呼叫流程调试中常见问题的定位.doc

调试中常见问题的定位黄志钢1 概述使用模拟工具RNCCN进行呼叫流程测试时，经常遇到呼叫不成功的情况，本文档主要介绍呼叫的流程（重点介绍RNC的流程）以及呼叫过程中经常遇到的问题，并附上RNC相关的打印分析。调试过程中经常用到的调试工具：CN统一网管的信令跟踪（包括平台信令部分和呼叫业务部分）、业务观察（其中的失败观察部分）。由于RNC的信令跟踪还没有提供使用，目前RNC的问题主要靠前台打印来定位。本文档适用于对呼叫流程不熟悉的测试或开发人员，用于帮助定位呼叫过程中的问题。2 IMSI附着IMSI附着是通过位置更新流程来实现的，流程比较简单，在不做鉴权、TMSI重分配的情况下，NAS层只有两条消息交互过程，如下所示：注：InitUEMsg：初始UE消息，是RANAP协议的一条信令消息；InitDTMsg：初始直传消息，是RRC协议的一条信令消息DT：上行或下行直传消息，图中的DT消息应该分解成两条消息来理解，一条是UE和RNC之间的RRC直传消息，另一条是RNC和CN之间的RANAP直传消息。位置更新成功时，信令跟踪中MM层捕获的信令如下：MM: LOCATION UPDATING REQUESTMM: LOCATION UPDATING ACCEPT常见失败原因分析如下： 如果信令跟踪中没有任何消息，业务失败观察中也没有任何显示，依次排查下列流程： RRC连接建立、IU连接建立。如果上面两个流程都没有问题，很可能是RNC侧RANAP消息中参数错误（如MCC、MNC配置不一致等等）。 位置更新拒绝：信令跟踪中捕获到LOCATION UPDATING REJECT，可能的原因包括：模拟工具中配置UE的IMSI号码不正确；鉴权没有关闭（此时在信令跟踪中能捕获到鉴权消息）；MSCServer与HLR链路不通等。 其他情况：调试过程中遇到过LOCATION UPDATING ACCEPT消息无法发送到RNC的情况，打印显示信令点不可达，请检查Iu口的信令配置。3 CS域呼叫建立流程3.1 系统流程注：同上图。3.2 呼叫失败原因定位借助于CN统一网管的两大调试利器信令跟踪和业务失败观察，可以快速、粗略的定位出呼叫失败的原因所在（真的盼望我们的RNC早日开发出信令跟踪和业务观察）。但是想要定位出具体的失败原因，可能需要参考RNC和模拟工具的前台打印。正常情况下，一个完整的呼叫建立流程，信令跟踪到的消息流程如下：1. MM: CM SERVICE REQUEST2. MM: CM SERVICE ACCEPT3. CC: SETUP (MOBILE STATION TO NETWORK DIRECTION)4. CC: CALL PROCEEDING5. RR: PAGING RESPONSE6. CC: SETUP (NETWORK STATION TO MOBILE DIRECTION)7. CC: CALL CONFIRMED8. CC: ALERTING (MOBILE STATION TO NETWORK DIRECTION)9. CC: ALERTING (NETWORK STATION TO MOBILE DIRECTION)10. CC: CONNECT (MOBILE STATION TO NETWORK DIRECTION)11. CC: CONNECT ACKNOWLEDGE12. CC: CONNECT (NETWORK STATION TO MOBILE DIRECTION)13. CC: CONNECT ACKNOWLEDGE常见呼叫失败原因分析如下： 如果信令跟踪中没有任何消息，业务失败观察中也没有任何显示，依次排查下列流程：主叫RRC连接建立、主叫IU连接建立。如果上面两个流程都没有问题，很可能是RNC侧RANAP消息中参数错误（如MCC、MNC配置不一致等等）。 收到前4条消息，没有收到寻呼响应消息（RR: PAGING RESPONSE），业务失败观察中显示“等待寻呼响应超时”，依次排查下列流程：寻呼、被叫RRC连接建立、被叫IU连接建立。 收到前7条消息，没有收到振铃（ALERTING），一般都是RAB建立失败，业务失败观察中显示“指配失败”，请参考RAB建立失败章节。 其他情况：出现的概率比较小，一般都是CN内部交互时出了问题（如放音失败），或者模拟工具侧配置的号码不正确。3.2.1 RRC连接建立3.2.1.1 RRC建立过程1. UCPM_C收到UE发来的RRC建立请求后（通过CCIU过来），创建UCIC实例，给UCIC实例发CCIU建立请求；2. UCIC实例收到CCIU建立的应答后，给DPMU发UCIU建立请求；3. UCIC实例收到UCIU建立应答后，给CCIU发CCIU配置请求；4. UCIC实例收到CCIU配置应答后，通过CCIU给UE发送RRC CONNECTION SETUP；5. UCIC实例收到UE的RRC CONNECTION SETUP COMPLETE消息；3.2.1.2 对应的OMP打印=UCPM_C=: rcvd RRC Connect Req Msg and Create UCIC Inst 0x803d000f. =UCPM_C= : Proc rcvd EV_STARTUP!-ShowUcpmcSaveInstDataPtr- InstNo 0 Invalid-UCIC- : First TBSize of SCCPCH0 FACH0 is 171-UCIC- : First TBSize of SCCPCH0 FACH1 is 363-UCIC- : Exchange Fach Order of SCCPCH0, 0 to 0 Ucic: Inst 15 send CCIU SETUP REQ to CCI_U! （上述打印对应于第1步） -UCIC-: Inst 15 receive one CCIU UE SETUP Resp! Ucic: Inst 15 send UCIU INST SETUP REQ To DPM-U! （上述打印对应于第2步） -UCIC-: Inst 15 rcvd UP SETUP RESP! Ucic: Inst 15 send CCIU CONFIG REQ to CCI_U!（上述打印对应于第3步）pu_initContext_u(): ctxt_p-bDynamic = TRUE Ucic: Inst 15 rcvd CCIU CONFIG RESP! Ucic: Inst 15 send RRC CONN SETUP to UE! （上述打印对应于第4步） OK Recived DM_GETUNITPARA Message OK! send DM_GETUNITCFG Message!pu_initContext_u(): ctxt_p-bDynamic = TRUE -UCIC-: Inst 15 rcvd RRC CONN SETUP COMP!（上述打印对应于第5步）3.2.2 IU连接建立观察RNC前台打印，首先确认IUCS的信令链路状态是否正常，如果链路状态正常，确认SCCP连接建立是否成功：包括是否成功发送CR（Connection Confirm）消息，接收到CC（Connection Confirm）消息。3.2.2.1 IU连接建立过程1. UCIC发送初始UE消息给SCPM，SCPM模块创建SCPI实例，转发给SCPI实例处理；2. SCPI实例给SCCP模块发送建链请求，请求建立IU连接；3. SCCP的建链过程，发送CR请求给对端，对端回复CC；4. SCPI接收到SCCP的IU连接确认，给UCIC会初始UE消息的应答；3.2.2.2 对应的OMP打印-UCIC-: Inst 15 receive one INIT UE DIRECT TRANSFER Message From UE! Ucic: Inst 15 send one INIT UE DIRECT TRAN Msg To SCPM! tdScpm_Proc: SCPM rcvd EVENT_TD_UCPMC_SCPM_INIT_UE_MSG from UC. tdScpm_InitUEMsgHandler: SCPM create SCPI instance with InstNo 15. tdScpm_InitUEMsgHandler: SCPM send EVENT_TD_UCPMC_SCPM_INIT_UE_MSG to SCPI 15. tdScpi data size: 1620 . tdScpmInst_Proc: SCPI 15 rcvd EV_STARTUP. Initilize. tdScpm_IdleStateFunc: SCPI 15 rcvd EVENT_TD_UCPMC_SCPM_INIT_UE_MSG from SCPM. tdScpm_InitUeMsgLeaf: Domain: 0.（上述打印对应于第1步）tdScpm_SendConReqtoSccp: SCPI 15 send N_ConnectReqEvent to SCCP. （上述打印对应于第2步）SCCPSCOC receive N_ConnectReqEvent SCCP: scrc received CR_Event SCCP: scrc received MTP_TransEvent SCCPSCOC receive CC_Event （上述打印对应于第3步）RanapCallBackFunc Receives Connection Oritented Msg from SCCP RanapCallBackFunc:the SCPMInst Number is : 15 tdScpm_SendInitUeMsgAckToUc: SCPI 15 send EVENT_TD_SCPM_UCPMC_INIT_UE_MSG_ACK to UCI_C. Ucic: Inst 15 receive one INIT UE MSG ACK from SCPM! （上述打印对应于第4步）3.2.3 寻呼在实际调试过程中，很少遇到寻呼不成功的情况。检查模拟工具的打印，RRC模块在收到寻呼请求后，会有如下打印：Rrc1,Idle- EV_PCCH_PAGING_TYPE1!3.2.4 RAB建立RAB建立是呼叫过程中比较复杂的流程，涉及到的交互过程很多，也比较容易出问题，首先我们看一下RAB建立的主要过程，了解交互流程。3.2.4.1 IUUP建立过程 3.2.4.1.1 IUUP建立过程大致如下：1. SCPI实例收到CN发来的RAB指派消息，给RPM发送RAB指派消息；2. RPM创建RPI实例，由RPI实例处理该消息；3. RPI实例给UCI_U发送IuUP建立请求（发给PMU模块）；4. RPI实例接收到IuUP建立的应答；5. RPI实例请求Alcap建立IU口承载通道，要求建立AAL2链路；6. Alcap建立AAL2链路过程，发送ERQ请求给对端，对端响应ECF，成功后通知RPI；7. RPI收到AAL2链路建立确认，配置IuUP；8. 收到IuUP配置应答后，通知SCPI，Iu通道建立完毕；9. SCPI请求UCI_C建立RAB，开始RL建立过程；3.2.4.1.2 对应的OMP打印分析SCPI 19 rcvd RAB assignment req in SERVING. SCPI 19 send setup to RPM(RABId = 1).（上述打印对应于第1步）tdRpm_Proc: Rpm Create InstProc Success! Rpi data size: 3437 . RPI 11: Rcvd EVENT_SCPM_RPM_RAB_SETUP Msg! Cn Domain: 0（上述打印对应于第2步） RPI 11: IUUP MODE VERSION: 0, 1!tdRpm_SendIuupSetupToUp: RPI 11: send IuUPMsg to Iuup successfully! RPI 11: Sent IuUP Setup REQ to UCI_U 4114!（上述打印对应于第3步）RPI 11: Rcvd IuUP SETUP Rsp Msg!（上述打印对应于第4步）RpmSendIuBearSetupToAlcap: SGUR: 16777407 InnerIP: 2139660676 Port: 33 0 18 0 RPI 11: Sent A2SU EST REQ to A2SP!（上述打印对应于第5步）AAL2SP: Get establish request!Get ANI from dbs with ATM address!Its successful to check atm address!pZDB_AtmRsMgt received EV_ALLOCATECEIDLOCAL_REQ msg!AAL2SP:DBS success to allocate CEID!AAL2SP: To allocate SAID 39! AAL2ND: Starting T_VTC Timer!AAL2SPND:Get VTC correctly!AAL2SPND:STOP VTC timer!AAL2SPDBFUN:Ask dbs to establish a link on bearer!AAL2SPDBFUN:Starting T_UCREQ Timer!AAL2SP:APBE answers that its successful to establish a link!AAL2SPND:APBE success to establish a link!AAL2SPND:STOP T_UCREQ timer!AAL2ET: start T_ERQ Timer !AAL2SPMESSAGE: Send ERQ message!AAL2SPMESSAGE: send this message to stcmain!AAL2SPND:Send establish req to peer!AAL2SPMESSAGE: Receive ECF message!STOP T_ERQ Timer!AAL2ND: Starting T_DEADLOCK Timer!AAL2SP: Send establish confirm to user!（上述打印对应于第6步）RPI 11: Rcvd EV_A2SP_A2SU_ESTABLISH_CON Msg!tdRpm_SendIuupSetupToUp: RPI 11: send IuUPMsg to Iuup successfully! RPI 11: Sent Iuup Config Req to UCI_U 4114!（上述打印对应于第7步）RPI 11: Rcvd EV_RPM_IUUP_CONFIG_RSP Msg!RPI 11: Sent Setup Cmp to SCPI 19!（上述打印对应于第8步）SCPI 19 rcvd RPI 11 Setup cmp(RABId = 1).SCPI 19 send Rab Setup Assign To UCI_C 19.（上述打印对应于第9步）3.2.4.2 RL建立过程3.2.4.2.1 RL建立过程大致如下：1. UCI_C收到SCPI实例发送的RAB建立消息，给RLMM发送RL建立请求；2. RLMM（TdRlmm_ManagerProc）创建RLMI（TdRlmm_WorkerProc）实例，由RLMI实例处理该消息；3. RLMI实例给RRM发送CAC（Call Admission Control）请求，收到接纳控制的正确应答；4. RLMI实例给Nodeb侧RLMM模块发送RL建立请求，收到Nodeb侧RLMM模块的RL建立应答；5. RLMI实例通过PMU模块建FP 实例；6. FP实例建立成功后，RLMI实例请求Alcap建立AAL2链路；7. Alcap建立AAL2链路过程，发送ERQ请求给对端，对端响应ECF，成功后通知RLMI；8. RLMI收到AAL2链路建立确认，配置FP；9. 收到FP配置应答后，通知UCI_C，UCI_C开始RAB建立过程；3.2.4.2.2 对应的OMP打印分析UCIC - Inst 19 rcvd Rab Setup Req! : Inst 19 Ucpmc send Rl SETUP Msg to Rlmm!（上述打印对应于第1步）TdRlmm_ManagerProc Received EVENT_TD_UCPMC_RLMM_RL_SETUP_REQ which sended by TD_RNLC_UCPMC_InstFsm :RLMM:TdRlmm_ManagerProc Create Rlmi Instance 1 TdRlmm_ManagerProc Send EV_RLMM_RLMI_RL_SETUP_REQ to TdRlmm_WorkerProc TdRlmm_WorkerProc Received EV_RLMM_RLMI_RL_SETUP_REQ which sended by TdRlmm_ManagerProc（上述打印对应于第2步）TdRlmm_WorkerProc Send EVETN_TD_RLMM_RRM_CAC_REQ to RRMMP_ENTRY RRM: MainProc Recv MSG EVETN_TD_RLMM_RRM_CAC_REQ RRM : CACM: CacmAdmissionRequest: CAC Request(RLMI Inst = 1) Admitted!TdRlmm_WorkerProc Received EVENT_TD_RRM_RLMM_CAC_ACK which sended by RRMMP_ENTRY（上述打印对应于第3步）TdRlmm_WorkerProc Send EVENT_TD_RLMM_NBLOMM_MSG_TO_NB_IND to RnlcNblommNbmTdRlmm_ManagerProc Received EVENT_TD_NBLOMM_RLMM_MSG_FROM_NB_IND which sended by RnlcNblommNbWorkerTdRlmm_ManagerProc Send EVENT_TD_NBLOMM_RLMM_MSG_FROM_NB_IND to TdRlmm_WorkerProc TdRlmm_WorkerProc Received EV_RLMM_RLMI_RL_SETUP_RESPONSE which sended by TdRlmm_ManagerProc（上述打印对应于第4步）TdRlmm_WorkerProc Send EVENT_TD_RLMM_DPMU_MSG to RnluHPmuProcEntry TdRlmm_WorkerProc Received EV_RLMM_RLMI_SRNC_FP_SETUP_RESPONSE which sended by RnluHPmuProcEntry（上述打印对应于第5步）TdRlmm_WorkerProc Send aal2EstablishReqEvent to P_AAL2SP（上述打印对应于第6步）AAL2SP: Get establish request!Get ANI from dbs with ATM address!Its successful to check atm address!pZDB_AtmRsMgt received EV_ALLOCATECEIDLOCAL_REQ msg!AAL2SP:DBS success to allocate CEID! AAL2SP: To allocate SAID 43! AAL2ND: Starting T_VTC Timer!AAL2SPND:Get VTC correctly!AAL2SPND:STOP VTC timer!AAL2SPDBFUN:Ask dbs to establish a link on bearer!AAL2SPDBFUN:Starting T_UCREQ Timer!AAL2SP:APBE answers that its successful to establish a link! AAL2SPND:APBE success to establish a link! AAL2SPND:STOP T_UCREQ timer! AAL2ET: start T_ERQ Timer ! AAL2SPMESSAGE: Send ERQ message! AAL2SPMESSAGE: send this message to stcmain! AAL2SPND:Send establish req to peer! STC: Send link establishment request!STCMAIN: Received data indication from SSCF AAL2STC: Send Transfer Msg to SP to Inform it decode this Msg! AAL2SPMESSAGE: Receive ECF message! STOP T_ERQ Timer! AAL2ND: Starting T_DEADLOCK Timer! AAL2SP: Send establish confirm to user!（上述打印对应于第7步）TdRlmm_WorkerProc Received aal2EstablishCfmEvent which sended by P_AAL2SPTdRlmm_WorkerProc Send EVENT_TD_RLMM_DPMU_MSG to RnluHPmuProcEntry TdRlmm_WorkerProc Received EV_RLMM_RLMI_SRNC_FP_INIT_RESPONSE which sended by RnluHPmuProcEntry （上述打印对应于第8步）TdRlmm_WorkerProc Send EVENT_TD_RLMM_UCPMC_RL_SETUP_RESP to TD_RNLC_UCPMC_InstFsm - UCIC - Inst 18 rcvd RL SETUP RESP from RLMI In RabSetup Status! Inst 19 send UCIU RB SETUP REQ to DPM-U!（上述打印对应于第9步）3.2.4.3 RB建立过程3.2.4.3.1 RL建立过程大致