LMT cable pinout

This is merely a historical archive of years 2008-2021, before the migration to mailman3.

A maintained and still updated list archive can be found at https://lists.osmocom.org/hyperkitty/list/OpenBSC@lists.osmocom.org/.

Dieter Spaar spaar at mirider.augusta.de
Fri Apr 17 13:28:08 UTC 2009


Hello Matthias,

On Fri, 17 Apr 2009 11:44:06 +0200, "Matthias Wenzel" <bs11 at mazzoo.de> wrote:
> 
> can someone post the pinout of the rs232 LMT cable - db9 on one end, and
> the 8pin header on the bs11 on the other side.

If you look at the BS-11 interface (Antenne connectors top), its the
upper 8-pin connector:

  The four E1 BNC connectors are above here.

     (Rx) x x x x (right pin: Gnd)
     (Tx) x x x x (right pin: +5V)
            |
            + LMT

You just need a three wire connection (Gnd, Rx, Tx). Tx/Rx is from
the BS-11 side, so Tx (the lower pin) has to be connected to Rx of
the PC. The levels are standard RS-232 level, to be sure just measure
the Tx pin, it has a high voltage (ca. +/- 9 Volt).

And if someone want to play with the other ports, here is how
they are connected:

 The four E1 BNC connectors are above here.

     (Rx) x x x x (right pin: Gnd)
     (Tx) x x x x (right pin: +5V)
          1 2 3

         1: ?
         2: LMT
         3: (no COM Port, dont't connect to RS232)

     (Rx) x x x x (right pin: Gnd)
     (Tx) x x x x (right pin: +5V)
          1 2 3

        1: TRX0 L1LAPDmProc
        2: TRX0 L3Proc   (pwd: L3Proc)
        3: TRX0 OEM_Proc (pwd: LAPDOM)

     (Rx) x x x x (right pin: Gnd)
     (Tx) x x x x (right pin: +5V)
          1 2 3

        1: TRX1 L1LAPDmProc
        2: TRX1 L3Proc   (pwd: L3Proc)
        3: TRX1 OEM_Proc (pwd: LAPDOM)

When you boot, and the firmware is not yet loaded, you get
a prompt and can see a menu. There is a password protected
menu, the password is above ("pwd:"). The baud rate is 9600 8n1
(except LMT: 19200 8n1).

When the firmware is loaded those menus are no longer there
(they are commands in the boot ROM), however if you type
"qwertyuiop" (without the quotes, there is no echo) you can
enter debug commands in the firmware. Some menus ask for a
password, however its empty (just hit return).

I have not found really usefull things, but if someone wants
to play, feel free to do so and of course post the results if
you find something usefull.

Disclaimer: Nothing of the above comes from the NDA documentation,
its not even mentioned there. All of the above was discovered by
having a close look.

Best regards,
  Dieter
-- 
Dieter Spaar, Germany                           spaar at mirider.augusta.de




More information about the OpenBSC mailing list