目录
协议3GPP 24.301对原因10的描述:
我们遇到过的被拒10的场景:
问题描述:
日志分析:
Cause #10 – Implicitly detached
This EMM cause is sent to the UE either if the network has implicitly detached the UE, e.g. after the implicit detach timer has expired, or if the EMM context data related to the subscription does not exist in the MME e.g. because of a MME restart, or because of a periodic tracking area update request routed to a new MME.
如果网络已隐式分离UE(例如,在隐式分离定时器过期之后),或者如果MME中不存在与订阅相关的EMM上下文数据(例如,由于MME重启,或者由于路由到新MME的定期跟踪区域更新请求),则将此EMM原因发送给UE。
可以看出隐式分离的原因主要有两类:
1、网络已隐式分离UE;
2、MME中不存在与订阅相关的EMM上下文数据。
1、一卡多分;
2、不同的设备写相同的IMEI,导致一张卡在不同地方的两个设备上登陆;
3、从SA网络到LTE网络。
这几个场景的根本原因是一个,即MME中不存在与订阅相关的EMM上下文数据。
现在也遇到了类似原因的场景:TAU到新的MME;有整个过程的完整日志,以供后续参考。
意大利22201的网络频繁被拒#10。
主要是当地这个22201的网络信号不是很好,不断的在切换小区和TA,这些TA又不在一个TA列表里,导致频繁的TAU;这几个TA属于2个MME,当TAU从一个MME到另一个MME时就会出现TAU被拒10的情况。
TAU被拒10后终端重新attach就正常了。
终端流程正常,应该是网络环境问题(信号不是很好,MME的边界处)。
详细日志分析如下:
//TAC从24724到24240,TAU被拒10;
//TAC 24724的MME是56
//从后面的日志可知TAC 24240的MME是224
//这里的MME发生了变化,导致TAU被拒10.
[ 42/ 0/2] QTRACE 12:43:22.199764 MMODE/STRM/High/CM [ cmss.c 19991] lte_cell_info: cell_id 128431621->128183849, tac 24724->24240 1
[ 47/ 0/2] QTRACE 12:43:22.199776 MM/LowFreq/High/MM [ emm_rrc_handler.c 3602] DS: SUB 0 =EMM= RRC_SERVICE_IND -PLMN (222 - 1), TAC 24240 SRV REQ pending 16975274, state = 3 sub_state = 1 1
[ 47/ 1/2] QTRACE 12:43:22.200578 MM/HighFreq/High/MM [ emm_rrc_handler.c 2526] DS: SUB 0 =EMM= Initing TAU - Srving TA not in TAL 1
[0xB0ED] OTA LOG 12:43:22.200960 LTE NAS EMM Plain OTA Outgoing MessageTracking area update request Msg 1
eps_update_type = 1 (0x1) (combined TA/LA updating)
old_guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 2 (0x2)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 1 (0x1)
MME_group_id = 32788 (0x8014)
MME_code = 56 (0x38)
m_tmsi = 3356309790 (0xc80d391e)
[0xB0EC] OTA LOG 12:43:22.340601 LTE NAS EMM Plain OTA Incoming MessageTracking area update reject Msg 1
emm_ta_update_rej
emm_cause
cause_value = 10 (0xa) (Implicitly detached)
//attach到TAC 24723,分到的MME是224
[ 42/ 0/2] QTRACE 12:43:43.727098 MMODE/STRM/High/CM [ cmss.c 19991] lte_cell_info: cell_id -1->128563241, tac 24240->24723 1
[ 47/ 0/2] QTRACE 12:43:43.727198 MM/LowFreq/High/MM [ emm_rrc_handler.c 3602] DS: SUB 0 =EMM= RRC_SERVICE_IND -PLMN (222 - 1), TAC 24723 SRV REQ pending 16975275, state = 1 sub_state = 2 1
[0xB0ED] OTA LOG 12:43:43.773711 LTE NAS EMM Plain OTA Outgoing MessageAttach request Msg 1
att_type = 2 (0x2) (combined EPS/IMSI attach)
[0xB0EC] OTA LOG 12:43:48.156239 LTE NAS EMM Plain OTA Incoming MessageAttach accept Msg 1
guti_incl = 1 (0x1)
guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 2 (0x2)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 1 (0x1)
MME_group_id = 32788 (0x8014)
MME_code = 224 (0xe0)
m_tmsi = 4166207748 (0xf8534904)
//中间这两次的TAU正常是:
//tac 24723->24240
//tac 24240->24723
//MME都是224
[ 42/ 0/2] QTRACE 12:43:48.572861 MMODE/STRM/High/CM [ cmss.c 19991] lte_cell_info: cell_id 128563241->128183849, tac 24723->24240 1
[ 47/ 0/2] QTRACE 12:43:48.572872 MM/LowFreq/High/MM [ emm_rrc_handler.c 3602] DS: SUB 0 =EMM= RRC_SERVICE_IND -PLMN (222 - 1), TAC 24240 SRV REQ pending -1, state = 3 sub_state = 0 1
[ 47/ 1/2] QTRACE 12:43:48.573300 MM/HighFreq/High/MM [ emm_rrc_handler.c 2526] DS: SUB 0 =EMM= Initing TAU - Srving TA not in TAL 1
[0xB0ED] OTA LOG 12:43:48.573500 LTE NAS EMM Plain OTA Outgoing MessageTracking area update request Msg 1
old_guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 2 (0x2)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 1 (0x1)
MME_group_id = 32788 (0x8014)
MME_code = 224 (0xe0)
m_tmsi = 4166207748 (0xf8534904)
[0xB0EC] OTA LOG 12:43:48.809784 LTE NAS EMM Plain OTA Incoming MessageTracking area update accept Msg 1
[ 42/ 0/2] QTRACE 12:45:42.892493 MMODE/STRM/High/CM [ cmss.c 19991] lte_cell_info: cell_id 128183849->128563241, tac 24240->24723 1
[ 47/ 0/2] QTRACE 12:45:42.892502 MM/LowFreq/High/MM [ emm_rrc_handler.c 3602] DS: SUB 0 =EMM= RRC_SERVICE_IND -PLMN (222 - 1), TAC 24723 SRV REQ pending -1, state = 3 sub_state = 0 1
[ 47/ 1/2] QTRACE 12:45:42.893208 MM/HighFreq/High/MM [ emm_rrc_handler.c 2526] DS: SUB 0 =EMM= Initing TAU - Srving TA not in TAL 1
[0xB0ED] OTA LOG 12:45:42.893526 LTE NAS EMM Plain OTA Outgoing MessageTracking area update request Msg 1
old_guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 2 (0x2)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 1 (0x1)
MME_group_id = 32788 (0x8014)
MME_code = 224 (0xe0)
m_tmsi = 4166207748 (0xf8534904)
[0xB0EC] OTA LOG 12:45:43.832043 LTE NAS EMM Plain OTA Incoming MessageTracking area update accept Msg 1
[0xB0ED] OTA LOG 12:45:43.833393 LTE NAS EMM Plain OTA Outgoing MessageTracking area update complete Msg 1
//这两次tac 24723->24240的TAU没收到响应:
[ 42/ 0/2] QTRACE 12:46:00.032624 MMODE/STRM/High/CM [ cmss.c 19991] lte_cell_info: cell_id 128563241->128183849, tac 24723->24240 1
[ 47/ 0/2] QTRACE 12:46:00.032629 MM/LowFreq/High/MM [ emm_rrc_handler.c 3602] DS: SUB 0 =EMM= RRC_SERVICE_IND -PLMN (222 - 1), TAC 24240 SRV REQ pending 16975278, state = 3 sub_state = 3 1
[ 47/ 1/2] QTRACE 12:46:00.033076 MM/HighFreq/High/MM [ emm_rrc_handler.c 2526] DS: SUB 0 =EMM= Initing TAU - Srving TA not in TAL1
[0xB0ED] OTA LOG 12:46:00.033252 LTE NAS EMM Plain OTA Outgoing MessageTracking area update request Msg 1
old_guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 2 (0x2)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 1 (0x1)
MME_group_id = 32788 (0x8014)
MME_code = 224 (0xe0)
m_tmsi = 4166207748 (0xf8534904)
[0xB0ED] OTA LOG 12:46:01.888586 LTE NAS EMM Plain OTA Outgoing MessageTracking area update request Msg 1
//这次tac 24723->24724的TAU被拒10;
//从前面的TAU过程可知:
//TAC 24723的MME是224;
//TAC 24724的MME是56
//这里MME发生了变化,导致TAU被拒10.
[ 42/ 0/2] QTRACE 12:46:04.638702 MMODE/STRM/High/CM [ cmss.c 19991] lte_cell_info: cell_id 128563241->128431621, tac 24723->24724 1
[ 47/ 1/2] QTRACE 12:46:04.639313 MM/HighFreq/High/MM [ emm_rrc_handler.c 2526] DS: SUB 0 =EMM= Initing TAU - Srving TA not in TAL 1
[0xB0ED] OTA LOG 12:46:04.639617 LTE NAS EMM Plain OTA Outgoing MessageTracking area update request Msg 1
old_guti
id_type = 6 (0x6) (GUTI)
odd_even_ind = 0 (0x0)
Guti_1111 = 15 (0xf)
mcc_1 = 2 (0x2)
mcc_2 = 2 (0x2)
mcc_3 = 2 (0x2)
mnc_3 = 15 (0xf)
mnc_1 = 0 (0x0)
mnc_2 = 1 (0x1)
MME_group_id = 32788 (0x8014)
MME_code = 224 (0xe0)
m_tmsi = 4166207748 (0xf8534904)
[0xB0EC] OTA LOG 12:46:04.781450 LTE NAS EMM Plain OTA Incoming MessageTracking area update reject Msg 1
emm_ta_update_rej
emm_cause
cause_value = 10 (0xa) (Implicitly detached)