LabKit Quick Start Guide

Congratulations for purchasing this LabKit! Please follow the steps below to get started.

The LabKit provides the full functionality of either an LTE or a GSM network on your desktop. It is intended for mobile network operator labs, IoT and M2M application development, mobile phone vendors, and researchers.

The LabKit allows the easy and stable development of experiments and test procedures with YateENB and YateBTS.

It can be used stand alone in GSM NiPC or with the MiniCore, the hosted YateUCN core network (Hosted Core) or with your own YateUCN core network server (GSM roaming mode, GSM dataroam mode and LTE enb mode).

LTE LabKitTM
Test & Research BTS/eNodeB allowing radio traffic monitoring and multiple configurations
See the product here ››

What you get

  • 1 LabKit
  • 1 LabKit power adapter
  • 2 antennas
  • 2 filters, one for use in the Americas - E-GSM-900/LTE band 8 band (in red) and one for the rest of the world - GSM-850/LTE band 5 band (in black)
  • 1 LTE smartphone and its charger
  • 1 GSM phone and its charger
  • 10 pre-written SIM cards (two of them are already inserted in each of the two phones)
  • 1 Wi-Fi antenna

Important! Your LabKit is also pre-configured to provide access to the Hosted Core, a free service that allows users to experiment with a fully-functional GSM/GPRS or LTE/IMS network.

The 10 SIM cards you received are already associated with your Hosted Core account. You have the Hosted Core credentials in the order confirmation e-mail.

Assembling your LabKit

LabKit back
1. Connect one antenna to the TX socket.
2. Connect the filter to the RX socket. Then, connect the other antenna to the filter.

Filters

Two filters are provided for the LTE band 8/E-GSM-900 band and the LTE band 5/GSM-850 band, in order to obtain better signal quality. However, the LabKit can also be used without the filters or with other filters for other frequency bands, which are not provided in this kit.

  • 1.
    Connect one antenna to the TX socket.
  • 2.
    Connect the filter to the RX socket. Then connect the other antenna to the filter.
900 Filter (red)
900 Filter (red)
850 Filter (black)
850 Filter (black)

Note: Use the 900 Filter if you are inside the Americas and the 850 Filter if you are in the rest of the world. This is backwards from what mobile operators do. We advise this to prevent interference between other commercial bands and your LabKit’s.1 This also prevents interference between what the LabKit transmits and what it receives.

Filter ColorUse
LTE band 8, EGSM 900 RedIn the Americas (ITU Region 2)
LTE band 5, GSM 850BlackIn the rest of the world. (ITU Regions 1 and 3)

By the Americas we are referring to the following regions: North America, South and Central America. The typical bands for these regions are the LTE band 5 and the GSM 850.

By the rest of the world we are referring to the following regions: Europe, Middle East, Asia, Africa and Oceania. The typical bands for these regions are the LTE band 8 and the EGSM 900.

Connect the first antenna to the TX socket
Connect the first antenna to the TX socket
Connect the filter to the RX socket
Connect the filter to the RX socket
Connect the second antenna to the filter
Connect the second antenna to the filter
Screw the antenna securely
Screw the antenna securely

Note: Screw the antennas securely. Always angle the antennas at a 90° orientation.

  • 3.
    Connect the LabKit to the power supply with a cable via the +12VDC socket.
  • 4.
    (Optional) Connect the USB WiFi adapter.
Ethernet ports

The LabKit has two Ethernet ports:

  • 1.
    Network A
    • This is the port farther from the antenna of labkit1 and next to tx/rx2 in Labkit2.
    • This Ethernet port is pre-configured with the static IP 10.0.3.1.
    • It can be used for initial setup, management or rescue.
    • It cannot be used for providing LabKit functionality.
  • 2.
    Network B
    • This is the port next to the antenna of the LabKit1 and next to tx/rx1 in Labkit2.
    • This port is assigned a DHCP IP address from the network.
    • It can be used for both providing functionality and management.
    • To find the DHCP IP address, please refer to section D.2.

Note: A video version of the LabKit setup guide is available on YouTube at: https://youtu.be/XklRrzBoaVY
The LabKit used in the video is a slightly different version, but the procedures are similar.

Hosted Core

Hosted core is a public, free service provided for all the users of the public release version of YateBTS for testing purposes.

The Hosted Core comprises a YateUCN™ server, acting as a MSC/VLR, a YateHSS/HLR, and an SMSC, allowing users to experience the real feel of a fully functional GSM core network.

Upon your purchase, you will receive an automatic e-mail for your account registration.
You can access the hosted core (https://www.core.yatebts.com/) using the provided credentials.
Also, you will receive 10 SIM cards that are linked to your account and ready to be used.

Note:  For more information, log into HostedCore web interface page and select the “How to” section from the top menu.

Accessing your LabKit

The operating system of the LabKit is Mageia Linux. The following guide assumes you are familiar with simple console administration tasks.

  • 1
    LabKit credentials
    • Each LabKit has the username yatebts and its serial number as the password.
    • The serial number is printed on the front plate of your LabKit.
  • 2
    LabKit IP address
    • Connecting to Network A will provide the static IP address10.0.3.1.
    • Connecting to Network B will provide the DHCP IP address.

Finding the DHCP IP address
There are multiple methods to find the IP address. Below are three methods that can be used.

  • 1
    Accessing the LabKit operating system locally (see section D.3 below)
    - From the terminal, apply (ifconfig) and check the IP. For newer LabKits the port is named (eth-ran).
    - From the graphical interface, open Mageia Control Center, go to Network & Internet, open the Network Center, select Wired (Ethernet) and click on Configure.
  • 2
    Using arp table from any PC in the network.
    For Linux OS
    Run nmap scan (nmap x.x.x.*), where x.x.x are the first 3 digits from your DHCP subnet.
    Look into the arp table (arp -n | grep xx:xx:xx:xx:xx:xx ), where xx:xx:xx:xx:xx:xx is the Ethernet MAC address.
    For Windows OS
    Ping the subnet gateway (ping x.x.x.x).
    Look into the arp table (arp -a) and search for the unit Ethernet MAC address.
  • 3
    Using arp from layer 3 device
    The command and the steps will be different depending on your vendor. For example:
    - Cisco switches: show ip arp
    - HP switches: show arp
    - Huawei switches: display arp all

Accessing the LabKit locally

Accessing the operating system

1. Connect the LabKit to the monitor via the HDMI or DVI video outputs ; connect the keyboard and mouse to any of the USB sockets or to the dedicated mouse/keyboard PS2 port.


Note: Due to radio interference, we strongly recommend using DVI/HDMI connectors only for the initial setup and connecting remotely in all the rest of the sessions.
Note: Make sure DVI/HDMI is connected before powering up the LabKit or a restart will be required for the screen to function.

2. You will be asked for a password as soon as you have powered on the LabKit. The password is the serial number found on the front of your LabKit.

LabKit serial number

3. Now you will have access to the operating system graphical interface and terminal. 

Note: This grants you access to the Local Management Interface (LMI), the YateBTS and LabKit online documentation, the Yate forum and the LabKit terminal console though the icons located on the desktop.

You can also find your LabKit’s serial number by opening the LabKit terminal console on the first line:

[yatebts@ybts-serial number~]$.

To connect to the internet, click the icon below, in your task bar.

LabKit Quick Start Guide 3

Once you have connected the LabKit to your local network/Internet, you will be able to find our your assigned IP address by typing: ifconfig in the LabKit terminal console.

You will need this information if you want to access the LabKit remotely.

Accessing the Local Management Interface (LMI)

After accessing the operating system graphical interface, you can access the LMI with two methods:

1. Click the LMI icon on the desktop.

local management interface

2. Open the browser (Internet Explorer or Firefox) and enter the URL.

Accessing the LabKit console locally

After accessing the operating system graphical interface, you can access the LMI with two methods:

  1. Click the icon Yate Console on the desktop.
  2. From the terminal (telnet 0 5037).

Accessing the LabKit remotely

Accessing the operating system

Through a SSH port connection

The LabKit operating system is reachable via telnet using the port 54321.

For Linux OS

  1. Open a terminal.
  2. Use the command: ssh yatebts@network-ip-assigned-ip -p 54321

For Windows OS

  1. Open ssh terminal, like PuTTY.
  2. Enter the network-ip-assigned-ip as the IP
  3. Enter the port 5432
username: yatebts
password: 'the serial number on the front of your LabKit'

Accessing the Local Management Interface (LMI)

Note: If you want access your LabKit LMI from another computer in your network, use this URL: http://network-assigned-ip:2080/lmi, with 2080 as an HTTP port for newer YateBTS versions. You will be prompted to enter valid credentials of a system account, as seen below.

Accessing the Local Management Interface

Use the following credentials:

username: yatebts
password: 'the serial number on the front of your LabKit'

DHCP through the Gigabyte Ethernet port 2

  • 1
     Connect the LabKit to your Wi-Fi router or switch with an Ethernet cable, in the Gigabyte Eth port 2, as seen in the image showing LabKit's rear side.
  • 2
     To find your IP address assigned through DHCP, enter the Mageia Control Center, go to Network & Internet, open the Network Center and select Wired (Ethernet) and click on Configure.
  • 3
    Open your computer's browser and go to: http://network-assigned-ip:2080/lmi/main.php to access the LMI.

DHCP through the USB WiFi adapter

  • 1
    Connect the USB WiFi adapter to your LabKit.
  • 2
    To find out the IP address you have been assigned, enter the Mageia Control Center, go to Network & Internet, open the Network Center and look for the Wireless (Wi-Fi) connection.
  • 3
    Click on your SSID and select the Configure option to find out your assigned IP address.
  • 4
    Open your computer's browser and go to: http://network-assigned-ip:2080/lmi/main.php to access the LMI.

Through a fixed IP address

  • 1
    Connect the LabKit to your laptop or personal computer via the Gigabyte Eth port 1, as seen in the image showing the LabKit's rear side.
  • 2
    Go to your computer's Network Configuration and manually set up your network to the 10.0.3.2 fixed IP address.
  • 3
    Open your browser and go to: http://10.0.3.1:2080/lmi/main.php to access the LMI.

Accessing the LabKit console remotely

  • 1
    Access the operating system via ssh (see section D.4.1).
  • 2
    Apply the command (telnet 0 5037).

Accessing the LabKit with Network A

The LabKit is pre-configured with the static IP 10.0.3.1 on Network A.
To have reachability to the LabKit using Network A.
1. Connect the LabKit directly to a PC.
2. Assign a static IP address to the PC from the subnet 10.0.3.x /8 except 10.0.3.1
For Linux OS:
ifconfig netmask 255.0.0.0
For Windows OS
Control panel -> network and sharing center -> change adapter settings -> properties -> internet protocol version 4 (TCP / IPv4) -> use the following IP address.

Accessing the operating system through a SSH port connection using network A

The LabKit operating system is reachable via telnet using the port 54321.
For Linux OS
1. Open a terminal
2. Use the command: ssh yatebts@10.0.3.1 -p 54321
For Windows OS
1. Open ssh terminal, like PuTTY.
2. Enter 10.0.3.1 as the IP.
3. Enter the port 54321

Accessing the Local Management Interface (LMI) using Network A

From any PC in the network, open the browser and enter http://10.0.3.1:2080/lmi

LabKit GSM configuration

1. GSM NiPC

Working Mode:
– When you enter the Local Management Interface (LMI), you are first required to select the appropriate working mode. Click the Modify button to choose GSM nipc.
– Select the GSM nipc working mode and click the Save button.

BTS configuration

Radio GSM:
Allows setting the parameter values for the GSM radio interface.
Radio.Band, from 850 (GSM850), 900 (PGSM900), 1800 (DCS1800) to 1900 (PCS1900).

Note: If you are in Europe, the Middle East, Asia, Africa or Australia, change the operating band to 850 MHz. If you are in the Americas, change the operating band to 900MHz

Radio.C0 ARFCN depending on the Radio band you previously chose. To see the available values, click on the “?” sign.
Mobile Country Code (MMC) – set the value to 001 for the hosted core.
Mobile Network Code (MNC) – set the value to 01 for the hosted core.
Radio.PowerManager.MaxAttenDB – the recommended value is 0.
Radio.PowerManager.MinAttenDB – the recommended value is 0.

Important note: Make sure you have the right to use the radio frequency you selected. Please do not break your local law.

Radio Interface (GPRS)

– Select Enable to advertise GPRS in the C0T0 beacon and start the service on demand.
– To see how many channels are reserved, click on the Advanced link and go to the GPRS Advanced section.

Subscriber
– Click on the List Subscribers section. If you already have one or more subscribers, they will be listed here.
– If you want to add a subscriber and configure each IMSI by hand, click on the Add subscriber option at the bottom of the screen.
– If you want to insert a regular expression, click on the Accept by REGEXP option.

2. GSM roaming mode

LabKit will connect to Hosted Core, which provides the complete functionality of a GSM mobile network.

Working Mode
– Select GSM roaming working mode. Click the Modify button and click the Save button.

BTS Configuration
Radio GSM
Radio Band: from 850 (GSM850), 900 (PGSM900), 1800 (DCS1800) to 1900 (PCS1900).

Note: If you are in Europe, the Middle East, Asia, Africa or Australia, change the operating band to 850 MHz. If you are in the Americas, change the operating band to 900MHz.

Radio.C0 ARFCN depending on the Radio band you previously chose. To see the available values, click on the “?” sign.
Mobile Country Code (MMC) – set the value to 001 for the hosted core.
Mobile Network Code (MNC) – set the value to 01 for the hosted core.
Radio.PowerManager.MaxAttenDB – the recommended value is 0.
Radio.PowerManager.MinAttenDB – the recommended value is 0.

Important note: Make sure you have the right to use the radio frequency you selected. Please do not break your local law.

Core
Roaming
From My SIP, select the LabKit IP address 100.127.x.z.
Enter the Reg SIP IP to be 100.127.0.1:5058 Where x depends on the LabKit IP address (could be 0, 128, etc.).

3. GSM Dataroam mode

To add GPRS to GSM, you need to enable the Dataroam mode.

Working mode
– Select GSM roaming working mode. Click the Modify button and click the Save button.

BTS Configuration
Radio GSM
Radio.Band, from 850 (GSM850), 900 (PGSM900), 1800 (DCS1800) to 1900 (PCS1900).

Note: If you are in Europe, the Middle East, Asia, Africa or Australia, change the operating band to 850 MHz. If you are in the Americas, change the operating band to 900MHz.

Radio.C0 ARFCN depending on the Radio band you previously chose. To see the available values, click on the “?” sign.
Mobile Country Code (MMC) – set the value to 001 for the hosted core.
Mobile Network Code (MNC) – set the value to 01 for the hosted core.
Radio.PowerManager.MaxAttenDB – the recommended value is 0.
Radio.PowerManager.MinAttenDB – the recommended value is 0.

Important note: Make sure you have the right to use the radio frequency you selected. Please do not break your local law.

Core

Roaming
From My SIP, select the LabKit IP address 100.127.x.z.
Enter the Reg SIP IP to be 100.127.0.1:5058 Where x depends on the LabKit IP address (could be 0, 128, etc.).

GPRS Roaming

  1. Set NNSF bits to 8.
  2. Set Explicitly map network nodes to IP address 1=100.127.0.1

Making your first call

Once you have configured your LabKit for GSM (NiPC, roaming or dataroam), get ready to make your first call.

Please select operation mode of your LabKit from Working Mode tab of your LMI interface, it comes without an activated working mode.

Configure your LabKit using GSM LabKit Configuration, once you configured it for GSM use, get ready to make your first call.

1. Turn on the phones. They should now register to the 00101 (or Test on other UE’s) test network if all the steps above have been correctly performed.

If the network hasn’t been selected automatically, select the 00101/Test network manually.

At this point you should receive the following automatic SMS: “Your allocated phone no. is ….. Thank you for installing YateBTS. Call David at david(32843).”, to find out the phone number allocated to the SIM card and to confirm that the phone has connected to the network.

Note: In case the phone was tested in-house with the LabKit, you won’t get the automatic SMS anymore.

2. To test your GSM network, register the two phones to the network and then dial each other using the allocated phone numbers received by SMS.

3. You can also use GPRS wth Local breakout in YateBTS and start your GSM data session through your LabKit Internet connection.

Alternatively,

4. Call the number 32843 (DAVID). When you call the number, a “Welcome” IVR function will play a prompt and offer two options:

  • press 1 to start an echo test
  • press 2 to be sent to conference room.

5. Bonus You can have SMS conversations with Eliza, our chat robot by sending text messages to the number 35492 (ELIZA).

SMS Examples: “hello” “how are you” “dream”.

Making your first GPRS session

  1. On the smartphone, configure the access point with the name / APN (Internet).
  2. Start browsing the Internet.

Note: The connection speed is rather slow (around 50 Kbps) because of the GSM mode.

LabKit GSM roaming / GSM dataroam configuration

Your LabKit is also pre-configured to provide access to the Hosted Core, your credentials were sent on the e-mail you used to make the order.

For more information, log into HostedCore web interface page and see the “How to” section from the top menu.

In GSM roaming mode, voice will go through HostedCore and data is used with local breakout: this allows mobile stations to receive data services using their LabKit internet connection.

Making a call through Hosted Core

In order to use Hosted Core’s roaming service, select Working Mode as GSM roaming and go to

BTS Configuration -> Core -> Roaming and set Reg SIP to 100.127.0.1:5058 and My SIP from drop down to your associated IP address starting with 100.127.X.X

Please restart the phones and check assigned MSISDNs in HostedCore web interface page to make a test call. (The 10 SIM cards you receive are already associated to your Hosted Core account)

You can call a public subscriber, Public Subscribers tab will list online public subscribers or you can call one of your own subscribers.

Starting your data session through Hosted Core

Set up LabKit on GSM dataroam working mode and get ready to start your data session through Hosted Core’s Internet connection.

Keep same BTS Configuration -> Core -> Roaming configurations as described earlier in this document,  regarding connections.
From BTS Configuration -> Core -> GPRS Roaming set NNSF bit to 8 and Explicitly map network nodes to IP address to 1=100.127.0.1

Activate Airplane mode, deactivate Airplane mode (or reboot the phones)/ and after phones register to the 00101 (Test) Test Network, be free to navigate on the web.

LabKit LTE configuration

The LTE mode of the LabKit doesn’t provide any voice call or SMS functionalities. It is intended for Internet use.

Working mode
– Select LTE enb. Click the Modify button and click the Save button.

ENB Configuration
Radio – eNodeB:

  • eNodeB ID – must be a 20-bit unique ID whose value is concatenated with the PLMN ID to create a 44-bit global eNodeB identity. You may use any 20-bit number, but if you have multiple LabKits, the eNodeB ID should be different for each one.
  • Mobile Country Code (MMC) – set the value to 001 for the hosted core.
  • Mobile Network Code (MNC) – set the value to 01 for the hosted core.
  • Tracking Area Code (TAC) – enter any 4-digit number.
  • Cell Identity – enter any 7-digit number (for example 0000001). 
  • Name – human-readable and optional, we recommend keeping the default. 
  • LTE Band – in order to avoid local interference and using one of the two filters:
  • choose Band 8 (Americas) if you are in Europe, the Middle East, Asia, Africa or Oceania 
  • choose Band 5 (typical for the rest of the world) if you are in the Americas.
  • Bandwidth – refers to the LTE Channel bandwidth. It should be 25 for both LTE Band 8 and LTE Band 5.
  • Downlink EARFCN – must be compatible with the selected band. For the two bands provided with filters, ranges are:
    3450…3799 for LTE Band 8
    2400…2649 for LTE Band 5.

Note: Please choose an EARFCN value that is in the middle of the range. The Channel Bandwidth you’ve set might take you out of the range if the EARFCN is at the lower or upper limit and you will end up with a non-working configuration.

Note: The Uplink EARFCN will be set automatically by the LabKit.

  • NID1 (Network Identity 1), with a value between 1 and 167. The number is arbitrary, but if you have more LabKits, it should differ among them.
  • NID2 (Network Identity 2), with a value of 0, 1 or 2. It can be of any value.

Core
GTP
From the drop-down menu, select your IP address in the subnet 100.127.x.z

MME:

  • 1
    Address: enter the IP 100.127.0.1
  • 2
    Local: from the drop down menu, your IP address in the subnet 100.127.x.z Where x depends on the LabKit IP address (could be 0, 128 , etc.).

Starting your first data session

Once you configured your LabKit for LTE use, get ready to start your first LTE data session.

  • 1
    Turn on the smartphone. It should register to the network if all the above steps have been correctly performed. You might select the network manually, network name can be: 00101 / Test / PLMN-Test / Yatebts.
  • 2
    When the phone registers  you will automatically receive a welcoming SMS with the SIM number.
  • 3
    On the smartphone, configure the access point with the name / APN (internet).
  • 4
    You are ready to access the Internet.

Further reading

The LTE LabKit is documented on the YateBTS site and YateBTS wiki.

Our solutions