Subscriber Administration

3. Creating a telemetric subscriber in VLR

1. Create a telemetric subscriber

Command: MIC – CREATE SUBSCRIBER TO HLR
If the CAT parameter indicates a telemetric subscriber (it has
a value of TMS1, TMS2, or TMS3), you can use only these
parameters:
 IMSI
 MSISDN
 SAM (service area)
 PBS (primary basic service code)
For telemetric subscribers, you can use this command
only with the basic services 0x21: short message MT/PP
and 0x22: short message MO/PP.
If the telemetric category is TMS3, you can create a
bearer (data) service.
 NBR (primary basic service code index)
If you use other parameters or basic services with telemetric
subscribers, you get a semantic error code.
ZMVC:IMSI=XXXX…XX,MSISDN=YYY…YY,LAC=:CAT=TMS3,BSERV=T21;

ZMVI;

ZMVO:IMSI=XXXX..XXX OR MSISDN=YYYYY;

===============================================================
4. GSM SECURITY:

In this exercise, you handle four GSM security functions:

1. Authentication
2. IMEI Checking
3. Ciphering or Speech encryption
4. TMSI and TMSI relocation

4.1 Check Authentication

Print the actual VLR parameters:

Bubun Arrahman
NSSINT – Training, Nov 2005
4.1 Check Authentication

ZMXO;
Use this command to display the current values of the VLR-specific parameters.

This command displays only the currently supported services in the MSC/VLR.
The support of supplementary services, teleservices, and bearer services is
checked, and if there are differences between the support of service groups and
individual services, the system displays an error message.

Take authentication into use for normal calls (if it is not already in use).

Command: MXM::AUTH=Y;
Identify the PLMN name your subscriber belongs to (Hint: use the ZCFI command)

Command: ZCFI:TYPE=IMSI:DIG=244;

Print your PLMN parameters in the VLR.

Command: MXP:IND=X;  X IS INDEX FROM ZCFI

Set the parameters so that every mobile-originated call has to perform authentication
checking.
Command: MXN:NAME=XX:::AMOC=1;

Restore the situation and make sure that a mobile-to-mobile call is possible.

Commands: MXN:NAME=XX:::AMOC=0;
MXM:AUTH=N;

MXO;
MXP:IND=X;
===============================================================
4.2 Handle IMEI

1. Print out the actual VLR parameters.

Command: MXO;
2.Does the operator check the IMEI for emergency calls?

3. Print the PLMN-specific parameters for the PLMN in the VLR.

Command: MXP:IND=1;
4.Switch on the IMEI-check for every mobile originated call.
Command: MXN:IND=1:SMOC=Y,IMOC=1;

Bubun Arrahman
NSSINT – Training, Nov 2005
5. What happens if a call is started from these lists?
Black list effect
_____________________________________________
Grey list effect
______________________________________________
White list effect
_____________________________________________
Unknown IMEI effect
____________________________________

6. Print the PLMN-specific parameters for the PLMN in the VLR

Command: MXN:IND=X:BLE=BLK;

7. Can You make a Call?

Remove the IMEI from the black list and switch off IMEI checking

Switch off the IMEI check.

Command: XN:IND=1:SMOC=N,IMOC=0;
MXN:IND=1:BLE=AL;

4.3 Use ciphering

To be able to use ciphering, check that:

 authentication is on in the VLR
 authentication is done on location update with a new visitor in
the VLR
 at least one A5 algorithm parameter is in use
1. Check if ciphering is used for all subscribers in a home PLMN.
Command: MXP:IND=1;
2. Set the authentication to be used in the VLR.
Command: MXM::AUTH=Y;
3. Set the authentication to be done on location update with a
new visitor in the VLR.
Command: MXN:IND=1:::ANEW=Y;
4. Set ciphering into use and allow A5/2 ciphering.
Command: MXN:IND=1:::::A52=Y:CIPH=Y;

Bubun Arrahman
NSSINT – Training, Nov 2005
 5. Restore the situation.
Command:
MXN:IND=1:::::A52=N:CIPH=N;
MXN:IND=1:::ANEW=N;
MXM::AUTH=N;
===================================================================
4.4 Reallocate TMSI and TMSI
Instead of sending the IMSI (International Mobile confidentiality) for
identification over the radio path, the mobile can use TMSI for
confidential purposes.
1. Check if TMSI usage is ON or OFF in the VLR.
Command: MXO;
2. Switch TMSI usage ON in the VLR.
Command: MXM::TMUSE=Y;
3. Switch the TMSI reallocation ON with every IMSI attach, every
location update, and every location update with a new visitor of a
home PLMN.
Command: MXN:IND=1::TNEW=Y,TIMSI=Y,TLOC=1;
6. Restore the situation to normal.
Command:

MXN:IND=1::TNEW=N,TIMSI=N,TLOC=0;
MXM::TMUSE=N;

Bubun Arrahman
NSSINT – Training, Nov 2005