Nemo Walker Air · • Layer 3 decoding (requires an option, see a list of options at the end of this document) ... • SIB decoding GSM Frequency scanning parameters ... • Cell

Page 1Find us at www.keysight.com

D ATA S H E E T

Nemo Walker AirPCTEL IBflex Scanner

When Nemo Walker Air from Keysight Technologies, Inc. is used together

with a frequence scanner, such as PCTEL IBflex, you can perform GSM,

WCDMA, CDMA, EVDO, LTE TOP-N, and 5G NR scanning, in addition to RSSI

measurements over various bandwidths.

Supported Bands• GSM 850, E900, 1800, 1900 MHz

• WCDMA 850, 900, 1700, 1800, 1900, 2100 AWS, 2600 MHz

• CDMA 450 MHz (band class 5), 800 MHz (band class 0, 10), 900 MHz (SMR) (band class 9), 1900 MHz (band class 1), AWS (band class 15)

• EVDO 450, 800, 1900 MHz

• TD-SCDMA band 34 (2010-2025 MHz)

• LTE FDD bands E-UTRA bands 1-8, 10-14, 17-21, 23-32, 65-68, 70, 71, 252, 255

• LTE TDD bands: E-UTRA bands 33-46, 48

• WIFI bands: 2.4-2.483 and 5.15-5.85 GHz

• 5G NR:

- Sub 6 GHz bands: n1-3, n5, n12, n25, n28, n38, n41, n66, n71, n75, n77-79


5G NRFrequency scanning options• Channel style (BW):

- NR bands 1-3, 5, 12, 25, 28, 38, 41, 66, 71 = 5 kHz

- NR bands 75, 77, 78, 79 = 15 kHz

• Scanner averaging (1:1, 1:2, 1:4, 1:8, 1:16)

Pilot scanning parameters • Signal type

• Band

• NR ARFCN

• PCI (NR physical cell identity 0-1007)

• BI (NR beam index 0-63)

• SCS (NR subcarrier spacing 15 kHz- 240 kHz)

• Cyclic prefix (Normal/ Extended)

• SSS (Secondary Synchronization Signal)

- SS-RSRP (dBm)

- SS-RSRQ (dB)

- SS-SINR (dB)

• PSS (Primary Synchronization Signal)

- PS-RSRP (dBm)

- PS-RSRQ (dB)

• PBCH-DM (Demodulation Reference Signal of PBCH)

- PBCH DM-RP (dBm)

- PBCH DM-RQ (dB)

- PBCH DM-SINR (dB)

• SSB (Synchronization Signal Block)

- SSB-RP (dBm)

- SSB-RQ (dB)

- SSB-SINR (dBm)

LTEMeasurement modes• Frequency and pilot scanning

Frequency scanning parameters• Channel number

• Carrier RSSI

Frequency scanning options• Channel style (BW): 200 kHz (Narrow); 1.4 (1.08), 3

(2.7), 5 (4.5), 10 (9), 15 (13.5), 20 (18) MHz (Wide)


Pilot scanning parameters (synchronization channel)• Channel number

• Physical cell ID (PCI)

• P-SCH and S-SCH RP

• P-SCH and S-SCH RQ

• CINR

• Cyclic prefix (CP)

• Time offset

Pilot scanning parameters (reference signal)• Channel number

• Carrier RSSI

• PCI

• RSRP

• RSRQ

• RS CINR

• RS cyclic prefix

• RSRP, RSRQ, and CINR per antenna port

• Time offset

• System Information Block 1 message (SIB1)

• Master Information Block message (MIB)

• MIMO specific parameters

- MIMO mode


- RSRP, RSRQ, and CINR per antenna port combination

- 2x2 MIMO condition number

- Single layer open loop CQI

- Single layer open loop throughput (bit/s)

- Single layer closed-loop CQI

- Single layer closed-loop throughput (bit/s)

- Dual layer open-loop CQI 0

- Dual layer open-loop throughput 0 (bit/s)

- Dual layer open-loop CQI 1

- Dual layer open-loop throughput 1

- Dual layer closed-loop SM CQI 0

- Dual layer closed-loop throughput 0 (bit/s)

- Dual layer closed-loop SM CQI 1

- Dual layer closed-loop throughput 1 (bit/s)

Pilot scanning options• Channel style (BW): 1.4 (1.08), 3 (2.7), 5 (4.5), 10

(9), 15 (13.5), 20 (18) MHz (Wide)

• Cyclic prefix (auto detect, normal, extended)

• Data processing method (peak, aggregate)

• Sampling ratio (1:1, 1:2, 1:4, 1.8)


• RSSI threshold

• Top-N number of carriers (1-24)

• Top-N number of cells (PCIs) (1-16)

• CINR

• Time offset

• Sync signal

• Reference signal

• MIMO

• Layer 3 decoding (requires an option, see a list of options at the end of this document)

eMBMS measurements• MBSFN Area ID

• PMCH channel number

• PMCH RSRP

• PMCH RSRQ

• PMCH CINR

• PMCH RSSI

NB-IoTMeasurement modes• Top-N Narrowband RS

• Narrowband PSS

• Narrowband SSS

NB-IoT parameters• RS: NRS_RP, NRS_RQ, NRS_CINR,

• PSS: NPSS_RP, NPSS_RQ, NPSS_CINR

• SSS: NSSS_RP, NSSS_RQ, NSSS_CINR

• Time offset

Operation modes• In-band

• Guard band

• Stand-alone

Channel bandwidth• 180 kHz

Max number of PCIs• 16

WCDMAMeasurement modes• Frequency and pilot scanning

Frequency scanning parameters• Channel number

• Carrier RSSI

Frequency scanning options• Channel style WCDMA 200/3840 kHz (CW/Wide)



Pilot scanning parameters (synchronization channel)• P-SCH Ec/N0

• P-SCH RSCP

• S-SCH Ec/N0

• S-SCH RSCP

Pilot scanning parameters (Top-N)• Channel number

• RSSI

• CPICH scrambling code (SC)

• CPICH Ec/N0

• CPICH RSCP

• CPICH SIR

• CPICH delay spread

• CPICH time of arrival (TOA)

• SIB decoding

Pilot scanning options (Top-N)• CPICH Ec/N0 Threshold

• Data processing method (peak, aggregated)

• Pilot measurement mode

- High speed: enables maximum CPICH pilot measurements per second

- High dynamic: enables extended CPICH Ec/I0 measurement range

• Sampling ratio configuration (1:1, 1:2, 1:4, 1:8)


• WCDMA carriers (1-24)

• Top-N scanning (1-32 pilots)

• Pilot time of arrival measurements

• Pilot delay spread measurements

• CPICH SIR

• P-SCH measurements

• S-SCH measurements

• SIB decoding

GSMFrequency scanning parameters• Channel number

• RSSI

• BSIC

• Cell info decoding

- Enables the decoding of BCCH Type 3 message, including Cell ID, MCC, MNC, and LAC parameters for up to 512 channels simultaneously

- Decoding is supported on numerous user-selectable BCCH frequency channels

Frequency scanning options• Channel style (30 kHz/200 kHz)

• BSIC decoding

• BSIC threshold


• SI decoding

• Neighbor list decoding

CDMA/EVDOFrequency scanning parameters• Channel number

• Carrier RSSI

Frequency scanning options• Channels to be scanned

• Channel style (BW 30kHz, 1.25MHz)


PN scan general information (Top-N)• Measures and reports strongest PNs in

descending order up to 32 PNs

• Measures and reports up to 24 channels including both CDMA and EVDO

• Provides user-selectable peak/aggregate Ec/I0

• Measures and reports pilot delay and delay spread for each PN


• Multiple simultaneous Top-N PN scans supported

PN scan parameters (Top-N)• Channel number

• PN

• Delay spread

• Carrier RSSI (pilot mode)

• Ec/I0

• RSCP

PN scan options• Top-N number of pilots (1-32)

• Data processing method (peak, aggregated)

• Pilot window mode: offset, centered, edge



• Ec/I0 threshold

• Pilot increment

• Delay

Standard specification• Standards

- CDMA2000® 1xRTT

- CDMA EV-DO Revision A

TD-SCDMAPilot scanning parameters (PCCPCH)• Channel number

• PN

• Carrier RSSI

• Ec/I0

• RSCP

• SIR

• Time offset

Pilot scanning options• Top-N scanning (MAX 32 pilots)

• MAX 34 channels

• Measurement mode: peak/aggregate



• Time offset

• SyncDL

• SIR

WIFIWIFI scanning parameters• WLAN band

• Bandwidth

• Channel number

• WLAN protocol (e.g. 802.11a)

• BSSID (MAC address)

• SSID

• WLAN security mode (e.g. WEP)

• WLAN beacon interval

• RSSI

• Channel utilization

Additional FeaturesSpectrum analysis• User selectable parameters

- Start/stop frequency or center frequency and bandwidth

• Measurement rate (with one channel)

- 80 samples/s

- > 270 MHz/sec (with single sweep scan)

• Spectrum monitor accuracy

- ±0.05 ppm GPS locked and ±0.1 ppm GPS unlocked (ambient)

• Frequency range: 10 MHz to 6 GHz

• Sensitivity: –124 dBm

• Resolution bandwidth: automatically adjusted to the closest value of 5, 10, 20, 40, 80, 160, 200, 400, and 800 kHz

• Max. number of sample counts: 2560

• Measurement range


- > 90 dB

Scanner data averaging• Scanner calculates average results for all

parameters. Available options are 1:1, 1:2, 1:4, 1:8, and 1:16.

Band scan (blind scan)• Band scan feature supports the following

technologies: GSM, WCDMA, LTE, CDMA, EVDO, TD-SCDMA and WIFI

• GSM: Channel, RX level, MCC, MNC, Operator

• WCDMA, CDMA, EVDO, TD-SCDMA: Channel, SC/Pilot number, RX level, Ec/No, MCC, MNC, Operator, LAC, RSCP

• LTE: Channel, PCI, BW, RSSI, RSRP, RSRQ, MCC, MNC, Operator, TAC

• WIFI: Channel, RX level

WCDMA pilot pollution analysis• Pilots causing possible pilot pollution are shown in

real time

• The user can define the following thresholds: polluter level window from best active set cell (dB), Ec/N0 active set best below threshold (dB), RSCP active set best above threshold (dBm), and pilot count threshold

• WCDMA pilot pollution analysis parameters

• Source system

• Source band

• Source channel number

• Pilot pollution scr code

• Pilot pollution Ec/N0

• Pilot pollution Ec/N0

• Pilot pollution RSCP

GSM interference analysis• GSM co-channel and adjacent channel analysis

is done in real time during a measurement and playback with Nemo Outdoor.

• Interference detection is done based on GSM terminal and GSM scanner measurements and

these measurements are combined together

• GSM interference analysis parameters

- Cell type: serving, co-channel, adjacent channel

- Band

- BSIC

- RX level


Technical Performance

RF characteristics

Frequency Range 10 MHz – 6 GHz

Internally Generated Spurious Response

-110 dBm (typical)

Conducted Local Oscillator -75 dBm max

RF Operating Range In-band -15 dBm max

Desensitization Adjacent channel

Adjacent channel

Adjacent channel

>50 dB (CDMA/EV-DO)

>55 dB (All Other Technologies)

>65 dB

Safe RF Input Range ≤ 10 dBm

Frequency Accuracy ±0.05 ppm (GPS locked); ± 0.1 ppm (GPS unlocked)

Intermodulation-free Dynamic Range

2 tone (level 2) @ -40 dBm, 6 GHz, -68 dBc (Typical),

-12.6 dBm TOI; @ -25 dBm, 6 GHz, -70 dBc (Typical), 10 dBm TOI

Power measurements

Measurement Rate (max) LTE

NB-IoT

UMTS

GSM

CDMA and EV-DO

TD-SCDMA

11,050 ch/sec

4,250 ch/sec

4,250 ch/sec

4,250 ch/sec

8,500 ch/sec

4,250 ch/sec

Dynamic Range -120 to -20 dBm @ 30 kHz

Absolute Accuracy ±1 dB (across basic RF input power range)

ENHANCED POWER SCAN (EPS™) MEASUREMENTS

Channel Bandwidths 5 kHz to 20 MHz in 2.5 kHz increments

Measurement Rate 1,000 MHz/sec @ 5 MHz (Typical)

Absolute Accuracy ±1 dB (across basic RF input power range)


SPECTRUM ANALYSIS MEASUREMENTS

Measurement Range > 90 dB

Measurement Rate (Single Sweep)

> 270 MHz/sec

Accuracy ±1 dB (across basic RF input power range)

LTE POWER ANALYSIS MEASUREMENTS (Available for TD-LTE Only)

Channel Bandwidths 1.4 / 3 / 5 / 10 / 15 / 20 MHz

Measurement Rate 20 msec @ 5 MHz

Accuracy ±1 dB (across basic RF input power range)

5G NR characteristics

Measurement modes NR Top N Signal : Synchronization channels (P-SS/S-SS) & PBCH

Data modes PCI, PSS_RP [dBm] ,SSS_RP [dBm], PSS_RQ [dB] ,SSS_RQ [dB], SS_CINR [dB], RSPBCH_RP [dBm], RSPBCH_RQ [dB]. RSPBCH_CINR [dB], SSB_RP [dBm], SSB_RQ [dB], SSB_CINR [dB], SSB_idx

Sub carrier spacing 15/30/120/240 KHz

Max. number of channels 24

Measurement rate 5/sec

Dynamic range (CINR) PSS/SSS CINR

CINR

-10 to + 40 dB PBCH DMRS

-8 to + 40 dB

Min. Detection Level RP -135 dBm (SCS @15 KHz)

Relative Accuracy (CINR) PSS/SSS CINR ±2 dB


LTE characteristics (FDD and TD-LTE)

Measurement Modes Top N Synchronization Channel Reference Signal, (P-SCH/S-SCH),

and Resource Block (Wideband, Subband); Layer 3 Reporting;

Top N eMBMS Multicast Reference Signal; Unicast

Synchronization Channel Reference Signal and (P-SCH/S-SCH)

Data Modes RP, RQ, CINR, Cyclic Prex, Time Osets, Delay Spread;

MIMO: Condition Number, ECQI, EPUT

eMBMS: Area TD, Cluster ID, Frame Conguration

Channel Bandwidths 1.4 / 3 / 5 / 10 / 15 / 20 MHz

Max. Number of Channels 24 (16 for eMBMS)

Receive Modes SISO; MIMO (2x2, 4x2)

Transmit Antenna Congurations

1, 2, 4 (with path measurement)

Measurement Rates Sync channel RS

Multicast RS

LTE FDD: 50/sec; TD-LTE: 25/sec

eMBMS: 2/sec

Dynamic Range (CINR): @ 10 / 15 / 20 MHz

RS

P-SCH/S-SCH

Multicast RS

–26 to +40 dB

–10 to +18 dB

–9 to +30 dB

Min Detection Level RSRP -140 dBm (RSRP @ 15 MHz)

Relative Accuracy (CINR) P-SCH/S-SCH & RS ±1.0 dB


NB-IoT characteristics

Measurement Modes Top N NRS (Narrowband Reference Signal),

NPSS (Narrowband Primary Synchronization Signal), and

NSSS (Narrowband Secondary Synchronization Signal)

Data Modes NRS - RP, RQ, RSSI, CINR, Time Oset. NPSS - RP,

RQ, RSSI, CINR. NSSS - RP, RQ, RSSI, CINR, Time Oset

Operation Mode In-band, guard band, stand-alone

Channel Bandwidths 180 kHz

Measurement Rates 190 ms

Dynamic Range (CINR) NRS -10 to +40 dB

Min Detection Level NRS RP -138 dBm

Relative Accuracy (CINR) NRS ±2 dB

Max. Number of PCIs 16

WCDMA characteristics

Measurement Modes Top N Pilot, Layer 3 Reporting

Data Modes lo, Ec/Io, Aggregate Ec/Io, SIR, Rake Finger Count,

Time Offset, Delay Spread

Channel Bandwidths 200 kHz / 3.84 MHz

Max. Number of Channels 24

Measurement Rate 100/sec (High Speed Mode); 50/sec (High Dynamic Range Mode)

Top N CPICH Dynamic Range (Ec/Io)

-26 dB

Min Detection Level -120 dBm (High Dynamic Range Mode)

Relative Accuracy ±1 dB


GSM characteristics

Measurement Modes Color Code, Layer 3 Reporting

Data Modes BSIC, C/I, RSSI

Channel Bandwidths 30 kHz / 200 kHz

Measurement Rate up to 200 BSIC decodes/s

Dynamic Range +2 dB C/I

Min BSIC Detection Level

–110 dBm


CDMA and EV-DO characteristics

Measurement Modes Top N PN

Data Modes Ec, lo, Ec/Io, Aggregate Ec/Io, Pilot Delay, Delay Spread

Channel Bandwidths 30 kHz (Narrow/CW)

1.25 MHz (Wide)

Max. Number of Channels 24

Measurement Rate CDMA: 25/sec; EV-DO: 18/sec

Top N PN Dynamic Range, Ec/Io CDMA: -28 dB; EV-DO: -18.5 dBm

Min. PN Detection Level CDMA: -130 dBm; EV-DO: -120 dBm


WiFi characteristics

Radio Configuration 802.11a/b/g/n, 802.11a/b/g/n/ac

Data Modes Signal Strength, Noise Level, SNR, Channel Number, Channel

Bandwidth, BSSID, Device Name, SSID, Security Protocol,

802.11 Media, Beacon Interval, Channel Utilization, Throughput

Frequency Range 2.4 – 2.483 GHz; 5.15 – 5.85 GHz (subject to country regulations)

Measurement Rates 9/sec (Typical); 5/sec (Typical) for 802.11ac

Page 12This information is subject to change without notice. © Keysight Technologies, 2018-2019, Published in USA, June 19, 2019, 5992-2025EN

Find us at www.keysight.com

Learn more at: www.keysight.com

For more information on Keysight Technologies’ products, applications or services,

please contact your local Keysight office. The complete list is available at:

www.keysight.com/find/contactus

Physical characteristics

Temperature range Operating: 0°C to +50°C; Storage: -40°C to +85°C

Size Without Battery Pack

With Battery Pack

7.6” D x 4.4” W x 1.55” H (192 mm D x 111.8 mm W x 39.4 mm H) 10.1” D x 4.4” W x 2.1” H (257.6 mm D x 111.8 mm W x 53.1 mm H)

Weight Without Batteries

With Batteries

2.4 lb (1.1 kg)

3.8 lb (1.7 kg)

Maximum Power +8 to +16 VDC 18W; Power Save: 10W

Safety (CE) EN 60950 -1

EMC EN 301 489 -1

Shock and Vibration MIL-STD-810G, SAE J1455

RoHS Compliant (6/6)

GPS Type 56 Channel Internal Receiver

Position Accuracy ±2.5 meters

Acquisition Time Cold Start: <30 sec; Hot Start: <2 sec

Sensitivity (Tracking) >-150 dBm

Documents

Nemo Walker Air · • Layer 3 decoding (requires an option, see a list of options at the end of this document) ... • SIB decoding GSM Frequency scanning parameters ... • Cell