ABC-LTE Dashboard

Total Subscribers

-

Registered in HLR/HSS

Connected UEs

-

Attached

eNBs / gNBs

-

Base stations

Active Sessions

-

PDU / PDN sessions

Core Services

Loading...

Recent Subscribers

IMSI	MSISDN
Loading...

Activity Log

--:--:--Dashboard initializing...

MCC

-

Mobile Country Code

MNC

-

Mobile Network Code

TAC

-

Tracking Area Code

Network Identity

Network Name

-

PLMN ID

-

Format

MCC + MNC

3GPP Reference

Diameter Realm -

EPC Realm -

IMS Realm -

3GPP Network ID -

Core Services

Service	Container	Status	Uptime	Actions
Loading...

Subscribers

Status	Last Seen	Voice	Device Name	IMSI	MSISDN	APN	SST	Security	Actions
Loading...

APN Catalog

Name	QCI	ARP Priority	AMBR DL/UL	Actions
Loading...

APN Usage

APN / DNN	Subscribers	IMSIs
Loading...

eNBs / gNBs

-

From Prometheus

Connected UEs

-

Attached

Radios Per base-station status & connected devices

Label	Status	IP	Cell ID	TAC	Spectrum	Connected Devices	Last Seen
Loading radios...

Radio Map Set a location via a radio's Edit button

Node Registry Aggregate totals from Prometheus

Node	Type	IP	eNBs	UEs	Status
Loading node data...

Radio Connection Log Last 10 events • eNB connect / disconnect

Time	Event	IP Address	Raw Message
Loading...

Alarm / Event Feed

Time	Container	Level	Message
Loading events...

Network Bandwidth

Live, auto-refreshes every 5s while this tab is open

Interface	IP Address	Download	Upload	Total RX	Total TX
Loading...

Container Resource Usage

Container	CPU %	Memory	Mem %	Usage Bar
Loading...

Internet Pool

192.168.100.0/24

ogstun

IMS Pool

192.168.101.0/24

ogstun2

Active UEs

-

Attached (SMF)

Pool Assignments

-

Live IMSI↔IP mappings

IP Assignments

IMSI	APN	IP Address	Assigned At
Loading...

Recently Released / Reassigned

IMSI	APN	IP Address	Released At
Loading...

DNS Records

Hostname	Type	Address
Loading DNS records...

Zone Config

PyHSS Status

Checking PyHSS...

PyHSS Data

Select a tab above

Server Endpoint

-

WireGuard listening address

Active Peers

-

of 0 configured

WireGuard Subnet

-

VPN address space

Server Info

Server Public Key

Loading...

Endpoint

-

Peers

Label	Tunnel IP	Allowed Networks	Remote Endpoint	Last Handshake	Traffic ↓/↑	Status	Actions
Loading...

Remote Site Setup Instructions

click to expand

Steps to bring a new remote site (radio / eNB behind a router) onto the VPN.

EdgeRouter (VyOS)

SSH into your EdgeRouter
Enter configure mode:
```
configure
```
Create a WireGuard interface and generate a private key:
```
set interfaces wireguard wg0 private-key
```

Note the auto-generated public key:

show interfaces wireguard wg0 public-key

Click + Add Peer above — paste your public key or use "generate keys"
Copy the generated client config, apply on EdgeRouter, then commit; save

Generic Linux Router

Install wireguard-tools:
```
apt install wireguard-tools
```
Click + Add Peer and choose Generate keys automatically — a complete ready-to-paste config will be shown
Save to /etc/wireguard/wg0.conf on the remote router
Start the tunnel:
```
systemctl enable --now wg-quick@wg0
```

GL-iNet Router (SSH — recommended)

Click + Add Peer above, choose Generate keys automatically, set LAN subnet to the GL-iNet router's LAN (usually 192.168.8.0/24) so the tunnel reaches the eNB behind it, not just the router
SSH in (on by default; if not, enable under System → Advanced Settings → SSH) and run each uci command below as its own non-interactive call from your machine, e.g. ssh root@192.168.8.1 "uci set ..." — one command per ssh call. Some GL-MT3000 terminals mangle a long pasted line into two commands mid-value if you paste multiple lines into an interactive session instead

Interface + peer, using the values from the generated config:

uci set network.wgepc=interface
uci set network.wgepc.proto='wireguard'
uci set network.wgepc.private_key='<PrivateKey>'
uci add_list network.wgepc.addresses='<Address>'
uci set network.wgepc.route_allowed_ips='1'
uci set network.wgepc_peer=wireguard_wgepc
uci set network.wgepc_peer.public_key='<server PublicKey>'
uci set network.wgepc_peer.endpoint_host='<this server's public IP>'
uci set network.wgepc_peer.endpoint_port='51820'
uci add_list network.wgepc_peer.allowed_ips='<AllowedIPs, e.g. 10.99.0.0/24>'
uci set network.wgepc_peer.persistent_keepalive='25'
uci set network.wgepc_peer.route_allowed_ips='1'
uci commit network

Firewall zone — required, or the tunnel will handshake but never actually route to the LAN:

uci set firewall.wgepc_zone=zone
uci set firewall.wgepc_zone.name='wgepc'
uci add_list firewall.wgepc_zone.network='wgepc'
uci set firewall.wgepc_zone.input='ACCEPT'
uci set firewall.wgepc_zone.output='ACCEPT'
uci set firewall.wgepc_zone.forward='ACCEPT'
uci set firewall.wgepc_zone.masq='0'
uci add firewall forwarding
uci set firewall.@forwarding[-1].src='lan'
uci set firewall.@forwarding[-1].dest='wgepc'
uci add firewall forwarding
uci set firewall.@forwarding[-1].src='wgepc'
uci set firewall.@forwarding[-1].dest='lan'
uci commit firewall

Apply and verify:
```
/etc/init.d/network restart
/etc/init.d/firewall restart
wg show
```
wg show should show a live handshake with real transfer counters (not just keepalive bytes). uci commit writes to flash, so this survives a reboot with no extra autostart step

TIP — Generate keys for the fastest setup

When adding a peer, choose Generate keys automatically and a complete ready-to-paste WireGuard config will be shown (including the private key). Copy it directly into the remote router. The private key is shown once and never stored on this server.

AVOID — GL-iNet's own WireGuard Client GUI

Its wizard has been observed to silently fail to persist the profile it claims to save (no key/endpoint data ends up in config at all) — use SSH above instead. If you must use it: it's under VPN or Network → VPN → WireGuard Client depending on firmware. Don't paste the whole multi-line config into one field — it validates each field for shell characters and rejects newlines. Upload as a .conf file if there's an import option, otherwise enter Address / Private Key / Public Key / Endpoint / Allowed IPs / Persistent Keepalive into separate fields — and verify afterward with wg show over SSH rather than trusting the GUI's own status indicator.

Portal URL

-

UE devices only — not internet-reachable

Speed Test URL

-

LibreSpeed, self-hosted

Enabled Pages

-

of 0 total

Homepage

Header Title

Welcome Message (HTML)

Pages

Title	Slug	Nav Order	Enabled	Acceptance Tracking	Actions
Loading...

Send Alert

This sends a real SMS to every provisioned subscriber's phone via the network's SMS path. It is not a cell-broadcast/CMAS system — it reaches subscribers, not every device in range.

Message

0/160Recipients: -

Alert History

Time	Sent By	Message	Recipients	Delivered
Loading...

Download Backup

Saves every subscriber from all the places they are stored — PyHSS (authentication and VoLTE), osmohlr (SMS) and the dashboard — into one file. The file contains every SIM's Ki/OPc keys, so it is encrypted with the password you choose here. Keep that password safe: without it the backup cannot be restored.

Loading...

Backup password

Confirm password

Restore From Backup

Re-creates any subscriber that is missing and updates existing ones to match the backup. Subscribers that are not in the backup are never deleted. You will see exactly what changes before anything is written, and a safety snapshot of the current state is saved automatically first.

Backup file

Backup password

Safety Snapshots

Saved automatically right before every restore (the last 10 are kept). To undo a restore, download the snapshot taken before it — it is encrypted with the password in the Download Backup fields above — then restore that file.

Time	Taken By	Reason	Subscribers
Loading...

Dashboard Users

Username	Role	Created	Actions
Loading...

Audit Log

Time	User	Action	Detail	IP
Loading...

Network Branding

Network Display Name

This name appears on the login page, sidebar, and browser tab.

Change Your Password

Current Password

New Password

Confirm New Password

IMS Services

-

of 8 running

IMS Subscribers

-

Provisioned in PyHSS

Diameter Peers

-

Connected to HSS

RTPengine

-

Media proxy mode

IMS Service Status

Service	Role	Status	Uptime	Health
Loading...

Diameter Peer Connections

Cx / S6a interfaces

Peer Hostname	Type	Status	Connected Since
Loading...

IMS Subscribers

SIP profiles · PyHSS HSS

MSISDN	IMSI	SIP Identity	S-CSCF	SIP Status
Loading...

Asterisk Runtime

-

Checking...

Uptime

-

Since last start

Web GUI

None — CLI/config only

Manage extensions from this tab instead

Asterisk / IVR Extensions

3-4 digit test/info short codes (411-style)

Extension	Description	Message	Actions
Loading...

SIP Accounts (Local Softphones)

Server: -

Register a real softphone (Zoiper, Linphone, etc.) directly to Asterisk with a username/password — no IMS-AKA/IPsec needed. Dial the extension number from an IMS phone to reach it; dial a real subscriber's full-IMSI number (15 digits) from the softphone to call out to the IMS network.

Extension	Label	Password	Added	Actions
Loading...

AI Voice Assistant

Live STT → local LLM → TTS phone call

Each extension is its own assistant — set a distinct greeting and persona/system-prompt per extension, or leave blank to use the built-in default. Model is optional (only set it if you've pulled a different Ollama model already — leave blank for the default).

Extension	Description	Greeting	Persona	Model	Actions
Loading...

Twilio PSTN Call Out (extension 700)

-

Dialing 700 places a real outbound call through Twilio — this costs real money per call. Off by default for anyone not explicitly allowlisted below; callers not on the list hear a "not enabled, contact support" message instead of being able to dial out.

Phone Setup Guide (VoLTE on this network)

Copy/paste-ready instructions for anyone joining this network with their own Android phone — same steps used to get VoLTE working here.

Loading...

Advanced / Troubleshooting

Adding, editing, or deleting an extension above applies instantly — no restart is needed. These buttons only exist as a manual fallback if IVR routing ever gets stuck for some other reason. Restarting either service drops every active call and SIP registration on the system — only use these if something is actually broken.

Confirm

Confirm Action