>>1043290 (OP)
>This isn't a new idea, but I don't see evidence that anyone has attempted to build this. I know very little about radios. Help?
Tried it but I'll have to lurk a little more. You can use balong/huawei toolbox but it doesn't have the capability to tell the sekrit hardware to do that. Don't know if anything that can lock to one cellid exist right now but there is the possibility. Maybe try a femtocell with cellid lock, don't know if that exists.
You could do so before with Wimax by locking to one basestation and frequency but I doubt you can do that to mobile radios without the right firmware. Maybe if you understand AT commands but I don't know a single thing about it.
You can lock yourself into one mobile frequency band (B1) but still it should exist in several cell towers so handovers still happen. I have a directional antenna but it still gets handed over to some cell or possibly even imsi catcher.
This means you can't escape mossad stingray van triangulation or fake bts from either gov or hacker but like I've said it's just that there's no known hardware that can do that or maybe it exist but it's just not popular.
So far, I've not found a way to doing that aside from if the topology is right:
>map all towers and place yourself at the edge of only one cell tower in vicinity and use directional antenna, verify if it works or is too strong (lower your dbm if your hardware can)
>https://wiki.mikrotik.com/wiki/Manual:Interface/LTE
>To lock modem at previously used tower at-chat can be used:
>/interface lte at-chat lte1 input="AT*Cell=2,3,,1300,384"
Though AT commands may brick your device or SIM, just experiment with it if you have plenty resources.