Amarisoft

LTE ETWS

This tutorial shows how to test LTE ETWS on Amari Callbox with a commercial phone. ETWS stands for Earthquake and Tsunami Warning System. It is a type of PWS (Public Warning System). Basic RAN Process of LTE ETWS is as follows :

In real deployment, this process is controlled by ETWS server in core network side.  It is the ETWS server and Core Network which are triggering the whole ETWS process and RAN to transmit the message.

NOTE :  In 2G/3G, there was similar feature like PWS. It is called CBS (Cell Broadcasting System). The logic on core network side logic in CBS would be similar to PWS in LTE, but RAN side implementation of CBS is different from PWS in LTE. In LTE, we don't use any specifically dedicated channel for this and just use one of the existing channel (BCCH - PDSCH) whereas we use specially dedicated channel (CTCH - FACH-SCCPCH) for CBS.

NOTE :  Amarisoft does not support any of 2G/3G (i.e, GSM,CDMA,WCDMA,HSPA) and 2G/3G related function.

Table of Contents

Introduction

The Earthquake and Tsunami Warning System (ETWS) is a critical component of the Public Warning System (PWS) architecture standardized in LTE networks, designed to rapidly disseminate emergency alerts such as earthquake and tsunami warnings to mobile devices within affected regions. Leveraging the robust broadcast capabilities of LTE radio access networks (RAN), ETWS enables the delivery of time-sensitive, high-priority notifications to all compatible user equipment (UEs), ensuring maximal reach and minimal delay. The system operates through a coordinated process: the core network's ETWS server initiates the warning cascade, orchestrating message creation, scheduling, and transmission commands to the RAN. The eNodeB (LTE base station) then conveys the ETWS notifications via System Information Blocks (SIB10 and SIB11) over broadcast channels, and triggers paging procedures to prompt UEs to immediately decode the incoming alert. Unlike legacy 2G/3G broadcast solutions, which utilized dedicated channels such as CTCH over FACH-SCCPCH, LTE's PWS repurposes existing broadcast channels (typically BCCH mapped onto PDSCH) for efficient, streamlined operation. This architecture not only enhances network resource utilization but also ensures compatibility with commercial LTE devices. In this context, the Amari Callbox system from Amarisoft offers a testbed environment for validating ETWS broadcast behavior and UE response using commercial off-the-shelf phones. Understanding the interplay between core network signaling, RAN message broadcasting, and UE decoding mechanisms is essential for telecom engineers, network testers, and emergency communication solution developers seeking to ensure compliance, reliability, and effectiveness of ETWS in real-world deployments.

Summary of the Tutorial

This tutorial provides a step-by-step procedure to test the LTE ETWS (Earthquake and Tsunami Warning System) / CMAS (Commercial Mobile Alert System) broadcast functionality using a callbox and UE setup. The summary below details the test methodologies and procedures as described in the tutorial.

Throughout the process, the methodology centers on configuring the network to generate ETWS/CMAS alerts, verifying their transmission and reception, and confirming proper behavior on the UE, accompanied by log analysis to validate message flow and content broadcast via SIBs and Paging.

Test Setup

Test setup for this tutorial is as shown below.  

TestSetup Callbox UE 1sdr 01

Key Configuration Parameters

Followings are important configuration parameters for this tutorial. You may click on the items for the descriptions from Amarisoft documents.

Configuration

I used the enb.default.cfg (LTE default configuration) as it is without changing any contents in it. Basically you can use any kind of enb configuration. eNB does not require any specific configuration for ETWS.

LTE CMAS Config 01

I also used mme-ims-etws.cfg which was copied and modified from mme-ims.cfg.

LTE ETWS 02

In mme-ims-etws.cfg .I have added the following configuration. pws_msgs is the parameter where you can configure the details of ETWS.

In this example, local_identifier identifies the configured warning entry, while message_identifier and serial_number uniquely identify the warning message. warning_type specifies the ETWS warning category, and data_coding_scheme defines how the message text is encoded. The warning_message field contains the text that will be broadcast to the UE through the ETWS system information.

LTE ETWS 03

Perform the test

Start the LTE service and verify the basic cell configuration using the cell phy and cell commands. ETWS is independent of most radio parameters, so any normal LTE cell configuration can be used for this test. In this example, the cell operates on LTE Band 7 with a 5 MHz bandwidth, DL EARFCN 3350, UL EARFCN 21350, PCI 1, and PLMN 00101.

LTE ETWS Run 01

Power on the UE and allow it to attach to the LTE cell.

Use the t command to monitor the live UE status and confirm that the UE is connected and exchanging traffic with the eNB. In this example, UE ID 1 is attached to cell 001 with C-RNTI 003d, and the changing DL/UL MCS, transport block counts, and bitrates confirm active radio communication.

LTE ETWS Run 02

Confirm that the UE is registered with the MME using the ue command. In this example, the UE is registered in EPC mode with SUPI 001010123456789 and M-TMSI 0x52c3793f. The REG field is Y, confirming successful registration, and the UE has two bearers with assigned IPv4 and IPv6 addresses.

LTE ETWS Run 03

Trigger the ETWS warning using the pws_write command. The value 1 selects the pws_msgs entry whose local_identifier is set to 1 in mme-ims-etws.cfg. The MME then initiates the PWS procedure and instructs the eNB to broadcast the configured ETWS warning information and message to the UE.

LTE ETWS Run 04

Confirm that the UE displays the ETWS warning as shown below. The warning should include the configured text message and the earthquake/tsunami warning indication. The UE should also generate the dedicated emergency alert sound. Successful reception of both the visual warning and the alert sound confirms that the ETWS test has completed successfully.

LTE ETWS Run 05

Stop the ETWS warning broadcast using the pws_kill command. The value 1 identifies the active warning whose local_identifier is configured as 1 in the pws_msgs block of mme-ims-etws.cfg. The MME then sends the request to stop broadcasting the corresponding ETWS message.

LTE ETWS Run 06

Log Analysis

Sample Log

Since ETWS information is broadcast through system information messages, begin the log analysis by enabling BCCH capture and setting the RRC layer to debug in the ENB log configuration. BCCH capture allows the broadcast SIB messages to be recorded, while the RRC debug setting provides the decoded RRC contents needed to inspect SIB10 and SIB11.

LTE CMAS Log 01

Set the Layer filter to RRC to display only the relevant RRC messages. This removes unrelated PHY, MAC, S1AP, and other protocol logs, making it easier to locate the Paging, SIB10, and SIB11 messages associated with the ETWS procedure.

LTE CMAS Log 02

When the ETWS procedure is triggered, the MME sends an S1AP Write-Replace Warning Request message to the eNB to start broadcasting the warning. The Message Identifier IE is set to 0x1102 and identifies the warning category, while the Serial Number IE is set to 0x3001 and distinguishes this warning instance from previous or updated warnings. The Warning Type IE is set to 0x0580 and provides the ETWS warning classification used by the UE to determine how the alert should be presented. The Data Coding Scheme IE is set to 0x0F and specifies how the warning text is encoded. The Warning Message Content IE carries the encoded text configured by the warning_message parameter in the pws_msgs block. The Repetition Period IE is set to 10 and defines the interval between repeated broadcasts, while Number of Broadcasts Requested is set to 65535, requesting continuous repetition until the warning is explicitly stopped with the pws_kill command. After receiving this request, the eNB updates the relevant system information, transmits paging notifications, and begins broadcasting the ETWS information through SIB10 and SIB11.

LTE ETWS Log 03

After receiving the S1AP Write-Replace Warning Request from the core network, the eNB transmits an RRC Paging message on the PCCH with etws-Indication set to true. This indication informs all UEs monitoring the cell that new or updated ETWS information is available in the broadcast system information. The paging message does not carry the warning text itself. Instead, it prompts the UE to immediately read the relevant system information blocks, including SIB10 for the primary ETWS notification and SIB11 for the secondary warning message content.

LTE ETWS Log 04

ETWS information is broadcast through SIB10 and SIB11.

SIB10 carries the ETWS primary notification information. The messageIdentifier 0x1102 identifies the warning category, while serialNumber 0x3001 identifies this specific warning instance and allows the UE to distinguish a new warning from a previously received one. warningType 0x0580 provides the earthquake and tsunami warning classification used by the UE to determine the alert presentation and emergency behaviour. Unlike SIB11, SIB10 does not carry the detailed warning text. It provides the compact, time-critical warning information that allows the UE to raise the primary ETWS alert quickly, while the associated SIB11 messages deliver the detailed text configured by the warning_message parameter.

LTE ETWS Log 05

SIB11 carries the detailed ETWS warning message as a secondary notification. The messageIdentifier 0x1102 and serialNumber 0x3001 associate this SIB11 content with the corresponding SIB10 primary notification. warningMessageSegmentType is set to notLastSegment and warningMessageSegmentNumber is 0, indicating that this is the first segment and that additional warning-message segments follow. warningMessageSegment contains the encoded portion of the configured warning text, while dataCodingScheme 0x0F specifies the character encoding used by the UE to decode it. When the warning content does not fit into a single SIB11 segment, the eNB broadcasts multiple SIB11 instances with increasing warningMessageSegmentNumber values, and the UE reassembles them into the complete ETWS message.

LTE ETWS Log 06

RRC / NAS Signaling

SIB 10

: This is the SIB 10  message sent by eNB  to configure ETWS. (NOTE : You would see some IEs that has a specific assigned vale here, but consider it as just an example value. Those values should vary depending on test requirement)

{

  message c1: systemInformation: {

    criticalExtensions systemInformation-r8: {

      sib-TypeAndInfo {

        sib10: {

          messageIdentifier '1102'H,

          serialNumber '3001'H,

          warningType '0580'H

        }

      }

    }

  }

}

 

SIB 11

: This is the SIB 11  message sent by eNB  to configure ETWS. (NOTE : You would see some IEs that has a specific assigned vale here, but consider it as just an example value. Those values should vary depending on test requirement)

{

  message c1: systemInformation: {

    criticalExtensions systemInformation-r8: {

      sib-TypeAndInfo {

        sib11: {

          messageIdentifier '1102'H,

          serialNumber '3001'H,

          warningMessageSegmentType notLastSegment,

          warningMessageSegmentNumber 0,

          warningMessageSegment '0174747A0E4ACF416150917A9D82E8E5391DD42ECFE7E1731900000000000000'H,

          dataCodingScheme '0F'H

        }

      }

    }

  }

}

Paging

: This is the Paging message sent by eNB  to Notify that ETWS is transmitted. (NOTE : You would see some IEs that has a specific assigned vale here, but consider it as just an example value. Those values should vary depending on test requirement)

{

  message c1: paging: {

    etws-Indication true

  }

}