某地插入A运营商的卡有信号有时有数据业务上下箭头但是无法上网。插入其他运营商的卡正常。A运营商的卡插入其他型号手机可以正常上网。从日志看看有非常频繁的信号陡降现象。经常从-90多db降到-130到-140db。RLF radio link failure频繁终端侧经常发送 RRCConnectionReestablishementRequest消息。猜测是终端的射频参数损坏。将之前备份的射频参数重新导入终端仍然无效。重新分析信号陡降之前的RRC消息和正常日志进行对比。比如00:80:20.110时刻某次信号陡降后RRC链路重建成功。但是马上00:08:20.196655上报的信号RSRP又降到-130以下00:08:20.196655[0xB193]LTE ML1 Serving Cell Meas Response SubPackets[0]{SubPacket ID25Serving Cell Measurement Result{Version26{E-ARFCN1279Num of Cell1Valid RxRX0_RX1 Logical to Phy Rx Map{0,1}Cells[0]{Physical Cell ID275Serving Cell IndexPCell Inst RSRP Rx[0]-133.69dBm Inst RSRP Rx[1]-131.94dBm这个时间是非常的短的期间网络只有00:08:20.151043向终端发送了 RRCConnectionReconfiguration重点分析这个消息。扫到carrierFreq 39350的measObject 有点疑惑因为整个log中终端没有在TDD band40频点驻留过只在band13828驻留过。重点再看radioResourceConfigDedicated 字段中配置了什么。果真radioResourceConfigDedicated 字段中出现了sCellToAddModList给终端分配了39350的辅载波触发了CA载波聚合。00:08:20.151043[0xB0C0]DL_DCCH/RRCConnectionReconfiguration Radio Bearer ID1,Physical Cell ID275Freq1279value DL-DCCH-Message::{message c1:rrcConnectionReconfiguration:{rrc-TransactionIdentifier0,criticalExtensions c1:rrcConnectionReconfiguration-r8:{measConfig{measObjectToRemoveList{1,2,1,2,1,2},measObjectToAddModList{{measObjectId1,measObject measObjectEUTRA:{carrierFreq1279,allowedMeasBandwidth mbw6,presenceAntennaPort1 TRUE,neighCellConfig10B,cellsToAddModList{{cellIndex1,physCellId9,cellIndividualOffset dB-2},{cellIndex2,physCellId205,cellIndividualOffset dB-1},{cellIndex3,physCellId266,cellIndividualOffset dB-1},{cellIndex4,physCellId267,cellIndividualOffset dB-1},{cellIndex5,physCellId274,cellIndividualOffset dB-1},{cellIndex6,physCellId295,cellIndividualOffset dB-3},{cellIndex7,physCellId389,cellIndividualOffset dB-2}}}},{measObjectId2,measObject measObjectEUTRA:{carrierFreq39350,allowedMeasBandwidth mbw6,presenceAntennaPort1 FALSE,neighCellConfig10B,measCycleSCell-r10 sf160}}},reportConfigToRemoveList{1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9},reportConfigToAddModList{{reportConfigId1,reportConfig reportConfigEUTRA:{triggerType event:{eventId eventA3:{a3-Offset6,reportOnLeave FALSE},hysteresis2,timeToTrigger ms320},triggerQuantity rsrp,reportQuantity both,maxReportCells4,reportInterval ms480,reportAmount infinity}},{reportConfigId2,reportConfig reportConfigEUTRA:{triggerType event:{eventId eventA2:{a2-Threshold threshold-RSRP:26},hysteresis2,timeToTrigger ms480},triggerQuantity rsrp,reportQuantity both,maxReportCells1,reportInterval ms5120,reportAmount infinity}},{reportConfigId3,reportConfig reportConfigEUTRA:{triggerType event:{eventId eventA2:{a2-Threshold threshold-RSRQ:7},hysteresis3,timeToTrigger ms1024},triggerQuantity rsrq,reportQuantity both,maxReportCells1,reportInterval ms5120,reportAmount infinity}},{reportConfigId4,reportConfig reportConfigEUTRA:{triggerType event:{eventId eventA2:{a2-Threshold threshold-RSRP:10},hysteresis2,timeToTrigger ms640},triggerQuantity rsrp,reportQuantity both,maxReportCells1,reportInterval ms480,reportAmount infinity}},{reportConfigId5,reportConfig reportConfigEUTRA:{triggerType event:{eventId eventA1:{a1-Threshold threshold-RSRP:10},hysteresis2,timeToTrigger ms640},triggerQuantity rsrp,reportQuantity both,maxReportCells1,reportInterval ms480,reportAmount infinity}},{reportConfigId6,reportConfig reportConfigEUTRA:{triggerType event:{eventId eventA6-r10:{a6-Offset-r106,a6-ReportOnLeave-r10 FALSE},hysteresis2,timeToTrigger ms640},triggerQuantity rsrp,reportQuantity both,maxReportCells4,reportInterval ms480,reportAmount infinity}}},measIdToRemoveList{1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9,1,2,3,4,5,6,7,8,9},measIdToAddModList{{measId1,measObjectId1,reportConfigId1},{measId2,measObjectId1,reportConfigId2},{measId3,measObjectId1,reportConfigId3},{measId4,measObjectId2,reportConfigId4},{measId5,measObjectId2,reportConfigId5},{measId6,measObjectId2,reportConfigId6}},quantityConfig{quantityConfigUTRA{measQuantityUTRA-FDD cpich-EcN0,measQuantityUTRA-TDD pccpch-RSCP},quantityConfigUTRA-v1020{}},speedStatePars release:NULL},radioResourceConfigDedicated{mac-MainConfig explicitValue:{drx-Config release:NULL,timeAlignmentTimerDedicated infinity,phr-Config setup:{periodicPHR-Timer sf200,prohibitPHR-Timer sf200,dl-PathlossChange dB3},mac-MainConfig-v1020{}},physicalConfigDedicated{pdsch-ConfigDedicated{p-a dB-3},soundingRS-UL-ConfigDedicated release:NULL,antennaInfo explicitValue:{transmissionMode tm4,codebookSubsetRestriction n4TxAntenna-tm4:0000000000000000000000000000000011111111111111111111111111111111B,ue-TransmitAntennaSelection release:NULL},schedulingRequestConfig setup:{sr-PUCCH-ResourceIndex92,sr-ConfigIndex8,dsr-TransMax n64},cqi-ReportConfig-r10{cqi-ReportAperiodic-r10 setup:{cqi-ReportModeAperiodic-r10 rm31,aperiodicCSI-Trigger-r10{trigger1-r1001000000B,trigger2-r1011000000B}},nomPDSCH-RS-EPRE-Offset0,cqi-ReportPeriodic-r10 setup:{cqi-PUCCH-ResourceIndex-r1012,cqi-pmi-ConfigIndex122,cqi-FormatIndicatorPeriodic-r10 widebandCQI-r10:{},ri-ConfigIndex322,simultaneousAckNackAndCQI FALSE,csi-ConfigIndex-r10 release:NULL},csi-SubframePatternConfig-r10 release:NULL},pucch-ConfigDedicated-v1020{pucch-Format-r10 channelSelection-r10:{n1PUCCH-AN-CS-r10 setup:{n1PUCCH-AN-CS-List-r10{{0,2,4,6},{1,3,5,7}}}}}}},nonCriticalExtension{nonCriticalExtension{nonCriticalExtension{sCellToAddModList-r10{{sCellIndex-r101,cellIdentification-r10{physCellId-r10275,dl-CarrierFreq-r1039350},radioResourceConfigCommonSCell-r10{nonUL-Configuration-r10{dl-Bandwidth-r10 n100,antennaInfoCommon-r10{antennaPortsCount an2},phich-Config-r10{phich-Duration normal,phich-Resource one},pdsch-ConfigCommon-r10{referenceSignalPower18,p-b1},tdd-Config-r10{subframeAssignment sa2,specialSubframePatterns ssp7}}},radioResourceConfigDedicatedSCell-r10{physicalConfigDedicatedSCell-r10{nonUL-Configuration-r10{antennaInfo-r10{transmissionMode-r10 tm3,codebookSubsetRestriction-r1011B,ue-TransmitAntennaSelection release:NULL},pdsch-ConfigDedicated-r10{p-a dB-3}},ul-Configuration-r10{cqi-ReportConfigSCell-r10{cqi-ReportModeAperiodic-r10 rm30,nomPDSCH-RS-EPRE-Offset-r100}}}}}}}}}}}}如下分配了39350的band40 的辅载波。sCellToAddModList-r10{{sCellIndex-r101,cellIdentification-r10{physCellId-r10275,dl-CarrierFreq-r1039350},至此怀疑终端的band1/3band40的CA能力有问题。对比机型没有CA能力这也说明为什么对比机型没有问题。后续的MeasurementReport也可以看到主小区的rsrpResult非常低只有4.辅小区的为38.00:08:20.749417[0xB0C0]UL_DCCH/MeasurementReport Radio Bearer ID1,Physical Cell ID275Freq1279criticalExtensions c1:measurementReport-r8:{measResults{measId2,measResultPCell{rsrpResult4,rsrqResult0},measResultServFreqList-r10{{servFreqId-r101,measResultSCell-r10{rsrpResultSCell-r1038,rsrqResultSCell-r105}在终端配置/nv/item_files/modem/lte/common/ca_disable其内容为1个byte的0x01.临时关闭CA。果真终端可以正常上网了。进一步思考为什么会分配band40的副载波为什么会分配band1/3band40的副载波呢后面抓注册过程的终端能力上报发现终端上报了1百多种CA组合的能力。这么多有点异常。和驱动确认band1/3band40的CA能力是不支持的。问题终端是早期的终端当时CA能力还没有配置使用的平台默认导致很多不支持的能力被上报。最终不需要关闭CA解决。需要修改终端RF参数为正确值即可。