Software radio suite Radio Access Network (srsRAN) has been widely used in experimental research for 5G, 6G and their evolutions. However, in the current implementation of srsRAN, the Evolved Node B (srsENB) and Evolved Packet Core (srsEPC) are interfaced through wired connections, which makes it challenging to conduct experiments with mobile srsENBs and dynamic association between User Equipment (srsUE) and srsENB in future wireless networks. To address this challenge, we propose to interface srsENB and srsEPC by allowing srsENB to interface with srsEPC through wireless links and hence enabling easy integration of multiple possibly mobile srsENBs in experimental research. We show the effectinveness and scalability of the new srsRAN architecture through two demonstrations: (i) srsUE-srsENB connection establishment; (ii) srsUE handover between two srsENBs wirelessly interfaced with the same srsEPC.

In this paper, we demonstrate the design of FiND, a novel neighbor discovery protocol that accelerates BLE neighbor discovery via Wi-Fi fingerprints without any hardware modifications. The design rationale of FiND is that the two modes of Wi-Fi and BLE show complementarity in both wireless interference and discovery pattern. When abstracting the neighbor discovery problem, this demonstration provides validation for the approach of reasoning-based presence detection in the real world.

Artificial intelligence (AI) and Machine Learning (ML) are considered as key enablers for realizing the full potential of fifth-generation (5G) and beyond mobile networks, particularly in the context of resource management and orchestration. In this demonstration, we consider a fully-fledged 5G mobile network and develop a multi-agent deep reinforcement learning (DRL) framework for RAN resource allocation. By leveraging local monitoring information generated by a shared gNodeB instance (gNB), each DRL agent aims to optimally allocate radio resources concerning service-specific traffic demands belonging to heterogeneous running services. We perform experiments on the deployed testbed in real-time, showing that DRL-based agents can allocate radio resources fairly while improving the overall efficiency of resource utilization and minimizing the risk of over provisioning.

The increased demand for spectrum has motivated the Federal Communications Commission (FCC) to open band 48, also known as the Citizen Broadband Radio Service (CBRS) band, for shared wireless broadband use. Access and operations in the CBRS band is managed by a dynamic Spectrum Access System (SAS) that enables seamless spectrum sharing between incumbent and secondary users. In this paper, we demonstrate an enhanced version of an open source SAS, OpenSAS, with added functionality to showcase interaction between General Authorized Access (GAA) and Priority Access License (PAL) user tiers. We further showcase the use of the Google SAS Test Environment with OpenSAS and a Software-defined Radio (SDR)-based CBRS Base Station Device (CBSD) developed by our team. Our demo steps through the entire SAS-CBSD cycle which includes registration, spectrum inquiry, grant request, heartbeat request, grant relinquishment, and de-registration.

In this demonstration, we present the RIC Orchestrator (RIC-O), a system that optimizes the deployment of Near Real-time RAN Intelligent Controller (Near-RT RIC) components across cloud and edge environments. RIC-O quickly and efficiently adapts to sudden changes and redeploys components as needed. We describe small-scale real-world experiments using RIC-O and a disaggregated Near-RT RIC within a Kubernetes deployment to demonstrate its effectiveness.

Nowadays, all the 4G/5G voice solutions are offered by the IMS (IP Multimedia Subsystem) system. They include 4G VoLTE (Voice over LTE) and 5G VoNR (Voice over New Radio), as well as a non-3GPP access solution, VoWiFi (Voice over WiFi). Since VoWiFi is implemented on mobile OS, instead of the modem with hardware security for VoLTE and VoNR, it can be a vulnerability of the IMS system and may further impair other IMS-based services. It has been exposed that due to vulnerable VoWiFi sessions, several IMS vulnerabilities are discovered and the smartphones with IMS-based call services may suffer from a stealthy call DoS attack, where the smartphones cannot make or receive any calls and no ringtone or messages are appeared on them during the attack. In this paper, we develop a detector that can remotely and concurrently detect such DoS attack for multiple UEs (User Equipments). It consists of three major components: session hijacking, SIP fabrication, and call detection. We demonstrate its effectiveness in the operational networks of two carriers from different countries by considering three different phone models with VoLTE and VoWiFi call services.

To facilitate the adoption of 5G in industrial networks, 3GPP introduced a new 5G feature called 5G LAN-type service in Release 16. The 5G LAN-type service aims to support similar functionalities of Local Area Networks, but on top of the 5G network. As a result, 5G LAN-type service would be expected to offer UE-to-UE communication with ultra-low latency, which is attractive for localised industrial control settings. The requirements of this new service have been specified but its design and implementation are still being studied. In this demo paper, we present a workable design to implement the 5G LAN-type service and demonstrate its benefit in terms of end-to-end (E2E) latency. Our evaluation shows that E2E latency in a 5G LAN-type service is smaller than those in Multi-access Edge Computing scenarios. The testbed provides a platform for exploring challenging aspects of 5G LAN-service design and implementation.

5G aims to support ubiquitous connectivity, ultra-Reliable Low Latency (uRLLC), and massive device communication in Next Generation networks. To achieve these objectives, the Open-Radio Access Networks (O-RAN) alliance aims to decouple the Radio Access Network (RAN) architecture and allow heterogeneity. To ensure the services' requirements, it is necessary to guarantee solutions that improve the management of the network. This work proposes an End-to-End (E2E) orchestration framework for a 5G communication infrastructure with open-source components. An overview of the implemented architecture is presented and two demonstrations are shown: how RAN and Core Network metrics are retrieved using a monitoring xAPP, and how the orchestrator enforces a policy after processing and analysing the data gathered. The results show that it is possible to deploy the proposed architecture to monitor and allocate resources efficiently in near-Real Time environments. The major novelty of this work is the fact that this constitutes the first E2E 5G network system using open source tools, to the best of our knowledge. For this purpose, an interface adapter was built to interlink some of these open-source components.

CESNET is ready to present a packet capture demo at 400G networks. As part of its research activities, it has developed a new system for FPGA cards for fast packet reception to DPDK. Due to the programmability and performance of FPGAs, the system can be extended by using hardware acceleration. To simplify the hardware development, we created an open-source Network Development Kit (NDK) framework. Although the demo is presented only on the 400G card, which we have developed in collaboration with Reflex CES, the open-source NDK framework and fast packet capture are available on many other FPGA cards. The open-source framework is ready to use, and we would be happy if you not only use it but also contribute to its further development.

This demonstration shows the beam steering capability of a new liquid metal-based intelligent reflective surface (IRS) that operates at the 5.9 GHz frequency band to enhance signal coverage of cellular vehicular-to-everything (C-V2X) communication. The IRS unit cell design leverages the electrical actuation technique to move a liquid metal droplet within a rectangle-shaped microfluidic channel filled with sodium hydroxide (NaOH), which changes the phase and magnitude of the reflection signal, and relies on the liquid metal's high surface tension in NaOH to maintain the droplet position without further energy consumption. A power-efficient sequential control logic with priority over center IRS elements is implemented to promptly steer the reflection beam toward the desired angle before the entire IRS panel is fully configured. The merits of the design are evaluated under a 5.9GHz SISO C-V2X link implemented with a software-defined radio.