Professional Documents
Culture Documents
BRKSPG-2022
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 2
Agend
Evolved
a Packet Core
Mobile Network Evolution
- From 2G to 3G
LTE/EPC introduction
LTE/EPC Interfaces and Basic Procedures
- LTE/EPC Architecture and Interfaces
- Basic call flows (attach, intra-LTE mobility)
- Bearers, PDN connections and QoS
- Security
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
From 2G to 3G R8
Improving the mobile data services
Home Location Service Control
In the beginning…. Register (HLR) Point (SCP)
There was wireless ISDN (aka GSM)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
… data was circuit switched
One burst every TDMA frame was sufficient to transport a speech
frame with source rate of 13 kbit/s
GSM Phase 2 (circa 1996) added Circuit Switched Data support
offering 9.6 kbit/s service
High Speed CSD consisted in aggregating multiple timeslot for a
single user but resource intensive
Modem Interworking Function
(IWF)
Modified V.110
BSC MSC
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
.. and eventually packet data with General Packet Radio
System was bolted on
IP
GRX
BSC SGSN
BTS GGSN
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
3GPP UMTS System
First step towards an all IP network
New radio designed to accommodate greater packet throughput
(up to 2Mbits/s initially… In reality, can support up to 384 kbit/s)
Core network remains largely unchanged from 2.5G
Migration to ATM for Radio Access Transport
3G MSC
More control into the RNC
PSTN
ATM/AAL
2
ATM/AAL
5
Node B 3G RNC IP
3G SGSN GGSN
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
3G Packet Architecture
Iu-ps Gn/Gp
MAC Frame
MAC IP IP IP IP
Protocol
AAL2 AAL2 AAL5 AAL5 L2 L2
WCDMA WCDMA ATM ATM ATM L1 L1
ATM
Radio Radio
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
3GPP R4 Voice Services
HLR
MSC-s MSC-s
Iu-cs
IP
MGW MGW
INAP
MAP
Nb-UP
TCAP
RTP
Still Voice over CS bearer on the radio ac cess, data bearer not suitable (latency, overhea d)
BICC or SIP-T
H.248
Iu-UP UDP
AAL2 IP
ATM L1/2
SCTP
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
3GPP R5 to R7: Addressing the Bottlenecks
HSPA+: Distribute RNC
Data plane to NodeHBSDPA Removes Drift RNC and
adds intelligence to the Node B
Iu-ps Gn
Drift RNC
Node B Serving RNC 3G SGSN GGSN
3G MSC-S HLR/HSS
SGW PSTN
IP RAN
w/ ATM PW
or Native 3G MGW
Core IP
IP 3G RNC
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Introducing LTE
The 3GPP All-IP architecture
What is the LTE/SAE?
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
LTE/EPC Key Attributes
Higher Bandwidth (>100 kbps per user on average) and improved latency
- Transmission and transition delays <10 & 100ms resp. in unloaded conditions
Always-on model
- All registered users have a default bearer established used for signalling
IP addressing
- IPv6 by default with dual stack sessions (IPv4v6)
Local breakout
- Part of the traffic may be routed directly in the visited network
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
3GPP Mobile Network
Evolution
GERAN CS Network
UTRAN
IP Services
Evolved
E-UTRAN / Internet
Packet Core
(LTE)
(EPC)
Non-3GPP
Access
EPS = Evolved
Packet System
LTE (Long Term
Evolution) is the 3GPP
WI that defined the E-
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Evolved Packet System
Architecture
RNC SGSN GGSN
NodeB PDN/
Internet
RNC
MME
eNodeB PGW
PDN/
Internet
SGW
Next Mobility
PDN
Generation interconnect
Cell Site Control Destination
Node Network
Mobility
Anchor
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
UMTS, LTE/SAE Architecture:
Comparison
SGSN MME + Serving GW
- In the LTE architecture the SGSN functionality is split into MME & Serving GW
MME = Control Plane of SGSN
Serving GW = Data Plane of SGSN
GGSN PDN GW
- The PDN GW has similar
function as the GGSN
IP Anchor
Policy Enforcement
Accounting/Charging
Deep Packet Inspection
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
UMTS, LTE/SAE Architecture:
Comparison
LI OCS CGF
PCRF Gi AAA
HSS/HLR ADMF/DF HSS
Ro Ga
Gi X1,x2,x3 S6b SGi
S6a
Gx
Gx
S11
Gn/Gp SGSN S10
Gn/Gp
SGSN MME S-GW
GTP-U
IuPs IuPs
S1-U
S1-MME
RNC
RNC
Iub Iub
Iub Iub
nodeB nodeB
nodeB nodeB
eNB eNB
UMTS UMTS
(Direct Tunnel) LTE-SAE
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
Key 3G <-> LTE terminology differences
3G LTE
Primary PDP Context Default Bearer
Secondary PDP Context Dedicated Bearer
Routing Area Tracking Area
P-TIMSI (Packet- GUTI (Globally Unique Temp ID)
Temporary includes GUMMEI)
IMSI)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
EPC Protocol Stacks – Signalling Plane
MME
S1-MME
UE
eNodeB PDN-GW
S-GW
NAS NAS
S1-MME
RRC RRC S1-AP S1-AP
PDCP PDCP SCTP 36.413 SCTP
RLC RLC IP IP
MAC MAC L2 L2
OFDMA OFDMA L1 L1
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
EPC Protocol Stacks – Data Plane
MME
S1-U S5/S8
UE
eNodeB PDN-GW
S-GW
IP (user) IP (user)
S1-U S5/S8
PDCP PDCP GTP-U GTP-U GTP-U PMIP PMIP GTP-U
36.414 29.274
RLC RLC UDP UDP UDP GRE UDP GRE
IP IP IP (GTP) IP
MAC MAC
L2 L2 L2 - L2
OFDMA OFDMA L1 L1 L1 29.275 L1
(PMIPv6)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
EPC Protocol Stacks – X2 interface
MME
X2
UE
eNodeB PDN-GW
S-GW
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
EPC Roaming
Home Gateway Model
Rx
Gx
Operator’s
hPDN-GW IP
S6a
Services
Home Network (e.g. video,
IMS)
Visited Network S8
MME
eNodeB vS-GW
UE
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
EPC Roaming
Visited Gateway Model aka Local Breakout
S6a S9
Home Network
Visited Network
MME Gx Rx
Operator’s
IP
Services
eNodeB vS-GW vPDN-GW
UE (e.g. video,
IMS)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
LTE/EPC Interfaces and Basic
Procedures
LTE Initial TS 23.401 Ch. 5.3.2.1 (for GTP S5)
Attach or TS 23.402 Ch. 5.2 (for PMIP S5)
All
UE
MME
PGW
eNB
DNS
SGW elements
selects
selects
used
retrieves
sends
forwards
may
assignsto
retrieve
PLMN
Create
MME
(SGW,
resolve
IP
subscription
Create
address(es)
and
and
PCC
Session
MME,
APNSession
eNodeB
sets
and
and
eNB)
up
information
Request
QoS
and
aid
Request
and
are
rules
binds
insets
to
up
and/or
SGW
bearer
connection
selecting
to
for
updated
PGW
radio
default
toauthenticates
toto
set
resources
and
PGW/SGW
the
bearer
set
ifupnone
PCC/QoS/billing
now
up
default
from
default
traffic
established
UE bearer
PCRF
can
with
bearer
flow
HSS
rules
(GTP
previously
S5 case) S6a
HSS PCRF
MME
S1-MME Gx
S11 DNS
LTE-Uu
S5/S8
S1-U
SGW PGW SGi
PDN
UE
eNB
Connectivity Corporate
Network
UE eNB SGW
Internet
PGW
IMS
Default Bearer
Dedicated Bearer APN “IMS”
PDN Type IPv6
Each PDN connection has one default bearer
- possibly one or more dedicated bearers
All bearers of the same PDN Connection use the same IP address(es)
- IPv4, IPv6, or IPv4v6 (dual-stack)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Dedicated Bearer
Activation
The PGW may activate a dedicated bearer, possibly after
indications from UE or PCRF
The UE can only ask for the amount of resources, the network
decides whether an existing bearer is modified or a new one
is established.
UE eNodeB MME Serving GW PDN GW PCRF
1. IP-CAN Sessi on
(A)
Modification
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Setting up additional PDN
connection MME S/PGW
UE
eNB
PDN Connectivity Request (APN,…)
Create Session Request
Bearer Setup Req. Create Session REsponse
(def bearer)
PDN Connectivity Accept
RRC
Bearer Setup
Resp
PDN Connectivity Complete
Modify Bearer
The UE initate the request indicating the APN for the PDN connection
Multiple APNs/PDNs must be managed by the UE and the applications
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
Quality of Service in the
EPS
• QoS parameters per EPS‐bearer
- QoS Class Identifier (QCI)
Scalar value used for scheduling/RRM decisions
- Allocation and Retention Priority (ARP)
Used to accept/modify/drop bearers in case of resource limitation
- Guaranteed Bit Rate (GBR) and Maximum Bit Rate (MBR) only for
dedicated bearers
• QoS paramers per group of EPS‐bearers
- Aggregate Maximum Bit Rate (AMBR)
Only for non‐GBR bearers, APN-AMBR and UE-AMBR
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
EPS Security
HSS
S6a EPS AKA via S6a
(Auth
Vectors)
Challenge and keys
exchange
MME
U-Plane Ciphering
UE
Power
On ECM-IDLE ECM-CONNECTED ECM-IDLE
RRC_IDLE RRC_CONNECTED RRC_IDLE
Signaling connection
Detach establishment
EMM-DEREGISTERED E
M
UE position unknown UE position known at eNB level M-
UE position known at TA level
R
No Context allocated Network controlled HO Cell reselection, paging
E
EPS Mobility Management (EMM) defines the relation betweenGI UE and MME
ST
resulting from mobility
E
R
EPS Connectivity Management (ECM) is related to the signaling connection
between UE and MME E
D
RRC state is related to the connection established between UE and E‐
UTRAN
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
EPS Connectivity
TS 36.331 TS 36.413
UE RRC Connection
eNB
S1 Connection MME
ECM Connection
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Tracking Area Update vs. Paging
Paging
Paging
Enter Idle
Mode
Enter
Connected
Mode
TAI list 1
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
TAU Procedure
HSS
Context Resp
Old New No UE context
Context
MME Request.
availablle
MME
TAU Request
TAI list 1 TAI list 2 TAU Accept
eNB
eNB
TAI not in
TAI list
The TAU may require a relocation of the MME (as in the picture)
and/or also of the SGW
The new MME identifies the old MME from the MME Id included
in the GUTI (Global Unique Temp. Id) sent in the Request
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
X2 Based
Handover
Update Bearer
MME SGW
HO Request
HO Request
Ack.
eNB HO Command Data forwarding eNB
HO
Measurement Confirm
Reports
UE
Load Balancing: the MME sends a weight factor (RMC) to be
used by the eNB for MME selection
Load re-balancing: procedures for node offload (O&M
operation)
MME relocation required for load re-balancing or for mobility
across different MME pool areas
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
EPC Node
Selection
Process of Discovering/Choosing PGW, SGW, MME:
- Initial Attach (PGW and SGW)
- Additional PDN Connection (PGW)
TS 23.401
- Relocation/Handover (SGW, MME)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Policy session TS 29.214
Control PCRF
Rx
request
Event &
AF
Access
Info Gxc Event & Notifications
Access Rules
QoS Info Gx TS 29.212
EPS bearer with PMIP S5 PMIP tunnel (no QoS) Off-path PCC
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
Voice over LTE Strategies
Voice & SMS Services
Providing Legacy Services in an LTE Network
UTRAN / IuCS / A
MSC
GERAN
SGs
2
SMS is delivered via SGs interface
S6a
MME HSS
S1-MME S11
S1-U
Serving/
CSFB UE E-UTRAN
PDN
GW
During EPC attach, CSFB UE’s are also attached over SGs to MSC
MME maintains mapping of TA to LA to determine appropriate MSC to
establish SGs association with
SMS can be delivered/sent without FallBack to legacy radio (SGs
interface includes SMS payload capability)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Circuit Switched Fallback (23.272)
Delivery of Terminating Voice Session to EPC Attached Subscriber
1
Incoming Call – delivered to VMSC which
has SGs association for this subscriber
4 UE Responds to paging –
incoming call terminated via
standard 2G/3G
procedures IuCS / A
CSFB UE UTRAN / MSC
GERAN
SGs
2
UE is paged via the SGs interface
3 S6a
UE retunes to 2G/3G RAT on MME HSS
receipt of page
S1-MME S11
S1-U
Serving/
CSFB UE E-UTRAN
PDN
GW
IuPS / Gb Sv Mg ISC
Cx I/S-CSCF MGCF
SGSN S3 S6a
MME HSS Mw
(SR-VCC)
P-CSCF
S11
S1-MME SGi
(Gm from UE)
S1-U Serving/
E-UTRAN
SR2- PDN GW
VUCECOUrEigi
nates Call
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
Voice over IMS
UE roams during active call – SR-VCC mobility
IMS (HPLMN)
3
SCC AS performs
bearer management
2
IuCS / A and tears down original
NewUcTaRl Al MSC Server SCC AS IP-SM-GW
SR-VCC UE leg
(SR-VCC)
eNg/
TAS
estaGblEisRhIuPS
A / Gb Sv Mg ISC
eNd
Cx I/S-CSCF MGCF
1 S3 S6a
UE retunes to 2G/3G SGSN MME HSS Mw
RAT during active call (SR-VCC)
P-CSCF
S11
S1-MME SGi
(Gm from UE)
S1-U Serving/
SR-VCC UE E-UTRAN
PDN GW
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
CSFB – MSC/VLR Selection
As defined in 23.272
TA LA MSC/VLR TA LA MSC/VLR
TA1 LA1 MSC/VLR1 TA1 LA1 MSC/VLR1
TA2 LA1 MSC/VLR1 TA2 LA1 MSC/VLR1
MME TA3 LA2 MSC/VLR2 MME TA3 LA2 MSC/VLR2
Mapping
Error Area
TA TA TA TA TA TA
1 2 3 1 2 3
LA1 LA2 LA1 LA2
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Roaming Retry
TS 23.272/23.018
11. SRI
2. SRI 5. SGs Page
VMSC VMSC MME
MME
3. PRN
HLR HLR
9. Cancel Location
8. UL 12. PRN
6. Page
VMSC VMSC
UE
UE must support CSFB procedures as defined with TS 23.272
MME
Must support SGs interface
Must support MSC/VLR selection procedures
MSC
Must support SGs interface (legacy MSC’s will require addition of IP
interface cards)
Should support Roaming Retry procedure to minimise call drops
HLR
Should support Roaming Retry procedure to minimise call drops
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Cisco CSFB Product Strategy
Cisco has developed a CSFB product strategy that addresses:
Inefficient operational deployment model – operators not forced to upgrade
legacy MSC and HLR platforms
Investment legacy Capex spend – no investment required on legacy MSC
or HLRs
Complicated MME provisioning procedure – requires only static TA-LA
mappings
The Cisco solution places no dependencies on existing network elements (CS or
EPC)
Supports both SMS (originate/terminate) and Voice (CSFB)
Roaming Retry procedural support not required
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
CSFB IWF – Architectural Fit
Um GERAN/ A/Iu
MSC/VLR MAP
UTRAN
UE HLR
MAP
LTE-Uu S1-MME SGs
E-UTRAN MME CSFB IWF
S6a MAP
HSS SMSC
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
EPC Attach / Location Update Procedure
3G 4G
Core HLR HSS Core 1. UE Registers in LTE
MAP
2. Serving MME registers with HSS
4
2
3. Serving MME informs registered VLR
(CSFB IWF)
CSFB SGs
MSC MME
IWF
3 4. CSFB IWF registers as serving MSC with
HLR
1
RNC E-UTRAN
3G/4G
Device
3G 4G UE
4G
Access Access
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Mobile Originated SMS
3G 4G
Core HLR HSS Core 1. UE initiates SMS
BSC/RNC E-UTRAN
3G/4G
Device
3G 4G UE
4G
Access Access
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
Mobile Termination SMS
3G 4G
Core HLR HSS Core 1. Incoming SMS to SMSC
2 2. SMSC queries HLR to determine routing
MAP
SMSC
1 3 3. SMSC sends SMS to serving MSC (CSFB
IWF)
CSFB SGs
MSC IWF MME 4. CSFB IWF sends SMS to MME
4
› CSFB IWF performs SMS MT service logic
› CSFB IWF performs SMS MT billing
› CSFB IWF performs LI if required
RNC E-UTRAN
3G/4G
Device
3G 4G UE
4G
Access Access
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
Mobile Origination
3G 4G
Core HLR HSS Core 1. UE leaves LTE and re-tunes to
MAP
GSM/UMTS
2 3
2. UE Location Updates on GSM/UMTS
3. HLR sends Cancel Subscriber to CSFB
CSFB SGs IWF
MSC IWF MME
› CSFB IWF Removes subscriber from
VLR
4. UE initiates
4 call
RNC E-UTRAN
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
Mobile Terminated Call
Signalling times and delays example
500 ms additional delay
to avoid race Inserts MSRN from
conditions VMSC into original PRN
Response
This delay may vary 13. MAP PRN Resp
depending on RAN T0+2880ms
conditions 12. SRI ACK T0+2869
HLR 9. SRI
T0+2767ms
3. MAP PRN
T0
2. MAP SRI
8. MAP CL
T0+2222ms 4. SGs Page
14. MAP SRI Ack
IWF T0+7ms MME
10. MAP PRN
15. IAM 6. LU
VMSC
16. Page
Note: only key messages are shown for simplicity (e.g. not all acknowledgments are shown)
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
Benefits of CSFB IWF
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
VoLTE (IMS) – Deployment Challenges
Some of the major challenges/difficulties facing VoLTE rollout are:
Service parity/consistency
Network complexity
Back office (re)integration
Legacy network dependencies (SR-VCC)
Call routing and optimisation
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Single Radio Voice Call Continuity
SR-VCC
Voice call anchored in IMS over PS (e.g. LTE) access
UE moves to area of CS access only
UE is capable of transmitting/receiving on only one of those access
networks at a given time.
Mobility handled at two levels
Radio
S1, Sv and MAP-E signaling
Application
SIP / SDP
Requires Service Centralization and Continuity Application Server (SCC AS)
From SCC AS perspective, seen as a PS to CS access transfer
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Additional
Resources
- www.3gpp.org
- http://www.thespectool.com/v2/index.php
Relevant 3GPP Specifications:
• TS 36.300 E-UTRA and E-UTRAN Overall description; Stage 2
• TS 36.331 E-UTRA; Radio Resource Control (RRC); Protocol
specification
TS 23.401 GPRS enhancements for E-UTRAN access (EPC)
TS 23.402 Architecture enhancements for non-3GPP access
• TS 24-301: Non-Access-Stratum (NAS) protocol for EPS;
Stage 3
• TS 29.272: EPS; MME and SGSN related interfaces based on
Diameter protocol
• TS 33.401 3GPP SAE; Security architecture
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
Recommended Reading
BRKSPG-2022 © 2012 Cisco and/or its affiliates. All rights reserved. Cisco Public 73