Attach – Call Flow
13 Feb 2016
Network Architecture
2015 © Samsung Electronics 2
ENB – Interface and Protocol
The Protocols that run between UE and
eNB are called Access Stratum Protocols or
AS Protocols
The Protocols that run between UE and
Core Network are called as NAS Protocols
or Non Access Stratum Protocols
2015 © Samsung Electronics 3
MME – Interface and Protocol
2015 © Samsung Electronics 4
MME – Interface and Protocol
2015 © Samsung Electronics 5
SAE GW – Interface and Protocol
2015 © Samsung Electronics 6
SAE GW – Interface and Protocol
• IP Packet is tunneled between P GW and UE using GPRS Tunneling Protocol GTP
• Each Bearer has associated QCI
• Each QCI has GBR/ Non GBR, Priority, packet delay , Packet Error Rate defined
• PCRF decides the Bearer Type
• P GW performs the DHCP functionality = allocates IP addresses to each UE
2015 © Samsung Electronics 7
VoLTE – Logical Architecture
ENUM – Electronic Number Mapping System
To translate a telephone number into IP address
2015 © Samsung Electronics 8
VoLTE – Logical Architecture
2015 © Samsung Electronics 9
RJIL Network Overview
2015 © Samsung Electronics 10
LTE reference model
NODE DESCRIPTIONS
eNB Radio interfaces and radio resource management.
Radio bearer control/radio admission control/scheduling of uplink & downlink/
IP header compression and encryption of the user plane data/eNB handover(X2)/pooling
between MMEs and eNBs(S1, many-to-many relations)
MME LTE related control plane signaling
Mobility and security functions for devices attaching over the LTE RAN/Management of all the
terminals in idle mode including Tracking Area management and paging.
S-GW Anchoring point for intra-LTE and between GSM/GPRS, WCDMA/HSPA and LTE/ Accounting
functions for inter-operator charging and billing settlements.
P-GW Interconnection point to external IP networks. IP address allocation/charging/packet
filtering/policy-based control of user-specific IP flows
PCRF Policy and Charging Rules Function Flow based charging, including e.g., online credit control and
policy control including service authorization and QoS management.
OCS/OFCS Online Charging System / Offline Charging System
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 11
RJIL Network Architecture(LTE)
SAE-GW = S-GW + P-GW
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 12
Regional Sites (8 Super Core) Setup
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd.
2014 © Samsung Electronics 13
13
Child Circle Parenting with Regional Sites
Haryana Circle EPC Nodes connecting to Delhi Super Core Nodes and its Geo Mate Kolkata
Super Core Nodes.
Similarly, Assam Circle EPC Nodes connecting to Kolkata Super Core Nodes and its Geo Mate
Delhi Super Core Nodes.
Child Circle
Local Circle
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd.
2014 © Samsung Electronics 14
14
Basic VoLTE Network Architecture
IP PSTN
Network PLMN
LTE Network
HSS
EPC Network
PCRF SGW MGW
HSS
eNB MME
ENUM
MNP MGCF
S-GW P-GW
CSCF IP-SM-
SBC VCC
GW
ePDG
MRF TAS
eNB IMS Network
WiFi AP
SBC : Session Border Controller
CSCF : Call Session Control Function
VCC : Voice Call Continuity
TAS : Telephony Application Server
IP-SM-GW : IP-Short Message-Gateway
EPC MGCF : Media Gateway Control Function
MGW : Media GateWay
IMS (Minimum Set for VoLTE) SGW : Signaling GateWay
MRF : Media Resource Function
IMS HSS : Home Subscriber Server
MNP : Mobile Number Portability
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 15
RJIL Network Architecture(IMS)
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 16
PDN Connectivity & Attach
PDN connectivity a type of IP connection including QoS, charging, mobility, security, policy control
aspects, as such it is differentiated from the mere IP connection.
APN(Access Point Name): a character string that contains a reference to the PDN where the desired
services are available. The corresponding PGW is selected by the network based on the given APN.
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 17
QCI table
Dedicate
d
bearer
Persistent
Dedicated
bearer
Default
bearer
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 18
NW Architecture - Voice/Video Call over LTE
IMS
Network
TAS
LTE/EPC QoS control
Network
(Voice/Video service
Dedicated bearer MME PCRF info) CSCF
for media
SIP Signaling
Voice (QCI 1)
SAE RTP
UE eNB
Video (QCI 2) GW Voice/Video BGW
Bearer
Use the same architecture/procedure/protocol with VoLTE Traffic
– SIP for Signaling using default bearer with QCI-5
Difference with VoLTE
– Usage of two dedicated bearers
– One for voice (QCI-1) and the other for video (QCI-2)
– Codec used for video : H.264 (H.263 also used in normal commercial network)
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 19
Network Identities
2015 © Samsung Electronics 20
Identities Used in LTE - GUTI
GUTI – Globally Unique Temporary UE Identity - is assigned only by the MME during
initial attach of a UE to the E-UTRAN – masks the true identity of the subscriber
GUTI provides an unambiguous identification of the UE that does not revel the UE’s
permanent identity. It also allows identification of the MME and Network to which
UE attaches
GUTI has to main components - GUMMEI Globally Unique Mobility management
Entity Identifier and the M –TMSI that uniquely identifies the UE within the MME
For paging, the mobile is paged with the S-TMSI which is a shorter version of GUTI
On the S1 Interface, the IMSI is typically not seen just like the GUTI. Exceptions are
initial attach when no old GUTI is stored on the USIM card or in paging procedure
MCC and
MNC are 3
DIGITS
2015 © Samsung Electronics 21
Identities Used in LTE - RNTI
RNTI – Radio Network Temporary Identifier
RNTI is signaled in the MAC Layer. When MAC uses the PDCCH to indicate radio
resource allocation, the RNTI is mapped on the PDCCH depends on the logical channel
type -
C- RNTI : Temporary Cell Radio Network Temporary Identifier for Dedicated Control Channel
(DCCH and DTCH). It defines which data sent in DL belongs to a particular subscriber – all RRC
messages are marked with same C RNTI for a subscriber
P- RNTI : Paging Radio Network Temporary Identifier for Paging Control Channel (PCCH) is
derived from IMSI. It does not refer to a particular UE but to a group of UEs.
RA- RNTI : Random Access Radio Network Temporary Identifier for Random Access Response
(RAR) on DL-SCH – assigned to particular UE and is contained in the response from eNode B
for PRACH. The UE then uses this RA- RNTI to send RRC Connection Request
Temporary C-RNTI for Common Control Channel (CCCH) during random access procedure
SI- RNTI : System Information Radio Network Temporary Identifier for Broadcast Control
Channel (BCCH) – sent on PDCCH - it signals to all UEs where SIBs are found on PDSCH
RNTI Values
2015 © Samsung Electronics 22
LTE Identities
2015 © Samsung Electronics 23
Bearers
2015 © Samsung Electronics 24
LTE Identifiers
2015 © Samsung Electronics 25
UE Temporary ID’s at different interfaces
2014 © Samsung Electronics 26
S1AP Interface
In between eNB and MME, the User can be identified using the S1AP ID’s.
eNB-UE-S1AP ID is the S1AP ID terminating at the eNB side
MME-UE-S1AP ID is the S1AP ID terminating at the MME Side.
2014 © Samsung Electronics 27
GTP Teid’s
GTP-C Teid’s (S11 MME GTPC Teid and S11/S4 SGW GTPC Teid) are used as the control
plane teid’s at MME and GW respectively.
GTP-U Teid’s(S1-U eNB GTPU Teid and S1-U SGW GTPU Teid) are used as the user
plane teid’s at eNB and GW respectively.
2014 © Samsung Electronics 28
Diameter Session ID
Gx Diameter Session Id can be used to identify the diameter packets related to a
particular subscriber session.
Gx diameter session Id will be created when the session is created for the subscriber
and will stay till the session is available.
2014 © Samsung Electronics 29
Attach Call Flow
30
Attach Procedure
2014 © Samsung Electronics 31
T300 starts in UE (200ms)
Attach Procedure
Timer starts in eNB :
RRC_CONNECTION_SETUP (1000 ms)
Timer stops in eNB :
RRC_CONNECTION_SETUP
T300 stops in UE
Timer Starts at UE :
S1_INITIAL_CONTEXT_SETUP = Timer Stops at UE :
10000 ms S1_INITIAL_CONTEXT_SETUP
2015 © Samsung Electronics 32
Attach Procedure
RRC Connection Reconfiguration message including EPS Radio Bearer Identity and Attach
Accept message; UE sends Uplink Information Transfer message to the eNodeB which
includes the Attach Complete message
2015 © Samsung Electronics 33
Attach Procedure Timer starts in eNB :
RRC_UE_CAPABILITY_ENQUIRY[ms] = 2000
Timer starts in eNB :
RRC_SECURITY_MODE_COMMAND = 2000
ms
Timer stops in eNB :
RRC_SECURITY_MODE_COMMAND
Timer starts in eNB :
RRC_CONNECTION_RECONFIG = 1500 ms
Timer stops in eNB :
RRC_CONNECTION_RECONFIG = 1500 ms
RRC Connection Reconfiguration message including EPS Radio Bearer Identity and Attach
Accept message; UE sends Uplink Information Transfer message to the eNodeB which
includes the Attach Complete message
2015 © Samsung Electronics 34
rrcConnection
RACH Request
rrcConnection
Setup
rrcConnection
EPS mobility management
Setup Complete
2015 © Samsung Electronics 35
RACH Trigger (Two Examples)
2015 © Samsung Electronics 36
RRC Connection Request (UpLink) (Two Examples)
2015 © Samsung Electronics 37
RRC Connection Setup (Down Link)
2015 © Samsung Electronics 38
RRC Connection Setup Complete (Uplink)
Attach Request
2015 © Samsung Electronics 39
Attach Request
• The UE initiates the Attach procedure by sending the Attach Request message to the eNodeB
with following identities.
• IMSI or GUTI
• TAI (if available)
• UE Capabilities - indicates supported NAS and AS security algorithms by UE
• Attach Type - indicates EPS or combined EPS/IMSI
• ESM Message Container
• RRC Parameters
• The ESM Message Container contains the following identities.
• Request Type
• PDN Type - indicates requested IP version (IPv4, IPv6 or IPv4v6)
• Protocol Configuration Options (PCO) - included by UE and sent transparently to MME to
indicate Address allocation preference of UE (eg. after establishing default bearer using DHCP)
• Ciphered Options Transfer flag - must be set if PCO or APN or both are to be sent by UE
• KSIASME (if valid EPS security parameters available)
• NAS Sequence number (if valid EPS security parameters available)
• NAS-MAC (if valid EPS security parameters available)
• additional GUTI
• P-TMSI
• The RRC parameters indicate the Selected Network and old GUMMEI.
2015 © Samsung Electronics 40
RRC Connection Setup Complete (Uplink)
Attach Request
2015 © Samsung Electronics 41
RRC Connection Setup Complete (Uplink)
Attach Request
2015 © Samsung Electronics 42
RRC Connection Setup Complete (Uplink)
2015 © Samsung Electronics 43
RRC Connection Setup Complete (Uplink)
Attach Request
2015 © Samsung Electronics 44
RRC Connection Setup Complete (Uplink)
Attach Request
2015 © Samsung Electronics 45
AMBR
• UE-AMBR and APN-AMBR
• APN-AMBR
The APN-AMBR defines the total bit rate that is allowed for all non-GBR bearers associated with a
specific APN. The APN-AMBR limits the total non-GBR traffic for an APN, independent of the
number of PDN connections and non-GBR bearers that are opened for that APN. For example, if an
operator provides an APN for Internet, the operator may then limit the total bandwidth for that
APN.
UE-AMBR
• The UE-AMBR is defined per subscriber and defines the total bit rate allowed to be consumed for
all non-GBR bearers of a UE. The subscription profile contains the UE-AMBR. The eNodeB enforces
the UE-AMBR.
• There are different AMBR values for uplink and downlink directions - UL APN-AMBR, DL APN-
AMBR, and UL UE-AMBR, DL UE-AMBR.
2015 © Samsung Electronics 46
RJIL Initial Attach Request (APN=jionet)
SAE GW
UE eNB MME HSS PCRF SPR OCS
S-GW P-GW
Power on
RRC Connection Setup
1. Attach Request(PDN Connectivity Request)
ASIUCAUM
IMSI, Initial Request, APN=jionet
LTE Authentication
NAS Security Setup
Location Update
2. Create Session Request
IMSI, MSISDN, APN=jionet, PCO, Bearer Context (Bearer ID, Bearer QoS – QCI:9, GBR: 0, MBR: 0)
3. UE IP allocation 4. CCR(Indication of IP-CAN Session establishment)
Initial Request, Subscription-Id(e.g., IMSI), UE-IP, APN, Event-
Report, QoS Info(APN-AMBR(UL/DL)), EPS Bearer QoS(QCI, ARP)
5. Profile Request
6. Profile Response
User Profile = internet
7. Policy Decision
8. CCA(Acknowledge of IP-CAN Session Establishment)
PCC Rule for Default bearer(QCI=9, ARP=1, APN-
9. Policy Enforcement 9.1 CCR (Indication of Session, APN=JioNet)
AMBR(UL/DL)=50Mbps/100Mbps, Offline, TFT(UL/DL))
10. Create Session Response
UE-IP, Default bearer QoS(QCI=9, ARP=1, APN-AMBR(UL)=50Mbps, TFT(UL)=(UE IP, *, SIP, *, UDP)
9.2 CCA (Ack of session, APN=JioNet)
11. Attach Accept(Activate Default EPS bearer Context Request)
APN=jionet, UE-IP, Default Bearer QoS(QCI=9, ARP=1, UE-AMBR(ULAPN-
AMBR(UL)=50Mbps, TFT(UL)=(UE IP, *, SIP, *, UDP), PCO, GUTI, TAI-list Steps after Attach Request are :
12. Policy Enforcement 1. Authentication
13. Attach Complete(Activate Default Bearer Context Accept) 2. Security Mode
3. Identity Check
14. Modify Bearer Request Bearer ID
4. Update Location
15. Modify Bearer Response 5. Create Session
Default Bearer(QCI=9) 6. Attach Accept
7. UE capability
8. Modify Bearer
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 47
RJIL PDN Connectivity Request (APN=ims)
PCRF OCS
PCO option is used
Steps after
by UE during PDP Modify
context activation Bearer are :
to request for 1. PDN
Request
P_CSCF address, 2. Create
DNS server details Session
etc 3. Activate
Bearer
4. Modify
Bearer
4.1 CCR & CCA to/from PCRF, APN=ims)
4.2 CCR & CCA to/from OCS, APN=ims)
Not
configured
PCO : Protocol
Configuration Option is
used to allocate the PCSCF
domain name /IP address
Modify Bearer Request DNS : Domain Name
Server translates PCAM
Modify Bearer Response hostname into IP address
Samsung Confidential and Proprietary Information. All Contents Copyright ⓒ 2011 Samsung Electronics Co., Ltd. 48
VoLTE - UE Attachment and IMS Registration mes
sage
Auth Challenge
Steps after Modify
Bearer are :
UAR : User Authorization Request, UAA : User Authorization Answer 1. REGISTER
2. Authorization
MAR : Multimedia Authorization Request, MAA : Multimedia Authorization 3. 401
Answer Unauthorized
4. REGISTER
UDR : Update Data Request, UDA : Update Data Answer 5. Authorization
6. 200 OK
SAR : Server Authorization Request, SAA : Server Authorization Answer
2015 © Samsung Electronics RA4RA2 49
