Rootworks onsite technical training

Build a GSM network with Osmocom & nanoBTS

A two-day, instructor-led course that takes your team from a clean Linux host to a working, observable GSM lab using the modern Osmocom cellular network stack.

Discuss an onsite course View the agenda
2 days structured build, integration and troubleshooting
Onsite delivered with your team in a controlled lab environment
Hands-on configure real services, a nanoBTS and test handsets

Build it. See it. Diagnose it.

Understand GSM by assembling the network yourself

This is practical infrastructure training for engineers who want to understand what happens between a handset, a base station and the GSM core. Participants configure each service, connect an ip.access nanoBTS over Abis/IP and follow signalling through the complete stack.

By the end of day two, your team will have built a repeatable lab, registered controlled test subscribers and developed a reliable method for finding faults across radio and core components.

Two-day agenda

From an empty host to a working GSM lab

Each topic builds on the previous lab, so the architecture becomes a system your team understands rather than a collection of configuration files.

Day 01

Radio access & Abis/IP

Build the path from a test handset to OsmoBSC.

  1. GSM architecture in context Um, Abis and A interfaces; BTS, BSC, MSC, HLR and media roles.
  2. Prepare the Linux lab host Packages, service layout, addressing, logs and repeatable configuration structure.
  3. Bring the nanoBTS onto the lab network Discovery, IP settings, OML/RSL connectivity and safe RF test arrangements.
  4. Configure OsmoBSC Define the ip.access BTS, TRX, ARFCN, identity, timeslots and Abis/IP behaviour.
  5. Observe the radio access network Read VTY state, service logs and packet captures while the BTS comes online.
Day 02

Core network & end-to-end service

Connect signalling, subscribers and media.

  1. Build the core control plane Configure OsmoSTP, OsmoMSC and the A interface from OsmoBSC.
  2. Add subscribers with OsmoHLR Provision controlled test identities and understand GSUP, authentication and VLR state.
  3. Connect media with OsmoMGW Follow MGCP and RTP, then relate signalling decisions to the media path.
  4. Register and exercise test handsets Validate location update, controlled calls and SMS inside the authorised lab.
  5. Break it, trace it, recover it Diagnose realistic faults using logs, VTY commands, packet capture and service state.

The stack you will build

Follow every interface from radio to core

The course uses the modern separated Osmocom network elements, making each protocol boundary visible and independently testable.

Test handset Controlled SIM
Um GSM radio
nanoBTS ip.access BTS
Abis/IP OML · RSL · RTP
OsmoBSC Radio control
A / AoIP SCCP · M3UA
OsmoSTP Signalling router
A / AoIP BSSAP
OsmoMSC Mobility & call control

Core services connected to OsmoMSC

GSUP
OsmoHLR Subscribers & authentication
MGCP
OsmoMGW RTP media switching

Every network element runs as an observable service. Participants inspect VTY state, logs and packet captures at each boundary.

Hardware in the lab

Make the nanoBTS predictable

The nanoBTS is more than a box on the network. Participants learn how its IP backhaul, OML and RSL sessions, radio configuration and status indicators relate to OsmoBSC state.

  • Discover and address the unit on an isolated Ethernet segment
  • Establish OML and RSL over ip.access Abis/IP
  • Relate physical LEDs and link state to Osmocom logs
  • Work inside an authorised or RF-contained test setup
IP.ACCESS nanoBTS GSM PICOCELL · ABIS/IP
48VLANUSBTIB
Ethernet / Abis-IP Controlled RF Observable state

Audience & requirements

Designed for engineers who want the whole picture

No previous Osmocom experience is required, but participants should be comfortable working at a Linux shell and reading basic IP network information.

Who it is for

  • Telecoms and radio engineers
  • Security researchers and penetration testers
  • Embedded and network engineers
  • Technical teams building controlled mobile test labs

Lab requirements

  • Linux-capable training hosts with administrator access
  • An ip.access nanoBTS and isolated Ethernet connectivity
  • Controlled test SIMs and compatible lab handsets
  • An authorised frequency assignment or suitable RF containment

What participants leave with

  • A working mental model of the complete GSM call path
  • A reusable baseline configuration for each Osmocom service
  • A packet-capture and logging workflow for diagnosis
  • A structured checklist for rebuilding the lab

Controlled delivery: radio operation is limited to an appropriately authorised or RF-contained lab. UK spectrum trials may require an Ofcom Innovation and Trial licence; exact arrangements are confirmed before delivery.

Ofcom guidance

Bring the course to your team

Turn Osmocom from a diagram into a working lab

Tell us about your team, location, existing hardware and training goals. We will confirm the lab bill of materials and shape the delivery around your environment.

Discuss an onsite course 01744 776167

Secure online booking

Book your team

Course bookings have a five-seat minimum. UK VAT at 20% is added at checkout. Use the secure PayPal checkout, or contact us to discuss a larger group or tailored delivery.