Académique Documents
Professionnel Documents
Culture Documents
The Motorola Horizon macro BTS is a BTS model manufactured by Motorola in the late
1990ies.
It can support up to 6 TRX, typically in a configuration of 3 sectors.
There is currently no support for it in OpenBSC, but we are working on it.
Hardware
CTU
The up to 6 CTU modules are the individual transceivers (TRX) of the BTS cabinet.
They plug into the SURF RF backplane and have a front-accessible DB9 serial port, as well
as a SMA connector for the TX PA output.
This TX PA output is normally wired using a ~10cm semi-rigid SMA cable to the TX input
port of a combiner/duplexer.
The CTU is of course fully shielded. But if you remove the shielding cover, it looks like this:
digital part
The CTU digital part has the following connections
Rx side A (diversity)
Rx side B (diversity)
alarm management
tx power control
rf frequency hopping
A5 encryption
The CTU has a three serial consoles routed to the same DB-9 plug. We describe it
in Motorola_Horizon_macro/CTU_Console
Combiner
The combiner / duplexer combines the TX signal of two CTU and duplexes it with the Rx
path in order to be able to have two TRX attached to one antenna
MCUF
The MCUF is a full-size digital board and contains the BTS controller
NIU
The NIU is a E1 interface card for up to two E1 lines. Multiple NIU boards can be plugged
into the rack
BPSM
The BPSM is a small power supply for the NIU, MCUF and other digital boards
ALARMS
The ALARMS board is monitoring FAN and other alarms in the cabinet.
A-bis interface
The A-bis interface is via classic E1 lines. The Horizon indoor cabinet supports up to 6 E1
ports.
Each NIU module serves 1 or 2 E1 ports.
The E1 ports are physically routed to the BIB (Balanced Interface Board) module on top of
the cabinet.
The pinout of the 37pin D-Sub connector on top of the BIB board has been reversed as:
Pin
Transformer
Usage
T1.1
T2.1
GND
T4.1
T5.1
GND
T7.1
T8.1
GND
10
T10.1
11
T11.1
12
GND
13
T13.1
14
T14.1
15
GND
16
T16.1
17
T17.1
18
GND
19
GND
20
T1.8
21
T2.8
22
23
T4.8
24
T5.8
25
27
T7.8
28
T8.8
29
T10.8
30
T11.8
31
32
T13.8
33
T14.8
34
35
T16.8
36
T17.8
Software
MCUF
There is a 20MByte Intel Series2 Flash PCMCIA card inside the MCUF. It contains software +
configuration for the BTS.
There once has been a mtd_iflash2.c driver for Linux 2.4.x, but apparently it has never been
merged mainline before the big CardServices? API redesign happened in 2.6.x. So
unfortunately it's not straight-forward to read them out :(
The MCUF is able to run without the PCMCIA card. In this case, it will download all software
+ config via E1 from the BSC.
The MCUF has a very extensive command line interface (MMI), for more information
check Motorola_Horizon_macro/MCUF_Console
CTU
It is assumed that the CTU only contains a boot loader to download the real software from
the MCUF.
Further reading
http://wenku.baidu.com/view/da379c82d4d8d15abe234e32.html
http://read.pudn.com/downloads61/ebook/212957/SYS01.pdf
set_site <siteID>
you can set the site ID (range: 0-104). However, the siteID must be identical with the siteID
stored on the PCMCIA card.
It seems for a Horizon macro (master cabinet) the site ID should be 18.
If you enter a wrong site ID, you will get a FATAL SWFM ERROR (Bad database - Cannot
adjust database for site). The system will reboot and you can try your luck with the next
site ID number ;)
Once you entered the correct siteID, the system transitions into the MMI-RAM prompt.
MMI-ROM 1015 -> set_site 18
Setting subsystem to 19 for site 18
All
STATES:
ADMIN STATES:
D:Disabled
E:Enabled
B:Busy
L:Locked
U:Unlocked
E:Equipped
S:Shutdown
State Reason
dd/mm
hh:mm:ss Function
D-U
NO CODE
01/01
00:31:53 None
BTP 0 0 0
B-U
NO REASON
01/01
00:31:50 None
DRI 0 0 0
D-U
Code Load
01/01
00:32:01 None
DRI 0 1 0
D-U
01/01
00:31:58 None
DRI 1 0 0
D-U
Code Load
01/01
00:32:01 None
DRI 1 1 0
D-U
01/01
00:31:58 None
DRI 2 0 0
D-U
Code Load
01/01
00:32:01 None
DRI 2 1 0
D-U
01/01
00:31:58 None
MSI 0 0 0
B-U
NO REASON
01/01
00:31:56 None
MMS 0 0 0
B-U
01/01
00:31:57 None
MMS 0 1 0
D-U
01/01
00:31:57 None
RSL 0 0 0
E-U
64Kbps Link
01/01
00:31:57 None
RSL 0 1 0
D-U
NO REASON
01/01
00:31:42 None
GCLK 0 0 0
B-U
01/01
00:31:57 None
EAS 0 0 0
B-U
NO REASON
01/01
00:31:50 None
CAB 0 0 0
B-U
NO REASON
01/01
00:31:42 None
SITE 0 0 0
D-U
NO REASON
01/01
00:31:42 None
PATH 0 0 0
D-U
NO REASON
01/01
00:31:42 None
PATH 0 1 0
D-U
NO REASON
01/01
00:31:42 None
E:Enabled
B:Busy
ADMIN STATES:
E:Equipped
State Reason
dd/mm
hh:mm:ss Device
E-E
NO REASON
01/01
00:31:42 None
RTF 0 1 0
E-E
NO REASON
01/01
00:31:42 None
RTF 1 0 0
E-E
NO REASON
01/01
00:31:42 None
RTF 1 1 0
E-E
NO REASON
01/01
00:31:42 None
RTF 2 0 0
E-E
NO REASON
01/01
00:31:42 None
capture
[12/06/08 01:01:36] MCU:emon_1015 % capture
Process ID
Consumed
CPU
Time (us)
Util.
257143
1.01%
25
06 COM
1468
0.01%
07 btask
1241
0.00%
12 exec dlsp
14325
0.06%
15
22
22
22
14 tty_dlsp
15859
0.06%
75
28
29
16 filter
21657
0.09%
17 monitor
13700
0.05%
261
0.00%
3E mcu_dlsp
10473
0.04%
10
50 MIP
27834
0.11%
81
25
22
39
70 mmi_rom
3163
0.01%
F1 SWFM_PRINT
4153
0.02%
1E sync_fw_rl
Driver/OS
Consumed
CPU
Time (us)
Util.
Message Device
Send
System
Intr.
Calls
905
102
0.00%
80
1
COM
NVRAM
13
HDLC
5014
0.02%
15
34
ROUTER
TIMER
21
11
321418
1.27%
5200
QUICC
MSW
0.00%
952
PIX
SYNC
0.00%
Transition
Consumed
CPU
State
States
Time (us)
Util.
Count
24694428
97.25%
78
INTR to Idle
364
0.00%
53
CTXSW to Idle
491
0.00%
25
Consumed
CPU
Time (us)
Util.
Intr.
25393094 100.00%
Total - Null
25135951
98.99%
264
83
147
5237
System
Calls
msw_connects
[12/06/08 01:04:12] MCU:emon_1015 % msw_connects 0
Audit for LINK = 0.
TS
Source
(port-TS)
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
0x755
pattern 0x55
10
0x755
pattern 0x55
11
0x755
pattern 0x55
12
0x755
pattern 0x55
13
0x755
pattern 0x55
14
0x755
pattern 0x55
15
0x755
pattern 0x55
16
0x755
pattern 0x55
17
0x755
pattern 0x55
18
0x755
pattern 0x55
19
0x755
pattern 0x55
20
0x755
pattern 0x55
21
0x755
pattern 0x55
22
0x755
pattern 0x55
23
0x755
pattern 0x55
24
0x755
pattern 0x55
25
0x755
pattern 0x55
26
0x755
pattern 0x55
27
0x755
pattern 0x55
28
0x755
pattern 0x55
29
0x755
pattern 0x55
30
0x755
pattern 0x55
31
0x755
pattern 0x55
0x0001
0x0001
0x0001
0x0001
0x0001
0x0001
0x0301
0x0001
0x0001
0x0001
0x0101
0x0101
0x0001
0x0001
0x0001
0x0001
0x0001
0x0001
0x0301
0x0001
10
0x0001
0x0001
11
0x0001
0x0001
12
0x0001
0x0001
13
0x0001
0x0001
14
0x0001
0x0001
15
0x0001
0x0101
16
0x0001
0x0001
17
0x0001
0x0001
18
0x0001
0x0001
19
0x0001
0x0001
20
0x0001
0x0001
21
0x0201
0x0101
22
0x0001
0x0001
23
0x0001
0x0001
24
0x0001
0x0001
25
0x0301
0x0101
26
0x0001
0x0001
27
0x0001
0x0001
28
0x0001
0x0001
29
0x0301
0x0001
30
0x0001
0x0001
31
0x0001
0x0101
help
alias
analyze
baud
bstats
ca_iir_filter
capture
count_reset
coverage
csfp_objects
cstats
ctbl_objects
debug
dri_msg
eft
ex_iir_dis
ex_iir_mod
filter
help
history
iir_dis
iir_mod
iir_rte
iir_time_stamp
l_dump
l_modify
link_test
lstats
mem_use
memory
mmu_stats
msg_send
mstats
msw_connects
objects
pbegin
pcmcia
pend
perf
pstats
reset
rlogin
router_tbl
swfm
time
tty_backlog_dump
time_stamp
tstats
unalias
zstats
objects
Output of software objects with no PCMCIA card:
[01/01/80 00:00:49] MCU:emon_1015 % objects
Object
Object
Num
Name
Specific
Dv
Version
Date
Time
Checksum
Size
S Ty
003
c8
004
c8
006
c8
007
cf
008
0f
018
c8
020
c8
022
c8
023
c8
030
88
062
8f
080
c8
111
8f
160
uboot 06.05.00.04 20-Jun-2001 11:00 0x000c74a6 00008641 1 10 88
0000 0000
Object
Object
Num
Name
Specific
Dv
Version
Date
Time
Checksum
Size
S Ty
002
dbase 00.00.03.fd 15-May-2008 11:12 0x026205f6 01069062 1 03
14d1 eef8
003
c8
004
c8
005
f8
006
c8
007
cf
008
0f
012
20
013
018
c8
020
c8
022
c8
023
c8
030
88
032
b8
034
b8
036
b8
048
30
049
30
050
30
051
30
052
30
060
3f
062
8f
068
f8
070
3f
071
3f
072
3f
075
f8
076
b8
077
f8
079
3f
080
c8
097
b8
111
8f
113
f8
120
3f
160
uboot 06.05.00.04 20-Jun-2001 11:00 0x000c74a6 00008641 1 10 88
0000 0000
165 TSM_FEP 08.00.00.07 27-Oct-2004 22:31 0x00258b0f 00020528 1 16 b0
0a00 0200
166
CC_TSM 08.00.00.30 12-Sep-2007 05:31 0x008db67d 00077444 1 16 b0
0a00 1800
169
170
177
niu 08.00.00.30 11-Sep-2007 13:01 0x0118f93a 00163419 1 10 bf
0018 0200
184
185
193
001100 08.00.00.00 21-Jun-2004 10:53 0x00014b89 00001311 1 08 b8
0011 0000
194
001100 08.00.00.00 21-Jun-2004 11:42 0x0001cdf8 00001607 1 08 b8
0011 0000
200 sync_fw 08.00.00.00 16-Jun-2004 15:52 0x007756ac 00127364 1 26 bf
000f 0000
201
SCP 08.00.00.13 19-Jul-2005 19:07 0x00ae701f 00161502 1 08 b8
0a00 0300
202
SEQ 08.00.00.09 09-Dec-2004 22:21 0x001dfba4 00029750 1 08 b8
0a00 0300
207 niu_hds 07.06.00.00 15-Nov-2000 15:23 0x015f6b88 00229657 1 10 bf
0000 0202
pstats
[12/06/08 01:02:14] MCU:emon_1015 % pstats
PROCESS
USER_STACK
MAILBOXES
ID NAME
PEAK
INSTANCE PRIORITY
SIZE
MAXIMUM CURRENT
-- -------
-------- --------
----
------- -------
00 Null
0014
00000003
00
00001000
0020
0014
06 COM
0002
00000006
05
00008000
0022
0002
07 btask
0005
00000007
01
00004000
0009
0005
12 exec dlsp
0010
00000012
19
00008000
0080
0010
14 tty_dlsp
000c
00000014
04
00004000
000c
000c
16 filter
0004
00000016
02
00004000
0009
0004
17 monitor
0014
00000017
03
00005000
0020
0014
1e sync_fw_rl
0001
0000001e
04
00004000
000c
0001
3e mcu_dlsp
0007
0000003e
05
00002000
000a
0007
50 MIP
002c
00000050
0f
00002000
0032
002c
70 mmi_rom
0006
0000006f
03
00004000
0006
0006
f1 SWFM_PRINT
0000
00000000
03
00004000
0000
0000
Logs
Normal boot log with PCMCIA card installed
!!! REBOOT !!!
MCU:emon_1015 %
[12/06/08 01:06:53] MCU:emon_0000 % Database is not compressed
NG EXEC_DLSP process_hdlc_msg:
Mailbox id = 1001
NG EXEC_DLSP process_hdlc_msg:
NG EXEC_DLSP process_hdlc_msg:
NG EXEC_DLSP process_hdlc_msg:
NG EXEC_DLSP process_hdlc_msg:
= 3001h
NG EXEC_DLSP process_hdlc_msg:
Mailbox id = 9001
NG EXEC_DLSP process_hdlc_msg:
= 5001h