Actions
Access rights request between Sinus 501 and FRITZ!Box 7240¶
- Table of contents
- Access rights request between Sinus 501 and FRITZ!Box 7240
The entire trace contains the initial access rights request and key allocation, location registration of the PP including temporary
identity assignment, a test call from the FP and exchange of some proprietary configuration options in CISS-FACILITY messages.
For better readability, the independent procedures have been seperated in the trace. The raw dump is attached to this page.
Access rights request¶
{ACCESS-RIGHTS-REQUEST} message (PP->FP)¶
NWK: 05 44 05 07 80 a8 00 ba 8a 78 2a 0a 03 01 48 00 |.D.......x*...H.|
NWK: 63 0f 25 15 0a 00 30 03 90 02 00 00 00 00 00 82 |c.%...0.........|
NWK: 82 7b 13 81 00 02 06 01 10 29 0b 6f 7d fe 7f 00 |.{.......).o}...|
NWK: ff 9c 80 2b c2 14 7c 07 90 03 00 01 02 00 84 |...+..|........|
{MM-ACCESS-RIGHTS-REQUEST} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcf150
type: IPUI (0)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<AUTH-TYPE>> id: a len: 5 dst: 0xfcf190
authentication algorithm: DSAA (1)
authentication key type: Authentication code (4)
authentication key number: 8
cipher key number: 0
INC: 0 DEF: 0 TXC: 0 UPC: 0
IE: <<TERMINAL-CAPABILITY>> id: 63 len: 17 dst: 0xfcf1b0
display capability: full display (5)
tone capability: dial tone only (2)
echo parameters: TCL > 34 dB (1)
noise rejection capability: none (1)
adaptive volume control provision: no PP adaptive volume control (1)
slot capabilities: long slot 640,full slot (a)
display memory: 48
display lines: 3
display columns: 16
scrolling behaviour: not specified (0)
profile indicator: GAP,DECT-NG part 1 (200000000000200)
display control: 2
display charsets: 0
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 21 dst: 0xfcf200
EMC: 2
Content: 06 01 10 29 0b 6f 7d fe 7f 00 ff 9c 80 2b c2 14
IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfcf260
Negotiation Indicator: codec negotiation (1)
Codec 1:
Codec: G.722 (64kbit) (3)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: long slot j=640 (1)
C-Plane routing: C_S only (0)
Codec 2:
Codec: G.726 (32kbit) (2)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: full slot (4)
C-Plane routing: C_S only (0)
{KEY-ALLOCATE} message (FP->PP)¶
NWK: 05 42 0b 02 01 88 0c 08 1b 42 27 01 4c 5c 44 84 |.B.......B'.L\D.|
NWK: 0e 08 9e 01 7e 0c 42 ae ec ff |....~.B...|
{MM-KEY-ALLOCATE} message:
IE: <<ALLOCATION-TYPE>> id: b len: 4 dst: 0xfcf440
authentication algorithm: DSAA (1)
authentication key number: 8
authentication code number: 8
IE: <<RAND>> id: c len: 10 dst: 0xfcf460
value: 84445c4c0127421b
IE: <<RS>> id: e len: 10 dst: 0xfcf480
value: ffecae420c7e019e
{AUTHENTICATION-REQUEST} message (PP->FP)¶
NWK: 85 40 0a 03 01 48 00 0c 08 de a7 66 4d 34 fb c2 |.@...H.....fM4..|
NWK: 7f 0d 04 85 6a 5f 9e |....j_.|
{MM-AUTHENTICATION-REQUEST} message:
IE: <<AUTH-TYPE>> id: a len: 5 dst: 0xfcf5e0
authentication algorithm: DSAA (1)
authentication key type: Authentication code (4)
authentication key number: 8
cipher key number: 0
INC: 0 DEF: 0 TXC: 0 UPC: 0
IE: <<RAND>> id: c len: 10 dst: 0xfcf600
value: 7fc2fb344d66a7de
IE: <<RES>> id: d len: 6 dst: 0xfcf620
value: 9e5f6a85
{AUTHENTICATION-REPLY} message (FP->PP)¶
NWK: 05 41 0d 04 b4 30 43 48 |.A...0CH|
{MM-AUTHENTICATION-REPLY} message:
IE: <<RES>> id: d len: 6 dst: 0xfcf780
value: 484330b4
{ACCESS-RIGHTS-ACCEPT} message (FP->PP)¶
NWK: 85 45 05 07 80 a8 00 ba 8a 78 2a 06 07 a0 a5 01 |.E.......x*.....|
NWK: 2f 55 f4 f8 7c 07 90 03 00 01 02 00 84 |/U..|........|
{MM-ACCESS-RIGHTS-ACCEPT} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcf8e0
type: IPUI (0)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<FIXED-IDENTITY>> id: 6 len: 9 dst: 0xfcf920
type: PARK (20)
class: A
EMC: 12f5
FPN: 0be9f
IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfcf950
Negotiation Indicator: codec negotiation (1)
Codec 1:
Codec: G.722 (64kbit) (3)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: long slot j=640 (1)
C-Plane routing: C_S only (0)
Codec 2:
Codec: G.726 (32kbit) (2)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: full slot (4)
C-Plane routing: C_S only (0)
Location registration¶
{LOCATE-REQUEST} message (PP->FP)¶
NWK: 05 54 05 07 80 a8 00 ba 8a 78 2a 06 07 81 a8 01 |.T.......x*.....|
NWK: 2f 55 f4 f8 07 01 64 63 0f 25 15 0a 00 30 03 90 |/U....dc.%...0..|
NWK: 02 00 00 00 00 00 82 82 7c 07 90 03 00 01 02 00 |........|.......|
NWK: 84 |.|
{MM-LOCATE-REQUEST} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcfd20
type: IPUI (0)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<FIXED-IDENTITY>> id: 6 len: 9 dst: 0xfcfd60
type: ARI/RPN (1)
class: A
EMC: 12f5
FPN: 0be9f
RPN: 0
IE: <<LOCATION-AREA>> id: 7 len: 3 dst: 0xfcfd90
type: 1 level: 36
IE: <<TERMINAL-CAPABILITY>> id: 63 len: 17 dst: 0xfcfdb0
display capability: full display (5)
tone capability: dial tone only (2)
echo parameters: TCL > 34 dB (1)
noise rejection capability: none (1)
adaptive volume control provision: no PP adaptive volume control (1)
slot capabilities: long slot 640,full slot (a)
display memory: 48
display lines: 3
display columns: 16
scrolling behaviour: not specified (0)
profile indicator: GAP,DECT-NG part 1 (200000000000200)
display control: 2
display charsets: 0
IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfcfe00
Negotiation Indicator: codec negotiation (1)
Codec 1:
Codec: G.722 (64kbit) (3)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: long slot j=640 (1)
C-Plane routing: C_S only (0)
Codec 2:
Codec: G.726 (32kbit) (2)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: full slot (4)
C-Plane routing: C_S only (0)
{AUTHENTICATION-REQUEST} message (FP->PP)¶
NWK: 05 40 0a 03 01 18 18 0c 08 4e cc 38 f5 13 34 dd |.@.......N.8..4.|
NWK: 23 0e 08 31 76 76 d3 12 15 97 20 |#..1vv.... |
{MM-AUTHENTICATION-REQUEST} message:
IE: <<AUTH-TYPE>> id: a len: 5 dst: 0xfd0500
authentication algorithm: DSAA (1)
authentication key type: User authentication key (1)
authentication key number: 8
cipher key number: 8
INC: 0 DEF: 0 TXC: 0 UPC: 1
IE: <<RAND>> id: c len: 10 dst: 0xfd0520
value: 23dd3413f538cc4e
IE: <<RS>> id: e len: 10 dst: 0xfd0540
value: 20971512d3767631
{AUTHENTICATION-REPLY} message (PP->FP)¶
NWK: 85 41 0d 04 88 9b 49 e0 |.A....I.|
{MM-AUTHENTICATION-REPLY} message:
IE: <<RES>> id: d len: 6 dst: 0xfd0980
value: e0499b88
{LOCATE-ACCEPT} message (FP->PP)¶
NWK: 85 55 05 05 a0 94 00 11 01 07 01 64 77 07 c0 81 |.U.........dw...|
NWK: 00 00 0c c0 00 7c 07 90 03 00 01 02 00 84 |.....|........|
{MM-LOCATE-ACCEPT} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 7 dst: 0xfd0ec0
type: TPUI (20)
type: individual assigned
digits: 00000
IE: <<LOCATION-AREA>> id: 7 len: 3 dst: 0xfd0f00
type: 1 level: 36
IE: <<IWU-TO-IWU>> id: 77 len: 9 dst: 0xfd0f20
Send/Reject (S/R) bit: Transmission of message (1)
Protocol Discriminator: User Specific (0)
IE: <<CODEC-LIST>> id: 7c len: 9 dst: 0xfd1040
Negotiation Indicator: codec negotiation (1)
Codec 1:
Codec: G.722 (64kbit) (3)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: long slot j=640 (1)
C-Plane routing: C_S only (0)
Codec 2:
Codec: G.726 (32kbit) (2)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: full slot (4)
C-Plane routing: C_S only (0)
{TEMPORARY-IDENTITY-ASSIGN-ACK} message (PP->FP)¶
NWK: 05 5d |.]|
{MM-TEMPORARY-IDENTITY-ASSIGN-ACK} message:
Test call¶
{CC-SETUP} message (FP->PP)¶
NWK: 03 05 05 07 80 a8 00 ba 8a 78 2a 06 07 a0 a5 01 |.........x*.....|
NWK: 2f 55 f4 f8 e0 80 e4 4f 7c 04 90 02 00 84 |/U.....O|.....|
{CC-SETUP} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfcfbd0
type: IPUI (0)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<FIXED-IDENTITY>> id: 6 len: 9 dst: 0xfcfc10
type: PARK (20)
class: A
EMC: 12f5
FPN: 0be9f
IE: <<BASIC-SERVICE>> id: e0 len: 2 dst: 0xfcfc40
call class: normal call (8)
service: basic speech default attributes (0)
IE: <<SIGNAL>> id: e4 len: 2 dst: 0xfcfc60
signal: ring off (4f)
IE: <<CODEC-LIST>> id: 7c len: 6 dst: 0xfcfc80
Negotiation Indicator: codec negotiation (1)
Codec 1:
Codec: G.726 (32kbit) (2)
MAC/DLC Service: DLC service: LU1, MAC service: I_NA (0)
Slot size: full slot (4)
C-Plane routing: C_S only (0)
{CC-ALERTING} message (PP->FP)
NWK: 83 01 7b 06 81 00 02 18 01 02 |..{.......|
{CC-ALERTING} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd0120
EMC: 2
Content: 18 01 02
{CC-INFO} message (FP->PP)¶
NWK: 03 7b 7b 06 81 00 02 3c 01 07 |.{{....<..|
{CC-INFO} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd07e0
EMC: 2
Content: 3c 01 07
{CC-INFO} message (PP->FP)¶
NWK: 83 7b 7b 06 81 00 02 3d 01 07 |.{{....=..|
{CC-INFO} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd0c20
EMC: 2
Content: 3d 01 07
{CC-INFO} message (FP->PP)¶
NWK: 03 7b 7b 0b 81 00 02 1c 06 0c 10 0f 0b 01 0d |.{{............|
{CC-INFO} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 13 dst: 0xfd0c80
EMC: 2
Content: 1c 06 0c 10 0f 0b 01 0d
{CC-RELEASE} message (FP->PP)¶
NWK: 03 4d e2 00 |.M..|
{CC-RELEASE} message:
IE: <<RELEASE-REASON>> id: e2 len: 2 dst: 0xfd15a0
release reason: normal (0)
{CC-RELEASE-COM} message (PP->FP)¶
NWK: 83 5a e2 00 |.Z..|
{CC-RELEASE-COM} message:
IE: <<RELEASE-REASON>> id: e2 len: 2 dst: 0xfd1b20
release reason: normal (0)
CISS information exchange¶
The last proprietary IE (last 3 bytes) contains a sequence number that must be acknowledged. If no answer is sent back (not visible in this
trace), the message is resent.
The coding is:
<CISS-REQUEST-SEQ>: 0x5bBR
<CISS-ACKNOWLEDGEMENT-SEQ>: 0x59BR
CISS information exchange 1¶
This exchange supplies the date (12.10.10) and time (23:45:01)
to the PP. For some reason the hex values contain the decimal
representation. The first byte (03) has unknown meaning, as do
the 2 bytes following the date (00 04).
<TIME-DATE>: 0x3bBR
{CISS-FACILITY} message (FP->PP)¶
{CISS-FACILITY} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 19 dst: 0xfd0180
EMC: 2
Content: 3b 09 03 12 10 10 00 04 23 45 01 5b 01 a8
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....|
NWK: 59 01 a8 |Y..|
{CISS-REGISTER} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd0460
type: IPEI (10)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd04a0
EMC: 2
Content: 59 01 a8
NWK: 64 5a |dZ|
{CC-RELEASE-COM} message:
CISS information exchange 2¶
This exchange supplies the PP name (Mobiltei..) to the PP.
The meaning of the first byte (01) is unknown.
<PP-NAME>: 0x54BR
{CISS-FACILITY} message (FP->PP)¶
NWK: 63 62 7b 13 81 00 02 54 0b 01 4d 6f 62 69 6c 74 |cb{....T..Mobilt|
NWK: 65 69 2e 2e 5b 01 a9 |ei..[..|
{CISS-FACILITY} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 21 dst: 0xfd1360
EMC: 2
Content: 54 0b 01 4d 6f 62 69 6c 74 65 69 2e 2e 5b 01 a9
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....|
NWK: 59 01 a9 |Y..|
{CISS-REGISTER} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd15c0
type: IPEI (10)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd1600
EMC: 2
Content: 59 01 a9
NWK: 64 5a |dZ|
{CISS-RELEASE-COM} message:
CISS information exchange 3¶
{CISS-FACILITY} message (FP->PP)¶
NWK: 63 62 7b 12 81 00 02 58 0a 02 08 01 00 02 00 03 |cb{....X........|
NWK: 00 05 00 5b 01 aa |...[..|
{CISS-FACILITY} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 20 dst: 0xfd18e0
EMC: 2
Content: 58 0a 02 08 01 00 02 00 03 00 05 00 5b 01 aa
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....|
NWK: 59 01 aa |Y..|
{CISS-REGISTER} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd1c80
type: IPEI (10)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd1cc0
EMC: 2
Content: 59 01 aa
NWK: 64 5a |dZ|
{CISS-RELEASE-COM} message:
CISS information exchange 4¶
This exchange supplies the time and date again, similar to 2.
{CISS-FACILITY} message (FP->PP)¶
NWK: 63 62 7b 11 81 00 02 3b 09 03 12 10 10 00 04 23 |cb{....;.......#|
NWK: 45 01 5b 01 ab |E.[..|
{CISS-FACILITY} message:
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 19 dst: 0xfd1f00
EMC: 2
Content: 3b 09 03 12 10 10 00 04 23 45 01 5b 01 ab
{CISS-REGISTER}/{CISS-RELEASE-COM} messages (PP->FP)¶
NWK: 64 64 05 07 90 a8 00 ba 8a 78 2a 7b 06 81 00 02 |dd.......x*{....|
NWK: 59 01 ab |Y..|
{CISS-REGISTER} message:
IE: <<PORTABLE-IDENTITY>> id: 5 len: 9 dst: 0xfd2140
type: IPEI (10)
PUT: N (IPEI)
EMC: 0ba8
PSN: a782a
IE: <<ESCAPE-TO-PROPRIETARY>> id: 7b len: 8 dst: 0xfd2180
EMC: 2
Content: 59 01 ab
NWK: 64 5a |dZ|
{CISS-RELEASE-COM} message:
Updated by laforge over 2 years ago · 1 revisions
