Integration with Nokia CMU #110

howardswe499 · 2024-04-09T06:56:48Z

howardswe499
Apr 9, 2024

Hi Developers of PacketRusher,

I'm trying to connect PR to Nokia CMU, but I am running into some issues. Namely, I'm stuck on UE Registration step, which is returning Cause #9: UE identity cannot be derived by the network error.

UERANSIM is able to integrate with CMU, so I compared the InitialUEMessage, Registration request packets. The differences I've noticed are:

UERANSIM UE security capability field has Length of 4, while PR is 8
UERANSIM has additional support for following integrity and ciphering algorithms:

EEA0

128-EEA1

128-EEA2

128-EEA3

EIA0

128-EIA1

128-EIA2

128-EIA3

UERANSIM has NrCellIdentity value of 0x0000000001, while PR is 0x0000000000
UERANSIM has timestamp under id-UserLocationInformation>TAI, PR does not.

Here are the PR logs & config and pcap screenshots:

PR

===============
=== PR Logs ===
===============
INFO[0000] Selecting 10.246.112.18 for host 10.246.112.18 as AMF's IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N3/Data IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N2/Control IP address 
INFO[0000] Loaded config at: /root/PacketRusher/config/config.yml 
INFO[0000] PacketRusher version 1.0.1                   
INFO[0000] ---------------------------------------      
INFO[0000] [TESTER] Starting test function: Testing an ue attached with configuration 
INFO[0000] [TESTER][UE] Number of UEs: 1                
INFO[0000] [TESTER][UE] disableTunnel is false          
INFO[0000] [TESTER][GNB] Control interface IP/Port: 192.168.102.54/9487 
INFO[0000] [TESTER][GNB] Data interface IP/Port: 192.168.102.54/2152 
INFO[0000] [TESTER][AMF] AMF IP/Port: 10.246.112.18/38412 
INFO[0000] ---------------------------------------      
INFO[0000] [GNB] SCTP/NGAP service is running           
INFO[0000] [GNB] Initiating NG Setup Request            
INFO[0000] [GNB][SCTP] Receive message in 0 stream      
INFO[0000] [GNB][NGAP] Receive NG Setup Response        
INFO[0000] [GNB][AMF] AMF Name: amf                     
INFO[0000] [GNB][AMF] State of AMF: Active              
INFO[0000] [GNB][AMF] Capacity of AMF: 25               
INFO[0000] [GNB][AMF] PLMNs Identities Supported by AMF -- mcc: 100 mnc:01 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000002 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:02 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:03 sd:000004 
INFO[0001] [TESTER] TESTING REGISTRATION USING IMSI 9000000007 UE 
INFO[0001] [GNB] Received incoming connection from new UE 
INFO[0001] [UE] Initiating Registration                 
INFO[0001] [UE] Switched from state 0 to state 1        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message without security header    
INFO[0001] [UE][NAS] Receive Authentication Request     
INFO[0001] [UE][NAS][MAC] Authenticity of the authentication request message: OK 
INFO[0001] [UE][NAS][SQN] SQN of the authentication request message: INVALID 
INFO[0001] [UE][NAS] Send authentication failure with Synch failure 
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message without security header    
INFO[0001] [UE][NAS] Receive Authentication Request     
INFO[0001] [UE][NAS][MAC] Authenticity of the authentication request message: OK 
INFO[0001] [UE][NAS][SQN] SQN of the authentication request message: VALID 
INFO[0001] [UE][NAS] Send authentication response       
INFO[0001] [UE] Switched from state 1 to state 2        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message without security header    
ERRO[0001] [UE][NAS] Receive Registration Reject        
ERRO[0001] [UE][NAS] UE received a 5GMM Failure, cause: UE identity cannot be derived by the network 
INFO[0001] [GNB][NGAP] Receive UE Context Release Command 
INFO[0001] [GNB] Initiating UE Context Complete         
WARN[0001] [UE][9000000007] Stopping UE as communication with gNB was closed 
INFO[0001] [GNB][NGAP] Releasing UE Context, cause: nas: Normal release 
^CINFO[0007] [UE] Terminating UE as requested             
INFO[0007] [UE] UE Terminated                           
INFO[0007] [UE] Switched from state 2 to state 0

=================
=== PR Config ===
=================
gnodeb:
  controlif:
    ip: "192.168.102.54"
    port: 9487
  dataif:
    ip: "192.168.102.54"
    port: 2152
  plmnlist:
    mcc: "001"
    mnc: "01"
    tac: [redacted]
    gnbid: "000000"
  slicesupportlist:
    sst: "01"
    sd: "000001" # optional, can be removed if not used

ue:
  msin: "9000000007"
  key: "2E56EE784C17E0A644CC95E39B7EBD71"
  opc: "B36388CCA4AC6FD87866CFAAC2B613FE"
  amf: "8000"
  sqn: "00000000" #000000000029
  dnn: [redacted]
  routingindicator: "0000"
  hplmn:
    mcc: "001"
    mnc: "01"
  snssai:
    sst: 01
    sd: "000001" # optional, can be removed if not used
  integrity:
    nia0: true
    nia1: true
    nia2: true
    nia3: true
  ciphering:
    nea0: true
    nea1: true
    nea2: true
    nea3: true
amfif:
  ip: "10.246.112.18"
  port: 38412
logs:
    level: 4

Pcap

Also I have attached the UERANSIM config in case you would find it useful.

UERANSIM config

========================
=== UERANSIM RAN Cfg ===
========================
mcc: '001'          # Mobile Country Code value
mnc: '01'           # Mobile Network Code value (2 or 3 digits)

nci: '0x000000001'  # NR Cell Identity (36-bit)
idLength: 32       # NR gNB ID length in bits [22...32]
tac: [redacted]              # Tracking Area Code

linkIp: 127.0.0.1   # gNB's local IP address for Radio Link Simulation (Usually same with local IP)
ngapIp: 192.168.102.54   # gNB's local IP address for N2 Interface (Usually same with local IP)
gtpIp: 192.168.102.54  # gNB's local IP address for N3 Interface (Usually same with local IP)

# List of AMF address information
amfConfigs:
  - address: 10.246.112.18
    port: 38412

# List of supported S-NSSAIs by this gNB
slices:
  - sst: 1
    sd: 1

# Indicates whether or not SCTP stream number errors should be ignored.
ignoreStreamIds: true

=======================
=== UERANSIM UE Cfg ===
=======================
# IMSI number of the UE. IMSI = [MCC|MNC|MSISDN] (In total 15 digits)
supi: 'imsi-001019000000007'
# Mobile Country Code value of HPLMN
mcc: '001'
# Mobile Network Code value of HPLMN (2 or 3 digits)
mnc: '01'
# SUCI Protection Scheme : 0 for Null-scheme, 1 for Profile A and 2 for Profile B
protectionScheme: 0
# Home Network Public Key for protecting with SUCI Profile A
homeNetworkPublicKey: '5a8d38864820197c3394b92613b20b91633cbd897119273bf8e4a6f4eec0a650'
# Home Network Public Key ID for protecting with SUCI Profile A
homeNetworkPublicKeyId: 1
# Routing Indicator
routingIndicator: '0000'

# Permanent subscription key
key: '2E56EE784C17E0A644CC95E39B7EBD71'
# Operator code (OP or OPC) of the UE
op: 'B36388CCA4AC6FD87866CFAAC2B613FE'
# This value specifies the OP type and it can be either 'OP' or 'OPC'
opType: 'OPC'
# Authentication Management Field (AMF) value
amf: '8000'
# IMEI number of the device. It is used if no SUPI is provided
imei: '356938035643803'
# IMEISV number of the device. It is used if no SUPI and IMEI is provided
imeiSv: '4370816125816151'

# List of gNB IP addresses for Radio Link Simulation
gnbSearchList:
  - 127.0.0.1

# UAC Access Identities Configuration
uacAic:
  mps: false
  mcs: false

# UAC Access Control Class
uacAcc:
  normalClass: 0
  class11: false
  class12: false
  class13: false
  class14: false
  class15: false

# Initial PDU sessions to be established
sessions:
  - type: 'IPv4'
    apn: '[redacted]'
    slice:
      sst: 1
      sd: 1

# Configured NSSAI for this UE by HPLMN
configured-nssai:
  - sst: 1
    sd: 1

# Default Configured NSSAI for this UE
default-nssai:
  - sst: 1
    sd: 1

# Supported integrity algorithms by this UE
integrity:
  IA1: true
  IA2: true
  IA3: true

# Supported encryption algorithms by this UE
ciphering:
  EA1: true
  EA2: true
  EA3: true

# Integrity protection maximum data rate for user plane
integrityMaxRate:
  uplink: 'full'
  downlink: 'full'

Best regards,
Howard

Answered by howardswe499

Apr 17, 2024

Hi @linouxis9 ,

On main/4a486e4, both only NIA2/NEA2 true and all NIA/NEA true are now working.

NIA2/NEA2 PR Logs

INFO[0000] Selecting 10.246.112.18 for host 10.246.112.18 as AMF's IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N3/Data IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N2/Control IP address 
... 
INFO[0000] PacketRusher version 1.0.1                   
INFO[0000] ---------------------------------------      
INFO[0000] [TESTER] Starting test function: Testing an ue attached with configuration 
INFO[0000] [TESTER][UE] Number of UEs: 1                
INFO[0000] [TESTER][UE] disableTunnel is false        …

View full answer

linouxis9 · 2024-04-09T07:16:51Z

linouxis9
Apr 9, 2024
Maintainer

Hi @howardswe499,

Thanks a lot for your message. I've had private reports of the very same issue occuring with Nokia CMM, but I had not the time to investigate this issue.
There indeed must be something done by PacketRusher that is not cared about by other 5GC, but is not done by UERANSIM. The length field is indeed fishy.
nrCellIdentity has a 0 value because you used gnbid: "000000", you should change it.
Can you tell me the Integrity and Ciphering algorithms enabled in your AMF?
You may try to only have NIA2/NEA2 as true, some times it helps.
Are there any logs you could share from your AMF, notably if there were issues decoding the messages (and if it's more NGAP or NAS related)?

Thanks a lot!
Valentin

8 replies

linouxis9 Apr 14, 2024
Maintainer

Hi @howardswe499,

I hope you are doing well. The bug that happens when multiple NIA algorithms are set to true has been fixed in this PR: #113

Feel free to get back to me if you are still observing any issues!

Thanks and cheers,
Valentin

howardswe499 Apr 15, 2024
Author

Hi @linouxis9 ,

I've updated the branch to main/46f1706. Integrity/Ciphering Algorithm selection works as intended, and here are the config+logs I used to make it work.

Working PR config+logs

=================
=== PR Config ===
=================
gnodeb:
  controlif:
    ip: "192.168.98.192"
    port: 9487
  dataif:
    ip: "192.168.98.192"
    port: 2152
  plmnlist:
    mcc: "001"
    mnc: "01"
    tac: [redacted]
    gnbid: "000001"
  slicesupportlist:
    sst: "01"
    sd: "000001" # optional, can be removed if not used

ue:
  msin: "9000700042"
  key: [redacted]
  opc: [redacted]
  amf: [redacted]
  sqn: "00000000" #000000000029
  dnn: [redacted]
  routingindicator: "0000"
  hplmn:
    mcc: "001"
    mnc: "01"
  snssai:
    sst: 01
    sd: "000001" # optional, can be removed if not used
  integrity:
    nia0: true
    nia1: true
    nia2: true
    nia3: true
  ciphering:
    nea0: true
    nea1: true
    nea2: true
    nea3: true
amfif:
  - ip: "10.246.112.18"
    port: 38412
logs:
    level: 4

===============
=== PR Logs ===
===============
INFO[0000] Selecting 10.246.112.18 for host 10.246.112.18 as AMF's IP address 
INFO[0000] Selecting 192.168.98.192 for host 192.168.98.192 as gNodeB's N3/Data IP address 
INFO[0000] Selecting 192.168.98.192 for host 192.168.98.192 as gNodeB's N2/Control IP address 
...
INFO[0000] PacketRusher version 1.0.1                   
INFO[0000] ---------------------------------------      
INFO[0000] [TESTER] Starting test function: Testing an ue attached with configuration 
INFO[0000] [TESTER][UE] Number of UEs: 1                
INFO[0000] [TESTER][UE] disableTunnel is false          
INFO[0000] [TESTER][GNB] Control interface IP/Port: 192.168.98.192/9487~ 
INFO[0000] [TESTER][GNB] Data interface IP/Port: 192.168.98.192/2152 
INFO[0000] [TESTER][AMF] AMF IP/Port: 10.246.112.18/38412 
INFO[0000] ---------------------------------------      
INFO[0000] [GNB] SCTP/NGAP service is running           
INFO[0000] [GNB] Initiating NG Setup Request            
INFO[0000] [GNB][SCTP] Receive message in 0 stream      
INFO[0000] [GNB][NGAP] Receive NG Setup Response        
INFO[0000] [GNB][AMF] AMF Name: amf                     
INFO[0000] [GNB][AMF] State of AMF: Active              
INFO[0000] [GNB][AMF] Capacity of AMF: 25               
INFO[0000] [GNB][AMF] PLMNs Identities Supported by AMF -- mcc: 001 mnc:01 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000002 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:02 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:03 sd:000004 
INFO[0001] [TESTER] TESTING REGISTRATION USING IMSI 9000700042 UE 
INFO[0001] [GNB] Received incoming connection from new UE 
INFO[0001] [UE] Initiating Registration                 
INFO[0001] [UE] Switched from state 0 to state 1        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message without security header    
INFO[0001] [UE][NAS] Receive Authentication Request     
INFO[0001] [UE][NAS][MAC] Authenticity of the authentication request message: OK 
INFO[0001] [UE][NAS][SQN] SQN of the authentication request message: VALID 
INFO[0001] [UE][NAS] Send authentication response       
INFO[0001] [UE] Switched from state 1 to state 2        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and with NEW 5G NAS SECURITY CONTEXT 
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Security Mode Command      
INFO[0001] [UE][NAS] Type of ciphering algorithm is 5G-EA0 
INFO[0001] [UE][NAS] Type of integrity protection algorithm is 128-5G-IA2 
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Initial Context Setup Request 
INFO[0001] [GNB][UE] UE Context was created with successful 
INFO[0001] [GNB][UE] UE RAN ID 1                        
INFO[0001] [GNB][UE] UE AMF ID 4294967381               
INFO[0001] [GNB][UE] UE Mobility Restrict --Plmn-- Mcc: 001 Mnc: 01 
INFO[0001] [GNB][UE] UE Masked Imeisv:                  
INFO[0001] [GNB][UE] Allowed Nssai-- Sst: [01] Sd: [000001] 
INFO[0001] [GNB][NGAP][AMF] Send Initial Context Setup Response. 
INFO[0001] [GNB] Initiating Initial Context Setup Response 
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and ciphered 
INFO[0001] [UE][NAS] successful NAS CIPHERING           
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Registration Accept        
INFO[0001] [UE][NAS] UE 5G GUTI: &{119 11 [242 0 241 16 10 64 1 192 192 0 26]} 
INFO[0001] [GNB][NGAP] No PDU Session to set up in InitialContextSetupResponse. 
INFO[0001] [UE] Switched from state 2 to state 3        
INFO[0001] [UE] Initiating New PDU Session              
INFO[0001] [UE] Initiating New PDU Session              
INFO[0002] [GNB][SCTP] Receive message in 1 stream      
INFO[0002] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0002] [UE][NAS] Message with security header       
INFO[0002] [UE][NAS] Message with integrity and ciphered 
INFO[0002] [UE][NAS] successful NAS CIPHERING           
INFO[0002] [UE][NAS] successful NAS MAC verification    
INFO[0002] [UE][NAS] Receive Configuration Update Command 
INFO[0002] [UE] Initiating Configuration Update Complete 
INFO[0002] [GNB][SCTP] Receive message in 1 stream      
INFO[0002] [GNB][NGAP] Receive PDU Session Resource Setup Request 
INFO[0002] [GNB][NGAP][UE] PDU Session was created with successful. 
INFO[0002] [GNB][NGAP][UE] PDU Session Id: 1            
INFO[0002] [GNB][NGAP][UE] NSSAI Selected --- sst: NSSAI was not selected sd: NSSAI was not selected 
INFO[0002] [GNB][NGAP][UE] PDU Session Type: ipv4       
INFO[0002] [GNB][NGAP][UE] QOS Flow Identifier: 5       
INFO[0002] [GNB][NGAP][UE] Uplink Teid: 1074397493      
INFO[0002] [GNB][NGAP][UE] Downlink Teid: 1             
INFO[0002] [GNB][NGAP][UE] Non-Dynamic-5QI: 9           
INFO[0002] [GNB][NGAP][UE] Priority Level ARP: 9        
INFO[0002] [GNB][NGAP][UE] UPF Address: 10.246.112.1 :2152 
INFO[0002] [GNB] Initiating PDU Session Resource Setup Response 
INFO[0002] [UE][NAS] Message with security header       
INFO[0002] [UE][NAS] Message with integrity and ciphered 
INFO[0002] [UE][NAS] successful NAS CIPHERING           
INFO[0002] [UE][NAS] successful NAS MAC verification    
INFO[0002] [UE][NAS] Receive DL NAS Transport           
INFO[0002] [UE][NAS] Receiving PDU Session Establishment Accept 
INFO[0002] [UE][NAS] PDU session QoS RULES: [1 0 6 49 49 1 1 254 5] 
INFO[0002] [UE][NAS] PDU session DNN: [redacted]           
INFO[0002] [UE][NAS] PDU session NSSAI -- sst: 1 sd: 001 
INFO[0002] [UE][NAS] PDU address received: 10.246.115.2 
INFO[0003] [UE][GTP] Interface val9000700042 has successfully been configured for UE 10.246.115.2 
INFO[0003] [UE][GTP] You can do traffic for this UE using VRF vrf9000700042, eg: 
INFO[0003] [UE][GTP] sudo ip vrf exec vrf9000700042 iperf3 -c IPERF_SERVER -p PORT -t 9000

But there are a few issues:

Ciphering of NEA0 and Integrity of at least NIA1 must be true for it to work.

That means only NIA2/NEA2 true no longer works, and returns the following errors:

Error PR Logs

===============
=== PR Logs ===
===============
INFO[0000] Selecting 10.246.112.18 for host 10.246.112.18 as AMF's IP address 
INFO[0000] Selecting 192.168.98.192 for host 192.168.98.192 as gNodeB's N3/Data IP address 
INFO[0000] Selecting 192.168.98.192 for host 192.168.98.192 as gNodeB's N2/Control IP address 
...
INFO[0000] PacketRusher version 1.0.1                   
INFO[0000] ---------------------------------------      
INFO[0000] [TESTER] Starting test function: Testing an ue attached with configuration 
INFO[0000] [TESTER][UE] Number of UEs: 1                
INFO[0000] [TESTER][UE] disableTunnel is false          
INFO[0000] [TESTER][GNB] Control interface IP/Port: 192.168.98.192/9487~ 
INFO[0000] [TESTER][GNB] Data interface IP/Port: 192.168.98.192/2152 
INFO[0000] [TESTER][AMF] AMF IP/Port: 10.246.112.18/38412 
INFO[0000] ---------------------------------------      
INFO[0000] [GNB] SCTP/NGAP service is running           
INFO[0000] [GNB] Initiating NG Setup Request            
INFO[0000] [GNB][SCTP] Receive message in 0 stream      
INFO[0000] [GNB][NGAP] Receive NG Setup Response        
INFO[0000] [GNB][AMF] AMF Name: amf                     
INFO[0000] [GNB][AMF] State of AMF: Active              
INFO[0000] [GNB][AMF] Capacity of AMF: 25               
INFO[0000] [GNB][AMF] PLMNs Identities Supported by AMF -- mcc: 001 mnc:01 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000002 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:02 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:03 sd:000004 
INFO[0001] [TESTER] TESTING REGISTRATION USING IMSI 9000700042 UE 
INFO[0001] [GNB] Received incoming connection from new UE 
INFO[0001] [UE] Initiating Registration                 
INFO[0001] [UE] Switched from state 0 to state 1        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message without security header    
INFO[0001] [UE][NAS] Receive Authentication Request     
INFO[0001] [UE][NAS][MAC] Authenticity of the authentication request message: OK 
INFO[0001] [UE][NAS][SQN] SQN of the authentication request message: VALID 
INFO[0001] [UE][NAS] Send authentication response       
INFO[0001] [UE] Switched from state 1 to state 2        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and with NEW 5G NAS SECURITY CONTEXT 
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Security Mode Command      
INFO[0001] [UE][NAS] Type of ciphering algorithm is 128-5G-EA2 
INFO[0001] [UE][NAS] Type of integrity protection algorithm is 128-5G-IA2 
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Initial Context Setup Request 
INFO[0001] [GNB][UE] UE Context was created with successful 
INFO[0001] [GNB][UE] UE RAN ID 1                        
INFO[0001] [GNB][UE] UE AMF ID 4294967388               
INFO[0001] [GNB][UE] UE Mobility Restrict --Plmn-- Mcc: 001 Mnc: 01 
INFO[0001] [GNB][UE] UE Masked Imeisv:                  
INFO[0001] [GNB][UE] Allowed Nssai-- Sst: [01] Sd: [000001] 
INFO[0001] [GNB][NGAP][AMF] Send Initial Context Setup Response. 
INFO[0001] [GNB] Initiating Initial Context Setup Response 
INFO[0001] [GNB][NGAP] No PDU Session to set up in InitialContextSetupResponse. 
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and ciphered 
INFO[0001] [UE][NAS] successful NAS CIPHERING           
ERRO[0001] [UE][NAS] NAS MAC verification failed(received:[110 166 174 48]expected:[165 22 136 187] 
INFO[0007] [GNB][SCTP] Receive message in 1 stream      
INFO[0007] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0007] [UE][NAS] Message with security header       
INFO[0007] [UE][NAS] Message with integrity and ciphered 
INFO[0007] [UE][NAS] successful NAS CIPHERING           
ERRO[0007] [UE][NAS] NAS MAC verification failed(received:[44 180 254 39]expected:[132 47 184 17] 
^CINFO[0008] [UE] Terminating UE as requested             
INFO[0008] [UE] UE Terminated                           
INFO[0008] [UE] Switched from state 2 to state 0

I dug deeper into the pcap, but I didn't find anything unusual up until after the first DownlinkNASTransport packet from CMU after InitialContextSetupResponse , after which the UE seems to be stuck.

Contents of DownlinkNASTransport packet

2. amfif config now requires a new format, otherwise will return:

FATA[0000] Could not unmarshal yaml config at "/home/user/PacketRusher/config/config.yml". yaml: unmarshal errors: line 43: cannot unmarshal !!map into []*config.AMF

=== Old === 
amfif:
  ip: "10.246.112.18"
  port: 38412

=== New === 
amfif:
  - ip: "10.246.112.18"
    port: 38412

Let me know if you need further testing.

BR
Howard

linouxis9 Apr 16, 2024
Maintainer

Hi @howardswe499,

Thanks a lot! Fix for this issue has been merged in main.
Thanks a lot for your testing!

Cheers,
Valentin

howardswe499 Apr 17, 2024
Author

Hi @linouxis9 ,

On main/4a486e4, both only NIA2/NEA2 true and all NIA/NEA true are now working.

NIA2/NEA2 PR Logs

INFO[0000] Selecting 10.246.112.18 for host 10.246.112.18 as AMF's IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N3/Data IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N2/Control IP address 
... 
INFO[0000] PacketRusher version 1.0.1                   
INFO[0000] ---------------------------------------      
INFO[0000] [TESTER] Starting test function: Testing an ue attached with configuration 
INFO[0000] [TESTER][UE] Number of UEs: 1                
INFO[0000] [TESTER][UE] disableTunnel is false          
INFO[0000] [TESTER][GNB] Control interface IP/Port: 192.168.102.54/9487~ 
INFO[0000] [TESTER][GNB] Data interface IP/Port: 192.168.102.54/2152 
INFO[0000] [TESTER][AMF] AMF IP/Port: 10.246.112.18/38412 
INFO[0000] ---------------------------------------      
INFO[0000] [GNB] SCTP/NGAP service is running           
INFO[0000] [GNB] Initiating NG Setup Request            
INFO[0000] [GNB][SCTP] Receive message in 0 stream      
INFO[0000] [GNB][NGAP] Receive NG Setup Response        
INFO[0000] [GNB][AMF] AMF Name: amf                     
INFO[0000] [GNB][AMF] State of AMF: Active              
INFO[0000] [GNB][AMF] Capacity of AMF: 25               
INFO[0000] [GNB][AMF] PLMNs Identities Supported by AMF -- mcc: 001 mnc:01 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000002 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:02 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:03 sd:000004 
INFO[0001] [TESTER] TESTING REGISTRATION USING IMSI 9000700042 UE 
INFO[0001] [GNB] Received incoming connection from new UE 
INFO[0001] [UE] Initiating Registration                 
INFO[0001] [UE] Switched from state 0 to state 1        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message without security header    
INFO[0001] [UE][NAS] Receive Authentication Request     
INFO[0001] [UE][NAS][MAC] Authenticity of the authentication request message: OK 
INFO[0001] [UE][NAS][SQN] SQN of the authentication request message: VALID 
INFO[0001] [UE][NAS] Send authentication response       
INFO[0001] [UE] Switched from state 1 to state 2        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and with NEW 5G NAS SECURITY CONTEXT 
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Security Mode Command      
INFO[0001] [UE][NAS] Type of ciphering algorithm is 128-5G-EA2 
INFO[0001] [UE][NAS] Type of integrity protection algorithm is 128-5G-IA2 
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Initial Context Setup Request 
INFO[0001] [GNB][UE] UE Context was created with successful 
INFO[0001] [GNB][UE] UE RAN ID 1                        
INFO[0001] [GNB][UE] UE AMF ID 4294967455               
INFO[0001] [GNB][UE] UE Mobility Restrict --Plmn-- Mcc: 001 Mnc: 01 
INFO[0001] [GNB][UE] UE Masked Imeisv:                  
INFO[0001] [GNB][UE] Allowed Nssai-- Sst: [01] Sd: [000001] 
INFO[0001] [GNB][NGAP][AMF] Send Initial Context Setup Response. 
INFO[0001] [GNB] Initiating Initial Context Setup Response 
INFO[0001] [GNB][NGAP] No PDU Session to set up in InitialContextSetupResponse. 
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and ciphered 
INFO[0001] [UE][NAS] successful NAS CIPHERING           
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Registration Accept        
INFO[0001] [UE][NAS] UE 5G GUTI: &{119 11 [242 0 241 16 10 64 1 192 192 0 46]} 
INFO[0001] [UE] Switched from state 2 to state 3        
INFO[0001] [UE] Initiating New PDU Session              
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and ciphered 
INFO[0001] [UE][NAS] successful NAS CIPHERING           
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Configuration Update Command 
INFO[0001] [UE] Initiating Configuration Update Complete 
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive PDU Session Resource Setup Request 
INFO[0001] [GNB][NGAP][UE] PDU Session was created with successful. 
INFO[0001] [GNB][NGAP][UE] PDU Session Id: 1            
INFO[0001] [GNB][NGAP][UE] NSSAI Selected --- sst: NSSAI was not selected sd: NSSAI was not selected 
INFO[0001] [GNB][NGAP][UE] PDU Session Type: ipv4       
INFO[0001] [GNB][NGAP][UE] QOS Flow Identifier: 5       
INFO[0001] [GNB][NGAP][UE] Uplink Teid: 1074987317      
INFO[0001] [GNB][NGAP][UE] Downlink Teid: 1             
INFO[0001] [GNB][NGAP][UE] Non-Dynamic-5QI: 9           
INFO[0001] [GNB][NGAP][UE] Priority Level ARP: 9        
INFO[0001] [GNB][NGAP][UE] UPF Address: 10.246.112.1 :2152 
INFO[0001] [GNB] Initiating PDU Session Resource Setup Response 
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and ciphered 
INFO[0001] [UE][NAS] successful NAS CIPHERING           
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive DL NAS Transport           
INFO[0001] [UE][NAS] Receiving PDU Session Establishment Accept 
INFO[0001] [UE][NAS] PDU session QoS RULES: [1 0 6 49 49 1 1 254 5] 
INFO[0001] [UE][NAS] PDU session DNN:  [redacted]           
INFO[0001] [UE][NAS] PDU session NSSAI -- sst: 1 sd: 001 
INFO[0001] [UE][NAS] PDU address received: 10.246.115.12 
INFO[0002] [UE][GTP] Interface val9000700042 has successfully been configured for UE 10.246.115.12 
INFO[0002] [UE][GTP] You can do traffic for this UE using VRF vrf9000700042, eg: 
INFO[0002] [UE][GTP] sudo ip vrf exec vrf9000700042 iperf3 -c IPERF_SERVER -p PORT -t 9000

NIA/NEA all true PR Logs

INFO[0000] Selecting 10.246.112.18 for host 10.246.112.18 as AMF's IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N3/Data IP address 
INFO[0000] Selecting 192.168.102.54 for host 192.168.102.54 as gNodeB's N2/Control IP address 
...
INFO[0000] PacketRusher version 1.0.1                   
INFO[0000] ---------------------------------------      
INFO[0000] [TESTER] Starting test function: Testing an ue attached with configuration 
INFO[0000] [TESTER][UE] Number of UEs: 1                
INFO[0000] [TESTER][UE] disableTunnel is false          
INFO[0000] [TESTER][GNB] Control interface IP/Port: 192.168.102.54/9487~ 
INFO[0000] [TESTER][GNB] Data interface IP/Port: 192.168.102.54/2152 
INFO[0000] [TESTER][AMF] AMF IP/Port: 10.246.112.18/38412 
INFO[0000] ---------------------------------------      
INFO[0000] [GNB] SCTP/NGAP service is running           
INFO[0000] [GNB] Initiating NG Setup Request            
INFO[0000] [GNB][SCTP] Receive message in 0 stream      
INFO[0000] [GNB][NGAP] Receive NG Setup Response        
INFO[0000] [GNB][AMF] AMF Name: amf                     
INFO[0000] [GNB][AMF] State of AMF: Active              
INFO[0000] [GNB][AMF] Capacity of AMF: 25               
INFO[0000] [GNB][AMF] PLMNs Identities Supported by AMF -- mcc: 001 mnc:01 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:01 sd:000002 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:02 sd:000001 
INFO[0000] [GNB][AMF] List of AMF slices Supported by AMF -- sst:03 sd:000004 
INFO[0001] [TESTER] TESTING REGISTRATION USING IMSI 9000700042 UE 
INFO[0001] [GNB] Received incoming connection from new UE 
INFO[0001] [UE] Initiating Registration                 
INFO[0001] [UE] Switched from state 0 to state 1        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message without security header    
INFO[0001] [UE][NAS] Receive Authentication Request     
INFO[0001] [UE][NAS][MAC] Authenticity of the authentication request message: OK 
INFO[0001] [UE][NAS][SQN] SQN of the authentication request message: VALID 
INFO[0001] [UE][NAS] Send authentication response       
INFO[0001] [UE] Switched from state 1 to state 2        
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and with NEW 5G NAS SECURITY CONTEXT 
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Security Mode Command      
INFO[0001] [UE][NAS] Type of ciphering algorithm is 5G-EA0 
INFO[0001] [UE][NAS] Type of integrity protection algorithm is 128-5G-IA2 
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Initial Context Setup Request 
INFO[0001] [GNB][UE] UE Context was created with successful 
INFO[0001] [GNB][UE] UE RAN ID 1                        
INFO[0001] [GNB][UE] UE AMF ID 4294967460               
INFO[0001] [GNB][UE] UE Mobility Restrict --Plmn-- Mcc: 001 Mnc: 01 
INFO[0001] [GNB][UE] UE Masked Imeisv:                  
INFO[0001] [GNB][UE] Allowed Nssai-- Sst: [01] Sd: [000001] 
INFO[0001] [GNB][NGAP][AMF] Send Initial Context Setup Response. 
INFO[0001] [GNB] Initiating Initial Context Setup Response 
INFO[0001] [GNB][NGAP] No PDU Session to set up in InitialContextSetupResponse. 
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and ciphered 
INFO[0001] [UE][NAS] successful NAS CIPHERING           
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Registration Accept        
INFO[0001] [UE][NAS] UE 5G GUTI: &{119 11 [242 0 241 16 10 64 1 192 192 0 47]} 
INFO[0001] [UE] Switched from state 2 to state 3        
INFO[0001] [UE] Initiating New PDU Session              
INFO[0001] [GNB][SCTP] Receive message in 1 stream      
INFO[0001] [GNB][NGAP] Receive Downlink NAS Transport   
INFO[0001] [UE][NAS] Message with security header       
INFO[0001] [UE][NAS] Message with integrity and ciphered 
INFO[0001] [UE][NAS] successful NAS CIPHERING           
INFO[0001] [UE][NAS] successful NAS MAC verification    
INFO[0001] [UE][NAS] Receive Configuration Update Command 
INFO[0001] [UE] Initiating Configuration Update Complete 
INFO[0002] [GNB][SCTP] Receive message in 1 stream      
INFO[0002] [GNB][NGAP] Receive PDU Session Resource Setup Request 
INFO[0002] [GNB][NGAP][UE] PDU Session was created with successful. 
INFO[0002] [GNB][NGAP][UE] PDU Session Id: 1            
INFO[0002] [GNB][NGAP][UE] NSSAI Selected --- sst: NSSAI was not selected sd: NSSAI was not selected 
INFO[0002] [GNB][NGAP][UE] PDU Session Type: ipv4       
INFO[0002] [GNB][NGAP][UE] QOS Flow Identifier: 5       
INFO[0002] [GNB][NGAP][UE] Uplink Teid: 1074594069      
INFO[0002] [GNB][NGAP][UE] Downlink Teid: 1             
INFO[0002] [GNB][NGAP][UE] Non-Dynamic-5QI: 9           
INFO[0002] [GNB][NGAP][UE] Priority Level ARP: 9        
INFO[0002] [GNB][NGAP][UE] UPF Address: 10.246.112.1 :2152 
INFO[0002] [GNB] Initiating PDU Session Resource Setup Response 
INFO[0002] [UE][NAS] Message with security header       
INFO[0002] [UE][NAS] Message with integrity and ciphered 
INFO[0002] [UE][NAS] successful NAS CIPHERING           
INFO[0002] [UE][NAS] successful NAS MAC verification    
INFO[0002] [UE][NAS] Receive DL NAS Transport           
INFO[0002] [UE][NAS] Receiving PDU Session Establishment Accept 
INFO[0002] [UE][NAS] PDU session QoS RULES: [1 0 6 49 49 1 1 254 5] 
INFO[0002] [UE][NAS] PDU session DNN: [redacted]         
INFO[0002] [UE][NAS] PDU session NSSAI -- sst: 1 sd: 001 
INFO[0002] [UE][NAS] PDU address received: 10.246.115.13 
INFO[0003] [UE][GTP] Interface val9000700042 has successfully been configured for UE 10.246.115.13 
INFO[0003] [UE][GTP] You can do traffic for this UE using VRF vrf9000700042, eg: 
INFO[0003] [UE][GTP] sudo ip vrf exec vrf9000700042 iperf3 -c IPERF_SERVER -p PORT -t 9000

Thank you for your work.

Howard

Answer selected by linouxis9

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Integration with Nokia CMU #110

{{title}}

Replies: 1 comment 8 replies

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Select a reply

Integration with Nokia CMU #110

howardswe499 Apr 9, 2024

Replies: 1 comment · 8 replies

linouxis9 Apr 9, 2024 Maintainer

linouxis9 Apr 14, 2024 Maintainer

howardswe499 Apr 15, 2024 Author

linouxis9 Apr 16, 2024 Maintainer

howardswe499 Apr 17, 2024 Author

howardswe499
Apr 9, 2024

Replies: 1 comment 8 replies

linouxis9
Apr 9, 2024
Maintainer

linouxis9 Apr 14, 2024
Maintainer

howardswe499 Apr 15, 2024
Author

linouxis9 Apr 16, 2024
Maintainer

howardswe499 Apr 17, 2024
Author