COTS UEs

This section of our knowledge base aims to list COTS UEs known to be working with OCUDU including tested bands and configurations. It's not an exhaustive list and many more UEs will work out of the box even though they are not listed in this document.

However, if you have done extensive testing with a particular phone and want to contribute your findings please don't hesitate to submit a merge request.

Tested COTS UEs

This is a list of COTS UEs that have been confirmed to be working with OCUDU tested by the OCUDU developer team.

OCUDU developer tested COTS UEs

Make	Model	Codename	Baseband	FDD	TDD	Configuration	SDR	Notes
Google	Pixel 6	GB7N6		n71: 10 MHz		IMSI: 00101, gNB PLMN: 00101	USRP B210 3	Test SIM: Sysmocom SJS1 2, SJA2 5 (must disable service 124 6) Requires disabled NR_TIMER_WAIT_IMS_REGISTRATION or SUPPORT_IMS_NR_REGISTRATION_TIMER in hidden IMS menu by dialing *#*#0702#*#*
Motorola	Edge 30 Pro	XT2201-1	SM8450 Snapdragon 8 Gen 1	n3: 5, 10, 20 MHz	n78: 10, 20, 40 MHz		USRP B200mini 1, GPSDO	Test SIM: Sysmocom SJS1 2
OnePlus	Nord 5G	A2003	SM7250 Snapdragon 765G	n3: 5, 10, 20 MHz	n78: 20, 40, 80, 100 MHz	IMSI: 00101, gNB PLMN: 90170	B210 3, Leo Bodnar GPSDO N310 4, External Clock	Seems to not like Test PLMN Has been tested in the shielding box and on a desk
OnePlus	8T	KB2003	SM8250 Snapdragon 865 5G		n78: 20 MHz	IMSI: 00101, gNB PLMN 90170	B210, Leo Bodnar GPSDO	Requires use of the “roaming hack” Requires GPSDO to keep stable connection.
OnePlus	9 Pro	LE2123	Snapdragon 888 Octa-core	n3: 10 MHz	n78: 20 MHz	IMSI: 00101, gNB PLMN: 00101, 99970, 46007		Test SIM: Sysmocom SJA2 5 (must disable service 124 6) Requires root 7 NSG must force 5G-NR only 8
Quectel	RM500q		Snapdragon X55
Simcom	SIM8262E-M2		Snapdragon X62		n78: 20 MHz			Test SIM: works with test SIM Sysmocom IMSI doesn’t work
Telit	FN990A28		Snapdragon X62	n7: 5, 10, 20 MHz, n71: 5, 10, 20 MH, n78: 20, 30 MHz	IMSI: 00101, 99970, gNB PLMN: 00101, 99970	USRP B210 3	Test SIM: Sysmocom SJS1 2, SJA2 5 (must disable service 124 6) For Symocom Breakout Board requires SIMIN to be “Active High” MS operation mode: normal or type_approval (both work)
Xiaomi	11 Lite 5G NE		SM7325 Snapdragon 778G 5G	n3: 10, 20 MHz	n78: 20 MHz	gNB PLMN: 00101	B210, Leo Bodnar GPSDO	Test SIM: Sysmocom SJA2 5 Activate hidden SA option by dialing *#*#726633#*#*
Xiaomi	12		SM8450 Snapdragon 8 Gen 1	n3: 20 MHz	n78: 20 MHz	gNB PLMN: 00101	B210, Leo Bodnar GPSDO	Test SIM: Sysmocom SJA2 5 Initially unstable connection, fixed by forcing NR only RAT Activate hidden SA option by dialing *#*#726633#*#*
iPhone	13 Pro		A15 Bionic		n78: 30 MHz	gNB PLMN: 00101	B210, Leo Bodnar GPSDO	iPhones require IMS to be enable UE to stay connected. An Open5GS and Kamailio IMS set up can be found here. SUPI concealment is required to attempt an attach, this is outlined in this post.

User reported working UEs

This is a list of COTS UEs that have been reported to be working with srsRAN Project by users.

User reported COTS UEs

Make	Model	Codename	Baseband	FDD	TDD	Configuration	SDR	Notes
OnePlus	8	IN2013
OnePlus	Nord N10	BE2029	Snapdragon 690
OnePlus	Nord CE 5G	EB2103	Snapdragon 750G 5G	n3	n78 - 20 MHz
OnePlus	10 Pro		SM8450 Snapdragon 8 Gen 1	n3	n78 - 100 MHz		USRP X410 9
Quectel	RM510Q-GL
Sierra	EM9191		Snapdragon X55		n78 - 40 MHz
Xiaomi	Redmi Note 10 5G		Mediatek MT6833 Dimensity 700	n28	N77 and 78			Activate hidden SA option by dialing *#*#726633#*#*
ZTE	MU5002/MU5001		SDX55+QCA6391
OnePlus	Nord CE 2 Lite 5G				n78 - 20 MHz and 40 MHz		B210	Same PLMN for both SIM and RAN
OnePlus	Nord CE 3 Lite 5G				n78 - 20 MHz and 40 MHz		B210	Same PLMN for both SIM and RAN
Asus	Zenfone 8				n78 - 20 MHz and 40 MHz		B210	Same PLMN for both SIM and RAN
Crosscall	Core Z5				n78 - 20MHz
Google	Pixel 7 Pro				n78 - 40 MHz to 60 MHz		X310	SISO
Realme	9				n78			MCC 001, MNC 01, 001, 02, 03
Xiaomi	Redmi Note 12 5G				n78			MCC 001, MNC 01, 001, 02, 03
Motorola	Moto G54				n78			MCC 001, MNC 01, 001, 02, 03
Nokia	G42 5G				n78			MCC 001, MNC 01, 001, 02, 03
Oppo	A78 5G				n78			MCC 001, MNC 01, 001, 02, 03
Samsung	A15 5G				n78			MCC 001, MNC 01, 001, 02, 03
Samsung	A23 5G				n78			MCC 001, MNC 01, 001, 02, 03
Google	Pixel 7 Pro				n28		B200 (no external clock)	PLMN 00101
Samsung	S23 Ultra	SM-S91B/DS			n28		B200 (no external clock)	PLMN 00101
Samsung	S22 Ultra	SM-S908B/DS			n28		B200 (no external clock)	PLMN 00101
Samsung	Z Flip 4	SM-F721B			n28		B200 (no external clock)	PLMN 00101

UE Capability Messages

This is a list of PCAP messages containing COTS UE capability messages. Information on viewing PCAP files can be found in the user manual.

UE Capability PCAP

Make	Model	UE Capability PCAP
Simcom	SIM8262E-M2	pcap
Motorola	Edge 30 Pro	pcap
Google	Pixel 6a	pcap

References

• [1] https://www.ettus.com/all-products/usrp-b200mini/
• [2] https://osmocom.org/projects/cellular-infrastructure/wiki/SysmoUSIM-SJS1
• [3] https://www.ettus.com/all-products/ub210-kit/
• [4] https://www.ettus.com/all-products/usrp-n310/
• [5] https://osmocom.org/projects/cellular-infrastructure/wiki/SysmoISIM-SJA2
• [6] https://docs.srsran.com/projects/4g/en/latest/app_notes/source/5g_sa_COTS/source/index.html?highlight=cots#g-sim
• [7] https://docs.srsran.com/projects/4g/en/latest/app_notes/source/5g_sa_COTS/source/index.html?highlight=cots#rooting-cots-ue
• [8] https://docs.srsran.com/projects/4g/en/latest/app_notes/source/5g_sa_COTS/source/index.html?highlight=cots#network-signal-guru
• [9] https://www.ettus.com/all-products/usrp-x410/