Building Your Own 4G LTE Base Station [Hackaday]

View Article on Hackaday

Phone connected to the DIY LTE network playing a YouTube video, with antennas in the background

We’ve seen quite a few DIY 2G networks over the years, but the 4G field has been relatively barren. Turns out, there’s an open source suite called srsRAN that lets you use an SDR for setting up an LTE network, and recently, we’ve found a blog post from [MaFrance351] (Google Translate) that teaches you everything you could need to know if you ever wanted to launch a LTE network for your personal research purposes.

For a start, you want a reasonably powerful computer, a transmit-capable full-duplex software defined radio (SDR), suitable antennas, some programmable SIM cards, and a few other bits and pieces like SIM card programmers and LTE-capable smartphones for testing purposes. Get your hardware ready and strap in, as [MaFrance351] guides you through setting up your own base station, with extreme amounts of detail outlining anything you could get caught up on.

get DragonOS set up — that’ll help you avoid compiling srsRAN from scratch. Then, treat yourself to a short guide on editing srsRAN config files. Having done that, connect your SDR, and run a few commands. This is enough to have your LTE network show up in the list of available networks on your phone.

Of course, you won’t be able to connect to it yet — that’s where the SIM cards come into play. Flash them with your network’s ID and a few other parameters, add your SIM into the srsRAN database, plug it in, and see your network’s name appear on the phone’s home screen. Setting up a data connection is just a few commands away, too, as evidenced by a fair few SpeedTest screenshots!

There’s plenty of fun things you could achieve with such a base station: reverse-engineering of proprietary technology, security research, and probing for vulnerabilities through WWAN interfaces rarely considered as an attack surface. Maybe you could even set up your own cell network — if you ever go sailing in neutral waters, that is.

In case you’re not aware, operating such a network is illegal for basically any hacker reading this article — and it will be easy for your country’s relevant agencies to catch you in the act. As such, grab your Faraday cages and lead-lined fridges, and make sure that you don’t cause any illegal interference if you do end up exploring this path.

We’ve generally seen 2G base stations over the years, but with the sunset of 2G, those have only been useful in an increasingly low number of countries, and, every once in a while, a hacker camp. Need to debug your DIY network at some point? Grab an LTE sniffer!