "Manually trigger cell re-selection\nName of MS (see \"show ms\")") + TEST_STR "Manually trigger cell re-selection\n" + "Name of MS (see \"show ms\")") { struct osmocom_ms *ms; struct gsm_settings *set; @@ -1002,6 +1005,38 @@ DEFUN(test_reselection, test_reselection_cmd, "test re-selection NAME", return CMD_SUCCESS; } +DEFUN(test_handover, test_handover_cmd, "test handover NAME <0-1024> [pcs]", + TEST_STR "Force handover by faking measurement report\n" + "Name of MS (see \"show ms\")\nARFCN to be reported best cell\n" + "Given frequency is PCS band (1900) rather than DCS band.") +{ + struct osmocom_ms *ms; + uint16_t arfcn = atoi(argv[1]); + const char *err_msg; + + ms = get_ms(argv[0], vty); + if (!ms) + return CMD_WARNING; + + if (argc > 2) { + if (arfcn < 512 || arfcn > 810) { + vty_out(vty, "Given ARFCN not in PCS band%s", + VTY_NEWLINE); + return CMD_WARNING; + } + arfcn |= ARFCN_PCS; + } + + err_msg = gsm48_rr_force_handover(ms, arfcn); + if (err_msg) { + vty_out(vty, "Cannot force handover: %s%s", err_msg, + VTY_NEWLINE); + return CMD_WARNING; + } + + return CMD_SUCCESS; +} + DEFUN(delete_forbidden_plmn, delete_forbidden_plmn_cmd, "delete forbidden plmn NAME MCC MNC", "Delete\nForbidden\nplmn\nName of MS (see \"show ms\")\n" @@ -2862,6 +2897,7 @@ int ms_vty_init(void) install_element(ENABLE_NODE, &sms_cmd); install_element(ENABLE_NODE, &service_cmd); install_element(ENABLE_NODE, &test_reselection_cmd); + install_element(ENABLE_NODE, &test_handover_cmd); install_element(ENABLE_NODE, &delete_forbidden_plmn_cmd); #ifdef _HAVE_GPSD -- cgit v1.2.3