Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security mode reject (UE security capabilities mismatch) #27

Open
wayne43290 opened this Issue Mar 2, 2018 · 5 comments

Comments

Projects
None yet
3 participants
@wayne43290
Copy link

wayne43290 commented Mar 2, 2018

I am using nextepc to set up a 4G experimental network. I can connect to Internet with Huawei LTE dongle E3372h. But cannot accesses the network with Huawei LTE dongle E392u-12, the reject msg is as the picture below:
image

I use the same USIM for both dongles. Please help, thank you!

Security mode reject.zip

@brandonjlee

This comment has been minimized.

Copy link
Collaborator

brandonjlee commented Mar 2, 2018

What kind of LTE base station do you use?
Security mode reject may be caused by the eNodeB you use, if there is no matching EEA/EIA algorithms between EPC and eNodeB. Could you confirm what EEA/EIA algorithms are supported in your eNodeB?

Regards,
Brandon

@brandonjlee

This comment has been minimized.

Copy link
Collaborator

brandonjlee commented Mar 2, 2018

We found a potential problem that might be related to this issue. We'll check it and respond soon.

acetcom added a commit that referenced this issue Mar 3, 2018

acetcom added a commit that referenced this issue Mar 3, 2018

Modify the security capability length (#27)
If octet 5 is included, then also octet 6 shall be included and octet 7
may be included.
@acetcom

This comment has been minimized.

Copy link
Owner

acetcom commented Mar 3, 2018

It seems to be a problem of security capability length in security command message.

Spec(24.301. 9.9.3.36) said:

The UE security capability is a type 4 information element with a minimum length of 4 octets and a maximum length of 7 octets.
Octets 5, 6, and 7 are optional. If octet 5 is included, then also octet 6 shall be included and octet 7 may be included.

If a UE did not indicate support of any security algorithm for Gb mode, octet 7 shall not be included.
If the UE did not indicate support of any security algorithm for Iu mode and Gb mode, octets 5, 6, and 7 shall not be included.

So, we've fixed it.

Could you build a newly updated source code from the github repository?
You can find the build guide on the link

Thank you very much!

@wayne43290

This comment has been minimized.

Copy link
Author

wayne43290 commented Mar 5, 2018

💯 Great! With the latest code (Mar 3), now I can connect to nextEPC with Huawei LTE dongle E3372h and E392u-12.
Thanks a lot :)

@acetcom

This comment has been minimized.

Copy link
Owner

acetcom commented Mar 5, 2018

Very Good News!

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.