List of Known Working Third Party UEs

[jtplatt99]

Hello All!

I thought it would be valuable for the user-community and developers to put together a list of known UE devices that have been tested with srsRAN and share any information about getting them to work.

So far, I've had success connecting the following UEs:

• OnePlus 9 Pro (LE2125)
• Quectel RM510Q-GL
• Amarisoft AMARI UE Simbox

I've been using a USRP N320 as my radio at n78 at 20 MHz bandwidth with 30 kHz subcarrier spacing. I'm using an Open5GS core. Here is my full configuration file: gnb_rf_n320_tdd_n78_20mhz.zip.

One question for the community and developers: is anyone else using an Amarisoft AMARI UE Simbox? With our current configuration the UE Simbox is experiencing >90% bit-error rate and only a few kbps on iperf3 while our other UEs easily get >6 Mbps on iperf3. If anyone else out there is using an Amarisoft AMARI UE Simbox with srsRAN, I'm hoping to compare set ups and throughput numbers.

[gustavobsch]

I've had success connecting the following UEs:

OnePlus nord 10 BE2029

No sucess with

Galaxy A22

[ismagom]

Try combining SIM cards and PLMNs. For instance with the OnePlus Nord we've seen the following combination to work:

• IMSI starting with 00101... and network PLMN 90170

Any other IMSI or PLMN combination doesn't seem to work

[ankuramistry]

Hi @ismagom @jtplatt99 ,

We are trying to connect Amari UE Simbox with the USRPN300, srsRAN and open5GS and have been unsuccessful so far. There is no messaging taking place between UE and network. We tried N3 and N78 bands with different bandwidth, SCS and srate settings but no success yet. Would you be able to share the config file parameters for UE simbox and open5GS?

Alternatively, we also tried a COTS UE Google Pixel 7 and were able to attach to 5G using srsRAN and open5GS but there is no data connectivity. We tried changing the srs config file parameters with different bandwidth and srate values but no success.

[Zplusless]

Hi @ismagom ， I'm confused. Shouldn't the top five digits of IMSI be the same as PLMN?
Do you mean set PLMN as 90170 in the config file of AMF. Set imsi as 00101xxxxx... at sim card and open5gs webui?

[brendan-mcauliffe]

HI @Zplusless, Ismael is referring to a set-up that forces the UE to use roaming. In such a set-up the gNB and core are configured to use a PLMN such as 00101, while the UE/SIM is configured with PLMN 90170. When the UE is registered in the core it should use the IMSI as defined in the SIM (90170......). Hope that clears things up.

[Zplusless]

Thanks @brendan-mcauliffe ， Your reply cleared up my confusion

[ismagom]

One question for the community and developers: is anyone else using an Amarisoft AMARI UE Simbox? With our current configuration the UE Simbox is experiencing >90% bit-error rate and only a few kbps on iperf3 while our other UEs easily get >6 Mbps on iperf3. If anyone else out there is using an Amarisoft AMARI UE Simbox with srsRAN, I'm hoping to compare set ups and throughput numbers.

Hi @jtplatt99,

Thanks for your feedback. We use Amari UE Simbox on a daily basis in our CI/CD. We always get very low BLER on all BWs and configurations. Can you explain us more about your setup? Things like wiring, CPUs, USRPs, etc are very helpful. Also if you could attach logs with all_level: info and phy_level: debug would also be helpful?

Thanks

[ismagom]

Hi @jtplatt99 , could you try setting the pci: 1 in the config file?

Thanks

[ismagom]

And if it doesn't work, could you attach Amari UE logs please?

[jtplatt99]

Hi @ismagom , I tried setting pci: 1 as requested. With this set the downlink BER started low, but quickly increased to the levels I'd been seeing on pci: 0 after a few seconds. Here are the Amarisoft UE logs from both scenarios: AmarisoftLogs.zip

Could you provide any additional insight into why it might be expected for pci: 1 to perform better than pci: 0? Thanks!

[ismagom]

There seems to be some kind of RF problem, some variations in the received power, see for instance the epre and snr here:

10:33:09.321 [PHY] DL 0001 00 4601   126.5 PDSCH: harq=6 prb=0:51 symb=2:12 k1=4 CW0: tb_len=1313 mod=4 rv_idx=3 cr=0.48 retx=1 crc=OK snr=13.9 epre=-99.6
10:33:09.324 [PHY] DL 0001 00 4601  126.10 PDSCH: harq=0 prb=0:51 symb=2:12 k1=7 CW0: tb_len=1313 mod=4 rv_idx=0 cr=0.48 retx=0 crc=KO snr=13.3 epre=-100.0
10:33:09.324 [PHY] DL 0001 00 4601  126.11 PDSCH: harq=2 prb=5:3 symb=2:12 k1=6 CW0: tb_len=80 mod=4 rv_idx=0 cr=0.48 retx=0 crc=KO snr=9.8 epre=-104.5
10:33:09.325 [PHY] DL 0001 00 4601  126.12 PDSCH: harq=3 prb=3:19 symb=2:12 k1=6 CW0: tb_len=488 mod=4 rv_idx=2 cr=0.48 retx=0 crc=KO snr=9.0 epre=-103.5
10:33:09.325 [PHY] DL 0001 00 4601  126.13 PDSCH: harq=1 prb=5:3 symb=2:12 k1=5 CW0: tb_len=80 mod=4 rv_idx=3 cr=0.48 retx=0 crc=KO snr=9.8 epre=-105.2
10:33:09.326 [PHY] DL 0001 00 4601  126.14 PDSCH: harq=4 prb=0:51 symb=2:12 k1=5 CW0: tb_len=1313 mod=4 rv_idx=3 cr=0.48 retx=1 crc=OK snr=13.5 epre=-100.3
10:33:09.326 [PHY] DL 0001 00 4601  126.15 PDSCH: harq=5 prb=3:19 symb=2:12 k1=4 CW0: tb_len=488 mod=4 rv_idx=1 cr=0.48 retx=0 crc=KO snr=8.9 epre=-103.8
10:33:09.329 [PHY] DL 0001 00 4601   127.0 PDSCH: harq=6 prb=11:31 symb=2:12 k1=7 CW0: tb_len=800 mod=4 rv_idx=0 cr=0.48 retx=0 crc=KO snr=5.1 epre=-103.6
10:33:09.329 [PHY] DL 0001 00 4601   127.1 PDSCH: harq=7 prb=0:51 symb=2:12 k1=6 CW0: tb_len=1313 mod=4 rv_idx=0 cr=0.48 retx=0 crc=KO snr=12.6 epre=-100.8
10:33:09.330 [PHY] DL 0001 00 4601   127.3 PDSCH: harq=0 prb=0:51 symb=2:12 k1=5 CW0: tb_len=1313 mod=4 rv_idx=2 cr=0.48 retx=1 crc=OK snr=12.5 epre=-101.0
10:33:09.331 [PHY] DL 0001 00 4601   127.4 PDSCH: harq=1 prb=0:51 symb=2:12 k1=5 CW0: tb_len=1313 mod=4 rv_idx=1 cr=0.48 retx=0 crc=KO snr=12.3 epre=-101.0
10:33:09.331 [PHY] DL 0001 00 4601   127.5 PDSCH: harq=2 prb=0:51 symb=2:12 k1=4 CW0: tb_len=1313 mod=4 rv_idx=2 cr=0.48 retx=0 crc=KO snr=12.1 epre=-101.1
10:33:09.334 [PHY] DL 0001 00 4601  127.10 PDSCH: harq=3 prb=0:18 symb=2:12 k1=7 CW0: tb_len=469 mod=4 rv_idx=3 cr=0.48 retx=0 crc=KO snr=9.2 epre=-105.1
10:33:09.334 [PHY] DL 0001 00 4601  127.11 PDSCH: harq=5 prb=3:19 symb=2:12 k1=6 CW0: tb_len=488 mod=4 rv_idx=0 cr=0.48 retx=1 crc=KO snr=6.6 epre=-105.8
10:33:09.335 [PHY] DL 0001 00 4601  127.12 PDSCH: harq=4 prb=5:3 symb=2:12 k1=6 CW0: tb_len=80 mod=4 rv_idx=0 cr=0.48 retx=0 crc=KO snr=6.7 epre=-107.8
10:33:09.335 [PHY] DL 0001 00 4601  127.13 PDSCH: harq=6 prb=3:19 symb=2:12 k1=5 CW0: tb_len=488 mod=4 rv_idx=2 cr=0.48 retx=0 crc=KO snr=6.4 epre=-105.8
10:33:09.336 [PHY] DL 0001 00 4601  127.14 PDSCH: harq=1 prb=0:51 symb=2:12 k1=5 CW0: tb_len=1313 mod=4 rv_idx=0 cr=0.48 retx=1 crc=OK snr=11.5 epre=-102.0
10:33:09.336 [PHY] DL 0001 00 4601  127.15 PDSCH: harq=2 prb=0:51 symb=2:12 k1=4 CW0: tb_len=1313 mod=4 rv_idx=3 cr=0.48 retx=1 crc=OK snr=11.5 epre=-102.1
10:33:09.339 [PHY] DL 0001 00 4601   128.0 PDSCH: harq=0 prb=11:31 symb=2:12 k1=7 CW0: tb_len=800 mod=4 rv_idx=0 cr=0.48 retx=0 crc=KO snr=6.2 epre=-103.9
10:33:09.340 [PHY] DL 0001 00 4601   128.3 PDSCH: harq=3 prb=3:19 symb=2:12 k1=5 CW0: tb_len=488 mod=4 rv_idx=1 cr=0.48 retx=0 crc=KO snr=5.9 epre=-107.0
10:33:09.341 [PHY] DL 0001 00 4601   128.4 PDSCH: harq=4 prb=0:51 symb=2:12 k1=5 CW0: tb_len=1313 mod=4 rv_idx=2 cr=0.48 retx=0 crc=KO snr=10.7 epre=-102.7
10:33:09.341 [PHY] DL 0001 00 4601   128.5 PDSCH: harq=6 prb=0:18 symb=2:12 k1=4 CW0: tb_len=469 mod=4 rv_idx=3 cr=0.48 retx=0 crc=KO snr=6.2 epre=-107.4
10:33:09.344 [PHY] DL 0001 00 4601  128.10 PDSCH: harq=7 prb=0:51 symb=2:12 k1=7 CW0: tb_len=1313 mod=4 rv_idx=2 cr=0.48 retx=1 crc=OK snr=10.5 epre=-103.2
10:33:09.344 [PHY] DL 0001 00 4601  128.11 PDSCH: harq=1 prb=5:3 symb=2:12 k1=6 CW0: tb_len=111 mod=6 rv_idx=0 cr=0.46 retx=0 crc=KO snr=3.1 epre=-110.6
10:33:09.346 [PHY] DL 0001 00 4601  128.14 PDSCH: harq=0 prb=0:18 symb=2:12 k1=5 CW0: tb_len=469 mod=4 rv_idx=2 cr=0.48 retx=0 crc=KO snr=5.4 epre=-107.8
10:33:09.346 [PHY] DL 0001 00 4601  128.15 PDSCH: harq=3 prb=0:18 symb=2:12 k1=4 CW0: tb_len=469 mod=4 rv_idx=0 cr=0.48 retx=0 crc=KO snr=7.2 epre=-107.0
10:33:09.349 [PHY] DL 0001 00 4601   129.0 PDSCH: harq=2 prb=11:31 symb=2:12 k1=7 CW0: tb_len=1153 mod=6 rv_idx=0 cr=0.46 retx=0 crc=KO snr=7.3 epre=-104.8
10:33:09.349 [PHY] DL 0001 00 4601   129.1 PDSCH: harq=4 prb=0:51 symb=2:12 k1=6 CW0: tb_len=1313 mod=4 rv_idx=3 cr=0.48 retx=1 crc=OK snr=9.2 epre=-104.1
10:33:09.350 [PHY] DL 0001 00 4601   129.2 PDSCH: harq=6 prb=3:19 symb=2:12 k1=6 CW0: tb_len=488 mod=4 rv_idx=1 cr=0.48 retx=0 crc=KO snr=4.8 epre=-108.2
10:33:09.350 [PHY] DL 0001 00 4601   129.3 PDSCH: harq=1 prb=0:51 symb=2:12 k1=5 CW0: tb_len=1889 mod=6 rv_idx=2 cr=0.46 retx=0 crc=KO snr=9.6 epre=-104.1
10:33:09.351 [PHY] DL 0001 00 4601   129.4 PDSCH: harq=5 prb=0:51 symb=2:12 k1=5 CW0: tb_len=1889 mod=6 rv_idx=0 cr=0.46 retx=0 crc=KO snr=9.4 epre=-104.2

Maybe you could try:

• changing sampling rate or master clock rate in USRP
• changing DL ARFCN
• use wires to avoid interference
• in amari ue.conf you can try phy.cell meas=1 in log_options. This will show the freq_offset measured by the UE. You want to see it very stable.
• you can also try phy.signal=1 also in log_options then use the amarisoft web gui and have a look at the constellation of those PDSCH packets

The test for the pci: 0 was just an hypothesis. We've seen high retx when using cells other than pci: 1 in some UEs, but Amarisoft is not the case.

[jtplatt99]

It seems like using a hardwired connection addressed this issue. I'm not sure what would be causing interference that specifically affects the Amari UE Simbox at 20 MHz bandwidth, but I will update this thread if I track down a configuration that addresses this issue with an OTA connection. Thanks!

[ChengDaHaI]

OnePlus Nord (AC2003) & Sierra EM9191 & Google Pixel 6 works under band n78@40MHz with USRP X310 (UHD 4.3.0)

[asheeshtripathi]

Hi @ChengDaHaI, what is the srate you set for 40 MHz in band 78? Also, is there any specific PLMN you configured? I am also using n78 on x310. Oneplus 8T and Telit 5G modem is able to scan the network but attach does not work. I have configured 10 MHz.

[ChengDaHaI]

what is the srate you set for 40 MHz in band 78?

46.08

is there any specific PLMN you configured?
001/01

[asheeshtripathi]

Thanks

[alvaroalfaro612]

I got Xiaomi Redmi Note 10 5G connected to different bands (28, 77, 78...). The main problem with this device is you need to activate 5G SA using the hidden option that is enabled by dialing : ##726633##

Also I have tried with new device OnePlus Nord 2 CE Lite, but in this case I am not able to find the network. I don´t know if a similar restriction as the xiaomi hidden menu is the problem in this case...

[Gotsche43]

Hi,
I have problem connecting my Redmi 10 5G. With the knowlegde that there can be many problems leading to the connectivity problems, I would just hear what PLMN did u use, and maybe the configuration file for the gNB?
Regards Magnus

[chiefmeta]

I have samsung s22+. It does not see the network. Does anyone have the same experience?

[fllay]

I have ZTE MU5002/MU5001. It can be set to 5G SA mode from the menu in its touch screen and successfully connected to the network. https://ztedevices.com/en-gl/mu5001/

Quectel RM500Q-GL with Raspberry pi also successfully connected to the network. I have both of them connect at the same time for few hours.

[mrouili]

Google pixel 7 Pro works fine with the srsRAN 5G SA mode and x310 USRP (SISO), band 78 TDD, 40-60Mhz.

[brendan-mcauliffe]

Thanks for reporting! I've added this to our docs, it will be live in the next update.

[warlock1302]

[pgawlowicz]

please start here: https://docs.srsran.com/projects/project/en/latest/tutorials/source/amariUE/source/index.html

[improperaffo]

Dear all,
we just tested a batch of phones. All of them were tested on the test MCC 001 (different MNCs: 01, 001, 02, 03) on band n78.
We used 5G Switch - Force 5G Only to force the phones to be in 5G SA mode.
The working phones are:

• Realme 9
• Xiaomi Redmi Note 12 5G
• Motorola Moto G54
• Nokia G42 5G
• Oppo A78 5G
• Samsung A15 5G
• Samsung A23 5G

We had one that could not connect:

• Xiaomi Poco X5 Pro 5G

Previously we tested working the following phones:

• Oneplus 8
• Oneplus Nord CE 2 lite 5G
• Oneplus Nord CE 3 5G
• Samsung S23
• Samsung A76
• Asus Zenfone 8

[bcgordon3]

I have an unlocked Samsung A15 5G and while it works fine on a 00101 LTE network, I have been unable to get it to stay connected to the 5G network. Pixel 6 and 6 Pro stay fine. A15 registers and then drops right away never to return. I can see in the log that the core believe everything is fine, but A15 does not for some reason.

[improperaffo]

@bcgordon3 are you forcing the A15 to be in 5G only mode?

[bcgordon3]

@improperaffo I did have it forced to NR only. I also tried with the standard NR/LTE/WCDMA/GSM. Both had the same results. The phone registered with the core but did not stay attached at all. It was an immediate release by the phone. The core still thought it was attached. Any ideas?

[arman-maghsoudnia]

Hi,
We tested the Galaxy A15 phone again. It works fine for us. Our idea is that the problem could be the OS software that you are using. I will post the information here, so you can compare them.
Another problem that I think of is that the problem could be from the Sim card. Can you use the working sim card (like the one in the Pixel) and try using it with A15?

Phone info:
(https://github.com/srsran/srsRAN_Project/assets/93431904/aedae67a-9a77-44f4-9c36-af47ddb7be9f)

Software info:
(https://github.com/srsran/srsRAN_Project/assets/93431904/34ec7fb5-1ec0-40b1-a8a4-e43d6ea38a71)
(https://github.com/srsran/srsRAN_Project/assets/93431904/6ea25c83-51ae-43d4-86a2-b9a45a4332e0)

[bcgordon3]

Thanks for the tips. Looks like our model is slightly different and that may be the issue. I have model SM-156M/DSN. I also had an older firmware. I updated it to the latest, but that didn't fix the issue. Might be a version M vs B, which you have.

[Bourascom]

Dear all,
I’ve recently conducted tests on a batch of 5G phones. All devices underwent testing on the test PLMN 001-01 on Band28 , utilizing the ETTUS USRP B200 as the RF front-end without an external sync reference (relying on the internal clock).
To ensure that the phones operated in 5G SA mode, I employed the 5G Switch - Force 5G Only feature.
The phones that successfully connected to the network are as follows:

• Google Pixel 7 Pro.
• Samsung Galaxy S23 Ultra (SM-S91B/DS).
• Samsung Galaxy S22 Ultra (SM-S908B/DS).
• Samsung Galaxy Z Flip 4 (SM-F721B).

However, I encountered issues with the following devices. Although they detected the network, they failed to register:

• Samsung Galaxy S22 Plus (SM-S906U).
• Sasmung Galaxy S21 (SM-G991B/DS).

I am expecting another batch of phones for further testing. I will promptly share the results once I complete the tests. I hope that this information proves valuable for the user-community and developers.

[brendan-mcauliffe]

Thanks @Bourascom these have been added to the docs and will be made public in the next release.

[andreaterni7]

Hi @Bourascom, can you please share the config file? Thank you in advance

[Bourascom]

Hi
Here is gnb configurations :

amf:
addr: 127.0.0.5 # The address or hostname of the AMF.
bind_addr: 127.0.0.1 # A local IP that the gNB binds to for traffic from the AMF.

ru_sdr:
device_driver: uhd # The RF driver name.
device_args: type=b200,num_recv_frames=64,num_send_frames=64 # Optionally pass arguments to the selected RF driver
#clock: external
#sync: external
srate: 23.04 # RF sample rate might need to be adjusted according to selected bandwidth.
otw_format: sc12
tx_gain: 80 # Transmit gain of the RF might need to adjusted to the given situation.
rx_gain: 40 # Receive gain of the RF might need to adjusted to the given situation.

cell_cfg:
dl_arfcn: 153620 # ARFCN of the downlink carrier (center frequency).
band: 28 # The NR band.
channel_bandwidth_MHz: 10 # Bandwith in MHz. Number of PRBs will be automatically derived.
common_scs: 15 # Subcarrier spacing in kHz used for data.
plmn: "00101" # PLMN broadcasted by the gNB.
tac: 7 # Tracking area code (needs to match the core configuration).
pci: 1 # Physical cell ID.

log:
filename: /tmp/gnb.log # Path of the log file.
all_level: debug # Logging level applied to all layers.

pcap:
mac_enable: true # Set to true to enable MAC-layer PCAPs.
mac_filename: /tmp/gnb_mac.pcap # Path where the MAC PCAP is stored.
ngap_enable: true # Set to true to enable NGAP PCAPs.
ngap_filename: /tmp/gnb_ngap.pcap # Path where the NGAP PCAP is stored.

You are free to modify the channel bandwidth to suit your host machine’s capabilities. It is crucial to be mindful of the antenna operating band. I’ve dedicated considerable time to testing various bands to ensure compatibility with the antenna, especially since I lack a VNA (Vector Network Analyzer) tool for precise antenna analysis. This attention to detail is vital, as the wrong band selection has previously caused numerous problems. Also, make sure that the AMF IP address in the amf.yaml file is consistent and correctly configured.

[pchat-imm]

I have CPE that is tested with USRP B210 and open5GS on band n78. It worked well.

• WLINK G230 Industrial 5G Router
• Huawei model N5368X
• ZLTX model X21Y

For using iperf, make sure to set mtu of the UE to 1400 and mtu of smf at 1450

I also used Quectel RM510Q-GL connected to Raspberry PI as a UE. It is quite unstable, sometimes it can connect to the network and sometimes it cannot. The AT command of the Quectel is useful for checking network performance.

• AT+QCSQ returns RSRP, SINR, RSRQ
• AT+QENG="servingcell", returns MCC, MNC, ARFCN, RSRP, RSRQ

However, AT+QPING to test ping is not worked. So I normally tested ping without using AT command.