aboutsummaryrefslogtreecommitdiffstats
path: root/hnbgw/HNBGW_Tests.ttcn
diff options
context:
space:
mode:
Diffstat (limited to 'hnbgw/HNBGW_Tests.ttcn')
-rw-r--r--hnbgw/HNBGW_Tests.ttcn3046
1 files changed, 3046 insertions, 0 deletions
diff --git a/hnbgw/HNBGW_Tests.ttcn b/hnbgw/HNBGW_Tests.ttcn
new file mode 100644
index 00000000..86a4f3ff
--- /dev/null
+++ b/hnbgw/HNBGW_Tests.ttcn
@@ -0,0 +1,3046 @@
+module HNBGW_Tests {
+
+/* Integration Tests for OsmoHNBGW
+ * (C) 2021 by sysmocom - s.f.m.c. GmbH <info@sysmocom.de>
+ * All rights reserved.
+ *
+ * Released under the terms of GNU General Public License, Version 2 or
+ * (at your option) any later version.
+ *
+ * SPDX-License-Identifier: GPL-2.0-or-later
+ *
+ * This test suite tests OsmoHNBGW while emulating the hNodeB as well as MSC, SGSN, MGW
+ * See README for more details.
+ */
+
+import from Misc_Helpers all;
+import from General_Types all;
+import from GSM_Types all;
+import from Osmocom_Types all;
+import from IPL4asp_Types all;
+import from Native_Functions all;
+
+import from Osmocom_CTRL_Functions all;
+import from Osmocom_CTRL_Types all;
+import from Osmocom_CTRL_Adapter all;
+
+import from StatsD_Types all;
+import from StatsD_CodecPort all;
+import from StatsD_CodecPort_CtrlFunct all;
+import from StatsD_Checker all;
+
+import from Osmocom_VTY_Functions all;
+import from TELNETasp_PortType all;
+
+import from HNBAP_Templates all;
+import from HNBAP_IEs all;
+import from HNBAP_PDU_Descriptions all;
+
+import from RUA_IEs all;
+import from RUA_Templates all;
+import from RUA_Emulation all;
+
+import from Iuh_Emulation all;
+
+import from RANAP_Types all;
+import from RANAP_PDU_Descriptions all;
+import from RANAP_PDU_Contents all;
+import from RANAP_IEs all;
+import from RANAP_Templates all;
+import from RANAP_CodecPort all;
+
+import from RAN_Adapter all;
+import from RAN_Emulation all;
+
+import from MGCP_Emulation all;
+import from MGCP_Types all;
+import from MGCP_Templates all;
+import from MGCP_CodecPort all;
+import from SDP_Types all;
+import from SDP_Templates all;
+
+import from PFCP_Types all;
+import from PFCP_Emulation all;
+import from PFCP_Templates all;
+import from PFCP_CodecPort all;
+
+import from TCCConversion_Functions all;
+import from MobileL3_Types all;
+import from MobileL3_CommonIE_Types all;
+import from MobileL3_GMM_SM_Types all;
+import from L3_Templates all;
+import from L3_Common all;
+
+import from SCCPasp_Types all;
+
+const integer NUM_MSC := 4;
+const integer NUM_SGSN := 4;
+
+const integer FIRST_MSC_IDX := 0;
+const integer FIRST_SGSN_IDX := NUM_MSC;
+
+modulepar {
+ /* IP address at which the HNodeB can be reached */
+ charstring mp_hnodeb_ip := "127.0.0.1";
+ integer mp_hnodeb_port := -1;
+
+ /* IP address at which the test binds */
+ charstring mp_hnbgw_ip := "127.0.0.1";
+ integer mp_hnbgw_iuh_port := 29169;
+ integer mp_hnbgw_ctrl_port := 4262;
+
+ /* Our emulated StatsD server: */
+ charstring mp_local_statsd_ip := "127.0.0.1";
+ integer mp_local_statsd_port := 8125;
+
+ charstring mp_mgw_ip := "127.0.0.1";
+ integer mp_mgw_port := 2427;
+
+ RAN_Configurations mp_cn_cfg := {
+ /* MSCs (NUM_MSC entries) */
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { 23905, "127.0.0.1", 2905, "127.0.0.1" },
+ own_pc := 188, /* 0.23.4 first MSC emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 0.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 1
+ },
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { 23907, "127.0.0.1", 2905, "127.0.0.1" },
+ own_pc := 2, /* 0.0.2 second MSC emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 0.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 3
+ },
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { 23909, "127.0.0.1", 2905, "127.0.0.1" },
+ own_pc := 3, /* 0.0.3 third MSC emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 0.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 5
+ },
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { 23911, "127.0.0.1", 2905, "127.0.0.1" },
+ own_pc := 4, /* 0.0.4 fourth MSC emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 0.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 7
+ },
+
+ /* SGSNs (NUM_SGSN entries) */
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { /* local */ 23906, "127.0.0.1", /* remote */ 2905, "127.0.0.1" },
+ own_pc := 185, /* 0.23.1 first SGSN emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 2237, 1.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 2
+ },
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { /* local */ 23908, "127.0.0.1", /* remote */ 2905, "127.0.0.1" },
+ own_pc := 10, /* 0.1.2 second SGSN emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 2237, 1.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 4
+ },
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { /* local */ 23910, "127.0.0.1", /* remote */ 2905, "127.0.0.1" },
+ own_pc := 11, /* 0.1.3 third SGSN emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 2237, 1.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 6
+ },
+ {
+ transport := RANAP_TRANSPORT_IuCS,
+ sccp_service_type := "mtp3_itu",
+ sctp_addr := { /* local */ 23912, "127.0.0.1", /* remote */ 2905, "127.0.0.1" },
+ own_pc := 12, /* 0.1.4 fourth SGSN emulation */
+ own_ssn := 142,
+ peer_pc := 189, /* 2237, 1.23.5 osmo-hnbgw */
+ peer_ssn := 142,
+ sio := '83'O,
+ rctx := 8
+ }
+ };
+
+ boolean mp_enable_pfcp_tests := false;
+
+ /* IP address at which we listen for PFCP to emulate a UPF in ttcn3 */
+ charstring mp_pfcp_ip_local := "127.0.0.1";
+
+ /* IP address from which the SUT (osmo-hnbgw) sends PFCP requests, and to which the ttcn3 UPF emulation sends
+ * PFCP responses. */
+ charstring mp_pfcp_ip_remote := "127.0.0.2";
+
+ boolean mp_validate_talloc_asn1 := true;
+
+ /* The X31 timer configured at osmo-hnbgw (seconds). This provided an idea on
+ * minimum time the test must wait to consider this timer triggered */
+ integer mp_hnbgw_timer_x31 := 5;
+}
+
+function MSC_UnitdataCallback(RANAP_PDU ranap) runs on RAN_Emulation_CT return template RANAP_PDU {
+ // TODO: Actually implement unitdata handling
+ return omit;
+}
+
+const RanOps MSC_RanOps := {
+ ranap_create_cb := refers(RAN_Emulation.RanapExpectedCreateCallback),
+ ranap_unitdata_cb := refers(MSC_UnitdataCallback),
+ ps_domain := false,
+ decode_dtap := false,
+ role_ms := false,
+ protocol := RAN_PROTOCOL_RANAP,
+ transport := RANAP_TRANSPORT_IuCS,
+ use_osmux := false,
+ bssap_reset_retries := 1,
+ sccp_addr_local := omit,
+ sccp_addr_peer := omit
+}
+
+type record MgwResponse {
+ integer resp,
+ HostName mgw_rtp_ip,
+ /* if set, used after first received MDCX: */
+ HostName mgw_rtp_ip_mdcx optional,
+ PortNumber mgw_rtp_port,
+ MgcpConnectionId mgcp_connection_id
+}
+type record MgcpParameters {
+ integer got_crcx_count,
+ integer got_dlcx_count,
+ MgcpCallId mgcp_call_id optional,
+ MgcpEndpoint mgcp_ep,
+ MgwResponse mgw_conn_ran,
+ MgwResponse mgw_conn_cn,
+ uint7_t rtp_payload_type,
+ charstring rtp_sdp_format,
+ HostName hnb_rtp_ip,
+ PortNumber hnb_rtp_port,
+ HostName cn_rtp_ip,
+ PortNumber cn_rtp_port,
+ boolean use_osmux,
+ integer got_osmux_count
+}
+
+template (value) MgcpParameters t_MgcpParams := {
+ got_crcx_count := 0,
+ got_dlcx_count := 0,
+ mgcp_call_id := omit,
+ mgcp_ep := "rtpbridge/1@mgw",
+ mgw_conn_ran := {
+ resp := 1,
+ mgw_rtp_ip := "127.1.2.1",
+ mgw_rtp_ip_mdcx := omit,
+ mgw_rtp_port := 10000,
+ mgcp_connection_id := '11111'H
+ },
+ mgw_conn_cn := {
+ resp := 1,
+ mgw_rtp_ip := "127.1.2.2",
+ mgw_rtp_ip_mdcx := omit,
+ mgw_rtp_port := 20000,
+ mgcp_connection_id := '22222'H
+ },
+ rtp_payload_type := 112,
+ rtp_sdp_format := "VND.3GPP.IUFP",
+ hnb_rtp_ip := "127.1.1.1",
+ hnb_rtp_port := 10001,
+ cn_rtp_ip := "127.1.3.1",
+ cn_rtp_port := 20001,
+ use_osmux := false,
+ got_osmux_count := 0
+}
+
+type record TestHdlrParams {
+ integer hnb_idx,
+ /* cn_idx indicates which CN link from g_cn[] to connect to the test component.
+ * See also f_cn_idx(). */
+ integer cn_idx,
+ hexstring imsi,
+ boolean ps_domain,
+ MgcpParameters mgcp_pars optional,
+ HnbConfig hnb optional,
+ boolean expect_separate_sccp_cr,
+ integer tx_sccp_cr_data_len,
+ charstring pfcp_local_addr,
+ octetstring nas_pdu optional,
+ /* local and remote SCCP addresses, used in TC_mscpool_paging_* */
+ SCCP_PAR_Address sccp_addr_msc optional,
+ SCCP_PAR_Address sccp_addr_hnbgw optional,
+ /* RAB release cause */
+ RANAP_IEs.Cause rab_rel_cause
+}
+
+/* We extend:
+ * RUA_ConnHdlr (for the Iuh side, emulating the HNB)
+ * RAN_ConnHdlr (for the Iu side, emulating the MSC)
+ * MGCP_ConnHdlr (for the MGCP side, emulating the MGW)
+ * StatsD_ConnHdlr (for the statsd interface, verifying counters)
+ */
+type component ConnHdlr extends RAN_ConnHdlr, MGCP_ConnHdlr, RUA_ConnHdlr, PFCP_ConnHdlr, StatsD_ConnHdlr {
+ var integer g_sccp_conn_id;
+ var TestHdlrParams g_pars;
+ timer g_Tguard;
+
+ port TELNETasp_PT HNBGWVTY;
+}
+
+
+const MGCPOps MSC_MGCPOps := {
+ create_cb := refers(MGCP_Emulation.ExpectedCreateCallback),
+ unitdata_cb := refers(MGCP_Emulation.DummyUnitdataCallback)
+}
+
+function f_create_ranap_exp(octetstring l3_enc) runs on ConnHdlr {
+ BSSAP_PROC.call(RAN_register:{l3_enc, self}) {
+ [] BSSAP_PROC.getreply(RAN_register:{?, ?}) {};
+ }
+}
+
+
+const integer NUM_HNB := 2;
+
+type record HnbConfig {
+ LocationAreaIdentification lai,
+ integer sac
+}
+
+type component test_CT extends CTRL_Adapter_CT, StatsD_Checker_CT {
+ var boolean g_initialized := false;
+
+ /********************* Iu side */
+ var RAN_Adapter g_cn[NUM_MSC + NUM_SGSN];
+
+ /********************* Iuh side */
+ var HnbConfig g_hnb_cfg[NUM_HNB];
+ var Iuh_Emulation_CT vc_Iuh[NUM_HNB];
+ var RUA_Emulation_CT vc_RUA[NUM_HNB];
+ port HNBAP_PT HNBAP[NUM_HNB];
+ /* Number of HNBs to be used/started by the test */
+ var integer g_num_hnbs := NUM_HNB;
+
+ var MGCP_Emulation_CT vc_MGCP;
+ port TELNETasp_PT HNBGWVTY;
+ var StatsD_Checker_CT vc_STATSD;
+ var PFCP_Emulation_CT vc_PFCP;
+ /* global test case guard timer (actual timeout value is set in f_init()) */
+ timer T_guard := 30.0;
+
+ /* The cnlink type 'msc' or 'sgsn', to be used in CTRL commands to obtain counters */
+ var charstring g_ctr_cn_node_name;
+ /* Counter state */
+ var CounterNameValsList g_ctr_cn;
+ var CounterNameValsList g_ctr_hnb;
+}
+
+/* global altstep for global guard timer; */
+altstep as_Tguard() runs on test_CT {
+ [] T_guard.timeout {
+ setverdict(fail, "Timeout of T_guard");
+ mtc.stop;
+ }
+}
+
+function f_init_vty(charstring id := "foo") runs on test_CT {
+ if (HNBGWVTY.checkstate("Mapped")) {
+ /* skip initialization if already executed once */
+ return;
+ }
+ map(self:HNBGWVTY, system:HNBGWVTY);
+ f_vty_set_prompts(HNBGWVTY);
+ f_vty_transceive(HNBGWVTY, "enable");
+}
+
+function f_init_mgcp(charstring id) runs on test_CT {
+ id := id & "-MGCP";
+ var MGCPOps ops := {
+ create_cb := refers(MGCP_Emulation.ExpectedCreateCallback),
+ unitdata_cb := refers(MGCP_Emulation.DummyUnitdataCallback)
+ }
+ var MGCP_conn_parameters pars := {
+ callagent_ip := mp_hnbgw_ip,
+ callagent_udp_port := -1,
+ mgw_ip := mp_mgw_ip,
+ mgw_udp_port := mp_mgw_port,
+ multi_conn_mode := false
+ }
+
+ vc_MGCP := MGCP_Emulation_CT.create(id);
+ map(vc_MGCP:MGCP, system:MGCP_CODEC_PT);
+ vc_MGCP.start(MGCP_Emulation.main(ops, pars, id));
+}
+
+function f_init_pfcp(charstring id) runs on test_CT {
+ id := id & "-PFCP";
+
+ var PFCP_Emulation_Cfg pfcp_cfg := {
+ pfcp_bind_ip := mp_pfcp_ip_local,
+ pfcp_bind_port := PFCP_PORT,
+ pfcp_remote_ip := mp_pfcp_ip_remote,
+ pfcp_remote_port := PFCP_PORT,
+ role := UPF
+ };
+
+ vc_PFCP := PFCP_Emulation_CT.create(id) alive;
+ vc_PFCP.start(PFCP_Emulation.main(pfcp_cfg));
+}
+
+function f_init_hnodeb(charstring id, integer hnb_idx, RuaOps rua_ops) runs on test_CT {
+ id := id & "-Iuh" & int2str(hnb_idx);
+
+ /* Iuh lower layer (RUA/HNBAP demux) */
+ var Iuh_conn_parameters iuh_pars;
+ iuh_pars.remote_ip := mp_hnbgw_ip;
+ iuh_pars.remote_sctp_port := mp_hnbgw_iuh_port;
+ iuh_pars.local_ip := mp_hnodeb_ip;
+ iuh_pars.local_sctp_port := mp_hnodeb_port + hnb_idx;
+ vc_Iuh[hnb_idx] := Iuh_Emulation_CT.create(id);
+ connect(self:HNBAP[hnb_idx], vc_Iuh[hnb_idx]:HNBAP);
+
+ vc_RUA[hnb_idx] := RUA_Emulation_CT.create(id & "-RUA");
+ connect(vc_RUA[hnb_idx]:RUA, vc_Iuh[hnb_idx]:RUA);
+
+ /* Start Iuh side components */
+ vc_Iuh[hnb_idx].start(Iuh_Emulation.main(iuh_pars, id));
+ vc_RUA[hnb_idx].start(RUA_Emulation.main(rua_ops, id & "-RUA"));
+}
+
+function f_drop_hnodeb(integer hnb_idx) runs on test_CT
+{
+
+ vc_Iuh[hnb_idx].stop;
+ vc_RUA[hnb_idx].stop;
+ disconnect(self:HNBAP[hnb_idx], vc_Iuh[hnb_idx]:HNBAP);
+ disconnect(vc_RUA[hnb_idx]:RUA, vc_Iuh[hnb_idx]:RUA);
+}
+
+private type record of boolean BooleanList;
+
+private function f_vty_cnlink_allow_attach(TELNETasp_PT pt, boolean ps_domain, BooleanList allow_attach_list)
+{
+ var charstring config := f_vty_transceive_ret(pt, "show running-config");
+
+ var charstring msc_sgsn;
+ if (ps_domain) {
+ msc_sgsn := "sgsn";
+ } else {
+ msc_sgsn := "msc";
+ }
+
+ f_vty_enter_config(pt);
+ for (var integer cn_nr := 0; cn_nr < sizeof(allow_attach_list); cn_nr := cn_nr+1) {
+ if (f_strstr(config, "\n" & msc_sgsn & " " & int2str(cn_nr) & "\n") < 0) {
+ /* There is no 'msc N' for this cn_nr in the running config, so don't create an empty cn by
+ * stepping into that config node. */
+ log(msc_sgsn, cn_nr, " is not configured, skipping");
+ continue;
+ }
+ f_vty_transceive(pt, msc_sgsn & " " & int2str(cn_nr));
+
+ if (allow_attach_list[cn_nr]) {
+ /* strict := false: ignore if osmo-hnbgw does not support this config option (latest build) */
+ f_vty_transceive(pt, "allow-attach", strict := false);
+ } else {
+ f_vty_transceive(pt, "no allow-attach", strict := false);
+ }
+ f_vty_transceive(pt, "exit");
+ }
+ f_vty_transceive(pt, "exit");
+}
+
+/* Start RAN adapter for CN link N.
+ * e.g. link for 'msc 0' = (ps_domain := false, cn_nr := 0)
+ * link for 'sgsn 3' = (ps_domain := true, cn_nr := 3)
+ */
+private function f_cn_nr_init(boolean ps_domain, integer cn_nr) runs on test_CT {
+ var RanOps ranops := MSC_RanOps;
+ ranops.ps_domain := ps_domain;
+ var integer cn_idx := f_cn_idx(ps_domain, cn_nr);
+ var charstring msc_sgsn := "msc";
+ if (ps_domain) {
+ msc_sgsn := "sgsn";
+ }
+ f_ran_adapter_init(g_cn[cn_idx], mp_cn_cfg[cn_idx], "HNBGW_Test." & msc_sgsn & int2str(cn_nr), ranops);
+ f_ran_adapter_start(g_cn[cn_idx]);
+}
+
+private function f_cn_idx_disconnect(integer cn_idx) runs on test_CT {
+ f_ran_adapter_cleanup(g_cn[cn_idx]);
+}
+
+/* global initialization function */
+function f_init(charstring id := "HNBGW", float guard_timeout := 30.0, integer nr_msc := 1, integer nr_sgsn := 1,
+ boolean start_hnb := true) runs on test_CT {
+
+ T_guard.start(guard_timeout);
+ activate(as_Tguard());
+
+ f_init_statsd("VirtHNBGW", vc_STATSD, mp_local_statsd_ip, mp_local_statsd_port);
+
+ /* RUA/RANAP emulation on top of lower-layer Iuh */
+ var RuaOps rua_ops := {
+ create_cb := refers(IuhRanapCreateCallback),
+ unitdata_cb := refers(IuhRanapUnitdataCallback)
+ };
+ for (var integer i := 0; i < g_num_hnbs; i := i+1) {
+ g_hnb_cfg[i] := {
+ lai := {
+ mcc_mnc := '00F110'H,
+ lac := 2342 + i
+ },
+ sac := 55
+ };
+ f_init_hnodeb(testcasename(), i, rua_ops);
+ }
+
+ f_init_vty("VirtHNBGW");
+ f_ipa_ctrl_start_client(mp_hnbgw_ip, mp_hnbgw_ctrl_port);
+
+ /* MSC emulation */
+
+ /* Make sure each MSC's internal state is "DISCONNECTED" at first */
+ for (var integer i := 0; i < NUM_MSC; i := i + 1) {
+ f_vty_transceive(HNBGWVTY, "msc " & int2str(i) & " ranap reset", strict := false);
+ }
+
+ var BooleanList allow_attach := { false, false, false, false };
+ for (var integer i := 0; i < nr_msc; i := i + 1) {
+ var integer cn_idx := FIRST_MSC_IDX + i;
+ allow_attach[i] := true;
+ f_cn_nr_init(ps_domain := false, cn_nr := i);
+ }
+ /* start the test with exactly all enabled MSCs allowed to attach */
+ f_vty_cnlink_allow_attach(HNBGWVTY, false, allow_attach);
+
+ /* SGSN emulation */
+
+ /* Make sure each SGSN's internal state is "DISCONNECTED" at first */
+ for (var integer i := 0; i < NUM_SGSN; i := i + 1) {
+ f_vty_transceive(HNBGWVTY, "sgsn " & int2str(i) & " ranap reset", strict := false);
+ }
+
+ allow_attach := { false, false, false, false };
+ for (var integer i := 0; i < nr_sgsn; i := i + 1) {
+ var integer cn_idx := FIRST_SGSN_IDX + i;
+ allow_attach[i] := true;
+ f_cn_nr_init(ps_domain := true, cn_nr := i);
+ }
+ f_vty_cnlink_allow_attach(HNBGWVTY, true, allow_attach);
+
+ f_init_mgcp(id);
+
+ if (start_hnb) {
+ f_start_hnbs();
+ }
+
+ /* Sometimes, the RUA InitialUE-Message from a test happens too quickly, before the RANAP RESET from
+ * RAN_Emulation is through, after above f_cn_nr_init(). In the pcap it seems to be a matter of 50 ms. Give some
+ * grace. */
+ f_sleep(1.0);
+}
+
+friend function f_shutdown_helper() runs on test_CT {
+ if (mp_validate_talloc_asn1) {
+ f_verify_talloc_bytes(HNBGWVTY, {"asn1_context"}, 1);
+ }
+
+ all component.stop;
+ setverdict(pass);
+ mtc.stop;
+}
+
+/* helper function to start all of the simulated hNodeBs */
+function f_start_hnbs() runs on test_CT {
+ for (var integer i:= 0; i < g_num_hnbs; i := i+1) {
+ f_hnbap_hnb_register(i, i);
+ }
+}
+
+/***********************************************************************
+ * code running in test_CT, preparing start of per-UE ConnHdlr
+ ***********************************************************************/
+
+/* inbound RUA connection establishment on Iuh side */
+function IuhRanapCreateCallback(ContextId context_id, RUA_IEs.CN_DomainIndicator domain, charstring id)
+runs on RUA_Emulation_CT return RUA_ConnHdlr {
+ log("CreateCallback");
+ return null;
+}
+
+/* inbound RUA connectionless data on Iuh side */
+function IuhRanapUnitdataCallback(RANAP_PDU ranap)
+runs on RUA_Emulation_CT return template RANAP_PDU {
+ log("UnitdataCallback");
+ return omit;
+}
+
+private function f_start_handler_create(TestHdlrParams pars) runs on test_CT return ConnHdlr {
+ var ConnHdlr vc_conn;
+ var charstring id := testcasename() & int2str(pars.hnb_idx);
+
+ vc_conn := ConnHdlr.create(id);
+
+ /* Iuh RUA part */
+ connect(vc_conn:RUA, vc_RUA[pars.hnb_idx]:CLIENT);
+
+ /* MSC or SGSN */
+ connect(vc_conn:BSSAP, g_cn[pars.cn_idx].vc_RAN:CLIENT);
+ connect(vc_conn:BSSAP_PROC, g_cn[pars.cn_idx].vc_RAN:PROC);
+
+ /* MGCP part */
+ connect(vc_conn:MGCP, vc_MGCP:MGCP_CLIENT);
+ connect(vc_conn:MGCP_PROC, vc_MGCP:MGCP_PROC);
+
+ connect(vc_conn:STATSD_PROC, vc_STATSD:STATSD_PROC);
+
+ if (isbound(vc_PFCP)) {
+ connect(vc_conn:PFCP, vc_PFCP:CLIENT);
+ connect(vc_conn:PFCP_PROC, vc_PFCP:CLIENT_PROC);
+ }
+
+ return vc_conn;
+}
+
+private function f_start_handler_run(ConnHdlr vc_conn, void_fn fn, TestHdlrParams pars) runs on test_CT {
+ var charstring id := testcasename(); // & int2str(pars.ran_idx);
+ /* We cannot use vc_conn.start(f_init_handler(fn, id, pars)); as we cannot have
+ * a stand-alone 'derefers()' call, see https://www.eclipse.org/forums/index.php/t/1091364/ */
+ pars.hnb := g_hnb_cfg[pars.hnb_idx];
+ vc_conn.start(derefers(fn)(id, pars));
+}
+
+function f_start_handler_with_pars(void_fn fn, template (value) TestHdlrParams pars)
+runs on test_CT return ConnHdlr {
+ var ConnHdlr vc_conn;
+ vc_conn := f_start_handler_create(valueof(pars));
+ f_start_handler_run(vc_conn, fn, valueof(pars));
+ return vc_conn;
+}
+
+/***********************************************************************
+ * code running inside per-UE ConnHdlr
+ ***********************************************************************/
+
+type function void_fn(charstring id, TestHdlrParams pars) runs on ConnHdlr;
+
+function f_init_handler(TestHdlrParams pars, float t_guard := 20.0) runs on ConnHdlr {
+ /* make parameters available via component variable */
+ g_pars := pars;
+
+ /* start guard timer and activate it as default */
+ g_Tguard.start(t_guard);
+ activate(as_Tguard_ConnHdlr());
+
+ map(self:HNBGWVTY, system:HNBGWVTY);
+ f_vty_set_prompts(HNBGWVTY);
+ f_vty_transceive(HNBGWVTY, "enable");
+
+ /* TODO: CTRL? */
+
+ f_sleep(1.0);
+}
+
+/* global altstep for global guard timer; */
+private altstep as_Tguard_ConnHdlr() runs on ConnHdlr {
+ [] g_Tguard.timeout {
+ setverdict(fail, "Timeout of T_guard");
+ mtc.stop;
+ }
+}
+
+private function f_bssap_expect(template (present) RANAP_PDU exp_rx) runs on ConnHdlr return RANAP_PDU
+{
+ var RANAP_PDU rx;
+ timer T := 5.0;
+ T.start;
+ alt {
+ [] BSSAP.receive(exp_rx) -> value rx {
+ setverdict(pass);
+ }
+ [] BSSAP.receive(RANAP_PDU:?) {
+ setverdict(fail, "Got an unexpected RANAP message on BSSAP port, was waiting for ", exp_rx);
+ mtc.stop;
+ }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for RANAP on BSSAP port: ", exp_rx);
+ mtc.stop;
+ }
+ }
+ T.stop;
+ return rx;
+}
+
+/* send RANAP on Iuh and expect it to show up on Iu */
+function f_iuh2iu(template (present) RANAP_PDU tx, template RANAP_PDU exp_rx := omit)
+runs on ConnHdlr return RANAP_PDU {
+ var RANAP_PDU rx;
+ timer T := 5.0;
+
+ if (istemplatekind(exp_rx, "omit")) {
+ exp_rx := tx;
+ }
+
+ RUA.send(tx);
+
+ return f_bssap_expect(exp_rx);
+}
+
+/* send RANAP on Iu and expect it to show up on Iuh */
+function f_iu2iuh(template (present) RANAP_PDU tx, template RANAP_PDU exp_rx := omit)
+runs on ConnHdlr return RANAP_PDU {
+ if (istemplatekind(exp_rx, "omit")) {
+ exp_rx := tx;
+ }
+
+ BSSAP.send(tx);
+
+ return f_rua_expect(exp_rx)
+}
+
+/* expect to receive a specific RUA message on Iuh */
+private function f_rua_expect(template (present) RANAP_PDU exp_rx) runs on ConnHdlr return RANAP_PDU
+{
+ var RANAP_PDU rx;
+ timer T := 5.0;
+ T.start;
+ alt {
+ [] RUA.receive(exp_rx) -> value rx {
+ setverdict(pass);
+ }
+ [] RUA.receive(RANAP_PDU:?) {
+ setverdict(fail, "Got an unexpected RUA message, was waiting for ", exp_rx);
+ mtc.stop;
+ }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for Iuh ", exp_rx);
+ mtc.stop;
+ }
+ }
+ T.stop;
+ return rx;
+}
+
+/* send RANAP on Iuh and expect it to show up on Iu */
+function f_iuh2iu_connect(template (present) RANAP_PDU tx, template RANAP_PDU exp_rx := omit)
+runs on ConnHdlr return RANAP_PDU {
+ var RANAP_PDU rx;
+ timer T := 5.0;
+
+ if (istemplatekind(exp_rx, "omit")) {
+ exp_rx := tx;
+ }
+
+ /* create an expect on the Iu side for the random NAS portion */
+ if (g_pars.expect_separate_sccp_cr) {
+ f_ran_register_sccp_cr_without_payload();
+ } else {
+ var template (omit) octetstring nas := f_ranap_extract_l3(valueof(tx));
+ f_ran_register_exp(valueof(nas));
+ }
+
+ /* send it via Iuh (creating a RUA connection) */
+ RUA.send(RUA_Conn_Req:{g_pars.ps_domain, tx});
+
+ if (g_pars.expect_separate_sccp_cr) {
+ /* Acknowledge the empty SCCP CR. RAN_Emulation does the confirmation, no need to respond. */
+ BSSAP.receive(tr_RANAP_Conn_Req());
+ }
+
+ /* expect to receive it on the Iu side */
+ return f_bssap_expect(exp_rx);
+}
+
+/* 3GPP TS 48.006 9.2 Connection release:
+ *
+ * The MSC sends a SCCP released message. This message shall not contain
+ * any user data field.
+ *
+ * So what we expect normally is:
+ *
+ * HNBGW MSC
+ * RUA --id-Disconnect-------> | ---Data-Form-1(!)---> | Iu-ReleaseComplete
+ * | <--Released---------- | (no data)
+ *
+ * This function tests osmo-hnbgw behavior if the CN fails to send a RLSD:
+ * after some timeout, osmo-hnbgw should send a RLSD to the CN.
+ */
+function f_iuh2iu_disconnect(template (present) RANAP_PDU tx, RUA_IEs.Cause cause,
+ template RANAP_PDU exp_rx := omit)
+runs on ConnHdlr return RANAP_PDU {
+ var RANAP_PDU rx
+ timer T := int2float(mp_hnbgw_timer_x31) + 1.0;
+
+ if (istemplatekind(exp_rx, "omit")) {
+ exp_rx := tx;
+ }
+
+ /* send it via Iuh (creating a RUA connection) */
+ RUA.send(RUA_Disc_Req:{tx, cause});
+
+ /* expect to receive it on the Iu side */
+ rx := f_bssap_expect(exp_rx);
+
+ /* expect disconnect on the Iu side */
+ T.start;
+ alt {
+ [] BSSAP.receive(RAN_Conn_Prim:MSC_CONN_PRIM_DISC_IND) {
+ setverdict(pass);
+ }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for Iu disconnect");
+ return rx;
+ }
+
+ }
+ return rx;
+}
+
+private function f_build_initial_ue_with_nas(TestHdlrParams pars, octetstring nas)
+ return RANAP_PDU {
+ var RANAP_IEs.LAI lai := {
+ pLMNidentity := hex2oct(pars.hnb.lai.mcc_mnc),
+ lAC := int2oct(pars.hnb.lai.lac, 2),
+ iE_Extensions := omit
+ };
+ var RANAP_IEs.SAI sai := {
+ pLMNidentity := lai.pLMNidentity,
+ lAC := lai.lAC,
+ sAC := int2oct(pars.hnb.sac, 2),
+ iE_Extensions := omit
+ }
+ var IuSignallingConnectionIdentifier sigc_id := int2bit(f_rnd_int(1000), 24);
+ var GlobalRNC_ID grnc_id := {
+ pLMNidentity := lai.pLMNidentity,
+ rNC_ID := 2342
+ }
+ var template RANAP_PDU ret;
+ if (pars.ps_domain) {
+ var RANAP_IEs.RAC rac := '00'O;
+ ret := ts_RANAP_initialUE_PS(lai, rac, sai, nas, sigc_id, grnc_id);
+ } else {
+ ret := ts_RANAP_initialUE_CS(lai, sai, nas, sigc_id, grnc_id);
+ }
+ return valueof(ret);
+}
+
+/* build a RANAP InitialUE based on the TestHdlrParams */
+friend function f_build_initial_ue(TestHdlrParams pars) return RANAP_PDU {
+
+ var octetstring nas;
+
+ if (pars.tx_sccp_cr_data_len == 0) {
+ nas := f_rnd_octstring(10);
+ } else {
+ /* The test asks for an exact number of Optional Data bytes. */
+
+ /* First see what size the RANAP part of the payload data is,
+ * to adjust the NAS PDU size to the size requested by the test (pars.tx_sccp_cr_data_len). */
+ var RANAP_PDU initial_ue := f_build_initial_ue_with_nas(pars, '00'O);
+
+ var octetstring ranap_plus_one_byte_nas := enc_RANAP_PDU(initial_ue);
+ var integer ranap_length := lengthof(ranap_plus_one_byte_nas) - 1;
+
+ log("ranap_plus_one_byte_nas = ", lengthof(ranap_plus_one_byte_nas), " bytes, ", initial_ue, " = ",
+ ranap_plus_one_byte_nas);
+ log("ranap_length = ", ranap_length);
+
+ /* SCCP CR has a payload length limit of 130 bytes. To trigger this limit, the RANAP + NAS PDU has to be
+ * > 130 bytes. It doesn't need to be 131 bytes in the NAS PDU alone, but let's just make it definitely
+ * large enough. To test for this limit, pars.tx_sccp_cr_data_len asks for a specific amount of data len. */
+ nas := f_rnd_octstring(pars.tx_sccp_cr_data_len - ranap_length);
+ }
+
+ var RANAP_PDU ret := f_build_initial_ue_with_nas(pars, nas);
+
+ if (pars.tx_sccp_cr_data_len != 0) {
+ for (var integer attempts := 0; attempts < 2; attempts := attempts + 1) {
+ var octetstring check_len := enc_RANAP_PDU(ret);
+ log("final RANAP PDU length = ", lengthof(check_len));
+ if (lengthof(check_len) == pars.tx_sccp_cr_data_len) {
+ return ret;
+ }
+ nas := f_rnd_octstring(lengthof(nas) + (pars.tx_sccp_cr_data_len - lengthof(check_len)));
+ log("that was off, changed NAS length to ", lengthof(nas), " and trying again");
+ ret := f_build_initial_ue_with_nas(pars, nas);
+ }
+ setverdict(fail, "Ended up with wrong Optional Data length");
+ mtc.stop;
+ }
+ return ret;
+}
+
+/* build a RANAP RAB AssignmentResponse based on the TestHdlrParams */
+friend function f_build_rab_ass_resp(TestHdlrParams pars) return RANAP_PDU {
+ var template RAB_SetupOrModifiedList rab_sml;
+
+ rab_sml := ts_RAB_SMdL(t_RAB_id(23), f_ts_RAB_TLA("192.168.1.23"), t_RAB_binding_port(1234));
+
+ return valueof(ts_RANAP_RabAssResp(rab_sml));
+}
+
+
+/***********************************************************************
+ * HNBAP Testing
+ ***********************************************************************/
+
+
+function f_hnbap_hnb_register(integer hnb_idx := 0, integer cell_id := 0, boolean expect_reject := false) runs on test_CT
+{
+ timer T := 2.0;
+
+ HNBAP[hnb_idx].send(ts_HNBAP_HNBRegisterRequest(char2oct("TTCN3-HNB-" & int2str(hnb_idx)),
+ hex2oct(g_hnb_cfg[hnb_idx].lai.mcc_mnc),
+ int2bit(1 + cell_id, 28),
+ int2oct(g_hnb_cfg[hnb_idx].lai.lac, 2),
+ int2oct(0, 1),
+ int2oct(g_hnb_cfg[hnb_idx].sac, 2)));
+
+ T.start;
+ alt {
+ [] HNBAP[hnb_idx].receive(tr_HNBAP_HNBRegisterAccept(?)) {
+ if (expect_reject) {
+ setverdict(fail, "Rx HNB Register Accept while expecting reject");
+ } else {
+ setverdict(pass);
+ }
+ }
+ [] HNBAP[hnb_idx].receive(tr_HNBAP_HNBRegisterReject(?)) {
+ if (expect_reject) {
+ setverdict(pass);
+ } else {
+ setverdict(fail, "Rx HNB Register Reject while expecting accept");
+ }
+ }
+ [] HNBAP[hnb_idx].receive(IUHEM_Event:?) {
+ repeat;
+ }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for HNB Register response");
+ }
+ }
+}
+
+function f_hnbap_ue_register(integer hnb_idx := 0, template (present) UE_Identity ue_id, boolean expect_reject := false) runs on test_CT
+{
+ timer T := 2.0;
+
+ HNBAP[hnb_idx].send(ts_HNBAP_UERegisterRequest(ue_id));
+
+ T.start;
+ alt {
+ [] HNBAP[hnb_idx].receive(tr_HNBAP_UERegisterAccept(ue_id)) {
+ if (expect_reject) {
+ setverdict(fail, "Rx UE Register Accept while expecting reject");
+ } else {
+ setverdict(pass);
+ }
+ }
+ [] HNBAP[hnb_idx].receive(tr_HNBAP_UERegisterReject(ue_id, ?)) {
+ if (expect_reject) {
+ setverdict(pass);
+ } else {
+ setverdict(fail, "Rx UE Register Reject while expecting accept");
+ }
+ }
+ [] HNBAP[hnb_idx].receive(IUHEM_Event:?) {
+ repeat;
+ }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for UE Register response");
+ }
+ }
+}
+
+
+testcase TC_hnb_register() runs on test_CT {
+ g_num_hnbs := 1;
+ f_init(start_hnb := false);
+ f_hnbap_hnb_register(0);
+ f_shutdown_helper();
+}
+
+/* Try to register the same HNB from 2 different concurrent connections. Second
+ * one should be rejected. */
+testcase TC_hnb_register_duplicate() runs on test_CT {
+ g_num_hnbs := 2;
+ f_init(start_hnb := false);
+
+ /* Make HNB REQ look as if it came from the same HnodeB (LAI+SAC),
+ * but from different IP address (underlaying link): */
+ g_hnb_cfg[1] := g_hnb_cfg[0];
+ f_hnbap_hnb_register(0);
+ f_hnbap_hnb_register(1, 0, expect_reject := true);
+
+ f_verify_talloc_count(HNBGWVTY, {"struct hnb_context"}, expect_count := 1);
+
+ f_shutdown_helper();
+}
+
+/* Try to register the same HNB in the same connection already established, aka
+ * duplicate HNB Register Request. It should be accepted and new configuration
+ * applied. TS 25.469 8.2.4 */
+testcase TC_hnb_register_duplicate_reuse_sctp_assoc() runs on test_CT {
+ g_num_hnbs := 1;
+ f_init(start_hnb := false);
+ f_hnbap_hnb_register(0);
+ f_hnbap_hnb_register(0);
+ f_verify_talloc_count(HNBGWVTY, {"struct hnb_context"}, expect_count := 1);
+ f_shutdown_helper();
+}
+
+/* Drop HNBAP conn (HNBAP DEREG) and reconnect it (HNBAP REG) using same SCTP association.
+ * Related: OS#5676, SYS#6113 */
+testcase TC_hnb_reregister_reuse_sctp_assoc() runs on test_CT {
+ g_num_hnbs := 1;
+ f_init(start_hnb := false);
+ f_hnbap_hnb_register(0);
+ HNBAP[0].send(ts_HNBAP_HNBDe_Register(ts_HnbapCause(unspecified)));
+ f_hnbap_hnb_register(0);
+ f_verify_talloc_count(HNBGWVTY, {"struct hnb_context"}, expect_count := 1);
+ f_shutdown_helper();
+}
+
+/* Default list of counters for a 'hnb' entity */
+const CounterNameVals counternames_hnb := {
+ { "iuh:established", 0 }
+};
+
+private function f_ctrs_hnb_init(integer hnb_start := 0, integer hnb_count := 1,
+ CounterNameVals counternames := counternames_hnb) runs on test_CT {
+ g_ctr_hnb := f_counter_name_vals_get_n(IPA_CTRL, "hnb", hnb_count, counternames, start_idx := hnb_start);
+ log("initial hnb rate counters: ", g_ctr_hnb);
+}
+
+/* f_ctrs_hnb_init();
+ * f_do_thing(on_hnb := 0);
+ * f_do_thing(on_hnb := 0);
+ * f_do_other(on_hnb := 1);
+ * f_ctrs_hnb_add(0, "thing", 2);
+ * f_ctrs_hnb_add(1, "other");
+ * f_ctrs_hnb_verify();
+ */
+private function f_ctrs_hnb_verify() runs on test_CT {
+ log("verifying hnb rate counters: ", g_ctr_hnb);
+ f_counter_name_vals_expect_n(IPA_CTRL, "hnb", g_ctr_hnb);
+}
+
+/* convenience: f_ctrs_hnb_add() and f_ctrs_hnb_verify() in one call.
+ * f_ctrs_hnb_init();
+ * f_do_thing(on_hnb := 0);
+ * f_do_thing(on_hnb := 0);
+ * f_do_thing(on_hnb := 0);
+ * f_ctrs_hnb_expect(0, "thing", 3);
+ */
+private function f_ctrs_hnb_expect(integer hnb_nr, charstring countername, integer val := 1) runs on test_CT {
+ f_ctrs_hnb_add(hnb_nr, countername, val);
+ f_ctrs_hnb_verify();
+}
+
+private function f_ctrs_hnb_add(integer hnb_nr, charstring countername, integer val := 1) runs on test_CT {
+ f_counter_name_vals_list_add(g_ctr_hnb, hnb_nr, countername, val);
+}
+
+/* Set all counters for this hnb instance to a specific value. Useful to expect a disconnected and discarded hnb,
+ * because -1 is returned by f_counter_name_vals_get_n() when the hnb is not present on the CTRL interface. */
+private function f_ctrs_hnb_set_all(integer hnb_nr, integer val) runs on test_CT {
+ for (var integer i := 0; i < lengthof(counternames_hnb); i := i + 1) {
+ f_counter_name_vals_list_set(g_ctr_hnb, hnb_nr, counternames_hnb[i].name, val);
+ }
+}
+
+private function f_vty_run_hnbgw(TELNETasp_PT pt, charstring cmd)
+{
+ f_vty_enter_config(pt);
+ f_vty_transceive(pt, "hnbgw");
+ f_vty_transceive(pt, cmd);
+ f_vty_transceive(pt, "end");
+}
+
+testcase TC_hnb_disconnected_timeout() runs on test_CT {
+ g_num_hnbs := 1;
+ f_init(start_hnb := true);
+
+ f_vty_run_hnbgw(HNBGWVTY, "timer hnbgw X35 5");
+
+ /* Init the counters when the hnb already exists. There should be a nonzero iuh:established count now. */
+ f_ctrs_hnb_init();
+
+ /* Drop the Iuh link */
+ f_drop_hnodeb(0);
+ f_sleep(1.0);
+
+ /* The hNodeB persistent state should still be around, because X35 has not yet elapsed. */
+ f_ctrs_hnb_verify();
+
+ f_sleep(5.0);
+ /* We get -1 counters when the CTRL interface returned an error for the requested counter, meaning that the
+ * hnb_persistent no longer exists. Verify that it is gone: */
+ f_ctrs_hnb_set_all(0, -1);
+ f_ctrs_hnb_verify();
+
+ f_sleep(1.0);
+
+ /* Connect again. */
+ var RuaOps rua_ops := {
+ create_cb := refers(IuhRanapCreateCallback),
+ unitdata_cb := refers(IuhRanapUnitdataCallback)
+ };
+ f_init_hnodeb(testcasename(), 0, rua_ops);
+
+ /* still disconnected until actually registered on HNBAP */
+ f_ctrs_hnb_verify();
+
+ f_hnbap_hnb_register(0);
+ /* The hNodeB has come back to existence, so expect 0, not -1 anymore: */
+ f_ctrs_hnb_set_all(0, 0);
+ /* Also we've registered once. */
+ f_ctrs_hnb_add(0, "iuh:established", 1);
+ f_ctrs_hnb_verify();
+ f_sleep(1.0);
+
+ /* Again drop the Iuh link, wait for X35 and see that it's gone again. */
+ f_drop_hnodeb(0);
+ f_ctrs_hnb_verify();
+ f_sleep(6.0);
+ f_ctrs_hnb_set_all(0, -1);
+ f_ctrs_hnb_verify();
+
+ f_shutdown_helper();
+}
+
+/* regular UE registration */
+testcase TC_ue_register() runs on test_CT {
+ var UE_Identity ue_id := { iMSI := imsi_hex2oct(f_gen_imsi(1)) };
+ g_num_hnbs := 1;
+ f_init(start_hnb := true);
+ f_hnbap_ue_register(0, ue_id);
+ f_shutdown_helper();
+}
+
+/* regular UE registration (UE Identity: TMSI+LAI) */
+testcase TC_ue_register_tmsi_lai() runs on test_CT {
+ var UE_Identity ue_id := { tMSILAI := { tMSI := oct2bit(f_gen_tmsi(0)),
+ lAI := { pLMNID := '00F110'O, lAC := '2342'O }
+ }
+ };
+ g_num_hnbs := 1;
+ f_init(start_hnb := true);
+ f_hnbap_ue_register(0, ue_id);
+ f_shutdown_helper();
+}
+
+
+/* UE registration from unregistered HNB */
+testcase TC_ue_register_before_hnb_register() runs on test_CT {
+ var UE_Identity ue_id := { iMSI := imsi_hex2oct(f_gen_imsi(1)) };
+ g_num_hnbs := 1;
+ f_init(start_hnb := false);
+ f_hnbap_ue_register(0, ue_id, expect_reject := true);
+ f_shutdown_helper();
+}
+
+/***********************************************************************
+ * RUA / RANAP Testing
+ ***********************************************************************/
+
+/* Translate from {msc,sgsn}x{0..n} to the proper index to use in g_cn[].
+ * g_cn[] stores CN links, MSCs and SGSNs in the same array.
+ * For example, for 'sgsn 23', use g_cn[ f_cn_idx(ps_domain := true, cn_nr := 23) ].
+ *
+ * Note the naming:
+ * cn_nr is the number used in the cfg file, as in 'msc 0'.
+ * cn_idx is the array index in g_cn[].
+ */
+private function f_cn_idx(boolean ps_domain, integer cn_nr := 0) return integer
+{
+ if (ps_domain) {
+ return FIRST_SGSN_IDX + cn_nr;
+ }
+ return FIRST_MSC_IDX + cn_nr;
+}
+
+private template (value) TestHdlrParams
+t_pars(integer imsi_suffix, boolean ps_domain := false, integer hnb_idx := 0,
+ boolean expect_separate_sccp_cr := false, integer tx_sccp_cr_data_len := 0,
+ integer cn_nr := 0, template (value) RANAP_IEs.Cause rab_rel_cause := ts_RanapCause_nas_normal) := {
+ hnb_idx := hnb_idx,
+ cn_idx := f_cn_idx(ps_domain, cn_nr),
+ imsi := f_gen_imsi(imsi_suffix),
+ ps_domain := ps_domain,
+ mgcp_pars := t_MgcpParams,
+ hnb := omit, /* filled in later */
+ expect_separate_sccp_cr := expect_separate_sccp_cr,
+ tx_sccp_cr_data_len := tx_sccp_cr_data_len,
+ pfcp_local_addr := mp_pfcp_ip_local,
+ nas_pdu := omit,
+ sccp_addr_msc := omit,
+ sccp_addr_hnbgw := omit,
+ rab_rel_cause := rab_rel_cause
+}
+
+/* Create an Iuh connection; send InitialUE; expect it to appear on new SCCP conenction */
+friend function f_tc_initial_ue(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ f_init_handler(pars);
+ var RANAP_PDU tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+}
+testcase TC_ranap_cs_initial_ue() runs on test_CT {
+ var ConnHdlr vc_conn;
+
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_initial_ue), t_pars(1));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+testcase TC_ranap_ps_initial_ue() runs on test_CT {
+ var ConnHdlr vc_conn;
+
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_initial_ue), t_pars(2, true));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+private function f_vty_set_sccp_max_optional_data(TELNETasp_PT pt, integer val := -1)
+{
+ var charstring valstr;
+ if (val < 0) {
+ valstr := "standard";
+ } else {
+ valstr := int2str(val);
+ }
+ f_vty_enter_config(pt);
+ f_vty_transceive(pt, "cs7 instance 0");
+ f_vty_transceive(pt, "sccp max-optional-data " & valstr);
+ f_vty_transceive(pt, "end");
+}
+
+testcase TC_ranap_cs_initial_ue_empty_cr() runs on test_CT {
+ var ConnHdlr vc_conn;
+
+ g_num_hnbs := 1;
+ f_init();
+
+ f_vty_set_sccp_max_optional_data(HNBGWVTY, 0);
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_initial_ue), t_pars(1, expect_separate_sccp_cr := true));
+ vc_conn.done;
+
+ /* reset */
+ f_vty_set_sccp_max_optional_data(HNBGWVTY);
+
+ f_shutdown_helper();
+}
+testcase TC_ranap_ps_initial_ue_empty_cr() runs on test_CT {
+ var ConnHdlr vc_conn;
+
+ g_num_hnbs := 1;
+ f_init();
+
+ f_vty_set_sccp_max_optional_data(HNBGWVTY, 0);
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_initial_ue), t_pars(2, true, expect_separate_sccp_cr := true));
+ vc_conn.done;
+
+ /* reset */
+ f_vty_set_sccp_max_optional_data(HNBGWVTY);
+
+ f_shutdown_helper();
+}
+
+type record Testdata_CR_Limit {
+ integer data_len,
+ integer max_optional_data,
+ boolean expect_separate_sccp_cr
+};
+type record of Testdata_CR_Limit Testdata_CR_Limits;
+
+testcase TC_sccp_cr_limit() runs on test_CT {
+ g_num_hnbs := 1;
+ f_init();
+
+ const Testdata_CR_Limits tests := {
+ { data_len := 130, max_optional_data := -1, expect_separate_sccp_cr := false },
+ { data_len := 131, max_optional_data := -1, expect_separate_sccp_cr := true },
+
+ { data_len := 100, max_optional_data := 100, expect_separate_sccp_cr := false },
+ { data_len := 101, max_optional_data := 100, expect_separate_sccp_cr := true },
+
+ { data_len := 200, max_optional_data := 200, expect_separate_sccp_cr := false },
+ { data_len := 201, max_optional_data := 200, expect_separate_sccp_cr := true }
+ };
+
+ var integer csps;
+ for (csps := 0; csps < 2; csps := csps + 1) {
+ var boolean ps_domain := (csps > 0);
+
+ var integer i;
+ for (i := 0; i < lengthof(tests); i := i + 1) {
+ var Testdata_CR_Limit t := tests[i];
+ f_logp(HNBGWVTY,
+ "TEST PART TC_sccp_cr_limit ps_domain=" & f_bool2str(ps_domain)
+ & " data_len=" & int2str(t.data_len)
+ & " max_optional_data=" & int2str(t.max_optional_data)
+ & " expect_separate_sccp_cr=" & f_bool2str(t.expect_separate_sccp_cr)
+ );
+
+ f_vty_set_sccp_max_optional_data(HNBGWVTY, t.max_optional_data);
+ var ConnHdlr vc_conn;
+ vc_conn := f_start_handler_with_pars(refers(f_tc_initial_ue),
+ t_pars(100 + i,
+ ps_domain := ps_domain,
+ expect_separate_sccp_cr := t.expect_separate_sccp_cr,
+ tx_sccp_cr_data_len := t.data_len));
+ vc_conn.done;
+ }
+ }
+
+ /* reset */
+ f_vty_set_sccp_max_optional_data(HNBGWVTY);
+
+ f_shutdown_helper();
+}
+
+/* Reply to a received CRCX with an OK (or the reply configured in cpars), using the given parameters.
+ * Return true when an OK reply was sent, false otherwise.
+ * Count occurrence of Osmux, include Osmux parameters in the reply if necessary. */
+function f_handle_crcx(inout MgcpParameters pars, MgcpCommand mgcp_cmd) return template MgcpResponse {
+ var MgwResponse conn := pars.mgw_conn_ran;
+ if (pars.got_crcx_count > 0) {
+ conn := pars.mgw_conn_cn;
+ }
+ pars.got_crcx_count := pars.got_crcx_count + 1;
+
+ var MgcpMessage mgcp_msg := {
+ command := mgcp_cmd
+ }
+ var template MgcpResponse mgcp_resp;
+ var MgcpOsmuxCID osmux_cid;
+ var MgcpCallId call_id := f_MgcpCmd_extract_call_id(mgcp_cmd);
+ if (ispresent(pars.mgcp_call_id)) {
+ if (pars.mgcp_call_id != call_id) {
+ setverdict(fail, "CRCX contained unexpected call id. Expected:", pars.mgcp_call_id, " got:", call_id);
+ mtc.stop;
+ }
+ } else {
+ pars.mgcp_call_id := call_id;
+ }
+
+ /* When the endpoint contains a wildcard we keep the endpoint
+ * identifier we have set up in pars. Otherwise we use the
+ * endpoint name that the call agent has supplied */
+ if (match(mgcp_cmd.line.ep, t_MGCP_EP_wildcard) == false) {
+ pars.mgcp_ep := mgcp_cmd.line.ep;
+ }
+
+ if (conn.resp == -1) {
+ /* Reply with rror */
+ var MgcpResponse mgcp_rsp := {
+ line := {
+ code := "542",
+ trans_id := mgcp_cmd.line.trans_id,
+ string := "FORCED_FAIL"
+ },
+ sdp := omit
+
+ }
+ var MgcpParameter mgcp_rsp_param := {
+ code := "Z",
+ val := pars.mgcp_ep
+ };
+ mgcp_rsp.params[0] := mgcp_rsp_param;
+ return mgcp_rsp;
+ }
+
+ if (conn.resp == 0) {
+ /* Do not reply at all */
+ return omit;
+ }
+
+ if (conn.resp != 1) {
+ setverdict(fail, "Unexpected value for pars.mgw_conn_*.resp, expect -1, 0 or 1");
+ mtc.stop;
+ }
+
+ var SDP_Message sdp := valueof(ts_SDP(conn.mgw_rtp_ip, conn.mgw_rtp_ip,
+ hex2str(pars.mgcp_call_id), "42",
+ conn.mgw_rtp_port,
+ { int2str(pars.rtp_payload_type) },
+ { valueof(ts_SDP_rtpmap(pars.rtp_payload_type,
+ pars.rtp_sdp_format)),
+ valueof(ts_SDP_ptime(20)) }));
+
+ if (f_mgcp_contains_par(mgcp_msg, "X-OSMUX")) {
+ if (not pars.use_osmux) {
+ setverdict(fail, "MSC sent X-Osmux parameter in MGCP, but not expecting any Osmux");
+ mtc.stop;
+ }
+ pars.got_osmux_count := pars.got_osmux_count + 1;
+ /* we expect MSC to use wildcard here, i.e. osmux_cid == -1 */
+ osmux_cid := f_MgcpCmd_extract_osmux_cid(mgcp_cmd);
+ log("f_handle_crcx(): got Osmux CID: ", osmux_cid);
+ if (osmux_cid != -1) {
+ setverdict(fail, "MSC using unexpected CID " & int2str(osmux_cid) & " != -1");
+ mtc.stop;
+ }
+
+ osmux_cid := 0;
+ mgcp_resp := ts_CRCX_ACK_osmux(mgcp_cmd.line.trans_id, conn.mgcp_connection_id, osmux_cid, sdp);
+ } else {
+ mgcp_resp := ts_CRCX_ACK(mgcp_cmd.line.trans_id, conn.mgcp_connection_id, sdp);
+ }
+
+ f_mgcp_par_append(mgcp_resp.params, ts_MgcpParSpecEP(pars.mgcp_ep));
+
+ return mgcp_resp;
+}
+
+friend function f_create_rab(inout MgcpParameters pars) runs on ConnHdlr {
+ f_rab_ass_req(pars);
+ f_rab_ass_resp(pars);
+}
+
+friend function f_rab_ass_req(inout MgcpParameters pars) runs on ConnHdlr {
+ var MgcpCommand mgcp_cmd;
+ var RANAP_PDU tx;
+ var template RAB_SetupOrModifyList rab_sml;
+ timer T := 5.0;
+
+ /* Send RAB Assignment Request */
+ rab_sml := ts_RAB_SML(t_RAB_id(23), f_ts_RAB_TLA(pars.cn_rtp_ip), t_RAB_binding_port(pars.cn_rtp_port));
+ tx := valueof(ts_RANAP_RabAssReq(rab_sml));
+ BSSAP.send(tx);
+ T.start;
+
+ /* Handle MGCP CRCX */
+ alt {
+ [] MGCP.receive(tr_CRCX) -> value mgcp_cmd {
+ log("CRCX1", mgcp_cmd);
+ var template MgcpResponse mgcp_rsp := f_handle_crcx(pars, mgcp_cmd);
+ MGCP.send(valueof(mgcp_rsp));
+ }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for MGCP");
+ }
+ }
+ T.stop;
+
+ /* Expect RAB Assignment Request with IP/port from CRCX ACK via Iuh */
+ rab_sml := ts_RAB_SML(t_RAB_id(23), f_ts_RAB_TLA(pars.mgw_conn_ran.mgw_rtp_ip), t_RAB_binding_port(pars.mgw_conn_ran.mgw_rtp_port));
+ tx := valueof(ts_RANAP_RabAssReq(rab_sml));
+
+ f_rua_expect(tx);
+}
+
+friend function f_rab_ass_resp(inout MgcpParameters pars) runs on ConnHdlr {
+ var MgcpCommand mgcp_cmd;
+ var RANAP_PDU tx;
+ var template RAB_SetupOrModifiedList rab_smdl;
+
+ /* Send back RAB Assignment Response via Iuh */
+ rab_smdl := ts_RAB_SMdL(t_RAB_id(23), f_ts_RAB_TLA(pars.hnb_rtp_ip), t_RAB_binding_port(pars.hnb_rtp_port));
+ tx := valueof(ts_RANAP_RabAssResp(rab_smdl));
+ RUA.send(tx);
+
+ interleave {
+ /* Expect MDCX with IP/port from RAB Assignment Response */
+ [] MGCP.receive(tr_MDCX(tr_SDP(pars.hnb_rtp_ip, pars.hnb_rtp_port))) -> value mgcp_cmd {
+ var HostName mgw_rtp_ip;
+ var boolean exp_rua_rab_reass := false;
+ log("MDCX1", mgcp_cmd);
+ if (ispresent(pars.mgw_conn_ran.mgw_rtp_ip_mdcx)) {
+ mgw_rtp_ip := pars.mgw_conn_ran.mgw_rtp_ip_mdcx;
+ if (pars.mgw_conn_ran.mgw_rtp_ip != pars.mgw_conn_ran.mgw_rtp_ip_mdcx) {
+ exp_rua_rab_reass := true;
+ }
+ } else {
+ mgw_rtp_ip := pars.mgw_conn_ran.mgw_rtp_ip;
+ }
+
+ /* Verify SDP of MDCX */
+ var SDP_Message sdp := valueof(ts_SDP(mgw_rtp_ip, mgw_rtp_ip, hex2str(pars.mgcp_call_id), "42", pars.mgw_conn_ran.mgw_rtp_port,
+ { int2str(pars.rtp_payload_type) }, { valueof(ts_SDP_rtpmap(pars.rtp_payload_type, pars.rtp_sdp_format)), valueof(ts_SDP_ptime(20)) } ));
+ var template MgcpResponse mgcp_rsp := ts_MDCX_ACK(mgcp_cmd.line.trans_id, pars.mgw_conn_ran.mgcp_connection_id, sdp);
+ MGCP.send(valueof(mgcp_rsp));
+
+ /* If IP address changed, we expect HNBGW to Modify the RAB through RAB-Ass-Req: */
+ if (exp_rua_rab_reass) {
+ var template RAB_SetupOrModifyList rab_sml;
+ /* Expect RAB Assignment Request with IP/port from MDCX ACK via Iuh */
+ rab_sml := ts_RAB_SML(t_RAB_id(23), f_ts_RAB_TLA(pars.mgw_conn_ran.mgw_rtp_ip_mdcx), t_RAB_binding_port(pars.mgw_conn_ran.mgw_rtp_port));
+ tx := valueof(ts_RANAP_RabAssReq(rab_sml));
+
+ f_rua_expect(tx);
+ /* Send back RAB Assignment Response via Iuh */
+ rab_smdl := ts_RAB_SMdL(t_RAB_id(23), f_ts_RAB_TLA(pars.hnb_rtp_ip), t_RAB_binding_port(pars.hnb_rtp_port));
+ tx := valueof(ts_RANAP_RabAssResp(rab_smdl));
+ RUA.send(tx);
+ /* This shouldn't trigger any MGCP, since nothing changed on the HNB IP side. Continue below. */
+ }
+ }
+ /* Handle CRCX for second leg of endpoint, answer with IP/port */
+ [] MGCP.receive(tr_CRCX(pars.mgcp_ep, tr_SDP(pars.cn_rtp_ip, pars.cn_rtp_port))) -> value mgcp_cmd {
+ log("CRCX2", mgcp_cmd);
+ /* Verify SDP of CRCX */
+ var template MgcpResponse mgcp_rsp := f_handle_crcx(pars, mgcp_cmd);
+ MGCP.send(valueof(mgcp_rsp));
+ }
+ }
+
+ /* Expect RAB Assignment Response with IP/port from second CRCX ACK */
+ rab_smdl := ts_RAB_SMdL(t_RAB_id(23), f_ts_RAB_TLA(pars.mgw_conn_cn.mgw_rtp_ip), t_RAB_binding_port(pars.mgw_conn_cn.mgw_rtp_port));
+ tx := valueof(ts_RANAP_RabAssResp(rab_smdl));
+
+ f_bssap_expect(tx);
+}
+
+private altstep as_mgcp_dlcx(inout TestHdlrParams pars) runs on ConnHdlr {
+ var MgcpCommand mgcp_cmd;
+
+ [] MGCP.receive(tr_DLCX(pars.mgcp_pars.mgcp_ep)) -> value mgcp_cmd {
+ log("DLCX", mgcp_cmd);
+ MGCP.send(ts_DLCX_ACK2(mgcp_cmd.line.trans_id));
+ pars.mgcp_pars.got_dlcx_count := pars.mgcp_pars.got_dlcx_count + 1;
+ if (pars.mgcp_pars.got_dlcx_count != pars.mgcp_pars.got_crcx_count) {
+ repeat;
+ }
+ setverdict(pass);
+ }
+}
+
+friend function f_tc_rab_assignment(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ const charstring hnb0_ctr_prefix := "TTCN3.hnb.001-01-L2342-R0-S55-C1.";
+ var MgcpCommand mgcp_cmd;
+ var RANAP_PDU tx;
+ timer T := 5.0;
+
+ f_init_handler(pars);
+ f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit});
+
+ f_statsd_reset();
+
+ tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+
+ /* Expect stats to be 0 */
+ var StatsDExpects expect := {
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.req", mtype := "c", min := 0, max := 0},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.cnf", mtype := "c", min := 0, max := 0},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.fail", mtype := "c", min := 0, max := 0}
+ };
+ f_statsd_expect(expect);
+
+ f_create_rab(pars.mgcp_pars);
+
+ expect := {
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.req", mtype := "c", min := 1, max := 1},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.cnf", mtype := "c", min := 1, max := 1},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.fail", mtype := "c", min := 0, max := 0}
+ };
+ f_statsd_expect(expect);
+
+ /* Send Iu Release */
+ tx := valueof(ts_RANAP_IuReleaseCommand(pars.rab_rel_cause));
+ f_iu2iuh(tx);
+
+ T.start;
+ alt {
+ [] as_mgcp_dlcx(pars) {}
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for DLCX");
+ }
+ }
+
+ tx := valueof(ts_RANAP_IuReleaseComplete());
+ f_iuh2iu(tx);
+}
+
+testcase TC_rab_assignment() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_rab_assignment), t_pars(3));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+friend function f_tc_rab_assign_fail(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ const charstring hnb0_ctr_prefix := "TTCN3.hnb.001-01-L2342-R0-S55-C1.";
+ var MgcpCommand mgcp_cmd;
+ var RANAP_PDU tx;
+ timer T := 5.0;
+
+ f_init_handler(pars);
+ f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit});
+
+ f_statsd_reset();
+
+ tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+
+ /* Expect stats to be 0 */
+ var StatsDExpects expect := {
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.req", mtype := "c", min := 0, max := 0},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.cnf", mtype := "c", min := 0, max := 0},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.fail", mtype := "c", min := 0, max := 0}
+ };
+ f_statsd_expect(expect);
+
+ f_rab_ass_req(pars.mgcp_pars);
+
+ /* Send RAB failed list in response */
+ tx := valueof(ts_RANAP_RabAssResp(rab_fl := ts_RAB_FL(t_RAB_id(23), pars.rab_rel_cause)));
+ f_iuh2iu(tx);
+
+ expect := {
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.req", mtype := "c", min := 1, max := 1},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.cnf", mtype := "c", min := 0, max := 0},
+ {name := hnb0_ctr_prefix & "ranap.cs.rab_act.fail", mtype := "c", min := 1, max := 1}
+ };
+ f_statsd_expect(expect);
+
+
+ T.start;
+ alt {
+ [] as_mgcp_dlcx(pars) {}
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for DLCX");
+ }
+ }
+}
+
+testcase TC_rab_assign_fail() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_rab_assign_fail), t_pars(4, rab_rel_cause := ts_RanapCause_radio_conn_lost));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+friend function f_tc_rab_release(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ const charstring hnb0_ctr_prefix := "TTCN3.hnb.001-01-L2342-R0-S55-C1.";
+ var MgcpCommand mgcp_cmd;
+ var RANAP_PDU tx;
+ timer T := 15.0;
+
+ f_init_handler(pars);
+ f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit});
+
+ f_statsd_reset();
+
+ tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+
+ f_create_rab(pars.mgcp_pars);
+
+ var charstring ctr_name;
+ if (pars.rab_rel_cause == valueof(ts_RanapCause_nas_normal)) {
+ ctr_name := "ranap.cs.rab_rel.req.normal";
+ } else {
+ ctr_name := "ranap.cs.rab_rel.req.abnormal";
+ }
+
+ /* Expect stats to be 0 */
+ var StatsDExpects expect := {
+ {name := hnb0_ctr_prefix & ctr_name, mtype := "c", min := 0, max := 0}
+ };
+ f_statsd_expect(expect);
+
+ /* Send RAB Release */
+ tx := valueof(ts_RANAP_RabAssReq(rab_rl := ts_RAB_RL(t_RAB_id(23), pars.rab_rel_cause)));
+ BSSAP.send(tx);
+
+ expect := {
+ {name := hnb0_ctr_prefix & ctr_name, mtype := "c", min := 1, max := 1}
+ };
+ f_statsd_expect(expect);
+
+ T.start;
+
+ alt {
+ [] as_mgcp_dlcx(pars) {}
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for DLCX");
+ }
+ }
+ T.stop;
+
+ f_rua_expect(tx);
+}
+
+/* RAB release with Cause NAS/Normal (successful/orderly release) */
+testcase TC_rab_release() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_rab_release), t_pars(5));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+/* RAB release with Cause abnormal */
+testcase TC_rab_release_abnormal() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_rab_release),
+ t_pars(8, rab_rel_cause := ts_RanapCause_radio_conn_lost));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+friend function f_tc_rab_assign_mgcp_to(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ var MgcpCommand mgcp_cmd;
+ var RANAP_PDU tx;
+ var template RAB_SetupOrModifyList rab_sml;
+ timer T := 15.0;
+
+ T.start;
+ f_init_handler(pars);
+ f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit});
+
+ tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+
+
+ /* Send RAB Assignment Request */
+ rab_sml := ts_RAB_SML(t_RAB_id(23), f_ts_RAB_TLA(pars.mgcp_pars.cn_rtp_ip), t_RAB_binding_port(pars.mgcp_pars.cn_rtp_port));
+ tx := valueof(ts_RANAP_RabAssReq(rab_sml));
+ BSSAP.send(tx);
+
+ /* Ignore MGCP CRCX */
+ alt {
+ [] MGCP.receive(tr_CRCX) -> value mgcp_cmd {
+ log("Ignoreing CRCX1", mgcp_cmd);
+ repeat;
+ }
+ [] BSSAP.receive(tr_RANAP_IuReleaseRequest(?)) { }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for IuRelease");
+ }
+ }
+
+ /* Send Iu Release */
+ tx := valueof(ts_RANAP_IuReleaseCommand(pars.rab_rel_cause));
+ f_iu2iuh(tx);
+
+ tx := valueof(ts_RANAP_IuReleaseComplete());
+ f_iuh2iu(tx);
+}
+
+testcase TC_rab_assign_mgcp_to() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_rab_assign_mgcp_to), t_pars(6));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+/* Test case where IuUP IP address announced by HNB and updated through MDCX
+ * makes MGW select a new local IuUP address. HNBGW is expected to update the HNB
+ * through RAB-Modify-Req. */
+testcase TC_rab_assign_mgw_iuup_addr_chg() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+ var template (value) TestHdlrParams pars := t_pars(3);
+ /* Emulate change of local IuUP IP address after rx MDCX: */
+ pars.mgcp_pars.mgw_conn_ran.mgw_rtp_ip_mdcx := "127.3.2.1";
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_rab_assignment), pars);
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+/* Create an Iuh connection; send InitialUE; transceive data both directions */
+friend function f_tc_ranap_bidir(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ f_init_handler(pars);
+
+ /* HNB -> MSC: InitialUE */
+ f_iuh2iu_connect(f_build_initial_ue(g_pars));
+
+ /* MSC <- HNB: DirectTransfer */
+ f_iu2iuh(ts_RANAP_DirectTransfer(f_rnd_octstring(10)));
+ /* MSC -> HNB: DirectTransfer */
+ f_iuh2iu(ts_RANAP_DirectTransfer(f_rnd_octstring(10)));
+
+ /* HNB <- MSC: CommonID */
+ f_iu2iuh(ts_RANAP_CommonId(hex2oct(pars.imsi)));
+}
+testcase TC_ranap_cs_bidir() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_ranap_bidir), t_pars(3));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+testcase TC_ranap_ps_bidir() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_ranap_bidir), t_pars(4, true));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+
+private function f_tc_ranap_mo_disconnect(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ f_init_handler(pars);
+
+ /* HNB -> MSC: InitialUE */
+ f_iuh2iu_connect(f_build_initial_ue(g_pars));
+
+ /* MSC <- HNB: DirectTransfer */
+ f_iu2iuh(ts_RANAP_DirectTransfer(f_rnd_octstring(10)));
+ /* MSC -> HNB: DirectTransfer */
+ f_iuh2iu(ts_RANAP_DirectTransfer(f_rnd_octstring(10)));
+
+ /* MSC <- HNB: RUA disconnect */
+ f_iuh2iu_disconnect(ts_RANAP_IuReleaseComplete, RUA_IEs.Cause:{misc:=processing_overload});
+}
+testcase TC_ranap_cs_mo_disconnect() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_ranap_mo_disconnect), t_pars(5));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+testcase TC_ranap_ps_mo_disconnect() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_ranap_mo_disconnect), t_pars(6));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+type record FTeid {
+ HostName addr,
+ OCT4 teid
+}
+
+type record FTeids {
+ FTeid local,
+ FTeid remote
+}
+
+
+/* 'local' and 'remote' refer to the GTP information from the UPF's point of view:
+ * HNB UPF CN
+ * access.remote <---> access.local | core.local <---> core.remote
+ */
+type record GtpParameters {
+ FTeids core,
+ FTeids access
+}
+
+/* HNB UPF CN
+ * access.remote <---> access.local | core.local <---> core.remote
+ * 127.0.0.4 127.0.0.3 127.0.0.2 127.0.0.1
+ * 0x44004400 0x30303030 0x22002200 0x10101010
+ */
+template GtpParameters t_GtpParameters := {
+ core := {
+ local := {
+ addr := "127.0.0.2",
+ teid := '22002200'O
+ },
+ remote := {
+ addr := "127.0.0.1",
+ teid := '10101010'O
+ }
+ },
+ access := {
+ local := {
+ addr := "127.0.0.3",
+ teid := '30303030'O
+ },
+ remote := {
+ addr := "127.0.0.4",
+ teid := '44004400'O
+ }
+ }
+}
+
+private function f_pfcp_expect(template (present) PDU_PFCP exp_rx, float wait_time := 5.0) runs on ConnHdlr return PDU_PFCP
+{
+ var PDU_PFCP rx;
+ timer T := wait_time;
+ T.start;
+ alt {
+ [] PFCP.receive(exp_rx) -> value rx {
+ setverdict(pass);
+ }
+ [] PFCP.receive(PDU_PFCP:?) {
+ setverdict(fail, "Got an unexpected PFCP message, was waiting for ", exp_rx);
+ mtc.stop;
+ }
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for PFCP ", exp_rx);
+ mtc.stop;
+ }
+ }
+ T.stop;
+ return rx;
+}
+
+friend function f_tc_ps_rab_assignment_with_pfcp(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ var RANAP_PDU tx;
+ var RANAP_PDU rx;
+
+ f_init_handler(pars);
+
+ f_pfcp_register();
+
+ var PDU_PFCP m;
+ var Node_ID upf_node_id := valueof(ts_PFCP_Node_ID_fqdn("\07osmocom\03org"));
+
+ m := f_pfcp_expect(tr_PFCP_Assoc_Setup_Req(), wait_time := 15.0);
+ PFCP.send(ts_PFCP_Assoc_Setup_Resp(m.sequence_number, upf_node_id,
+ ts_PFCP_Cause(REQUEST_ACCEPTED), 1234));
+
+ tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+
+ var GtpParameters gtp_pars := valueof(t_GtpParameters);
+ var template RAB_SetupOrModifyList rab_sml;
+
+ /* Send RAB Assignment Request */
+ rab_sml := ts_RAB_SML_ps(t_RAB_id(23), f_ts_RAB_TLA(gtp_pars.core.remote.addr), gtp_pars.core.remote.teid);
+ tx := valueof(ts_RANAP_RabAssReq(rab_sml));
+ BSSAP.send(tx);
+
+ /* Expect PFCP Session Establishment Request. */
+ m := f_pfcp_expect(tr_PFCP_Session_Est_Req());
+ var PFCP_Session_Establishment_Request serq := m.message_body.pfcp_session_establishment_request;
+ var F_SEID hnbgw_f_seid := serq.CP_F_SEID;
+
+ /* Acting as UPF, invent a new PFCP SEID to send to HNBGW. Respond to the Session Establishment.
+ * The PFCP response must have the same sequence_number as the request. */
+ var template F_SEID up_f_seid := ts_PFCP_F_SEID_ipv4(f_inet_addr("127.0.0.1"), '1111111111111111'O);
+ var template F_TEID f_teid1 := ts_PFCP_F_TEID_ipv4(gtp_pars.core.local.teid,
+ f_inet_addr(gtp_pars.core.local.addr));
+ var template F_TEID f_teid2 := ts_PFCP_F_TEID_ipv4(gtp_pars.access.local.teid,
+ f_inet_addr(gtp_pars.access.local.addr));
+ var template Created_PDR pdr1 := ts_PFCP_Created_PDR(pdr_id := serq.create_PDR_list[0].grouped_ie.pdr_id,
+ local_F_TEID := f_teid1);
+ var template Created_PDR pdr2 := ts_PFCP_Created_PDR(pdr_id := serq.create_PDR_list[1].grouped_ie.pdr_id,
+ local_F_TEID := f_teid2);
+ var template PDU_PFCP r := ts_PFCP_Session_Est_Resp(seq_nr := m.sequence_number,
+ node_id := upf_node_id,
+ seid := hnbgw_f_seid.seid,
+ f_seid := up_f_seid,
+ created_pdr := {pdr1, pdr2});
+ PFCP.send(r);
+
+ /* Expect on Iuh: RAB Assignment Request with IP/port from PFCP Session Est Resp */
+ rab_sml := ts_RAB_SML_ps(t_RAB_id(23), f_ts_RAB_TLA(gtp_pars.access.local.addr),
+ gtp_pars.access.local.teid);
+ rx := valueof(ts_RANAP_RabAssReq(rab_sml));
+ f_rua_expect(rx);
+
+ /* Send back RAB Assignment Response via Iuh */
+ var template RAB_SetupOrModifiedList rab_smdl;
+ rab_smdl := ts_RAB_SMdL_ps(t_RAB_id(23), f_ts_RAB_TLA(gtp_pars.access.remote.addr),
+ gtp_pars.access.remote.teid);
+ tx := valueof(ts_RANAP_RabAssResp(rab_smdl));
+ RUA.send(tx);
+
+ m := f_pfcp_expect(tr_PFCP_Session_Mod_Req(up_f_seid.seid));
+ r := ts_PFCP_Session_Mod_Resp(m.sequence_number, hnbgw_f_seid.seid);
+ PFCP.send(r);
+
+ rab_smdl := ts_RAB_SMdL_ps(t_RAB_id(23), f_ts_RAB_TLA(gtp_pars.core.local.addr), gtp_pars.core.local.teid);
+ f_bssap_expect(tr_RANAP_RabAssResp(rab_smdl));
+
+ f_sleep(2.0);
+ tx := valueof(ts_RANAP_IuReleaseCommand(pars.rab_rel_cause));
+ f_iu2iuh(tx);
+
+ tx := valueof(ts_RANAP_IuReleaseComplete());
+ f_iuh2iu(tx);
+
+ m := f_pfcp_expect(tr_PFCP_Session_Del_Req(up_f_seid.seid));
+ PFCP.send(ts_PFCP_Session_Del_Resp(m.sequence_number, hnbgw_f_seid.seid));
+
+ f_sleep(2.0);
+}
+
+testcase TC_ps_rab_assignment_with_pfcp() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+ f_init_pfcp(testcasename());
+ f_sleep(1.0);
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_ps_rab_assignment_with_pfcp), t_pars(7, ps_domain := true));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+altstep as_disallow_pfcp() runs on ConnHdlr {
+ [] PFCP.receive(PDU_PFCP:?) {
+ setverdict(fail, "Received PFCP message, but no PFCP communication expected");
+ mtc.stop;
+ }
+}
+
+friend function f_tc_ps_rab_assignment_without_pfcp(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ var RANAP_PDU tx;
+ var RANAP_PDU rx;
+ timer T := 5.0;
+
+ f_init_handler(pars);
+
+ f_pfcp_register();
+ activate(as_disallow_pfcp());
+
+ tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+
+ var GtpParameters gtp_pars := valueof(t_GtpParameters);
+ var template RAB_SetupOrModifyList rab_sml;
+
+ /* Send RAB Assignment Request */
+ rab_sml := ts_RAB_SML_ps(t_RAB_id(23), f_ts_RAB_TLA(gtp_pars.core.remote.addr), gtp_pars.core.remote.teid);
+ tx := valueof(ts_RANAP_RabAssReq(rab_sml));
+ BSSAP.send(tx);
+
+ /* Expect on Iuh: unmodified RAB Assignment Request */
+ rx := valueof(ts_RANAP_RabAssReq(rab_sml));
+ f_rua_expect(rx);
+
+ /* Send back RAB Assignment Response via Iuh */
+ var template RAB_SetupOrModifiedList rab_smdl;
+ rab_smdl := ts_RAB_SMdL_ps(t_RAB_id(23), f_ts_RAB_TLA(gtp_pars.access.remote.addr),
+ gtp_pars.access.remote.teid);
+ tx := valueof(ts_RANAP_RabAssResp(rab_smdl));
+ RUA.send(tx);
+
+ /* Expect on IuPS: unmodified RAB Assignment Response */
+ f_bssap_expect(tr_RANAP_RabAssResp(rab_smdl));
+
+ f_sleep(2.0);
+ tx := valueof(ts_RANAP_IuReleaseCommand(pars.rab_rel_cause));
+ f_iu2iuh(tx);
+
+ tx := valueof(ts_RANAP_IuReleaseComplete());
+ f_iuh2iu(tx);
+
+ f_sleep(2.0);
+}
+
+testcase TC_ps_rab_assignment_without_pfcp() runs on test_CT {
+ var ConnHdlr vc_conn;
+ f_init();
+ f_init_pfcp(testcasename());
+ f_sleep(1.0);
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_ps_rab_assignment_without_pfcp), t_pars(7, ps_domain := true));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+/* Default list of counters for a 'cn' entity to test the cnpool feature. */
+const CounterNameVals counternames_cnpool := {
+ { "cnpool:subscr:new", 0 },
+ { "cnpool:subscr:known", 0 },
+ { "cnpool:subscr:reattach", 0 },
+ { "cnpool:subscr:attach_lost", 0 },
+ { "cnpool:subscr:paged", 0 }
+};
+private function f_ctrs_cn_init(boolean ps_domain, integer cn_count := 0,
+ CounterNameVals counternames := counternames_cnpool) runs on test_CT {
+ if (ps_domain) {
+ g_ctr_cn_node_name := "sgsn";
+ if (cn_count == 0) {
+ cn_count := NUM_SGSN;
+ }
+ } else {
+ g_ctr_cn_node_name := "msc";
+ if (cn_count == 0) {
+ cn_count := NUM_MSC;
+ }
+ }
+ g_ctr_cn := f_counter_name_vals_get_n(IPA_CTRL, g_ctr_cn_node_name, cn_count, counternames);
+ log("initial " & g_ctr_cn_node_name & " rate counters: ", g_ctr_cn);
+}
+
+/* f_ctrs_cn_init();
+ * f_do_thing(on_cn := 0);
+ * f_do_thing(on_cn := 0);
+ * f_do_other(on_cn := 1);
+ * f_ctrs_cn_add(0, "thing", 2);
+ * f_ctrs_cn_add(1, "other");
+ * f_ctrs_cn_verify();
+ */
+private function f_ctrs_cn_verify() runs on test_CT {
+ log("verifying", g_ctr_cn_node_name, " rate counters: ", g_ctr_cn);
+ f_counter_name_vals_expect_n(IPA_CTRL, g_ctr_cn_node_name, g_ctr_cn);
+}
+
+/* convenience: f_ctrs_cn_add() and f_ctrs_cn_verify() in one call.
+ * f_ctrs_cn_init();
+ * f_do_thing(on_cn := 0);
+ * f_do_thing(on_cn := 0);
+ * f_do_thing(on_cn := 0);
+ * f_ctrs_cn_expect(0, "thing", 3);
+ */
+private function f_ctrs_cn_expect(integer cn_nr, charstring countername, integer val := 1) runs on test_CT {
+ f_ctrs_cn_add(cn_nr, countername, val);
+ f_ctrs_cn_verify();
+}
+
+private function f_ctrs_cn_add(integer cn_nr, charstring countername, integer val := 1) runs on test_CT {
+ f_counter_name_vals_list_add(g_ctr_cn, cn_nr, countername, val);
+}
+
+private function f_perform_compl_l3(octetstring nas, boolean do_clear := true, boolean expect_iu_l3 := true)
+runs on ConnHdlr {
+ timer T := 10.0;
+
+ /* create an expect on the Iu side for the random NAS portion */
+ if (g_pars.expect_separate_sccp_cr) {
+ f_ran_register_sccp_cr_without_payload();
+ } else {
+ f_ran_register_exp(nas);
+ }
+
+ /* send Connect via Iuh (creating a RUA connection) */
+ var RANAP_PDU tx := f_build_initial_ue_with_nas(g_pars, nas);
+ RUA.send(RUA_Conn_Req:{g_pars.ps_domain, tx});
+
+ if (expect_iu_l3) {
+ /* Expect same message to arrive at CN */
+ f_bssap_expect(tx);
+ }
+}
+
+private function f_tc_cnpool_compl_l3(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ f_init_handler(pars);
+ f_perform_compl_l3(g_pars.nas_pdu);
+}
+
+private function f_TC_cnpool_compl_l3(boolean ps_domain, octetstring nas_pdu, integer cn_nr,
+ template (omit) charstring inc_countername := omit) runs on test_CT {
+ var ConnHdlr vc_conn;
+ var template (value) TestHdlrParams pars := t_pars(0, ps_domain := ps_domain, cn_nr := cn_nr);
+ pars.nas_pdu := nas_pdu;
+ log("XXX ", pars);
+ vc_conn := f_start_handler_with_pars(refers(f_tc_cnpool_compl_l3), pars);
+ vc_conn.done;
+
+ if (not istemplatekind(inc_countername, "omit")) {
+ f_ctrs_cn_expect(cn_nr, valueof(inc_countername));
+ }
+}
+
+function f_TC_cnpool_compl_l3_list(boolean ps_domain, ro_octetstring compl3, Osmocom_Types.ro_integer cn_nrs,
+ charstring inc_countername) runs on test_CT {
+ var integer n := lengthof(compl3);
+ if (n < lengthof(cn_nrs)) {
+ n := lengthof(cn_nrs);
+ }
+ for (var integer i := 0; i < n; i := i + 1) {
+ var integer cn_nr := cn_nrs[i mod lengthof(cn_nrs)];
+ f_TC_cnpool_compl_l3(ps_domain, compl3[i mod lengthof(compl3)], cn_nr, inc_countername);
+ }
+}
+
+type enumerated Compl3Type {
+ /* CS */
+ LU,
+ CMSERV,
+ PAGRESP,
+ IMSIDETACH,
+
+ /* PS */
+ ATTACHREQ,
+ RAUREQ,
+ DETREQ
+};
+
+private function f_gen_one_compl_l3(Compl3Type compl3type, template (value) MobileIdentityLV mi,
+ integer ps_nri := -1
+ ) return octetstring
+{
+ /* CS */
+ if (compl3type == LU) {
+ return enc_PDU_ML3_MS_NW(valueof(ts_LU_REQ(LU_Type_IMSI_Attach, valueof(mi), '00F110'O)));
+ }
+ if (compl3type == CMSERV) {
+ return enc_PDU_ML3_MS_NW(valueof(ts_CM_SERV_REQ(CM_TYPE_MO_CALL, valueof(mi))));
+ }
+ if (compl3type == PAGRESP) {
+ return enc_PDU_ML3_MS_NW(valueof(ts_PAG_RESP(valueof(mi))));
+ }
+ if (compl3type == IMSIDETACH) {
+ return enc_PDU_ML3_MS_NW(valueof(ts_ML3_MO_MM_IMSI_DET_Ind(valueof(mi))));
+ }
+
+ /* PS */
+ var template (omit) NetworkResourceIdentifierContainerTLV nri := omit;
+ if (ps_nri >= 0) {
+ nri := valueof(ts_GMM_NRI(ps_nri));
+ }
+
+ if (compl3type == ATTACHREQ) {
+ return enc_PDU_L3_MS_SGSN(valueof(ts_GMM_ATTACH_REQ(valueof(mi), f_RAI('001'H, '01'H, '2a2a'O, '17'O),
+ nri := nri)));
+ }
+ if (compl3type == RAUREQ) {
+ return enc_PDU_L3_MS_SGSN(valueof(ts_GMM_RAU_REQ(valueof(mi), GPRS_UPD_T_PERIODIC,
+ f_RAI('001'H, '01'H, '2a2a'O, '17'O),
+ nri := nri)));
+ }
+ if (compl3type == DETREQ) {
+ return enc_PDU_L3_MS_SGSN(valueof(ts_GMM_DET_REQ_MO_mi(c_GMM_DTT_MO_GPRS, power_off := false,
+ p_tmsi := valueof(ts_MI_TLV(mi.mobileIdentityV)))));
+ }
+
+ setverdict(fail, "unknown complete layer 3 type");
+ mtc.stop;
+}
+
+type record of Compl3Type ro_Compl3Type;
+type record of MobileIdentityLV ro_MobileIdentityLV;
+type record of octetstring ro_octetstring;
+
+/* Generate a list of n Complete Layer 3 NAS PDUs,
+ * rotating through the message kinds listed in 'types' and the mobile identities in mis.
+ */
+private function f_gen_compl_l3(ro_Compl3Type types, ro_MobileIdentityLV mis, integer n) return ro_octetstring
+{
+ var ro_octetstring res := {};
+ for (var integer i := 0; i < n; i := i + 1) {
+ var integer ti := i mod lengthof(types);
+ var integer mi := i mod lengthof(mis);
+ res[i] := f_gen_one_compl_l3(types[ti], mis[mi]);
+ }
+ return res;
+}
+
+private function f_gen_mi_imsi(integer n) return MobileIdentityLV
+{
+ return valueof(ts_MI_IMSI_LV(f_gen_imsi(n)));
+}
+
+private function f_gen_mi_imsis(integer n) return ro_MobileIdentityLV
+{
+ var ro_MobileIdentityLV mis := {};
+ for (var integer i := 0; i < n; i := i + 1) {
+ mis[i] := f_gen_mi_imsi(n);
+ }
+ return mis;
+}
+
+function f_vty_set_roundrobin_next(TELNETasp_PT VTY, boolean ps_domain, integer cn_nr)
+{
+ var charstring msc_sgsn;
+ if (ps_domain) {
+ msc_sgsn := "sgsn";
+ } else {
+ msc_sgsn := "msc";
+ }
+ f_vty_transceive(VTY, "cnpool roundrobin next " & msc_sgsn & " " & int2str(cn_nr));
+}
+
+private function f_gen_compl3_by_domain(boolean ps_domain, integer n, template (omit) ro_MobileIdentityLV mis := omit) return ro_octetstring{
+ var ro_Compl3Type types;
+ if (ps_domain) {
+ types := { ATTACHREQ, RAUREQ, DETREQ };
+ } else {
+ types := { LU, CMSERV, PAGRESP, IMSIDETACH };
+ }
+ if (istemplatekind(mis, "omit")) {
+ mis := f_gen_mi_imsis(n);
+ }
+ return f_gen_compl_l3(types, valueof(mis), n);
+}
+
+/* Various Complete Layer 3 by IMSI all end up with the first MSC, because the other MSCs are not connected. */
+testcase TC_mscpool_L3Compl_on_1_cnlink() runs on test_CT {
+ f_TC_cnpool_L3Compl_on_1_cnlink(ps_domain := false);
+}
+testcase TC_sgsnpool_L3Compl_on_1_cnlink() runs on test_CT {
+ f_TC_cnpool_L3Compl_on_1_cnlink(ps_domain := true);
+}
+function f_TC_cnpool_L3Compl_on_1_cnlink(boolean ps_domain) runs on test_CT {
+
+ f_init();
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_octetstring compl3 := f_gen_compl3_by_domain(ps_domain, 4);
+ f_TC_cnpool_compl_l3_list(ps_domain, compl3, {0, 0, 0, 0}, "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+/* Three Layer 3 Complete by IMSI are round-robin'ed across two connected MSCs */
+testcase TC_mscpool_L3Complete_by_imsi_round_robin() runs on test_CT {
+ f_TC_cnpool_L3Complete_by_imsi_round_robin(ps_domain := false);
+}
+testcase TC_sgsnpool_L3Complete_no_nri_round_robin() runs on test_CT {
+ f_TC_cnpool_L3Complete_by_imsi_round_robin(ps_domain := true);
+}
+function f_TC_cnpool_L3Complete_by_imsi_round_robin(boolean ps_domain) runs on test_CT {
+
+ f_init(nr_msc := 2, nr_sgsn := 2);
+ f_sleep(1.0);
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_octetstring compl3 := f_gen_compl3_by_domain(ps_domain, 3);
+
+ f_TC_cnpool_compl_l3_list(ps_domain, compl3,
+ /* Third Complete Layer 3 wraps back to msc 0 */
+ cn_nrs := {0, 1, 0},
+ inc_countername := "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+/* Three LU by TMSI are round-robin'ed across two connected MSCs, because they contain a NULL-NRI (0, 1)
+ * (configured in osmo-hnbgw.cfg). */
+testcase TC_mscpool_LU_by_tmsi_null_nri_0_round_robin() runs on test_CT {
+ f_TC_cnpool_LU_by_tmsi_null_nri_N_round_robin(ps_domain := false, nri_val := 0);
+}
+/* For NRI == 1, one of the MSC also has the NULL-NRI as part of its owned NRIs, but the NULL-NRI setting is stronger
+ * than that. */
+testcase TC_mscpool_LU_by_tmsi_null_nri_1_round_robin() runs on test_CT {
+ f_TC_cnpool_LU_by_tmsi_null_nri_N_round_robin(ps_domain := false, nri_val := 1);
+}
+function f_TC_cnpool_LU_by_tmsi_null_nri_N_round_robin(boolean ps_domain, integer nri_val) runs on test_CT {
+
+ f_init(nr_msc := 2, nr_sgsn := 2);
+ f_sleep(1.0);
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_MobileIdentityLV mis := { valueof(ts_MI_TMSI_NRI_LV(nri_val)) };
+ var ro_octetstring compl3;
+ if (ps_domain) {
+ compl3 := {
+ f_gen_one_compl_l3(ATTACHREQ, mis[0], nri_val)
+ };
+ } else {
+ compl3 := f_gen_compl_l3({LU}, mis, 1);
+ }
+
+ f_TC_cnpool_compl_l3_list(ps_domain, compl3,
+ /* The third Complete Layer 3 wraps back to msc 0 */
+ {0, 1, 0},
+ "cnpool:subscr:reattach");
+ f_shutdown_helper();
+}
+
+/* Three Layer 3 Complete by TMSI are round-robin'ed across two connected MSCs, because they contain an NRI not
+ * assigned to any MSC (configured in osmo-hnbgw.cfg). */
+testcase TC_mscpool_L3Complete_by_tmsi_unassigned_nri_round_robin() runs on test_CT {
+ f_TC_cnpool_L3Complete_by_tmsi_unassigned_nri_round_robin(ps_domain := false);
+}
+function f_TC_cnpool_L3Complete_by_tmsi_unassigned_nri_round_robin(boolean ps_domain) runs on test_CT {
+
+ f_init(nr_msc := 2, nr_sgsn := 2);
+ f_sleep(1.0);
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ /* 3 NRIs that are not assigned to any MSC */
+ var ro_MobileIdentityLV mis := {
+ valueof(ts_MI_TMSI_NRI_LV(1000)),
+ valueof(ts_MI_TMSI_NRI_LV(768)),
+ valueof(ts_MI_TMSI_NRI_LV(819))
+ };
+
+ var ro_octetstring compl3 := f_gen_compl3_by_domain(ps_domain, 3, mis);
+ f_TC_cnpool_compl_l3_list(ps_domain, compl3, { 0, 1, 0 }, "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+/* Three Layer 3 Complete by TMSI are round-robin'ed across two connected MSCs, because they contain an NRI
+ * assigned to a CN link that is currently not connected (configured in osmo-hnbgw.cfg). */
+testcase TC_mscpool_L3Complete_by_tmsi_valid_nri_msc_not_connected_round_robin() runs on test_CT {
+ f_TC_cnpool_L3Complete_by_tmsi_valid_nri_msc_not_connected_round_robin(ps_domain := false);
+}
+function f_TC_cnpool_L3Complete_by_tmsi_valid_nri_msc_not_connected_round_robin(boolean ps_domain) runs on test_CT {
+
+ f_init(nr_msc := 2, nr_sgsn := 2);
+ f_sleep(1.0);
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ /* 3 NRIs that are assigned to an unconnected MSC */
+ var ro_MobileIdentityLV mis := {
+ valueof(ts_MI_TMSI_NRI_LV(512)),
+ valueof(ts_MI_TMSI_NRI_LV(767)),
+ valueof(ts_MI_TMSI_NRI_LV(750))
+ };
+
+ var ro_octetstring compl3 := f_gen_compl3_by_domain(ps_domain, 3, mis);
+
+ f_TC_cnpool_compl_l3(ps_domain, compl3[0], cn_nr := 0);
+ f_ctrs_cn_add(2, "cnpool:subscr:attach_lost");
+ f_ctrs_cn_add(0, "cnpool:subscr:new");
+ f_ctrs_cn_verify();
+
+ f_TC_cnpool_compl_l3(ps_domain, compl3[1], cn_nr := 1);
+ f_ctrs_cn_add(2, "cnpool:subscr:attach_lost");
+ f_ctrs_cn_add(1, "cnpool:subscr:new");
+ f_ctrs_cn_verify();
+
+ f_TC_cnpool_compl_l3(ps_domain, compl3[2], cn_nr := 0);
+ f_ctrs_cn_add(2, "cnpool:subscr:attach_lost");
+ f_ctrs_cn_add(0, "cnpool:subscr:new");
+ f_ctrs_cn_verify();
+
+ f_shutdown_helper();
+}
+
+/* Three Layer 3 Complete by TMSI with valid NRI for the second MSC are all directed to the second MSC (configured in
+ * osmo-hnbgw.cfg). */
+testcase TC_mscpool_L3Complete_by_tmsi_valid_nri_1() runs on test_CT {
+ f_TC_cnpool_L3Complete_valid_nri_1(ps_domain := false);
+}
+testcase TC_sgsnpool_L3Complete_valid_nri_1() runs on test_CT {
+ f_TC_cnpool_L3Complete_valid_nri_1(ps_domain := true);
+}
+function f_TC_cnpool_L3Complete_valid_nri_1(boolean ps_domain) runs on test_CT {
+
+ f_init(nr_msc := 2, nr_sgsn := 2);
+ f_sleep(1.0);
+
+ /* All TMSIs in this test point at the second MSC, set the round robin to point at the first MSC to make sure
+ * this is not using round-robin. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_octetstring compl3;
+
+ /* 3 NRIs of the second MSC's range (256-511) */
+ var ro_MobileIdentityLV mis := {
+ valueof(ts_MI_TMSI_NRI_LV(256)),
+ valueof(ts_MI_TMSI_NRI_LV(260)),
+ valueof(ts_MI_TMSI_NRI_LV(511))
+ };
+ if (ps_domain) {
+ compl3 := {
+ f_gen_one_compl_l3(RAUREQ, mis[0], 256),
+ f_gen_one_compl_l3(RAUREQ, mis[1], 260),
+ f_gen_one_compl_l3(RAUREQ, mis[2], 511)
+ };
+ } else {
+ compl3 := f_gen_compl3_by_domain(ps_domain, 3, mis);
+ }
+
+ f_TC_cnpool_compl_l3_list(ps_domain, compl3, {1, 1, 1}, "cnpool:subscr:known");
+
+ f_shutdown_helper();
+}
+
+/* Layer 3 Complete by TMSI with valid NRI for the third MSC are directed to the third MSC (configured in osmo-hnbgw.cfg),
+ * while a round-robin remains unaffected by that. */
+testcase TC_mscpool_L3Complete_by_tmsi_valid_nri_2() runs on test_CT {
+ f_TC_cnpool_L3Complete_valid_nri_2(ps_domain := false);
+}
+testcase TC_sgsnpool_L3Complete_valid_nri_2() runs on test_CT {
+ f_TC_cnpool_L3Complete_valid_nri_2(ps_domain := true);
+}
+function f_TC_cnpool_L3Complete_valid_nri_2(boolean ps_domain) runs on test_CT {
+
+ f_init(nr_msc := 3, nr_sgsn := 3);
+ f_sleep(1.0);
+
+ /* All TMSIs in this test point at the third MSC, set the round robin to point at the second MSC to make sure
+ * this is not using round-robin. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 1);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_octetstring compl3;
+
+ /* 2 NRIs of the third MSC's range (512-767) */
+ var ro_MobileIdentityLV mis := {
+ valueof(ts_MI_TMSI_NRI_LV(512)),
+ valueof(ts_MI_TMSI_NRI_LV(678))
+ };
+ if (ps_domain) {
+ compl3 := {
+ f_gen_one_compl_l3(ATTACHREQ, mis[0], 512),
+ f_gen_one_compl_l3(ATTACHREQ, mis[1], 678)
+ };
+ } else {
+ compl3 := f_gen_compl3_by_domain(ps_domain, 2, mis);
+ }
+
+ f_TC_cnpool_compl_l3_list(ps_domain, compl3, {2, 2}, "cnpool:subscr:known");
+
+ /* The above forwardings to third MSC have not affected the round robin, which still points at the second MSC */
+ f_TC_cnpool_compl_l3_list(ps_domain, f_gen_compl3_by_domain(ps_domain, 1), {1}, "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+/* LU with a TMSI but indicating a different PLMN in its previous LAI: ignore the NRI. */
+testcase TC_mscpool_LU_by_tmsi_from_other_PLMN() runs on test_CT {
+ f_TC_cnpool_nri_from_other_PLMN(ps_domain := false);
+}
+testcase TC_sgsnpool_nri_from_other_PLMN() runs on test_CT {
+ f_TC_cnpool_nri_from_other_PLMN(ps_domain := true);
+}
+function f_TC_cnpool_nri_from_other_PLMN(boolean ps_domain) runs on test_CT {
+
+ f_init(nr_msc := 3, nr_sgsn := 3);
+ f_sleep(1.0);
+
+ /* The TMSIs in this test points at the second MSC, but since it is from a different PLMN, round-robin is used
+ * instead, and hits msc 0. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_octetstring compl3;
+
+ var ro_MobileIdentityLV mis := {
+ valueof(ts_MI_TMSI_NRI_LV(260)),
+ valueof(ts_MI_TMSI_NRI_LV(555))
+ };
+ if (ps_domain) {
+ compl3 := {
+ /* An NRI of the second MSC's range (256-511), but a PLMN that doesn't match with osmo-hnbgw.cfg */
+ enc_PDU_L3_MS_SGSN(valueof(ts_GMM_ATTACH_REQ(mis[0], f_RAI('999'H, '99'H, '2a2a'O,
+ '17'O),
+ nri := ts_GMM_NRI(260)
+ ))),
+ /* An NRI of the third MSC's range (512-767) and a matching PLMN gets directed by NRI. */
+ f_gen_one_compl_l3(ATTACHREQ, mis[1], 555)
+ }
+ } else {
+ compl3 := {
+ /* An NRI of the second MSC's range (256-511), but a PLMN that doesn't match with osmo-hnbgw.cfg */
+ enc_PDU_ML3_MS_NW(valueof(ts_LU_REQ(LU_Type_IMSI_Attach, mis[0], '99F999'O))),
+ /* An NRI of the third MSC's range (512-767) and a matching PLMN gets directed by NRI. */
+ enc_PDU_ML3_MS_NW(valueof(ts_LU_REQ(LU_Type_IMSI_Attach, mis[1], '00F110'O)))
+ };
+ }
+
+ /* Foreign NRI: roundrobin */
+ f_TC_cnpool_compl_l3(ps_domain, compl3[0], cn_nr := 0, inc_countername := "cnpool:subscr:new");
+
+ /* Local NRI: matching msc */
+ f_TC_cnpool_compl_l3(ps_domain, compl3[1], cn_nr := 2, inc_countername := "cnpool:subscr:known");
+
+ f_shutdown_helper();
+}
+
+/* Make sure that whichever MSC paged a subscriber will also get the Paging Response. Page by IMSI, which would be
+ * round-robined to another MSC, to make sure the Paging->Response relation is stronger than the NRI->MSC mapping. */
+friend function f_tc_mscpool_paging_imsi(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ f_init_handler(pars);
+
+ var hexstring imsi := '001010000000123'H;
+ var RANAP_IEs.CN_DomainIndicator domain_ind;
+ if (pars.ps_domain) {
+ domain_ind := ps_domain;
+ } else {
+ domain_ind := cs_domain;
+ }
+ var template (value) RANAP_PDU paging := ts_RANAP_Paging(domain_ind, imsi_hex2oct(imsi));
+ BSSAP.send(ts_RANAP_UNITDATA_req(pars.sccp_addr_hnbgw, pars.sccp_addr_msc, paging));
+ /* TODO: Expect RUA ConnectionlessTransfer Paging (on all HNB).
+ * We could verify the Paging sent from osmo-hnbgw to RUA with some effort,
+ * but, this test does not care whether the Paging was forwarded to RUA or not, only that osmo-hnbgw *received*
+ * the Paging. In the CN pool decisions, osmo-hnbgw should match up Paging Response to an earlier Paging.
+ */
+
+ f_sleep(1.0);
+
+ /* Despite the round robin pointing at the second MSC ('roundrobin next msc 1'), the earlier Paging for the same IMSI
+ * causes this Paging Response to go to the first MSC ('msc 0'). */
+ f_perform_compl_l3(f_gen_one_compl_l3(PAGRESP, ts_MI_IMSI_LV(imsi)));
+ f_sleep(1.0);
+}
+
+testcase TC_mscpool_paging_imsi() runs on test_CT {
+ f_init(nr_msc := 3);
+ f_sleep(1.0);
+
+ var boolean ps_domain := false;
+
+ /* Testing a Paging on the first MSC to get a Paging Response back to the first MSC. Set round robin to the
+ * second MSC to make sure we're getting the Paging logic, not a coincidental round robin match. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ConnHdlr vc_conn1;
+ var template (value) TestHdlrParams pars1 := t_pars(0, ps_domain := ps_domain, cn_nr := 0);
+ pars1.sccp_addr_hnbgw := g_cn[valueof(pars1.cn_idx)].sccp_addr_peer;
+ pars1.sccp_addr_msc := g_cn[valueof(pars1.cn_idx)].sccp_addr_own;
+ vc_conn1 := f_start_handler_with_pars(refers(f_tc_mscpool_paging_imsi), pars1);
+ vc_conn1.done;
+ f_ctrs_cn_expect(0, "cnpool:subscr:paged");
+ f_shutdown_helper();
+}
+
+/* Make sure that whichever MSC paged a subscriber will also get the Paging Response. Page by TMSI with an NRI value
+ * that matches a different MSC, to make sure the Paging->Response relation is stronger than the NRI->MSC mapping. */
+friend function f_tc_mscpool_paging_tmsi(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ f_init_handler(pars);
+
+ var hexstring imsi := '001010000000124'H;
+ var integer nri_v := 300; /* <-- second MSC's NRI */
+ var octetstring tmsi := f_gen_tmsi(suffix := 0, nri_v := nri_v);
+
+ var RANAP_IEs.CN_DomainIndicator domain_ind;
+ if (pars.ps_domain) {
+ domain_ind := ps_domain;
+ } else {
+ domain_ind := cs_domain;
+ }
+ var template (value) RANAP_PDU paging := ts_RANAP_Paging_temp_id(domain_ind, imsi_hex2oct(imsi),
+ ts_RANAP_TemporaryUE_ID_TMSI(tmsi));
+ BSSAP.send(ts_RANAP_UNITDATA_req(pars.sccp_addr_hnbgw, pars.sccp_addr_msc, paging));
+ /* TODO: Expect RUA ConnectionlessTransfer Paging (on all HNB).
+ * We could verify the Paging sent from osmo-hnbgw to RUA with some effort,
+ * but, this test does not care whether the Paging was forwarded to RUA or not, only that osmo-hnbgw *received*
+ * the Paging. In the CN pool decisions, osmo-hnbgw should match up Paging Response to an earlier Paging.
+ */
+
+ f_sleep(1.0);
+
+ /* Despite the round robin pointing at the third MSC ('roundrobin next msc 2'), the earlier Paging for the same
+ * TMSI causes this Paging Response to go to the first MSC ('msc 0'). */
+ f_perform_compl_l3(f_gen_one_compl_l3(PAGRESP, ts_MI_TMSI_NRI_LV(nri_v)));
+ f_sleep(1.0);
+}
+testcase TC_mscpool_paging_tmsi() runs on test_CT {
+ f_init(nr_msc := 3);
+ f_sleep(1.0);
+
+ var boolean ps_domain := false;
+
+ /* Testing a Paging on the first MSC to get a Paging Response back to the first MSC. Set round robin to the
+ * third MSC to make sure we're getting the Paging logic, not a coincidental round robin match. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ConnHdlr vc_conn1;
+ var template (value) TestHdlrParams pars1 := t_pars(0, ps_domain := ps_domain, cn_nr := 0);
+ pars1.sccp_addr_hnbgw := g_cn[valueof(pars1.cn_idx)].sccp_addr_peer;
+ pars1.sccp_addr_msc := g_cn[valueof(pars1.cn_idx)].sccp_addr_own;
+ vc_conn1 := f_start_handler_with_pars(refers(f_tc_mscpool_paging_tmsi), pars1);
+ vc_conn1.done;
+ f_ctrs_cn_expect(0, "cnpool:subscr:paged");
+ f_shutdown_helper();
+}
+
+/* For round-robin, skip a CN link that has 'no allow-attach' set. */
+testcase TC_mscpool_no_allow_attach_round_robin() runs on test_CT {
+
+ f_init(nr_msc := 3);
+ f_sleep(1.0);
+
+ var boolean ps_domain := false;
+
+ /* Mark the second MSC as offloading, round-robin should skip this MSC now. */
+ f_vty_cnlink_allow_attach(HNBGWVTY, ps_domain, {true, false, true});
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ f_TC_cnpool_compl_l3_list(ps_domain, f_gen_compl3_by_domain(ps_domain, 3),
+ /* msc 1 is skipped */
+ {0, 2, 0},
+ "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+/* An MSC that has 'no allow-attach' set should still serve subscribers that are already attached according to their
+ * TMSI NRI. */
+testcase TC_mscpool_no_allow_attach_valid_nri() runs on test_CT {
+
+ f_init(nr_msc := 3);
+ f_sleep(1.0);
+
+ var boolean ps_domain := false;
+
+ /* Mark the second MSC as offloading, round-robin should skip this MSC now. */
+ f_vty_cnlink_allow_attach(HNBGWVTY, ps_domain, {true, false, true});
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_MobileIdentityLV mis := {
+ valueof(ts_MI_TMSI_NRI_LV(260)),
+ valueof(ts_MI_IMSI_LV('001010000000002'H)),
+ valueof(ts_MI_IMSI_LV('001010000000003'H))
+ };
+
+ var ro_octetstring compl3 := f_gen_compl3_by_domain(ps_domain, 3, mis);
+
+ /* Round robin points at msc 0, but the valid NRI directs to msc 1, even though msc 1 has 'no allow-attach'. */
+ f_TC_cnpool_compl_l3(ps_domain, compl3[0], cn_nr := 1, inc_countername := "cnpool:subscr:known");
+
+ /* Normal round robin skips msc 1, because it has 'no allow-attach' */
+ f_TC_cnpool_compl_l3(ps_domain, compl3[1], cn_nr := 0, inc_countername := "cnpool:subscr:new");
+ f_TC_cnpool_compl_l3(ps_domain, compl3[2], cn_nr := 2, inc_countername := "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+/* When a peer point-code gets an SCCP N-PCSTATE saying it is unreachable, immediately mark the CN link as unusable. */
+testcase TC_mscpool_sccp_n_pcstate_detaches_cnlink() runs on test_CT {
+ f_TC_cnpool_sccp_n_pcstate_detaches_cnlink(ps_domain := false);
+}
+testcase TC_sgsnpool_sccp_n_pcstate_detaches_cnlink() runs on test_CT {
+ f_TC_cnpool_sccp_n_pcstate_detaches_cnlink(ps_domain := true);
+}
+function f_TC_cnpool_sccp_n_pcstate_detaches_cnlink(boolean ps_domain) runs on test_CT
+{
+
+ f_init(nr_msc := 2, nr_sgsn := 2);
+ f_sleep(1.0);
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ var ro_octetstring compl3 := f_gen_compl3_by_domain(ps_domain, 3);
+
+ f_TC_cnpool_compl_l3(ps_domain, compl3[0], cn_nr := 0, inc_countername := "cnpool:subscr:new");
+ f_TC_cnpool_compl_l3(ps_domain, compl3[1], cn_nr := 1, inc_countername := "cnpool:subscr:new");
+
+ f_logp(HNBGWVTY, "disconnecting msc0");
+ f_cn_idx_disconnect(f_cn_idx(ps_domain, 0));
+
+ /* Now round-robin would wrap to the first MSC, but since the first MSC is disconnected, it wraps around to the
+ * second. */
+ f_TC_cnpool_compl_l3(ps_domain, compl3[2], cn_nr := 1, inc_countername := "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+/* When a CN link point-code gets an SCCP N-PCSTATE saying it is now reachable, immediately trigger RESET and bring up the
+ * MSC. */
+testcase TC_mscpool_sccp_n_pcstate_attaches_cnlink() runs on test_CT {
+ f_TC_cnpool_sccp_n_pcstate_attaches_cnlink(ps_domain := false);
+}
+testcase TC_sgsnpool_sccp_n_pcstate_attaches_cnlink() runs on test_CT {
+ f_TC_cnpool_sccp_n_pcstate_attaches_cnlink(ps_domain := true);
+}
+function f_TC_cnpool_sccp_n_pcstate_attaches_cnlink(boolean ps_domain) runs on test_CT
+{
+ f_init(nr_msc := 1, nr_sgsn := 1);
+ f_sleep(1.0);
+
+ /* Control which MSC gets chosen next by the round-robin, otherwise
+ * would be randomly affected by which other tests ran before this. */
+ f_vty_set_roundrobin_next(HNBGWVTY, ps_domain, 0);
+
+ var ro_octetstring compl3 := f_gen_compl3_by_domain(ps_domain, 3);
+
+ f_ctrs_cn_init(ps_domain := ps_domain);
+
+ /* There is only one MSC, round robin stays on msc0 */
+ f_TC_cnpool_compl_l3(ps_domain := ps_domain, nas_pdu := compl3[0], cn_nr := 0, inc_countername := "cnpool:subscr:new");
+ f_TC_cnpool_compl_l3(ps_domain := ps_domain, nas_pdu := compl3[1], cn_nr := 0, inc_countername := "cnpool:subscr:new");
+
+ f_logp(HNBGWVTY, "connecting cnlink 1");
+ f_cn_nr_init(ps_domain, 1);
+ f_vty_cnlink_allow_attach(HNBGWVTY, ps_domain, { true, true });
+ f_sleep(1.0);
+
+ /* This time round-robin wraps to the second MSC, because it is now online. */
+ f_TC_cnpool_compl_l3(ps_domain := ps_domain, nas_pdu := compl3[2], cn_nr := 1, inc_countername := "cnpool:subscr:new");
+
+ f_shutdown_helper();
+}
+
+private function f_vty_add_sccp_addr(TELNETasp_PT pt, charstring addr_name, charstring pc, integer cs7_nr := 0)
+{
+ f_vty_enter_config(pt);
+ f_vty_transceive(pt, "cs7 instance 0");
+ f_vty_transceive(pt, "sccp-address " & addr_name);
+ f_vty_transceive(pt, "point-code " & pc);
+ f_vty_transceive(pt, "end");
+}
+
+private function f_vty_set_cnlink_addr(TELNETasp_PT pt, charstring cnlink_and_nr, charstring addr_name)
+{
+ f_vty_enter_config(pt);
+ f_vty_transceive(pt, cnlink_and_nr);
+ f_vty_transceive(pt, "remote-addr " & addr_name);
+ f_vty_transceive(pt, "end");
+}
+
+private function f_vty_apply_sccp(TELNETasp_PT pt)
+{
+ f_vty_enter_config(pt);
+ f_vty_transceive(pt, "apply sccp");
+ f_vty_transceive(pt, "end");
+}
+
+template (present) RUA_Disc_Req tr_RUA_Disc_Req := {
+ ranap := ?,
+ cause := ?
+};
+
+/* With a cnlink up, change the SCCP address, and verify that it restarts upon vty 'apply sccp' */
+private function f_tc_apply_sccp(charstring id, TestHdlrParams pars) runs on ConnHdlr
+{
+ f_init_handler(pars);
+ f_perform_compl_l3(f_gen_compl3_by_domain(pars.ps_domain, 1)[0]);
+
+ f_sleep(1.0);
+ f_logp(HNBGWVTY, "Changing SCCP address, don't apply yet");
+
+ f_vty_add_sccp_addr(HNBGWVTY, "msc-foo", "0.42.4");
+ f_vty_set_cnlink_addr(HNBGWVTY, "msc 0", "msc-foo");
+
+ /* No effect yet, link still open both ways */
+ f_sleep(1.0);
+ f_iuh2iu(ts_RANAP_DirectTransfer(f_rnd_octstring(10)));
+ f_iu2iuh(ts_RANAP_DirectTransfer(f_rnd_octstring(10)));
+
+ f_logp(HNBGWVTY, "Apply SCCP address changes");
+ f_vty_apply_sccp(HNBGWVTY);
+
+ /* We modified the SCCP configuration, expect disconnect of UE that was active on the aborted link. */
+ RUA.receive(RUA_Disc_Ind:?);
+ BSSAP.receive(RAN_Conn_Prim:MSC_CONN_PRIM_DISC_IND);
+
+ /* Would be nice to test reconnection on the other point-code, too. That would require another cnlink in
+ * osmo-stp.cfg and module parameters... */
+
+ f_sleep(1.0);
+}
+testcase TC_apply_sccp() runs on test_CT
+{
+ f_init();
+ f_sleep(1.0);
+
+ var ConnHdlr vc_conn;
+ var template (value) TestHdlrParams pars := t_pars(0);
+ vc_conn := f_start_handler_with_pars(refers(f_tc_apply_sccp), pars);
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+/* In the field, we encountered a "normal" RAB Assignment that concludes successfully, followed by another RAB
+ * Assignment that has different SDU subflow parameters, and does not contain RTP information. At the time of writing,
+ * it seems that the second RAB Assignment causes a crash. Play through this scenario. */
+friend function f_tc_second_rab_assignment(charstring id, TestHdlrParams pars) runs on ConnHdlr {
+ var MgcpCommand mgcp_cmd;
+ var RANAP_PDU tx;
+ timer T := 5.0;
+
+ f_init_handler(pars);
+ f_create_mgcp_expect(ExpectCriteria:{omit,omit,omit});
+
+ tx := f_build_initial_ue(g_pars);
+ f_iuh2iu_connect(tx);
+
+ f_create_rab(pars.mgcp_pars);
+
+ /* Now send a second RAB Assignment with different subflows and omitting transportLayerInformation. (Assuming
+ * the first RAB Assignment's transportLayerInformation remains in use unchanged.) */
+ var template RAB_SetupOrModifyList rab_sml;
+ rab_sml := ts_RAB_SML2(t_RAB_id(23),
+ ts_RabParams,
+ user_plane_info := omit,
+ transport_layer_info := omit);
+ tx := valueof(ts_RANAP_RabAssReq(rab_sml));
+ BSSAP.send(tx);
+ T.start;
+
+ /* Expect this secondary RAB Assignment to go through unchanged. */
+ f_rua_expect(tx);
+
+ /* I'm guessing that the RAB Assignment Response also omits transportLayerInformation, so far not known because
+ * osmo-hnbgw crashed before we could receive the response. */
+
+ /* Send back RAB Assignment Response via Iuh */
+ var template RAB_SetupOrModifiedList rab_smdl;
+ rab_smdl := ts_RAB_SMdL_no_tla(t_RAB_id(23));
+ tx := valueof(ts_RANAP_RabAssResp(rab_smdl));
+ RUA.send(tx);
+ f_bssap_expect(tx);
+
+ /* Send Iu Release */
+ tx := valueof(ts_RANAP_IuReleaseCommand(pars.rab_rel_cause));
+ f_iu2iuh(tx);
+
+ T.start;
+ alt {
+ [] as_mgcp_dlcx(pars) {}
+ [] T.timeout {
+ setverdict(fail, "Timeout waiting for DLCX");
+ }
+ }
+
+ tx := valueof(ts_RANAP_IuReleaseComplete());
+ f_iuh2iu(tx);
+}
+
+testcase TC_second_rab_assignment() runs on test_CT {
+ var ConnHdlr vc_conn;
+ g_num_hnbs := 1;
+ f_init();
+
+ vc_conn := f_start_handler_with_pars(refers(f_tc_second_rab_assignment), t_pars(3));
+ vc_conn.done;
+
+ f_shutdown_helper();
+}
+
+control {
+ execute(TC_hnb_register());
+ execute(TC_hnb_register_duplicate());
+ execute(TC_hnb_register_duplicate_reuse_sctp_assoc());
+ execute(TC_hnb_disconnected_timeout());
+ execute(TC_ue_register());
+ execute(TC_ue_register_tmsi_lai());
+ execute(TC_ue_register_before_hnb_register());
+ execute(TC_ranap_cs_initial_ue());
+ execute(TC_ranap_ps_initial_ue());
+ execute(TC_ranap_cs_initial_ue_empty_cr());
+ execute(TC_ranap_ps_initial_ue_empty_cr());
+ execute(TC_ranap_cs_bidir());
+ execute(TC_ranap_ps_bidir());
+ execute(TC_rab_assignment());
+ execute(TC_rab_release());
+ execute(TC_rab_release_abnormal());
+ execute(TC_rab_assign_fail());
+ execute(TC_rab_assign_mgcp_to());
+ execute(TC_rab_assign_mgw_iuup_addr_chg());
+ execute(TC_ranap_cs_mo_disconnect());
+ execute(TC_ranap_ps_mo_disconnect());
+
+ if (mp_enable_pfcp_tests) {
+ execute(TC_ps_rab_assignment_with_pfcp());
+ } else {
+ execute(TC_ps_rab_assignment_without_pfcp());
+ }
+
+ execute( TC_mscpool_L3Compl_on_1_cnlink() );
+ execute( TC_mscpool_L3Complete_by_imsi_round_robin() );
+ execute( TC_mscpool_LU_by_tmsi_null_nri_0_round_robin() );
+ execute( TC_mscpool_LU_by_tmsi_null_nri_1_round_robin() );
+ execute( TC_mscpool_L3Complete_by_tmsi_unassigned_nri_round_robin() );
+ execute( TC_mscpool_L3Complete_by_tmsi_valid_nri_msc_not_connected_round_robin() );
+ execute( TC_mscpool_L3Complete_by_tmsi_valid_nri_1() );
+ execute( TC_mscpool_L3Complete_by_tmsi_valid_nri_2() );
+ execute( TC_mscpool_LU_by_tmsi_from_other_PLMN() );
+ execute( TC_mscpool_paging_imsi() );
+ execute( TC_mscpool_paging_tmsi() );
+ execute( TC_mscpool_no_allow_attach_round_robin() );
+ execute( TC_mscpool_no_allow_attach_valid_nri() );
+ execute( TC_mscpool_sccp_n_pcstate_detaches_cnlink() );
+ execute( TC_mscpool_sccp_n_pcstate_attaches_cnlink() );
+
+ execute( TC_sgsnpool_L3Compl_on_1_cnlink() );
+ execute( TC_sgsnpool_L3Complete_no_nri_round_robin() );
+ execute( TC_sgsnpool_L3Complete_valid_nri_1() );
+ execute( TC_sgsnpool_L3Complete_valid_nri_2() );
+ execute( TC_sgsnpool_nri_from_other_PLMN() );
+ execute( TC_sgsnpool_sccp_n_pcstate_detaches_cnlink() );
+ execute( TC_sgsnpool_sccp_n_pcstate_attaches_cnlink() );
+
+ execute(TC_second_rab_assignment());
+ execute(TC_hnb_reregister_reuse_sctp_assoc());
+
+ /* Run at the end since it messes with the SCCP config */
+ execute( TC_apply_sccp() );
+}
+
+}