Copyright ANRITSU

Rick Phung
PBD4 Global Wireless Business Development
2014-07
Wi-Fi Offload
Copyright ANRITSU
Agenda
Market Drivers for Wi-Fi Offload
Standards Overview
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Deployments
Device Test Implications
Summary/Q&A
2
Slide Title or URL
Copyright ANRITSU
More data More Wi-Fi
3
More Hotspots

More Smartphones

More Video

And..





Copyright ANRITSU
More data More Wi-Fi
4
Limited cellular spectrum

Copyright ANRITSU
Weve heard this before Is it real this time?
5
I-WLAN (TS23.234, TS24.234)
Part of 3GPP R6 in 2006
Defines authentication and
authorization to allow devices with
3GPP credentials to connect to the
Internet or to the operator core network
using WLAN
Allows operator to provide a list of
preferred APs to the UE by using a
Management Object (MO) or USIM files
Very similar to the 3GPP PLMN
selection mechanism defined for the
cellular link (TS23.122)
No wide-scale deployments of I-WLAN
Copyright ANRITSU
Agenda
Market Drivers for Wi-Fi Offload
Standards Overview
IEEE, WFA, WBA
3GPP
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Deployments
Device Test Implications
Summary/Q&A
6
Slide Title or URL
Copyright ANRITSU 7
Two Cooperating Camps
WiFi
Institute of Electrical and Electronics Engineers
IEEE 802.11
Wi-Fi Alliance (WFA)
Hotspot 2.0 (HS2.0) also called
Wi-Fi Certified Passpoint
Wireless Broadband Alliance (WBA)
Next Generation Hotspot (NGH)

3GPP
TR 22.934: Feasibility study on 3GPP system to
WLAN interworking.
Many more in the references section below
Copyright ANRITSU
WFA HotSpot 2.0 automatic login
HotSpot 2.0, also known as Wi-Fi Certified Passpoint or HS2.0
Enables mobile devices to automatically join a Wi-Fi network
Based on the IEEE 802.11u standard
Defines a mechanism to configure devices with operator
policies/preferences
Mobile devices use ANQP to discover the
characteristics of the network
Passpoint is the brand
for the certification
program operated by
the Wi-Fi Alliance
Subscription based
8
Copyright ANRITSU 9
WBA NGH seamless roaming on Wi-Fi
Next Generation Hotspot
NGH consists of two elements:
Collaboration to promote deployment of
inter-operator Wi-Fi roaming
Development of comprehensive operator
guidelines
Deploys Wi-Fi CERTIFIED
Passpoint equipment
Help service providers deploy seamless
offload and end-to-end interoperability
Builds on Wireless Roaming
Intermediary eXchange (WRIX)
Standards-based comprehensive
specifications and guidelines
Developed by the WBA members
Adopted globally by the public Wi-Fi
operators ecosystem
wi-fi-roaming-hotspot-2-0-and-next-generation-hotspot
Copyright ANRITSU
10
ANDSF Seamless roaming on Wi-Fi and 3GPP
Access Network Discovery and Selection Function (ANDSF)
Defined in 3GPP R8 to R12
Similar to I-WLAN, operator provisions device via a Management
Object (MO)


Copyright ANRITSU
11
3GPP ANDSF Intelligent Network Selection
Device decides between 3GPP link and WLAN based on
MO Settings
User preferences
Dynamic conditions
Copyright ANRITSU
12
ANDSF Evolution
Source: 4G Americas Whitepaper
Integration of Cellular and Wi-Fi Networks
September 2013
Copyright ANRITSU
Agenda
Market Drivers for Wi-Fi Offload
Standards Overview
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Deployments
Device Test Implications
Summary/Q&A
13
Slide Title or URL
Copyright ANRITSU
3GPP Access
Trusted non 3GPP
Access
Untrusted non 3GPP
Access
PDN-GW


ePDG

WLAN AP
WLAN AP
eNB S-GW
S2b (GTP/PMIP)
Operator IP
Service
Internet
Note:
S2c (not shown) between UE and PDN-GW provides mobility via both MIPv4 and DSMIPv6 via either S2a or S2b.
LTE
WLAN
WLAN
Authentication
3GPP AAA
3GPP TS23.402 describes the Evolved Packet Core (EPC)
The EPC enables interworking between 3GPP and non-3GPP Access Networks like WLAN
WLAN connections can be either Trusted Access or Untrusted Access
IPsec encrypted
14
3GPP EPC Basic Architecture
S2a (GTP/PMIP)
Copyright ANRITSU
3GPP TR22.934 Feasibility study on 3GPP system to WLAN interworking
Specifies 6 scenarios for inter-operability between 3GPP and WLAN
15
3GPP TR22.934
# Description
Charges
on 3GPP
bill
WLAN
Auth by
UICC
Access
3GPP PS
services
Maintain
session
Seamless
transfer
Access
3GPP CS
services
1 Common Billing and Customer Care Yes No No No No No
2
3GPP system based Access Control And
Charging
Yes Yes No No No No
3 Access to 3GPP system PS based service Yes Yes Yes No No No
4 Service Continuity Yes Yes Yes Yes No No
5
Seamless Service
Yes Yes Yes Yes Yes No
6 Access to 3GPP CS Service Yes Yes Yes Yes Yes Yes
Copyright ANRITSU
eNB
WLAN AP
Internet
Operator
IP Service
3GPP-CN
UE

IP

Common Billing
WLAN Authentication by Username/Password
Security of WLAN data not guaranteed
16
TR22.934 Scenario 1
Copyright ANRITSU
SIM-based 3GPP and WLAN authentication
Policy based network selection (ANDSF)
802.11i WLAN security
802.11u WLAN roaming
17
TR22.934 Scenario 2
eNB
WLAN AP
Internet
Operator
IP Service
3GPP-CN
3GPP-AAA
UE

IP

Copyright ANRITSU
Operator IP Services accessible via WLAN
Service continuity on 3GPP/WLAN switch
CN traffic offload via SIPTO
18
TR22.934 Scenarios 3,4
eNB
WLAN AP
Internet
Operator
IP Service
3GPP-CN
ePDG
UE

IP Stack

Copyright ANRITSU
Simultaneous connection of 3GPP and WLAN
User-transparent switching
Service based seamless mobility with IP Flow Mobility (IFOM)
Web
Speech
eNB
WLAN AP
Internet
Operator
IP Service
3GPP-CN
ePDG
UE

IP Stack
IFOM
19
TR22.934 Scenarios 5,6
Copyright ANRITSU
Agenda
Market Drivers for Wi-Fi Offload
Standards Overview
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Deployments
Device Test Implications
Summary/Q&A
20
Slide Title or URL
Copyright ANRITSU
Deployment Mobility Options
Non-seamless mobility of all packet connections
The UE gets different IP addresses (and possibly different services) over WLAN and over normal
mobile network access.
Defined in 3GPP Release 6 as I-WLAN / 3GPP IP Access.

Seamless mobility of all packet connections
At mobility between 3GPP and WLAN access, all PDN connections are handed-over and have
their IP address preserved.
Defined in 3GPP Release 8 as Un-trusted non-3GPP access.

Seamless mobility of individual PDN connections
At mobility between 3GPP and WLAN access, the UE determines which Public Data Network
(PDN) connections are handed-over (with IP address preservation). For example, an Access
Point Name (APN) for best effort Internet moves between cellular and WLAN access as soon as
WLAN is available while a second APN for IMS service remains on the cellular access.
Defined in 3GPP Release 10 as MAPCON.

Seamless mobility of individual IP flows on specific PDN connections
At mobility between 3GPP and WLAN access the UE determines which IP flows of a PDN
connection are handed-over (all PDN connections have their IP address preserved). For example,
best effort Internet traffic on the default APN move between cellular and WLAN access as soon as
WLAN is available while a dedicated video streaming flow on the same APN and a second APN
for IMS service remains on the cellular access.
Defined in 3GPP Release 10 as Internet Protocol Flow Mobility and seamless WLAN Offload
(IFOM).
21
Source: 4G Americas Whitepaper
Integration of Cellular and Wi-Fi Networks
September 2013
Copyright ANRITSU
Deployments by Wireless Operators
T-Mobile
Introduced Wi-Fi calling on Android in 2007
Works with any hotspot, no special app required
Introduced VoLTE in Seattle in May 2014 which interoperates with
Wi-Fi calling
http://newsroom.t-mobile.com/issues-insights-blog/welcome-to-wi-fi-
calling.htm
ATT
Owns/Operates large Wi-Fi access network
Uses proprietary client to manage connections
http://play.google.com/store/apps/details?id=com.att.android.attsm
artwifi
Not rushing to deploy ANDSF, ePDG, etc.
Verizon
Owns/Operates small to medium Wi-Fi access network
Manual login required
Not rushing to deploy ANDSF, ePDG, etc.
http://www.verizon.com/home/wifi-wireless-internet-service/


22
Copyright ANRITSU
Agenda
Market Drivers for Wi-Fi Offload
Standards Overview
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Deployments
Device Test Implications
By scenario
Example Test Setup
Summary/Q&A
23
Slide Title or URL
Copyright ANRITSU
Layer2 authentication at Access Point
Open
WEP (WEP-Key *1)
WEP/IEEE802.1x (EAP)
WPA-Personal (PSK *1)
WPA-Enterprise (EAP)
WPA2-Personal (PSK *2)
WPA2-Enterprise (EAP)
Two levels of user authentication: Layer2 and Layer3.
RADIUS ServerEAP authentication Access Point
Network
Equipment configuration for WPA2-Enterprise
*1 In fact, these are not user authentication, because they cannot actually
determine which user is connected
*2 EAP has several types: EAP-TLS, TTLS, PEAP, SIM, AKA, AKA, etc.
24
Authentication
Copyright ANRITSU
Layer3 authentication using WISPr
WISPr 1.0 (Username/Password, EAP)
WISPr 2.0 (Username/Password, EAP)
WISP Server
Access Point
Network
Equipment configuration for
WISP authentication
Gateway
RADIUS ServerEAP authentication
25
Authentication
Two levels of user authentication: Layer2 and Layer3.
Copyright ANRITSU
3GPP Core Network

WLAN
WLAN
Trusted non 3GPP Access
WLAN AP
Secure/reliable connection between
WLAN AP and PDN-GW.
Untrusted non 3GPP Access
WLAN AP
Non-secure/Non-reliable
connection between AP and CN
Non-secure connection
between UE and AP
Case1
Case2
Case1: Secure connection between WLAN AP and 3GPP core network
Communication between UE and access point is ciphered using WPA or WPA2

Case2: Non-secure connection between WLAN AP and 3GPP Core Network
Communication between UE and ePDG is ciphered using IPsec
- IPsec encryption key exchanged using IKEv2
- IKEv2 authentication done via EAP-AKA/AKA
High reliability
Low reliability
Ciphering
ePDG
26
Security
Copyright ANRITSU
ANQP and ANDSF help UE discover and select WLAN and 3GPP networks

ANQP (Access Network Query Protocol)
- Specified in IEEE802.11u to enable roaming between WLAN networks
- Makes network information available to clients, even for APs whose SSIDs are unknown

ANDSF (Access Network Discovery and Selection Function)
- Specified in 3GPP Rel.8+ to enable system changes between 3GPP and non-3GPP
access networks
- Sets parameters on Inter-system Mobility Policy to describe target networks and their
priorities
WLAN AP
WLAN
eNB
3GPP
Core
Nework


LTE
ANQP
Server

ANDSF
Server

ANQP
ANDSF
WLAN AP
27
Network Discovery & Selection
Copyright ANRITSU
Enables handovers without modifications to the UEs TCP/IP stack
The 3GPPs S2a Mobility (SaMOG) study item provides mechanisms for mobility between 3GPP and
WLAN access networks using Proxy Mobile IP (PMIP) from RFC 5213 and the GPRS Tunneling Protocol
(GTP).

Handover Case A between 3GPP Access and Trusted non-3GPP Access
Builds up tunnel using PMIPv6 (or GTP), same IP address is assigned after handover by transparently
carrying the UEs original IP address.
Handover Case B between 3GPP Access and Untrusted non-3GPP Access
Builds up 2 types of tunnel, one is using PMIPv6(or GTP) between 3GPP core network and ePDG, and
other one is using IPsec between ePDG and UE. UE can use the same IP address after handover.
WLAN AP
3GPP Access
3GPP Core
Nework

LMA
ePDG
MAG
WLAN AP
MAG
PMIP Tunnel
(Proxy Mobile IP)
IPsec Tunnel
Handover Case A

Handover Case B
IP address is not changed
after handover.
IP=IP1
IP=IP1
HoA=IP1
CoAIP1
28
Network Based Mobility
Local Mobility Anchor (LMA)
Mobile Access Gateway (MAG)
Handover Address (HoA
Care of Address (CoA)
Copyright ANRITSU
WLAN AP
3GPP Access
3GPP Core
Nework

ePDG
WLAN AP
DSMIPv6 Tunnel
HA
IP=IP1
HoA=IP1
CoAIP1
Handover
HoA=IP1
CoAIP1
29
Host Based Mobility
Enables more capability but requires UE TCP/IP stack enhancements
Home Agent (HA) in 3GPP core network supports end to end IP tunnel to UE
Use Dual Stack Mobile IPv6 (DSMIPv6) or Mobile IPv4 (MIPv4)
The UE is able to keep the same IP address across handovers
If UE detects a change of IP address, it informs the HA



Handover Case A and Case B much more similar to each other than in Network Based case
Handover Address (HoA)
Care of Address (CoA)
(Home Agent)
Copyright ANRITSU
3GPP R10 provides both seamless offload and selectable data offload
Devices maintain simultaneous connections to both WLAN and 3GPP networks
DSMIPv6 allows different access and routing for each IP Flow
Selectable offload might move background and web traffic to WLAN but keep voice
data that requires a high QoS on the 3GPP network

The ANDSF Inter-System Routing Policy (ISRP) can specify three types of data offload:
1) Flow Based
2) Service Based
3) Non-Seamless
WLAN AP
PDN-GW
ePDG
eNB
HA
IP Flow1 (ex IMS speech)
Src IP address = IP1
Dst IP address =IP2
Port = port1
IP Flow2(ex HTTP)
Src IP address = Other
Dst IP address = Other
Port = Other
30
Seamless Offload
Copyright ANRITSU
Agenda
Market Drivers for Wi-Fi Offload
Standards Overview
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Deployments
Device Test Implications
By scenario
Example Test Setup
Summary/Q&A
31
Slide Title or URL
Copyright ANRITSU
MD8475A ePDG Setup IMS Traffic Path
4
5a
6
7a
Voice over LTE
3
2
2. MD8475As Eth0
192.168.1.2
ePDG Server PC Sync
IPv4 CSCF
192.168.1.12 DNS
2001:0:0:1:2
NDP for 2001:0:0:1 Prefix
IPv6 CSCF
4. Local Area Connection
192.168.1.254
8475 SmartStudio Sync
IPv4 PDN GW to IMSService
2001:0:0:1::FFFE IPv6 PDN GW to IMSService
Copyright ANRITSU
MD8475A ePDG Setup IMS Traffic Path
3
Voice over Wi-Fi
2 4
5b
6
7b
7. UE
a) 192.168.1.11 LTE IMS Bearer IPv4 address
a) 2001:0:0:1::1 LTE IMS Bearer IPv6 address
b) 192.168.0.1 WLAN IPv4 address from DHCP Server
b) 2001::1 WLAN IPv6 address
192.168.2.11 LTE Fast APN bearer IPv4 address
5. Local Area Connection 2
a) 192.168.1.253 LTE U Plane Pass-through
b) 192.168.0.254
DHCP for WLAN AP Client
ePDG server (IPv4)
b) 2001::FFFE NDP for WLAN AP Client
ePDG server (IPv6)
Copyright ANRITSU
Agenda
Market Drivers for Wi-Fi Offload
Standards Overview
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Deployments
Device Test Implications
Summary/Q&A
34
Slide Title or URL
Copyright ANRITSU
Key Takeaways
35
Market Drivers
Operator and user goals aligned
Standards
False starts
Mostly cooperation and harmonization
Wi-Fi Offload Evolutionary Scenarios from TR22.934
Reasonably flexible plan
Deployments
Device Test Implications
Device functionality Testing
Copyright ANRITSU
3GPP Specs
36
3GPP TS 22.278: "Service requirements for the Evolved Packet
System (EPS)".
3GPP TR 22.934: "Feasibility study on 3GPP system to WLAN
interworking".
3GPP TS 23.234: "3GPP System to Wireless Local Area Network
(WLAN) Interworking; System Description".
3GPP TS 23.261: "IP flow mobility and seamless Wireless Local Area
Network (WLAN) offload"
3GPP TS 23.402: "Architecture enhancements for non-3GPP
accesses".
3GPP TS 24.302: "Access to the 3GPP Evolved Packet Core (EPC)
via non-3GPP access networks".
3GPP TS 24.303: "Mobility management based on Dual-Stack Mobile
IPv6".
Copyright ANRITSU
Other Specs and Resources
37
OMA-TS-DM_Protocol-V1_2: "OMA Device Management Protocol
IETF RFC 5555: "Mobile IPv6 support for dual stack Hosts and
Routers (DSMIPv6)".
IETF RFC 3748: "Extensible Authentication Protocol (EAP)".
4G Americas Whitepaper


Copyright ANRITSU
Glossary
38
AAA Authentication, Authorisation and Accounting
ACL Access Control List
AKA Authentication and Key Agreement
AP Access Point
APN Access Point Name
CoS Class of Service
DHCP Dynamic Host Configuration Protocol
DNS Domain Name System
DSCP DiffServ Code Point
EAP Extensible Authentication Protocol
FQDN Fully Qualified Domain Name
GGSN Gateway GPRS Support Node
GTP GPRS Tunnelling Protocol
HLR Home Location Register
HPLMN Home PLMN
HSS Home Subscriber Server
IEEE Institute of Electrical and Electronics Engineers
IP Internet Protocol
IP-SM-GW IP Short Message Gateway
ISP Internet Service Provider
I-WLAN Interworking WLAN
MAPCON Multi-Access PDN Connectivity
NAI Network Access Identifier
NAT Network Address Translation
OCS Online Charging System
PDA Personal Digital Assistant
PDG Packet Data Gateway
PLMN Public Land Mobile Network
SIM Subscriber Identity Module
SSID Service Set IDentifier
UE User Equipment
UMTS Universal Mobile Telecommunications System
USIM UMTS SIM
SSID Service Set IDentifier
VLAN Virtual Local Area Network
VPLMN Visited PLMN
WAG WLAN Access Gateway
W-APN WLAN APN
WLAN Wireless Local Area Network
WLAN AN WLAN Access Network
WLAN UE WLAN User Equipment
WMM Wi-Fi
TM
Multimedia
WRIX Wireless Roaming Intermediary Exchange.
www.wballiance.com/resource-center/glossary/
Copyright ANRITSU
Q&A
39
Copyright ANRITSU
Thank You!
40
For more information on Anritsus products please visit:

www.anritsu.com
or call

1-800-ANRITSU (267-4878)
Become a fan
on Facebook
Copyright ANRITSU