5G NSA添加辅小区问题

缘于自然8

于 2023-10-09 13:52:18 发布

阅读量1.5k

点赞数 2

分类专栏： modem 文章标签： 5G

本文链接：https://blog.csdn.net/wszzr999/article/details/127407281

版权

modem 专栏收录该内容

26 篇文章 13 订阅

订阅专栏

有反馈5G NSA终端回落到4G后无法再自动返回5G的问题，我这边测试研究了下，做个总结。

这篇文章：

5G NSA组网SCG添加流程
https://www.txrjy.com/thread-1111072-1-1.html

对于工作在NSA模式的终端（UE），是如何实现EN-DC，添加上5G这条大腿呢？

大致可以分为如下几个步骤：

一、终端注册到LTE网络锚点频率。与过去4G网络信令流程相比没有大的变化：终端读取LTE系统消息，发起随机接入，附着到LTE网络。这一步中，LTE的SIB2消息中会携带一个字段，叫做“Upper Layer Indication r15”用于指示当前是不是有5G网络，但也仅仅是指示，实际上是否有5G网络并不确定，所以才会有“真假5G”的争执。同时，如果UE支持NSA，会在上报5G能力给网络，通过UE Capability的UE MR-DC Capability来指示。

二、终端测量NR频点信息并上报测量结果。上一步中，UE上报给网络支持NSA后，LTE网络将下发B1测量，将需要终端测量的NR频率信息通过RRC重配消息发给终端。终端收到后获取NR同步信号并测量5G信号质量，将测量结果上报LTE网络。

三、LTE网络根据测量结果决定是否添加SCG。

这里涉及到SCG的添加条件，一般有两个条件（1）5G信号质量还不错，高于一个门限值，比如-110dBm；（2）UE现在的数据业务速率要求高，高于一定吞吐量，比如5Mbps。为了让用户尽可能的使用5G网络，目前运营商基本没有设置第二个条件。

也就是说，如果终端检测到的5G信号质量符合要求，LTE基站将与NR基站进行通信，为NR承载分配资源，并通过LTE RRC连接重配消息向终端发送NR资源分配信息。大致流程参见下图1-5。

还有介绍从终端到核心网的各种流程，有需要的可以参考。

本文仅从终端侧结合终端的log做相关介绍。

5G NSA添加辅小区的正常流程

1、网络SIB2消息中：upperLayerIndication-r15 true

upperLayerIndication-r15 用于指示当前是不是有5G网络。

[0xB0C0] OTA LOG 09:37:00.541 BCCH_DL_SCH / SystemInformation Radio Bearer ID: 0, Freq: 1300, SFN: 224 1
sib2 :
plmn-InfoList-r15
{
{
upperLayerIndication-r15 true
}
}

upperLayerIndication的解释见：3GPP TS 36.331

NOTE: upperLayerIndication is an indication to upper layers that the UE has entered a coverage area that offers 5G capabilities.

2、终端支持ENDC双连接：

[0xB0ED] OTA LOG 09:37:00.575 LTE NAS EMM Plain OTA Outgoing Message Attach request Msg 1

ue_netwk_cap
DCNR = 1 (0x1)

DCNR的定义见：3GPP TS 24.301
Dual connectivity with NR (DCNR) (octet 9, bit 5)
This bit indicates the capability for dual connecitivity with NR.
0 dual connectivity with NR not supported
1 dual connectivity with NR supported

3、网络查询终端的ENDC能力：

[0xB0EC] OTA LOG 09:37:00.803 LTE NAS EMM Plain OTA Incoming Message Authentication request Msg 1
[0xB0ED] OTA LOG 09:37:02.220 LTE NAS EMM Plain OTA Outgoing Message Authentication response Msg 1
[0xB0EC] OTA LOG 09:37:02.338 LTE NAS EMM Plain OTA Incoming Message Security mode command Msg 1
[0xB0ED] OTA LOG 09:37:02.339 LTE NAS EMM Plain OTA Outgoing Message Security mode complete Msg 1
[0xB0E2] OTA LOG 09:37:02.528 LTE NAS ESM Plain OTA Incoming Message ESM information request Msg 1
[0xB0E3] OTA LOG 09:37:02.528 LTE NAS ESM Plain OTA Outgoing Message ESM information response Msg 1
[0xB0C0] OTA LOG 09:37:03.739 DL_DCCH / UECapabilityEnquiry Radio Bearer ID: 1, Freq: 1300, SFN: 543 1

message c1 : ueCapabilityEnquiry :
{
rrc-TransactionIdentifier 3,
criticalExtensions c1 : ueCapabilityEnquiry-r8 :
{
ue-CapabilityRequest
{
eutra,
nr,
eutra-nr
},
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
requestedFreqBandsNR-MRDC-r15 '006008134028809C'H
}
}
}
}
}
}
}
}

=======================================================
Further decoding Nr Requested Freq Band MRDC
=======================================================

Interpreted PDU:

value FreqBandList ::=
{
bandInformationEUTRA :
{
bandEUTRA 3
},
bandInformationEUTRA :
{
bandEUTRA 39
},
bandInformationNR :
{
bandNR 41
},
bandInformationNR :
{
bandNR 79
}
}

[0xB0C0] OTA LOG 09:37:03.743 UL_DCCH / UECapabilityInformation Radio Bearer ID: 1, Freq: 1300, SFN: 0 1
value UL-DCCH-Message ::=
{
message c1 : ueCapabilityInformation :
{
rrc-TransactionIdentifier 3,
criticalExtensions c1 : ueCapabilityInformation-r8 :
{
ue-CapabilityRAT-ContainerList
{
{
rat-Type eutra-nr,
ueCapabilityRAT-Container 'A107C108160401C280000004440B0200E2700000122205930070A00000010102C980389C000004880180204D00A202706802682420D8E7C3841B1CF87083639F0E106C73E1840042000200808070061000100404010010'H
}
}
}
}
}

=======================================================
Further decoding EUTRA NR
=======================================================

Interpreted PDU:

value UE-MRDC-Capability ::=
{
measAndMobParametersMRDC
{
measAndMobParametersMRDC-FRX-Diff
{
simultaneousRxDataSSB-DiffNumerology supported
}
},
rf-ParametersMRDC
{
supportedBandCombinationList
{
{
bandList
{
eutra :
{
bandEUTRA 3,
ca-BandwidthClassDL-EUTRA a,
ca-BandwidthClassUL-EUTRA a
},
nr :
{
bandNR 41,
ca-BandwidthClassDL-NR a,
ca-BandwidthClassUL-NR a
}
},
featureSetCombination 0,
mrdc-Parameters
{
dynamicPowerSharingENDC supported,
simultaneousRxTxInterBandENDC supported
}
},
{ bandList
{
eutra :
{
bandEUTRA 39,
ca-BandwidthClassDL-EUTRA a,
ca-BandwidthClassUL-EUTRA a
},
nr :
{
bandNR 79,
ca-BandwidthClassDL-NR a,
ca-BandwidthClassUL-NR a
}
},
featureSetCombination 1,
mrdc-Parameters
{
dynamicPowerSharingENDC supported,
simultaneousRxTxInterBandENDC supported
}
}
},
appliedFreqBandListFilter
{
bandInformationEUTRA :
{
bandEUTRA 3
},
bandInformationEUTRA :
{
bandEUTRA 39
},
bandInformationNR :
{
bandNR 41
},
bandInformationNR :
{
bandNR 79
}
},
supportedBandCombinationList-v1540
{
{
bandList-v1540
{
{
},
{
}
},
ca-ParametersNR-v1540
{
csi-RS-IM-ReceptionForFeedbackPerBandComb
{
maxNumberSimultaneousNZP-CSI-RS-ActBWP-AllCC 8,
totalNumberPortsSimultaneousNZP-CSI-RS-ActBWP-AllCC 64
},
simultaneousCSI-ReportsAllCC 8
}
},
{
bandList-v1540
{
{
},
{
}
},
ca-ParametersNR-v1540
{
csi-RS-IM-ReceptionForFeedbackPerBandComb
{
maxNumberSimultaneousNZP-CSI-RS-ActBWP-AllCC 8,
totalNumberPortsSimultaneousNZP-CSI-RS-ActBWP-AllCC 64
},
simultaneousCSI-ReportsAllCC 8
}
},
{
bandList-v1540
{
{
},
{
}
},
ca-ParametersNR-v1540
{
csi-RS-IM-ReceptionForFeedbackPerBandComb
{
maxNumberSimultaneousNZP-CSI-RS-ActBWP-AllCC 8,
totalNumberPortsSimultaneousNZP-CSI-RS-ActBWP-AllCC 64
},
simultaneousCSI-ReportsAllCC 8
}
}
}
},
generalParametersMRDC
{
splitDRB-withUL-Both-MCG-SCG supported
},
featureSetCombinations
{
{
{
eutra :
{
downlinkSetEUTRA 2,
uplinkSetEUTRA 1
}
},
{
nr :
{
downlinkSetNR 7,
uplinkSetNR 3
}
}
},
{
{
eutra :
{
downlinkSetEUTRA 2,
uplinkSetEUTRA 1
}
},
{
nr :
{
downlinkSetNR 2,
uplinkSetNR 1
}
}
}
}
}

4、网络是否限制DCNR

正常在Attach accept Msg中没有restrict_dcnr字段，或该字段值为0。

如果网络限制终端DCNR的接入，在Attach accept Msg中会看到restrict_dcnr字段为1：

[0xB0EC] OTA LOG 09:37:03.808 LTE NAS EMM Plain OTA Incoming Message Attach accept Msg 1

eps_netwk_feature_support
RestrictDCNR = 1 (0x1)

RestrictDCNR的定义见：3GPP TS 24.301
Restriction on the use of dual connectivity with NR (RestrictDCNR) (octet 4, bit 6)
This bit indicates if the use of dual connectivity with NR is restricted or not.
Bit
6
0 Use of dual connectivity with NR is not restricted
1 Use of dual connectivity with NR is restricted

5、网络配置NR测量：

[0xB0C0] OTA LOG 09:37:03.850 DL_DCCH / RRCConnectionReconfiguration Radio Bearer ID: 1, Freq: 1300, SFN: 554 1

这时已经通知上层显示5G了：

[0x1544] LOG 09:37:03.851304 QMI_MCS_QCSI_PKT Length: 318
Service_DSD {
ServiceDSDV1 {
dsd_ui_info {
dsd_ui_info_indTlvs[0] {
Type = 0x10
Length = 24
global_ui_info {
technology = DSD_SYS_NETWORK_3GPP
rat_value = DSD_SYS_RAT_EX_3GPP_LTE
so_mask = QMI_DSD_3GPP_SO_MASK_LTE_FDD
ui_mask = QMI_DSD_UI_MASK_3GPP_5G_BASIC | QMI_DSD_UI_MASK_3GPP_SIB2_PLMN_R15 | QMI_DSD_UI_MASK_3GPP_SIB2_ULI
}
}

6、测量结果上报

[0xB0C0] OTA LOG 09:37:06.932 UL_DCCH / MeasurementReport Radio Bearer ID: 1, Freq: 1300, SFN: 0 1
value UL-DCCH-Message ::=
{
message c1 : measurementReport :
{
criticalExtensions c1 : measurementReport-r8 :
{
measResults
{
measId 3,
measResultPCell
{
rsrpResult 42,
rsrqResult 19
},
measResultNeighCells measResultNeighCellListNR-r15 :
{
{
pci-r15 269,
measResultCell-r15
{
rsrpResult-r15 64
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 0,
measResultSSB-Index-r15
{
rsrpResult-r15 64
}
}
}
},
{
pci-r15 364,
measResultCell-r15
{
rsrpResult-r15 61
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 4,
measResultSSB-Index-r15
{
rsrpResult-r15 61
}
}
}
},
{
pci-r15 278,
measResultCell-r15
{
rsrpResult-r15 60
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 1,
measResultSSB-Index-r15
{
rsrpResult-r15 60
}
}
}
},
{
pci-r15 463,
measResultCell-r15
{
rsrpResult-r15 58
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 1,
measResultSSB-Index-r15
{
rsrpResult-r15 59
}
}
}
},
{
pci-r15 277,
measResultCell-r15
{
rsrpResult-r15 48
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 7,
measResultSSB-Index-r15
{
rsrpResult-r15 48
}
}
}
}
}
}
}
}
}

7、网络配置添加NSA辅小区

[0xB0C0] OTA LOG 09:37:06.982524 DL_DCCH / RRCConnectionReconfiguration Radio Bearer ID: 1, Freq: 1300, SFN: 853 1
[0xB821] OTA LOG 09:37:06.984382 RRC_RECONFIG RRC_RECONFIG 1
[0xB821] OTA LOG 09:37:06.984403 RADIO_BEARER_CONFIG RADIO_BEARER_CONFIG 1

securityConfig
{
securityAlgorithmConfig
{
cipheringAlgorithm nea2
},
keyToUse secondary
}
[0xB821] OTA LOG 09:37:06.998106 RRC_RECONFIG_COMPLETE RRC_RECONFIG_COMPLETE 1

keyToUse介绍

---------------------------------------3GPP TS 38.331 ------------------------------------

keyToUse
Indicates if the bearers configured with the list in this radioBearerConfig is using the master key or the secondary key for deriving ciphering and/or integrity protection keys. For EN-DC, network should not configure SRB1 and SRB2 with secondary key and SRB3 with the master key. When the field is not included, the UE shall continue to use the currently configured keyToUse for the radio bearers reconfigured with the lists in this radioBearerConfig except for mobility from NR to E-UTRA/5GC. If EN-DC is not configured, this field is set to master.

---------------------------------------3GPP TS 38.331 ------------------------------------

SRB1，SRB2，SRB3的作用分别是什么？

SRB1、SRB2和SRB3是LTE系统中的三个专用承载（Dedicated Bearer），它们的作用如下：

SRB1（Signaling Radio Bearer 1）：用于传输控制平面（Control Plane）信令，如RRC连接建立、释放、重配置等信令。SRB1是一个必需的承载，它的优先级最高，且不可被释放。
SRB2（Signaling Radio Bearer 2）：用于传输NAS（Non-Access Stratum）信令，如Attach、Detach、Authentication等信令。SRB2是一个可选的承载，它的优先级次于SRB1，但高于所有的用户面承载（Bearer）。
SRB3（Signaling Radio Bearer 3）：用于传输RRC（Radio Resource Control）信令，如RRC Connection Reconfiguration等信令。SRB3是一个可选的承载，它的优先级次于SRB1和SRB2，但高于所有的用户面承载（Bearer）。

需要注意的是，SRB1、SRB2和SRB3的优先级是不同的，且它们的用途也不同。在EN-DC（E-UTRA-NR Dual Connectivity）场景下，SRB1和SRB2应该使用主密钥进行加密和完整性保护，而SRB3应该使用辅助密钥进行加密和完整性保护。

这时通知上层显示的技术变为5G了

[0x1544] LOG 09:37:07.004055 QMI_MCS_QCSI_PKT Length: 318
Service_DSD {
ServiceDSDV1 {
dsd_ui_info {
dsd_ui_info_indTlvs[0] {
Type = 0x10
Length = 24
global_ui_info {
technology = DSD_SYS_NETWORK_3GPP
rat_value = DSD_SYS_RAT_EX_3GPP_5G
so_mask = QMI_DSD_3GPP_SO_MASK_5G_TDD | QMI_DSD_3GPP_SO_MASK_5G_SUB6 | QMI_DSD_3GPP_SO_MASK_5G_NSA
ui_mask = QMI_DSD_UI_MASK_3GPP_5G_BASIC | QMI_DSD_UI_MASK_3GPP_SIB2_PLMN_R15 | QMI_DSD_UI_MASK_3GPP_SIB2_ULI
}
}

5G NSA添加辅小区的异常情况

1、网络不配置NSA辅小区

问题描述：正常添加5G NSA辅小区后，终端移动到信号差的地方掉到4G，终端再回到原来有NSA覆盖的地方，但终端却一直添加不了5G辅小区。

日志分析：

NSA辅小区测量失败：

进入到信号差的地方，NSA辅小区测量失败：

[0xB821] OTA LOG 09:40:29.280 MEAS_RESULT_SCG_FAILURE MEAS_RESULT_SCG_FAILURE 1
value MeasResultSCG-Failure ::=
{
measResultPerMOList
{
{
ssbFrequency 504990,
measResultServingCell
{
physCellId 269,
measResult
{
cellResults
{
resultsSSB-Cell
{
rsrp 29,
rsrq 47,
sinr 29
}
},
rsIndexResults
{
resultsSSB-Indexes
{
{
ssb-Index 0,
ssb-Results
{
rsrp 29,
rsrq 47,
sinr 29
}
}
}
}
}
},
measResultNeighCellListNR
{
{
physCellId 402,
measResult
{
cellResults
{
resultsSSB-Cell
{
rsrp 34,
rsrq 55,
sinr 39
}
},
{
ssb-Index 7,
ssb-Results
{
rsrp 1,
rsrq 1,
sinr 26
}
}
}
}
}
},
{
physCellId 403,
measResult
{
cellResults
{
resultsSSB-Cell
{
rsrp 33,
rsrq 51,
sinr 35
}
},
rsIndexResults
{
resultsSSB-Indexes
{
{
ssb-Index 2,
ssb-Results
{
rsrp 33,
rsrq 51,
sinr 35
}
},
{
ssb-Index 1,
ssb-Results
{
rsrp 32,
rsrq 48,
sinr 31
}
},
{
ssb-Index 0,
ssb-Results
{
rsrp 19,
rsrq 31,
sinr 21
}
},
{
ssb-Index 3,
ssb-Results
{
rsrp 1,
rsrq 1,
sinr 26
}
}
}
}
}
},
{
physCellId 364,
measResult
{
cellResults
{
resultsSSB-Cell
{
rsrp 32,
rsrq 53,
sinr 36
}
},
rsIndexResults
{
resultsSSB-Indexes
{
{
ssb-Index 4,
ssb-Results
{
rsrp 32,
rsrq 53,
sinr 36
}
},
{
ssb-Index 3,
ssb-Results
{
rsrp 30,
rsrq 48,
sinr 31
}
}
}
}
}
},
{
physCellId 278,
measResult
{
cellResults
{
resultsSSB-Cell
{
rsrp 31,
rsrq 52,
sinr 35
}
},
rsIndexResults
{
resultsSSB-Indexes
{
{
ssb-Index 2,
ssb-Results
{
rsrp 31,
rsrq 50,
sinr 32
}
},
{
ssb-Index 4,
ssb-Results
{
rsrp 20,
rsrq 33,
sinr 21
}
},
{
ssb-Index 6,
ssb-Results
{
rsrp 14,
rsrq 24,
sinr 17
}
}
}
}
}
},
{
physCellId 445,
measResult
{
cellResults
{
resultsSSB-Cell
{
rsrp 28,
rsrq 47,
sinr 30
}
},
rsIndexResults
{
resultsSSB-Indexes
{
{
ssb-Index 5,
ssb-Results
{
rsrp 28,
rsrq 47,
sinr 30
}
}
}
}
}
}
}
}
}
}

LTE信令显示：随机接入问题：

[0xB0C0] OTA LOG 09:40:29.280 UL_DCCH / Extension_c2_scgFailureInformationNR_r15 Radio Bearer ID: 1, Freq: 1300, SFN: 0 1
value UL-DCCH-Message ::=
{
message messageClassExtension : c2 : scgFailureInformationNR-r15 :
{
criticalExtensions c1 : scgFailureInformationNR-r15 :
{
failureReportSCG-NR-r15
{
failureType-r15 randomAccessProblem,
measResultSCG-r15 '058F693CA1BB9D5E7602073ABCEC592DD1374F030FA26E9E3F0204D2C9EE859A38385D0B34707A0607E07267CAC3E0409A56CDD035490313A06A921F3CC0FA8B6E7DA238285CFB24113944256371C608ADEEE7179E808BCE2F3C'H
}
}
}
}

网络配置keyToUse master

[0xB0C0] OTA LOG 09:40:29.369 DL_DCCH / RRCConnectionReconfiguration Radio Bearer ID: 1, Freq: 1300, SFN: 612 1
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nonCriticalExtension
{
nr-Config-r15 release : NULL,
nr-RadioBearerConfig1-r15 '140512F1F84DA440'H
}
}
}
}
}
}
}
}
}
}
}

=======================================================
Further decoding Nr radio Bearer Config

=======================================================

Interpreted PDU:

value RadioBearerConfig ::=
{
drb-ToAddModList
{
{
drb-Identity 3,
reestablishPDCP true,
pdcp-Config
{
drb
{
discardTimer infinity,
pdcp-SN-SizeUL len18bits,
pdcp-SN-SizeDL len18bits,
headerCompression notUsed : NULL
},
t-Reordering ms200
}
}
},
securityConfig
{
securityAlgorithmConfig
{
cipheringAlgorithm nea2,
integrityProtAlgorithm nia2
},
keyToUse master
}
}

[0xB821] OTA LOG 09:40:29.370 RADIO_BEARER_CONFIG RADIO_BEARER_CONFIG 1
value RadioBearerConfig ::=
{
drb-ToAddModList
{
{
drb-Identity 3,
reestablishPDCP true,
pdcp-Config
{
drb
{
discardTimer infinity,
pdcp-SN-SizeUL len18bits,
pdcp-SN-SizeDL len18bits,
headerCompression notUsed : NULL
},
t-Reordering ms200
}
}
},
securityConfig
{
securityAlgorithmConfig
{
cipheringAlgorithm nea2,
integrityProtAlgorithm nia2
},
keyToUse master
}
}

网络配置各频点的小区选择优先级：

[0xB0C0] OTA LOG 09:40:39.312132 DL_DCCH / RRCConnectionRelease Radio Bearer ID: 1, Freq: 3590, SFN: 582 1

09:40:39.312132 [0xB0C0] DL_DCCH / RRCConnectionRelease

Pkt Version = 27

RRC Release Number.Major.minor = 16.1.0

NR RRC Release Number.Major.minor = 15.10.0

Radio Bearer ID = 1, Physical Cell ID = 428

Freq = 3590

SysFrameNum = N/A, SubFrameNum = 7

PDU Number = DL_DCCH Message, Msg Length = 21

SIB Mask in SI = 0x00

Interpreted PDU:

value DL-DCCH-Message ::=

{

message c1 : rrcConnectionRelease :

{

rrc-TransactionIdentifier 3,

criticalExtensions c1 : rrcConnectionRelease-r8 :

{

releaseCause other,

idleModeMobilityControlInfo

{

freqPriorityListEUTRA

{

carrierFreq 1300,

cellReselectionPriority 7

{

carrierFreq 38950,

cellReselectionPriority 6

{

carrierFreq 39148,
cellReselectionPriority 6
},
{
carrierFreq 36275,
cellReselectionPriority 6
},
{
carrierFreq 41332,
cellReselectionPriority 6
},
{
carrierFreq 3683,
cellReselectionPriority 5
},
{
carrierFreq 3590,
cellReselectionPriority 4
}
},
t320 min30
}
}
}
}

再次Service Request后网络就没配置过NR测量

在非锚点小区上成功发起Service Request

[0xB0ED] OTA LOG 09:40:53.434330 LTE NAS EMM Plain OTA Outgoing Message Service Request Msg 1
[0xB0C0] OTA LOG 09:40:53.438412 UL_CCCH / RRCConnectionRequest Radio Bearer ID: 0, Freq: 36275, SFN: 0 1
[0xB0C0] OTA LOG 09:40:53.508310 DL_CCCH / RRCConnectionSetup Radio Bearer ID: 0, Freq: 36275, SFN: 978 1
[0xB0C0] OTA LOG 09:40:53.512509 UL_DCCH / RRCConnectionSetupComplete Radio Bearer ID: 1, Freq: 36275, SFN: 0 1
当前是在非锚点小区，没有配置过NR测量正常，后面一直进行各种TAU，回到信号好的地方后，设备最后TAU到了优先级最高的1300频点的锚点小区上，但网络依然没配置过NR测量，直到RRCConnectionRelease后再次发起Service Request。

最后TAU到了锚点小区：

[0xB0C0] OTA LOG 09:43:22.309 BCCH_DL_SCH / SystemInformationBlockType1 Radio Bearer ID: 0, Freq: 1300, SFN: 498 1
[0xB0C0] OTA LOG 09:43:22.310 BCCH_DL_SCH / SystemInformation Radio Bearer ID: 0, Freq: 1300, SFN: 0 1

sib2 :

plmn-InfoList-r15
{
{
upperLayerIndication-r15 true
}
}
[0xB0ED] OTA LOG 09:43:22.313 LTE NAS EMM Plain OTA Outgoing Message Tracking area update request Msg 1
[0xB0EC] OTA LOG 09:43:22.434 LTE NAS EMM Plain OTA Incoming Message Tracking area update accept Msg 1
[0xB0ED] OTA LOG 09:43:22.435 LTE NAS EMM Plain OTA Outgoing Message Tracking area update complete Msg 1

直到RRCConnectionRelease

从最后TAU到了锚点小区到RRCConnectionRelease这2分钟多的时间内网络没配置过NR测量。

[0xB0C0] OTA LOG 09:45:30.705012 DL_DCCH / RRCConnectionRelease Radio Bearer ID: 1, Freq: 1300, SFN: 26 1
message c1 : rrcConnectionRelease :
{
rrc-TransactionIdentifier 3,
criticalExtensions c1 : rrcConnectionRelease-r8 :
{
releaseCause other
}
}

再次添加NSA辅小区

Service Request

[0xB0ED] OTA LOG 09:45:30.983084 LTE NAS EMM Plain OTA Outgoing Message Service Request Msg 1

RRCConnectionReconfiguration

[0xB0C0] OTA LOG 09:45:31.159970 DL_DCCH / RRCConnectionReconfiguration Radio Bearer ID: 1, Freq: 1300, SFN: 71 1

09:45:31.159970 [0xB0C0] DL_DCCH / RRCConnectionReconfiguration

Pkt Version = 27

RRC Release Number.Major.minor = 16.1.0

NR RRC Release Number.Major.minor = 15.10.0

Radio Bearer ID = 1, Physical Cell ID = 448

Freq = 1300

SysFrameNum = N/A, SubFrameNum = 6

PDU Number = DL_DCCH Message, Msg Length = 112

SIB Mask in SI = 0x00

Interpreted PDU:

value DL-DCCH-Message ::=

{

message c1 : rrcConnectionReconfiguration :

{

rrc-TransactionIdentifier 2,

criticalExtensions c1 : rrcConnectionReconfiguration-r8 :

{

measConfig

{

measObjectToAddModList

{

{
measObjectId 2,
measObject measObjectNR-r15 :
{
carrierFreq-r15 504990,
rs-ConfigSSB-r15
{
measTimingConfig-r15
{
periodicityAndOffset-r15 sf20-r15 : 3,
ssb-Duration-r15 sf5
},
subcarrierSpacingSSB-r15 kHz30
},
threshRS-Index-r15
{
nr-RSRP-r15 36
},
maxRS-IndexCellQual-r15 2,
quantityConfigSet-r15 1,
deriveSSB-IndexFromCell-r15 TRUE,
bandNR-r15 setup : 41
}
},

{
reportConfigId 3,
reportConfig reportConfigInterRAT :
{
triggerType event :
{
eventId eventB1-NR-r15 :
{
b1-ThresholdNR-r15 nr-RSRP-r15 : 44,
reportOnLeave-r15 FALSE
},
hysteresis 3,
timeToTrigger ms512
},
maxReportCells 8,
reportInterval ms1024,
reportAmount r64,
reportQuantityCellNR-r15
{
ss-rsrp TRUE,
ss-rsrq FALSE,
ss-sinr FALSE
},
maxReportRS-Index-r15 1,
reportQuantityRS-IndexNR-r15
{
ss-rsrp TRUE,
ss-rsrq FALSE,
ss-sinr FALSE
},
reportRS-IndexResultsNR TRUE
}
},

measIdToAddModList
{
{
measId 3,
measObjectId 2,
reportConfigId 3
},

LTE ML1 IRAT NR Meas Results

[0xB1F5] LOG 09:45:31.225508 LTE ML1 IRAT NR Meas Results Length: 292 1

09:45:31.225508 [0xB1F5] LTE ML1 IRAT NR Meas Results

Version = 1

Version 1 {

Number of SubPackets = 1

SubPackets[0] {

SubPacket ID = 59

Irat Limited Nr Meas Results {

Version = 49

SubPacket Size = 272

Version 49 {

Inst Num = 0

Endc Mode = false

Num of Freq = 1

RspParam[0] {

ARFCN = 504990

Num Cells Detected = 5

Meas Results[0] {

PCI = 278

Num Beams = 6

Meas Info {

Rsrp = -97.50 dBm

Rsrq = -12.72 dBm

}

MeasInfoPerBeam[0] {

Beam Index = 1

Meas Info {

Rsrp = -96.72 dBm

Rsrq = -12.44 dBm

}

MeasInfoPerBeam[1] {
Beam Index = 2
Meas Info {
Rsrp = -98.44 dBm
Rsrq = -12.99 dBm
}
}
MeasInfoPerBeam[2] {
Beam Index = 4
Meas Info {
Rsrp = -99.13 dBm
Rsrq = -12.66 dBm
}
}
MeasInfoPerBeam[3] {
Beam Index = 3
Meas Info {
Rsrp = -100.18 dBm
Rsrq = -13.58 dBm
}
}
MeasInfoPerBeam[4] {
Beam Index = 0
Meas Info {
Rsrp = -104.53 dBm
Rsrq = -17.43 dBm
} }
MeasInfoPerBeam[5] {
Beam Index = 5
Meas Info {
Rsrp = -105.17 dBm
Rsrq = -15.95 dBm
}
}
}
Meas Results[1] {
PCI = 269
Num Beams = 2
Meas Info {
Rsrp = -100.29 dBm
Rsrq = -11.82 dBm
}
MeasInfoPerBeam[0] {
Beam Index = 0
Meas Info {
Rsrp = -100.29 dBm
Rsrq = -11.82 dBm
}
}
MeasInfoPerBeam[1] {
Beam Index = 6
Meas Info {
Rsrp = -108.07 dBm
Rsrq = -14.41 dBm
}
}
}
Meas Results[2] {
PCI = 277
Num Beams = 2
Meas Info {
Rsrp = -104.16 dBm
Rsrq = -13.32 dBm
}
MeasInfoPerBeam[0] {
Beam Index = 7
Meas Info {
Rsrp = -104.16 dBm
Rsrq = -13.32 dBm
}
}
MeasInfoPerBeam[1] {
Beam Index = 6
Meas Info {
Rsrp = -110.28 dBm
Rsrq = -17.56 dBm
}
}
}
Meas Results[3] {
PCI = 463
Num Beams = 2
Meas Info {
Rsrp = -106.48 dBm
Rsrq = -17.24 dBm
}
MeasInfoPerBeam[0] {
Beam Index = 1
Meas Info {
Rsrp = -105.04 dBm
Rsrq = -16.13 dBm
}
}
MeasInfoPerBeam[1] {
Beam Index = 2
Meas Info {
Rsrp = -108.55 dBm
Rsrq = -18.67 dBm
}
}
}
Meas Results[4] {
PCI = 364
Num Beams = 2
Meas Info {
Rsrp = -106.99 dBm
Rsrq = -14.80 dBm
}
MeasInfoPerBeam[0] {
Beam Index = 4
Meas Info {
Rsrp = -106.89 dBm
Rsrq = -14.59 dBm
}
}
MeasInfoPerBeam[1] {
Beam Index = 3
Meas Info {
Rsrp = -107.09 dBm
Rsrq = -15.00 dBm
}
}
}
}
}
}
}
}

MeasurementReport

[0xB0C0] OTA LOG 09:45:31.225815 UL_DCCH / MeasurementReport Radio Bearer ID: 1, Freq: 1300, SFN: 0 1

09:45:31.225815 [0xB0C0] UL_DCCH / MeasurementReport
Pkt Version = 27
RRC Release Number.Major.minor = 16.1.0
NR RRC Release Number.Major.minor = 15.10.0
Radio Bearer ID = 1, Physical Cell ID = 448
Freq = 1300
SysFrameNum = N/A, SubFrameNum = 0
PDU Number = UL_DCCH Message, Msg Length = 36
SIB Mask in SI = 0x00

Interpreted PDU:

value UL-DCCH-Message ::=
{
message c1 : measurementReport :
{
criticalExtensions c1 : measurementReport-r8 :
{
measResults
{
measId 3,
measResultPCell
{
rsrpResult 39,
rsrqResult 14
},
measResultNeighCells measResultNeighCellListNR-r15 :
{
{
pci-r15 278,
measResultCell-r15
{
rsrpResult-r15 59
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 1,
measResultSSB-Index-r15
{
rsrpResult-r15 60
}
}
}
},
{
pci-r15 269,
measResultCell-r15
{
rsrpResult-r15 56
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 0,
measResultSSB-Index-r15
{
rsrpResult-r15 56
}
}
}
},
{
pci-r15 277,
measResultCell-r15
{
rsrpResult-r15 52
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 7,
measResultSSB-Index-r15
{
rsrpResult-r15 52
}
}
}
},
{
pci-r15 463,
measResultCell-r15
{
rsrpResult-r15 50
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 1,
measResultSSB-Index-r15
{
rsrpResult-r15 51
}
}
}
},
{
pci-r15 364,
measResultCell-r15
{
rsrpResult-r15 50
},
measResultRS-IndexList-r15
{
{
ssb-Index-r15 4,
measResultSSB-Index-r15
{
rsrpResult-r15 50
}
}
}
}
}
}
}
}
}

添加NSA辅小区：

[0xB821] OTA LOG 09:45:31.267226 RRC_RECONFIG RRC_RECONFIG 1
[0xB821] OTA LOG 09:45:31.267247 RADIO_BEARER_CONFIG RADIO_BEARER_CONFIG 1

securityConfig
{
securityAlgorithmConfig
{
cipheringAlgorithm nea2
},
keyToUse secondary
}
[0xB821] OTA LOG 09:45:31.284048 RRC_RECONFIG_COMPLETE RRC_RECONFIG_COMPLETE 1

报上层显示5G

[0x1544] LOG 09:45:31.289568 QMI_MCS_QCSI_PKT Length: 318

Service_DSD {
ServiceDSDV1 {
dsd_ui_info {
dsd_ui_info_indTlvs[0] {
Type = 0x10
Length = 24
global_ui_info {
technology = DSD_SYS_NETWORK_3GPP
rat_value = DSD_SYS_RAT_EX_3GPP_5G
so_mask = QMI_DSD_3GPP_SO_MASK_5G_SUB6 | QMI_DSD_3GPP_SO_MASK_5G_NSA
ui_mask = QMI_DSD_UI_MASK_3GPP_5G_BASIC | QMI_DSD_UI_MASK_3GPP_SIB2_PLMN_R15 | QMI_DSD_UI_MASK_3GPP_SIB2_ULI
}
}
[ 42/ 0/2] QTRACE 09:45:31.308851 MMODE/STRM/High/CM [ qm_meas.c 1350] NR5G-NSA rsrp -98, sinr -32768 rsrq -13

小结

终端移动到信号差的地方，NSA掉了，Service Request再次发起时是注册在非锚点小区的，虽说后面后面移动了信号好的地方，也TAU到了锚点小区，但网络一直不配NR测量，直到RRCConnectionRelease后再次发起Service Request才再次添加了NSA辅小区。可见在一定条件下RRC连接态网络是不配置NR测量的，也就无法添加NSA辅小区了。

2、信号差导致不添加NSA辅小区

问题描述：19:39左右对比机和设备同时掉到4G，但对比机在20:08回到5G，设备始终无法回到5G，20:27手动重启设备后才能恢复5G

log分析：

通过日志可以看出终端一直在进行NR测量，但信号RSRP一直不好，有时信号可以但信号质量RSRQ不好，见如下log，这应该是回不到5G的原因。

对比机可以的话，可以对比看看是否注册在LTE相同的频段，5G信号测量是否有差异；

[0xB97F] LOG 12:23:42.612 NR5G ML1 Searcher Measurement Database Update Ext Length: 668 1
12:23:42.612 [0xB97F] NR5G ML1 Searcher Measurement Database Update Ext
Ml1Version {
Major.Minor Version = 2
8
}
Version 131080 {
System Time {
Slot Number = 0
SubFrame Number = 7
System Frame Number = 768
SCS = DEFAULT
}
Num Layers = 1
SSB Periodicity Serv Cell = INVALID
Frequency Offset = 3.940 PPM
Timing Offset = 58483732
Component Carrier List[0] {
Raster ARFCN = 504990
Num Cells = 10
Serving Cell Index = 255
Serving Cell PCI = 65535
Serving SSB = NA
ServingRsrpRx23[0] {
Serving RSRP Rx23 = NA
}
ServingRsrpRx23[1] {
Serving RSRP Rx23 = NA
}
Serving RX Beam = { NA, NA }
Serving RFIC ID = NA
ServingSubarrayId[0] {
SubArray ID = NA
}
ServingSubarrayId[1] {
SubArray ID = NA
}

Cells[0] {
PCI = 909
PBCH SFN = 872
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -100.906
}
CellQualityRsrq {
Cell Quality RSRQ = -17.664
}
Detected Beams[0] {
SSB Index = 0
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -110.305
}
Rsrps[1] {
RSRP = -100.883
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -100.906
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -17.664
}
}
}
Cells[1] {
PCI = 910
PBCH SFN = 872
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -99.914
}
CellQualityRsrq {
Cell Quality RSRQ = -15.742
}
Detected Beams[0] {
SSB Index = 1
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -105.742
}
Rsrps[1] {
RSRP = -99.953
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -99.914
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -15.742
}
}
}
Cells[2] {
PCI = 213
PBCH SFN = 872
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -103.570
}
CellQualityRsrq {
Cell Quality RSRQ = -19.102
}
Detected Beams[0] {
SSB Index = 1
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -105.547
}
Rsrps[1] {
RSRP = -103.586
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -103.570
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -19.102
}
}
}
Cells[3] {
PCI = 972
PBCH SFN = 984
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -103.188
}
CellQualityRsrq {
Cell Quality RSRQ = -18.063
}
Detected Beams[0] {
SSB Index = 7
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -103.188
}
Rsrps[1] {
RSRP = -110.102
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -103.188
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -18.063
}
}
}
Cells[4] {
PCI = 498
PBCH SFN = 928
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -107.352
}
CellQualityRsrq {
Cell Quality RSRQ = -20.766
}
Detected Beams[0] {
SSB Index = 4
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -107.633
}
Rsrps[1] {
RSRP = -107.305
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -107.352
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -20.766
}
}
}
Cells[5] {
PCI = 180
PBCH SFN = 984
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -100.555
}
CellQualityRsrq {
Cell Quality RSRQ = -17.359
}
Detected Beams[0] {
SSB Index = 0
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -109.125
}
Rsrps[1] {
RSRP = -100.555
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -100.555
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -17.359
}
}
}
Cells[6] {
PCI = 28
PBCH SFN = 872
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -99.125
}
CellQualityRsrq {
Cell Quality RSRQ = -14.992
}
Detected Beams[0] {
SSB Index = 6
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -101.328
}
Rsrps[1] {
RSRP = -99.141
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -99.141
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -14.984
}
}
}
Cells[7] {
PCI = 306
PBCH SFN = 872
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -103.109
}
CellQualityRsrq {
Cell Quality RSRQ = -17.945
}
Detected Beams[0] {
SSB Index = 7
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -103.094
}
Rsrps[1] {
RSRP = -104.445
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -103.109
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -17.945
}
}
}
Cells[8] {
PCI = 308
PBCH SFN = 984
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -106.602
}
CellQualityRsrq {
Cell Quality RSRQ = -20.172
}
Detected Beams[0] {
SSB Index = 4
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -108.063
}
Rsrps[1] {
RSRP = -106.703
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -106.602
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -20.172
}
}
}
Cells[9] {
PCI = 524
PBCH SFN = 984
Num Beams = 1
CellQualityRsrp {
Cell Quality RSRP = -104.898
}
CellQualityRsrq {
Cell Quality RSRQ = -18.289
}
Detected Beams[0] {
SSB Index = 4
RX Beam Info {
RxBeamId[0] {
RX Beam Id = NA
}
RxBeamId[1] {
RX Beam Id = NA
}
Rsrps[0] {
RSRP = -104.766
}
Rsrps[1] {
RSRP = -110.258
}
}
Nr2NrFilteredTxBeamRsrpL3 {
NR2NR Filtered Tx Beam RSRP L3 = NA
}
Nr2NrFilteredTxBeamRsrqL3 {
NR2NR Filtered Tx Beam RSRQ L3 = NA
}
L2NrFilteredTxBeamRsrpL3 {
L2NR Filtered Tx Beam RSRP L3 = -104.766
}
L2NrFilteredTxBeamRsrqL3 {
L2NR Filtered Tx Beam RSRQ L3 = -18.133
}
}
}
}
}

3、掉到信号强的非锚点小区

有NSA时LTE各频点优先级

[0xB821] OTA LOG 09:55:49.963961 RRC_RECONFIG RRC_RECONFIG 1
[0xB821] OTA LOG 09:55:49.963974 RADIO_BEARER_CONFIG RADIO_BEARER_CONFIG 1
[0xB821] OTA LOG 09:55:49.999244 RRC_RECONFIG_COMPLETE RRC_RECONFIG_COMPLETE 1

有NSA时carrierFreq 3750的优先级最高：cellReselectionPriority 7
[0xB0C0] OTA LOG 09:55:56.163682 DL_DCCH / RRCConnectionRelease Radio Bearer ID: 1, Freq: 3750, SFN: 97 1
09:55:56.163682 [0xB0C0] DL_DCCH / RRCConnectionRelease
Pkt Version = 27
RRC Release Number.Major.minor = 16.1.0
NR RRC Release Number.Major.minor

= 15.10.0
Radio Bearer ID = 1, Physical Cell ID = 411
Freq = 3750
SysFrameNum = N/A, SubFrameNum = 1
PDU Number = DL_DCCH Message, Msg Length = 18
SIB Mask in SI = 0x00

Interpreted PDU:

cellReselectionPriority 4
},
{
carrierFreq 40340,
cellReselectionPriority 4
},
{
carrierFreq 9610,
cellReselectionPriority 2
}
},
t320 min60
}
}
}
}

这时的服务小区信号：

[0xB193] LOG 09:55:56.164103 LTE ML1 Serving Cell Meas Response Length: 196 1
09:55:56.164103 [0xB193] LTE ML1 Serving Cell Meas Response
Version = 1
Version 1 {
Number of SubPackets = 1
SubPackets[0] {
SubPacket ID = 25
Serving Cell Measurement Result {
Version = 50
SubPacket Size = 176 bytes
Version 50 {
E-ARFCN = 3750
Num of Cell = 1
Cells[0] {
Valid Rx = RX0_RX1
Logical To Physical Rx Map = { 0, 1, NA, NA }
Physical Cell ID = 411
Serving Cell Index = PCell
Is Serving Cell = 1
Current SFN = 97
Current Subframe Number = 1
Is Restricted = false
Cell Timing[0] = 76923
Cell Timing[1] = 76923
Cell Timing SFN[0] = 97
Cell Timing SFN[1] = 97
Inst RSRP Rx[0] = -100.88 dBm
Inst RSRP Rx[1] = -104.50 dBm
Inst RSRP Rx[2] = NA
Pathloss RSRP Rx[2] = NA
Pathloss RSRP Rx[3] = NA
Inst RSRP Rx[3] = NA
Inst Measured RSRP = -100.88 dBm
Filtered RSRP = -101.00 dBm
Inst RSRQ Rx[0] = -11.31 dB
Inst RSRQ Rx[1] = -10.38 dB
Inst RSRQ Rx[2] = NA
Inst RSRQ Rx[3] = NA
Inst RSRQ = -10.38 dB
Filtered RSRQ = -10.44 dB
Inst RSSI Rx[0] = -72.50 dBm
Inst RSSI Rx[1] = -77.19 dBm
Inst RSSI Rx[2] = NA
Inst RSSI Rx[3] = NA
Inst RSSI = -72.50 dBm
FTL SNR Rx[0] = 3.60 dB
FTL SNR Rx[1] = 4.70 dB
FTL SNR Rx[2] = NA
FTL SNR Rx[3] = NA
Projected Sir = 0 dB
Post Ic Rsrq = -1e+001 dB
CINR RX 0 = 2240
CINR RX 1 = 2638
CINR RX 2 = NA
CINR RX 3 = NA
}
}
}
}
}

持续检测不到NSA小区：

[0xB1F5] LOG 09:56:06.649569 LTE ML1 IRAT NR Meas Results Length: 136 1
[0xB1F5] LOG 09:56:07.129479 LTE ML1 IRAT NR Meas Results Length: 136 1
[0xB1F5] LOG 09:56:07.529682 LTE ML1 IRAT NR Meas Results Length: 136 1
09:56:07.529682 [0xB1F5] LTE ML1 IRAT NR Meas Results
Version = 1
Version 1 {
Number of SubPackets = 1
SubPackets[0] {
SubPacket ID = 59
Irat Limited Nr Meas Results {
Version = 49
SubPacket Size = 116
Version 49 {
Inst Num = 0
Endc Mode = false
Num of Freq = 4
RspParam[0]

{
ARFCN = 660768
Num Cells Detected = 0
}
RspParam[1] {
ARFCN = 627360
Num Cells Detected = 0
}
RspParam[2] {
ARFCN = 369870
Num Cells Detected = 0
}
RspParam[3] {
ARFCN = 159630
Num Cells Detected = 0
}
}
}
}
}

配置keyToUse master

[0xB821] OTA LOG 09:56:07.761187 RADIO_BEARER_CONFIG RADIO_BEARER_CONFIG 1
09:56:07.761187 [0xB821] RADIO_BEARER_CONFIG
Pkt Version = 12
RRC Release Number.Major.minor = 15.10.0
Radio Bearer ID = 1, Physical Cell ID = N/A
NR Cell Global Id = N/A
Freq = N/A
Sfn = N/A, SubFrameNum = N/A
slot = 0
PDU Number = RADIO_BEARER_CONFIG Message, Msg Length = 8
SIB Mask in SI = 0x00

Interpreted PDU:

value RadioBearerConfig ::=
{
drb-ToAddModList
{
{
cnAssociation eps-BearerIdentity : 5,
drb-Identity 3,
reestablishPDCP true,
pdcp-Config
{
drb
{
discardTimer infinity,
pdcp-SN-SizeUL len18bits,
pdcp-SN-SizeDL len18bits,
headerCompression notUsed : NULL,
statusReportRequired true
},
t-Reordering ms200
}
}
},
securityConfig
{
securityAlgorithmConfig
{
cipheringAlgorithm nea2
},
keyToUse master
}
}

网络配置dl-CarrierFreq 40340的目标小区：targetPhysCellId 363,

[0xB0C0] OTA LOG 09:56:07.762149 DL_DCCH / RRCConnectionReconfiguration Radio Bearer ID: 1, Freq: 3750, SFN: 232 1
09:56:07.762149 [0xB0C0] DL_DCCH / RRCConnectionReconfiguration
Pkt Version = 27
RRC Release Number.Major.minor = 16.1.0

NR RRC Release Number.Major.minor = 15.10.0
Radio Bearer ID = 1, Physical Cell ID = 411
Freq = 3750
SysFrameNum = N/A, SubFrameNum = 4
PDU Number = DL_DCCH Message, Msg Length = 103
SIB Mask in SI = 0x00

Interpreted PDU:

value DL-DCCH-Message ::=
{
message c1 : rrcConnectionReconfiguration :
{
rrc-TransactionIdentifier 1,
criticalExtensions c1 : rrcConnectionReconfiguration-r8 :
{
mobilityControlInfo
{
targetPhysCellId 363,
carrierFreq
{
dl-CarrierFreq 40340
},
carrierBandwidth
{
dl-Bandwidth n100
},
t304 ms500,
newUE-Identity '10110011 10000100'B,
radioResourceConfigCommon
{
rach-ConfigCommon
{
preambleInfo
{
numberOfRA-Preambles n52,
preamblesGroupAConfig
{
sizeOfRA-PreamblesGroupA n28,
messageSizeGroupA b56,
messagePowerOffsetGroupB dB10
}
},
powerRampingParameters
{
powerRampingStep dB2,
preambleInitialReceivedTargetPower dBm-104
},
ra-SupervisionInfo
{
preambleTransMax n10,
ra-ResponseWindowSize sf10,
mac-ContentionResolutionTimer sf64
},
maxHARQ-Msg3Tx 5
},
prach-Config
{
rootSequenceIndex 304,
prach-ConfigInfo
{
prach-ConfigIndex 3,
highSpeedFlag FALSE,
zeroCorrelationZoneConfig 4,
prach-FreqOffset 13
}
},
pdsch-ConfigCommon
{
referenceSignalPower 15,
p-b 1
},
pusch-ConfigCommon
{
pusch-ConfigBasic
{
n-SB 4,
hoppingMode interSubFrame,
pusch-HoppingOffset 26,
enable64QAM TRUE
},
ul-ReferenceSignalsPUSCH
{
groupHoppingEnabled FALSE,
groupAssignmentPUSCH 0,
sequenceHoppingEnabled FALSE,
cyclicShift 0
}
},
pucch-ConfigCommon
{
deltaPUCCH-Shift ds1,
nRB-CQI 6,
nCS-AN 0,
n1PUCCH-AN 108
},
soundingRS-UL-ConfigCommon setup :
{
srs-BandwidthConfig bw0,
srs-SubframeConfig sc0,
ackNackSRS-SimultaneousTransmission TRUE,
srs-MaxUpPts true
},
uplinkPowerControlCommon
{
p0-NominalPUSCH -105,
alpha al1,
p0-NominalPUCCH -120,
deltaFList-PUCCH
{
deltaF-PUCCH-Format1 deltaF0,
deltaF-PUCCH-Format1b deltaF3,
deltaF-PUCCH-Format2 deltaF1,
deltaF-PUCCH-Format2a deltaF2,
deltaF-PUCCH-Format2b deltaF2
},
deltaPreambleMsg3 4
},
p-Max 26,
tdd-Config
{
subframeAssignment sa2,
specialSubframePatterns ssp7
},
ul-CyclicPrefixLength len1,
pusch-ConfigCommon-v1270
{
enable64QAM-v1270 true
}
},
rach-ConfigDedicated
{
ra-PreambleIndex 63,
ra-PRACH-MaskIndex 0
}
},

TAU到非锚定小区：

[0xB0ED] OTA LOG 09:56:07.819014 LTE NAS EMM Plain OTA Outgoing Message Tracking area update request Msg 1
[0xB0C0] OTA LOG 09:56:07.833353 BCCH_DL_SCH / SystemInformation Radio Bearer ID: 0, Freq: 40340, SFN: 240 1
[0xB0C0] OTA LOG 09:56:07.838270 BCCH_DL_SCH / SystemInformation Radio Bearer ID: 0, Freq: 40340, SFN: 240 1
[0xB0C0] OTA LOG 09:56:07.838827 BCCH_DL_SCH / SystemInformation Radio Bearer ID: 0, Freq: 40340, SFN: 240 1
09:56:07.838827 [0xB0C0] BCCH_DL_SCH / SystemInformation
Pkt Version = 27
RRC Release Number.Major.minor = 16.1.0
NR RRC Release Number.Major.minor = 15.10.0
Radio Bearer ID = 0,

Physical Cell ID = 363
Freq = 40340
SysFrameNum = 240, SubFrameNum = 4
PDU Number = BCCH_DL_SCH Message, Msg Length = 49
SIB Mask in SI = 0x0C

Interpreted PDU:

value BCCH-DL-SCH-Message ::=
{
message c1 : systemInformation :
{
criticalExtensions systemInformation-r8 :
{
sib-TypeAndInfo
{
sib2 :
{
ac-BarringInfo
{
ac-BarringForEmergency FALSE
},
radioResourceConfigCommon
{
rach-ConfigCommon
{
preambleInfo
{
numberOfRA-Preambles n52,
preamblesGroupAConfig
{
sizeOfRA-PreamblesGroupA n28,
messageSizeGroupA b56, messagePowerOffsetGroupB dB10
}
},
powerRampingParameters
{
powerRampingStep dB2,
preambleInitialReceivedTargetPower dBm-104
},
ra-SupervisionInfo
{
preambleTransMax n10,
ra-ResponseWindowSize sf10,
mac-ContentionResolutionTimer sf64
},
maxHARQ-Msg3Tx 5
},
bcch-Config
{
modificationPeriodCoeff n2
},
pcch-Config
{
defaultPagingCycle rf128,
nB oneT
},
prach-Config
{
rootSequenceIndex 304,
prach-ConfigInfo
{
prach-ConfigIndex 3,
highSpeedFlag FALSE,
zeroCorrelationZoneConfig 4,
prach-FreqOffset 13
}
},
pdsch-ConfigCommon
{
referenceSignalPower 15,
p-b 1
},
pusch-ConfigCommon
{
pusch-ConfigBasic
{
n-SB 4,
hoppingMode interSubFrame,
pusch-HoppingOffset 26,
enable64QAM TRUE
},
ul-ReferenceSignalsPUSCH
{
groupHoppingEnabled FALSE,
groupAssignmentPUSCH 0,
sequenceHoppingEnabled FALSE,
cyclicShift 0
}
},
pucch-ConfigCommon
{
deltaPUCCH-Shift ds1,
nRB-CQI 6,
nCS-AN 0,
n1PUCCH-AN 108
},
soundingRS-UL-ConfigCommon setup :
{
srs-BandwidthConfig bw0,
srs-SubframeConfig sc0,
ackNackSRS-SimultaneousTransmission TRUE,
srs-MaxUpPts true
},
uplinkPowerControlCommon
{
p0-NominalPUSCH -105,
alpha al1,
p0-NominalPUCCH -120,
deltaFList-PUCCH
{
deltaF-PUCCH-Format1 deltaF0,
deltaF-PUCCH-Format1b deltaF3,
deltaF-PUCCH-Format2 deltaF1,
deltaF-PUCCH-Format2a deltaF2,
deltaF-PUCCH-Format2b deltaF2
},
deltaPreambleMsg3 4
},
ul-CyclicPrefixLength len1,
pusch-ConfigCommon-v1270
{
enable64QAM-v1270 true
}
},
ue-TimersAndConstants
{
t300 ms1000,
t301 ms200,
t310 ms1000,
n310 n10,
t311 ms10000,
n311 n1
},
freqInfo
{
additionalSpectrumEmission 1
},
timeAlignmentTimerCommon sf10240
},
sib3 :
{
cellReselectionInfoCommon
{
q-Hyst dB4,
speedStateReselectionPars
{
mobilityStateParameters
{
t-Evaluation s60,
t-HystNormal s30,
n-CellChangeMedium 4,
n-CellChangeHigh 8
},
q-HystSF
{
sf-Medium dB0,
sf-High dB0
}
}
},
cellReselectionServingFreqInfo
{
s-NonIntraSearch 9,
threshServingLow 4,
cellReselectionPriority 5
},
intraFreqCellReselectionInfo
{
q-RxLevMin -66,
p-Max 26,
s-IntraSearch 27,
presenceAntennaPort1 TRUE,
neighCellConfig '01'B,
t-ReselectionEUTRA 1,
t-ReselectionEUTRA-SF
{
sf-Medium lDot0,
sf-High oDot75
}
},
s-IntraSearch-v920
{
s-IntraSearchP-r9 27,
s-IntraSearchQ-r9 5
},
s-NonIntraSearch-v920
{
s-NonIntraSearchP-r9 9,
s-NonIntraSearchQ-r9 2
},
q-QualMin-r9 -17
}
}
}
}
}

[0xB0EC] OTA LOG 09:56:07.880876 LTE NAS EMM Plain OTA Incoming Message Tracking area update accept Msg 1

网络重配LTE各频点优先级

carrierFreq 1675被设为最高优先级：cellReselectionPriority 7
[0xB0C0] OTA LOG 09:56:12.985664 DL_DCCH / RRCConnectionRelease Radio Bearer ID: 1, Freq: 40340, SFN: 755 1
09:56:12.985664 [0xB0C0] DL_DCCH / RRCConnectionRelease
Pkt Version = 27
RRC Release Number.Major.minor = 16.1.0
NR RRC Release Number.Major.minor = 15.10.0
Radio Bearer ID = 1, Physical Cell ID = 363
Freq = 40340
SysFrameNum = N/A, SubFrameNum = 3
PDU Number = DL_DCCH Message, Msg Length = 23
SIB Mask in SI = 0x00

Interpreted PDU:

value DL-DCCH-Message ::=
{
message c1 : rrcConnectionRelease :
{
rrc-TransactionIdentifier 0,
criticalExtensions c1 : rrcConnectionRelease-r8 :
{ releaseCause other,
idleModeMobilityControlInfo
{
freqPriorityListEUTRA
{
{
carrierFreq 1675,
cellReselectionPriority 7
},
{
carrierFreq 475,
cellReselectionPriority 6
},
{
carrierFreq 3750,
cellReselectionPriority 5
},
{
carrierFreq 43489,
cellReselectionPriority 4
},
{
carrierFreq 43291,
cellReselectionPriority 4
},
{
carrierFreq 40196,
cellReselectionPriority 3
},
{

carrierFreq 9610,
cellReselectionPriority 2
},
{
carrierFreq 40340,
cellReselectionPriority 1
}
},
t320 min180
}
}
}
}

E-ARFCN = 1675上的信号：

[0xB193] LOG 09:56:16.029258 LTE ML1 Serving Cell Meas Response Length: 196 1
09:56:16.029258 [0xB193] LTE ML1 Serving Cell Meas Response
Version = 1
Version 1 {
Number of SubPackets = 1
SubPackets[0] {
SubPacket ID = 25
Serving Cell Measurement Result {
Version = 50
SubPacket Size = 176 bytes
Version 50 {
E-ARFCN = 1675
Num of Cell = 1
Cells[0] {
Valid Rx = RX0_RX1
Logical To Physical Rx Map = { 0, 1, NA, NA }
Physical Cell ID = 318
Serving Cell Index = PCell
Is Serving Cell = 1
Current SFN = 21
Current Subframe Number = 9
Is Restricted = false
Cell Timing[0] = 280512
Cell Timing[1] = 280512
Cell Timing SFN[0] = 21
Cell Timing SFN[1] = 21
Inst RSRP Rx[0] = -85.63 dBm
Inst RSRP Rx[1] = -87.75 dBm
Inst RSRP Rx[2] = NA
Pathloss RSRP Rx[2] = NA
Pathloss RSRP Rx[3] = NA
Inst RSRP Rx[3] = NA
Inst Measured RSRP = -85.63 dBm
Filtered RSRP = -85.63 dBm
Inst RSRQ Rx[0] = -10.69 dB
Inst RSRQ Rx[1] = -11.25 dB
Inst RSRQ Rx[2] = NA
Inst RSRQ Rx[3] = NA
Inst RSRQ = -10.69 dB
Filtered RSRQ = -10.69 dB

Inst RSSI Rx[0] = -56.13 dBm
Inst RSSI Rx[1] = -57.75 dBm
Inst RSSI Rx[2] = NA
Inst RSSI Rx[3] = NA
Inst RSSI = -56.13 dBm
FTL SNR Rx[0] = 12.60 dB
FTL SNR Rx[1] = 9.90 dB
FTL SNR Rx[2] = NA
FTL SNR Rx[3] = NA
Projected Sir = 4 dB
Post Ic Rsrq = -1e+001 dB
CINR RX 0 = 2560
CINR RX 1 = 2560
CINR RX 2 = NA
CINR RX 3 = NA
}
}
}
}
}

设备被固定在了E-ARFCN = 1675

根据3GPP TS 36.331

5.5.4.3 Event A2 (Serving becomes worse than threshold)

Inequality A2-1 (Entering condition)
Ms - Hys < Thresh

RRCConnectionReconfiguration中的A2事件，信号要低于(21+2)-140=-117dBm时才会启动异频/异系统测量，现在E-ARFCN = 1675的信号在80~90之间，优先级又最高，因此设备被固定在了E-ARFCN = 1675。
a2-Threshold threshold-RSRP : 21
a2-Threshold threshold-RSRQ : 14
[0xB0C0] OTA LOG 09:56:17.030213 DL_DCCH / RRCConnectionReconfiguration Radio Bearer ID: 1, Freq: 1675, SFN:

122 1
09:56:17.030213 [0xB0C0] DL_DCCH / RRCConnectionReconfiguration
Pkt Version = 27
RRC Release Number.Major.minor = 16.1.0
NR RRC Release Number.Major.minor = 15.10.0
Radio Bearer ID = 1, Physical Cell ID = 318
Freq = 1675
SysFrameNum = N/A, SubFrameNum = 1
PDU Number = DL_DCCH Message, Msg Length = 91
SIB Mask in SI = 0x00

Interpreted PDU:

value DL-DCCH-Message ::=
{
message c1 : rrcConnectionReconfiguration :
{
rrc-TransactionIdentifier 2,
criticalExtensions c1 : rrcConnectionReconfiguration-r8 :
{
measConfig
{
measObjectToAddModList
{
{
measObjectId 1,
measObject measObjectEUTRA :
{
carrierFreq 1675,
allowedMeasBandwidth mbw75,
presenceAntennaPort1 FALSE, neighCellConfig '01'B,
offsetFreq dB0,
cellsToAddModList
{
{
cellIndex 1,
physCellId 318,
cellIndividualOffset dB0
},
{
cellIndex 2,
physCellId 39,
cellIndividualOffset dB-1
},
{
cellIndex 3,
physCellId 6,
cellIndividualOffset dB-1
},
{
cellIndex 4,
physCellId 141,
cellIndividualOffset dB-1
},
{
cellIndex 5,
physCellId 351,
cellIndividualOffset dB-2
},
{
cellIndex 6,
physCellId 247,
cellIndividualOffset dB-2
},
{
cellIndex 7,
physCellId 63,
cellIndividualOffset dB-2
},
{
cellIndex 8,
physCellId 256,
cellIndividualOffset dB-2
},
{
cellIndex 9,
physCellId 103,
cellIndividualOffset dB-3
},
{
cellIndex 10,
physCellId 320,
cellIndividualOffset dB-3
},
{
cellIndex 11,
physCellId 187,
cellIndividualOffset dB-3
},
{
cellIndex 12,
physCellId 102,
cellIndividualOffset dB-3
},
{
cellIndex 13,
physCellId 319,
cellIndividualOffset dB-3
},
{
cellIndex 14,
physCellId 8,
cellIndividualOffset dB-3
},
{
cellIndex 15,
physCellId 312,
cellIndividualOffset dB-3
},
{
cellIndex 16,
physCellId 299,
cellIndividualOffset dB-3
},
{
cellIndex 17,
physCellId 454,
cellIndividualOffset dB-3
},
{
cellIndex 18,
physCellId 233,
cellIndividualOffset dB-3
},
{
cellIndex 19,
physCellId 455,
cellIndividualOffset dB-3
},
{
cellIndex 20,
physCellId 240,
cellIndividualOffset dB-3
},
{
cellIndex 21,
physCellId 29,
cellIndividualOffset dB-3
},
{
cellIndex 22,
physCellId 186,
cellIndividualOffset dB-3
}
}
}
}
},
reportConfigToAddModList
{
{
reportConfigId 1,
reportConfig reportConfigEUTRA :
{
triggerType event :
{
eventId eventA3 :
{
a3-Offset 2,
reportOnLeave FALSE
},
hysteresis 2,
timeToTrigger ms128
},
triggerQuantity rsrp,
reportQuantity both,
maxReportCells 4,
reportInterval ms1024,
reportAmount infinity,
reportAddNeighMeas-r10 setup
}
},
{
reportConfigId 2,
reportConfig reportConfigEUTRA :
{
triggerType event :
{
eventId eventA2 :
{
a2-Threshold threshold-RSRP : 21
},
hysteresis 2,
timeToTrigger ms256
},
triggerQuantity rsrp,
reportQuantity both,
maxReportCells 1,
reportInterval ms480,
reportAmount r1
}
},
{
reportConfigId 3,
reportConfig reportConfigEUTRA :
{
triggerType event :
{
eventId eventA2 :
{
a2-Threshold threshold-RSRQ : 14
},
hysteresis 2,
timeToTrigger ms256
},
triggerQuantity rsrq,
reportQuantity both,
maxReportCells 1,
reportInterval ms480,
reportAmount r1
}
}
},
measIdToAddModList
{
{
measId 1,
measObjectId 1,
reportConfigId 1
},
{
measId 2,
measObjectId 1,
reportConfigId 2
},
{
measId 3,
measObjectId 1,
reportConfigId 3
}
},
quantityConfig
{
quantityConfigEUTRA

{
filterCoefficientRSRP fc6,
filterCoefficientRSRQ fc6
}
},
s-Measure 60,
speedStatePars release : NULL
}
}
}
}

该频点上应该没有锚定小区，所以回不到5G NSA了

后面多次RRCConnectionRelease都是配置的carrierFreq 1675为最高优先级cellReselectionPriority 7，设备被固定到该频点上，该频点上应该没有锚定小区，所以回不到5G NSA了。
[0xB0C0] OTA LOG 09:58:50.981030 DL_DCCH / RRCConnectionRelease Radio Bearer ID: 1, Freq: 1675, SFN: 157 1
[0xB0C0] OTA LOG 09:59:03.474992 DL_DCCH / RRCConnectionRelease Radio Bearer ID: 1, Freq: 1675, SFN: 382 1
09:56:26.885268 [0xB0C0] DL_DCCH / RRCConnectionRelease
Pkt Version = 27
RRC Release Number.Major.minor = 16.1.0
NR RRC Release Number.Major.minor = 15.10.0
Radio Bearer ID = 1, Physical Cell ID = 318

Freq = 1675
SysFrameNum = N/A, SubFrameNum = 6
PDU Number = DL_DCCH Message, Msg Length = 21
SIB Mask in SI = 0x00

Interpreted PDU:

value DL-DCCH-Message ::=
{
message c1 : rrcConnectionRelease :
{
rrc-TransactionIdentifier 0,
criticalExtensions c1 : rrcConnectionRelease-r8 :
{
releaseCause other,
idleModeMobilityControlInfo
{
freqPriorityListEUTRA
{
{
carrierFreq 1675,
cellReselectionPriority 7
},
{
carrierFreq 475,
cellReselectionPriority 6
},
{
carrierFreq 3750,
cellReselectionPriority 5
},
{
carrierFreq 40340,
cellReselectionPriority 4 },
{
carrierFreq 43291,
cellReselectionPriority 4
},
{
carrierFreq 43489,
cellReselectionPriority 4
},
{
carrierFreq 9610,
cellReselectionPriority 3
}
},
t320 min180
}
}
}
}