R&S SMM-K60, SMM-K117 User Manual
R&S®SMM-K60/-K117
Bluetooth®Enhanced Data Rate,
Bluetooth®5.x
User Manual
(;ÝDÄ2)
1179205402
Version 02
This document describes the following software options:
●
R&S®SMM-K60 Bluetooth EDR (1441.1918.xx)
●
R&S®SMM-K117 Bluetooth 5.x (1441.1799.xx)
This manual describes firmware version FW 4.80.041.xx and later of the R&S®SMM100A.
© 2021 Rohde & Schwarz GmbH & Co. KG
Mühldorfstr. 15, 81671 München, Germany
Phone: +49 89 41 29 - 0
Email: info@rohde-schwarz.com
Internet: www.rohde-schwarz.com
Subject to change – Data without tolerance limits is not binding.
R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG.
The Bluetooth® word mark and logos are owned by Bluetooth SIG, Inc. and any use of such marks by Rohde & Schwarz is under
license.
Trade names are trademarks of the owners.
1179.2054.02 | Version 02 | R&S®SMM-K60/-K117
The following abbreviations are used throughout this manual: R&S®SMM100A is abbreviated as R&S SMM, R&S®WinIQSIM2TM is
abbreviated as R&S WinIQSIM2; the license types 02/03/07/11/13/16/12 are abbreviated as xx.
R&S®SMM-K60/-K117
Contents
1 Welcome to the Bluetooth Options...................................................... 7
1.1 Key Features..................................................................................................................7
1.2 Accessing the Bluetooth Dialog.................................................................................. 8
1.3 Documentation Overview............................................................................................. 8
1.3.1 Getting Started Manual................................................................................................... 9
1.3.2 User Manuals and Help...................................................................................................9
1.3.3 Service Manual............................................................................................................... 9
1.3.4 Instrument Security Procedures......................................................................................9
1.3.5 Printed Safety Instructions.............................................................................................. 9
1.3.6 Data Sheets and Brochures.......................................................................................... 10
1.3.7 Release Notes and Open Source Acknowledgment (OSA).......................................... 10
Contents
1.3.8 Application Notes, Application Cards, White Papers, etc..............................................10
1.4 Scope........................................................................................................................... 10
1.5 Notes on Screenshots................................................................................................ 11
2 About the Bluetooth Options.............................................................. 12
2.1 Required Options........................................................................................................ 12
2.2 About Bluetooth BR/EDR........................................................................................... 12
2.2.1 Bluetooth Packet Types for BR/EDR.............................................................................13
2.2.1.1 ACL Packets................................................................................................................. 13
2.2.1.2 SCO and eSCO Packets...............................................................................................14
2.2.1.3 Link Control Packets for ACL, SCO, eSCO Transport Modes...................................... 15
2.2.2 Bluetooth Transport Modes...........................................................................................16
2.2.3 Packet Structure and Fields.......................................................................................... 16
2.2.3.1 Access Code................................................................................................................. 16
2.2.3.2 Header.......................................................................................................................... 16
2.2.3.3 Payload Format.............................................................................................................17
2.2.4 Bluetooth Modulation Schemes.................................................................................... 19
2.3 About Bluetooth LE.....................................................................................................19
2.3.1 Packet Formats for LE.................................................................................................. 20
2.3.2 Packet Types for LE......................................................................................................22
2.3.3 Packet Structure and Fields.......................................................................................... 23
3User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
2.3.3.1 Advertising Channel Packet Structure.......................................................................... 23
2.3.3.2 Data Channel Packet Structure.....................................................................................26
2.3.4 Modulation Scheme...................................................................................................... 26
2.3.5 Direction Finding........................................................................................................... 27
3 Bluetooth Configuration and Settings............................................... 32
3.1 General Settings..........................................................................................................32
3.2 Dirty Transmitter Test................................................................................................. 35
3.3 Channel Settings - BR/EDR........................................................................................40
3.4 Packet Configuration - BR/EDR................................................................................. 42
3.5 Channel Settings - LE................................................................................................. 49
3.6 Event / Frame Configuration - LE.............................................................................. 54
3.6.1 Advertising Event / Frame Settings...............................................................................56
Contents
3.6.2 Data Event Settings...................................................................................................... 59
3.6.3 Channel Table Settings................................................................................................. 61
3.7 Packet Configuration - LE.......................................................................................... 63
3.7.1 General Packet Configuration....................................................................................... 63
3.7.2 Header Configuration.................................................................................................... 64
3.7.3 Main Payload Configuration Dialog...............................................................................68
3.7.4 Additional Payload Configuration Dialogs..................................................................... 84
3.8 Test Packet Configuration - LE.................................................................................. 88
4 Signal Control and Signal Characteristics........................................ 93
4.1 Filter/Clipping Settings...............................................................................................93
4.1.1 Filter Settings................................................................................................................ 93
4.1.2 Modulation Settings.......................................................................................................95
4.1.3 Clipping Settings........................................................................................................... 97
4.2 Power Ramping Settings............................................................................................98
4.3 Trigger Settings.........................................................................................................100
4.4 Marker Settings......................................................................................................... 104
4.5 Clock Settings........................................................................................................... 106
4.6 Global Connector Settings.......................................................................................107
5 Remote-Control Commands............................................................. 108
5.1 General Commands.................................................................................................. 109
4User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
5.2 Dirty Transmitter Configuration...............................................................................114
5.3 Channel Configuration Commands - BR/EDR........................................................121
5.4 Packet Configuration Commands - BR/EDR.......................................................... 122
5.5 Channel Configuration Commands - LE................................................................. 131
5.6 Event and Frame Configuration Commands - LE.................................................. 137
5.7 Packet Configuration Commands - LE....................................................................147
5.7.1 General Configuration................................................................................................. 153
5.7.2 Header Configuration.................................................................................................. 154
5.7.3 Payload Configuration.................................................................................................157
5.8 Test Packet Configuration Commands - LE............................................................186
5.9 Filter/Clipping Settings.............................................................................................188
5.10 Power Ramping Commands.................................................................................... 194
5.11 Trigger Commands................................................................................................... 196
Contents
5.12 Marker Commands....................................................................................................200
5.13 Clock Commands......................................................................................................204
Glossary: Specifications................................................................... 205
List of commands.............................................................................. 206
Index....................................................................................................211
5User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Contents
6User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
1 Welcome to the Bluetooth Options
The R&S SMM-K60 is a firmware application that adds functionality to generate signals
in accordance with the Bluetooth version 4.2.
Option R&S SMM-K117 adds support for Bluetooth LE signals according to the core
specification v 5.1 for Bluetooth wireless technology. This option is an extension of
R&S SMM-K60.
This user manual contains a description of the functionality that the application provides, including remote control operation.
All functions not discussed in this manual are the same as in the base unit and are
described in the R&S SMM100A user manual. The latest version is available at:
www.rohde-schwarz.com/manual/SMM100A
Installation
You can find detailed installation instructions in the delivery of the option or in the
R&S SMM100A service manual.
Welcome to the Bluetooth Options
Key Features
1.1 Key Features
Option R&S SMM-K60 provides Bluetooth signals for basic rate (BR) and enhanced
data rate (EDR) burst types. In addition, it provides also low energy (LE) signals limited
to LE 1 Msymbol/s physical layer.
The following BR and EDR features are supported within R&S SMM-K60:
●
Support for three transport modes, the ACL+EDR, SCO, eSCO+EDR transport
modes.
●
Support of all packet types for both the basic rate and the enhanced data rate
modes.
●
Generation of signals with up to 5238 frames sequence length.
●
Configuration of the packet contents with a convenient packet editor or all data
packets, both with optional data whitening.
●
Generation of signals in accordance to the "Dirty Transmitter Test" specification for
both, the basic and enhanced data rates. The test enables you to change the start
phase, the frequency drift rate and the frequency drift deviation.
●
Power ramp control with possibilities to choose ramp time, rise and fall offset
●
Configuration of the clipping, filter and modulation settings
The following LE features are supported within R&S SMM-K60:
●
Support for two channel types, the "Advertising" and "Data" channel types.
●
Support of all Bluetooth packet types for LE 1 Msymbol/s physical layer (LE 1M
PHY).
●
Convenient packet editor for all supported packet types including optional data
whitening.
7User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
●
●
●
●
The following LE features are supported within R&S SMM-K117:
●
●
●
●
●
●
●
Welcome to the Bluetooth Options
Documentation Overview
Dirty transmitter test, compliant to the RF test specification with options to change
start phase, frequency drift rate and frequency drift deviation.
Support of CRC corruption for every 2nd packet
Power ramp control with configurable ramp time, rise and fall offsets.
Clipping, filter and modulation settings supported.
Support for two channel types, the "Advertising" and "Data" channel types.
Support of all Bluetooth packet types for uncoded LE 2 Msymbol/s physical layer
(LE 2M PHY)
Support of all Bluetooth packet types for LE coded 1 Msymbol/s physical layer (LE
coded PHY)
Support of CRC corruption for every 2nd packet
Convenient packet editor for all supported packet types including optional data
whitening.
Dirty transmitter test, compliant to the RF test specification with options to change
start phase, frequency drift rate, frequency drift deviation, and modulation index
mode.
Support of Bluetooth Direction Finding using Constant Tone Extension methods
Angle of Arrival or Angle of Departure
1.2 Accessing the Bluetooth Dialog
To open the dialog with Bluetooth settings
► In the block diagram of the R&S SMM100A, select "Baseband > Bluetooth".
A dialog box opens that displays the provided general settings.
The signal generation is not started immediately. To start signal generation with the
default settings, select "State > On".
1.3 Documentation Overview
This section provides an overview of the R&S SMM100A user documentation. Unless
specified otherwise, you find the documents on the R&S SMM100A product page at:
www.rohde-schwarz.com/manual/smm100a
8User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
1.3.1 Getting Started Manual
Introduces the R&S SMM100A and describes how to set up and start working with the
product. Includes basic operations, typical measurement examples, and general information, e.g. safety instructions, etc. A printed version is delivered with the instrument.
1.3.2 User Manuals and Help
Separate manuals for the base unit and the software options are provided for download:
●
●
Welcome to the Bluetooth Options
Documentation Overview
Base unit manual
Contains the description of all instrument modes and functions. It also provides an
introduction to remote control, a complete description of the remote control commands with programming examples, and information on maintenance, instrument
interfaces and error messages. Includes the contents of the getting started manual.
Software option manual
Contains the description of the specific functions of an option. Basic information on
operating the R&S SMM100A is not included.
The contents of the user manuals are available as help in the R&S SMM100A. The
help offers quick, context-sensitive access to the complete information for the base unit
and the software options.
All user manuals are also available for download or for immediate display on the Internet.
1.3.3 Service Manual
Describes the performance test for checking compliance with rated specifications, firmware update, troubleshooting, adjustments, installing options and maintenance.
The service manual is available for registered users on the global Rohde & Schwarz
information system (GLORIS):
https://gloris.rohde-schwarz.com
1.3.4 Instrument Security Procedures
Deals with security issues when working with the R&S SMM100A in secure areas. It is
available for download on the Internet.
1.3.5 Printed Safety Instructions
Provides safety information in many languages. The printed document is delivered with
the product.
9User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
1.3.6 Data Sheets and Brochures
The data sheet contains the technical specifications of the R&S SMM100A. It also lists
the options and their order numbers and optional accessories.
The brochure provides an overview of the instrument and deals with the specific characteristics.
See www.rohde-schwarz.com/brochure-datasheet/smm100a
1.3.7 Release Notes and Open Source Acknowledgment (OSA)
The release notes list new features, improvements and known issues of the current
firmware version, and describe the firmware installation.
The open-source acknowledgment document provides verbatim license texts of the
used open source software.
See www.rohde-schwarz.com/firmware/smm100a
Welcome to the Bluetooth Options
Scope
1.3.8 Application Notes, Application Cards, White Papers, etc.
These documents deal with special applications or background information on particular topics.
See www.rohde-schwarz.com/application/smm100a
1.4 Scope
Tasks (in manual or remote operation) that are also performed in the base unit in the
same way are not described here.
In particular, it includes:
●
Managing settings and data lists, like saving and loading settings, creating and
accessing data lists, or accessing files in a particular directory.
●
Information on regular trigger, marker and clock signals and filter settings, if appropriate.
●
General instrument configuration, such as checking the system configuration, configuring networks and remote operation
●
Using the common status registers
For a description of such tasks, see the R&S SMM100A user manual.
10User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
1.5 Notes on Screenshots
When describing the functions of the product, we use sample screenshots. These
screenshots are meant to illustrate as many as possible of the provided functions and
possible interdependencies between parameters. The shown values may not represent
realistic usage scenarios.
The screenshots usually show a fully equipped product, that is: with all options installed. Thus, some functions shown in the screenshots may not be available in your particular product configuration.
Welcome to the Bluetooth Options
Notes on Screenshots
11User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
2 About the Bluetooth Options
The R&S SMM100A provides you with the ability to generate signals in accordance
with the core specification 5.1 for Bluetooth wireless technology.
This section lists required options and provides background information on basic terms
and principles used in Bluetooth technology.
2.1 Required Options
The basic equipment layout for generating Bluetooth signals includes the:
●
●
●
●
About the Bluetooth Options
About Bluetooth BR/EDR
Baseband Generator(R&S SMM-B9)
Frequency option (e.g. R&S SMM-B1006)
Option Bluetooth EDR (R&S SMM-K60) per signal path
Option Bluetooth 5.x (R&S SMM-K117) per signal path
You can generate signals via play-back of waveform files at the signal generator. To
create the waveform file using R&S WinIQSIM2, you do not need a specific option.
To play back the waveform file at the signal generator, you have two options:
●
Install the R&S WinIQSIM2 option of the digital standard, e.g. R&S SMM-K255 for
playing LTE waveforms
●
If supported, install the real-time option of the digital standard, e.g. R&S SMM-K55
for playing LTE waveforms
For more information, see data sheet.
2.2 About Bluetooth BR/EDR
The frequency band defined for Bluetooth devices is the unlicensed 2.4 GHz Industrial,
Scientific and Medical (ISM) frequency band.
Table 2-1: Operating band
Regulatory range RF channels k and center frequencies f
2400.0 MHz to 2483.5 MHz k = 0 to 78, f = k * 1 MHz + 2402 MHz
Two modulation modes are used for Bluetooth: the mandatory basic rate (BR) and the
optional enhanced data rate (EDR). The BR mode uses binary FM modulation and provides a data rate of 1 Mbps. The EDR mode uses two types of PSK modulation, the
π/4-DQPSK or 8DPSK, and achieves data rates of 2 Mbps and 3 Mbps, respectively.
All modulations schemes have the symbol rate equal to 1 Msymbol/s.
A time division duplex (TDD) scheme for duplex transmission is defined for both
modes.
12User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
The following sections describe signal characteristics in detail:
● Bluetooth Packet Types for BR/EDR.......................................................................13
● Bluetooth Transport Modes.....................................................................................16
● Packet Structure and Fields....................................................................................16
● Bluetooth Modulation Schemes.............................................................................. 19
2.2.1 Bluetooth Packet Types for BR/EDR
2.2.1.1 ACL Packets
The ACL packets are used for asymmetric links and they contain user data or control
data. The table and the figures below give an overview of the ACL packets and their
structure.
Table 2-2: ACL packet - basic rate
About the Bluetooth Options
About Bluetooth BR/EDR
Type Payload
Header (bytes)
DM1 1 0-17 2/3
DH1
DM3
DH3
DM5
DH5
AUX1 1 0-29
Figure 2-1: Packet structure of ACL packets - basic rate
Table 2-3: ACL packets - enhanced rate
Type Payload
2-DH1
2
Header (bytes)
User Payload
(bytes)
0-27 no
0-121 2/3
0-183 no
0-224 2/3
0-339 no
User Payload
(bytes)
0-54
FEC CRC Slot number
FEC CRC Slot number
Yes, 16-bit 3
no
1
5
1
2-DH3
2-DH5
3-DH1
3-DH3
2-DH5
2
0-367
0-679
0-83
0-552
0-1021
no Yes, 16-bit
3
5
1
3
5
13User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Figure 2-2: Packet structure of ACL packets - enhanced data rate
2.2.1.2 SCO and eSCO Packets
The SCO and eSCO packets are used for symmetric links. The SCO packets are used
for 64 kb/s speech transmission and for transparent synchronous data. The eSCO
packets are also used for 64kb/s speech transmission and transparent data at 64 kb/s
but also at other rates.
The tables and the figures below give an overview of the SCO and eSCO packets and
their structure.
Table 2-4: SCO packets
About the Bluetooth Options
About Bluetooth BR/EDR
Type Payload
Header (bytes)
HV1
HV2
HV3
DV 1 (data only) 10+(0-9) 2/3 (data only) Yes, 16-bit
Figure 2-3: Packet structure SCO packets
Figure 2-4: Packet structure SCO packets (data only)
Table 2-5: eSCO packets - basic rate
Type Payload
n.a.
Header (bytes)
User Payload
(bytes)
10 1/3
20
30
User Payload
(bytes)
FEC CRC Slot number
2/3
FEC CRC Slot number
no
(data only)
n.a.
EV3
EV4
EV5
n.a.
1-30 no
1-120 2/3
1-180 no
Yes, 16-bit
(Data only)
1
3
3
14User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Figure 2-5: Packet structure eSCO packets - basic rate
Table 2-6: eSCO packets - basic rate
About the Bluetooth Options
About Bluetooth BR/EDR
Type Payload
Header (bytes)
2-EV3
2-EV5
3-EV3
3-EV5
Figure 2-6: Packet structure eSCO packets - enhanced data rate
n.a.
User Payload
(bytes)
1-60
1-360
1-90
1-540
FEC CRC Slot number
no Yes,
16-bit
2.2.1.3 Link Control Packets for ACL, SCO, eSCO Transport Modes
There are some common kinds of packet types. An overview of these packet types is
given in the table below.
Table 2-7: Common link control packets
Transport modes Type Payload
Header
(bytes)
FEC CRC Application
1
3
1
3
SCO, eSCO, ACL ID
SCO, eSCO, ACL NULL
SCO, eSCO, ACL POLL
SCO, ACL FHS 18 2/3 Yes Page master response, inquiry
Table 2-8: Common link control packets: packet structure
Packet Type ID Packet Types NULL and PULL Packet Types FHS
n.a. n.a. n.a.
Paging, inquiry, response
Carries Link information to the source,
e.g. about successfully received signal
(ARQN) or the state of the receiving
buffer (FLOW)
Similar to NULL packet, used by master
to poll the slaves, must be confirmed
response, in roll switch
15User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
2.2.2 Bluetooth Transport Modes
There are three different transport modes defined in the Bluetooth core specification,
each of them with special applications:
●
●
●
There are some common transmitted packets used by all transport modes and some
specific packets defined for each transport mode.
2.2.3 Packet Structure and Fields
About the Bluetooth Options
About Bluetooth BR/EDR
Synchronous connection-oriented (SCO)
The SCO transport mode is used for a symmetric point-to-point link establishment
between a master and a specific slave in the piconet.
Extended synchronous connection-oriented (eSCO)
The eSCO transport mode is used for a symmetric or asymmetric, point-to-point
link establishment between the master and a specific slave.
Asynchronous connection less (ACL)
The ACL transport mode is used for a point-to-multipoint link establishment
between the master and all slaves participating on the piconet.
Almost all Bluetooth transmitted packets have standard format and consist of the
access code, the header and the payload with useful information. The exceptions are
the ID packet which consists of the access code only and NULL and POLL packets
which carry only the access code and the header.
2.2.3.1 Access Code
The access code is used for synchronization, DC offset compensation and identification. The fields of the access code are shown in the figure below and their meaning is
explained in the table below.
Table 2-9: The access code fields
Field Description Packets
Preamble A fixed zero-one pattern of 4 symbols, used to facili-
tate DC compensation
Sync word A 64-bit code word derived from a 24-bit address,
improves timing acquisition
Trailer A fixed zero-one pattern of four symbols, extended
DC compensation
All packets
All packets
All packets, except ID
2.2.3.2 Header
The header contains link control information. The fields of the header are shown in the
figure and their meaning is explained in the table below.
16User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Table 2-10: The header fields
Field Description Packets
About the Bluetooth Options
About Bluetooth BR/EDR
LT_ADDR Logical transport address, indicates the destination slave for a packet in a mas-
ter-to-slave transmission slot and the source slave for a slave-to-master transmission slot
TYPE Type code, specifies which packet type is used
FLOW Flow control, used for flow control of packets over the ACL logical transport.
When the RX buffer in the recipient is full, a STOP indication must be returned.
When the RX buffer can accept data, a "Go" indication must be returned.
ARQN Automatic repeat request number, acknowledgement indication, used to inform
the source of a successful transfer of payload data with CRC can be positive
acknowledged ACK or negative acknowledged NAK,
SEQN Sequential numbering scheme to order the data packet stream
HEC Header-error-check to check the header integrity
2.2.3.3 Payload Format
The payload structure depends on the type of the data field and the data rate. Two
fields are defined in the payload: the synchronous data field and the asynchronous
data field. The ACL packets only have the asynchronous data field and the SCO and
eSCO packets only have the synchronous data field. The exception is DV of SCO
transport mode which has both data fields, synchronous and asynchronous.
All packets,
except ID
Synchronous data fields
Asynchronous data fields
17User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Synchronous and asynchronous data fields
The meaning of some payload fields is given in the table below.
Table 2-11: The payload fields
Field Description
CRC The cyclic redundancy error check
Guard, sync The guard time and synchronization sequence, used for physical layer change of modula-
LLID The logical link identifier, specifies the logical link
About the Bluetooth Options
About Bluetooth BR/EDR
tion scheme
Flow Field which controls the flow on the logical channels
The payload format and content of the FHS packet are different from other packets.
The fields of the FHS packet are shown in the figure below and their meaning is
explained in the table below.
Table 2-12: The payload fields for the FHS packet
Field Description
Parity bits Form the first part of the sync word of the access code of the device that sends the FHS
packet
LAP Contains the lower address part of the device that sends the FHS packet
EIR An extended inquiry response, provides miscellaneous information during the inquiry
response procedure
Undefined Reserved for future use and must be set to zero
SR The scan repetition field, indicates the interval between two consecutive page scan win-
dows
Reserved Must be set to 10
UAP Contains the upper address part of the device that sends the FHS packet
NAP Contains the non–significant address part of the device that sends the FHS packet
Class of
device
LT_ADDR Contains the logical transport address
Contains the class of device of the device that sends the FHS packet. This field is defined
in Bluetooth assigned numbers.
18User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Field Description
CLK27-2 Contains the value of the native clock of the device that sends the FHS packet, sampled at
About the Bluetooth Options
About Bluetooth LE
the beginning of the transmission of the access code of this FHS packet
Page scan
mode
Indicates which scan mode is used by default by the sender of the FHS packet
2.2.4 Bluetooth Modulation Schemes
The modulation used for the basic data rate packets is GFSK (Gaussian Frequency
Shift Keying) with a bandwidth bit period product BT = 0.5. The modulation index is
between 0.28 and 0.35.
The modulation scheme used for enhanced data rate packets changes within the
packet. The access code and packet header have a GFSK modulation scheme and are
transmitted with the basic rate 1Mbps. The subsequent synchronization sequence,
payload and trailer sequence have a PSK type of modulation and are transmitted with
a data rate of 2 Mbps or optionally 3 Mbps.
The PSK modulation, namely π/4 rotated differential encoded quaternary phase shift
keying (π/4–DQPSK) is defined for the 2 Mbps transmission.
The PSK modulation, namely differential encoded 8-ary phase shift keying (8DPSK), is
defined for the 3Mbps transmission.
The modulation types and corresponding packet types are given in the table below.
Table 2-13: The modulation types and corresponding packet types
Modulation type Packet types
GFSK ID, NULL, POLL, FHS, DM1, DH1, DM3, DH3, DM5, DH5, AUX1, HV1, HV2, HV3,
DV, EV3, EV4, EV5
GFSK + π/4-DQPSK 2-DH1, 2-DH3, 2-DH5, 2-EV3, 2-EV5
GFSK + 8DPSK 3-DH1, 3-DH3, 3-DH5, 3-EV3, 3-EV5
2.3 About Bluetooth LE
The R&S SMM100A provides you with the ability to generate signals in accordance
with the Low Energy (LE) specification for Bluetooth wireless technology.
Bluetooth LE provides data transfer from low-power devices running on the smallest of
batteries to a larger device, such as a PC, a mobile phone, or a PDA. Bluetooth LE
establishes a connection, e.g. to a wristwatch, a heart rate sensor, or a data transfer
from a digital camera. The generated packets do not support audio content.
A time division duplex (TDD) scheme for duplex transmission is defined. The frequency
band defined for Bluetooth devices is the unlicensed 2.4 GHz "Industrial, Scientific and
Medical" (ISM) frequency band.
19User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Table 2-14: Operating band
Regulatory range RF channels k and center frequencies f
2400.0 MHz to 2483.5 MHz k = 0 to 39, f = k * 2 MHz + 2402 MHz
Table 2-15: Channel index
RF channel RF center frequency in MHz Data channel index Advertising channel index
0 2402 - 37
1 to 11 2404 to 2424 0 to 10 -
12 2426 - 38
13 to 38 2428 to 2478 11 to 36 -
39 2480 - 39
About the Bluetooth Options
About Bluetooth LE
Figure 2-7: RF channels
red = advertising channels (primary)
blue = data channels and secondary advertising channels
The core specification of Bluetooth wireless technology defines the limits of output
power level at the maximum power setting. The minimum output power is limited to -20
dBm. The maximum output power for LE is limited to 10 dBm.
The maximum output power for LE is limited to 20 dBm.
The following sections describe signal characteristics in detail:
● Packet Formats for LE............................................................................................ 20
● Packet Types for LE................................................................................................22
● Packet Structure and Fields....................................................................................23
● Modulation Scheme................................................................................................ 26
● Direction Finding..................................................................................................... 27
2.3.1 Packet Formats for LE
Packet formats for LE uncoded PHY
The following packet format is defined for the LE uncoded PHYs and is used for both
advertising channel packets and data channel packets.
Figure 2-8: LE uncoded PHY packet format
CTEPreamble Access Address PDU CRC
20User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Each packet consists of four mandatory fields: preamble, access address, PDU, and
CRC. For Bluetooth Direction Finding, the optional field Constant Tone Extension
(CTE) is added at the end.
Table 2-16: Packet format for LE uncoded PHY
Physical layer Preamble Access address PDU CRC CTE
LE 1 Msymbol/s 1 octet 4 octets 2 to 257 octets 3 octets 16 µs to 160 µs
LE 2 Msymbol/s 2 octets 4 octets 2 to 257 octets 3 octets 16 µs to 160 µs
The preamble is transmitted first, followed by the access address, followed by the PDU
followed by the CRC and optionally followed by CTE. The entire packet is transmitted
at the same symbol rate. Option R&S SMM-K60 supports LE uncoded 1 Msymbol/s
(LE 1M) physical layer (PHY).
Option R&S SMM-K117 supports optional modulation scheme LE uncoded 2
Msymbol/s (LE 2M) PHY.
Packets take between 44 µs and 2120 µs to transmit. The period extends by an additional 16 µs to 160 µs, if CTE is active.
About the Bluetooth Options
About Bluetooth LE
Packet formats for LE coded PHY
The following packet format is defined for the LE coded PHY and is used for both
advertising channel packets and data channel packets.
S = 8 coding S = 2 or 8
Preamble
Access address CI PDUTERM1 TERM2CRC
FEC block 1 FEC block 2
Figure 2-9: LE coded PHY packet format
Each packet consists of the preamble, FEC block 1, and FEC block 2. The preamble is
not coded. The FEC block 1 consists of three fields: access address, coding indicator
(CI), and TERM1. These fields use the S=8 coding scheme. The CI field determines
which coding scheme is used for FEC block 2. The FEC block 2 consists of three
fields: PDU, CRC, and TERM2. These fields use either the S=2 or S=8 coding scheme,
depending on the value of the CI field.
The entire packet is transmitted with 1 Msymbol/s modulation. The following table captures the size and duration of the data packet fields.
Table 2-17: Packet format for LE coded PHY
Preamble
Access
address
CI TERM1 PDU CRC TERM2
Number of uncoded bits 80 32 2 3 16 - 2056 24 3
Duration in µs for S=8 coding 80 256 16 24 128 - 16448 192 24
Duration in µs for S=2 coding 80 256 16 24 32 - 4112 48 6
21User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Packets take between 462 and 17040 μs to transmit.
2.3.2 Packet Types for LE
Test packet types
The test packet PDU is subdivided into a PDU header and the payload field. The PDU
header indicates the payload content type and the payload length expresses in octets.
RFU field means reserved for future use.
LSB
About the Bluetooth Options
About Bluetooth LE
PDU
MSB
Header
2 octets
PDU type
4 bits
RFU
4 bits
Payload
0-255 octets
Length
8 bits
LE test packets are described in the "Air Interface Packets" section of core specification for Bluetooth wireless technology, volume 6, part B.
Advertising channel packet types
The advertising channel PDU has a 16-bit header and a variable size payload. The
header fields of the advertising channel PDU are as shown in "Header" on page 23.
Table 2-18: Advertising packet types:
ADV_IND
ADV_DIRECT_IND SCAN_RSP
ADV_NONCONN_IND CONNECT_IND
ADV_SCAN_IND
Table 2-19: Additional advertising packet types within R&S SMM-K117:
ADV_EXT_IND
SCAN_REQ
AUX_SCAN_REQ
AUX_ADV_IND AUX_SCAN_RSP
AUX_CHAIN_IND AUX_CONNECT_REQ
AUX_SYNC_IND AUX_CONNECT_RSP
Data channel packet types
The data channel PDU has a 16-bit header, a variable size payload, and can include a
message integrity check (MIC) field as shown in "Header" on page 26.
The MIC field is not included in an unencrypted link layer (LL) connection, or in an
encrypted LL connection with a data channel PDU with a zero length payload. The MIC
22User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
field is included in an encrypted LL connection, with a data channel PDU with a nonzero length payload. The MIC calculation is specified in the section 1 of core specification for Bluetooth wireless technology, volume 6, part E.
Besides the data packet type, instrument supports the following CONTROL_DATA
packet types.
Table 2-20: Control data packet types
About the Bluetooth Options
About Bluetooth LE
Opcode CONTROL_DATA
0x00 LL_CONNECTION_UPDATE_IND
0x01 LL_CHANNEL_MAP_IND
0x02 LL_TERMINATE_IND
0x03 LL_ENC_REQ
0x04 LL_ENC_RSP
0x05 LL_START_ENC_REQ
0x06 LL_START_ENC_RSP
Table 2-21: Additional control data packet types within R&S SMM-K117:
Opcode CONTROL_DATA
0x0E LL_SLAVE_FEAT_REQ
0x0F LL_CONNECTION_PARAM_REQ
0x10 LL_CONNECTION_PARAM_RSP
0x11 LL_REJECT_EXT_IND
0x12 LL_PING_REQ
0x13 LL_PING_RSP
Opcode CONTROL_DATA
0x07 LL_UNKNOWN_RSP
0x08 LL_FEATURE_REQ
0x09 LL_FEATURE_RSP
0x0A LL_PAUSE_ENC_REQ
0x0B LL_PAUSE_ENC_RSP
0x0C LL_VERSION_IND
0x0D LL_REJECT_IND
Opcode CONTROL_DATA
0x14 LL_LENGTH_REQ
0x15 LL_LENGTH__RSP
0x16 LL_PHY_REQ
0x17 LL_PHY_RSP
0x18 LL_PHY UPDATE_IND
0x19 LL_MIN_USED_CHANNELS_IND
2.3.3 Packet Structure and Fields
2.3.3.1 Advertising Channel Packet Structure
Header
LSB
Header
2 octets
PDU type
4 bits
RFU
1 bit
ChSel
1bit
TxAdd
1 bit
PDU
Payload
1-255 octets
RxAdd
1 bit
MSB
Length
8 bits
23User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
●
Table 2-22: PDU type vs. PHYs
About the Bluetooth Options
About Bluetooth LE
The possible PDU types, indicated in the header of advertising channel PDU, are
listed in the previous tables, see Table 2-18.
The following table shows which channels are supported by which PHYs.
PDU
type
0000b ADV_IND Primary advertising x - -
0001b ADV_DIRECT_IND Primary advertising x - -
0010b ADV_NONCONN_IND Primary advertising x - -
0011b SCAN_REQ Primary advertising x - -
0100b SCAN_RSP Primary advertising x - -
0101b CONNECT_IND Primary advertising x - -
0110b ADV_SCAN_IND Primary advertising x - -
0111b ADV_EXT_IND Primary advertising x - x
PDU name Channel Permitted PHY
LE 1M LE 2M LE
AUX_SCAN_REQ Secondary advertising x x x
AUX_CONNECT_REQ Secondary advertising x x x
AUX_ADV_IND Secondary advertising x x x
AUX_SCAN_RSP Secondary advertising x x x
AUX_SYNC_IND Secondary advertising x x x
AUX_CHAIN_IND Secondary advertising x x x
coded
1000b AUX_CONNECT_RSP Secondary advertising x x x
Others Reserved for future use
x marks supported PHYs
●
The ChSel, TxAdd and RxAdd fields contain information specific to the PDU type.
If the ChSel, TxAdd or RxAdd fields are not defined as used in a given PDU then
they are considered Reserved for Future Use.
●
The Length field indicates the payload field length in octets.
Payload
The advertising channel PDU types can be divided into the following three groups.
24User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Table 2-23: Advertising channel PDU types
About the Bluetooth Options
About Bluetooth LE
Advertising
PDUs
Scanning PDUs SCAN_REQ, SCAN_RSP
Initiating PDUs CONNECT_IND
ADV_IND, ADV_DIRECT_IND, ADV_NONCONN_IND, ADV_SCAN_IND
within R&S SMM-K117 also ADV_EXT_IND, AUX_ADV_IND, AUX_SYNC_IND,
AUX_CHAIN_IND
within R&S SMM-K117 also AUX_SCAN_REQ, AUX_SCAN_RSP
within R&S SMM-K117 also AUX_CONNECT_REQ, AUX_CONNECT_RSP
The following parameters are transmitted in the advertising PDU:
●
AdvA, AdvData for ADV_IND, ADV_NONCONN_IND and ADV_SCAN_IND
●
AdvA, TargetA (formerly InitA) for ADV_DIRECT_IND
●
Extended header length, AdvMode, extended header, AdvData for
ADV_EXT_IND, AUX_ADV_IND, AUX_SYNC_IND and AUX_CHAN_IND
Extended header contains
– AdvA, TargetA, ADI, AuxPtr, Sync Info, Tx power, ACAD, and AdvData
fields
The following parameters are transmitted in the scanning PDU:
●
ScanA, AdvA for SCAN_REQ
Within R&S SMM-K117 also for AUX_SCAN_REQ
●
AdvA, ScanRspData for SCAN_RSP
●
Extended header length, AdvMode, extended header, AdvData for
AUX_SCAN_RSP
Extended header contains
– AdvA, TargetA, ADI, AuxPtr, Sync Info, Tx power, ACAD, and AdvData
fields
The following parameters are transmitted in the initiating PDU:
●
InitA, AdvA, LLData for CONNECT_IND
Within R&S SMM-K117 also for AUX_CONNECT_REQ
LLData contains
– AA, CRCinit, WinSize, WinOffset, Interval, Latency, Timeout, ChM, Hop,
and SCA fields
●
Extended header length, AdvMode, extended header, AdvData for AUX_CONNECT_RSP
Extended header contains
– AdvA, TargetA, ADI, AuxPtr, Sync Info, Tx power, ACAD, and AdvData
fields
For more details, refer to in the section 2.3 Advertising Channel PDU of core specification for Bluetooth wireless technology, volume 6, part B.
25User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
2.3.3.2 Data Channel Packet Structure
Header
LSB
About the Bluetooth Options
About Bluetooth LE
PDU
MSB
Header
2 octets
LLID
2 bits
The 16-bit header field consists of five fields:
●
The LLID field of the header specifies the payload format , refer to "Payload"
on page 26.
●
The NESN bit indicates a nextExpectedSeqNum used by the peer to acknowledge
the last PDU sent, or to request resending.
●
The SN bit indicates a transmitSeqNum to identify packets sent by the link layer.
●
The MD bit indicates, whether the device has more data to send.
●
The Length field indicates the length of the payload and MIC if included.
Payload
●
An LL data PDU is used to send L2CAP data. The LLID field is set to either 01b or
10b.
– For the LLID field set to 01b, the LL data PDU is a continuation fragment of an
– For the LLID field set to 10b, the LL data PDU is a start of an L2CAP message
●
An LL control PDU is used to control the LL connection. The payload consists of
Opcode and CtrData fields. All LL control PDUs have a fixed length, depending on
the Opcode. The Opcode field identifies different types of LL Opcode PDU, see
Table 2-20.
NESN
1 bit
L2CAP message, or an empty PDU.
The master’s LL sends an empty PDU to the slave to allow the slave to
respond with any data channel PDU, including an empty PDU.
or a complete L2CAP message with no fragmentation.
1 bit
Payload
0-251 octets
SN
MD
1 bit
RFU
3 bits
MIC
4 octets
Length
8 bits
For more details, refer to in the section 2.4 Data Channel PDU of core specification for
Bluetooth wireless technology, volume 6, part B.
2.3.4 Modulation Scheme
The modulation is Gaussian frequency shift keying (GFSK) with a bandwidth bit period
product BT = 0.5. The modulation index has to be between 0.45 and 0.55. The mandatory modulation scheme is 1 Msymbol/s modulation. It uses a shaped, binary FM to
minimize transceiver complexity.
26User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Option R&S SMM-K60 supports LE uncoded 1 Msymbol/s (LE 1M) physical layer
(PHY).
Option R&S SMM-K117 supports LE coded 1 Msymbol/s PHY and optional modulation
scheme LE uncoded 2 Msymbol/s (LE 2M) PHY.
2.3.5 Direction Finding
Since Bluetooth version 5.1, a Bluetooth LE device can transmit its direction information to a Bluetooth receiver. The information is transmitted in direction finding enabled
packets in the LE uncoded PHY. In combination with location information sent on profile-level, the Bluetooth LE receiver can calculate its position.
Angle of Arrival (AoA) method
A Bluetooth LE transmitter sends direction finding enabled packets using a single
antenna. A receiving Bluetooth LE peer device consists of an antenna array linked to
an RF switch which forwards the combined antennae signal to a Bluetooth LE receiver.
About the Bluetooth Options
About Bluetooth LE
The peer device switches its antennae while receiving parts of the packets and capturing I/Q samples. The I/Q samples are used to calculate the phase difference of the
radio signal received by different antennae of the array. For an array of two antennae
with distance d, frequency f of the radio signal and speed of light c, the phase difference ψ calculates as follows:
ψ = 2πd * cos(Θ) * f / c
The angle of arrival Θ is calculated as follows:
Θ = arccos((ψ * c) / (2πd * f))
Figure 2-10: Angle of Arrival method
27User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
Angle of Departure (AoD) method
A Bluetooth LE transmitter sends direction finding enabled packets using an antenna
array. A receiving Bluetooth LE device, consisting of a single antenna, captures I/Q
samples and the geometry of the antenna array from profile-level information.
For an array with two antennae with distance d, frequency f of the radio signal and
speed of light c, the phase difference ψ calculates as follows:
ψ = 2πd * cos(Θ) * f / c
The angle of departure Θ is calculated as follows:
Θ = arccos((ψ * c) / (2πd * f))
About the Bluetooth Options
About Bluetooth LE
Figure 2-11: Angle of Departure method
The geometry of the antenna array is information that is shared between Bluetooth LE
transmitter and receiver on a profile-level. The antenna switching pattern and the
method of angle estimation is specified by Constant Tone Extension.
For more information, refer to section 8 Direction Finding Using Bluetooth Low Energy
of core specification for Bluetooth wireless technology, volume 1, part A.
Constant tone extension
To transmit direction finding information in packets in the Bluetooth LE Uncoded PHYs,
the link layer packet format is extended by an optional field Constant Tone Extension
(CTE) as illustrated in Figure 2-8. The field has a length between 16 µs and 160 µs
and consists of a constantly modulated series of unwhitened 1s. This modulation
results in a CW tone shifted by 250 kHz (LE1M) or 500 kHz (LE2M) from the LE channel center frequency.
28User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
The presence, type and length of CTE is specified in the CTEInfo field available for
ADV_SYNC_IND and ADV_CHAIN_IND PDUs.
CTETime RFU CTEType
Figure 2-12: CTEInfo field
The parts of the CTEInfo field are described in the table below. CTEType specifies, if
AoA or AoD method is used for direction finding.
CTEInfo field Length Value Description
CTETime 5 bit 2 to 20 CTE length = 8 µs * Value
RFU 1 bit 1 to 2 Reserved for future use
CTEType 2 bit 0 AoA Constant tone extension
About the Bluetooth Options
About Bluetooth LE
CTEInfo (8 bit)
Other values are reserved for future use.
1 AoD Constant tone extension with 1 µs slots
2 AoD Constant tone extension with 2 µs slots
3 Reserved for future use
If Bluetooth LE devices support AoA/AoD CTE, the antennae within the array follow a
switching pattern specified by the Host. After a guard and reference period, time slots
of 1 µs or 2 µs provide periods for antenna switching and I/Q sampling.
The following figure illustrates the CTE structure for AoA method. On the transmitting
side, there is no antenna switching. On the receiving side, antenna switching and I/Q
sampling alternate in the time slots after the guard and reference period.
29User Manual 1179.2054.02 ─ 02
R&S®SMM-K60/-K117
About the Bluetooth Options
About Bluetooth LE
Figure 2-13: CTE structure for AoA method
The following figure illustrates the CTE structure for AoD method. On the transmitting
side, antenna switching and I/Q sampling alternate in the time slots after the guard and
reference period. On the receiving side, I/Q sampling only is performed in every second time slot after the guard and reference period.
30User Manual 1179.2054.02 ─ 02
Loading...