www.nmcgroups.

com

LTE X2 Handover

X2 Handover Case
The X2 handover is used when direct connectivity exits between the source and target eNBs with X2 interface

Handover Preparation
The X2 handover procedure is performed without Evolved Packet Core (EPC) involvement, i.e. preparation messages are directly
exchanged between Source eNB and Target eNB

Handover Execution
There is direct tunnel formed between source and target eNBs for downlink data forwarding in handover execution time

1. Before Handover 2. Handover Preparation 3. Handover Execution 4. Handover Completion 5. After Handover

1 1 1 1 1
3 3 3 3 3

MME SAE-GW MME SAE-GW MME SAE-GW MME SAE-GW MME SAE-GW

2 2 2
2 2 2
2 2
2 2

Source Target Source Target Source Target Source Target Source Target
3

eNB eNB eNB eNB eNB eNB eNB eNB eNB eNB

3 1 1 1
3 1
1 4 3 3

UE UE UE UE UE
moving moving moving moving

· Source eNB makes the HO
decision
· Direct Tunnel Setup (X2
Transport Bearer between
Source eNB and Target eNB)
· Detach from Source eNB
· Direct Packet Forwarding (DL
traffic from Source eNB to
Target eNB)
· Path Switch procedure
between Target eNB and
MME
· Release S1 Bearer of Source
eNB
· Release X2 Transport Bearer
for direct Packet Forwarding

DRB (Data Radio Beaer) S1 Bearer (GTP Tunnel) X2 Bearer (GTP Tunnel) S11 (GTP-C) Signaling UL Traffic
Signaling in Radio S1 Signaling X2 Signaling
DL Traffic

About NMC Consulting Group

NMC Consulting Group was founded on year 2002 and is advanced, professional network consulting company which is specialized for IP Network area like FTTH, Metro Ethernet and
IP/MPLS, Service area like IPTV and IMS lastly, Wireless network area like Mobile WIMAX and LTE.
Copyright © 2002-2011 NMC Consulting Group. All rights reserved.

LTE X2 Handover 1
LTE X2 Handover
Source Target

UE eNB eNB MME S-GW P-GW HSS PCRF

EMM-Registered EMM-Registered
ECM-Connected ECM-Connected
RRC-Connected RRC-Connected

DRB (UL/DL) S1 Bearer (UL/DL) S5 Bearer (UL/DL) Internet

Measurement Report Triggering the UE to send a Measurement Report based on

Serving Cell (Radio Signal Strength), triggering event (e.g., when a neighboring cell becomes better
Target Cell (PCI, Radio Signal Strength) than the serving cell in terms of radio signal strength)

Handover Decision by Source eNB

Derive KeNB*
Handover Request
Handover Preparation

ECGI of the Target Cell (of Target eNB), UE-AMBR, UE Security Capability, KeNB*, E-RAB to be setup (E-RAB ID, QCI, ARP, S1 S-GW TEID)
eNB generates AS keys from KeNB (KeNB = KeNB*)
Receive S1 TEID (UL) S1 TEID (UL) for Source eNB
S1 Bearer Established (UL)
Admission control with E-RAB QoS (QCI, ARP)
Target eNB reserves RRC resource and allocates a new C-RNTI (e.g., Target C-RNTI)
Handover Request Ack
X2 Transport Bearer’s {E-RAB ID, Target eNB TEID},
Handover Command (Target C-RNTI, Target DRB ID (UL/DL), Target eNB AS Security Algorithm)
Receive Target eNB Create Target eNB TEID (DL)
TEID (DL)
X2 Transport Bearer (DL) DL: From Source eNB to Target eNB
Established
Create DRB ID (UL/DL)
Handover Command (RRC Connection Reconfiguration)
Target C-RNTI, Target DRB ID (UL/DL), Target eNB AS Security Algorithm)
Receive DRB ID (UL/DL)
Detach from
RRC-Idle
Handover Execution

the source eNB

UE can not send & receive packets

UE generates KeNB (KeNB = KeNB*) & AS keys

SN (Sequence Number) Status Transfer
DL Count (DL PDCP SN), UL Count (UL PDCP SN)
S1 Bearer (UL/DL) S5 Bearer (UL/DL) Internet

X2 Transport Bearer (DL)

Synchronization Buffering DL Packets
UL Allocation
Handover Confirm (RRC Connection Reconfiguration Complete)
Target C-RNTI Start to send the Buffered DL Packets to the UE

DRB Established (UL/DL)

RRC-Connected
AS Security setup

S1 Bearer (UL/DL) S5 Bearer (UL/DL) Internet

X2 Transport Bearer (DL)

DRB (UL/DL)

DRB (UL/DL) S1 Bearer (UL) S5 Bearer (UL/DL) Internet

Path Switch Request

ECGI, TAI, Received UE Security Capability, E-RAB to be switched in DL (E-RAB ID, S1 Target eNB TEID)
Create S1 TEID (DL) Modify Bearer Request
EPS Bearer in DL (EPS Bearer ID, S1 Target eNB TEID), ECGI, TAI
Receive S1 TEID (DL)
S1 Bearer Established (DL)
Handover Completion

Modify Bearer Request

EPS Bearer ID, ECGI, TAI Indication of IP-CAN Session Modification (CCR)
IMSI, UE IP, ECGI, TAI
Acknowledge of IP-CAN Session Modification (CCA)
Modify Bearer Response
EPS Bearer ID
Modify Bearer Response
EPS Bearer in DL (EPS Bearer ID)
Switch to DL path
S1 Bearer (UL/DL) EM Send “End Marker” Packet
For re-ordering in the Target eNB, the S-GW sends “End-Marker”
X2 Transport Bearer
EM (DL) packet(s) on the old path immediately after switch the path
Target eNB sends packets to UE from old path
(X2) until receiving “End-Marker”, after then it
sends packets from new path (S1)

DRB (UL/DL) S1 Bearer (UL/DL) S5 Bearer (UL/DL) Internet

Path Switch Request Ack

UE Conext Release E-RAB to be switched in UL (E-RAB ID)
Source
Source eNB release UE context Target eNB
3 4 EM
X2 Transport Bearer (DL) eNB
Released 3 4 5 EM
UE
EMM-Registered S1 Bearer Released (UL/DL)
5
ECM-Connected EMM-Registered S-GW
RRC-Connected RRC-Connected ECM-Connected EM End Marker

LTE X2 Handover 2