Identifying and Eliminating Interference in Mobile Networks Webinar V 5.1

Identifying and eliminating interference
in mobile networks
Peter Busch
Sales Manager, Rohde & Schwarz Mobile Network Testing
Version 5.1
Agenda
Sources of interference
Impact of interference on network performance
Identifying, locating and eliminating external
interference
Overview of test tools and methodologies
Additional considerations
Q&A / Discussion
10.05.2017 Identifying and eliminating interference 2

Sources of Interference
Sources of interference
The types and sources of interference are very frequency-
dependent.
Lower frequencies tend to propagate and penetrate better than
higher frequencies.
For many cellular networks, common interferers tend to be:
Harmonics / intermod products
Spurious emissions from electronic devices
Wrong-region devices
Intentional or malicious interference
Note however there are many geography-specific interference
types, e.g. from cable or broadcast television.

Harmonics / intermod products
In many cases, an interfering signal is actually a harmonic of a lower-frequency signal
(e.g. a signal at 400 MHz affecting 800, 1200, etc. MHz)
This is particularly true of narrowband interferers : it is always a good idea to do the
math and check if a narrowband interferer is a harmonic.
Intermodulation products are created when two or more signals mix in a non-linear
device or junction.
External intermod (the rusty bolt effect) is not uncommon.
time

Spurious emissions from electronic devices
Almost all electronic devices emit radio

frequency energy at various frequencies.
Interference is caused when high level
spurious emissions (or their harmonics) fall
into cellular bands.
Spurs can be narrowband or wideband,
possibly frequency-unstable.
Common sources of spurs:
Amplifiers of any kind
Lighting and displays (screens)
Consumer electronics
Industrial equipment

Wrong-region devices
Spectrum allocations vary from country to country
Interference can be caused by devices using
frequencies allocated in a different country / region
For example, cruise and cargo ships may have
systems that disrupt cellular services upon entering

different regions.

Common wrong-region devices:
Wireless phone systems DECT
Baby monitors
Microphones

Deliberate interference / jammers
Deliberate interference may be narrow-band (e.g. talking on a public safety frequency) or
broad-band (jamming).
Pirate or unlicensed (free band) operations can also cause issues to licensed users.
Sources may be mobile.
Although most businesses and
individuals are very cooperative
in resolving interference, deliberate
interferers will usually deny or
conceal their activities.

Physical characteristics of jammers
Jammers can come in many shapes and sizes.
Sometimes they are disguised or hidden.
Typically has one antenna per jamming
band/technology.
Battery-powered jammers are small but have a
limited jamming radius (10-25 meters).
More powerful jammers usually require AC power
and tend to run hot (look for devices with fans
and/or large heat sinks).

Spectral characteristics of jammers
Jammers are typically easy to identify and locate:
strong, broad, always-on signal.
Some increase the noise floor well outside of their

nominal operating range.
Jammers may generate very strong harmonics

outside of their nominal operating range.
Common commercial cellular jammer targets are

cellular, GPS, WiFi, and car remotes.
TAKEAWAY: Interference in mobile networks is pervasive and increasing due to more

technologies, the sensitivity of LTE, denser spectrum and proliferation of electronic devices

Network performance can be categorized on two levels:
RF level : SNR, Ec/Io, RSSI, RSRP, etc.
Subscriber level : Throughput, call drops, voice/video quality, etc.
Interference is an RF level issue, but affects the subscriber quality of experience.
Important therefore to test at both the RF level and the subscriber level.
Generally speaking, you need a combination of tools to test at both levels.

Impact of interference on network capacity
Example MCS vs. SINR It is not easy to quantify the impact of
800
interference towards the capacity of a
700 network, because its depending on so
600
many parameter. Here just a general
graph with MCS areas:
Relative throughput / %
500 Translates into: 256QAM

For every 10 dB (MCS 20...27)
The graph is a simplified real-world example for EPA5,
400
decrease in SINR, you 2x2MIMO and HARQ.
300 loose 50% of your The MCS-SINR relation depends on the specific Base
Station vendors' algorithms, performance and
capacity64QAM scheduler implementation, as well as on the channel
200
(MCS 11...19) fading profile etc.
100 16QAM
(MCS 5...10) MCS: Modulation and Coding scheme
QPSK (MCS 0...4)
0
-15 -5 5 15 25 35 45
SINR: Signal to Interference and Noise Ratio
SINR / dB
TAKEAWAY: Interference dramatically impacts network performance) - so interference

hunting becomes essential

Identifying, locating and eliminating external
interference
Steps in interference hunting
Detecting interference
For network operators, usually things like high RSSI,
call drops, poor throughput, etc.
Determining general location of interferer
Attempt to narrow down location to ~100 meters
Often involves driving/walking the entire affected
area.
Determining specific location of interferer
Done on foot
Handheld antennas
Need to locate specific device generating RF

Detecting Interference
For cellular network operators, interference
issues are almost always found in the uplink
First indications of interference normally come

from the base station statistics themselves
Usually one sector is affected more than the

others. Multiple sectors from multiple base
stations may be affected by a single source of
interference.

Identifying Interference
Analyzing an interfering signal can provide important
clues about its source. The most common analysis
methods include :
Spectral analysis
Waterfall analysis
Pattern analysis
Content analysis / Demodulation
Many common interference sources can be easily
identified by their spectral characteristics.
Important to know what your spectrum and common
interferers normally look like.

Identifying Interference
Analyzing an interfering signal can provide important clues
about its source. The most common analysis methods include:
Spectral analysis
Waterfall analysis
Persistence Histogram
Pattern analysis
Content analysis
Many common interference sources can be easily identified by

their spectral characteristics.
Important to know what your spectrum should normally look

like

Spectral analysis
Many interferers have a distinctive spectral
shape that helps to identify them.
For example: leaking cable television
signals can be identified by the regularly-
spaced, identical-width channels.
Locating the interferer is greatly simplified,
if you know (roughly) what you are looking
for.
Many providers build their own library of
well-known interferers and their spectral
characteristics.

Waterfall analysis
A waterfall (or spectrogram) display shows
frequency, time, and level information (as color)
Extremely useful in analyzing signal behavior

over time or for locating short duration signals.
Can reveal the presence of interferers

underneath desired signals.
Waterfall intensity can also be helpful in locating

an oscillating / drifting signal.
Recommendation : always use spectrum and

waterfall together during interference hunting.

Persistence Histogram
What exactly is polychrome spectrum display?
Persistence Histogram (statistical function that uses
several measured levels as basis)
Processes level-frequency pairs over time
Color indicates relative occupancy over time (How
often that signal is measured) or signal duration
Maxhold Wanted
Signal
What can polychrome spectrum display be used for? GSM Signal

(less occurrence)
GSM Signal
ClearWrite
Resolve pulsed signals that share same frequency (more occurrence)

Wanted
WiFi Signal
bands and are superimposed in spectral display Pulsed
Interference
Detection of short duration wideband interference

Bluetooth
signals (not possible via MAXHOLD due to averaging)

Pattern analysis
Important questions to ask in analyzing interference patterns:

When does the interference occur?
Is the interference constant or intermittent?
Does the interference coincide with any other (physical or
spectral) events?
Does the interferer affect multiple locations in a given
sequence?
In many cases, base station statistics can provide useful
information.
Trying to find interference when it is not on is not
productive.

Content analysis
Simplest type of content analysis is audio demodulation.
Always try to demod narrowband signals
What are we listening for?

Station identification or call signs, even unofficial ones.
Language and content
Combined FM audio usually indicates intermodulation products.
Recording audio signals for later analysis / documentation is useful.
In some cases digitally modulated signals can also be identified

through analog demod, but tools also exist for demodulating digitally
modulated signals.
TAKEAWAY: Analyzing an interfering signal can provide important clues about its source.
Use spectral analysis, waterfall analysis, pattern analysis and content analysis

Identifying the general location
The first indications of interference normally
come from the base station statistics
themselves.
Usually one sector is affected more than the
others. Multiple sectors from multiple base
stations may be affected by a single source of
interference.
Note that base station statistics can only
provide location with a sector-level resolution at
best where is the interferer within that sector?

Driving around
In most cases, the interferer CANNOT be seen
on the ground at the base station.
One typically has to drive (or walk) the
sector(s) / affected area to try to narrow down
the location of interfering signal.
In the driving phase we use things such as:
RF heat maps
Manual and automatic bearings
Network performance statistics.
Typically we want to get within about 100
meters of the interferer.

Understanding Propagation
A solid practical knowledge of propagation is critical in

interference hunting. Knowing how signals travel makes it
easier to figure out where they could be coming from
The lower the frequency, the better the propagation and

penetration.
Know the attenuation characteristics of common materials
Multipath propagation can make interference hunting

difficult in urban areas.

Walking around
The next step is to locate the exact source of the
interference.
Handheld antennas are used to sweep or scan. Level
information in the form of spectrum amplitude, waterfall
intensity, or tone output can be used to determine
position.
Ultimately, the only way to determine if a device is the
source of interference is to power it off and examine base
station statistics (subscriber-level vs. RF-level)

Overview of test tools and methodologies
Table of content
Spectrum Analyser FSH/FPH
TDD LTE trigger (FSH/FPH)
Interference Receiver PR100
Mobile Locator DDF007
Scanner TSMA/E with Romes

Spectrum Analyzer FSH/FPH
Directional Antenna R&SHE400
Automatic module and polarization recognition

Low Noise Amplifier (powered by R&S FSH/FPH or PR100)
Easy and comfortable handling (trigger button, arm rest etc.)
Automatic field strength display based on detected antenna
module and stored k-factor tables in R&S FSH/FPH or PR100
Exact positioning system with GPS and GLONASS support
Highly accurate bearing information in cellular bands due to
delta mode function (R&SHE400CEL)

R&SHE400 Handheld Directional Antenna
New antenna for interference hunting
Frequency range 8.3 kHz to 8 GHz (covered by 5 antenna modules)
VSWR (except with HF module) < 3.0 (typical < 2.0)
Polarization adjustable vertical or horizontal
Operating temperature range -10C to +55C (Class C device)
Max. dimensions approx. 620 x 290 x 90 mm
Weight approx. 1 kg
8.3 kHz - 30 MHz 20 - 200 MHz 450 8000 MHz 700 2500 MHz 30 6000 MHz
R&SHE400HF R&SHE400VHF R&SHE400LP R&SHE400CEL R&SHE400UWB

Interference Analyzer (FSH/FPH)
The Interference Analyzer mode provides the ability
to visualize and measure spectrum
Similar to spectrum analyzer mode
Standard measurements include channel power,

OBW and ACLR.
Interference-specific measurements include Carrier

to Noise and Carrier to Interference
Spectrogram display, record, and playback are also

included with the Interference Analyzer option

Carrier-to-Noise
The Carrier-to-Noise (C/N)

measurement is a tool to determine if a
signal has sufficient power compared
to the surrounding spectrum
The FSH determines the distance

between the level of the carrier and the
lowest signal level that has been
measured (usually the noise floor).

Carrier to Interference
The Carrier-to-Interference (C/I)

measurement is a tool to determine if a
signal is affected by interference from
neighboring channels.
The FSH determines the distance

between the level of the carrier and the
second strongest level.

Tone Function
The Tone function outputs an audible tone
whose level varies according to the received
signal strength level.
The current receive level (dashed line) and

squelch level (solid line) are displayed in the
power bar.
Tone can be used both for obtaining bearings

as well as for sweeping an area to determine
the precise location of an interferer.

Spectrogram
Spectrograms display amplitude vs. frequency over time. Amplitude is indicated
by the color of the spectrogram display.
Spectrogram reference, range, and other parameters can be specified
Extremely useful in interference hunting allows the observation of a signals
behavior over time.

Saving Positions and Azimuth
The azimuth (or bearing) is the
direction in which the antenna is
currently pointed
This information can be using the

menu or the trigger on the HL300
antenna
The power bar and power result can

help determine the direction of
maximum receive power (i.e. bearings
towards the transmitter)

R&SHE400CEL Cellular Antenna Module
Features and benefits
Frequency range 700 MHz to 2500 MHz
Two broadband dipoles switched in-phase (normal mode) or out-of-phase (delta mode)
Change of radiation pattern boresight null in delta mode
-> Very precise bearing determination

Computing Triangulation
The Triangulate function computes
the triangulation point for up to five
selected bearings.
The lat / long and error radius of the

triangulation point are also displayed.
The computed triangulation point can

be saved to the SD card.

R&SSpectrum Rider FPH
Long Time Recording
Long time recording

Long Time Recording

Signal Strength Mapping (FPH-K16) & Map Analysis (Instrument View)
Save on events

TDD LTE Interference Hunting
TDD with interferer present (non triggered)
This is an example of a TDD LTE
signal in normal (free run)
operating mode.
Downlink frames dominate the
spectrum display (no uplink traffic
is present in this example).
Without triggering, it is extremely
difficult to see even a strong
interferer within the TDD band.
Having properly configured our
Gate Settings, we now enable
Gated Trigger

Determining time slot allocations
Visual inspection of the zero

span screen is used to determine
the location of one or more
(depending on TDD
configuration) uplink timeslots

Gate Delay
Gate delay and gate length are shown
as two vertical red lines in the zero
span display gate delay on the left
and gate length on the right.
Gate delay will vary each time you

switch to the FSH internal clock.
Make sure that the gate delay line is

(slightly) inside the uplink timeslot
Gate delay

Gate Length
Gate length is the distance (time) from

gate delay.
Typically will be on the order of 1 ms per

uplink timeslot.
Make sure that the gate length line is

also (slightly) inside the uplink timeslot
Gate length

TDD with interferer present (triggered)
With Gated Trigger enabled, the

downlink frames are suppressed
and we can clearly see a strong (~
-55 dBm) periodic interferer in
both the spectrum and waterfall
displays.
All standard FSH functions can

now be used with the Gated
Trigger enabled.

Nice TDD LTE Video from a customer in the US
https://www.youtube.com/watch?v=wvL1cX4F9Uc

Interference Receiver PR100
Preselection
Subdivides the input frequency range into subranges via switches
and filters
Spectrum analyzers :
Do not have preselectors
Measured signal is known and relatively stable
Sum load of all signals is on the input of the first mixer
Monitoring receivers :
Preselection is a must
Frequency range split in sub-ranges
Reduce the signal sum load on the input of the first mixer
Allows monitoring of widely different signals

Speed vs. accuracy
Biggest difference is speed.
Spectrum analyzers are (relatively) slow, but highly

accurate over a wide frequency range.
Monitoring receivers are less accurate, but are very fast

(real-time) and gap-free. POI within the demodulation
bandwidth is 100%.
Short duration (low POI) signals

Digital data
Frequency hoppers
Radar pulses
Noise sources Reassembly of a frequency-agile signal
Clandestine transmitters

Monitoring short duration signals
time
time
frequency frequency
Spectrum analyzer Monitoring receiver

(swept / heterodyne principle) (FFT based)
08.05.2017 Spectrum clearance and interference hunting 54

R&SPR100 family
Polychrome Display Option: R&SPR100-PC & R&SDDF007-PC
What exactly is polychrome spectrum display?
Persistence Histogram (statistical function that uses
several measured levels as basis)
Maxhold Wanted
Processes level-frequency pairs over time Signal
Color indicates relative occupancy over time (How

GSM Signal
often that signal is measured) or signal duration GSM Signal
ClearWrite
(less occurrence)
(more occurrence)
Wanted
What can polychrome spectrum display be used for? WiFi Signal
Pulsed
Resolve pulsed signals that share same frequency Interference
bands and are superimposed in spectral display

Bluetooth
Detection of short duration wideband interference
signals (not possible via MAXHOLD due to
averaging)

Mobile Locator DDF007
What is Mobile Locator?
Mobile Locator processes DDF007
bearings in real-time using a
sophisticated mathematical algorithm.
Probability clouds and estimated

transmitter location are computed and
displayed on attached control PC.
It is referred to a mobile locator since

the bearings are only processed while
the system is in motion.

PR100 DF Option
The PR100 DF option allows the PR100 to be used as a DF
receiver when connected to a suitable antenna.
Transition from vehicle to foot now simply a quick change of
antenna cable.
Bearing lines are automatically calculated and displayed on the
PR100 interface.

System Configuration
ADDx0
7
Three Hardware Components
Control PC RF & Control cable
DDF007
ADDx07
DDF00
7
Control PC

Ease of deployment
Low profile, weather-proof

Magnetic mounting plate allows
mounting/unmounting in minutes
Mount is stable to at least 80 mph, all
weather conditions.

Scanner TSMA/E with Romes
TSMA connected to PC
LAN

R&SROMES4 (RF Power Scan)
Visualization of spectrum for RF analysis

R&SROMES4 (RF Power Scan)

R&SROMES4 (automated identification via post processing)

R&SROMES4 (automated identification via post processing)

Summary
Summary
There are many different sources of interference in cellular
networks; they are pervasive, increasing and particularly effect
LTE.
Interference can be measured at RF-level or the subscriber-level.
Interference dramatically impacts network performance therefore

interference hunting is becoming essential
Identifying and locating interference can be partially automated

using scanning receivers and direction finders
Analyzing an interfering signal using spectral analysis, waterfall

analysis, pattern analysis and content analysis can provide
important clues about its source.
New developments in mobile networks require the use of new

solutions for resolving interference.

Q&A / Discussion

Identifying and Eliminating Interference in Mobile Networks Webinar V 5.1

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Identifying and Eliminating Interference in Mobile Networks Webinar V 5.1

Încărcat de

Drepturi de autor:

Formate disponibile

Identifying and eliminating interference

10.05.2017 Identifying and eliminating interference 2

10.05.2017 Identifying and eliminating interference 4

10.05.2017 Identifying and eliminating interference 5

Almost all electronic devices emit radio

10.05.2017 Identifying and eliminating interference 6

For example, cruise and cargo ships may have

systems that disrupt cellular services upon entering

10.05.2017 Identifying and eliminating interference 7

10.05.2017 Identifying and eliminating interference 8

10.05.2017 Identifying and eliminating interference 9

Some increase the noise floor well outside of their

Jammers may generate very strong harmonics

Common commercial cellular jammer targets are

TAKEAWAY: Interference in mobile networks is pervasive and increasing due to more

10.05.2017 Identifying and eliminating interference 10

10.05.2017 Identifying and eliminating interference 12

500 Translates into: 256QAM

TAKEAWAY: Interference dramatically impacts network performance) - so interference

10.05.2017 Identifying and eliminating interference 13

10.05.2017 Identifying and eliminating interference 15

First indications of interference normally come

Usually one sector is affected more than the

10.05.2017 Identifying and eliminating interference 16

10.05.2017 Identifying and eliminating interference 17

Many common interference sources can be easily identified by

Important to know what your spectrum should normally look

10.05.2017 Identifying and eliminating interference 18

10.05.2017 Identifying and eliminating interference 19

Extremely useful in analyzing signal behavior

Can reveal the presence of interferers

Waterfall intensity can also be helpful in locating

Recommendation : always use spectrum and

10.05.2017 Identifying and eliminating interference 20

What can polychrome spectrum display be used for? GSM Signal

Resolve pulsed signals that share same frequency (more occurrence)

Detection of short duration wideband interference

signals (not possible via MAXHOLD due to averaging)

10.05.2017 Identifying and eliminating interference 21

Important questions to ask in analyzing interference patterns:

10.05.2017 Identifying and eliminating interference 22

Always try to demod narrowband signals

What are we listening for?

Recording audio signals for later analysis / documentation is useful.

In some cases digitally modulated signals can also be identified

10.05.2017 Identifying and eliminating interference 23

10.05.2017 Identifying and eliminating interference 24

10.05.2017 Identifying and eliminating interference 25

A solid practical knowledge of propagation is critical in

The lower the frequency, the better the propagation and

Know the attenuation characteristics of common materials

Multipath propagation can make interference hunting

10.05.2017 Identifying and eliminating interference 26

10.05.2017 Identifying and eliminating interference 27

Interference Receiver PR100

Mobile Locator DDF007

Scanner TSMA/E with Romes

10.05.2017 Identifying and eliminating interference 29

Automatic module and polarization recognition

10.05.2017 Identifying and eliminating interference 31

R&SHE400HF R&SHE400VHF R&SHE400LP R&SHE400CEL R&SHE400UWB

10.05.2017 Identifying and eliminating interference 32

Similar to spectrum analyzer mode