DATA SHEET

Nemo Outdoor HiSilicon Balong 5000-Based Devices

Measure and Monitor the Newest Wireless Network Technologies with Powerful Drive Testing Nemo Outdoor from Keysight Technologies, Inc. is an unparalleled network measurement and optimization solution for perfecting the air interface of wireless networks. It collects measurement results and geographical coordinates, and these measurement results further provide valuable information for network planning, roll-out, tuning, verification, optimization, maintenance, and benchmarking purposes. Nemo Outdoor is always among the first-to-market with support for the very latest technologies. This technical data sheet lists parameters and features available with HiSilicon Balong 5000 chipset-based devices and Nemo Outdoor.

Find us at www.keysight.com Page 1 Technical Specifications Device specific features1

Device NR LTE WCDMA GSM

Huawei Mate 20X 41, 77-79 FDD 1-9, 12, 17-20, 26, 28, 32, 34 850, 850 Japan, 900 GSM, Quad-band 5G EVR-N29 1900 PCS, 2100, AWS-1 TDD 38-41

Huawei Mate 30 5G 41, 77-79 FDD 1-9, 12, 17-20, 26, 34 800 Japan, 850, 850 Japan, Quad-band TAS-AN00 900, 1900, 2100 AWS, 2100 TDD 38-41

Huawei Mate 30 1, 3, 28, 38, 41, FDD 1-9, 12, 17-20, 26, 28, 32, 34 850, 850 Japan, 900 GSM, Quad-band Pro 5G LIO-N29 77-79 1900 PCS, AWS-1, 2100 TDD 38-41

Huawei P40 EVR- 1, 3, 28, 38, 41, FDD 1-9, 12, 17-20, 26, 28, 32, 34 850, 850 Japan, 900 GSM, Quad-band NX9 77-79 1900 PCS, AWS-1, 2100 TDD 38-41

Huawei P40 Pro 5G 1, 3, 7, 28, 38, FDD 1-9, 12, 17-20, 26, 28, 32, 34 850, 850 Japan, 900 GSM, Quad-band ELS-NX9 41, 77-79 1900 PCS, AWS-1, 2100 TDD 38-41

Huawei Mate 40 1, 3, 5, 7, 8, 28, FDD 1-9, 12, 17-20, 26, 28, 32, 34 850, 850 Japan, 900 GSM, Quad-band Pro NOH-NX9 38, 40, 41, 77-79, 1900 PCS, 2100, AWS-1 TDD 38-42 (NOH-N29) UL Supl 80, 84

1 The test devices tested and sold by Keysight Nemo Wireless Network Solutions are intended for testing purposes only. changes in devices may limit their normal use. Keysight Nemo Wireless Network Solutions does its best to provide test devices without any limitations but it is not always possible. Keysight Nemo Wireless Network Solutions assumes no liability if any commercial application or feature is blocked or limited due to software or other device-related modifications. If the test device is moved to another country or used in the network of another operator than initially ordered, it is possible that the device does not support all network features. Keysight Nemo Wireless Network Solutions assumes no liability in any cases.

Find us at www.keysight.com Page 2 Forcing Features Forcing features vary depending on device model and firmware version. Please see the table at the end of this data sheet for detailed information about the available forcing features per device.

• System lock (GSM, WCDMA, LTE, 5G NR) • Band lock (GSM, WCDMA, LTE) • Enabling/disabling terminal radio • Sending and logging custom AT commands and responses • GSM channel lock • UMTS channel and scrambling code lock • LTE channel and PCI lock Application Protocols • TWAMP • ICMP ping • Ping trace route testing • FTP (multi-thread, download/upload) • SFTP • HTTP (multi-thread, download/upload) • HTTP browsing including content encoding • HTTP streaming (YouTube) • Iperf service testing (for TCP and UDP) • SMTP/S, POP3/S, and IMAP/S protocols (for email testing) • RTSP streaming • Facebook, Twitter, Instagram (selected functionality), Dropbox, Line, Snapchat 5G Cell measurement • Cell type • Band • Band type (FDD/TDD) • SSB NR-ARFCN • SSB NR-ARFCN frequency • SSB GSCN • PCI • Beam index • Beam type

Find us at www.keysight.com Page 3 • Timing offset (ns, for serving BI 0) • SS-RSRP • SS-RSRQ • SS-SINR • RSSI • Pathloss PUCCH (NR) • Pathloss PUSCH (NR)

Serving cell information • BWP type • BWP ID • BWP direction • BWP numerology • BWP bandwidth (PRB) • BWP NR carrier bandwidth (kHz) • DL NR-ARFCN Point A • UL NR-ARFCN Point A • NR-ARFCN Freq (BWP) • NR-ARFCN (BWP)

Physical channel information (for each serving cell) • PDSCH throughput • PDSCH scheduled throughput • PUSCH throughput • PUSCH scheduled throughput • PDSCH spectrum efficiency • PUSCH spectrum efficiency • PUSCH TX power • PUCCH TX power • PDSCH DM-RS SINR per antenna port • PDSCH DM-RS RSSI per antenna port • SSB RSRP per antenna port • SSB RSRQ per antenna port • SSB SINR per antenna port • SSB RSSI per antenna port • SRS TX power • Power headroom

Find us at www.keysight.com Page 4 Link adaptation (for each serving cell) • PDSCH slot utilization • PUSCH slot utilization • CCE aggregation level (NR) • CCE aggregation level distribution (count) • DCI downlink grants • DCI uplink grants • DCI format distribution • PDSCH MCS CW0 • PDSCH MCS distribution • PUSCH MCS CW0 • PUSCH MCS distribution • PDSCH rank • PDSCH rank distribution (count) • PUSCH rank • PUSCH rank distribution (count) • PDSCH PRBs (count) • PUSCH PRBs (count) • PDSCH PRB utilization/Index (NR, count) • PUSCH PRB utilization/Index (NR, count) • NR PDSCH PRB utilization (%)/PRB Index • NR PUSCH PRB utilization (%)/PRB Index • PDSCH modulation CW0 • PDSCH modulation distribution • PUSCH modulation CW0 • PUSCH modulation distribution • PDSCH TBS CW0 • PUSCH TBS CW0

CSI • Rank indicator (RI) • Rank indicator distribution (count) • WB CQI • WB CQI distribution (NR, count)

Find us at www.keysight.com Page 5 RACH parameters • Timing • Numerology • RACH access delay • RACH contention resolution failures • RACH contention resolution MSG4 decoding failures • RACH direction • RACH grant bytes (MSG3) • RACH message type • RACH preamble count • RACH preamble index • RACH rreamble responses with backoff time • RACH rreamble responses with PUSCH resource • RACH reason • RACH result • RACH subchannel • RACH timing advance • RACH type MAC (for each serving cell) • MAC downlink throughput • MAC downlink scheduled throughput • MAC downlink block rate • MAC downlink new block rate • MAC downlink BLER (NR) • MAC downlink BLER (1st) • MAC downlink BLER (2nd) • MAC downlink BLER (3rd+) • MAC uplink block rate • MAC uplink new blocks RLC/PDCP/SDAP • RLC downlink throughput • RLC downlink throughput per RB • RLC uplink throughput • RLC uplink throughput per RB • PDCP downlink throughput • PDCP downlink throughput per RB (Radio Bearer)

Find us at www.keysight.com Page 6 • PDCP uplink throughput • PDCP uplink throughput per RB • SDAP downlink throughput • SDAP uplink throughput

Measurement events • RRC signaling (MIB messages are logged for NSA) • L3 signaling • Basic measurement events (A1, A2, A3,…B1-NR, B2-NR) • Serving cell set modification events - SCell add - SCell remove - SCell modify • Cell reselections events (SA only) • Handover (HO) events (SA only) - HO attempt - HO success - HO failure • Handover type (SA only)

LTE Cell measurement (for each cell) At the moment parameters are logged separately in downlink per primary and secondary cell

• Cell type (serving, secondary serving, listed, detected) • Band • Channel number (EARFCN) • Physical cell identity • RSSI • RSRP • RSRQ • RSRP, RSRQ, and RSSI per antenna port • SINR • Logging LTE inter-system neighbor cell list • Pathloss

Find us at www.keysight.com Page 7 Physical channel information • PDSCH throughput1 • PDSCH throughput per codeword1 • PUSCH throughput1 • PUSCH TX power • PUCCH TX power • PUSCH TX power adjustment • PUCCH TX power adjustment • SRS power • SNR1 • SNR per antenna1

Link adaptation (for each serving cell, reported values are distributions over the reporting period) • PDSCH rank • PDSCH modulation, MCS, and TBS per codeword • PDSCH PRB allocation • PDSCH DTX TTIs • PUSCH rank • PUSCH modulation, MCS, and TBS • PUSCH PRB allocation • PUSCH DTX TTIs • PDSCH and PUSCH DTX percentage parameter • PRB utilization UL/DL • PRB utilization per index • LTE precoding matrix indicator (PMI) • Average and maximum transport block size • Average scheduled serving cells

Current cell information • Physical cell identity1 • Physical layer identity1 • Cell specific frequency shift1 • Channel number (EARFCN) 1 • Uplink EARFCN • Cell ID

1 For each serving cell

Find us at www.keysight.com Page 8 • Tracking area code • Mobile country code • Mobile network code • Cell bandwidth1 • Transmission mode1 • Detected downlink antenna ports1 • Service status • TDD UL/DL configuration1 • TDD special subframe configuration1 • Automatic neighbor relations (ANR) CGI reporting • Number of secondary serving cells

CQI (for each serving cell) • Wideband CQI per codeword • Subband CQI per codeword • Requested rank • CQI per subband • Periodic and aperiodic CQI reporting mode

RACH parameters • RACH type • Reason • Preamble ID • RACH result • RACH access delay • Preamble step size • Number of transmitted preambles • Number of received preamble responses (success and backoff cases separated) • Number of contention resolution failures • Number of contention resolution msg4 decoding failures • Preamble initial TX power • RA-RNTI • RACH response window size • MSG1-4

1 For each serving cell

Find us at www.keysight.com Page 9 Mobility parameters • Cell reselections events • Handover (HO) events (attempt/success/failure) • Handover type • Tracking area update events (attempt/success/failure) • Tracking area update type • Tracking area update failure cause • Handover time

Radio resource connections • RRC connection attempts • RRC establishment cause • RRC connection success/failures • Number of RRC connection requests before RRC connection • Number of RRC connection requests before abort • RRC rejection status • RRC connection release • RRC connection release status • RRC connection release cause • RRC re-establishment status • RRC re-establishment cause • LTE measurement events A1-A6 and B1-B2

MAC (for each serving cell) • MAC downlink and uplink throughput

RLC/PDCP • RLC downlink throughput • RLC uplink throughput • PDCP downlink throughput • PDCP uplink throughput

Upper layers • RRC signaling • NAS signaling • RRC state • UE category

Find us at www.keysight.com Page 10 SIP registration events • Attempt • Failure with cause code • Completed • Deregistered • SIP server re-registration result

IMS SIP signaling messages • Direction (DL/UL) • Message name • Message data

WCDMA Serving cell information • Cellular system • Channel number for primary and secondary channels • Service information • Cell ID • MCC • MNC

WCDMA signaling messages • Layer 3 • RRC messages • Logical subchannels for all messages

Physical layer parameters • Ec/N0, RSCP and RSSI for active/neighbor/detected set

Soft handover parameters • Ec/N0 for active/neighbor/detected set • Soft handover status • Soft handover event • Addition window • Drop window • Replacement window • Time to trigger 1A • Time to trigger 1B

Find us at www.keysight.com Page 11 • Time to trigger 1C • Added scrambling code nr. • Removed scrambling code nr. • Cell count active • Cell count monitored

Additional information • Compressed mode indication • RRC state • WCDMA neighbor list with GSM neighbors • Neighbor cell index • Results of inter-frequency neighbor measurements • Measurement events • WCDMA pilot pollution analysis - Source system - Source band - Source channel number - Pilot pollution scr code - Pilot pollution Ec/N0 - Pilot pollution RSCP - Cell name of polluting pilot (if cell site file is used) - Cell ID of polluting pilot (if cell site file is used)

GSM GSM signaling messages • Layer 3 • RLC/MAC control messages • Logical subchannels for all messages

GSM serving cell RF parameters • RXLEV (full and sub) • RXQUAL (full and sub) • DTX UL • C1 and C2 • TXPOWER • RLT • Timing advance

Find us at www.keysight.com Page 12 • Signal variance • Packet RXQUAL • Mean BEP (8-PSK and GMSK) • Mean BEP coefficient variance (8-PSK and GMSK) • C/I average (idle and dedicated mode) • C/I per hopping channel • RSSI per hopping channel

GSM serving channel information • HSN, BSIC • MAIO, TCH (HR, FR, EFR) • Timeslot number • Channel number • Hopping status

GSM neighbor information • BCCH • BSIC • RXLEV • C1 and C2 • GSM neighbor list with WCDMA neighbors

Other WLAN cell measurements • Channel number • SSID and BSSID • IP address • RSSI • Quality • Security mode and link speed • WLAN state information

User level data information • Data transfer protocol • Data transfer direction • Data transfer attempt number • Data transfer host address • Data transfer host port

Find us at www.keysight.com Page 13 • Application data throughput UL/DL • Application packet error rate • Transferred bytes UL/DL • PPP layer data throughput • Data connection establishment time • Data connection rate UL/DL • Data connection duration • Data connection failure time • Data connection failure cause • Data transfer failure cause • Data size UL/DL • Data disconnect cause • Ping rate • Ping timeout • Ping time (application data round trip travel time) • IP access and termination time (when TCP/IP packet capturing enabled from the OS) • DNS query address • DNS query latency • DNS query result • DNS resolved address

Video quality metrics Telchemy’s industry-leading VQmon performance analysis technology is available as an optional feature with Nemo Active Testing Application (NATA). It provides accurate QoE scores and critical diagnostics for every mobile video session.

Video quality is measured passively from media streams carried over packet-based networks. Factors that affect quality include delay variations, packet losses and other distortions which may be visible in the video. Also factors, such as the video codec itself are included in the final result. However, end-to-end and round-trip delays are not taken into account.

• Video quality MOS absolute - Video quality is normally displayed as MOS (Mean Opinion Score), which is expressed as a single number. The range varies from 1 to 5, where 1 is poor quality and 5 is perfect. Usually the MOS value does not reach 5, the practical maximum being most commonly between the values 3 and 4. • Video quality MOS relative (Relative MOS is calculated similar to absolute MOS except without using resolution. Video streams with different resolutions should get comparable MOS results.)

Find us at www.keysight.com Page 14 • Video quality MOS absolute (combined audio and video MOS) • Video quality MOS relative (combined audio and video MOS excluding resolution from the calculation) • Video quality average bitrate • Video codec (Defines the video codec used in the container format. Usually this is H.263, H.263+, H.264 (MPEG4 Part 10) or MPEG4 Visual (MPEG4 Part 2) when streaming mobile content.)

VoLTE voice statistics • VoLTE calls (number of VoLTE calls) • VoLTE calls alerting (number of alerting VoLTE calls) • VoLTE calls answered (number of answered VoLTE calls) • VoLTE call attempt failures (number of call attempt failures) • LTE call accessibility, % (ratio of call attempt failures/call attempts in LTE) • Overall call attempt failures, system failure (number of all call attempt failures, system failure) • Overall call attempt failures, incoming call not received (number of all call attempt failures, incoming call not received) • Overall call connects, TCH (number of all connected calls, TCH) • Overall call connects, answered (number of all connected calls, answered) • Overall call accessibility (ratio of all call attempt failures/all call attempts in all systems) • Overall call setup time, THC (time between call attempt and call connection) • Overall call setup time, alerting (time between call attempt and call alert) • Overall call setup time, answered (time between call attempt and call answer) • LTE call setup time, ms (time between call attempt and call connection when in LTE) • IMS registration failure rate (ratio of IMS registration attempts/failures) • VoLTE call disconnects • Overall calls (number of all voice calls) • Overall calls received (number of all voice calls received) • Overall call disconnects, normal (number of all voice calls disconnected, normal) • Overall call disconnects, dropped (number of all dropped calls in all systems) • Overall call disconnects, early release (number of all voice calls disconnected, early release) • Overall call drop rate, % (ratio of all call disconnects (drops)/all call connections with alerting state) • Overall call success rate (ratio of all successful voice calls) • Overall call attempt success rate (ratio of all successful call attempt) • Overall call duration, TCH (total duration of all calls) • Overall call duration, alerting (total duration of all alerting calls)

Find us at www.keysight.com Page 15 • Overall call duration, answered (total duration of all answered calls) • VoLTE intra LTE handover failures (number of handover failures during intra LTE HO) • VoLTE intra LTE handover failure rate, % (ratio of VoLTE intra LTE HO Failures /VoLTE intra HO attempts) • VoLTE intra LTE interruption time, ms (time between Intra LTE HO attempt and LTE HO success) • SRVCC failures, RAN view (number of failed inter-system handovers from LTE • SRVCC failure rate, RAN view, % (ratio of inter-system handovers failures/inter- system handover attempts from LTE) • SRVCC interruption time, ms (time between handover to UTRAN command and handover UTRAN complete messages) • VoLTE POLQA DL average (average POLQA DL score per VoLTE call) • VoLTE POLQA DL average before SRVCC (to match Nemo Outdoor naming convention) • Average POLQA DL score per VoLTE call before SRVCC

Statistics • Call statistics • Handover/handoff statistics • Soft handover statistics • Intersystem handover statistics • Intersystem cell reselections • Location area statistics • Attach statistics • PDP context statistics • Routing area statistics • User level data statistics • Video streaming statistics: - Streaming setup success rate - Streaming setup delay - Streaming completion success rate • CSFB voice call statistics: - CSFB voice call attempts - CSFB voice call attempt failures - CSFB voice call attempt failures (system failure) - CSFB voice call connects - CSFB voice calls received - CSFB voice call attempt success rate - CSFB voice call setup time

Find us at www.keysight.com Page 16 • Virtual statistics parameters: - Avg. application data throughput DL - Avg. application data throughput UL: the calculation is made between data request (DREQ) to data completed event (DCOMP) weighted by time; the result is shown for each data transfer context ID separately - Avg. PPP data throughput DL - Avg. PPP data throughput UL - Avg. RLC data throughput DL - Avg. RLC data throughput UL: average PPP/RLC data throughput rates are calculated between the first received PPP and RLC data throughputs till PDP context is deactivated (PAD event); the result is weighted by time • Average video streaming quality MOS (average value is calculated real time during the video streaming over the one video streaming session)

Real-time statistics Real-time statistics are virtual parameters that are not written in the measurement file. Real-time statistics can be displayed in different views in Nemo Outdoor and they are written in the csv. file.

• Data throughput statistics including min/max/average values - Application data throughput (DL/UL) - PPP data throughput (DL/UL) - RLC data throughput (DL/UL) - MAC data throughput (DL/UL) • UMTS L1 statistics including min/max/average values - Ec/N0 best active - RSCP best active - Carrier RSSI - Counter statistics for measurement events (MEI event) • GSM L1 statistics including min/max/average values - RXL full/sub - RXQ full/sub - TX power - Timing advance - C/I - C/I minimum per call • LTE L1 statistics - RSRQ serving measurement average - RSRP serving measurement average

Find us at www.keysight.com Page 17 Multi2 2 2 1 1 1 1 CA enable/ disable LTE PCI lock PCI lock LTE (sector lock) x x x x x x LTE ch ch LTE lock (EARFCN) x x x x x x

WCDMA WCDMA code lock Scr. (sector lock) x x x x x x WCDMA WCDMA channel lock (UARFCN) x x x x x x GSM GSM Channel Lock (ARFCN) x x x x x x Band lock Band lock WCDMA, (GSM, LTE) x x x x x x System lock x (NR) x x WCDMA, (GSM, LTE) x x x PS data1 x x x x x PEVQ-S VQ x (NIDI) x (NIDI) x (NIDI) AMR codec AMR codec mode forcing VoNR VoLTE x x x x x Partial Voice call Voice x x x x x x (S)FTP, HTTP(S), ICMP ping, browsing (S)FTP, number of simultaneous devices in multi configuration with single CPU Verified Device Huawei Mate 20X Huawei Mate 30 5G Huawei Mate 30 Pro 5G LIO-N29 Huawei P40 EVR-NX9 Huawei P40 Pro 5G ELS-NX9 Pro NOH- NX9 (NOH-N29) 1. 2.

Find us at www.keysight.com Page 18 Learn more at: www.keysight.com

For more information on Keysight Technologies’ products, applications or services, please contact your local Keysight office. The complete list is available at: www.keysight.com/find/contactus

Find us at www.keysight.com Page 19 This information is subject to change without notice. © Keysight Technologies, 2021, Published in USA, June 24, 2021, 3120-1549.EN