Laboratory BTS+BSC with a NiPC mode

GSM LabKit is a Radio Access Network solution for GSM/GPRS networks advanced studying.

It is intended for mobile network operators laboratory use, IoT and M2M application development, mobile phone vendors, and researchers.

It uses commodity hardware (Intel processors) and software defined radio (Nuand BladeRF) to implement all the functions and protocols of BTS in software.

Supports connection to standard SS7 networks via HostedCore, MiniCore or YateUCN.


The GSM LabKit is a small factor PC computer that has preinstalled the following software components:

  • YateBTS (BTS)
  • YateLMI (Web management interface)​


  • GSM NiPC (GSM Network in a PC)
  • Add/Edit individually subscribers via LMI
  • 2G authentication BTS ↔ MS (Mobile Stations)
  • Subscribers acceptance based on regular expression that matches the IMSI
  • Option to see in real time: online subscribers, accepted subscribers or rejected subscribers by the BTS
  • Call detailed records for each subscriber
  • GSM roaming (GSM BTS connected to YateUCN/HostedCore for voice/sms services)
  • Register/Calls/SMS are send to YateUCN/MiniCore/HostedCore
  • Capability to switch between working modes: GSM NiPC, GSM roaming
  • GPRS with Local breakout (MS receive data services using their LabKit internet connection)
  • Wireshark monitoring traffic inside BTS and on ethernet interfaces.
  • Outbound connection through SIP/IAX in NiPC mode
  • Works both stand alone and with external components

GSM specifications

  • Radio interface
    phase 2+ GSM/GPRS
  • Services support
    GSM-FR speech, SMS
  • Operating bandwidth
  • Call capacity
    7 concurrent full rate call
  • Service range
  • Power supply
    12V 5A DC
  • Output power
    6 dBm (4 mW)
  • Software
    YateBTS public release
  • Network interface
    Ethernet / IP
  • Management interfaces
    Yate telnet console, SNMP (if configured)

Communication Interfaces

  • SIP connects to YateUCN / MiniCore

Communication protocols

  • HTTP
  • JSON API server for configuration and subscriber management
  • JSON API for monitoring and information retrieval
  • JSON and REST API for sending SMS
  • SNMP (if configured)
  • SNMP v2 or v3 for information retrieval
  • Traps sending for alarms
  • Telnet
  • Management CLI
  • Optional SSL and password protection
  • Voice
  • SIP and RTP
  • G711, GSM and AMR codecs
  • SIP
  • Supported standards (RFC3261)
  • B2BUA for calls
  • RTP (RFC3550) with sideband
  • DTMF (RFC2833)
  • SMS and USSD over IP
  • SMS
  • Format: SMS PDU (MO and MT) (BTS → RAN)
  • SIP MESSAGE transport (SMS over IP, R-PDU format) (BTS → CORE)
  • CDR
  • Flexible file format
  • Automatic file rotation
  • Optional file transfer: FTP, SFTP
GSM LabKit Physical specs: size and weight

Physical specs

  • 23.5 cm depth / 24.5 cm width / 10.5 cm height
  • Weight: 2.5 kg
image showing the two USB 3, HDMI, DVI, ethernet ports, and power connector on the back of LTE/GSM LabKit

Hardware Interfaces

  • 1
    Dual Gigabyte ethernet
  • 2
    DVI and HDMI video*
  • 3
    USB for mouse and keyboard
  • 4
    12V Power supply, 100-240V AC, 50-60Hz (included)

*Due to radio interference, we strongly recommend to use DVI/HDMI connectors only for the initial setup

image with LTE/GSM LabKit package: Two smartphones, one WiFi dongle, Filters, Antennas, sim cards and user manual

What you get:

  • 1
    LabKit (mini-ITX PC + bladeRF + software)
  • 2
    LabKit power adapter
  • 3
    Two antennas for 850/900/1800/1900 MHz operation
  • 4
    Two filters: one for use in the Americas (ITU Region 2) in red, and one for use in the rest of the world (ITU Regions 1 and 3) in black
  • 5
    Two smartphones and chargers
  • 7
    10 SIMs configured for Hosted Core and NiPC
  • 8
    USB Wifi Adapter