Provisioning⚓︎

Changes made in xControl (Expeto Management) take effect in the network: creating, importing, activating, deactivating, moving and deleting Mobile Assets, assigning static addresses and device locks, rejecting unknown or inactive SIMs, and applying changes queued while the site was out of contact.

EXP-PRV-001 — Provision a Mobile Asset⚓︎

Objective. A Mobile Asset created in xControl, through the portal or the API, is written to the subscriber database of the Site within a bounded time, is reported consistent by the synchronization check, and can attach.

Preconditions

• Platform
  • The Site has a System with a System Profile, and a Keyset mapped to the Site.
• Mobile Asset
  • A SIM whose IMSI is not yet provisioned, with its key material available for the Keyset in use.
• Device
  • The UE is powered off or in airplane mode.
  • The UE has the APN of its System Profile configured.
• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • An API token for the Customer, for the API variant.
  • Access to the CLI.
• Procedures executed first
  • EXP-SES-001 — UE-initiated attach

Procedure

Pass criteria

• The subscriber record is present on the Site within 120 seconds of creation.
• The synchronization check reports no discrepancy for the IMSI.
• The UE attaches and passes traffic.

Evidence collected: xControl screenshot; CLI output; xControl session event log.

EXP-PRV-002 — Deactivate a Mobile Asset⚓︎

Objective. A connected Mobile Asset is set to Inactive in xControl. The subscriber database cancels its location without requesting a re-attach, the network releases its session, and every new attach attempt is rejected while it stays inactive.

Preconditions

• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • Start a 3GPP signalling capture (pcap) with your preferred tool on the interfaces the procedure exercises.
• Procedures executed first
  • EXP-SES-001 — UE-initiated attach

Procedure

Expected signalling

Capture points: S6a / N8 (point 4), S1-MME / N2 (point 1).

Pass criteria

• The session is released without any action on the UE, and the UE is not told to re-attach.
• Every reconnection attempt while the Mobile Asset is Inactive is rejected.

Evidence collected: xControl session event log; 3GPP signalling capture (pcap).
References: 3GPP TS 23.401 §5.3.8.4 (HSS-initiated Detach procedure); 3GPP TS 29.272 §5.2.2.2 (Cancel Location (CLR-Flags)).

EXP-PRV-003 — Reactivate a Mobile Asset⚓︎

Objective. A deactivated Mobile Asset is set back to Active in xControl, and the UE regains service without any change on the device.

Preconditions

• Device
  • The UE is powered on and not in airplane mode.
  • The UE has the APN of its System Profile configured.
  • The UE has a web browser or a terminal application that can send ICMP echo requests (ping).
• Tooling and access
  • Start a 3GPP signalling capture (pcap) with your preferred tool on the interfaces the procedure exercises.
  • Log in to xControl with an account that holds the ADMIN role.
• Procedures executed first
  • EXP-PRV-002 — Deactivate a Mobile Asset

Procedure

Pass criteria

• The UE regains service with no change on the device other than, at most, toggling airplane mode.

Evidence collected: xControl session event log; 3GPP signalling capture (pcap).

EXP-PRV-004 — Inactive Mobile Asset attach rejected⚓︎

Objective. A UE whose Mobile Asset is Inactive in xControl attempts to attach, and the network rejects the attempt.

Preconditions

• Mobile Asset
  • The UE's Mobile Asset is provisioned in xControl with state Inactive.
• Device
  • The UE is powered off or in airplane mode.
• Tooling and access
  • Log in to xControl with an account that can view the Mobile Asset under test.
  • Start a 3GPP signalling capture (pcap) with your preferred tool on the interfaces the procedure exercises.
• Procedures executed first
  • EXP-PRV-002 — Deactivate a Mobile Asset

Procedure

Pass criteria

• The UE obtains no service while the Mobile Asset is Inactive.

Evidence collected: 3GPP signalling capture (pcap).

EXP-PRV-005 — Unknown UE attach rejected⚓︎

Objective. A UE whose IMSI is not provisioned in xControl attempts to attach, and the network rejects the attempt.

Preconditions

• Mobile Asset
  • The UE's IMSI is not provisioned as a Mobile Asset in xControl.
• Device
  • The UE is powered off or in airplane mode.
• Tooling and access
  • Log in to xControl with an account that can view the Mobile Asset under test.
  • Start a 3GPP signalling capture (pcap) with your preferred tool on the interfaces the procedure exercises.

Procedure

Expected signalling

Capture points: S1-MME / N2 (point 1), S6a / N8 (point 4).

Pass criteria

• The UE obtains no service and no context or session is created for the IMSI.

Evidence collected: 3GPP signalling capture (pcap).
References: 3GPP TS 24.301 §5.5.1.2.5 (Attach not accepted by the network); 3GPP TS 24.501 §5.5.1.2.5 (Initial registration not accepted by the network).

EXP-PRV-006 — Bulk import of Mobile Assets⚓︎

Objective. A batch of SIMs is imported into xControl from the SIM vendor's output file. Every Mobile Asset is created with the chosen System, System Profile, Keyset and initial state, is written to the Site, and one of them attaches.

Preconditions

• Platform
  • The Site has a System with a System Profile, and a Keyset mapped to the Site.
• Mobile Asset
  • A SIM vendor output file (.out) with at least ten records whose IMSIs are not yet provisioned, and the corresponding 128-bit K encryption key.
• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • Access to the CLI.
• Procedures executed first
  • EXP-SES-001 — UE-initiated attach

Procedure

Pass criteria

• Every record in the file becomes a Mobile Asset with the selected System, System Profile, Keyset and state.
• The synchronization check reports no discrepancy within five minutes of the import.
• A repeated import without overwrite creates no duplicates.
• A UE from the batch attaches and passes traffic.

Postconditions

• Delete the imported Mobile Assets that are not needed for later tests with Bulk Delete.

Evidence collected: xControl screenshot; CLI output.

EXP-PRV-007 — Move a connected Mobile Asset to another System⚓︎

Objective. A Mobile Asset with an active session is moved from one System to another in xControl. The subscriber database cancels its location with re-attach required, the UE re-attaches on its own, every bearer is re-established on the new System with an address from its range and egress to its network, and no session is left behind on the old System.

Preconditions

• Platform
  • The Site has two Systems, A and B, with different address ranges and egress networks, each with a System Profile.
• Mobile Asset
  • The Mobile Asset is on System A and connected (EXP-SES-001).
• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • Access to the CLI.
  • A host on System B's egress network that answers ping.
  • Start a 3GPP signalling capture (pcap) with your preferred tool on the interfaces the procedure exercises.
• Procedures executed first
  • EXP-SES-001 — UE-initiated attach

Procedure

Expected signalling

Capture points: S6a / N8 (point 4), S1-MME / N2 (point 1), S11 / N4 (point 3).

Pass criteria

• The platform releases the existing session within 60 seconds of the move with a Cancel Location that requires re-attach.
• The UE re-attaches on its own; the address is inside the target System's range and the session record names the target System.
• No session remains on the source System.

Postconditions

• Move the Mobile Asset back to System A if later tests assume it.

Evidence collected: xControl session event log; CLI output; ICMP result from the UE; 3GPP signalling capture (pcap).
References: 3GPP TS 29.272 §5.2.2.2 (Cancel Location (CLR-Flags); 3GPP TS 24.301 §5.5.2.3 (Network initiated detach procedure (re-attach required)).

EXP-PRV-008 — Delete a Mobile Asset with an active session⚓︎

Objective. A connected Mobile Asset is deleted from xControl. Its session is terminated, its record is removed from the Site's subscriber database, and any later attach attempt is rejected as an unknown subscriber.

Preconditions

• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • Access to the CLI.
  • Start a 3GPP signalling capture (pcap) with your preferred tool on the interfaces the procedure exercises.
• Procedures executed first
  • EXP-SES-001 — UE-initiated attach

Procedure

Pass criteria

• The subscriber record is gone from the Site within 120 seconds.
• Every attach attempt after the deletion is rejected.

Postconditions

• Re-create the Mobile Asset with EXP-PRV-001 if later tests need it.

Evidence collected: xControl screenshot; CLI output; 3GPP signalling capture (pcap).

EXP-PRV-009 — Static IP address assignment⚓︎

Objective. A Mobile Asset given a static IP address through the ip extension receives exactly that address on every session, the address is reachable from the enterprise network, and the platform never gives the same address to two active sessions.

Preconditions

• Platform
  • The System's address range has addresses reserved for static assignment, outside the dynamic pool.
• Mobile Asset
  • Two Mobile Assets on the System, A and B, both connected (EXP-SES-007).
• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • A host on the System's egress network that can ping the UE's address.
• Procedures executed first
  • EXP-SES-001 — UE-initiated attach
  • EXP-SES-007 — Multiple UE attach

Procedure

Pass criteria

• The pinned address is assigned on every session of Mobile Asset A.
• No two active sessions ever hold the same address.
• An address outside the System's range is never assigned.

Postconditions

• Remove the ip extension from Mobile Asset B.

Evidence collected: xControl screenshot; ICMP result from the UE; xControl session event log.

EXP-PRV-010 — IMEI lock⚓︎

Objective. A Mobile Asset locked to a device through the imei extension obtains service only in that device; the same SIM in another device is refused.

Preconditions

• Device
  • Two UEs; the IMEI of each is known (dial *#06#).
• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • Start a 3GPP signalling capture (pcap) with your preferred tool on the interfaces the procedure exercises.
• Procedures executed first
  • EXP-SES-001 — UE-initiated attach

Procedure

Pass criteria

• The locked SIM obtains service in the locked device and in no other device.
• The refusal is signalled with EMM cause #6 (4G) or 5GMM cause #6 (5G), illegal ME.

Postconditions

• Move the SIM back to the first UE, or remove the imei extension.

Evidence collected: 3GPP signalling capture (pcap); xControl session event log.

EXP-PRV-011 — Provisioning changes made while the site is out of contact⚓︎

Objective. Provisioning changes made in xControl while the xCore cannot reach it are queued and applied to the Site when the connection returns, and the Site's subscriber database is consistent afterwards.

Preconditions

• Platform
  • You can block outbound traffic from the xCore to xControl (a firewall rule on the node's egress, or a network policy) and remove the block again.
• Mobile Asset
  • One Mobile Asset connected (EXP-SES-001) and one further SIM not yet provisioned.
• Tooling and access
  • Log in to xControl with an account that holds the ADMIN role.
  • Access to the CLI.
• Procedures executed first
  • EXP-INS-002 — Management path and subscriber synchronization

Procedure

Pass criteria

• Every change made during the outage is applied to the Site within 60 seconds of the connection returning.
• The synchronization check reports no discrepancy after the changes are applied.

Postconditions

• Reactivate the deactivated Mobile Asset.

Evidence collected: xControl screenshot; CLI output.