Running Your Own 3G Network

A web interface is shown providing information about a cellular network base station.

CDMA2000 was one of the protocols defined for 3G networks and is now years out of date and being phased out worldwide. Nevertheless, there are still vast numbers of phones that will happily connect to it, creating an opportunity for hackers seeking to run their own cellular networks. [Chrismoos] recently made this endeavour significantly easier by releasing 1xBTS, a Rust implementation of the lower three layers of a CDMA2000 network.

The lowest layer of the stack is an SDR for the actual radio communications. It’s been tested with the USRP B200 and B210, the LimeSDR Mini 2, and the BladeRF Micro 2.0. The code might work with certain other SDRs using the SoapySDR abstraction layer. The SDR is controlled by the base station (BTS) software, which, in turn, is controlled by the base station controller (BSC) over an Abis link. The BSC manages channels and mobile device associations, and exchanges frames with the mobile switching center (MSC), which handles message switching.

The stack includes standard 3G verification; before a handset can authenticate to the network, its details must be added to the home location register (HLR). Once authenticated, the handset can access all standard services: inbound and outbound voice calls via a SIP gateway, inbound and outbound SMS, and data packet transfers. A web dashboard provides a convenient management platform that includes packet tracing.

It should be noted that using this carelessly is legally hazardous; radio transmissions are strictly regulated in most countries, particularly in the cellular bands. If you’d still like to run your own cell network, we’ve also seen a few other efforts, such as this 4G implementation, this 1G recreation, and a GSM network made for a hacker camp.

5 thoughts on “Running Your Own 3G Network

  1. Would love to get a i5 with 6.1.x and AbsterGo running. IIRC Technically it can connect to ATT 4G LTE but I can foresee issues with some basebands.

    Getting AbsterGo, Luna, LockInfo5 and NatureMood up and running again on a 3G maxed out i5 on iOS6.1.X is the dream.

  2. So actually as long as you keep it low power(in building only), these are entirely legal in the US, your individual municipality ordinances may differ however and this does not constitute legal advice in any form or fashion. You should not get legal advise solely from posters on the internet, but I’ve done my homework on this in building a “1G” GSM network.

    1. Oh, and a POCSAG/Flex pager network. Working on getting repeaters and clearance for my own private cell via POTS coupler and several repeaters(friends are a good thing to have! Especially those on hills!).

Leave a Reply

Please be kind and respectful to help make the comments section excellent. (Comment Policy)

This site uses Akismet to reduce spam. Learn how your comment data is processed.