5G Subscription

22.05.2020







There are 2 elements (visible for the end user) for 5G Subscription:

1. In order to have access to 5G, the SIM card has to have a 5G subscription (profile) in the HSS.
The core network restricts the 5G using RestrictDCNR flag. See: https://volteromania.blogspot.com/p/restrictdcnr.html .

2. Additionally higher speed profiles are configured for 5G: Extended max bit rate UL/DL


Check if your SIM has 5G profile using a Qualcomm based rooted phone with Network Signal Guru.

0. Better disable VoLTE to have a lower amount of messages
1. filter only the NAS messages, see screenshot below
2. You must test with a 5G Phone (that signalizes to the network in Attach Request - see at the end of this page -  message that it supports 5G). While you are under 4G (or 5G) coverage, launch NSG properly
3. Exit NSG
4. Put the phone in Flight Mode
5. Launch NSG
6. Flight Mode OFF
7. Go to Signalling Window

8. Attach Request message should contain the 5G algorithms, scroll down to the end of the message, see clip below . If these elements are not present, your phone doesn't support 5G or doesn't have the 5G settings for your operator.
 
(8;
Restrict from MME to eNodeB
"If ULA is received with "Access-Restriction" carrying "NR as Secondary RAT Not Allowed", MME sends the Initial Context Setup Request message with "NR Restriction" bit set in Handover Restriction List ")

9. Look for Attach Accept message, open this message, scroll down to the end; if RestrictDCNR is present and is 1, under EPS network feature suport, the SIM doesn't have 5G profile. If RestrictDCNR  is not present at all, you have access to 5G. See clip below for a SIM that doesn't have 5G Profile.











ROMANIAN OPERATORS EXAMPLES:


Digi Mobil


First check the 5G status on digiromania.ro account:



5G Restricted Prepaid SIM card: RestrictedDCNR=1 and 200/50Mbps profile.



SIM Postpaid card with 5G profile: RestrictedDCNR not present and 1000/500Mbps profile




SIM Postpaid card with 5G profile: RestrictedDCNR not present and wrong speed profile 200/50 vs 1000/500




Vodafone Romania

5G Restricted Prepaid SIM card: RestrictedDCNR=1 and 300/100Mbps profile.
(MMECode 48)



SIM Prepaid card with 5G not restricted: RestrictedDCNR not present and 300/100Mbps profile . VDF RO has 3MMEs with MME Codes: 8, 22, 48. MME 8 sometimes, doesn't check the 5G Profile for prepaid subscribers with the HSS  or it has a bug; finally it allows 5G to everybody. The other MMEs restrict 5G for Prepaid.
20.05. issue still there



SIM Postpaid card with 5G profile and  610/50Mbps






Orange Romania

5G Restricted Postpaid SIM card: RestrictedDCNR=1 and 500/100Mbps profile.



SIM Postpaid card with 5G profile and 1000/400Mbps









Attach Request sent by Xiaomi Mi Mix3 5G in a 4G area :

Note the 5G elements marked below:
  • UE Network Capability: DCNR : supported ; ((DCNR = Dual Connectivity with NR))
  • MS Network Capability: Dual connectivity of E-UTRA with NR capability : 1     (E-UTRA = LTE), and the
  • UE additional security capability: 5G algorithms(ciphering and integrity) supported by the phone


LTE NAS EMM plain OTA outgoing msg
  Version : 1
  NAS Version Release : 9
  NAS Version Major : 5
  NAS Version Minor : 0
  Direction : UE to Network
  Security header or skip ind : 0
  Protocol Discriminator : 7
  Message ID : 65 (0x41)
  Attach Request
    neKSI
      Type of security context flag (TSC) : native security context
      NAS KSI : 1
    EPS attach type
      EPS attach type value : Combined EPS/IMSI attach

    EPS Mobile Identity
      Length : 11
      Type of identity : 6
      Odd Even Ind : Even
      MCC : 226
      MNC : 5

      MME Group ID : 32769
      MME Code : 8
      M-TMSI : 3516986786
    UE Network Capability
      Length : 7
      EEA0 : supported
      128-EEA1 : supported
      128-EEA2 : supported
      128-EEA3 : supported
      EEA4 : not supported
      EEA5 : not supported
      EEA6 : not supported
      EEA7 : not supported
      EIA0 : not supported
      128-EIA1 : supported
      128-EIA2 : supported
      128-EIA3 : supported
      EIA4 : not supported
      EIA5 : not supported
      EIA6 : not supported
      EIA7 : not supported
      UEA0 : supported
      UEA1 : supported
      UEA2 : not supported
      UEA3 : not supported
      UEA4 : not supported
      UEA5 : not supported
      UEA6 : not supported
      UEA7 : not supported
      USC2 : not supported
      UIA1 : supported
      UIA2 : not supported
      UIA3 : not supported
      UIA4 : not supported
      UIA5 : not supported
      UIA6 : not supported
      UIA7 : not supported
      ProSe-dd : not supported
      ProSe : not supported
      H.245-ASH : not supported
      ACC-CSFB : supported
      LPP : supported
      LCS : not supported
      1xSR VCC : not supported
      NF : supported
      ePCO : not supported
      HC-CP CIoT : not supported
      ERw/oPDN : not supported
      S1-U data : not supported
      UP CIoT : not supported
      CP CIoT : not supported
      Prose-relay : not supported
      ProSe-dc : not supported
      15 bearers : not supported
      SGC : not supported
      N1mode : not supported
      DCNR : supported
      CP backoff : not supported
      RestrictEC : not supported
      V2X PC5 : not supported
      multipleDRB : not supported

  
ESM Message Container
      Length : 45
      Direction : UE to Network
      EPS bearer identity : 0
      Protocol Discriminator : 2
      Procedure transaction identity : 11
      Message ID : 208 (0xD0)
      PDN Connectivity Request
        PDN type
          PDN type value : IPv4v6
        Request type
          Request type value : initial request
        ESM information transfer flag
          IEI : 13 (0xD)
          EIT (ESM information transfer) : required
        Protocol Configuration Options
          IEI : 39 (0x27)
          Length : 38
          Ext : 1
          Configuration Protocol : PPP for use with IP PDP type
          Protocol
            Protocol Id : 32801
            Internet Protocol Control Protocol
              Code : 1
              Identifier : 0
              Length Of IPCP : 16
              IPCP Configuration Options[0]
                Option : 129
                Length Of Config : 6
                Config
                  Primary DNS Server
                    ipv4 : 0.0.0.0
              IPCP Configuration Options[1]
                Option : 131
                Length Of Config : 6
                Config
                  Secondary DNS Server
                    ipv4 : 0.0.0.0
          Protocol ID - Null Info : 13
          Protocol ID - Null Info : 3
          Protocol ID - Null Info : 10
          Protocol ID - Null Info : 5
          Protocol ID - Null Info : 16
          Protocol ID - Null Info : 17
    Last visited registered TAI
      IEI : 82 (0x52)
      MCC : 226
      MNC : 5
      TAC : 7002
    DRX Parameter
      IEI : 92 (0x5C)
      Split PG Cycle Code : 10
      CN Specific DRX Cycle Length Coefficient : CN Specific DRX cycle length coefficient not specified by the MS
      Split on CCCH : Split pg cycle on CCCH is not supported by the mobile station
      Non DRX Timer : no non-DRX mode after transfer state
    MS Network Capability
      IEI : 49 (0x31)
      Length : 4
      GEA/1 : encryption algorithm GEA/1 available
      SM Capabilities Via Dedicated Channels : Mobile station supports mobile terminated point to point SMS via dedicated signalling channels
      SM Capabilities Via GPRS Channels : Mobile station supports mobile terminated point to point SMS via GPRS packet data channels
      USC2 Support : the ME has preference for the default alphabet over UCS2
      SS Screening Indicator : defined in 3GPP TS 24.080
      SoLSA : The ME does not support SoLSA
      Revision Level Indicator : used by a mobile station supporting R99 or later version of the protocol
      PFC Feature Mode : Mobile station does support BSS packet flow procedures
      GEA/2 : encryption algorithm GEA/2 available
      GEA/3 : encryption algorithm GEA/3 available
      GEA/4 : encryption algorithm GEA/4 not available
      GEA/5 : encryption algorithm GEA/5 not available
      GEA/6 : encryption algorithm GEA/6 not available
      GEA/7 : encryption algorithm GEA/7 not available
      LCS VA Capability : LCS value added location request notification capability not supported
      PS inter-RAT HO from GERAN to UTRAN Iu mode capability : 0
      PS inter-RAT HO from GERAN to E-UTRAN S1 mode capability : 0
      EMM Combined procedures Capability : 1
      ISR support : 1
      SRVCC to GERAN/UTRAN capability : 1
      EPC capability : 1
      NF capability : 1
      GERAN network sharing capability : 0
      User plane integrity protection support : 0
      GIA/4 : 0
      GIA/5 : 0
      GIA/6 : 0
      GIA/7 : 0
      ePCO IE indicator : 0
      Restriction on use of enhanced coverage capability : 0
      Dual connectivity of E-UTRA with NR capability : 1
    Location Area Identification
      IEI : 19 (0x13)
      MCC : 226
      MNC : 5
      LAC : 7002
    Mobile Station Classmark 2
      IEI : 17 (0x11)
      Length : 3
      Revision Level : Used by mobile stations supporting this version of the protocol
      ES IND : Controlled Early Classmark Sending option is implemented in the MS
      A5/1 : encryption algorithm A5/1 available
      RF power capability : UnKnOwN
      PS Capability : PS capability present
      SS Screening Indicator : defined in 3GPP TS 24.080
      SM Capability : Mobile station supports mobile terminated point to point SMS
      VBS : no VBS capability or no notifications wanted
      VGCS : no VGCS capability or no notifications wanted
      FC : Reserved for future use (for definition of frequency bands see GSM 05.05)
      CM3 : The MS supports options that are indicated in classmark 3 IE
      LCSVA CAP : LCS value added location request notification capability supported
      UCS2 Treatment : the ME has a preference for the default alphabel (defined in GSM 03.38) over UCS2.
      SoLSA : The ME does not support SoLSA.
      CMSP : Network initiated MO CM connection request supported for at least one CM protocol.
      A5/3 : encryption algorithm A5/3 available
      A5/2 : encryption algorithm A5/2 not available
    Mobile Station Classmark 3
      IEI : 32 (0x20)
      Length : 13
      Multiband Supported : 6
      A5/4 : encryption algorithm A5/4 not available
      A5/5 : encryption algorithm A5/5 not available
      A5/6 : encryption algorithm A5/6 not available
      A5/7 : encryption algorithm A5/7 not available
      Associated Radio Capability 2 : 1
      Associated Radio Capability 1 : 4
      USC2 Treatment : the ME has a preference for the default alphabet over UCS2
      Extended Measurement Capability : the MS does not support Extended Measurements
      MS Positioning Method Capability : 7
      ECSD Struct
        Modulation Capability : 8-PSK supported for uplink transmission and downlink reception
        EDGE RF Power Capability 1 : Power Class E2
        EDGE RF Power Capability 2 : Power Class E2
      GSM 850 Associated Radio Capability : 4
      PCS 1900 Associated Radio Capability : 1
      UMTS FDD Radio Access Technology Capability : UMTS FDD supported
      UMTS 3.84 Mcps TDD Radio Access Technology Capability : UMTS 3.84 Mcps TDD not supported
      CDMA 2000 Radio Access Technology Capability : CDMA2000 not supported
      DTM GPRS Multi Slot Class : Reserved for future extension If received the network shall interpret this as 00
      Single Slot DTM : 0
      DTM EGPRS Multi Slot Class : 3
      UMTS 1.28 Mcps TDD Radio Access Technology Capability : 0
      GERAN Feature Package 1 : 1
      GERAN Feature Package 2 : 0
      GMSK Multislot Power Profile : 0
      8-PSK Multislot Power Profile : 0
      Downlink Advanced Receiver Performance : 1
      DTM Enhancements Capability : 1
      Repeated ACCH Capability : 1
      Ciphering Mode Setting Capability : 1
      Additional Positioning Capabilities : 0
      E-UTRA FDD support : 1
      E-UTRA TDD support : 1
      E-UTRA Measurement and Reporting support : 1
      Priority-based reselection support : 1
      UTRA CSG Cells Reporting : 0
      VAMOS Level : 1
      TIGHTER Capability : 1
      Selective Ciphering of Downlink SACCH : 0
      CS to PS SRVCC from GERAN to UTRA : 0
      CS to PS SRVCC from GERAN to E-UTRA : 0
      GERAN Network Sharing support : 0
      E-UTRA Wideband RSRQ measurements support : 0
      ER Band Support : 0
      UTRA Multiple Frequency Band Indicators support : 0
      E-UTRA Multiple Frequency Band Indicators suppor : 0
      Extended TSC Set Capability support : 0
      Extended EARFCN value range : 0
    Supported Codecs
      IEI : 64 (0x40)
      Length : 8
      Codec[0]
        System Identification : 4
        Length Of Sysid : 2
        TDMA EFR : not supported
        UMTS AMR2 : supported
        UMTS AMR : supported
        HR AMR : not supported
        FR AMR : not supported
        GSM EFR : not supported
        GSM HR : not supported
        GSM FR : not supported
        UMTS EVS : not supported
        OHR AMR-WB : not supported
        OFR AMR-WB : not supported
        OHR AMR : not supported
        UMTS AMR-WB : supported
        FR AMR-WB : not supported
        PDC EFR : not supported
      Codec[1]
        System Identification : 0
        Length Of Sysid : 2
        TDMA EFR : not supported
        UMTS AMR2 : not supported
        UMTS AMR : not supported
        HR AMR : supported
        FR AMR : supported
        GSM EFR : supported
        GSM HR : supported
        GSM FR : supported
        UMTS EVS : not supported
        OHR AMR-WB : not supported
        OFR AMR-WB : not supported
        OHR AMR : not supported
        UMTS AMR-WB : not supported
        FR AMR-WB : supported
        PDC EFR : not supported
    Voice domain preference and UE's usage setting
      IEI : 93 (0x5D)
      Length : 1
      UE's usage setting : Voice centric
      Voice domain preference for E-UTRAN : IMS PS voice preferred, CS Voice as secondary
    Old GUTI type
      IEI : 14 (0xE)
      GUTI Type : Native GUTI
    MS Network Feature Support
      IEI : 12 (0xC)
      extended periodic timers support : supports
    TMSI based NRI container
      IEI : 16 (0x10)
      Length : 2
      NRI container value : 104
    UE additional security capability
      IEI : 111 (0x6F)
      Length : 4
      5G-EA0 : supported
      128-5G-EA1 : supported
      128-5G-EA2 : supported
      128-5G-EA3 : supported
      5G-EA4 : not supported
      5G-EA5 : not supported
      5G-EA6 : not supported
      5G-EA7 : not supported
      5G-EA8 : 0
      5G-EA9 : not supported
      5G-EA10 : not supported
      5G-EA11 : not supported
      5G-EA12 : not supported
      5G-EA13 : not supported
      5G-EA14 : not supported
      5G-EA15 : not supported
      5G-IA0 : not supported
      128-5G-IA1 : supported
      128-5G-IA2 : supported
      128-5G-IA3 : supported
      5G-IA4 : not supported
      5G-IA5 : not supported
      5G-IA6 : not supported
      5G-IA7 : not supported
      5G-IA8 : not supported
      5G-IA9 : not supported
      5G-IA10 : not supported
      5G-IA11 : not supported
      5G-IA12 : not supported
      5G-IA13 : not supported
      5G-IA14 : not supported
      5G-IA15 : not supported





No comments:

Post a Comment

Romanian Operators Sites and core vendors

 Orange  Bucharest  Cluj Vodafone Bucharest Cluj Digi Mobil  Bucharest Iasi Timisoara