GSM Signaling Overview GSM Signaling Overview ] GSM signaling defines the communications between the mobile and the network ] Signaling has to be carried through the network and across the air- interface to the mobile ] Different protocols are used across different interfaces ] All GSM signaling is based on the Open Systems Interconnect (OSI) model used for computer systems ] The MSC uses ITUs Signaling System No:7, (SS7 or CCS7) for all its signaling; to the BSC, HLR, VLR and to other networks ] The Air-interface and A-bis signaling is based on ISDN Link Access Protocol (LAP-D and LAP-Dm) ] Signaling channels are integrated into the air-interface as the BCCH, PCH, AGCH, SDCCH, SACCH and FACCH ] Signaling across all interfaces is specified in the standards to allow different equipment manufacturers for each unit TWS Proprietary - www.tws -inc.com - (770) 752-7033 Mobile Signaling Mobile Signaling ] When the mobile is first switched on it is under the control of its own internal algorithms. ] It performs the following sequence: c Search for GSM frequencies c Find a FCCH and synchronize frequency c Find a SCH and synchronize time c Listen for a BCCH and download information about the system c Download idle neighbor list and make measurements c Select a best server and camp on it c If the user wants to make a call, the mobile has to signal to the network. c It does this by sending a service request to the network on the RACH. TWS Proprietary - www.tws -inc.com - (770) 752-7033 GSM SIGNALLING GSM SIGNALLING BSC BTS MS LAPD LAPDm PLMN (GSM) ISDN PSTN Base Station System (BSS) BSSAP ISUP TUP MAP MAP MAP MAP MAP MAP VLR AC VLR HLR EIR MSC GMSC Switching System NSS SS7 User Parts: MAP: SS7, Mobile Application Part BSSAP: SS7, Base Station Sub-System Application Part ISUP: SS7, International Subscriber User Part TUP: SS7, Telephone User Part LAPD: ISDN, Link Access Protocol Version D TWS Proprietary - www.tws -inc.com - (770) 752-7033 GSM Signaling GSM Signaling OSI - Model GSM Equivalent NETWORK DATA LINK PHYSICAL 7 6 5 4 3 2 1 USER TASKS GSM NETWORK TASKS Network Messages Framing / Addressing Coding / Modulation APPLICATION PRESENTATION SESSION TRANSPORT NETWORK DATA LINK PHYSICAL Open Systems Interconnect uses layers where only layer 1, the physical layer is actually physically connected between devices. Messages are sent between devices by handing them down to lower layers from transmission across the physical interface. TWS Proprietary - www.tws -inc.com - (770) 752-7033 OSI Layers OSI Layers Layer 3 Network Layer : Carries signaling messages, for getting the message to its destination. Provides connection oriented (dedicated signaling link) or connectionless services (packet-type signaling). Example: Radio Resource message sent from MSC to BSC. Layer 2 Data Link Layer : Transfers frames error free between nodes. Concerned with error detection, framing, re-transmission Example: LAPD protocol on A-bis between BSC and BTS. Layer 1 Physical Layer: Transmits all information across the physical medium. Specifies the physical medium used: mechanical, electrical, functional and procedural characteristics. Example: GMSK modulation on an RF carrier for the Air-interface between the BTS and the MS Layer 3 Layer 2 Layer 1 Layer 3 Layer 2 Layer 1 Information Flow TWS Proprietary - www.tws -inc.com - (770) 752-7033 Signaling Layers for the Air Interface Signaling Layers for the Air Interface Layer 1: Functions required to transfer bit steams over physical TDMA / FDMA channels: j Ciphering j Setting of timing advance & TX power j Channel Coding j Mapping of logical channels onto physical channels Layer 2: Provides a reliable signaling link between MS and the network. Protocol is based on the LAPDm of ISDN jFraming jAddressing jError correction Layer 3: Takes care of the main control of the MS -network procedures. It is split into 3 sublayers: j Radio Resource Management j Mobility Management j Connection Management TWS Proprietary - www.tws -inc.com - (770) 752-7033 Air Air- -interface Layers interface Layers Reconstruct frames, acknowledges Speech Speech User Data User Data Signaling Signaling OSI layer 3 Network Functions Builds frames, requests acknowledgement OSI layer 2 Data link functions Channel coding, error protection, interleaving RF Modulation Error correction, deinterleaving Equalization RF Demodulation Transmitter Receiver OSI layer 1 Physical layer TWS Proprietary - www.tws -inc.com - (770) 752-7033 Network Layer Network Layer ] The network layer is split into three sub-layers c RR - radio resource management: croutes messages to the correct channels cestablishes and maintains physical connections for control and traffic channels. c MM - mobility management: ccontrols authentication and security management. cprovides services for the CM layer. c CM - connection management: cCC: call control: responsible for establishing, maintaining and releasing calls cSS: supplementary services: data etc cSMS: short message services Mobility Management MM Network Layer Layer 3 Layer 1: Physical Layer Data Link Layer CM CC SS SMS Radio Resources RR TWS Proprietary - www.tws -inc.com - (770) 752-7033 Signaling Protocol Reference Model Signaling Protocol Reference Model Note: X.25 can be used for transferring O & M information Terminology: DTAP (direct transfer application part) BSSMAP (BSS management application part) BSS OMAP (operation & maintenance application part) SCCP (signaling connection control part) MTP (message transfer part) To other users of the SCCP and MTP To other processes within the BSS To air interface transmission equip. DTAP BSS MAP BSSAP Distribution function SCCP MTP BSS OMAP Physical Layer A - Interface DTAP BSS MAP Distribution function BSS OMAP SCCP MTP BSSAP Other applications, ie. call control Operation & maintenance info. to OA&M center BSS NSS TWS Proprietary - www.tws -inc.com - (770) 752-7033 GSM Network Protocol Model GSM Network Protocol Model MS BTS BSC MSC CM MM RR LAPDm Radio RR LAPDm Radio Air - Interface A - bis A - Interface BTSM LAPD 64 kbit/s BSSAP BTSM LAPD BSSAP SCCP MTP CM MM BSSAP SCCP MTP 64 kbit/s SCCP 64 kbit/s SCCP 64 kbit/s Layer 3 Network Layer 2 Data Link Layer 1 Physical The MSC and the mobile always control all the network signaling. TWS Proprietary - www.tws -inc.com - (770) 752-7033 Example Page Jim Example Page Jim BTS Layer 3 message Page Jim Layer 2 selects correct BSC Layer 1 sends message across 64 kbit signaling channel BSC Layer 1 receives 64 kbit signaling from MSC Layer 2 recognizes a message for the mobile and converts to LAPD Layer 2 selects BTS Layer 1 sends message across A-bis: T1 or microwave BTS Layer 1 receives A-bis message Layer 2 recognizes a message for the mobile and converts to LAPDm Layer 2 frames message Layer 1 sends message on PCH MS Layer 1 receives PCH Layer 2 decodes message Mobile recognizes Layer 3 message Page Jim and sends response to page BSC MSC TWS Proprietary - www.tws -inc.com - (770) 752-7033 Radio Resource Messages Radio Resource Messages ] Radio resource functions are controlled by the BSC and include: cSACCH measurement reporting on the uplink cSystem Information messages 5&6 transmitted on the downlink cImmediate assignment (assignment of SDCCH) cAssignment command (from SDCCH to TCH) cControl of the mobile during handover cIntra-BSC handovers cFrequency hopping cChannel mode changes cCiphering cChannel release procedures cRadio link failure TWS Proprietary - www.tws -inc.com - (770) 752-7033 Radio Resource Messages Radio Resource Messages ] Assignment request ] Assignment complete ] Assignment failure ] Block ] Overload ] Unblock ] Clear command ] Clear complete ] Clear request ] Cipher Mode Command ] Cipher Mode Complete ] Handover Request ] Handover candidate inquiry ] Handover request acknowledge ] Handover required ] Handover required reject ] Handover command ] Handover complete ] Handover failure ] Paging ] Reset ] Queuing ] Trace Invocation TWS Proprietary - www.tws -inc.com - (770) 752-7033 System Information Messages System Information Messages ] The System Information Messages are sent to the mobile from the network on the BCCH in Idle mode and on the SACCH in active mode. ] The Physical Information Messages are very similar and are sent on the FACCH after a handover. ] They contain the basic information that the mobile needs to gain access to the network. ] System Information Messages 1 to 4 are sent on the BCCH and rotated with PCH, AGCH, SCH and FCCH, and maybe the SDCCH. ] System Information Messages 5 & 6 are transmitted continuously on the SACCH to active mobiles on the downlink while the measurement report is being sent on the uplink. ] The contents of the System Information Messages are given in the following slides: TWS Proprietary - www.tws -inc.com - (770) 752-7033 System Information Messages System Information Messages ] System Information Type 1: 1) Cell Channel description (CA) which gives the ARFCNs used in the cell 2) RACH control parameters which includes: c the maximum number of retransmissions on the RACH c the number of slots to spread the transmissions c the cell barred for access parameter c call re - establishment allowed c emergency call allowed c control class allowed. ] System Information Type 2: 1) Neighbour cells description which gives the ARFCNs of the neighbour cells to be monitored by the mobile. Note that this is an offset and a bit map listing up to 124 ARFCNs. 2) PLMN permitted which lists: the network colour codes (NCCs) which the mobile can use. 3) the RACH control parameters as System Information Type 1. TWS Proprietary - www.tws -inc.com - (770) 752-7033 System Information Messages System Information Messages ] System Information Type 3: 1) Cell Identity (CI) to identify any cell in a given location area 2) Location Area Identification including: c the Mobile Country Code (MCC) c the Mobile Network Code (MNC) c the location area code (LAC) 3) Control channel description including: c the attach / detach parameter (ATT) c the number of blocks reserved for access grant (AG) c the common control channel configuration, ie whether it is combined with an SDCCH etc. 4) Cell Options including c Power Control enabled c DTX enabled c the value of the radio link timeout counter 5) Cell selection parameters including: c the Cell Reselect Hysteresis parameter c the maximum mobile power on the control channel MsTxPwrMaxCCH c the minimum access threshold RXLEVMin. 6) the RACH control parameters as System Information Type 1. TWS Proprietary - www.tws -inc.com - (770) 752-7033 System Information Messages System Information Messages ] System Information Type 4: 1) Location area identification as in System Information Type 3 2) Cell selection parameters as in System Information Type 3 3) RACH control parameters as in System Information Type 1 4) Cell Broadcast Control Channel (CBCH) description which gives the description of the channel used for cell broadcast 5) Cell Broadcast Control Channel mobile allocation to give the mobile the ARFCN used for the CBCH ] System Information Type 5: 1) Neighbour cells description which gives the ARFCNs of the neighbour cells to be monitored and reported on by the mobile. Note that this is also an offset and a bit map listing up to 124 ARFCNs. TWS Proprietary - www.tws -inc.com - (770) 752-7033 System Information Messages System Information Messages ] System Information Type 6: 1) Cell Identity (CI) to identify any cell in a given location area. 2) Location Area Identification including c the Mobile Country Code (MCC) c the Mobile Network Code (MNC) c the location area code (LAC). 3) Cell Options including c Power Control enabled c DTX enabled c the value of the radio link timeout counter 4) PLMN permitted which lists the network colour codes (NCCs) which the mobile can use. ] Physical Information Message: 1) Contains the timing advance for the mobile and is sent on the FACCH after a handover if the handover is to another site, ie a non - synchronous handover. It is not sent for a intra-site synchronous handover. (Either between sectors of the same site or a timeslot shuffle) . TWS Proprietary - www.tws -inc.com - (770) 752-7033 Call Control Messages Call Control Messages ] Call Establishment Messages c Alerting c Call confirmed c Call proceeding c Connect c Connect Acknowledge c Emergency Setup c Progress c Setup ] Call Clearing c Disconnect c Release c Release Complete ] Call Information Phase Messages c Modify c Modify Complete c Modify Reject c User Information ] Connection Management Messages c CM Service Accept c CM Service Reject c CM Service Request c CM Re-establishment Request ] Miscellaneous Messages c Start / Stop DTMF Tones c Notify c Status TWS Proprietary - www.tws -inc.com - (770) 752-7033 Mobility Management Messages Mobility Management Messages ] Registration Messages c IMSI Detach c Location Updating Request c Location Updating Accept c Location Updating Reject ] Security Messages c Authentication Request c Authentication Response c Authentication Reject c Identity Request c Identity Response c TMSI Reallocation Command c TMSI Reallocation Complete LAC 1 LAC 2 TWS Proprietary - www.tws -inc.com - (770) 752-7033 GSM Cause Codes GSM Cause Codes Rec Rec 2:10 2:10 Cause Tone (see Table 1) 1 Unassigned number 6 3 No Route to Destination 6 6 Channel Unacceptable 6 16 Normal Clearing 1 17 User Busy 2 18 No User Responding 6 19 User Alerting, No Answer 6 21 Call Rejected 6 22 Number Changed - 27 Destination out of order 6 28 Invalid Number Format 6 30 Response to STATUS ENQUIRY - 31 Normal, unspecified - 34 No circuit/channel available 3 38 Network out of order 6 41 Temporary Failure 3 42 Switching Equipment Congestion 3 43 Access Information Discarded 6 44 Requested circuit/channel not available 3 47 Resources unavailable, unspecified 6 49 Quality of Service Unavailable 3 50 Requested facility not subscribed 6 57 Bearer Capability not authorised 6 58 Bearer Capability not available 3 63 Service or option not available, unspecified 6 65 Bearer Service not implemented 6 69 Requested Facility not implemented 6 79 Service or option not implemented, unspecified 6 81 Invalid Call Reference Value 6 88 Incompatible Destination 6 91 Invalid Transit Network Selection 6 95 Invalid Message, unspecified 6 96 Mandatory Information Element error 3 97 Message Type non-existent or not implemented 6 98 Message not compatible with calls state or Message Type non-existent or not implemented 6 99 Information Element non-existent or not implemented 6 100 Invalid Information Element contents 6 101 Message not compatible with call state 6 102 Recovery on timer expiry 6 111 Protocol error, unspecified 6 127 Interworking, unspecified 6 TWS Proprietary - www.tws -inc.com - (770) 752-7033 GSM Supervisory Tones GSM Supervisory Tones Tone Frequency Type 1 Dial Tone (optional) 425 Hz Continuous 2 Subscriber Busy 425 Hz Tone on 500ms * (Called Number) Silence 500ms 3 Congestion 425 Hz Tone on 200ms * Silence 500ms 4 Radio Path Acknowledgement 425 Hz Single Tone (Mobile originated only) 200ms (optional) 5 {Radio Path Not Available 425 Hz 200ms} On/off for {Call dropped - Mobile originated only 200ms} 3 bursts 6 Error/Special Information} 950 Hz {Triple Tone * Number Unobtainable } 1400 Hz {Tones on 330ms Authentication Failure } 1800 Hz {Silence 1.0s 7 Call Waiting Tone 425 Hz, on for 400 ms, 8 s silence followed by (425 Hz, on for 150 ms off for 150 ms, on for 150 ms, 8 s silence and repeated as necessary) TWS Proprietary - www.tws -inc.com - (770) 752-7033 GSM Signaling Recommendations GSM Signaling Recommendations Air Interface A - bis A - Interface Layer 1 protocol Physical layer GSM Recs Layer 2 protocol Data link layer GSM Recs Layer 3 protocol Network layer GSM Recs Radio GMSK Rec 4:04 64 kbit/s E1, T1, microwave Rec 8:54 CCS7 64 kbit/s MTP Rec 8:04 LAPDm Rec 4:06 LAPD Rec 8:56 CCS7 / MTP Rec 8:06 CM/ MM/ RR DTAP Rec 4:08 CM/ MM/ RR BSSMAP Rec 8:58 MTP / SCCP BSSAP Rec 8:08 TWS Proprietary - www.tws -inc.com - (770) 752-7033 GSM Timers GSM Timers ] Timers are used to supervise messages sent across the network. ] The network entity sending the message starts and stops the supervisory timer. ] The mobile uses timers to control its behavior when not under the direct control of the network, for example, when idle, during a handover or during channel disconnect. ] Various messages are used to trigger the start and stop of each timer. ] The timers allow the MS and BTS time to respond to requests for resources or to send information. ] Usually, when a timer times out, the message is re-transmitted. ] If the timer times out again, the channels will be released and a failure will be recorded by the MSC or BSC. ] Timers are classified as: c Radio Resource Timers c Mobility Management Timers c BSSAP Timers c A-bis Timers c Call control Timers ] There are timers for both Layer 3 functions and Layer 2 functions. GSM Timers Sue Smith TWS GSM Timers - Radio Resource Timers 4th February '97 Name Range Default Comments Network T3101 1 - 5 s 1 s Supervision of network access. Started when IMMEDIATE_ASSIGNMENT is sent to MS. Stops when MS successfully seizes SDCCH. On expiry, newly allocated channels are released and the access request is forgotten. T3107 3.5 - 10 s 6 s Supervision of assignment procedure. Started when ASSIGNMENT_CMD is sent to the mobile. Stopped when ASSIGNMENT_COMplete message is received on the new channel or ASSIGNMENT_FAILURE is received on the old channel. On expiry, all resources are released and the connection with the mobile is released. T3109 5 - 15 s 8 s Releases channels in case of a loss of communication. Started when a lower layer failure is detected by the network when not engaged in a RF procedure. Also used during the channel release procedure. On expiry channels are released. Default is 9 s. T3111 0.5 s Supervision of channel disconnection. Started when CHANNEL_RELEASE message is sent. On expiry, disconnects the main signalling link. Allows for possible repetition of the disconnection command. T3113 Supervision of paging procedure. Started when PAGING_REQUEST is sent to the mobile and stopped when PAGING_RESPONSE message is received from the MS. This timer must be longer than T3102 plus T3101. If timer times out, network may allow PAGING_REQUEST to be sent again and the T3113 is re-started. Mobile T3110 0.5 s Used to delay channel deactivation after receipt of the CHANNEL_RELEASE message. Allows some time for disconnection of main signalling link. Must be short enough to prevent T3109 timing out. T3120 nRACCH+T1 Supervision of network access attempts. Started when CHANNEL_REQUEST message is sent on the RACCH. Stops on receipt of an IMMEDIATE_ASSIGNMENT on the AGCH. On expiry, if the mobile has not exceeded the maximum number of retransmissions allowed (RET = 4) then the MS sends another CHANNEL_REQUEST and T3120 is loaded with a new value. The value is obtained from T3120 = n RACCH slots + T1 where n = 1..N and N=8 initially and the valaue of "Tx-integer" subsequently, and T1 = 350 ms. T3122 2 - 255 s 6 s Delays network access. Started on receipt of an IMMEDIATE_ASSIGNMENT_REJECT message from the network. On expiry, the mobile may attempt to access the network again. TWS Proprietary - www.tws-inc.com - (770) 752-7033 GSM Timers Handover T3103 4 - 10 s 6 s Supervises the handover in the BSC. Started when the HANDOVER command is sent to the MS. Stopped when the HANDOVER_COMPLETE message is received via the new BTS on the new channel or HANDOVER_FAILURE message received via the old BTS on the old channel. On expiry ALL RF channels are released and the mobile is assumed to be lost during the handover procedure. T3105 100 ms Supervision of repetition frequency of the PHYSICAL INFO message. Started when the network sends the PHYSICAL INFO message to the MS and stopped when any correct frames are received from the MS. On expiry, the PHYSICAL INFO message is sent again up to the number of repetitions (NY1 = 8) and the timer is re-started. If NY1 is reached, the handover is aborted. T3105_F = 100 ms and T3105_D = 280 ms. T3124 320 ms Supervision of handover in the MS. Started when the MS receives a HANDOVER_CMD and stops when the HANDOVER_COMPLETE message is sent. If the handover fails due to the BTS failing to receive the HANDOVER_ ACCESS message, or the mobile fails to receive the PHYSICAL INFO message, then the Timer expires and a HANDOVER_FAILURE is recorded. The mobile the deactivates the new channels, reactivates the old channels and continues as if no handover attempt had occurred. TWS Proprietary - www.tws-inc.com - (770) 752-7033 GSM Timers Sue Smith TWS GSM Timers - Mobility Management Timers 4th February 1997 Name Range Default Comments Mobile T3210 20 s Started when LOC_UPD_REQ sent. Stopped if LOC_UPD_ACK or LOC_UPD_REJ received from network, or on AUTH_REJ. On expiry start Timer 3211. T3211 15 s Started on receipt of LOC_UPD_REJ with cause = network failure. Causes a delay before the mobile attempts access to the network again. On expiry restart location update procedure. T3212 Time between periodic updates. Started on termination of MM service signalling. Stopped on initiation of MM service signalling. On expiry, initiate location update procedure. T3213 4 s Started on location update failure. Delays network access attempt. On expiry, generate a new random access attempt. T3220 5 s Allows time to receive network messages on IMSI Detatach. Started on IMSI_DETACH sent to network. Stopped on release from Radio Management sub-layer. Enter NULL or IDLE into HLR/VLR, not updated. T3230 15 s Cipher mode supervision. Started on CIPHER_REQUEST sent to BTS. Stopped on CIPHERMODE_SETTING. On expiry, provide RELEASE indication to network. T3240 10 s Allows time to disconnect from network. Start on normal end of location update procedure. Stop on receipt of any message from the network. On expiry, release RR connection. Network T3250 5 s Start on TMSI_REAL_CMD or LOC_UPD_ACK with new TMSI sent to MS. Stop on TMSI_REAL_COM received. On first expiry, retransmit AUTH_REQ; on second expiry, release RR connections. T3260 5 s Supervision of authentication procedure. Start on AUTHentication_REQuest sent to MS. Stop on AUTH_RESP received. On first expiry, retransmit AUTH_REQ; on second expiry, release RR connections. T3270 5 s Supervision of identity procedure. Start on IDENTITY_REQUEST sent to MS. Stop on IDENTITY_RESPONSE received. On first expiry, re-transmit IDENTITY_REQUEST; on second expiry, release RR connections. TWS Proprietary - www.tws-inc.com - (770) 752-7033 GSM Timers Sue Smith TWS GSM Timers - BSSAP Timers 4th February 1997 Name Range Default Comments T4 10 - 120 s 60 s Supervision of sending RESET to MSC. Started whenever BSC RESET occurs. Stopped when RESET Acknowledge is received from MSC. On expiry procedure is repeated until RESET ACK is received. T5 1 - 10 s 4 s Supervision of OVERLOAD procedure. Started when OVERLOAD message is received from MSC. On expiry new OVERLOAD messages are taken into account. T6 3 - 20 s 10 s Supervision of OVERLOAD procedure. Started with T5 when OVERLOAD message is received from MSC. On expiry traffic is increased to next level. T7 5 - 30 s 20 s Supervision of periodicity of HANDOVER_REQUIRED message. Started when HANDOVER_REQUIRED message is sent to MSC. Stopped when HANDOVER_COMMAND message is received from MSC. On expiry, handover procedure is repeated. T8 8 - 15 s 12 s Supervision of handover procedure in source BSC. Started when HANDOVER_COMMAND message is received from MSC. Stopped when CLEAR_COMMAND (external handover) is received from MSC. On expiry, ASSIGNMENT_FAILURE message is sent to MSC. T10 4 - 14 s 8 s Supervision of assignment procedure. Started when ASSIGNMENT_COMMAND message is sent to the MS via the BTS. Stopped when ASSIGNMENT_COMPLETE or ASSIGNMENT_FAILURE is received from the MS. On expiry, ASSIGNMENT_FAILURE message is sent to MSC. T12 5 - 30 s 15 s Serves as a guard period for local call clearing procedure. Started when a RESET message is received from the MSC. Stopped when a SSP (sub-system prohibited) message is received from SCCP. On expiry RESET_ACKNOWLEDGEMENT sent to MSC. TWS Proprietary - www.tws-inc.com - (770) 752-7033 GSM Timers Sue Smith TWS GSM Timers - ABIS Timers 4th February '97 Name Range Default Comments T9101 10 s Non-modifiable T9103 2 s Non-modifiable T9104 5 - 20 s 15 s Supervision of clear procedure from MSC. Started when CLEAR_REQ is sent to MSC. Stopped when CLEAR_CMD is received from MSC. On expiry, CHANNEL_REL is sent to mobile, via the BTS. T9105 2 - 240 s 10 s Supervision of SCCP connection procedure. Started when SCCP_CONNECTION_REQUEST is sent to the MSC. Stopped when SCCP_CONNECTION_CONFIRM or _REFUSED is received from MSC. On expiry, CHANNEL_RELEASE is sent to MS via BTS. Set to 31 s. T9108 2 s Non-modifiable T9113 8 - 15 s 12 s Supervision of external handover in target BSC. Started when HANDOVER_REQUEST_ACK is sent to MSC. Stopped when HANDOVER_COMplete is received from MS or when CLEAR_CMD is received from MSC. On expiry CLEAR_REQUEST is sent to MSC. T200 240 ms Layer 2 repeat timer. Values depend on timers used to supervise message flow between the MS and the network. For proper operation T200 should be greater than the maximum time between re-transmission of command frames and the reception of their corresponding response or acknowledgement frames but should be shorter than the corresponding Layer 3 timer supervising this message flow. TWS Proprietary - www.tws-inc.com - (770) 752-7033 GSM Timers Sue Smith TWS GSM Timers - MSC Timers 4th February '97 Name Range Default Comments TNT1 60 - 300 s 300 s Timer deployed to ensure release of SCCP resources. Internal SCCP Integrity Timer TNT2 1 - 30 s 5 s ASSIGNMENT_REQUEST message sent, awaiting for ASSIGNMENT_COMPLETE reply from BSS. On expiry channels are released. Value of TNT2 should be greater than BSS timer T10. TNT3 1 - 30 s 5 s CLEAR_COMMAND message sent, awaiting CLEAR_COMPLETE reply from BSS. On expiry resources are released and mobile is assumed lost during call clear. Value of TNT3 + T102 should be greater than T8 at the BSS. TNT4 1 - 30 s 5 s CIPHER_MODE_COMMAND message sent, awaiting CIPHER_MODE_COMPLETE reply from BSS. On expiry the connection is released and a cipher failure is logged (GMSC601 log). T101 1 - 10 s 5 s At MSC-A, HANDOVER_REQUEST message sent, awaiting HANDOVER_REQUEST_ACKNOWLEDGEMENT from BSS. If T101 expires, the MSC tries to use another cell from the list of preferred cells. (see NPC parameter) T201 1 - 30 s 5 s At MSC-B, HANDOVER_REQUEST message sent, awaiting HANDOVER_REQUEST_ACKNOWLEDGEMENT message at MSC- B after inter-MSC handover. If T201 expires the MSC attempts to use another cell from the preferred cell list if available. T102 1 - 30 s 5 s With T103, T104, T202, T204, T210 these supervise the sending of messages between two MSCs for an inter-MSC handover. On expiry resources are released (similar to inter-BSC handover supervisory timers) T3250 1 - 20 s 5 s TMSI_REALLOCATE_COMMAND or LOCATION_UPDATE_ACCEPT message sent, awaiting TMSI_REALLOCATE command from mobile station. On initial expiry message re-sent, on second expiry release connection. T3260 1 - 20 s 5 s AUTHENTIATION_REQUEST message sent, awaiting AUTHENTICATION_RESPONSE message from mobile. On initial expiry message re-sent, on second expiry release connection. T3270 1 - 20 s 5 s IDENTITY_REQUEST message sent, awaiting IDENTITY_RESPONSE message from mobile. On initial expiry message re- sent, on second expiry release connection. T2_DTAP 30 - 120 s 30 s Call initiated to mobile station and no response message is received. Incoming call timer for network side integrity. On expiry, release connection. T301 45 - 300 s 180 s ALERT message is received for the mobile, awaiting sending of CALL_CONFIRMED message. On expiry, release connection. TWS Proprietary - www.tws-inc.com - (770) 752-7033 GSM Timers T303 1 - 60 s 30 s SETUP message is received for the mobile station, awaiting sending of CALL_CONFIRMED message. On expiry, release connection. T305 1 - 60 s 30 s DISCONNECT message sent to mobile, awaiting RELEASE_COMPLETE from the mobile. On expiry RELEASE message sent. T308 1 - 60 s 30 s RELEASE message sent to the mobile. Awaiting ALERT, CONNECT or DISCONNECT message from the network. On expiry, DISCONNECT sent. T310 1 - 60 s 30 s CALL_CONFIRMED message is sent to the mobile, awaiting ALERT, CONNECT or DISCONNECT message from the network. On expiry, DISCONNECT sent. T313 1 - 60 s 30 s CONNECT message has been sent to the mobile, awaiting reply of CONNECT_ACKNOWLEDGEMENT. On expiry, DISCONNECT sent. TC1N 1 - 60 s 20 s CP_DATA_INDICATION sent to the mobile, awaiting reply of CP_ACKNOWLEDGEMENT. Error indication on second expiry. TWS Proprietary - www.tws-inc.com - (770) 752-7033 MS CALL SET-UP - Mobile Terminate BTS CHANNEL REQUEST (RACH) IMMEDIATE ASSIGNMENT (AGCH) UA (PAGING RESPONSE) CHANNEL REQUIRED CHANNEL ACTIVATION ACK IMMEDIATE ASSIGN COMMAND DATA INDICATION BSC PAGING REQUEST (PCH) SABM (PAGING RESPONSE) (SDCCH) (SDCCH) ASSIGNMENT COMMAND (SDCCH) SABM (FACCH) call confirmed UA call proc. ASSIGNMENT COMPLETE (CM) ALERTING CONNECT CONNECT ACK DISCONNECT RELEASE RELEASE COMPLETE CHANNEL RELEASE DISC UA T3120 RR nRACCH + T1 (350ms) IMM ASSIGN RES T3122 (6s) T3110 0.5s MOBILE DISCONNECT PAGING COMMAND CM (IMMEDIATE ASSIGNMENT) CHANNEL ACTIVATION RR ESTABLISH INDICATION RR PHYSICAL CONTEXT REQUEST PHYSICAL CONTEXT CONFIRM CHANNEL ACTIVATION (TCH ASSIGN) CHANNEL ACT. ACK DATA REQUEST (CM) ESTABLISH INDICATION RF CHANNEL RELEASE (SDCCH) RR RF CHANNEL RELEASE ACK RR DATA REQUEST DATA REQUEST DATA INDICATION DATA INDICATION DATA REQUEST DATA INDICATION DATA REQUEST DEACTIVATE SACCH RELEASE INDICATION RF CHANNEL RELEASE RR MM CM BSS MAP T3101 (RR) 1s T3113 (RR) >T3101 + T3120 T3107 6s T3111 0.5s LAYER 2 TIMERS T200 240ms x 4 rep. THEN T3109 (8s) RELEASES LOWER LAYER. T10 8s MSC PAGING COMMAND CM PAGE RESPONSE CM SETUP ASSIGNMENT REQUEST COMMAND CM ASSIGNMENT COMPLETE CM CLEAR REQUEST CLEAR COMMAND CLEAR COMPLETE on RF channel release or T3111 expiry TNT3 (5s) TNT 2 (5s) TNT2 should be greater than T10 RF CHANNEL RELEASE ACK AUTHENTICATE REQUEST (RAND) AUTHENTICATE AUTHENTICATE REQPONSE AUTHENTICATE RESPONSE (SRES) CIPHER MODE COMMAND CIPHER MODE CMD CIPHER MODE COMPLETE CIPHER MODE COMPLETE SETUP CALL PROCEEDING CALL PROCEEDING ALERTING CONNECT CONNECT ACKNOWLEDGE (FACCH) (FACCH on TCH) CHANNEL RELEASE RELEASE COMPLETE Air Interface A-bis A-Interface T301 T303 T308 T310 T313 TNT4 T W S
P r o p r i e t a r y
- w w w . t w s - i n c . c o m
- ( 7 7 0 )
7 5 2 - 7 0 3 3 Mobile INTER - BSC HANDOVER BTS 2 MEASUREMENT REPORT BSC 1 SYS INFO 5 & 6 UA BTS MEAS. RESULT RR MM CM BSS MAP T7 20s T3113 6s H/O FAILS T3124 TIMES OUT SABM H/O FAILURE Return to Old channel (SACCH) HANDOVER COMMAND MS MEAS. RESULT DATA REQUEST RELEASE REQUEST RF CHAN. RELEASE RF CHAN. REL. ACK OLD BSC T8 12s T8 +T102 + TNT3 HANDOVER REQUIRED HANDOVER COMMAND CLEAR COMMAND CLEAR COMPLETE HANDOVER FAILURE MSC HANDOVER REQUEST H/O REQ. ACK. H/O COMPLETE RR MM CM BSS MAP T9113 12s T101 Def: 5s T102 Def: 5s TNT3 CLEAR COMMAND CLEAR COMPLETE TNT3 (5s) NEW BSC BSC 2 CHANNEL ACTIVATION ACT. ACK. HANDOVER DETECT ESTABLISH INDICATION RELEASE RF CHANNEL RF CH. REL. ACK. BTS 1 HANDOVER ACCESS PHYSICAL INFO PHYSICAL INFO SABM UA HANDOVER COMPLETE T3105 100ms T3124 320ms Mobile (FACCH) HANDOVER ACCESS (FACCH) Air Interface A-bis A-Interface A-Interface A-bis Air Interface Note: Handover Access on FACCH using RACCH burst structure No Phys Info on Synchronised Handovers (FACCH) DATA INDICATION RELEASE RELEASE COMPLETE RELEASE COMPLETE RELEASE DATA INDICATION T W S
P r o p r i e t a r y
- w w w . t w s - i n c . c o m
- ( 7 7 0 )
7 5 2 - 7 0 3 3 Mobile LOCATION UPDATE BTS T 3 2 1 0 2 0 s T 3 2 3 0 1 5 s T3240 10s CHANNEL REQUEST (RACH) IMMEDIATE ASSIGNMENT (AGCH) CM SERVICE REQUEST (LOC UPDATE) IDENTITY REQUEST IDENTITY RESPONSE AUTHENTICATION REQUEST AUTHENTICATION RESPONSE CIPHER MODE COMMAND CIPHER MODE COMPLETE LOC UPDATE ACCEPTED TMSI REALLOCATION COMPLETE RELEASE RELEASE COMPLETE CHANNEL REQUIRED CHANNEL ACTIVATION CHANNEL ACTIVATION ACK IMMEDIATE ASSIGNMENT T 3 2 5 0 5 S CHANNEL RELEASE RELEASE COMPLETE DEACTIVATE SDCCH RELEASE RF CHANNEL RF CHANNEL RELEASE ACK. BSC MSC LOCATION UPDATE REQUEST CM IDENTITY REQUEST IDENTITY RESPONSE AUTH. REQUEST (RAND) AUTH. RESPONSE (SRES) CIPHER MODE CMD (Key) CIPHER MODE COMPLETE LOC UPDATE ACCEPTED TMSI REALLOCATION COMPLETE CLEAR COMMAND (TMSI) CLEAR COMPLETE VLR VLR VLR TMSI ACKNOWLEDGE TMSI, LOC AREA ACCEPTED TMSI ACKNOWLEDGE UPDATE LOCATION AREA T3210 20s T3240 10s T3230 15s RR / CM / MM BSSMAP T3111 T3260 5s T3270 5s T3250 5S TNT 4 (5S) TNT3 (5S) SRES S.Smith Dec 94 (SDCCH) T3260 T3250 T3270 Air Interface A-bis A-Interface RELEASE INDICATION DISC UA RELEASED RELEASE COMPLETE CHANNEL RELEASE (SDCCH) T W S