Commit c2f86612 authored by Yann Garcia's avatar Yann Garcia
Browse files

Validate security process during UE connection

parent 29d990d1

NAS_ETSI.code-workspace

+3 −3
Changes for NAS_ETSI.code-workspace: 3 added lines, 3 removed lines.
Original line number Diff line number Diff line
@@ -7,13 +7,13 @@ 
			"path": "../../frameworks/titan/titan.core"

		},

		{

			"path": "../open5gs"

			"path": "../titan-test-system-framework-Release4-onwards"

		},

		{

			"path": "../UERANSIM"

			"path": "../../tmp/UERANSIM"

		},

		{

			"path": "../titan-test-system-framework-Release4-onwards"

			"path": "../../tmp/open5gs"

		}

	],

	"settings": {

captures/TC_NGAP_GNB_PDU_01.pcap

−11.6 KiB (24 KiB)

File changed.

No diff preview for this file type.

View original file
View changed file

etc/AtsNGAP/AtsNGAP_GNB_p_net.cfg_

+2 −1
Changes for etc/AtsNGAP/AtsNGAP_GNB_p_net.cfg_: 2 added lines, 1 removed line.
Original line number Diff line number Diff line
@@ -63,6 +63,7 @@ Lib_NG_NAS_Pixits.PX_BEARER_ID := '00001'B 
Lib_NG_NAS_Pixits.PX_SQN                             := '000000000000000000000000000000000000001000000000'B

#Lib_NG_NAS_Pixits.PX_AMF                             := oct2bit('8000'O)

#Lib_NG_NAS_Pixits.PX_RAND_VALUE                      := oct2bit('23553cbe9637a89d218ae64dae47bf35'O)

#Lib_NG_NAS_Pixits.PX_RAND_VALUE_REFRESH              := oct2bit('9f7c8d021accf4db213ccff0c7f71a6a'O)



Parameters.px_IMSI_Def                               := '393939343030303030303435363433'H # 999400000045643

Parameters.px_IMEISV_Def                             := '73806121856151f1'H
@@ -93,7 +94,7 @@ system.NGAP_gNB_1.params := "NGAP/SCTP(local_server=10.174.19.14,server_mode=1,l 
#system.NGAP_AMF.params := "NGAP/SCTP_FILE/IP_OFFLINE/PCAP_FILE(file=../captures/ttcn_5g_ngap.pcapng)" # Linux cooked capture v2, no Ethernet layer

#system.NGAP_AMF.params := "NGAP/SCTP_FILE/IP_OFFLINE/ETH(mac_src=8c554ac1eee0,mac_dst=8c554ac1eee1)/PCAP_FILE(file=../captures/TC_NGAP_AMF_PDU_01.pcap)" # regular pcap with Ethernet layer



system.utPort.params := "UT/TCP(server=localhost,port=12000,debug=1)"

system.utPort.params := "UT/TCP(server=localhost,port=12100,debug=1)"



[DEFINE]

# In this section you can create macro definitions,

etc/AtsNGAP/AtsNGAP_GNB_ueransim.cfg_

+1 −0
Changes for etc/AtsNGAP/AtsNGAP_GNB_ueransim.cfg_: 1 added line, 0 removed lines.
Original line number Diff line number Diff line
@@ -60,6 +60,7 @@ Lib_NG_NAS_Pixits.PX_BEARER_ID := '00001'B 
Lib_NG_NAS_Pixits.PX_SQN                             := '000000000000000000000000000000000000001000000000'B

#Lib_NG_NAS_Pixits.PX_AMF                             := oct2bit('8000'O)

#Lib_NG_NAS_Pixits.PX_RAND_VALUE                      := oct2bit('23553cbe9637a89d218ae64dae47bf35'O)

#Lib_NG_NAS_Pixits.PX_RAND_VALUE_REFRESH              := oct2bit('9f7c8d021accf4db213ccff0c7f71a6a'O)



Parameters.px_IMSI_Def                               := '393939373030303030303030303031'H # 999700000000001

Parameters.px_IMEISV_Def                             := '73806121856151f1'H

ttcn/AtsNGAP/NGAP_Steps.ttcn

+2 −1
Changes for ttcn/AtsNGAP/NGAP_Steps.ttcn: 2 added lines, 1 removed line.
Original line number Diff line number Diff line
@@ -677,6 +677,7 @@ module NGAP_Steps { // TODO FSCOM f_xxx_UE_SecurityMode to be mmoved into NAG_NG 
                setverdict(fail, "Security Mode Command message content is not available for verification");

            } else {

                // TODO FSCOM To be enhanced with more detailed verification of the Security Mode Command message content

                log("f_NGAP_gnb_UE_SecurityMode: vc_inner_message is bound and has length ", lengthof(vc_inner_message));

                var NG_REGISTRATION_REQUEST v_inner_message;

                var bitstring v_bs := oct2bit(vc_inner_message);

                var integer v_result := decvalue(v_bs, v_inner_message);
@@ -684,7 +685,7 @@ module NGAP_Steps { // TODO FSCOM f_xxx_UE_SecurityMode to be mmoved into NAG_NG 
                    log("f_NGAP_gnb_UE_SecurityMode: Failed to decode Security Mode Command message content");

                    setverdict(fail, "Failed to decode Security Mode Command message content");

                } else {

                    log("f_NGAP_gnb_UE_SecurityMode: v_inner_message: ", v_inner_message);

                    log_msg("f_NGAP_gnb_UE_SecurityMode: v_inner_message: ", v_inner_message);

                    // FIXME FSCOM To be enhanced with verification of the inner message

                }

            }