0% found this document useful (0 votes)

7 views

LTE_Protocols and Procedures

The document is an eLecture on LTE RAN Protocols and Procedures, produced by Ericsson, aimed at training participants on various aspects of the EPS Protocol Architecture, Quality of Service, and signaling protocols. It includes course objectives, definitions of protocols, and examples of protocol categories and structures. The content is intended for educational purposes and is not a technical specification, with strict restrictions on reproduction and distribution.

Uploaded by

Shailesh Prasad

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

7 views

LTE_Protocols and Procedures

Uploaded by

Shailesh Prasad

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 287

LTE RAN Protocols and Procedures (eLecture)

LTE RAN Protocols and

Procedures (eLecture)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 0

LTE RAN Protocols and Procedures (eLecture)

DISCLAIMER

This is a Learning Product, which contains simplifications. Therefore, it must

not be considered as a specification of the system. The content is subject to
revision without notice due to ongoing progress in methodology, design and
manufacturing. Ericsson shall have no liability for any error or damage of any
kind resulting from the use of this Learning Product as technical reference.

The Learning Product documentation is not intended to replace the technical

documentation that was delivered with your system. Always refer to that
technical documentation during operation and maintenance.

)
This Learning Product was produced by Ericsson AB. The Learning Product

e
ur
documentation is to be used for training purposes only and it is strictly

ct
prohibited to copy, reproduce, disclose or distribute it in any manner without

Le
(e
the express written consent from Ericsson Learning Services.
ur 3
ed 02
es
oc 2

In this context, it is also strictly forbidden to screen record in picture, audio, or

Pr ces

video, any parts of sessions where the Learning Product is delivered remotely
nd rvi

(“when attending live training on-line, or consuming digital learning via web-
s a Se

based delivery”).
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 1

LTE RAN Protocols and Procedures (eLecture)

Course Objectives
On completion of this course the participants will be able to:

1. Explain the EPS Protocol Architecture

2. Explain the LTE/SAE Quality of Service and Security in LTE
3. Explain the various L3 Signaling Protocols
4. Explain the L2 transport protocols PDCP, RLC, MAC and GTP-U Protocols
5. Explain Mobility in LTE

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 2

LTE RAN Protocols and Procedures (eLecture)

EPS Protocols Introduction

LTE RAN Protocols and Procedures(eLecture)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 3

LTE RAN Protocols and Procedures (eLecture)

Objectives of Chapter 1
After this chapter the participants will be able to:

1. Distinguish between the different EPS protocol types.

2. Impact on EUTRAN Architecture with respect to 5GC.
3. Impact on EPC with introduction of CUPS.
4. Explain the EPS architecture, Bearer and Tracking Area.
5. Draw a simplified EPS diagram showing the protocols used.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 4

LTE RAN Protocols and Procedures (eLecture)

What is a ‘Protocol’?
Definition for computers:
Protocol is a set of rules governing the format of messages that are exchanged between computers.
The reference model used is the OSI Model with 7 Layers.

OSI Model

7 – Application Layer
6 – Presentation Layer
5 – Session Layer
4 – Transport Layer
3 – Network Layer
2 – Data Link Layer
• LLC sublayer

)
• MAC sublayer

e
ur
1 – Physical Layer

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 5

LTE RAN Protocols and Procedures (eLecture)

Protocol Categories
Signalling Protocols (Layer 3)
These protocols are used to communicate between nodes using various messages with a defined
structure.
An example of a signalling protocol (Layer 3) is the X2 Application Protocol (X2AP) which is used by
eNodeBs to communicate across the X2 interface.

Signalling Protocols (Layer 3)

These protocols are used to communicate between nodes using various messages with a defined
structure.
An example of a signalling protocol (Layer 3) is the X2 Application Protocol (X2AP) which is used by
eNodeBs to communicate across the X2 interface.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 6

LTE RAN Protocols and Procedures (eLecture)

Freddy’s Restaurant
#1 #2

#3 #4

#5 #6

)e
ur
ct
#7 #8

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 7

LTE RAN Protocols and Procedures (eLecture)

MenuAP L3 Signalling Protocol

Number required:
Order Type:
00: 1
00: Appetizer
01: 2
01: Soup/Salad
10: 3
10: Pasta
11: 4
11: Chicken

xxyyyzz
If Order Type = 00 then If Order Type = 01 then If Order Type = 10 then If Order Type = 11 then
000: Clams Casino 000: Chupe de Camarones 000: Linguini carbonara 000: Chicken Picata
001: Mussels Provencale 001: Soup of the day 001: Linguini Alfredo 001: Chicken Marsala
010: Chicken Buffalo wings 010: Cesar salad 010: Linguini with chicken 010: Chicken Roma
011: Salchipaspas 011: Cesar salad with chicken 011: Rigatoni San Paolo 011: Laura’s Chicken
100: Chicken Fingers 100: Caribbean salad 100: Cheese Tortellini 100: Chicken Chapaco
101: Coconut Breaded Shrimp 101: Grilled chicken salad 101: Meat lasagna 101: Grilled chicken
110: Yuca Rellena 110: Greek salad 110: Reserved for future 110: Sauteed chicken

)
111: Papa Rellena 111: Freddy’s salad 111: Reserved for future 111: Reserved for future

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 8

LTE RAN Protocols and Procedures (eLecture)

TLC L2 Transport Protocol

#1 #2 000: Table #1
001: Table #2 Protocol Stack

#3 #4
010: Table #3 MenuAP
011: Table #4 TLC
100: Table #5
#5 #6
101: Table #6
110: Table #7
#7 #8 111: Table #8

e)
TLC Header MenuAP Message

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 9

LTE RAN Protocols and Procedures (eLecture)

Freddy’s Restaurant Order Example

L2 L3
Order for Chicken Soup of the Cheese Grilled
X2 X2 X2 X2
table #1 Fingers day Tortellini Chicken

0000010001010010110100011110101

e)
ur
ct
Appetizer Soup/Salad Pasta Chicken

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 10

LTE RAN Protocols and Procedures (eLecture)

3GPP Project Co-ordination Group (PCG)

TSG Structure
PCG

TSG RAN TSG SA TSG CT

Radio Access Network Service and System Core Networks and
Aspect Terminals
RAN WG1
Radio Layer 1 Spec SA WG1 CT WG1
RAN WG2 Services MM/CC/SM (Iu)
Radio Layer 2 &3 Spec SA WG2
RAN WG3 Architecture CT WG3
Iub, Iur, Iu Spec SA WG3 Interworking with external
RAN WG4 Security networks
Radio Perf. Protocols
SA WG4
RAN WG5 CODESCs

)
SA WG5 CT WG4

e
Mobile Terminal

ur
RAN WG6 Telecom MAP/GTP/BCH/SS
Managements

ct
Legacy Radio Protocols
SA WG6 CT WG6

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 11

LTE RAN Protocols and Procedures (eLecture)

3GPP LTE and SAE Work Items

Result
Specification Group Work Item

TSG RAN LTE

EUTRAN Specifications
(36 series)
LTE: Long Term Evolution
EUTRAN: Evolved UMTS Terrestrial Radio Access Network

Result
Specification Group Work Item

TSG SA SAE
EPC Specifications

)
(From Rel 8 onwards)

e
ur
SAE: System Architecture Evolution

ct
EPC: Evolved Packet Core

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 12

LTE RAN Protocols and Procedures (eLecture)

LTE Specifications All specifications can be found on the web site www.3gpp.org
36.201 – Physical layer general description 36.401 – E-UTRA Architecture Description
36.211 – Physical channels and modulation 36.410 – S1 interface general aspects & principle
36.212 – Multiplexing and channel coding 36.411 – S1 interface Layer 1
36.213 – Physical layer procedures 36.412 – S1 interface signalling transport
36.214 – Physical layer measurements 36.413 – S1 application protocol S1AP
36.414 – S1 interface data transport
36.300 – E-UTRA overall description 36.420 – X2 interface general aspects and principles
36.302 – Services provided by the physical layer 36.421 – X2 interface layer1
36.304 – UE Functions related to idle mode 36.422 – X2 interface signalling transport
36.306 – UE radio access capabilities 36.423 – X2 interface application part X2AP
36.321 – Medium Access Control (MAC) Protocol Specification 36.442 – UTRAN Implementation Specific O&M Transport
36.322 – Radio Link Control (RLC) Protocol Specification 29.274 – GTP-C
36.323 – Packet Data convergence Protocol (PDCP) Specification 29.281 – GTP-U
36.331 – Radio Resource Control (RRC) Protocol Specification
23.002 – Network Architecture
36.101 – UE radio transmission and reception (FDD) 23.003 – Numbering, addressing and identification
36.104 – BTS radio transmission and reception (FDD)
23.009 – Handover Procedures
36.113 – Base station EMC
36.133 – Requirements for support of Radio Resource 23.048 – Security mechanisms for USIM application
Management (FDD) 23.401 – GPRS enhancements for eUTRA

)
36.141 – Base station conformance testing (FDD) 23.203 – QoS Concept

e
ur
23.272 – CS Fallback in EPS
24.301 – NAS Protocol for Evolved Packet System (EPS)

ct
24.302 – Access to the EPC via non 3GPP networks 33.401 – System Architecture Evolution (SAE) : Security

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 13

LTE RAN Protocols and Procedures (eLecture)

Key Points for E-UTRAN Deployment

• Post 3GPP release – 15 with the introduction of 5G Services, 5G/NR capable radio nodes may be
deployed by reusing existing EPC hardware (for eMBB and M-IoT services) or use an entire new
5GC/NGCN (for full 5G services).
• To enable 5G services while reusing existing EPC we need to do a software upgrade to add the CUPS
functionality in EPC and hence it will be referred as EPC+ in the current document.
• LTE radio node and 5G/NR radio node can team up and work together for a given UE (LTE + NR
capable) irrespective of the their mutual position (LTE - NR site co-deployed or LTE site and NR site
are on different location).
• If in the core network both EPC+ and 5GC are available as core then E-Utran network can be defined
in any of three possibilities
a) eNB (LTE Radio Node) mapped to EPC+ only.

)e
b) eNB (LTE Radio Node) mapped to 5GC only.

ur
c) eNB (LTE Radio Node) mapped to both EPC+ and 5GC simultaneously.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 14

LTE RAN Protocols and Procedures (eLecture)

E-UTRAN with EPC and 5GC

Control Plane N5
SGi IP
User Plane
Network/
S
S
Data

S
N4
G N6
S1-CP
UPF
AMF
N2
N2 N3
E-UTRAN N3 N2

)
S3 N3
B B

e
B B B Xn

ur
X2 eNodeB eNodeB
eNodeB eNodeB eNodeB

ct
S1-CP
E-UTRAN

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 15

LTE RAN Protocols and Procedures (eLecture)

5G Core compared to EPC

EPC today
S S S
D
S
D S
S D S AUSF UDM PCF NRF
S1-MME MME S6a HSS PCRF S
D S
S11 Gx NausfHSS/ Nudm PCRF Npcf Nnrf
S S AAA
G G
S1-U SGW S5 PGW SGi Mapping EPC
Nnssf Namf Nsmf
functions to 5GC
After CUPS functions S S S
S S
D S NSSF AMF SMF

S1-MME MME S6a HSS PCRF S S

S S
MME MME SGW PGW
S11 Gx CP CP

S S EPC: Evolved Packet Core

HSS: Home Subscriber Server
SGW PGW N4
MME: Mobility Management Entity
CP CP

)
SGW: Serving Gateway

e
G G
PGW: PDN Gateway
G

ur
PDN: Packet Data Network
CP: Control Plane UPF

ct
S1-U SGW PGW SGi
UP UP UP: User Plane G G

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 16

LTE RAN Protocols and Procedures (eLecture)

Disclaimer on Discussion Points

• The combination of EUTRAN and EPC\EPC+ is referred as Evolved Packet system or EPS.
• The combination of EUTRAN or 5G RAN and 5GC is referred as 5G System or 5GS.
• Although protocols and procedures in EUTRAN level are almost similar irrespective of whether EPC+
or 5GC is used as core but in this course requirement our discussion will be limited to EUTAN with
EPC/EPC+ combination.
• Some reference of 5G network will be used for comparison but details on protocols and procedure will
be strictly limited to Evolved Packet System level.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 17

LTE RAN Protocols and Procedures (eLecture)

EPS Bearer
EUTRAN EPC IP Network
UE eNodeB SGW PGW Peer
Entity

End-to-end Service

EPS Bearer External Bearer

E-RAB S5/S8 Bearer

Data Radio Bearer S1 Bearer

Uu S1-U S5/S8 SGi

)
Established by UE at connection to network and maintained until
Default Bearer:

e
UE is switched off or out of coverage. (no QoS defined)

ur
ct
Established by network to allow flow of traffic between UE and
Dedicated Bearer:

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 18

LTE RAN Protocols and Procedures (eLecture)

UE States with EPS

Tracking Area Update Handover ECM: EPC Connection Management
MME
(TAU) EMM: EPC Mobility Management
RRC: Radio Resource Management
eNodeB

Tracking Area (TA)

UE position known on Cell level in
UE pos known on TA level in MME eNodeB
Detach, Attach reject, TAU
reject
Signaling
connection
establishment

UE position
not known
in network
ECM-IDLE ECM-CONNECTED
RRC_IDLE RRC_IDLE RRC_CONNECTED

PLMN selection

)
Signaling

e
EMM- connection EMM-REGISTERED

ur
DEREGISTERED release

ct
Attach accept, TAU

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 19

LTE RAN Protocols and Procedures (eLecture)

UE States in EUTRAN/5GC
5GMM-DEREGISTERED 5GMM-REGISTERED
Inactivity/Registration Accept/Error

PLMN/
Cell Selection Handover/MRU
Attach Inactivity/

Reg. Accept/
RNAU Accept Inactivity/Error

CM-IDLE CM-CONNECTED CM-CONNECTED CM-IDLE

RRC-IDLE RRC-CONNECTED RRC-INACTIVE RRC-IDLE
Detach/Reject/RLF/ Reg. Request (MRU)/
Power off RNAU request/
Detach Request/
Power on Cell Reselection
Traffic Cell Reselection

UE power off Traffic/Registration Request/Update

e )
UE power off

ur
ct
5GMM: 5G Mobility Management
CM: Connection Management

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 20

LTE RAN Protocols and Procedures (eLecture)

EPS Control Plane Protocols

LTE Uu S1-MME
NAS NAS S11 S5/S8
Relay
RRC S1AP GTP-C GTP-C GTP-C
RRC S1AP
PDCP PDCP SCTP SCTP UDP UDP UDP
RLC RLC IP IP IP IP IP
MAC MAC L2 L2 L2 L2 L2

L1 L1 L1 L1 L1 L1 L1

UE eNodeB X2 MME S10 SGW PGW

X2AP X2AP GTP-C GTP-C

SCTP SCTP UDP UDP

IP IP IP IP

e )
L2 L2 L2 L2

ur
L1 L1 L1 L1

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 21

LTE RAN Protocols and Procedures (eLecture)

EPS User Plane Protocols LTE Uu S1-U S5/S8 SGi

Application
IP IP
Relay Relay
PDCP PDCP GTP-U GTP-U GTP-U GTP-U
RLC RLC UDP UDP UDP UDP
MAC IP IP IP IP
L2
MAC
L2 L2 L2 L2
L1 L1 L1
L1 L1 L1 L1
UE eNodeB SGW PGW
GTP-U GTP-U
* X2 User plane used to support
UDP UDP
‘Data forwarding at intra LTE
IP IP handover’

e )
L2 L2

ur
L1 L1

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 22

LTE RAN Protocols and Procedures (eLecture)

Support for Dual Connectivity in EUTRAN

• As per 3GPP TS 36.300 Dual Connectivity (DC) can be implemented within EUTRAN Layer.
• As per 3GPP TS 37.340 Dual Connectivity (DC) can be implemented between EUTRAN and NR.
• Dual Connectivity (DC) is referred to the scenario when a UE (with multiple Tx and Rx Section) in RRC-Connected
is configured to utilize radio resources provided by two distinct scheduler, located in two eNBs via non-ideal
backhaul over X2 interface.
• eNBs involved in DC for a certain UE may assume two different roles : an eNB act as MeNB or as an SeNB.
• In DC a UE is connected to one MeNB and one SeNB
• DC may sound similar to Carrier Aggregation (CA) but functionally they are two different process.
• In CA a mobile is connected to multiple cells from same/different eNBs but the scheduler (MAC Layer) of PCELL is
solely responsible for distribution of resources in PCELL and SCELL(s) physical layer.
• In DC the MAC Layers of MeNB and SeNB works independently for resource distribution in physical layer.

)e
ur
• In DC the PDCP protocol is responsible for splitting the data bearer but in CA the MAC layer in responsible for data
bearer split.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 23

LTE RAN Protocols and Procedures (eLecture)

EPS Protocol Categories

L3 Signalling L2 Transport
Non Access Stratum (NAS) Packet Data Convergence Protocol (PDCP)
Communication between UE and MME - Ciphering and integrity protection for RRC messages
- IP header compression/decompression for user plane

Radio Resource Control (RRC)

Communication between UE and eNodeB Radio Link Control (RLC)
- Transfer of RRC messages and user data using:
* Acknowledged Mode (AM)
S1 Application Protocol (S1AP) * Transparent Mode (TM) or
Communication between eNodeB and MME * Unacknowledged Mode (UM)
- Error Correction (ARQ)

X2 Application Protocol (X2AP) Medium Access Control (MAC)

Communication between eNodeB and eNodeB - Error Correction (HARQ)
- Transfer of RRC messages and user data using:
- Priority handling (scheduling)
GPRS Tunneling Protocol Control (GTP-C)

)
- Transport Format selection

e
- Communication between MME and SGW

ur
- Communication between SGW and PGW GPRS Tunneling Protocol User (GTP-U)

ct
- Communication between MME and MME Transfers data between GPRS tunneling endpoints

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 24

LTE RAN Protocols and Procedures (eLecture)

Summary of Chapter 1
The students should now be able to:
1. Distinguish between the different EPS protocol types.
2. Impact on EUTRAN Architecture with respect to 5GC.
3. Impact on EPC with introduction of CUPS.
4. Explain the EPS architecture, Bearer and Tracking Area.
5. Draw a simplified EPS diagram showing the protocols used.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 25

LTE RAN Protocols and Procedures (eLecture)

Quality of Service and

Security in LTE

LTE RAN Protocols and Procedures(eLecture)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 26

LTE RAN Protocols and Procedures (eLecture)

Objectives of Chapter 2
After this chapter the participants will be able to:
1. Explain the concept of Quality of Service
2. Explain the purpose of EPS Bearer Services and eUTRA Radio Bearers
3. List the different attributes of the eUTRA Radio Bearer and explain how they are used
4. Explain Authentication Procedure
5. Explain Radio Access Security
6. Explain TN Security

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 27

LTE RAN Protocols and Procedures (eLecture)

Quality of Service
User (subscriber)

Quality
of service

Service Service Service Service Service Service

support operability accessibility retainability integrity security
performance performance performance performance performance

Servicebility performance

Quality of Service

)
e
Network Performance

ur
ct
Provider (operator)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 28

LTE RAN Protocols and Procedures (eLecture)

Network Security Concepts

Authentication
— I know who I am talking to and who is talking to me.
Integrity Protection
— Nobody has tampered with the data I am sending/receiving
Confidentiality
— I know that nobody else can listen other than who my information is intended for.
Keys
— Shared pieces of information to enable authentication, integrity protection and ciphering. Eg password
Security Algorithms
— Used with keys to
 Authenticate users and network.

)e
 Digitally sign a piece of information to enable integrity protection.

ur
 Turn unencrypted information into encrypted information and vice-versa.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 29

LTE RAN Protocols and Procedures (eLecture)

Security on Uu & S1 Interfaces

User Plane
R
S-
IP Payload
GW
LTE Security
PDCP PDCP GTP-U GTP-U (defined by 3GPP )
RLC RLC UDP UDP
User plane (Uu component):
MAC MAC IP IP Ciphering only.
IPsec IPsec
Data Link Data Link Implemented on PDCP layer.
Physical Physical Physical Physical

NAS signalling:
S Integrity and ciphering.
Implemented in NAS protocol.
Control Plane MME

NAS NAS RRC:

Integrity and ciphering.
Implemented in PDCP layer.
RRC RRC
S1AP S1AP
PDCP PDCP
SCTP SCTP IP Network Security
RLC RLC
(defined by IETF RFCs)

e )
MAC MAC IP IP

ur
IPsec IPsec
Data Link Data Link Transport network:
Physical Physical

ct
Physical Physical Integrity and ciphering.
Secured by IPsec tunnels
Uu S1

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 30

LTE RAN Protocols and Procedures (eLecture)

LTE/EPS Security
Key Permitted Algorithms Security Endpoints /
Protection Layer

EIA1 (UIA2 based on SNOW 3G) UE, MME

NAS Integrity EIA2 (AES in CMAC mode)
KNAS-int EIA3 NAS Layer

EEA0 (Null ciphering) UE, MME

NAS Ciphering EEA1 (UEA2 based on SNOW 3G)
KNAS-enc EEA2 (AES in CTR mode) NAS Layer
EEA3
EIA1 UE, eNB
RRC Integrity EIA2
KRRC-int PDCP Layer
EIA3

EEA0 UE, eNB

RRC Ciphering EEA1
KRRC-enc PDCP Layer
EEA2
EEA3

e )
EEA0 UE, eNB
User Plane

ur
KUP-enc EEA1
PDCP Layer
Ciphering EEA2

ct
EEA3 (selected algorithm same as selected RRC

Le
ciphering algorithm)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 31

LTE RAN Protocols and Procedures (eLecture)

LTE key hierarchy

(Basic structure) Notation:
An Access Security Management Entity (ASME) is
K an entity which receives the top-level keys in an
access network from the HSS, i.e., the MME.

Established during AKA USIM/AUC

CK IK

UE/HSS
KASME
NAS security context
UE/MME
KNAS-int KNAS-enc KeNB

UE/eNB
UE/MME

e )
KUP-enc KRRC-int KRRC-enc

ur
ct
AS security context

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 32

LTE RAN Protocols and Procedures (eLecture)

EPS Authentication & Key Agreement (AKA)

HSS
AuCRAND,AMF,SQN K 2
IMSI IMSI f1 f2 f3 f4 f5

IK, CK, XRES, AUTN, RAND

PLMN (SN-ID)
KDF
SQN ⊕ AK
3
4
1 KASME, XRES, AUTN, RAND
Diameter Messages
PLMN / IMSI
RAND, AUTN,,KASME, XRES
eKSI
MME assigned eKSI
Key Set

5 KASME
Check RES = XRES
UE Authenticated 11

AUTN, RAND, eKSI 6 Agreed key that is

NAS: Authentication Response 12 tied to specific
NAS: Authentication Request 10 network.
RES
UE
UE RAND, AUTN, eKSI
eKSI
Key Set
MAC-A

USIM RAND K Check MAC-A = XMAC-A KASME

)
IMSI f1 f2 f3 f4 f5
Network Authenticated

e
9

ur
IK, CK, RES, XMAC-A 7
XMAC-A

ct
PLMN (SN-ID)
KDF SQN
⊕ AK

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 33

LTE RAN Protocols and Procedures (eLecture)

NAS Security Context Establishment

MME 1
UE Security Capabilities
(received previously in attach request)

Key Set eKSI

3 SM Complete: IMEI (optional)
KASME KDF KDF Algorithm Selection 2
NAS algorithms Add security header Decipher with 16
With KNAS-int KNAS-enc

KNAS-int KNAS-enc NAS Security Header 5 Ciphertext

Verify NAS header
eKSI, Selected Algorithms, with KNAS-int
Security Capabilities (replayed),
(replayed) 15
IMEI req 4 NAS Security Header

Ciphertext

NAS: Security Mode Command NAS: Security Mode Complete

6 (Integrity Protected) 14 (Integrity Protected & Ciphered)

7 NAS Security Header

UE
UE Activate Key Set
eKSI, Selected Algorithms, Verify NAS header
with KNAS-int
NAS Security Header 13
Key Set eKSI
8 Security Capabilities (replayed), Ciphered
Ciphertext
IMEI req
KDF Add security header
KDF 10 With KNAS-int
NAS algorithms
KASME

)
9

e
Ciphertext

ur
KNAS-int KNAS-enc
12 Cipher with
UE Security Capabilities KNAS-enc

ct
(sent previously in attach request)
SM Complete: IMEI (optional) 11

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 34

LTE RAN Protocols and Procedures (eLecture)

AS Security Context Establishment

Key Set eKSI UE Security Capabilities
MME
KASME
KDF Adapted RAN
1 UE Security Capabilities
2
NAS UL Count
KeNB, UE Security Capabilities, …
3 S1AP: Initial UE Context Setup Request

eNB UE Security Capabilities

Activate ciphering
on PDCP layer for future 15
KeNB Messages (both UP & CP)

4
Algorithm Selection
KDF KDF KDF RRC Algorithms
5 14
PDCP Header Add MAC with PDCP Header Verify MAC
KRRC-int
KUP-enc KRRC-int KRRC-enc Selected Algorithms, NCC Security mode complete with KRRC-int

Message Authentication Code 6 Message Authentication Code

7 RRC: Security Mode Command 13

(Integrity Protected)

UE
Key Set eKSI PDCP Header PDCP Header
8 12
KeNB
KDF

Selected Algorithms, NCC Security mode complete

KASME Message Authentication Code 10 Message Authentication Code

)
1

e
KDF KDF KDF Selected Algorithm Add MAC with

ur
Verify MAC with
KRRC-int
NAS UL Count 9 KRRC-int

ct
PDCP Header
KUP-enc KRRC-int KRRC-enc
UE

Le
Security mode complete 11

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 35

LTE RAN Protocols and Procedures (eLecture)

Transport Network Security

There is no LTE/SAE Application security between the eNB and core network nodes (SGW and MME).
— With the exception of NAS messages.
The solution is IPsec on the following interfaces
— X2-C
— X2-U
— S1-MME
— S1-U
IPsec can run in transport and ESP tunnel mode.
— Only tunnel mode is supported in the Ericsson eNB.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 36

LTE RAN Protocols and Procedures (eLecture)

IPsec in LTE RAN

RBS CN SEG CN Node

A to B X to Y A to B
A to B
Inner IP Outer IP Outer IP Inner IP
address A address X address Y address B

RBS host application Integrated Security

Gateway (IPSec)

Inner IP Packet is decrypted

IP Packet is forwarded and sent unprotected
directly to the Packet is encrypted, on the trusted core network
RBS integrated IPsec function enclosed in outer IP packet
and sent over the
transport network

RBS1 CN SEG RBS2

X to Y A to B Y to Z A to B

Inner IP address A Outer IP Inner IP address B

Outer IP address Z

)
Outer IP address X address Y

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 37

LTE RAN Protocols and Procedures (eLecture)

Bearer Concept P-CSCF

PCRF
EPS IMS PDN
or
E-UTRAN EPC Internet

UE eNB S-GW P -GW Peer

Entity

End-to-end Service

EPS Bearer External Bearer

E-RAB S5/S8 Bearer

Radio Bearer S1 Bearer

e )
ur
ct
Radio S1 S5/S8 Gi

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 38

LTE RAN Protocols and Procedures (eLecture)

Two Unicast EPS Bearers

TS 23.401

Application / Service Layer

UL Traffic Flow Aggregates DL Traffic Flow Aggregates

UL-TFT DL-TFT
UL-TFT → RB-ID DL-TFT → S5/S8-TEID
RB-ID ↔S1-TEID S1-TEID ↔S5/S8-TEID

UE eNodeB
eNB Serving GW PDN GW
Radio Bearer S1 Bearer S5/S8 Bearer

)
TFT: Traffic Flow Template, TEID: Tunnel Endpoint Identifier

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 39

LTE RAN Protocols and Procedures (eLecture)

Standardized QoS TS 23.203

QCI Resource Priority Packet Packet Example Services

Type Delay Error
(Quality Class Identifier)
Budget Loss
Rate

1 2 100 ms 10-2 Conversational Voice

2 4 150 ms 10-3 Conversational Video (Live
Streaming)
3 GBR 3 50 ms 10-3 Real Time Gaming
4 5 300 ms 10-6 Non-Conversational Video
(Buffered Streaming)
5 1 100 ms 10-6 IMS Signalling
Voice,
6 6 300 ms 10-6 Video (Live streaming)
Interactive Gaming
7 7 10-3 Voice,
Non GBR
100 ms Video (Live Streaming)
Interactive Gaming

e )
8 8 TCP-based (e.g., www, e-

ur
9 9 mail, chat, ftp, p2p file
300 ms 10-6

ct
sharing, progressive video,
etc.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 40

LTE RAN Protocols and Procedures (eLecture)

EPS bearer QoS parameters

Per EPS Bearer QoS Profile:

> QCI (QoS Class Identifier)
> ARP (Allocation and
Retention Priority)

+ +

For GBR Bearers: For NON-GBR Bearers:

> GBR (Guaranteed > UE AMBR
bitrate) (Aggregated
> MBR (Maximum Maximum Bitrate)
Bitrate)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 41

LTE RAN Protocols and Procedures (eLecture)

LTE/EPC/IMS overview Architecture

• Authentication • Subscription data
• GW selection • User Identification handling -Enables Bearer QoS Control
• Bearer management • Access Authorization -Set QoS for each Service Data Flow
• Inter-MME and IRAT mobility •Keys exchange -Define Charging for each Service Data Flow
• Maintain knowledge of used -Notification of bearer events to application
Packet core node function
• QCI1, 2, 5, 7 Radio Bearer
Realizations
s
• Admission control, RLC-UM, S6a Sh
d
Optimized scheduling, DRX in
order to maximize battery S HSS
lifetime, RoHC
• Broadcast information
MME
S
• Positioning s TAS
S1-MME S11 d
Gx PCRF Rx ISC
Cx
S5/
e-Uu B S1-U R S8 R SGi s
S
Mw
eNodeB S- PDN g
GW GW P-CSCF CSCF
• Well Known IMS APN
Gm IMS AGw • P-CSCF Discovery
EPS Bearer 1 Ut • External IP point of interconnect
Mb • IP address allocation
EPS Bearer 2 • Packet routing & forwarding

)
• Lawful intercept

e
• Policy enforcement
EPS Bearer 3

ur
• In visited network in case of • In home or vistied network
orig term

ct
roaming
• Intra-LTE mobility anchor

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 42

LTE RAN Protocols and Procedures (eLecture)

LTE/EPC/IMS Architecture example and QoS

Mapping of EPS Bearers for Voice
S6a s Sh
S d
MME HSS

S
Cx MTAS
s
S1-MME S11 d
PCRF Rx ISC
Gx

e-Uu B S1-U R S5
/S R SGi s Mw S
eNB S- PDN g
8 P-CSCF
I-/S-
GW GW CSCF
Gm
SIP (SDP) Default Bearer for IMS Signaling,QCI=5
Voice(RTP) Mb
Dedicated Bearer for Voice (RTP) , QCI=1
RTCP

)
BGF/ orig

e
XCAP Default Bearer , QCI=8/9 Ut MGw term

ur
ct
E-UTRAN EPC IMS

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 43

LTE RAN Protocols and Procedures (eLecture)

LTE/EPC/IMS Architecture example and

QoS Mapping of EPS Bearers for Video Call
S6a s Sh
S d
MME HSS

S
Cx MTAS
s
S1-MME S11 d
Gx PCRF Rx ISC

B S
e-Uu S1-U R S5
/S R SGi s Mw I-/S-
eNB S- PDN g CSCF
8 P-CSCF
GW GW
Gm
SIP (SDP) Default Bearer for IMS Signaling,QCI=5
Voice(RTP) Mb
RTCP
Dedicated Bearer for Voice (RTP) , QCI=1
Video(RTP) Dedicated Bearer for Video,
QCI=2 GBR /QCI=6, non-GBR BGF/ orig

)
RTCP

e
MGw term
Ut

ur
XCAP Default Bearer , QCI=8/9
E-UTRAN EPC IMS

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 44

LTE RAN Protocols and Procedures (eLecture)

Multiple Data Radio Bearer

S s
d
MME PCRF

PCRF
RRC_ R
CONNECTED R
SGW
PDN
S-GW GW

SIGNALLING RADIO BEARER S1 BEARER

EPS BEARER QCI=5

EPS BEARER QCI=1

Max 8
EPS BEARER QCI=9

)
EPS BEARER QCI=2

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 45

LTE RAN Protocols and Procedures (eLecture)

QoS Framework in E-UTRAN

OSS-RC/ENM

Operator specific QoS parameters

QCI Prio LCG DSCP

2 2 46
MME 1
QoS Table
QCI 2 4 1 36

: : :
: : : :
:
9 3 12
9
10 3 0
10-256

Prio,LCG DSCP

Radio Network: Transport Network:

)
Scheduler strategy (per RBS) X2 Packet Forwarding

e
Ul/DL Scheduling S1 UL Packet treatment

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 46

LTE RAN Protocols and Procedures (eLecture)

IP v4 Header
+ Bits 0-3 Bits 4-7 Bits 8-15 Bits 16-18 Bits 19-31
0 Version IHL DiffServ Total Length
32 Identification Flags Fragment offset
64 Time to live Protocol Header Checksum
96 Source Address
128 Destination Address
160 Options

160
or
190+

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 47

LTE RAN Protocols and Procedures (eLecture)

IP DiffServ Field
Precedence Level
IP
Header DS5 DS4 DS3 DS2 DS1 DS0 ECN ECN

Precedence
Description
Level

7 Stays the same

Assured Forwarding (AF)
6 Stays the same
Drop Class 1 Class 2 Class 3 Class 4
5 Express Forwarding (EF)
4 Class 4 Low
001 010 010 010 011 010 100 010
DSCP= 10 DSCP= 18 DSCP= 26 DSCP= 34
3 Class 3
Medium
001 100 010 100 011 100 100 100
2 Class 2 DSCP= 12 DSCP= 20 DSCP= 28 DSCP= 36

e )
1 Class 1
001 110 010 110 011 110 100 110

ur
High
0 Best Effort DSCP= 14 DSCP= 22 DSCP= 30 DSCP= 38

ct
Eg. Best Effort 000000 DSCP =0 and Class 2, low drop 010010 DSCP=18

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 48

LTE RAN Protocols and Procedures (eLecture)

Ethernet Frame
+ Bits 0-7 Bits 8-15 Bits 16-23 Bits 24-31
0 Preamble
32 (7 Bytes) SFD
64 Destination
96 Address (6 Bytes) Source
128 Address (6 Bytes)
P CFI
160 Tag Protocol ID (8100H) (3 bits) (1 bit) VLAN ID (12 bits)

172 Ethernet Type/Length Data (42 – 1496 Bytes)

e )
ur
ct
XX Frame Check Sequence (4 Bytes)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 49

LTE RAN Protocols and Procedures (eLecture)

Ethernet Pbit
Ethernet
Header
X X X

Pbit Pbit
Description
(binary) (Decimal)

000 0 Best effort

001 1 Background

010 2 Spare

011 3 Excellent effort

100 4 Controlled load

101 5 Voice, less than 100 ms delay

)
110 6 Voice, less than 10 ms delay

e
ur
111 7 Network control

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 50

LTE RAN Protocols and Procedures (eLecture)

Mapping from QCI to DSCP and Pbits

Bearer QoS details from MME (QCI, MBR/GBR, ARP) Data

Takes place in
Mapping
eNodeB and SGW
function

IP datagram DSCP Data

IP header
Mapping Takes place in devices
function on edge between
L3 and L2 network

Ethernet
frame Pbits DSCP Data

) e
Ethernet header IP header

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 51

LTE RAN Protocols and Procedures (eLecture)

Default Bearer (QCI 9)

NAS Activate Default EPS S
Bearer Context Request MME
EPS Bearer Identity : 5
QCI : (9) QCI 9
Access Point Name Value : ltemobile.apn.mnc18.mcc240.gprs
PDN Address : 25.125.184.99
Maximum Bit Rate for Uplink : (254) Indicate higher than 8640 kbps
Maximum Bit Rate for Downlink : (254) Indicate higher than 8640 kbps
Guaranteed Bit Rate for Uplink : (255) 0 kbps
Guaranteed Bit Rate for Downlink : (255) 0 kbps
Maximum Bit Rate for Downlink (extended) : (247) 250 Mbps
Maximum Bit Rate for Uplink (extended) : (158) 100 Mbps

e )
APN AMBR for Downlink : 250000 kbps

ur
APN AMBR for Uplink : 100000 kbps

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 52

LTE RAN Protocols and Procedures (eLecture)

Default Bearer QoS – Recommended QoS Handling

Traffic Type DSCP DSCP P-bits Minimized Starvation & Strict Priority Minimized jitter & Bandwidth guarantees
code

4 CoS 3 CoS 4 CoS 3 CoS

Network Synch LU 49 7
1 1
Routing, Network Control CS6 48 7 1 1
QCI5–IMS Signalling CS5 40 6 2 2
QCI1–GBR Conversational Voice EF 46 5

QCI3–GBR Real Time Gaming AF41 34 5 1 1

QCI2–GBR Conversational Video (Live Streaming) AF42 36 5
2 2
QCI4-GBR Non-Conversational Video (Buffered Streaming) AF31 26 4

QCI6-Non-GBR TCP Specific Services AF32 28 4 2 2

S1AP/X2AP-Inter-node Signalling CS3 24 4
QCI7-Non-GBR Voice/Video Interactive Gaming AF22 18 3
3 3
OAM Access CS2 16 3
QCI8-Non-GBR TCP ’Premium bearer’ AF11 10 1 3 3
QCI9-Non-GBR TCP Default Bearer AF12 12 0 4 4

e )
OAM Bulk Data CS1 8 0

ur
ct
DSCP = 12, P-bits = 0

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 53

LTE RAN Protocols and Procedures (eLecture)

QCI 9 Predefined Mapping

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 54

LTE RAN Protocols and Procedures (eLecture)

DSCP to P-Bit Mapping

0 Not Default setting

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 55

LTE RAN Protocols and Procedures (eLecture)

Dedicated Bearer Establishment

NAS Activate Dedicated S

EPS Bearer Context MME
Request

S1AP
GTP-C
E-RAB Setup
Create
Request
Bearer
Request

B R R

)
eNodeB SGW PGW

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 56

LTE RAN Protocols and Procedures (eLecture)

Dedicated Bearer (QCI 1)

NAS Activate Dedicated EPS Bearer Context Request S
MME
EPS Bearer Identity : 7
Linked EPS Bearer Identity Value : (6) EPS bearer identity value 6
QCI : (1) QCI 1
Maximum Bit Rate for Uplink : 30 kbps
Maximum Bit Rate for Downlink : 30 kbps
Guaranteed Bit Rate for Uplink : 30 kbps
Guaranteed Bit Rate for Downlink : 30 kbps
TFT Operation Code : (1) Create new TFT
Number of Packet Filters : 4
Packet Filter Identifier : 16

e )
Component Type : (16) IPv4 source address type

ur
Address : 10.133.144.22

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 57

LTE RAN Protocols and Procedures (eLecture)

Dedicated Bearer QoS (QCI 1)

Recommended QoS Handling
Traffic Type DSCP DSCP P-bits Minimized Starvation & Strict Priority Minimized jitter & Bandwidth guarantees
code

4 CoS 3 CoS 4 CoS 3 CoS

Network Synch LU 49 7
1 1
Routing, Network Control CS6 48 7 1 1
QCI5–IMS Signalling CS5 40 6 2 2
QCI1–GBR Conversational Voice EF 46 5
QCI3–GBR Real Time Gaming AF41 34 5 1 1
QCI2–GBR Conversational Video (Live Streaming) AF42 36 5
2 2
QCI4-GBR Non-Conversational Video (Buffered Streaming) AF31 26 4

QCI6-Non-GBR TCP Specific Services AF32 28 4 2 2

S1AP/X2AP-Inter-node Signalling CS3 24 4

QCI7-Non-GBR Voice/Video Interactive Gaming AF22 18 3
3 3
OAM Access CS2 16 3
QCI8-Non-GBR TCP ’Premium bearer’ AF11 10 1 3 3

)
QCI9-Non-GBR TCP Default Bearer AF12 12 0 4 4

e
ur
OAM Bulk Data CS1 8 0

ct
DSCP = 46, P-bits = 5

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 58

LTE RAN Protocols and Procedures (eLecture)

Radio Protocol Architecture for Dual Connectivity

within EUTRAN
MCG Bearer 1) In DC following types of
bearer exists.
SCG Bearer
Split Bearer
• MCG Bearer
• SCG Bearer
RRC
• Split Bearer
X2/Xn Interface
PDCP PDCP PDCP 2) DRBs can be configured in any
of the above mentioned category
RLC RLC RLC RLC 3) RRC is always located in
MeNB and all SRBs are always
MAC MAC
configured as MCG bearer type

e )
therefore only use the radio

ur
MeNB SeNB
resource of MeNB.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 59

LTE RAN Protocols and Procedures (eLecture)

Security Key Generation basics for DC in EUTRAN

• For dual connectivity architecture, which hosts PDCP in MeNB, the
security functions described for the single connectivity mode in this
specification are sufficient as the end-point for the encryption remains
in the MeNB which means from a security point of view, the PDCP
packets are still processed in the same locations in the architecture and
have only travelled a different path via the SeNB.
• When the MeNB establishes security between an SeNB and the UE for the first time for a given AS
security context shared between the MeNB and the UE, the MeNB generates the S-KeNB for the SeNB
and sends it to the SeNB over the X2-C.
• To generate the S-KeNB, the MeNB associates a counter, called an SCG Counter, with the current AS
security context.
• The SCG Counter is used as freshness input into S-KeNB derivations and guarantees that the K-UPenc

)
derived from the same S-KeNB is not re-used with the same input parameters.

e
ur
• The MeNB sends the value of the SCG Counter to the UE over the RRC signalling path when it is

ct
required to generate a new S-KeNB.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 60

LTE RAN Protocols and Procedures (eLecture)

Summary of Chapter 2
The students should now be able to:
1. Explain the concept of Quality of Service
2. Explain the purpose of EPS Bearer Services and eUTRA Radio Bearers
3. List the different attributes of the eUTRA Radio Bearer and explain how they are used
4. Explain Authentication Procedure
5. Explain Radio Access Security
6. Explain TN Security

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 61

LTE RAN Protocols and Procedures (eLecture)

L3 Signaling Protocols

LTE RAN Protocols and Procedures(eLecture)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 62

LTE RAN Protocols and Procedures (eLecture)

Objectives of Chapter 3
After this chapter the participants will be able to:
1. Explain the functions of the Non Access Stratum NAS protocol
2. Describe the procedures in the NAS layer
3. Explain the interaction between RRC and the lower layers in the control plane
4. Explain the RRC connected and idle modes (states)
5. Explain the functions and services of RRC such as System Information Broadcast, Paging, Cell
Selection and Mobility
6. Explain the main functions and procedures of X2AP signaling protocol
7. Explain the main functions and procedures of S1AP signaling protocol
8. Explain the main functions and procedures of the signaling protocol GTP-C

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 63

LTE RAN Protocols and Procedures (eLecture)

NAS: UEMME Signaling (EPC)

›
›
Support of Session management
Support of UE mobility
S
MME
› NAS Security

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 64

LTE RAN Protocols and Procedures (eLecture)

NAS Elementary Procedures in EPS

EPS Elementary
Procedures

EPS Connection Management EPS Mobility Management

"ready-to-use" IP connectivity and an "always-on" experience

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 65

LTE RAN Protocols and Procedures (eLecture)

NAS EPS Mobility Management Messages

› Attach Request
› Attach Accept › Identity Request
› Attach Complete › Identity Response
› Attach Reject › Security Mode Command
› Authentication Request › Security Mode Complete
› Authentication Response › Security Mode Reject
› Authentication Failure › Security Protected NAS message
› Authentication Reject › Service Request
› CS Service Notification › Service Reject
› Detach Request › Tracking Area Update Request
› Detach Accept › Tracking Area Update Accept
› Downlink NAS Transport › Tracking Area Update Complete
› EMM Information › Tracking Area Update Reject
› EMM Status › Uplink NAS Transport
› Extended Service Request › Downlink generic NAS transport

)
› Uplink generic NAS transport

e
› GUTI Reallocation Command

ur
› GUTI Reallocation Complete

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 66

LTE RAN Protocols and Procedures (eLecture)

NAS EPS Session Management Messages

› Activate Dedicated EPS Bearer Context Request › ESM Information Request
› Activate Dedicated EPS Bearer Context Accept › ESM Information Response
› Activate Dedicated EPS Bearer Context Reject › ESM Status
› Activate Default EPS Bearer Context Request › Modify EPS Bearer Context Request
› Activate Default EPS Bearer Context Accept › Modify EPS Bearer Context Accept
› Activate Default EPS Bearer Context Reject › Modify EPS Bearer Context Reject
› Bearer Resource Allocation Request › Notification
› Bearer Resource Allocation Reject › PDN Connectivity Request
› Bearer Resource Modification Request › PDN Connectivity Reject
› Bearer Resource Modification Reject › PDN Disconnect Reject
› Deactivate EPS Bearer context Request › PDN Disconnect Request
› Deactivate EPS Bearer context Accept
› Deactivate EPS Bearer context Reject

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 67

LTE RAN Protocols and Procedures (eLecture)

EMM- REGISTERED Mode

EMM IDLE EMM REGISTERED EMM CONNECTED

NOTE:
EMM-CONNECTED mode: A UE is in EMM-CONNECTED mode when a NAS signalling connection between UE and network is established.
The term EMM-CONNECTED mode used in the TS 24.301 corresponds to the term ECM-CONNECTED state used in 3GPP TS 23.401.
EMM-IDLE mode: A UE is in EMM-IDLE mode when no NAS signalling connection between UE and network exists. The term EMM-IDLE mode

)e
used in the TS 24.301 corresponds to the term ECM-IDLE state used in 3GPP TS 23.401

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 68

LTE RAN Protocols and Procedures (eLecture)

UE Context in MME

• GUTI
• TA List
• COUNT
• SGW TEID
• eNB S1AP id
• eNB TEID

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 69

LTE RAN Protocols and Procedures (eLecture)

NAS: UEAMF and SMF Signaling (5GC)

NAS-SM Support for NAS Session S

Management SMF

Support for Registration

NAS-MM
Management S
AMF
N1 Support for Connection Management
Support for Mobility Management
NAS Security

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 70

LTE RAN Protocols and Procedures (eLecture)

NAS Procedures in 5GC

NAS
Procedures
SMF
AMF
5GMM 5GSM

PDU Session Establishment

PDU Session Modification
5GMM 5GMM Connection PDU Session Release
5GSM Status
Common Specific Management
Primary AKA Registration Service Request
Security mode control Deregistration Paging
Identification Notification
UE configuration update
NAS transport
5GMM status

Support for NAS Session Management S

)
S SMF

e
5GMM: 5GS Mobility Management Support for Registration Management

ur
5GSM: 5GSSession Management
Support for Connection Management AMF

ct
Support for Mobility Management
3GPP 24.501 – 5; 6 NAS Security

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 71

LTE RAN Protocols and Procedures (eLecture)

5G MM NAS Messages
Authentication Request De-registration Request Notification
Authentication Response De-registration Accept Notification Response
Authentication Result
Authentication Failure
Service Request Security Mode Command
Authentication Reject
Service Accept Security Mode Complete
Service Reject
Registration Request
Registration Accept Message
Registration Complete Configuration Update Command 5GMM Status
Registration Failure Configuration Update Complete

e )
UL NAS Transport Identity Request

ur
ct
DL NAS Transport Identity Response

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 72

LTE RAN Protocols and Procedures (eLecture)

5G SM NAS Messages
PDU Session Establishment Request PDU Session Release Request
PDU Session Establishment Accept PDU Session Release Reject
PDU Session Establishment Reject
PDU Session Release Command
PDU Session Authentication Command PDU Session Release Complete
PDU Session Authentication Complete
PDU Session Authentication Result 5GSM Status

PDU Session Modification Request

PDU Session Modification Reject
PDU Session Modification Command
PDU Session Modification Complete

)e
ur
PDU Session Modification

ct
Command Reject

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 73

LTE RAN Protocols and Procedures (eLecture)

UE Context in AMF

— SUPI
A UE needs to register with the network to:
— 5G GUTI — get authorized to receive services
— PEI — enable mobility tracking
— TA List — enable reachability
— NSSAI
AMF
— COUNT
— PDU Session ID
—…

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 74

LTE RAN Protocols and Procedures (eLecture)

Elementary Procedures for EPS SM

ESM Procedures Related to EPS Bearer
Default EPS Bearer Context Activation
Dedicated EPS Bearer Context Activation
EPS Bearer Context Modification
EPS Bearer Context Deactivation

ESM Transaction Related Procedures

PDN Connectivity Procedure
PDN Disconnect Procedure

)e
Bearer Resource Allocation Procedure

ur
ct
Bearer Resource Modification Procedure

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 75

LTE RAN Protocols and Procedures (eLecture)

RRC: UEeNB Signaling

Idle Mode Support

E-RAB Management Support
Mobility Management Support
RAN Security Support
Radio Connection Supervision Support
Transparent Signaling Support

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 76

LTE RAN Protocols and Procedures (eLecture)

UE Protocol Stack
Session Mobility
NAS Security
NAS Management Management
Application

System Info Cell Paging Connected

Aquisition Selection Reception Mode
Mobility IP
RRC RB Measurement
RRC AS Security
Connection Managementv Reporting

Integrity/ ROHC/
Control/Report SAPs

Ciphering Ciphering
PDCP

TM/UM AM
UM/AM
RLC

HARQ
RA Control

)
MAC Control

e
L2

ur
ct
Physical Layer

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 77

LTE RAN Protocols and Procedures (eLecture)

EPS States

Tracking Area Update Tracking Area Update

Connection Re -activation

ECM -IDLE ECM -CONNECTED

(EMM - REGISTERED) (EMM -REGISTERED)

MME-initiated
Detach Connection Release
Attach
Detach

)
EMM -DEREGISTERED

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 78

LTE RAN Protocols and Procedures (eLecture)

RRC States in EUTRAN\EPC

Tracking Area Update Tracking Area Update

Connection Re -activation

RRC -IDLE RRC - CONNECTED

(EMM - REGISTERED) (EMM -REGISTERED)

MME-initiated
Connection Release or
RL Failure

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 79

LTE RAN Protocols and Procedures (eLecture)

Idle Mode Tasks

Manual Mode Automatic mode

PLMN Selection
Indication
to user Location PLMNs
Registration available
response AvailableCSG IDs
to NAS
Support for manual
CSG ID selection

PLMN
selected CSG ID
selected
NAS Control
Cell Selection
and Reselection
Radio measurements
Registration
Area
changes

e)
Service requests

ur
Location
Registration

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 80

LTE RAN Protocols and Procedures (eLecture)

RRC Procedures
System information TS 36.331

Cell Selection / Reselection System Info Cell Paging Connected

Aquisition Selection Reception Mode
Connection control Mobility
RRC
— Paging AS Security
RRC RB Measurement
Connection Management Reporting
— RRC connection establishment
— Security activation Mobility Management

— RRC connection reconfiguration — Inter/Intra E-UTRA mobility

— RRC connection re-establishment — Mobility from E-UTRA

— RRC connection release — Handover to E-UTRA

— Radio link failure related actions Other procedures

Measurement Control — DL Information Transfer

)
— Measurement configuration — UL Information Transfer

e
ur
— Measurement reporting — UE capability transfer

ct
— Protocol error handling

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 81

LTE RAN Protocols and Procedures (eLecture)

RRC Messages
› CounterCheck
› RRCConnectionRequest
› CounterCheckResponse
› RRCConnectionSetup
› CSFBParametersRequest
› RRCConnectionSetupComplete
› CSFBParametersResponse
› DLInformationTransfer › SecurityModeCommand
› HandoverFromEUTRAPreparationRequest › SecurityModeComplete
› InterFreqRSTDMeasurementIndication › SecurityModeFailure
› LoggedMeasurementConfiguration › SystemInformation
› MasterInformationBlock › SystemInformationBlockType1
› MBMSCounting Request › UECapabilityEnquiry
› MBMSCountingResponse
› MBSFNAreaConfiguration › UECapabilityInformation
› MeasurementReport › UEInformationRequest
› MobilityFromEUTRACommand › UEInformationResponse
› Paging › ULHandoverPreparationTransfer
› ProximityIndication › ULInformationTransfer
› RNReconfiguration
› RRCConnectionReconfiguration › CSFBParametersRequestCDMA2000
› RRCConnectionReconfigurationComplete › CSFBParametersResponseCDMA2000
› RRCConnectionReestablishment

)
› RRCConnectionReestablishmentComplete › HandoverFromEUTRAPreparationRequest

e
(CDMA2000)

ur
› RRCConnectionReestablishmentReject
› RRCConnectionReestablishmentRequest › ULHandoverPreparationTransfer (CDMA2000)

ct
› RRCConnectionRelease

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 82

LTE RAN Protocols and Procedures (eLecture)

System Information

MASTER INFORMATION BLOCK (MIB)

SYSTEM INFORMATION 1

SYSTEM INFORMATION N

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 83

LTE RAN Protocols and Procedures (eLecture)

System Information Mapping (example)

MIB SIB1 SIB2 SIB3 SIB4 SIB5

SI-1 SI-2

BCCH BCCH BCCH

BCH DL-SCH DL-SCH

TTI= 40 TTI=80 TTI= 160 TTI= 320

e )
PBCH PDSCH PDSCH

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 84

LTE RAN Protocols and Procedures (eLecture)

System information in MIB & SIBs

MIB: DL BW, PHICH configuration, System frame number

System Parameters Related to SIB 1 SIB 2 SIB 3 SIB 4

Cell Selection Info x
PLMN-id x
Tracking Area Code x
Cell Id x
Cell Barred x
Frequency Band Indicator x
SIB Scheduling x
UL EARFCN x
UL Bandwith x
Common Radio Resource Conf x

) e
Paging Info x

ur
Cell Reselection x

ct
x

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 85

LTE RAN Protocols and Procedures (eLecture)

System information in more SIBs

S S S S S S S S S S S S
System Parameters Related I I I I I I I I I I I I
to B B B B B B B B B B B B
5 6 7 8 9 10 11 12 13 14 15 16

Neighbouring Cells -inter frequency x

Inter RAT reselection (UTRA) x

Inter RAT reselection (GRAN) x

Inter RAT reselection (CDMA2000) x

home eNodeB x

ETWS notification x x
CMAS notification x

)
MBMS x x

e
ur
GPS time and UTC x

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 86

LTE RAN Protocols and Procedures (eLecture)

Re-reading of System Information

a) RRC_IDLE and RRC_CONNECTED - Paging
b) UE needs to reread SIB1 and check value tag

PCCH/PCH ”Paging: System Info Modification”

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 87

LTE RAN Protocols and Procedures (eLecture)

CN Initiated Paging
• The MME sends the PAGING message to each
eNode B with cells belonging to the tracking area(s)
in which the UE is registered. S
• Each eNode B can contain cells belonging to MME
different tracking areas, whereas each cell can only
belong to one TA.
• UEs use DRx when in idle mode in order to wake at
regular intervals to check for paging messages.
• The paging response back to the MME is initiated S1AP Paging message
on NAS layer and is sent TAC 2

• by the eNB based on NAS-level TAC 1

• routing information.

e )
RRC Paging message

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 88

LTE RAN Protocols and Procedures (eLecture)

CN Initiated Paging details

The MME initiates a paging message which is sent to all eNodeBs in a tracking area(s).

S
MME
MME
RRC IDLE

S1AP:Paging
RRC: Paging

Random Access Procedure

RRC Connection Request

RRC Connection Setup

e)
ur
RRC Connection Setup Complete

ct
(Service Request) Initial UE Message (Service Request)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 89

LTE RAN Protocols and Procedures (eLecture)

Signalling Radio Bearers (SRBs)

Signalling Radio Bearers (SRBs) are offered by the PDCP layer to the RRC layer for transport of RRC (and
NAS) messages

— SRB0: Used for RRC messages on the CCCH

— SRB1: Used for RRC and NAS messages on the DCCH
— SRB2: Used for NAS messages, SRB2 has a lower-priority than SRB1 and is always configured by E-
UTRAN after security activation.

RRC
SRB0 SRB1 SRB2

PDCP

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 90

LTE RAN Protocols and Procedures (eLecture)

RRC Connection Establishment

”RRC Connection Request” CCCH/ULSCH › RRC Connection Request is initiated by the

RRC IDLE
higher layers in the UE

DLSCH ”RRC Connection Setup” › RRC Connection Setup

(C-RNTI is allocated in MAC layer)

› RRC connection establishment procedure

”RRC Connection Setup Complete” DCCH/ULSCH
creates the signaling radio bearer RB#1,

RRC
CONNECTED

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 91

LTE RAN Protocols and Procedures (eLecture)

Establishment Cause
IE/Group Name IE type and reference
RRC Establishment Cause Emergency Call,
High Priority Access,
MT-Access,
MO-Signalling,
MO-Data,
Delay Tolerant Access

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 92

LTE RAN Protocols and Procedures (eLecture)

Security Related Procedures

S
MME
MME

INITIAL CONTEXT SETUP REQUEST

(Integrity Protection Algorithm EIA;
Ciphering Algorithm EEA;
Security Key)

Decide Algorithms,
Derive Keys
Activate Security for SRB

SECURITY MODE COMMAND(EEA;EIA)

)
SECURITY MODE COMPLETE

e
ur
INITIAL CONTEXT SETUP RESPONSE

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 93

LTE RAN Protocols and Procedures (eLecture)

UL/DL Information Transfer

RRC UL INFORMATION TRANSFER (NAS message)

RRC DL INFORMATION TRANSFER (NAS message)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 94

LTE RAN Protocols and Procedures (eLecture)

UE Capability Transfer

S
MME

S1AP: Initial Context Setup Request

RRC UE CAPABILITY ENQUIRY
(UE Radio Capability)

RRC UE CAPABILITY INFORMATION

S1AP: UE Capability Info Indication

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 95

LTE RAN Protocols and Procedures (eLecture)

LTE Uplink RRC Message Segmentation

LTE Uplink RRC Message Segmentation is 3GPP Re 16 Functionality.

• An RRC message may be segmented in case the size of the encoded RRC message
PDU exceeds the maximum PDCP SDU size (9 kB).
• This enables the UEs to support and signal large UE capabilities.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 96

LTE RAN Protocols and Procedures (eLecture)

LTE Uplink RRC Message Segmentation

Capable of UL RRC Segmentation

RRC UECapabilityEnquiry
(rrc-segAllowed-r16 = enabled)

UECapabilityInformation

> 9000B

RRC ULDedicatedMessageSegment

Up to 6 segments
RRC ULDedicatedMessageSegment

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 97

LTE RAN Protocols and Procedures (eLecture)

RRC Connection Reconfiguration

Purpose : Modify an RRC Connection

RRC CONNECTION RECONFIGURATION

RRC CONNECTION RECONFIGURATION COMPLETE

It may convey:
› Radio resource configuration (including RBs, MAC main configuration, configuration of SCells for CA
and physical channel configuration)

)
› Associated dedicated NAS Information and security configuration.

e
ur
› Mobility control information (eg. order Handovers)

ct
› Measurement configuration (eg. setup/modify/release Measurements)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 98

LTE RAN Protocols and Procedures (eLecture)

Measurement Configuration

RRC CONNECTION RECONFIGURATION

(Measurement configuration)

RRC CONNECTION RECONFIGURATION COMPLETE

MeasObject: The objects the UE shall perform measurements on e.g. EUTRAN, UTRAN, GERAN cell information

ReportConfig: Measurement reporting criteria: The criteria that trigger the UE to send a measurement report, e.g. periodical
or event-triggered reporting.

Trigger quantity: The quantity the UE shall measure (RSRP or RSRQ).

)e
ur
MeasId: Maps the Measurement Objects to Report Configurations

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 99

LTE RAN Protocols and Procedures (eLecture)

Measurement Reports (Event Triggered)

Events

Serving becomes better than

A1 Threshold
Serving becomes worse than
A2 Threshold
Neighbour becomes offset better
A3 than serving
Serving becomes worse than
threshold1 and neighbour
A5 becomes better than threshold2
Neighbour becomes offset better than
A6 Scell
Reporting
criteria Inter RAT neighbour becomes
fulfilled B1 better than threshold
Serving becomes worse than

)
RRC MEASUREMENT REPORT

e
threshold1 and inter RAT

ur
(Measurement Id, neighbour becomes better than
B2 threshold2

ct
Primary cell measurement results,
Neighbor measurement results)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 100

LTE RAN Protocols and Procedures (eLecture)

UE Attach MME
S

1. System Information *
RRC IDLE Cell
Select * 2. Random Access Preamble
3. Random Access Response
4. RRC CONNECTION REQUEST
5. RRC CONNECTION SETUP
7. INITIAL UE MESSAGE (Attach Request
RRC 6.RRC CONNECTION SETUP COMPLETE(Attach Request+PDN Connectivity Req +PDN Connectivity Req)
CONNECTED
8.RRC DL INFORMATION TRANSFER (UE Identity Request) DL NAS TRANSPORT (UE Identity Req)
9. RRC UL INFORMATION TRANSFER (UE Identity Response) UL NAS TRANSPORT (UEid Response)

10.RRC DL INFORMATION TRANSFER (Authentication Request) DL NAS TRANSPORT (Authentication)

11. RRC UL INFORMATION TRANSFER (Authentication Response) UL NAS TRANSPORT (Auth. Response)

12. RRC DL INFORMATION TRANSFER (Security Mode Command (IMEISV Req)) DL NAS TRANSPORT (NAS SMC)
13. RRC UL INFORMATION TRANSFER (Security Mode Complete) UL NAS TRANSPORT (NAS SMC)

15. RRC SECURITY MODE COMMAND 14. INITIAL CONTEXT SETUP REQUEST
(EPS bearers, Security, Attach Accept
16.RRC SECURITY MODE COMPLETE
+ Activate Default EPS bearer context request)
17. RRC UE CAPABILITY ENQUIRY
18. RRC UE CAPABILITY iNFORMATION
19. UE CAPABILITY INFO INDICATION
20. RRC CONNECTION RECONFIGURATION (Attach Accept, Bearer Setup)

)
(UE Radio Capability)

e
21. RRC CONNECTION RECONFIGURATION COMPLETE
22. INITIAL CONTEXT SETUP RESPONSE

ur
(EPS bearers)
23. RRC UL INFORMATION TRANSFER (Attach Complete UL NAS TRANSPORT (Attach Complete)

ct
+ Activate Default EPS bearer context Accept) 24. UE CONTEXT RELEASE COMMAND
RRC IDLE

Le
26. RRC CONNECTION RELEASE 25. UE CONTEXT RELEASE COMPLETE

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 101

LTE RAN Protocols and Procedures (eLecture)

Connection Reactivation MME

1. System Information *

Cell
RRC IDLE Select *
2. Random Access Preamble

3. Random Access Response

4. RRC CONNECTION REQUEST

RRC 5. RRC CONNECTION SETUP
CONNECTED
6. RRC CONNECTION SETUP COMPLETE (Service Request)
7. INITIAL UE MESSAGE (Service Request)
Optional Optional

8.RRC DL INFORMATION TRANSFER (Authentication Request) DL NAS TRANSPORT (Authentication)

9. RRC UL INFORMATION TRANSFER (Authentication Response) UL NAS TRANSPORT (Auth. Response)

10. RRC DL INFORMATION TRANSFER (Security Mode Command) DL NAS TRANSPORT (NAS SMC)
11. RRC UL INFORMATION TRANSFER (Security Mode Complete) UL NAS TRANSPORT (NAS SMC)

12. INITIAL CONTEXT SETUP REQUEST

13. RRC SECURITY MODE COMMAND (EPS bearers, Security, UECap Request)
14.RRC SECURITY MODE COMPLETE
15. RRC UE CAPABILITY ENQUIRY
Optional

)
16. RRC UE CAPABILITY iNFORMATION

e
17. UE CAPABILITY INFO INDICATION
(UE Radio Capability)

ur
18. RRC CONNECTION RECONFIGURATION

ct
(Bearer Setup,Measurement conf))
RRC 19. RRC CONNECTION RECONFIGURATION COMPLETE

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 102

LTE RAN Protocols and Procedures (eLecture)

Additional Default EPS Bearer Establishment

S R R
MME S-GW P-GW
-

UL INFO TRANSFER UPLINK DATA TRANSPORT

(NAS: PDN Connectivity. Request (including specific APN)) Create Session Req Create Session Req
Create Session Resp
Create Session Resp

E-RAB
- SETUP REQ
RRC CONNECTION RECONFIG (NAS: Activate Default EPS Bearer Context Request)
Establish DRBs, NAS message

RRC CONNECTION RECONFIG

COMPLETE E-RAB SETUP RESPONSE

UL INFO TRANSFER UPLINK DATA TRANSPORT

NAS: Activate Default EPS Bearer Context Accept

e)
,

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 103

LTE RAN Protocols and Procedures (eLecture)

Dedicated EPS Bearer Establishment

S R R
SGW PGW
MME -
S-GW

Create Bearer Req

.
Create Bearer Req

E-RAB
- SETUP REQ
RRC CONNECTION RECONFIG Bearer parameters,
Establish DRBs, NAS message NAS message : Activate Dedicated EPS Bearer Context Request

RRC CONNECTION RECONFIG

COMPLETE
E-RAB SETUP RESPONSE

UL INFO TRANSFER UPLINK DATA TRANSPORT

NAS message : Create Bearer Resp

e )
Activate Dedicated EPS Bearer Context Accept
,

ur
Create Bearer Resp

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 104

LTE RAN Protocols and Procedures (eLecture)

RRC Connection Re-establishment procedure

Without optional feature : “Multi-Target RRC Connection Re-establi
shment”
›Only in serving cell with no ongoing procedure

With optional feature: “Multi-Target RRC Connection Re-

establishment”
›in another cell with no ongoing procedure
›in any cell during ongoing X2 handover
›in source eNB during outgoing S1 handover /SRVCC
›during RRC Connection Reconfiguration cases

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 105

LTE RAN Protocols and Procedures (eLecture)

Multi-Target RRC Connection Reestablishment in an unprepared cell

S
Serving eNB PCI=A Target eNB 1 Target eNB 2 Target eNB 3 MME

RRC Connection ReestablishmentRequest

(PCI =A, C-RNTI…)
Context not
found
Lookup X 2 related eNBs
that have a cell with PCI =A

Context Fetch Request

Context Fetch Response
Apply
UE Context
Context Fetch Response Accept
RRCConnectionReestablishment

RRCConnectionReestablishmentComplete
S1: Path Switch Request

)
S1: Path Switch Request Acknowledge

e
RRCConnectionReconfiguration

ur
RRCConnectionReconfigurationComplete

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 106

LTE RAN Protocols and Procedures (eLecture)

Carrier Aggregation PCell & SCell(s)

PCell:
Primary Cell
› RRC Connection establishment / re-establishment (PCell)
› All L3 signaling in UL and DL (RRC & NAS)
› Used for transmission of PUCCH
› Can only be changed at handover

Scell:
› Configured by RRC Connection Reconfiguration
› Can be activated/deactivated by means of MAC Secondary Cell
Control Element (SCell)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 107

LTE RAN Protocols and Procedures (eLecture)

RRC Connection reconfiguration for SCell configuration

Extract from 36.331

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 108

LTE RAN Protocols and Procedures (eLecture)

S1 Interface
Radio Control Plane User Plane
Network
Layer S1-AP User Plane
PDUs

Transport Transport Network Transport Network

Network User Plane User Plane
Layer

GTP-U

SCTP UDP

IP IP

Data link layer Data link layer

Physicallayer Physicallayer

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 109

LTE RAN Protocols and Procedures (eLecture)

S1AP: eNBMME Signaling

› E-RAB Management
› Initial Context Transfer Function
› UE Capability Info Indication Function
› Mobility Function for UEs in LTE_ACTIVE
› Paging
› S1 Interface Management Functions S
› NAS signaling Transport between UE and MME
› S1 UE Context Release Function MME
› UE Context Modification Function
› Status Transfer
› Trace Function
› Location Reporting
› S1 CDMA 2000 Tunneling Function

)e
› Warning Message Transmission Function

ur
› RAN Information Management (RIM)

ct
› Configuration Transfer function

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 110

LTE RAN Protocols and Procedures (eLecture)

S1AP Elementary Procedures, class 1(1/2)

Elementary Initiating Message Successful Outcome Unsuccessful outcome
Procedure, class 1 Response Message Response Message
Handover Preparation HANDOVER REQUIRED HANDOVER COMMAND HANDOVER PREPARATION
FAILURE
Handover Resource Allocation HANDOVER REQUEST HANDOVER REQUEST HANDOVER FAILURE
ACKNOWLEDGE
Path Switch Request PATH SWITCH PATH SWITCH PATH SWITCH REQUEST
REQUEST REQUEST FAILURE
ACKNOWLEDGE
Handover Cancellation HANDOVER CANCEL HANDOVER CANCEL
ACKNOWLEDGE
E-RAB Setup E-RAB SETUP E-RAB SETUP
REQUEST RESPONSE
E-RAB Modify E-RAB MODIFY E-RAB MODIFY
REQUEST RESPONSE
E-RAB Release E-RAB RELEASE E-RAB RELEASE

)
COMMAND RESPONSE

e
ur
Initial Context Setup INITIAL CONTEXT INITIAL CONTEXT INITIAL CONTEXT SETUP
SETUP REQUEST SETUP RESPONSE FAILURE

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 111

LTE RAN Protocols and Procedures (eLecture)

S1AP Elementary Procedures, class 1(2/2)

Elementary Initiating Message Successful Outcome Unsuccessful outcome
Procedure, class 1 Response Message Response Message
Reset RESET RESET ACKNOWLEDGE

S1 Setup S1 SETUP REQUEST S1 SETUP RESPONSE S1 SETUP FAILURE

UE Context Release UE CONTEXT RELEASE UE CONTEXT RELEASE

COMMAND COMPLETE
UE Context Modification UE CONTEXT UE CONTEXT UE CONTEXT
MODIFICATION MODIFICATION MODIFICATION
REQUEST RESPONSE FAILURE
eNB Configuration Update ENB CONFIGURATION ENB CONFIGURATION ENB CONFIGURATION
UPDATE UPDATE UPDATE FAILURE
ACKNOWLEDGE
MME Configuration Update MME CONFIGURATION MME CONFIGURATION MME CONFIGURATION
UPDATE UPDATE UPDATE FAILURE
ACKNOWLEDGE

e )
Write-Replace Warning WRITE-REPLACE WRITE-REPLACE

ur
WARNING REQUEST WARNING RESPONSE

ct
Kill KILL REQUEST KILL RESPONSE

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 112

LTE RAN Protocols and Procedures (eLecture)

S1AP Elementary Procedures, Class 2 (1/2)

Elementary procedure, class 2 Initiating Message
Handover Notification HANDOVER NOTIFY
E-RAB Release Indication E-RAB RELEASE INDICATION
Paging PAGING
Initial UE Message INITIAL UE MESSAGE
Downlink NAS Transport DOWNLINK NAS TRANSPORT
Uplink NAS Transport UPLINK NAS TRANSPORT
NAS non delivery Indication NAS NON DELIVERY INDICATION
Error Indication ERROR INDICATION
UE Context Release Request UE CONTEXT RELEASE REQUEST
Downlink S1 CDMA 2000 Tunneling DOWNLINK S1 CDMA 2000 TUNNELING
Uplink S1 CDMA2000 Tunneling UPLINK S1 CDMA2000 TUNNELING
UE Capability Info Indication UE CAPABILITY INFO INDICATION
eNB Status Transfer ENB STATUS TRANSFER

)
MME Status Transfer MME STATUS TRANSFER

e
ur
Deactivate Trace DEACTIVATE TRACE

ct
Trace Start TRACE START

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 113

LTE RAN Protocols and Procedures (eLecture)

S1AP Elementary Procedures, Class 2 (2/2)

Elementary procedure, class 2 Initiating Message

Trace Failure Indication TRACE FAILURE INDICATION

Location Reporting Control LOCATION REPORTING CONTROL
Location Reporting Failure Indication LOCATION REPORTING FAILURE INDICATION
Location Report LOCATION REPORT
Overload Start OVERLOAD START
Overload Stop OVERLOAD STOP
eNB Direct Information Transfer ENB DIRECT INFORMATION TRANSFER
MME Direct Information Transfer MME DIRECT INFORMATION TRANSFER
eNB Configuration Transfer ENB CONFIGURATION TRANSFER
MME Configuration Transfer MME CONFIGURATION TRANSFER
Cell Traffic Trace CELL TRAFFIC TRACE
Downlink UE Associated LPPa Transport DOWNLINK UE ASSOCIATED LPPA TRANSPORT

)
Uplink UE Associated LPPa Transport UPLINK UE ASSOCIATED LPPA TRANSPORT

e
ur
Downlink Non UE Associated LPPa Transport DOWNLINK NON UE ASSOCIATED LPPA TRANSPORT

ct
Uplink Non UE Associated LPPa Transport UPLINK NON UE ASSOCIATED LPPA TRANSPORT

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 114

LTE RAN Protocols and Procedures (eLecture)

E-RAB Modification procedure

S
MME List of RABs and corresponding
QoS Profile to be modified aswell
as an optional NAS message per
RAB
E-RAB MODIFY REQUEST

RRC: Connection Reconf.

Contains a list of all successfully

RRC: Connection Reconf. complete modified RABs and possibly a list
of all RABs that failed to be
E-RAB MODIFY RESPONSE modified

Includes the optional NAS message

”Radio Modify Setup”
Note that this RRC procedure is not

)
always triggered

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 115

LTE RAN Protocols and Procedures (eLecture)

E-RAB Modify Request Description

IE/Group Name Presence Range IE type Semantics Criticality Assigned
and description Criticality
reference
Message Type M 9.2.1.1 YES reject

MME UE S1AP ID M 9.2.3.3 YES reject

eNB UE S1AP ID M 9.2.3.4 YES reject

UE AMBR
UE Aggregate O 9.2.1.20 YES reject
Maximum Bit Rate
E-RAB to be 1 YES reject
Modified List
>E-RAB To Be 1 to <maxnoof EACH reject
Modified Item IEs E-RABs>
>>E-RAB ID M 9.2.1.2 -

>>E-RAB Level QoS M 9.2.1.15 Includes -

QCI, ARP,
Parameters necessary

)
GBR/MBR

e
QoS

ur
parameters

ct
>>NAS-PDU M 9.2.3.5 -

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 116

LTE RAN Protocols and Procedures (eLecture)

E-RAB Modify Response Description

IE/Group Name Presence Range IE type and Semantics Criticality Assigned
reference description Criticality
Message Type M 9.2.1.1 YES reject

MME UE S1AP ID M 9.2.3.3 YES ignore

eNB UE S1AP ID M 9.2.3.4 YES ignore

E-RAB Modify List 0..1 YES ignore

>E-RAB Modify Item IEs 1 to <maxnoof E- EACH ignore

RABs>
>>E-RABID M 9.2.1.2 -

E-RAB Failed to Modify O E-RAB List a value for E- YES ignore

List 9.2.1.36 RAB ID shall
only be
present once
in E-RAB
Modify List
IE + E-RAB

)
Failed to

e
Modify List

ur
IE

ct
Criticality Diagnostics O 9.2.1.21 YES ignore

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 117

LTE RAN Protocols and Procedures (eLecture)

MME Overload Control S

MME

Overload =
Signaling load
> threshold

S1AP: Overload Start

IE: Overload action*

RRC Connection Request (Establishment Cause, S-TMSI)

RRC Connection Reject

(depending on S-TMSI, establishment cause & overload action) Overload resolved
Signaling load
<threshold
S1AP: Overload stop

e )
Overload Action:

ur
›Reject all RRC connection requests with establishment cause “mo-data”
›Reject all RRC connection requests with establishment causes “mo-data” and “mo-signaling”

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 118

LTE RAN Protocols and Procedures (eLecture)

X2 Protocol Model
Radio Control Plane User Plane
Network
Layer X2-AP User Plane
PDUs

Transport Transport Network Transport Network

Network User Plane User Plane
Layer

GTP-U

SCTP UDP

IP IP

Data link layer Data link layer

Physicallayer Physicallayer

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 119

LTE RAN Protocols and Procedures (eLecture)

X2AP: eNBeNB Signaling

Mobility Management
Load Management
Reporting of General Error Situations
Resetting the X2
Setting up the X2
eNodeB Configuration Update

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 120

LTE RAN Protocols and Procedures (eLecture)

X2AP Elementary Procedures, class 1

Elementary Initiating Message Successful Outcome Unsuccessful outcome
Procedure, class 1 Response Message Response Message

HANDOVER PREPARATION HANDOVER REQUEST HANDOVER REQUEST HANDOVER

ACKNOWLEDGE PREPARATION
FAILURE
RESET RESET REQUEST RESET RESPONSE
X2 SETUP X2 SETUP REQUEST X2 SETUP RESPONSE X2 SETUP FAILURE
ENB CONFIGURATION UPDATE ENB CONFIGURATION ENB CONFIGURATION ENB CONFIGURATION
UPDATE UPDATE UPDATE FAILURE
ACKNOWLEDGE

RESOURCE STATUS RESOURCE STATUS RESOURCE STATUS RESOURCE STATUS

REPORTING INITIATION REQUEST RESPONSE FAILURE

Mobility Settings Change MOBILITY CHANGE MOBILITY CHANGE MOBILITY CHANGE

REQUEST ACKNOWLEDGE FAILURE

e )
Cell Activation CELL ACTIVATION CELL ACTIVATION CELL ACTIVATION

ur
REQUEST RESPONSE FAILURE

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 121

LTE RAN Protocols and Procedures (eLecture)

X2AP Elementary Procedures, Class 2

Elementary procedure, class 2 Initiating Message

LOAD INDICATION LOAD INFORMATION

HANDOVER CANCEL HANDOVER CANCEL

SN STATUS TRANSFER SN STATUS TRANSFER

UE CONTEXT RELEASE UE CONTEXT RELEASE

RESOURCE STATUS REPORTING RESOURCE STATUS UPDATE

ERROR INDICATION ERROR INDICATION

RADIO LINK FAILURE INDICATION RLF INDICATION

) e
HANDOVER REPORT HANDOVER REPORT

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 122

LTE RAN Protocols and Procedures (eLecture)

GTP – GPRS Tunneling Protocol

GTP GTP
Node A
GTP I/F
Node B

TEID=xxx TEID=yyy
Destination Port: GTP GTP TUNNEL GTP
GTPv2-C=2123 UDP UDP
IP Address = AAA
GTPv1-U=2152 IP IP
Protocol ID: IP Address = BBB
L1/L2 L1/L2
UDP=17
GTP TUNNEL
Identified in each node by:
[TEID, IP-addr, Port number]

UTRAN S12
S16 All interfaces are
S4 GTPv2-C only, except:
SGSN
MSC
Server S1-U, S12, X2
S3 (only GTPv1-U)
Sv
HRPD S11 S4, S5/S8 (both)
CDMA
PDSN
S102 MME
2000
S10

e )
X2 S1-U SGW S5/S8 PGW

ur
ct
HRPD High Rate Packet Data GTP GPRS Tunneling Protocol
PDSN Packet Data Serving Node TEID Tunnel Endpoint Identifier

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 123

LTE RAN Protocols and Procedures (eLecture)

GTP-C v2: MMESGW PGW Signaling

MME PGW
› Path Management
› Tunnel Management
› Mobility Management
› CS Fallback and SRVCC related msgs
› Non 3GPP related msgs

MME
SGW

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 124

LTE RAN Protocols and Procedures (eLecture)

GTP-C Protocol Stack

GTP GTP

UDP UDP

IP IP

L2 L2

L1 L1

GTPv2 entit y GTPv2 entity

GTPv2 based
interface

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 125

LTE RAN Protocols and Procedures (eLecture)

GTP Message Types Path Management

Message Type value (Decimal) Message Reference GTP-C GTP-U

0 Reserved

1 Echo Request X X

2 Echo Response X X

3 Version Not Supported X

Indication

4 to 24 Reserved for S101 interface TS 29.276 [14]

25 to 31 Reserved for Sv interface TS 29.280 [15]

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 126

LTE RAN Protocols and Procedures (eLecture)

Path Management Messages

Echo Request
Echo Response

MME PGW

ECHO Request
ECHO Response

ECHO Response
ECHO Request

T3-RESPONSE
T3-RESPONSE ECHO Request
N3-REQUESTS
MME ECHO Response SGW/
N3-REQUESTS

)
T3-RESPONSE

e
ur
N3-REQUESTS

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 127

LTE RAN Protocols and Procedures (eLecture)

GTP-C MME SGWPGW

Message Type value (Decimal) Message

SGSN/MME to PGW (S4/S11, S5/S8)

32/33 Create Session Request /Response

36/37 Delete Session Request / Response
34/35 Modify Bearer Request / Response

PGW to SGSN/MME/ePDG (S5/S8, S4/S11, S2b)

95/96 Create Bearer Request /Response

97/98 Update Bearer Request/Response

99/100 Delete Bearer Request/ Response

e )
ur
For the complete table see: TS 29.274

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 128

LTE RAN Protocols and Procedures (eLecture)

GTP-C v2: MMESGW PGW Signaling

Session Creation:
PGW
› E-UTRAN Initial Attach
› UE requested PDN connectivity

Create Session Request (QoS)

GTP-C is also used to convey:
-Tracking Area Update procedure with Serving GW change
S5/S8
-S1/X2-based handover with SGW change
-UTRAN Iu mode to E-UTRAN Inter RAT handover with SGW change
-GERAN A/Gb mode to E-UTRAN Inter RAT handover with SGW change

S11handover and SRNS relocation

-3G Gn/Gp SGSN to MME combined hard
procedure
MME
-Gn/Gp SGSN to MME Tracking Area Update procedure SGW
Create Session Request (QoS)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 129

LTE RAN Protocols and Procedures (eLecture)

Example: “Session creation” in PDN Connectivity Scenario

B S R R
eNodeB MME S-GW P-GW

UL INFO TRANSFER UPLINK DATA TRANSPORT

(NAS: PDN Connectivity. Request (including specific APN)) Create Session Req Create Session Req

Create Session Resp Create Session Resp

E-RAB
- SETUP REQ
RRC CONNECTION RECONFIG (NAS: Activate Default EPS Bearer Context Request)
Establish DRBs, NAS message

RRC CONNECTION RECONFIG

COMPLETE E-RAB SETUP RESPONSE

UL INFO TRANSFER UPLINK DATA TRANSPORT

NAS: Activate Default EPS Bearer Context Accept

e)
,

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 130

LTE RAN Protocols and Procedures (eLecture)

Summary of Chapter 3
The students should now be able to:
1. Explain the functions of the Access Stratum NAS protocol
2. Describe the procedures in the NAS layer
3. Explain the interaction between RRC and the lower layers in the control plane
4. Explain the RRC connected and idle modes (states)
5. Explain the functions and services of RRC such as System Information Broadcast, Paging, Cell
Selection and Mobility
6. Explain the main functions and procedures of X2AP signaling protocol.
7. Explain the main functions and procedures of S1AP signaling protocol.
8. Explain the main functions and procedures of the signaling protocol GTP-C.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 131

LTE RAN Protocols and Procedures (eLecture)

PDCP, RLC, MAC and

GRP-U Protocols

LTE RAN Protocols and Procedures(eLecture)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 132

LTE RAN Protocols and Procedures (eLecture)

Objectives of Chapter 4
After this chapter the participants will be able to:
1. Explain the PDCP functions and services such as header compression and ciphering.
2. Explain the RLC Functions
3. List different modes of RLC (transparent, unacknowledged and acknowledged) and explain the
structure of the PDU involved in these cases
4. Explain the MAC functions such as HARQ, BCH Reception, PCH Reception
5. Explain MAC Architecture, its entities and their usage for the mapping of transport channels
6. List the content of the MAC Packet Data Unit (PDU).
7. Explain the main functions and procedures of the transport protocol GTP-U

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 133

LTE RAN Protocols and Procedures (eLecture)

Packet Data Convergence Protocol

PDCP Services TS 36.323
— Transfer of user plane data

— Transfer of control plane data

— Header compression

— Integrity protection of control plane

— Ciphering both control and user plane

PDCP Functions

— Header compression/decompression of IP data flows using ROHC

— Transfer of data

— Maintenence of SNs for radio bearers

— In sequence delivery of upper layer PDUs at re-establishment of lower layers

— Duplicate detection of lower layer SDUs at re-establishment of lower layers for radio bearers mapped on RLC acknowledged mode

— Integrity protection/verification of CP

e)
— Ciphering/deciphering of data

ur
— Timer based discard

ct
— Duplicate discarding

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 134

LTE RAN Protocols and Procedures (eLecture)

PDCP Architecture
TS 36.323

UE /E-UTRAN

PDCP-SAP PDCP-SAP Radio Bearers

C -SAP ... PDCP

PDCP entity PDCP entity

PDCP - PDU

RLC - SDU

...

e )
ur
RLC

ct
RLC UM -SAP RLC AM -SAP

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 135

LTE RAN Protocols and Procedures (eLecture)

PDCP Entity
UE/E-UTRAN E-UTRAN/UE
Transmitting Receiving
PDCP entity PDCP entity
TS 36.323

In order delivery and duplicate

Sequence numbering
Detection (U plane)

Header Compression Header Compression

(user plane only) (user plane only)
Packets associated
to a PDCP SDU Packets associated

to a PDCP SDU
Packets NOT associated

to a PDCP SDU
Packets NOT associated
to a PDCP SDU

Integrity Protection Integrity Verification

(control plane only) (control plane only)

Ciphering Deciphering

Add PDCP header Remove PDCP Header

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 136

LTE RAN Protocols and Procedures (eLecture)

Sequence Numbering
WHY: * Reordering
* Duplicate detection
* Integrity protection
* Ciphering

eNB

SRB1_UL COUNT
COUNT SRB1_UL

SRB1_DL COUNT
COUNT SRB1_DL
UE
UE Ctx
COUNT DRB_UL DRB_UL COUNT

COUNT DRB_DL DRB_DL COUNT

HOW:

)
PDCP SN:

e
ur
Next_PDCP_TX_SN
HFN PDCP S N
TX_HFN

ct
COUNT

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 137

LTE RAN Protocols and Procedures (eLecture)

Header Compression
8
WHY: Saving the bandwith by V=4 Hlen TOS Packet length
STATIC
HOW: *removing redundant info Identification Flags Fragment offset
Protocol Checksum INFERRED
*Encoding important info IPv4 TTL
Source address CHANGES
*Hop to Hop Destination address
RARELY
*Unidirectional Source port Destination port
CHANGES
UDP OFTEN
Length Checksum
Appr. 30 of
V CC M PT Sequence no
40 octets are
RTP Timestamp static or
easily
SSRC Identifier
compressible
!

UE/UE Context

PDCP SDU
IP Header IP data RB_UL IP data RB_UL IP data IP Header
PDCP SDU

CRC
Compressed

)
checksum covering the header before

e
Header
compression is included in the compressed header UE/UE Context

ur
Contains
encoded data

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 138

LTE RAN Protocols and Procedures (eLecture)

Integrity Protection
WHY: To ensure data origin

Header
PDCP PDU
PDCP PDU PDCP PDU

PDCP SDU
PDCP PDU PDCP PDU
PDCP SDU PDCP SDU
Header Header

COUNT COUNT
Direction
K_eNB_RRCInt
EIA MAC-I XMAC-I
EIA Direction
K_RRCInt
Bearer Id Bearer Id

MAC-I
= XMAC-I

)
Sending Side Receiving Side

e
ur
UE/eNB UE/eNB

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 139

LTE RAN Protocols and Procedures (eLecture)

Ciphering
WHY: To protect the data over radio
EEA0
EEA1
EEA2
EEA3
COUNT DIRECTION COUNT DIRECTION

BEARER LENGTH BEARER LENGTH

KEYUPenc EEA KEYUPenc EEA

KEYSTREAM KEYSTREAM
BLOCK BLOCK

)
PLAINTEXT CIPHERTEXT PLAINTEXT

e
BLOCK BLOCK

ur
BLOCK

ct
Sender Receiver

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 140

LTE RAN Protocols and Procedures (eLecture)

PDCP PDU
The PDCP Data PDU is used to convey:

• a PDCP SDU SN; and

• user plane data containing an uncompressed PDCP SDU; or
• user plane data containing a compressed PDCP SDU; or
• control plane data; and
• a MAC-I field for SRBs only

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 141

LTE RAN Protocols and Procedures (eLecture)

PDCP Data PDU Format

D/C R R R PDCP S N Oct 1
R R R PDCP S N Oct 1

PDCP S N (cont.) Oct 2

Data Oct 2
... Data Oct 3

MAC-I Oct N-3 ...

MAC -I (cont.) Oct N-2

MAC -I (cont.) Oct N-1

D/C PDCP S N Oct 1
MAC -I (cont.) Oct N
Data Oct 2

...

PDCP Data: PDU format SRB PDCP Data: PDU format DRB:
SN 12 bits mapped to RLC AM/UM
SN 7 bits mapped to RLC UM

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 142

LTE RAN Protocols and Procedures (eLecture)

Selection of SN length for PDCP

ManagedElement
+-ENodeBFunction
+-QciTable
+-QciProfilePredefined
pdcpSNLength = 12 {7,12,15}
QCI1 = 7
QCI5 = 12
QCI8/9 = 12

B Core
eNodeB

EPS Bearer – QCI 1

EPS Bearer – QCI 5

)e
EPS Bearer – QCI 8/9

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 143

LTE RAN Protocols and Procedures (eLecture)

PDCP Control PDU Format

D/C PDU Type R R R R Oct 1 D/C PDU Type FMS Oct 1

Interspersed ROHC feedback packet Oct 2 FMS (cont.) Oct 2

...
Bitmap 1 (optional) Oct 3

...

Bitmap N (optional ) Oct 2+N

PDCP Control: ROHC feedback PDCP Control: STATUS Report

e)
ur
D/C Data/Control
FMS First Missing PDCP SN

ct
ROHC RObust Header Compression

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 144

LTE RAN Protocols and Procedures (eLecture)

RLC Protocol Entity–Functions & Services

› RLC Services
RLC Services provided to upper layers:
TS 36.322
– Transparent data transfer
– Unacknowledged data transfer
– Acknowledged data transfer
RLC Services expected from lower layers:
– Data transfer
– Notification of a transmission opportunity
– Notification of HARQ delivery failure from transmitting MAC entity
› RLC Functions
– Segmentation, re-segmentation and assembly
– Concatenation
– Padding
– Transfer of user data in TM, UM and AM.
– Error correction (ARQ)
– In-sequence delivery
– Duplicate detection

)
– Flow control

e
ur
– RLC Re-establishment

ct
– Protocol Error Detection and Recovery

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 145

LTE RAN Protocols and Procedures (eLecture)

RLC TM Entity
UE/ENB ENB/UE
radio interface

TM-SAP TM-SAP

Transmitting Receiving
TM-RLC TM-RLC
entity entity
Transmission
buffer

e )
BCCH /PCCH /CCCH BCCH /PCCH /CCCH

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 146

LTE RAN Protocols and Procedures (eLecture)

RLC UM Entity
UE /ENB ENB /UE
radio interface

UM -SAP UM -SAP

Transmission SDU reassembly

buffer
Transmitting Receiving
UM -RLC UM -RLC
entity entity

Segmentation & Remove RLC header

Concatenation

Reception
Add RLC header buffer & HARQ
reordering

) e
ur
ct
DTCH DTCH

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 147

LTE RAN Protocols and Procedures (eLecture)

RLC AM Entity
AM -SAP

Transmission
RLC control SDU reassembly
buffer

Remove RLC header

Segmentation & Retransmission
Concatenation buffer

Reception
buffer & HARQ
reordering

Add RLC header

)
Routing

e
ur
ct
DCCH /DTCH DCCH /DTCH

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 148

LTE RAN Protocols and Procedures (eLecture)

Protocol Data Units - PDU

RLC Data PDU
— TM PDU, UM PDU, AM PDU and AMD PDU Segment

RLC Control PDU

— STATUS PDU

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 149

LTE RAN Protocols and Procedures (eLecture)

RLC Transparent Mode PDU

› The RLC TM PDU introduces no overhead

› TM is used for signaling on BCCH, PCCH and CCCH.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 150

LTE RAN Protocols and Procedures (eLecture)

RLC Unacknowledged Mode PDU

› UM RLC Entity configured by RRC to use either 5 bit SN or 10 bit SN

› Header: Fixed Part (FI, E, SN) + Extension Part (E(s), LI(s))

UMD PDU with 5 bit SN (No LI )

UMD PDU with 10 bit SN (No LI )

e )
ur
E Extension Field

ct
FI Framing Information
SN Sequence Number

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 151

LTE RAN Protocols and Procedures (eLecture)

RLC Unacknowledged Mode PDU,

5 bits SN, cont

FI E SN Oct 1
E LI1 Oct 2
LI1 E LI2 (if K>=3) Oct 3
LI2 Oct 4

Present
E LIK-2 Oct [2.5+1.5*K-5]
if K >= 3
LIK-2 E LIK-1 Oct [2.5+1.5*K-4]
LIK-1 Oct [2.5+1.5*K-3]
E LIK Oct [2.5+1.5*K-2]
LIK Padding Oct [2.5+1.5*K-1]
Data Oct [2.5+1.5*K]

Oct N

UMD PDU with 5 bit SN PDU with 5 bit SN

(Odd number of LIs, i.e. K = 1, 3, 5, …) (Even number of LIs, i.e. K = 2, 4, 6, …)

e )
ur
E Extension Field

ct
FI Framing Information
SN Sequence Number

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 152

LTE RAN Protocols and Procedures (eLecture)

RLC Unacknowledged Mode PDU,

10 bits SN, cont
R1 R1 R1 FI E SN Oct 1
SN Oct 2
E LI1 Oct 3
LI1 E LI2 (if K>=3) Oct 4
LI2 Oct 5

Present
E LIK-2 Oct [2.5+1.5*K-4]
if K >= 3
LIK-2 E LIK-1 Oct [2.5+1.5*K-3]
LIK-1 Oct [2.5+1.5*K-2]
E LIK Oct [2.5+1.5*K-1]
LIK Padding Oct [2.5+1.5*K]
Data Oct [2.5+1.5*K+1]

Oct N

UMD PDU with 10 bit SN UMD PDU with 10 bit SN

(Odd number of LIs, i.e. K = 1, 3, 5, …) (Even number of LIs, i.e. K = 2, 4, 6, …)

e )
ur
E Extension Field

ct
FI Framing Information
SN Sequence Number

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 153

LTE RAN Protocols and Procedures (eLecture)

RLC Acknowledged Mode PDU

› AM RLC Entity uses10 bit SN
› Header: Fixed Part (D/C, RF, P, FI, E, SN) + Extension Part (E(s), LI(s))

AMD PDU with 10 bit SN (No LI )

D/C Data/Control
E Extension Field
FI Framing Information

e)
P Poll Bit

ur
RF Resegmentation Flag
SN Sequence Number

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 154

LTE RAN Protocols and Procedures (eLecture)

RLC Acknowledged Mode PDU

D/C RF P FI E SN Oct 1 D/C RF P FI E SN Oct 1

SN Oct 2 SN Oct 2
LSF SO Oct 3 LSF SO Oct 3
SO Oct 4 SO Oct 4
E LI1 Oct 5 E LI1 Oct 5
LI1 E LI2 (if K>=3) Oct 6 LI1 E LI2 Oct 6
LI2 Oct 7 LI2 Oct 7
Present if
E LIK-2 Oct [4.5+1.5*K-4] E LIK-1 Oct [4+1.5*K-2]
K >= 3
LIK-2 E LIK-1 Oct [4.5+1.5*K-3] LIK-1 E LIK Oct [4+1.5*K-1]
LIK-1 Oct [4.5+1.5*K-2] LIK Oct [4+1.5*K]
E LIK Oct [4.5+1.5*K-1] Data Oct [4+1.5*K+1]
LIK Padding Oct [4.5+1.5*K]
Data Oct [4.5+1.5*K+1] Oct N

(Even number of LIs, i.e. K = 2, 4, 6, …)

Oct N

Odd number of LIs, i.e. K = 1, 3, 5, …) D/C Data/Control

E Extension Field

)
FI Framing Info

e
ur
LSF Last Segment Flag
P Poll Bit

ct
RF Resegmentation Flag
SN Sequence Number

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 155

LTE RAN Protocols and Procedures (eLecture)

STATUS PDU

e )
D/C Data/Control

ur
CPT Control PDU Type
E Extension Field

ct
SO Segment Offset

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 156

LTE RAN Protocols and Procedures (eLecture)

Information Element: E bit

 Extension bit
Fixed header

Value Description
0 Data field follows from the octet following the fixed part of the
header
1 A set of E field and LI field follows from the octet following the
fixed part of the header

Extension part of the header

Value Description
0 Data field follows from the octet following the LI field
following this E field

)e
1 A set of E field and LI field follows from the bit following the LI

ur
field following this E field

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 157

LTE RAN Protocols and Procedures (eLecture)

Information Element: Length Indicator LI

• Length Indicator (LI) field
The LI field indicates the length in bytes of the corresponding data field element present in the RLC
data PDU delivered/received by an UM or an AM RLC entity.

The value 0 is reserved.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 158

LTE RAN Protocols and Procedures (eLecture)

Information Element: FI Framing Information field

Value Description
00 First byte of the Data field corresponds to the first byte of a RLC SDU.
Last byte of the Data field corresponds to the last byte of a RLC SDU.
01 First byte of the Data field corresponds to the first byte of a RLC SDU.
Last byte of the Data field does not correspond to the last byte of a RLC SDU.
10 First byte of the Data field does not correspond to the first byte of a RLC SDU.
Last byte of the Data field corresponds to the last byte of a RLC SDU.
11 First byte of the Data field does not correspond to the first byte of a RLC SDU.
Last byte of the Data field does not correspond to the last byte of a RLC SDU.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 159

LTE RAN Protocols and Procedures (eLecture)

Information Element: Segment Offset SO

The Segment Offset field indicates the position of the AMD PDU segment in bytes within the original
AMD PDU.

The first byte in the Data field of the original AMD PDU is referred by the SO field value
"000000000000000"

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 160

LTE RAN Protocols and Procedures (eLecture)

Information Element: Last Segment Flag LSF

Value Description
0 Last byte of the AMD PDU segment does not correspond
to the last byte of an AMD PDU.
1 Last byte of the AMD PDU segment corresponds
to the last byte of an AMD PDU.

 Last Segment Flag field

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 161

LTE RAN Protocols and Procedures (eLecture)

Information Element: Resegmentation Flag RF

Value Description
0 AMD PDU
1 AMD PDU segment

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 162

LTE RAN Protocols and Procedures (eLecture)

Information Element: Poll P

Value Description

0 Status report not requested

1 Status report is requested

 Polling bit field

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 163

LTE RAN Protocols and Procedures (eLecture)

Information Element: Control Pdu Type CPT

Value Description
000 STATUS PDU
001-111 Reserved
(PDUs with this coding will be discarded
by the receiving entity for this release of the protocol)

 Control PDU Type bit field

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 164

LTE RAN Protocols and Procedures (eLecture)

Variables, Constants and Timers AM

Transmitting side Receiving side

Acknowledgement state variable VT(A) Receive state variable VR(R)

Maximum send state variable VT(MS) Maximum acceptable receive state variable VR(MR)

Send state variable VT(S) T_reordering state variable VR(X)

Poll send state variable POLL_SN Maximum STATUS transmit state variable VR(MS)

Highest received state variable VR(H)

Counters

PDU_WITHOUT_POLL

BYTE_WITHOUT_POLL
RETX_COUNT
Timers

e )
T_poll_retransmit T_reordering

ur
ct
T_status_prohibit

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 165

LTE RAN Protocols and Procedures (eLecture)

Variables, Constants and Timers UM

Transmitting side Receiving side

Acknowledgement state variable VT(US) Receive state variable VR(UR)

Send state variable VT(S) UM_T_reordering state variable VR(UX)

UM Highest received state variable VR(UH)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 166

LTE RAN Protocols and Procedures (eLecture)

MAC Protocol Entity

MAC Services
PCCH BCCH CCCH
Upper layers
DCCH DTCH MAC-control

Logical Channel Prioritization

(

— Data Transfer
(De-) Multiplexing Control

— Reallocation of resources HARQ Random

Access Control

MAC Functions
PCH BCH DL-SCH UL-SCH RACH

— Mapping between logical channels and transport channels Lower layer

— Multiplexing of MAC SDUs from one or different logical channels onto transport block (TB) to be delivered to the physical layer on a transport
channel

— Demultiplexing of MAC SDUs from one or different logical channels from transport block (TB) to be delivered from the physical layer on a transport
channel

— Scheduling information reporting

— Error Correction (HARQ)

— Priority handling between UEs by means of dynamic scheduling

— Priority handling between logical channels of one UE

)
— Logical channel prioritization and Transport Format selection

e
ur
— Dual Connectivity Power Headroom Report

ct
— PDCP Duplication Activation/Deactivation

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 167

LTE RAN Protocols and Procedures (eLecture)

MAC Structure, UE side

Upper layers

PCCH BCCH CCCH DCCH DTCH MAC-control

Logical Channel Prioritization (UL only)

(De-) Multiplexing Control

Random
HARQ
Access Control

e )
ur
PCH BCH DL-SCH UL-SCH RACH

ct
Lower layer

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 168

LTE RAN Protocols and Procedures (eLecture)

MAC Structure, NW Side

MAC Control

CCCH DCCH DTCH DCCH DTCH CCCH PCCH BCCH

Scheduling / Priority
Scheduling / Priority Handling Handling

Scheduler
Control

Multiplexing Demultiplexing

HARQ
HARQ HARQ

e )
PDCCH
PUCCH

ur
SR
DL-SCH HARQ UL-SCH HARQ PCH BCH DL-SCH
Feedback Feedback

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 169

LTE RAN Protocols and Procedures (eLecture)

MAC Function Location

MAC function UE eNB Downlink Uplink

Mapping between logical channels and transport channels X X X

X X X
Multiplexing X X
X X
Demultiplexing X X
X X
Error correction through HARQ X X X
X X X
Transport Format Selection X X X
Priority handling between UEs X X X
Priority handling between logical channels of one UE X X X

e )
Logical Channel prioritisation X X

ur
ct
Scheduling information reporting X X

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 170

LTE RAN Protocols and Procedures (eLecture)

Logical Channels – Control

Broadcast Control Channel (BCCH)
— DL broadcast of system control information.
Paging Control Channel (PCCH)
— DL paging information. UE position not known on cell level
Common Control Channel (CCCH)
— UL/DL. When no RRC connection exists.
Multicast Control Channel (MCCH)
— DL point-to-multipoint for MBMS scheduling and control, for one or several MTCHs.
Dedicated Control Channel (DCCH)

)
— UL/DL dedicated control information. Used by UEs having an RRC connection.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 171

LTE RAN Protocols and Procedures (eLecture)

Logical Channels - Traffic

Dedicated Traffic Channel (DTCH)
— UL/DL Dedicated Traffic to one UE, user information.
Multicast Traffic Channel (MTCH)
— DL point-to-multipoint. MBMS user data.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 172

LTE RAN Protocols and Procedures (eLecture)

Transport Channels - DL
Broadcast Channel (BCH)
— System Information broadcasted in the entire coverage area of the cell. Beamforming is not applied.
Downlink Shared Channel (DL-SCH)
— User data, control signaling and System Info. HARQ and link adaptation. Broadcast in the entire cell or
beamforming. DRX and MBMS supported.
Paging Channel (PCH)
— Paging Info broadcasted in the entire cell. DRX
Multicast Channel (MCH)
— MBMS traffic broadcasted in entire cell. MBSFN is supported.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 173

LTE RAN Protocols and Procedures (eLecture)

Transport Channels - UL
Uplink Shared channel (UL-SCH)
— User data and control signaling. HARQ and link adaptation. Beamforming may be applied.
Random Access Channel (RACH)
— Random Access transmissions (asynchronous and synchronous). The transmission is typically contention based.
For UEs having an RRC connection there is some limited support for contention free access.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 174

LTE RAN Protocols and Procedures (eLecture)

Physical Channels and Signals

Physical Downlink Shared Channel (PDSCH) Physical Multicast Channel (PMCH)
— transmission of the DL-SCH transport channel — DL transmission of the MCH transport channel.

Physical Uplink Shared Channel (PUSCH) Physical Random Access Channel (PRACH)

— transmission of the UL-SCH transport channel — UL transmission of the random access preamble as
given by the RACH transport channel.
Physical Control Format Indicator Channel (PCFICH) Physical signals
— indicates the PDCCH format in DL
Reference Signals (RS)
Physical Downlink Control Channel (PDCCH)
— support measurements and coherent demodulation in
— DL L1/L2 control signaling uplink and downlink.

Physical Uplink Control Channel (PUCCH) Primary and Secondary Synchronization signals (P-
SCH and S-SCH)
— UL L1/L2 control signaling
— DL only and used in the cell search procedure.
Physical Hybrid ARQ Indicator Channel (PHICH)
— DL HARQ info Sounding Reference Signal (SRS)

e )
— supports UL scheduling measurements
Physical Broadcast Channel (PBCH)

ur
ct
— DL transmission of the BCH transport channel.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 175

LTE RAN Protocols and Procedures (eLecture)

Channel Mapping
Downlink Uplink

PCCH MTCH MCCH BCCH DTCH DCCH CCCH DTCH DCCH CCCH
Logical Channels
“type of information”
MIB SIB (traffic/control)

PCH MCH BCH DL-SCH UL-SCH RACH

Transport Channels
“how and with what
characteristics”
(common/shared/mc/bc)
-Sched TF DL
-Sched grant UL -CQI
PDCCH -Pwr Ctrl cmd -ACK/NACK
info -HARQ info ACK/NACK -Sched req. Physical Channels
“bits, symbols,
PMCH PBCH PDSCH PCFICH PDCCH PHICH PUCCH PUSCH PRACH modulation, radio
frames etc”

)
-meas for DL sched -

e
meas for mobility -half frame sync -frame sync -measurements for

ur
-coherent demod -cell id -cell id group -coherent demod UL scheduling
Physical Signals

ct
“only L1 info”
RS P-SCH S-SCH RS SRS

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 176

LTE RAN Protocols and Procedures (eLecture)

Logical Channel Prioritzation UL

Priority order

Bj B3 B2 B1
TTI n+3
TTI n+2
TTI n+1
... Max Bucket size= PBR x BSD
At each TTI
TTI n Bucket size = bucket size + PBR

DTCH DTCH DCCH DCCH

... PBR LCH4
PBR LCH3
PBR LCH2

e )
ur
PBR LCH1

ct
UL-SCH

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 177

LTE RAN Protocols and Procedures (eLecture)

MAC PDU
R/R/E/LCID/F/LR/R/E/LCID/F/L R/R/E/LCID/F/L R/R/E/LCID/F/L ... R/R/E/LCID/F/L R/R/E/LCID padding
sub-header sub-header sub-header sub-header sub-header sub-header

MAC header
MAC Control
element 1
MAC Control
element 2
MAC SDU ... MAC SDU
Padding
(opt)

MAC payload

LCID Logical Channel ID

E Extension Bit

)
R Reserved

e
F Length Flag

ur
L Length

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 178

LTE RAN Protocols and Procedures (eLecture)

MAC Sub-header

R R E LCID Oct 1 R R E LCID Oct 1

F L Oct 2 F L Oct 2

L Oct 3

R/R/E/LCID/F/L sub-header with R/R/E/LCID/F/L sub-header with

7-bits L field 15-bits L field

R R E LCID Oct 1

) e
ur
R/R/E/LCID sub -Header

ct
(used for padding)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 179

LTE RAN Protocols and Procedures (eLecture)

LCID values
Values of LCID for DL-SCH Values of LCID for UL-SCH
Index LCID values Index LCID values
00000 CCCH 00000 CCCH

00001-01010 Identity of the logical channel 00001-01010 Identity of the logical

channel
01011-11001 Reserved 01011-11000 Reserved

11010 Long DRX Command 11001 Extended Power

Headroom Report
11011 Activation/Deactivation
11010 Power Headroom Report
11100 UE Contention Resolution
Identity 11011 C-RNTI
11100 Truncated BSR
11101 Timing Advance Command
11101 Short BSR
11110 DRX Command

)
11110 Long BSR

e
ur
11111 Padding 11111 Padding

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 180

LTE RAN Protocols and Procedures (eLecture)

MAC Control Element - BSR

LCG ID Buffer Size Oct 1 Short BSR

Buffer
Buffer Size #0 Oct 1
Size #1
Buffer Size #1 Buffer Size #2 Oct 2
Long BSR
Buffer
Buffer Size #3 Oct 3
Size #2

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 181

LTE RAN Protocols and Procedures (eLecture)

MAC Control Element - Maintenance of TA

Uplink Time Alignment

› When the UE gets Timing

- Random Access Response
- Piggy Backed together with data

UE 2
UE 1

R R Timing Advance Command Oct 1

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 182

LTE RAN Protocols and Procedures (eLecture)

MAC Control Element - Activation/Deactivation (CA)

Primary Cell
(PCell) No state
change
allowed until
timer expires

Ci: SCell configured with SCellIndex i

in RRC Connection Reconfiguration message
(SCellIndex-r10 ::= INTEGER (1..7))

Ci= 1: Activate SCell

Ci= 0: Deactivate SCell

Secondary Cell
(SCell)

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 183

LTE RAN Protocols and Procedures (eLecture)

Dual Connectivity Power Headroom Report MAC

Control Element
C7 C6 C5 C4 C3 C2 C1 R
Codepoint/ C15 C14 C13 C12 C11 C10 C9 C8
Index LCID values C7 C6 C5 C4 C3 C2 C1 R
C23 C22 C21 C20 C19 C18 C17 C16
Dual Connectivity Power P V PH (Type 2, PCell) C31 C30 C29 C28 C27 C26 C25 C24
11000 Headroom Report R R PCMAX,c 1 P V PH (Type 2, PCell)
P V PH (Type 2, PSCell) R R PCMAX,c 1
The Dual Connectivity R R PCMAX,c 2 P V PH (Type 2, PSCell)

Power Headroom Report P V PH (Type 1, PCell) R R PCMAX,c 2

P V PH (Type 1, PCell)
(PHR) MAC control R R PCMAX,c 3
R R PCMAX,c 3
P V PH (Type 3, PCell)
element is identified by a R R PCMAX,c 4
P V PH (Type 3, PCell)

MAC PDU subheader P V PH (Type x, Serving Cell 1)

R R PCMAX,c 4
P V PH (Type x, Serving Cell 1)
with LCID as specified in R R PCMAX,c 5
R R PCMAX,c 5
the above table. It has a …... …...
variable size and is P
R
V
R
PH (Type x, Serving Cell 1)
PCMAX,c m
P V PH (Type x, Serving Cell 1)

defined as per the octet

)
R R PCMAX,c m

e
ur
table. Dual Connectivity PHR Dual Connectivity PHR MAC Control

ct
MAC Control Element Element supporting 32 serving cells with

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 184

LTE RAN Protocols and Procedures (eLecture)

PDCP Duplication Activation/Deactivation MAC

Control Element
Codepoint/Index LCID values
Activation/Deactivation of PDCP
10010
Duplication D8 D7 D6 D5 D4 D3 D2 D1 OCTET 1

PDCP Duplication Activation/Deactivation MAC control element is identified by a MAC PDU

subheader with LCID as specified in the table. It has a fixed size, consists of a single octet
containing eight D-fields, and is defined, for a MAC entity, as follows:

- Di: this field refers to the i-th DRB in the ascending order of the DRB identity among the
established DRB(s) configured with duplication and with RLC entity(ies) associated with this
MAC entity. Di field set to "1" indicates that the duplication shall be activated and Di field set to
"0" indicates that the duplication shall be deactivated.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 185

LTE RAN Protocols and Procedures (eLecture)

MAC Procedures
Random Access
Maintenance of Uplink Time Alignment
DL-SCH data transfer
UL-SCH data transfer
PCH reception
BCH reception
Discontinuous Reception (DRX)
MAC reconfiguration
MAC Reset

)e
Semi-Persistent Scheduling

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 186

LTE RAN Protocols and Procedures (eLecture)

Random Access (RA) Procedure

Purpose
— Initial access
— Establish UL synchronization
— Indicate presence of UL data
Two cases
— Contention-based
— Contention-free
Consists of four phases (messages)
— Random Access Preamble
— Random Access Response

)e
ur
— L2/L3 message

ct
— Contention Resolution

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 187

LTE RAN Protocols and Procedures (eLecture)

CBRA vs CFRA during RRC Connection Establishment

CBRA CFRA
UE eNB UE eNB
Random Access Preamble Random Access Preamble
1. 1.
(Randomly selected Preamble Id) (Pre-allocated Preamble Id)
Random Access Response 2. Random Access Response 2.

3. RRC Connection Request 3. RRC Connection Request

RRC Connection Setup 4. RRC Connection Setup 4.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 188

LTE RAN Protocols and Procedures (eLecture)

Initial Random Access

PRACH: RACH preamble

UE randomly selects MAC MAC
one of the 64 preambles and send it based on
preambleInitialReceivedTargetPower
PRACH: RACH preamble
MAC MAC RA-RNTI = 1+ t_id + 10f_id
MAC allocate TC-RNTI
If no answer is received within PDCCH: RA-RNTI; Scheduling Grant;TA
ra-ResponseWindowSize preamble is DL-SCH: RACH response
sent again based on MAC (RAPID; TC-RNTI); MAC
preambleInitialReceivedTargetPower + powerRampingStep
PUSCH: TC-RNTI
UL SCH: RA message3
If the UE sees its preamble, it CCCH: RRC Connection Request
RRC RRC
will respond with RRCConnectionReq (Initial UE identity, Cause) The TC-RNTI is "promoted" to a C-RNTI,
Including its 48 bit UE-id and Est. i.e. the same 16-bit value
Cause) allocated for TC-RNTI
The 40-bit MAC "UE contention resolution PDCCH: TC-RNTI; Scheduling Grant will continue to be used as C-RNTI
identity" is identical to the RRC Connection DL-SCH: C-RNTI; Contention Resolution MAC after the random access procedure
MAC is successfully concluded.
Request sent in RA message 3.
RRC CCCH: RRC Connection Setup
RRC
(SRB1 parameters)

)
Use TC-RNTI to decode DL SCH. If the UE contention

e
resolution

ur
identity MAC control element matches the RRC connection UL-SCH: C-RNTI; BSR
MAC MAC
request
message promote TC-RNTI to C_RNTI. DCCH: RRC Connection Setup Complete

ct
RRC (Selected PLMN id, NAS: Attach Request *) RRC

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 189

LTE RAN Protocols and Procedures (eLecture)

Scheduling Request – Random Access

rach-Configuration {
preambleInformation { numberOfRA-Preambles n64 },
powerRampingParameters { powerRampingStep dB2,
preambleInitialReceivedTargetPower dBm-104 },
ra-SupervisionInformation { preambleTransMax n10,
ra-ResponseWindowSize sf4, BCCH: System Information •no PUCCH resources
mac-ContentionResolutionTimer sf48 }, RRC RRC
•no UL Synch (TAT is not running)
maxHARQ-Msg3Tx 1 },
•has repeated SR on PUCCH max no of times
PRACH: RACH preamble
UE randomly selects MAC MAC
one of the 64 preambles and send it based on
preambleInitialReceivedTargetPower
PRACH: RACH preamble
MAC MAC
RA-RNTI = 1+ t_id + 10f_id
If no answer is received within MAC allocate TC-RNTI
PDCCH: RA-RNTI; Scheduling Grant;TA
ra-ResponseWindowSize preamble is DL-SCH: RACH response
sent again based on MAC (RAPID; TC-RNTI); MAC
preambleInitialReceivedTargetPower + powerRampingStep

If the UE sees its preamable, it

will respond with Scheduling Request by MAC PUSCH: C-RNTI MAC
UL SCH: msg3 (BSR, PHR)
sending msg3 containing MAC control
elements( BSR and/or PHR) and
identified by C-RNTI

PDCCH: C-RNTI; Scheduling Grant

MAC MAC
C-RNTI provides contention resolution

e )
ur
Use C-RNTI to decode DL SCH..
UL-SCH: C-RNTI; BSR

ct
MAC MAC
RLC DTCH/DCCH:

Le
Scheduled Unicast Transmission RLC

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 190

LTE RAN Protocols and Procedures (eLecture)

Contention Free Random Access

The CFRA can be used for:
›Incoming handover and
›PDCCH ordered UL re-synchronization (in case of DL data arrival for a UE that is out-of-
sync in UL, i.e. a UE whose time alignment timer has expired)

— UE1 is assigned preamble pUE1 by means of RRC signalling via cell 1 which is the serving cell

)
of UE1

e
ur
— UE2 is assigned preamble pUE2 directly via PDCCH.

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 191

LTE RAN Protocols and Procedures (eLecture)

Benefits
Contention free random access can be used as random access for cases when UE is RRC_CONNECTED,
i.e.
In a high RACH load scenario, the benefit can be summarized as:
— It avoids contention by dedicating resources for UE to use for random access.
— It reduces access latency
— reduces the interrupt time for handover and
— Reduces packet drops in user plane.
— reduced access delay
— reduced need for PRACH resources

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 192

LTE RAN Protocols and Procedures (eLecture)

HARQ Principle - four multiple hybrid ARQ processes

Demultiplexed into logical channels and forwarded to RLC for reordering

TrBlk 1 TrBlk 2 TrBlk 0 TrBlk 5

Hybrid
Receiver processing Receiver processing
ARQ Receiver processing Receiver processing
Receiver processing Receiver processing
processes Receiver processing Receiver processing

NAK ACK ACK ACK NAK ACK

NAK NAK

CFN0 1 2 3 4 5 6 7 8 9

TrBlk 0 TrBlk 1 TrBlk 2 TrBlk 3 TrBlk 0 TrBlk 4 TrBlk 5 TrBlk 3 TrBlk 0 TrBlk 4

e )
1 ms TTI Fixed timing relation

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 193

LTE RAN Protocols and Procedures (eLecture)

HARQ and ARQ

RLC SDUs
BLER ~10-6

RLC
Sliding Window ARQ
UL ARQ UL ARQ
Transmitter Receiver

RLC PDUs RLC Status

RLC Status RLC PDUs
BLER ~10-4 to 10-3 BLER ~10-4 to 10-3 (DL HARQ data)

MAC
DL HARQ UL HARQ Stop and Wait HARQ
UL HARQ DL HARQ
Receiver Transmitter
Receiver Transmitter

BLER ~10-1 Transport Block +CRC

BLER ~10-1

)
Uplink L1

e
ur
Downlink L1

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 194

LTE RAN Protocols and Procedures (eLecture)

Paging Reception and DRX cycle

Paging channel (PCH) uses PDSCH transmission
Paging indicated on PDCCH
— DRX cycle defined
— Special ‘paging MAC ID’ indicating paging group
— If ID matches  UE reads PDSCH to find which UE that is paged

PDCCH Possibility to page this terminal

UE receiver circuitry switched off UE receiver circuitry switched off

subframe
DRX cycle

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 195

LTE RAN Protocols and Procedures (eLecture)

BCH Reception

SFN-div-4 = 102 SFN -div-4 = 103

MIB MIB

Coding etc . Coding etc .

0 5 0 5 0 5 0 5 0 5 0

SFN =408 SFN =409 SFN =410 SFN =411 SFN =412
10 ms 10 ms
40 ms

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 196

LTE RAN Protocols and Procedures (eLecture)

DRX Operation A+D DL Assignment + DL Data that will be ACKed

A+D DL Assignment + DL Data that will be NACKed

G UL Grant

D UL Data following UL Grant that will be ACKed

DRX Cycle

Opportunity for DRX Opportunity for DRX

Inactivity Timer
(restarted)

On Duration
DL RX

Nack
A+D

A+D

ACK
Ack
G

HARQ RTT Timers DRX Retransmission Timer

(one per process) (if DL retransmission expected)

e )
UL TX

Nack
Ack

Ack

ur
D

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 197

LTE RAN Protocols and Procedures (eLecture)

Data Flow Through Air Interface

IP
IP MACHeader
MAC Header
IP
IP TCP
TCP Payload
Payload IP
IP TCP
TCP
via
viaS1
S1or
orfrom
from 20B
20B 20B
20B e.g.
e.g.50
50Byte
Byte 20B
20B 20B
20B
•Payload
Payload
• LCID
e.g.
LCID(5
e.g.1460
(5bit)
1460Byte
Byte
bit)
UE’s
UE’sstack
stack RLCRadio
RLC
 RadioBearer
Bearerxx
•• Length
LengthField
Field(15
(15bit)
bit)
MACSDU
MAC
 SDUisis927
927Byte
Byte
PDCP
PDCP HH HH •• LCID
LCID(5
(5bit)
bit)
~3B
~3B ~3B
~3B
Header
HeaderCompression
Compression LCID==Padding
LCID Padding

&&Ciphering
Ciphering PDCP
PDCP PDCP
PDCPSDU
SDU PDCP
PDCP PDCP
PDCP
2B
2B 2B
2B •• ……and
and77other
otherbits
bits PDU
PDU

RLC
RLC
RLC
RLC RLC PDCP Header
RLCSDU
SDU Segmentation
Segmentation
4B
4B
Segmentation
Segmentation • Sequence Number (12 bit)
RLC
RLC
For ciphering, integrity protection RLCSDU
RLC SDU RLC
RLC
concatenation
concatenation
Concatenation
Concatenation
RLCHeader
RLC 2B2B
Headerand during handover PDU
PDU

•• Sequence
Sequence Number
• … Number
and (10bits
4 other
(10 bit)
bit)
MAC
MAC ARQ
 ARQWindow
Windowsize
size==512
512 Multiplexing
Multiplexing(Padding)
(Padding)
MAC
MACSDU
SDU(e.g.
(e.g.599
599Byte)
Byte)
MAC
MAC 1B
1B •• Framing
Framing Info
Info (2
(2 bit)
bit)
Multiplexing
Multiplexing 0:first
0:
 firstSDU
SDUstarts
starts
MAC here
MAChere MAC
MAC
MAC
MACSDU
SDU(e.g.
(e.g.927
927Byte)
Byte)
1:last
1:
 lastSDU 4B
SDUdoes4Bnot
does notend
endhere
here PDU
PDU

•• …… and
and 44 other
other bits
bits
RLC Framing
RLC Framing Sub-Header
Sub-Header

)
L1
L1 CRC
CRC

e
Transport
TransportBlock
Block
Coding,
Coding, •• Length
Length Indicator
Indicator (11
(11 bit)
bit)

ur
3B
3B

Interleaving,
Interleaving, MaximumSDU
Maximum
 SDUsize
size==2048
2048Byte
Byte

ct
Modulation
Modulation FirstSDU
First
 SDUisis55
55Byte
Byte
•• Extension
Extension bit
bit

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 198

LTE RAN Protocols and Procedures (eLecture)

L2 Structure for DL
Radio
Bearers

PDCP

RLC

Logical
channels

MAC

)e
ur
Transport

ct
channels

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 199

LTE RAN Protocols and Procedures (eLecture)

L2 Structure for DL with Carrier Aggregation

Radio
Bearers
PDCP

RLC
Logical
channels

MAC

)e
Transport

ur
channels

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 200

LTE RAN Protocols and Procedures (eLecture)

GTP – GPRS Tunneling Protocol

GTP GTP
Node A
GTP I/F
Node B

UTRAN S12
S16 All interfaces are
S4 GTPv2-C only, except:
SGSN
MSC
Server S1-U, S12, X2
S3 (only GTPv1-U)
Sv
HRPD S11 S4, S5/S8 (both)
CDMA
PDSN
S102 MME
2000
S10

e )
X2 S1-U SGW S5/S8 PGW

ur
ct
HRPD High Rate Packet Data GTP GPRS Tunneling Protocol
PDSN Packet Data Serving Node TEID Tunnel Endpoint Identifier

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 201

LTE RAN Protocols and Procedures (eLecture)

GPRS Tunneling Protocol for the user plane (GTP-U)

Application N/w

IP IP

Relay Relay
PDCP GTP-U
PDCP GTP-U GTP-U
GTP-U

RLC RLC UDP/IP UDP/IP UDP/IP UDP/IP

MAC MAC L2 L2 L2 L2

L1 L1 L1 L1 L1 L1

)
LTE-Uu S1-U S5/S8 SGi

e
ur
UE eNodeB Serving GW PDN GW

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 202

LTE RAN Protocols and Procedures (eLecture)

GPRS Tunneling Protocol

WWW

S s
d
MME PCRF

R
S-GW R
PDN-
GW
DRBs Tunnels Tunnels

GTP GTP

S1UP S5/8
Tunnels
Only for
Packet
GTP GTP
Forwarding

e )
ur
X2UP

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 203

LTE RAN Protocols and Procedures (eLecture)

Tunnel vs Path
Tunnel Endpoint IDentifier (TEID): unambiguously identifies a tunnel endpoint in the receiving GTP-U protocol entity
The receiving end side of a GTP tunnel locally assigns the TEID value the transmitting side has to use.
The TEID values are exchanged between tunnel endpoints using S1AP/X2AP signalling

GTP UDP IP Eth Phy Phy Eth IP UDP GTP

GTP-U Header

) e
ur
UDP/IP Path: connection-less unidirectional or bidirectional path defined by two end-points
An IP address and a UDP port number define an end-point.

ct
A UDP/IP path carries GTP messages

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 204

LTE RAN Protocols and Procedures (eLecture)

GTP-U v1 Header
Octets 8 7 6 5 4 3 2 1 TS 29.281

1 Version PT (*) E S P
N

2 Message Type

3 Length (1st Octet)

4 Length (2nd Octet)

5 Tunnel Endpoint Identifier (1st Octet)

6 Tunnel Endpoint Identifier (2nd Octet)

7 Tunnel Endpoint Identifier (3rd Octet)

8 Tunnel Endpoint Identifier (4th Octet)

9 Sequence Number (1st Octet)

10 Sequence Number (2nd Octet)

)
e
ur
11 N-PDU Number

ct
12 Next Extension Header Type

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

© Ericsson AB 2023 | LZU1084239 R2A 205

LTE RAN Protocols and Procedures (eLecture)

Functions of GTP-U

Tunnel Management
GTP-U Tunnel IP transport
Error Indication
End Marker

Path Management
Echo Request
Echo Response

(e
ur 3
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

LTE RAN Protocols and Procedures (eLecture)

Path Management Messages

Echo Request
Echo Response

ECHO Request R T3-RESPONSE

ECHO Response
S-GW N3-REQUESTS

LTE RAN Protocols and Procedures (eLecture)

Path Management Messages

Path Failure

T3-RESPONSE
ECHO Request

ECHO Request
R
N3-REQUESTS + 1
S-GW
ECHO Request

LTE RAN Protocols and Procedures (eLecture)

Summary of Chapter 4
The students should now be able to:
1. Explain the PDCP functions and services such as header compression and ciphering.
2. Explain the RLC Functions
3. List different modes of RLC (transparent, unacknowledged and acknowledged) and explain the
structure of the PDU involved in these cases
4. Explain the MAC functions such as HARQ, BCH Reception, PCH Reception
5. Explain MAC Architecture, its entities and their usage for the mapping of transport channels
6. List the content of the MAC Packet Data Unit (PDU).
7. Explain the main functions and procedures of the transport protocol GTP-U

LTE RAN Protocols and Procedures (eLecture)

Mobility

LTE RAN Protocols and Procedures (eLecture)

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-210
210

LTE RAN Protocols and Procedures (eLecture)

Objectives of Chapter 5
After this chapter the participants will be able to:
Explain Mobility in LTE
1. Explain the Intra-Frequency Handover (X2 and S1 Handover)
2. Discuss Coverage Triggered Session Continuity
3. Explain Inter-frequency Handover
4. Explain IRAT Handover
5. Describe CS Fallback
6. Discuss Single Radio Voice Call Continuity (SRVCC) Handover to UTRAN/GERAN/CDMA1x
7. Explain VoLTE and WiFi Calling Mobility

)e
8. Describe LTE-NR Interworking

ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-211
211

LTE RAN Protocols and Procedures (eLecture)

Mobility in RRC_Idle mode

The eNodeB broadcasts idle mode information that assists and controls the UE to select PLMN and best
suitable LTE cell.

The UE performs tracking area updates when needed. Otherwise no signaling between the UE and the
Network, except for the IRAT case.

The user context (IP address etc) is maintained by the EPC.

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-212
212

LTE RAN Protocols and Procedures (eLecture)

Mobility in RRC_CONNECTED mode

Intra LTE Intra-frequency Handover

- Intra RBS Handover

- X2 based Inter RBS Handover

- S1 based Inter RBS Handover

Coverage Triggered Session Continuity to

-WCDMA

-GERAN

-CDMA

-different LTE frequency

Coverage triggered Handover

- Inter-frequency (Intra RBS, X2 or S1 HO)

- WCDMA IRAT

)
- Intra-LTE Inter-mode Handover (X2 or S1 HO)

e
ur
CS Fallback to GERAN / UTRAN / 1xRTT CDMA2000

ct
SRVCC Handover to UTRAN/GERAN

LTE RAN Protocols and Procedures (eLecture)

Intra and Inter eNodeB Handover

Intra eNB handover Inter eNB X2 handover Inter eNB S1 handover

D D
IPS
Server
IPS
Server
S R S R
MME SGW MME SGW

R R
PGW/S PGW/S
GW GW

“S1” “S1”
“S1”
“X2”

B
B B
“X2”
B Source B

)
Target

e
ENB Source Target

ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-214
214

LTE RAN Protocols and Procedures (eLecture)

Mobility Schemes – X2 Handover

S R › Simplified mobility scheme to
MME SGW
handle the most common scenario
› Forwarding of user data on X2
interface (Selective Forwarding)
› After handover is completed, EPC is
X2 LTE Node B informed and the route is optimized

X2
LTE Node B

e)
LTE Node B

ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-215
215

LTE RAN Protocols and Procedures (eLecture)

X2 Handover (basic scenario)

R S
S-GW MME
Source eNB Target eNB
RRC 1. RRC CONNECTION RECONFIGURATION
CONNECTED (Bearer Setup,Measurement conf))

2. RRC Measurement Report

(Event A3)
3. HO
Decision
4. X2 HANDOVER REQUEST

5.Admission
TRELOCprep Control
6. X2 HANDOVER REQUEST
ACKNOWLEDGE
8. Start Data
7. X2 SN STATUS TRANSFER
forwarding
T304
10. RRC CONNECTION RECONFIGURATION
9. Buffer
(Handover Command,Measurement conf) Forwarded
Regenerate Data
Security Keys 11 MAC: CFRA Random Access Preamble
12. MAC Random Access Response (UL allocation + TA)
13. RRC CONNECTION RECONFIGURATION COMPLETE
(Handover Complete) 14.Data Transfer in Target
15. S1 PATH SWITCH REQUEST
16. S5 USER PLANE

)
17.Data Transfer in Target UPDATE REQ

e
18. S5 USER PLANE

ur
UPDATE RSPONSE
19. S1 PATH SWITCH RESPONSE

ct
RRC 21. Forward if any 20. X2 UE CONTEXT RELEASE

Le
CONNECTED Data in transition
and release
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-216
216

LTE RAN Protocols and Procedures (eLecture)

X2- Handover Request

IE/Group Name P IE type and reference

Message Type M Handover Request

Old eNB UE X2AP ID M eNB UE X2AP ID Integer (0..4095) Allocated at the source eNB

Cause M e.g Handover Desirable for Radio Reasons

Target Cell ID M ECGI; E-UTRAN Cell Global Identifier (ECGI) is used to globally identify a cell

GUMMEI M Globally unique MME identity

UE Context Information

> MME UE S1AP ID M INTEGER (0..232 -1) MME UE S1AP ID allocated at the MME

> UE Security Capabilities M Encryption and Integrity Algorithms

>AS Security Information M KeNB; NextHop Chaining Count

> UE Aggregate Maximum Bit Rate M UE Aggregate Maximum Bit Rate Uplink/Dl

> Subscriber Profile ID for RAT/Frequency priority O (1..256)

>E-RABs To Be Setup List

>>E-RABs To Be Setup Item <1..maxnoof Bearers> maxnoofBearers = 256

>>> E-RAB ID M This IE uniquely identifies an E-RAB for a UE

>>> E-RAB Level QoS Parameters M QCI;ARP;GBR QoS (Max BitrateUL/DL;Guaranteed itrate UL/DL)

>>> DL Forwarding O indicates that the E-RAB is proposed for forwarding of downlink packets

>>> UL GTP Tunnel Endpoint M Transport Layer Address and GTP TEID;SGW endpoint of the S1 transport bearer. For delivery of UL PDUs

> RRC Context M OCTET STRING; Includes the RRC Handover Preparation Information message

e )
>Handover Restriction List O area roaming or access restrictions for handover

ur
>Location Reporting Information O Event and Report Area

UE History Information M Last Visited Cell List

ct
Trace Activation O E-UTRAN Trace ID; Depth; Ip to report

Le
SRVCC Operation Possible O indicates that both the UE and the MME are SRVCC-capable

LTE RAN Protocols and Procedures (eLecture)

X2 Handover Request Ack

IE/Group Name P Range IE type and reference
Message Type M Handover Request Acknowledge

Old eNB UE X2AP ID M eNB UE X2AP ID; Allocated at the source eNB

New eNB UE X2AP ID M eNB UE X2AP ID Allocated at the target eNB

E-RABs Admitted List 1

> E-RABs Admitted Item 1 to <maxnoof
Bearers>
>> E-RAB ID M

>> UL GTP Tunnel Endpoint O GTP Tunnel Endpoint; Identifies the X2 transport bearer used for forwarding of UL
PDUs

>> DL GTP Tunnel Endpoint O GTP Tunnel Endpoint; Identifies the X2 transport bearer. used for forwarding of DL
PDUs

E-RABs Not Admitted List O E-RAB List

Target eNB To Source eNB Transparent Container M OCTET STRING; Includes the RRC E-UTRA Handover Command message

)
RRC Connection Reconfiguration

e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-218
218

LTE RAN Protocols and Procedures (eLecture)

RRC Container, extract

RRCConnectionReconfiguration message
RRCConnectionReconfiguration-r8-IEs {
measConfig
mobilityControlInfo
radioResourceConfigDedicated
securityConfigHO
MobilityControlInfo ::=
targetPhysCellId
carrierFreq O
carrierBandwidth O
additionalSpectrumEmission O
t304 ENUMERATED { ms50, ms100, ms150, ms200, ms500, ms1000,
ms2000, spare1},
newUE-Identity C-RNTI,
5 MHz
radioResourceConfigCommon
rach-ConfigDedicated ra-PreambleIndex INTEGER (0..63),
ra-PRACH-MaskIndex INTEGER (0..15)

CarrierBandwidthEUTRA ::= SEQUENCE {

dl-Bandwidth ENUMERATED { n6, n15, n25, n50, n75, n100}
ul-Bandwidth ENUMERATED {n6, n15, n25, n50, n75, n100}
CarrierFreqEUTRA ::=
dl-CarrierFreq
ul-CarrierFreq O
SecurityConfigHO ::=handoverType CHOICE {
intraLTE {

)
securityAlgorithmConfig O

e
keyChangeIndicator BOOLEAN,

ur
nextHopChainingCount
},

ct
interRAT {
securityAlgorithmConfig

Le
nas-SecurityParamToEUTRA
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-219
219

LTE RAN Protocols and Procedures (eLecture)

S1 Path Switch Request

IE/Group Name P IE type and reference Semantics description

Message Type M PathSwitchRequest

eNB UE S1AP ID M The eNB UE S1AP ID uniquely identify the UE association
over the S1 interface within the eNB
E-RAB To Be Switched in Downlink List M

>E-RABs Switched in Downlink Item IEs

>> E-RAB ID M This element uniquely identifies a radio access bearer for a
particular UE, which makes the E-RAB ID unique over one
S1 connection. The E-RAB ID shall remain the same for
the duration of the E-RAB even if the UE-associated
logical S1-connection is released or moved using S1
handover.
>> Transport layer address M The Radio Network Layer is not supposed to interpret the
address information. It should pass it to the transport layer
for interpretation.
>> GTP-TEID M To deliver DL PDUs
Source MME UE S1AP ID M The MME UE S1AP ID uniquely identify the UE association
over the S1 interface within the MME.
E-UTRAN CGI M used to globally identify a cell

e)
TAI M uniquely identify a Tracking Area

ur
UE Security Capabilities M Encryption and Integrity Protection Algorithms

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-220
220

LTE RAN Protocols and Procedures (eLecture)

S1 Path Switch Request Acknowledge

IE/Group Name P IE type and reference Semantics
description

Message Type M PathSwitchRequestAck

MME UE S1AP ID M The MME UE S1AP ID uniquely identify the UE association over the S1 interface within the MME.

eNB UE S1AP ID M The eNB UE S1AP ID uniquely identify the UE association over the S1 interface within the eNB

UE Aggregate Maximum Bit Rate O The UE Aggregate Maximum Bitrate is applicable for all Non-GBR bearers per UE which is defined for the
Downlink and the Uplink direction and provided by the MME to the eNB.

E-RAB To Be Switched in Uplink List O

> E-RABs Switched in Uplink Item IEs

>> Transport Layer Address M The Radio Network Layer is not supposed to interpret the address information. It should pass it to the transport layer for
interpretation.

>> GTP-TEID M This information element is the GTP Tunnel Endpoint Identifier to be used for the user plane transport between
eNB and the serving gateway

e )
E-RAB To Be Released List O E-RAB List

ur
Security Context M The purpose of the Security Context IE is to provide security related parameters to the eNB which are used to One pair of {NCC,
derive security keys for user plane traffic and RRC signalling messages and for security parameter generation for NH} is provided

ct
subsequent X2 or intra eNB Handovers, or for the security parameters for the current S1 Handover

LTE RAN Protocols and Procedures (eLecture)

DL Data Forwarding for AM RLC

end marker R
SGW
PDCP SN is continuous
through Handover
X2APNext SN = 7

Transmitter State 6 5 4

6 Source eNB Target eNB

5
Receiver State
4
: Status
6 ACK RLC PDUs 4 & 5
5
4

› Source forwards outstanding un-ACK:ed RLC SDUs to target with their SN.

)
› Source tells Target what PDCP SN to allocate next.

e
› Non-outstanding SDUs are forwarded (in order) without SN

ur
› Target “prioritizes” forwarded SDUs.
› UE re-orders PDCP SDUs based on the SN.

ct
› UE may submit a PDCP Status to guide Target re-Tx

Le
› NO Data forwarding for SRBs; PDCP SN and HFN are reset @ target
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-222
222

LTE RAN Protocols and Procedures (eLecture)

Packet Forwarding for UM RLC

No PDCP SN information is
transferred to the target-eNB D
IPS
Server

*
R
SGW

“S1” “S1”

B
“X2”
B *

e )
Source Target

ur
ct
PDCP SN and HFN are

Le
reset at target-eNB
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-223
223

LTE RAN Protocols and Procedures (eLecture)

Mobility Schemes – S1 Handover

› S1 handover:
– Relocation of MME or SGW
– Handover to UTRAN or GSM
S R S R – Change of MME pool area
MME SGW
MME SGW › Signalling is done via EPC and
does not assume the existance of
an X2 interface.
› Similar to inter-RAT handover
› Forwarding of user data either
directly between eNodeB or in-
direct via S-GW (Selective
Forwarding)

e)
LTE NodeB

ur
LTE NodeB

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-224
224

LTE RAN Protocols and Procedures (eLecture)

S1 Handover
R R S S
SGW SGW MME MME
Source
SourceeNB
eNB Target eNB Source
Sourc
Soure Targe Source
Sourc Targe
1. RRC CONNECTION RECONFIGURATION
RRC
(Bearer Setup,Measurement conf)) t t
CONNECTED

2. RRC Measurement Report

(Event A3)
3. HO
Decision
4. S1 HANDOVER REQIRED
(Source to Target Transparent Container ) 5. S10 FORWARD RELOCATION
REQUEST
TS1RELOCprep
6. S11 CREATE SESSION REQ/RES
7. S1 HANDOVER REQUEST

8. Admission
Control 9. S1 HANDOVER REQUEST ACKNOWLEDGE
10. S10 FORWARD RELOCATION
11. S11 CREATE BEARER REQ/RES RESPONSE
UP Forwarding
12. S1 HANDOVER COMMAND
13. RRC CONNECTION RECONFIGURATION
T30 (Handover Command,Measurement conf)
4 14 MAC: CFRA Random Access Preamble
15. MAC Random Access Response (UL allocation + TA)
Regenerate
Security Keys 16. RRC CONNECTION RECONFIGURATION COMPLETE

)
(Handover Confirm) 17. S1 HANDOVER NOTIFY

e
ur
18.Data Transfer in Target

ct
19. S10 FORWARD RELOCATION
RRC 20. S1 UE CONTEXT RELEASE COMMAND COMPLETE/ ACK

Le
CONNECTED (Cause: Successful Handover)
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-225
225

LTE RAN Protocols and Procedures (eLecture)

Packet Forwarding at S1 Handover

D
IPS
Serve
r

R
PGW

R R
Sour Targe
ceSG t
SGW
W
“S1”
“S1”

B
“X2”
B

)
Sourc Targ

e
e et

ur
Source TS 23.401

ct
TS 36.300

LTE RAN Protocols and Procedures (eLecture)

Direct and Indirect Packet Forwarding

Support for direct and indirect packet forwarding during Intra-LTE S1 handover.

R R
S-SGW T-SGW
Indirect

Direct
IP

)e
ur
S-eNB T-eNB

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-227
227

LTE RAN Protocols and Procedures (eLecture)

Limitations and Dependencies

Limitations
No support for UL packet forwarding.
Packet forwarding is currently only supported for intra LTE handovers, not supported for IRAT handover.
Indirect forwarding is not currently supported by the Ericsson MME.

Dependencies
Support needed in MME and SGW for indirect forwarding
SGW needs support for IPv4 – IPv6 transition during S1 HO.

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-228
228

LTE RAN Protocols and Procedures (eLecture)

Source eNB Overview

D
No PDCP SN information is IPS
Server
transferred to the target-eNB

R
PGW

R R
Source Target
SGW SGW

“S1”
“S1”

“X2”
B B
Source Target

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-229
229

LTE RAN Protocols and Procedures (eLecture)

Target eNB Overview

D
IPS
Server

R
PGW

R R
Source Target
SGW SGW

“S1”
“S1”

“X2”
B B

)
Source Target

e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-230
230

LTE RAN Protocols and Procedures (eLecture)

E-UTRA/EPC states and inter RAT mobility procedures

between 3GPP system
PMM_CONNECTED ECM - CONNECTED
Handover
GSM_Connected
CELL_DCH E-UTRA Handover
RRC_CONNECTED
GPRS Packet
transfer mode
CELL_FACH
Release
with Redirect CCO with
CCO,
CELL_PCH NACC
Reselection
URA_PCH
Connection Connection
Connection establishment/release establishment/release
establishment/release Reselection
Reselection
Reselection E-UTRA GSM_Idle/
UTRA_Idle
RRC Idle CCO, Reselection +
GPRS Idle
Reselection +
PMM_IDLE ECM -IDLE PDP context est*
PDP context est*

e )
ur
Cell change Cell change
without signaling without signaling
PMM_DETACHED

ct
EMM-DEREGISTERED Idle

Le
* PDP Context establishment is needed if no PDP context exists
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-231
231

LTE RAN Protocols and Procedures (eLecture)

E-UTRA/5GC states and inter RAT mobility procedures

between 3GPP system
GSM_CONNECTED
CELL_DCH EUTRA/5GC
RRC_CONNECTED GPRS Packet Tranfer
Mode
CELL_FACH Connection
Resume/Suspend
CCO
Connection
CELL_PCH EUTRA Establishment/
URA_PCH RRC_INACTIVE Released

Reselection
Connection Connection
Connection Reselection Release Establishment/
Establishment/ Released
Released Reselection

)e
GSM_Idle/GPRS

ur
EUTRA
UTRAN_IDLE Packet_Idle

ct
RRC_IDLE

LTE RAN Protocols and Procedures (eLecture)

Mobility procedures between E-UTRA/5GC and

EUTRA/EPC
EUTRA/5GC EUTRA/EPC
Handover
RRC_CONNECTED RRC_CONNECTED

Connection
Resume/Suspend

Connection
EUTRA Establishment/
Released
RRC_INACTIVE
Connection
Establishment/ Connection Reselection
Released Release

e )
ur
EUTRA EUTRA
Reselection

ct
RRC_IDLE RRC_IDLE

LTE RAN Protocols and Procedures (eLecture)

Mobility procedures supported between NR/NGC and

E-UTRAN/EPC

Only supported with 5GC

)e
ur
ct
TS 38.331 – 4.2.1

Le
TS 36.300 – 7.2
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-234
234

LTE RAN Protocols and Procedures (eLecture)

What is Dual Connectivity for 5G Capable handsets?

SCG PSCell [Carrier 3]

SCG
Secondary SN
Cell SCG Scell [Carrier 4] (gNB)
Group

MN MCG
(eNB) Master
MCG SCell [Carrier 2] Cell
MCG PCell [Carrier 1] Group
MN: Master Node

)
SN: Secondary Node

e
PCell: Primary Cell

ur
SCell: Secondary Cell

ct
PSCell: Primary Secondary Cell Dual connectivity first introduced for LTE in 3GPP rel12/13.
SpCell: Primary cell of a master or secondary cell group

Le
3GPP TS 37.340 – 3; 4
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-235
235

LTE RAN Protocols and Procedures (eLecture)

LTE to 3G Cell-reselection
R
PSN-GW
PDN -GW
6
1a. Routing Area Update Request
7
R 1b. Routing Area Update Request
2. Context Request
SGW 3. Context Response
4. Context Acknowledge
8 5. Update Bearer Request

R 2 4
S 6. Update Bearer Request
7. Update Bearer Response
SGSN MME 8. Update Bearer Response
9. Routing Area Update Accept
1b 3
10. Routing Area Update Complete

S
RNC

)
10

e
ur
9

ct
1a

LTE RAN Protocols and Procedures (eLecture)

Coverage triggered mobility Session continuity

Blind release
with redirect (to
one of the candidate freq)
Only if QCI≠/1
FALSE
Release with
redirect (to freq
ueMeasurementActive=? reported by A5/B2)
a5B2MobilityTimer
Bad Coverage NO Event
RBS determines a REDIRECT
Event A2 set of candidate A3orA5/B2
frequencies Is there an IF/ WCDMA/ Serving worse than
TRUE
Serving cell IRAT/ Inter mode cell that threshold1 AND f2 mobilityAction
worse than fully covers the source cell? / IRAT/ inter mode =?
threshold neighbor better
Event A1 than threshold2 HANDOVER
Good coverage EUtranCellRelationTDD
detected (E)UtranCellRelation
YES externalUtranCellFDD
lac≠0 and lac≠-1

)
isHoAllowed=true

e
IF/IRAT/Inter mode HO

ur
covTriggeredBlindHoAllowed=true
mobilityAction=HANDOVER Handover

ct
coverageIndicator=covers Blind

Le
isHoAllowed=true

Mobility || LZU1084329 R2A || Page
Figure 5-237
IF/IRAT/Inter mode HO
PA1 | 2023-10-17 Ericsson Internal 237

LTE RAN Protocols and Procedures (eLecture)

Coverage triggered session continuity to WCDMA

S S
MME MME

RRC Connection Reconfiguration

RRC Connection Reconfiguration (Measurement conf)
(Measurement conf)
RRC Measurement Report (Event
RRC Measurement Report A2)
(Event A2)
Parameter
Parameter
ueMeasurementsActive
ueMeasurementsActive
= True
= False

RRC Connection Release RRC Connection Reconfiguration

UE Context Release (Measurement conf – event B2)
(redirection information) Request
RRC Measurement Report (Event B2)
UE Context Release
Command RRC Connection Release UE Context Release
UE context Release (redirection information) Request
complete UE Context Release

S R
Com mand

S UE context Release

e )
RNC complete
R
SGSN

ur
RNC
RRC CONNECTIONESTABLISHMENT RRC
SGSN

ct
CONNECTIONESTABLISHMENT
ROUTING AREA UPDATE & SERVICE REQUEST

Le
ROUTING AREA UPDATE & SERVICE REQUEST
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-238
238

LTE RAN Protocols and Procedures (eLecture)

LTE to 3G Handover – preparation phase

Source Target Source Target Source Target PDN
UE eNB RNC MME SGSN SGW SGW GW

1. Measurement Report

2. HandoverRequired 3. Forward Relocation Request

4. Create Session Request

4a. Create Session Response

5. RelocationRequest
5a. Relocation Request Acknowledge
6. Create Indirect Data Forwarding Tunnel Request

6a. Create Indirect Data Forwarding Tunnel Response

7. Forward Relocation Response

8. Create Indirect Data Forwarding Tunnel Request

8a. Create Indirect Data Forwarding Tunnel Response

e )
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-239
239

LTE RAN Protocols and Procedures (eLecture)

LTE to 3G Handover – execution phase

Source Target
Source MME Target SGSN Source SGW Target SGW PDN GW
UE eNB RNC

1. Handover Command
2. HO from EUTRAN Command

4a. Handover to UTRAN Complete

5. Relocation Complete

6. Forward Relocation Complete Notification

6a. Forward Relocation Complete Acknowledge

7. Modify Bearer Request

8. Modify Bearer Request

9. Modify Bearer Response 8a.Modify Bearer Response

10. Routing Area Update procedure

11. Delete Session Request

11b. Release Resources

11a. Delete Session Response

12. Delete Indirect Data Forwarding Tunnel Request

12a. Delete Indirect Data Forwarding Tunnel Response

e )
13. Delete Indirect Data Forwarding Tunnel Request

ur
13a. Delete Indirect Data Forwarding Tunnel Response

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-240
240

LTE RAN Protocols and Procedures (eLecture)

Coverage triggered Inter-Frequency blind handover

S
MME
Source eNB
Source eNB Target eNB
Target eNB

RRC MEASUREMENT REPORT

(Event A2)
F2 LTE cell fully
covers f1 LTE cell

HANDOVER REQUEST
(HO PREPARATION INFORMATION)

HANDOVER REQUEST ACKNOWLEDGE

(Handover Command)
RRC CONNECTION RECONFIGURATION
(Handover Command)
SN STATUS TRANSFER

MAC: CFRA Random Access Preamble

MAC Random Access Response (UL allocation + TA)

RRC CONNECTION RECONFIGURATION COMPLETE

)
PATH SWITCH REQUEST

e
ur
PATH SWITCH ACKNOWLEDGE
UE CONTEXT RELEASE COMMAND

ct
Le
UE CONTEXT RELEASE COMPLETE
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-241
241

LTE RAN Protocols and Procedures (eLecture)

Coverage triggered Inter-Frequency handover (event A5)

S
MME
RRC MEASUREMENT REPORT Source eNB Target eNB
(Event A2)
RRC CONNECTION RECONFIGURATION
(Measurement configuration – event A5)
Timer started –
expect eA5
RRC MEASUREMENT REPORT
(Event A5)
Measurement Report received, or
Timer expired

HANDOVER REQUEST
(HO PREPARATION INFORMATION)

HANDOVER REQUEST ACKNOWLEDGE

(Handover Command)
RRC CONNECTION RECONFIGURATION
(Handover Command)
SN STATUS TRANSFER

MAC: CFRA Random Access Preamble

e )
MAC Random Access Response (UL allocation + TA)

ur
RRC CONNECTION RECONFIGURATION COMPLETE
PATH SWITCH REQUEST

ct
Le
UE CONTEXT RELEASE COMMAND PATH SWITCH ACKNOWLEDGE
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-242
242

(e
ur 3 UE CONTEXT RELEASE COMPLETE
ed 02
es
oc 2
Pr ces
nd rvi
s a Se
ol g
oc in
ot rn
Pr ea
RA so y
E ics op
N nL
LT Er ot c
© n
Do

LTE RAN Protocols and Procedures (eLecture)

Intra-LTE Inter-Mode X2 Handover

S
Source eNB MME
Target eNB
Measurement Report (event A5)

Handover Request
Handover Request Acknowledge
(HO command)

RRC Connection Reconfiguration

( HO command )
SN Status Transfer

MAC: CFRA Random Access Preamble

MAC Random Access Response (UL allocation + TA)
RRC Connection Reconfiguration Complete
(HO complete) Path Switch Request

Path Switch Request Acknowledge

UE context Release

)e
RRC Connection Reconfiguration

ur
( measurement configuration )

ct
RRC Connection Reconfiguration Complete

LTE RAN Protocols and Procedures (eLecture)

Intra-LTE Inter-Mode S1 Handover

S R R
MME SGW SGW
Source eNB Target eNB Source Target
Measurement Report
(event A5) Handover Required
Create Session Request

Create Session Response

Handover Request
Handover Request Acknowledge

Handover Command
RRC Connection Reconfiguration
(HO Command)
eNB Status Transfer
MME Status Transfer
MAC: CFRA Random Access Preamble
MAC Random Access Response (UL allocation + TA)
RRC Connection Reconfiguration Complete
(HO Complete) Handover Notify
RRC Connection Reconfiguration

)
( measurement configuration )

e
RRC Connection Reconfiguration Complete

ur
UE Context Release Command

ct
Delete Session Request
UE Context Release Complete

Le
Delete Session Response
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-244
244

LTE RAN Protocols and Procedures (eLecture)

Non-Planned PCI Range Introduction

• List of ‘non-planned PCIs’ can be defined per EUTRAN
HeNBfrequency

• UE must report CGI and

handover is performed PCI x
HeNB
over S1

PCI x
• HeNBs can be
HeNB
deployed with the
same PCI
PCI x

HeNB

) e
ur
ct
PCI x

LTE RAN Protocols and Procedures (eLecture)

Non-Planned PCI Range Handover Message flow

S HeNB GW
Target
HeNB
MME
1. Configuration for Non-planned
PCI Range feature
2. Measurement Configuration for mobility ( Configure cellIndividualOffset for all Non-
(Intra-Freq: A3, Inter-freq: A3/A5) planned PCI)
Measurement
& evaluation
3. Measurement Reports for
mobility (A3/A5)
4. Check if the reported PCI is
within Non-planned PCI range
5. Measurement Configuration for CGI
reading (including DRX reconfigure)
6. Acquisition Broadcast System Information
Of CGI Information
7. Measurement Report including CGI Information
8. DRX reconfigure back to previous
9. Trigger S1 Handover
without neighbor relation
10. HANDOVER REQUIRED

)
(Target eNB-ID: Home eNB ID or

e
Macro eNB ID) 11. HANDOVER REQUEST

ur
13. HANDOVER 12. HANDOVER REQUEST ACK.
14. RRC Connection Reconfiguration

ct
COMMAND

LTE RAN Protocols and Procedures (eLecture)

CS Fallback
WHY?
Voice services needed but:
›IMS is not used as voice engine in the cell
›UEs not supporting VoLTE

Fallback triggered to overlapping CS domain (2G/3G or CDMA

2000)
LTE island

PS
PS

LTE
LTE
LTE LTE
LTE
LTE

)
LTE

e
CS (+PS) LTE LTE

ur
GERAN/UTRAN or CDMA 2000

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-247
247

LTE RAN Protocols and Procedures (eLecture)

CS Fallback flavors
CS Fallback to GERAN and UTRAN
PSHO-Based CS Fallback to UTRAN
Measurement-Based CSFB Target Selection (GERAN & UTRAN)
CS Fallback for Dual-Radio UEs (CDMA 2000)
CS Fallback to CDMA 2000
Enhanced CS Fallback to CDMA 1X
Emergency Call Handling for CS Fallback

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-248
248

LTE RAN Protocols and Procedures (eLecture)

UE Mode of Operation
CS/PS Mode1: PS Mode1:
Voice Centric
UE registers to EPS UE registers only to EPS
services and non EPS services
Services CS/PS and UE usage is voice
UE usage is voice centric PS Mode 1
Mode 1 centric

Voice Centric

CS fallback capable UE: A UE that uses a CS Fallback

CS infrastructure for a voice call and
other CS-domain services by falling back
to A/Gb or Iu mode if the UE is served by
E-UTRAN when a CS service is requested.
Data Centric

1x CS fallback capable UE: A UE that uses a

CS infrastructure for a voice call and other
CS-domain services by falling back to
CS/PS
cdma2000® 1x access network Mode 2 PS Mode 2
if the UE is served by E-UTRAN
CS/PS Mode2:

)
when a CS service is requested.

e
UE registers to EPS PS Mode:

ur
services and non EPS UE registers
Data Centric only to EPS
Services

ct
services
UE usage is data centric UE usage is data centric

LTE RAN Protocols and Procedures (eLecture)

Attach Procedure to GERAN/ UTRAN before CS Fallback

S S D
MSS
MME HSS
Server

RRC Connection Set up Procedure

RRC CONNECTION SETUP COMPLETE

(Attach Request)

EPS attach type IE:

001 EPS attach
010 combined EPS/IMSI attach
110 EPS emergency attach
111 reserved

Attach Procedure according to 23.401

Derive VLR number;

Allocate default LAI
LOCATION UPDATE REQ

)
Update Location in CS domain

e
ur
LOCATION UPDATE ACCEPT

ct
Attach Procedure according to 23.401

LTE RAN Protocols and Procedures (eLecture)

CS Fallback – Mobile Terminated Call

2. CS domain updated of subscribers
whereabouts through CS signaling
over MME-MSC (LUP, SMS etc.)

1. Subscriber registered in
MSC but roam in LTE
CS signaling
Packet Core

LTE RAN S R
MME SGW

4. Page over SGs-

CSFB SGSN GGSN
interface
Terminal
MSS
GSM / WCDMA RAN
F
RC

5. UE is informed
CSFB M-MGw MSC-S Wireline

and RAN triggers a Terminal IM-MGw MGCF

MRFP
release with

)
redirect 3. Incoming call to

e
payload
subscriber in LTE

ur
6. Page response

ct
and call setup over
2G/3G radio

LTE RAN Protocols and Procedures (eLecture)

CS Fallback - Mobile Terminated Call (UE Active)

S S S R R
RNC/BSS MME MSC S/P-GW SGSN

1A. NAS CS Service Notification 1A. Paging Request

1A. Service Request

1b. NAS Extended Service Request
1c. CS Paging Reject
1d. UE Context Modification Request (CS fallback indicator)
1e. UE Context Modification Response
2. Optional Measurement Report Measurement-Based CSFB
Target Selection feature
3. RRC Connection Release (with Redirect)
4. UE Context Release Request
5. S1 UE Context Release & 6. UE changes RAT
7a.Suspend (see 23.060)
7b. Suspend Request / Response
8 Update Bearers

)
9. Paging Response

e
ur
9a. Establish CS Connection
9b. Signalling Connection Release 9b. Connection Reject If the MSC is

ct
changed

Le
9c. Location Area Update or Combined RA/LA Update
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-252
252

LTE RAN Protocols and Procedures (eLecture)

CS Fallback - Mobile Terminated Call (UE idle)

S S S R R
RNC/BSS MME MSC S/P-GW SGSN

1c.Paging 1b. Paging 1a. Paging Request

1d. NAS Extended Service Request

1e. Service Request
1f. Initial UE context Setup
1g. Initial UE context Setup Response

2. Optional Measurement Report Measurement-Based CSFB

Target Selection feature
3. RRC Connection Release (with Redirect)
4. UE Context Release Request
5. S1 UE Context Release & 6. UE changes RAT
7a.Suspend (see 23.060)
7b. Suspend Request / Response
8 Update Bearers

)
9. Paging Response

e
ur
9a. Establish CS Connection
9b. Signalling Connection Release 9b. Connection Reject If the MSC is

ct
changed

Le
9c. Location Area Update or Combined RA/LA Update
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-253
253

LTE RAN Protocols and Procedures (eLecture)

CS Fallback – Mobile Originated Call

S S S R R
RNC/BSS MME MSC S/P-GW SGSN

1a. Extended Service Request

1b. S1AP UE Context Modification Request message with CS Fallback Indicator
1c. S1AP UE Context Modification
e Response
2. Measurement Report Solicitation Measurement-Based CSFB
3. RRC Connection Release (with Redirect)
Target Selection feature
4. S1-AP: S1 UE Context Release Request

5. S1 UE Context Release

6.UE changes RAT then LA Update or Combined RA/LA Update or LAU and RA
7a. Suspend (see 23.060)
7b. Suspend Request / Response
8. Update bearer(s)
9. CM Service Request 9. A/Iu-cs message (with CM Service Request
)

10a. Service Reject

If the MSC

)
10b. Location Area Update is changed

e
ur
10c. CS MO call

ct
Le
11. Routing Area Update or Combined RA/LA Update
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-254
254

LTE RAN Protocols and Procedures (eLecture)

PSHO-Based CS Fallback to UTRAN – MO Call

MSC SGSN Serving PGW/
UE/MS eNodeB BSS/RNS MME
GW GGSN
1a. Extended Service Request
1b. S1-AP Request message with CS Fallback indicator

2. Optional Measurement Report

3a. PS HO (preparation phase and start of execution phase)

3b. Suspend
3c. Update Bearer(s)

4a. Location Area Update

4b. CM Service Request

4b. A/Iu-cs message (with CM Service
Request)
5. CM Service Reject 5. CM Service Reject
If the MSC
is changed
Location Area Update or Combined RA/LA Update

e )
6. CS call establishment procedure

ur
ct
7. PS HO (continuation of execution phase)

LTE RAN Protocols and Procedures (eLecture)

PSHO-Based CS Fallback to UTRAN – MT Call

UE/MS eNodeB BSS/RNS MME MSC SGSN SGW
1a. Paging Request
1a. CS Paging Notification
1a. Service Request
1b. NAS Extended Service Request
1c. CS Paging Reject
1d. S1-AP UE Context Modification Request with CS Fallback indicator

2. Optional Measurement Report Solicitation

3 PS HO (preparation phase and start of execution phase)

4b. Paging Response

4b. A/Iu-cs message (with Paging Response)

5b. Signalling Connection Release 5b. Connection Reject

If the MSC
Location Area Update or Combined RA/LA Update is changed

)
6. CS call establishment procedure

e
ur
7. PS HO (continuation of execution phase)

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-256
256

LTE RAN Protocols and Procedures (eLecture)

1x RTT CS Pre-Registration over EPS Procedure

S S S
MME IWS1xCS 1xRTT/
MSC

1. UE attaches to E-UTRAN
2. Decision to register
in 1xRTT CS

3. Service Request procedure if the UE is in idle state

4. 1xRTT CS registration request

4a. UL Inf Transfer 4b. S1 CDMA2000 4c. S102 Direct Transfer
Tunneling

5. Location update to
1x RTT CS Domain

)
6. 1xRTT CS registration response

e
6c. DL Inf Transfer 6b. S1 CDMA2000

ur
6a. S102 Direct Transfer
Tunneling

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-257
257

LTE RAN Protocols and Procedures (eLecture)

CS MO Call Using Fallback to CDMA 1x RTT Network

S S S R
MME IWS1xCS 1xRTT/ S/P-GW
MSC

1 UE is E-UTRAN attached and registered with 1xRTT

2 Decision to make a
MO Call in 1xRTT CS

3. Extended Service Request

4. S1 UE Context Modification

5. S1 UE Context Modification Resp

6. E-UTRAN triggers
RRC connection Release with redirection

7. S1 UE Context Release
8. Suspend notification

)
9. Suspend Acknowledge

e
ur
10. S1 UE Context Release

ct
11. 1x RTT MO call establishment

LTE RAN Protocols and Procedures (eLecture)

Enhanced CSFB to CDMA2000 1xRTT during MO Call

S S S R
IWS1xCS 1xRTT/ S/P-
MME MSC
GW

1 UE is E-UTRAN attached and registered with 1xRTT

2 Decision to make a
MO Call in 1xRTT CS

3. Extended Service Request

4. UE Context Modification/Setup Request
5. UE Context Modification/Setup Response
6. RRC Con Reconfiguration(events B1,B2, cells and carrier frequencies)

7. Measurement Report (event B1orB2)

8.HOfromEUTRAPreparationReq
9. HOPreparationTransfer
10. UL S1 CDMA Tunneling
S102 Direct transfer and 1xMSC
interworking

) e
11. DL S1 CDMA Tunneling

ur
12. MobilityfromEUTRACommand

ct
13. S1 UE Context Release

Le
14. 1x RTT MO call establishment
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-259
259

LTE RAN Protocols and Procedures (eLecture)

SRVCC (Single Radio Voice Call Continuity) Handover

Circuit
GSM
GSM switched
CORE
IMS/MMTEl
3G
Telephony
HSPA
WCDMA
Packet
Core

LTE
LTE
INTERNET

*QCI=1

)
SRVCC handover

e
LTE

ur
ct
CS coverage

LTE RAN Protocols and Procedures (eLecture)

SRVCC Example case

3b. The MSS set up a call leg to
the SCC AS
S s
g
Um / Uu BSC SCC
MSS
RNC AS
S
MGCF

GSM / WCDMA 4. The SCC AS finds

MMTel the anchored call
and executes
Sv
3a. The MSS and RAN session transfer
prepares to receive a
handover

S S
5. The UE tunes
MME CSCF
in to GSM or
WCDMA

1. UE sends Measurement
Report. The eNodeB
decides if SRVCC HO is R
required S&P-

)
GW

e
LTE
2. The MME handles

ur
the SRVCC HO Signaling
via the Sv

ct
Voice media
interface

Le
CSCF: Call Session Control Function

Mobility || LZU1084329 R2A || Page
Figure 5-261
MMTel: MultiMedia Telephony
PA1 | 2023-10-17 Ericsson Internal 261

LTE RAN Protocols and Procedures (eLecture)

IRAT SRVCC HO FROM LTE/ EPC PERSPECTIVE

Ue eNB RNC MME MSC MSS IMS
Voice
Measurement
Report PS to CS Req
Handover Required
(A2 or B2)
(SRVCC HO Indication)

HO from
Preparation of target RAT
EUTRAN Handover Command
Command
IMS Service Continuity

GERAN/UTRAN Access Procedures L1/L2 interruption

Handover to UTRAN of 100-200 ms
complete

e )
Relocation Complete

ur
ct
Voice

LTE RAN Protocols and Procedures (eLecture)

Signaling Overview
UE
B
S o u rc e
S
S o u rc e
S
M S C S e rv e r/
S
T a rg e t
S
T a rg e t
S
T a rg e t
R
S G W /P G W
R
IM S
E - USource
TRAN Source
MME MMSC
GW Target
MSC Target
SGSN RTarget
N S /B S S SGW/ IMS
MME Server/MGW MSC RNC/BSS
ENB
1 . M e a s u re m e n t re p o rts SGSN PGW
D e c is io n fo r H O
2 . H a n d o v e r R e q u ir e d

B e a r e r S p li t t in g
3 a . P S to C S R e q
3 b . P re p H O
Req 3 c . R e lo c /H O R e q
4 a . F o r w a r d R e lo c R e q
4 b . R e lo c /H O R e q

5 a . R e lo c /H O R e q A c k
5 b . F o r w a r d R e lo c R e s p

6 a . R e lo c /H O R e q A c k
6 b . P re p H O R e s p

6 c . E s t a b li s h c i r c u i t
7 . I n i t i a t i o n o f S e s s io n T r a n s f e r ( S T N - S R o r E - S T N - S R )
8 . P S to C S R e s p
S e s s io n t r a n s f e r a n d
9. H andover C om m and u p d a t e r e m o te le g

1 0 . H O fro m E U T R A N c o m m a n d
R e le a s e o f IM S a c c e s s
U E tu n e s to le g
U T R A N /G E R A N
1 1 . H O D e te c tio n

1 2 a . R e lo c / H O C o m p le t e
1 2 b . S E S ( H O C o m p le t e )

12c. A N S W E R

1 2 d . P S to C S C o m p le te /A c k

1 2 e . U p d a te L o c

)
HSS/

e
HLR
1 3 a . R e lo c / H O C o m p le t e

ur
1 3 b . F o r w a r d R e l o c C o m p le t e / A c k
1 3 e . R e le a s e R e s o u r c e s 1 3 d . D e le te S e s s io n
1 3 c . U p d a te b e a re r
From 23.216

ct
1 4 . S u b s c r ib e r L o c a t io n R e p o r t
G M LC (SRVCC stage 2)

LTE RAN Protocols and Procedures (eLecture)

VoLTE and Wi-Fi Calling SCC AS

- TADS Wi-Fi
enhancement
EPC IMS - ICS
ePDG MTAS
- Untrusted

B S
- Rf/Ro

-
Wi-Fi
Access S2b S1-C
s S S - Suppl.
Services
S6a
PGW
ENB MME
d MTAS/ EMe
Lawful intercept
Emergency call
- IRAT HSS SCC AS Charging
(access/location)
AAA Cx ISC Roaming
- Authentication
S11
Gx
s Mw/
Mg/
Restriction
EME
LTE
Ut
d Mx - SMS over IP

S1-U

R
PCRF
Rx s
S
Gm Mw CSCF
SGW/PGW
Mb
g
SGC/BGF
Wi-Fi calling SGi
enabled S2b SWx Mb
smartphone
IPWorks
H Internet
R S6b

)
IPWorks

e
SWu
Wi-Fi S
S S

ur
Wi-Fi AP ePDG SWm
AAA

ct
DNS ENUM

LTE RAN Protocols and Procedures (eLecture)

VoLTE – Wi-Fi Mobility

Cellular Coverage

S S
EPC IMS &
VoLTE

Secure tunnel SIM authentication

and mobility

H
Home
R
Any ISP
WLAN

e )
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-265
265

LTE RAN Protocols and Procedures (eLecture)

Wi-Fi to LTE Handover (1/3)

H S S R R s
d
s
d
Untrusted ePDG MME SGW PGW
HSS/ PCRF
WLAN
AAA

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-266
266

LTE RAN Protocols and Procedures (eLecture)

Wi-Fi to LTE Handover (2/3)

H S S R R s s
Untrusted ePDG MME SGW PGW d d
WLAN HSS/ PCRF
AAA

e )
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-267
267

LTE RAN Protocols and Procedures (eLecture)

Wi-Fi to LTE Handover (3/3)

H S
ePDG
S
MME
R
SGW
R s
d
s
d
Untrusted PGW
WLAN HSS/AAA PCRF

s
d
P-CSCF

e )
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-268
268

LTE RAN Protocols and Procedures (eLecture)

LTE to Wi-Fi Handover (1/2)

H S R R s s
Untrusted ePDG SGW PGW d d
WLAN HSS/AAA
PCRF

e)
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-269
269

LTE RAN Protocols and Procedures (eLecture)

LTE to Wi-Fi Handover (2/2)

H S
ePDG
R
SGW
R
PGW
s
d
s
d
Untrusted
HSS/AAA
WLAN PCRF

s
d
P-CSCF

e)
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-270
270

LTE RAN Protocols and Procedures (eLecture)

LTE-NR Interworking

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-271
271

LTE RAN Protocols and Procedures (eLecture)

NR SA ↔ LTE Interworking

Good NR Poor NR
NR SA Coverage Coverage
cellReselectionPriority = 7

Release with Release with

Push UEs to NR UEs Fall Back to
Redirect/Handover Redirect/Handover to LTE
in Idle Mode LTE in Idle Mode
to NR in Connected Mode in Connected Mode

LTE
cellReselectionPriority = 6

Pathloss

e )
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-272
272

LTE RAN Protocols and Procedures (eLecture)

NR SA ↔ LTE LTE Cell NR Cell

Interworking Increasing
Lower Priority Higher Priority

RSRP Green = Idle Mode Reselection

or SS_RSRP Blue = RWR (good coverage)
Red = RWR (poor coverage)

Release with
Redirect to NR

Reselect to NR
(higher priority)

(eNB)ReportConfigB1NR.b1ThresholdRsrp
(eNB)GUtranFreqRelation.threshXHigh

Reselect to LTE (gNB)NRCellCU.sNonIntraSearchP

(gNB)EUtranFreqRelation.threshXLo (lower priority) (gNB)NRCellCU.threshServingLowP
wP

)
(gNb)NRCellDU.qRxLevMin

e
(eNB)EUtranCellFDD.qRxLevMin (gNB)ReportConfigA2.thresholdRsrp

ur
Release with

ct
redirect to LTE

LTE RAN Protocols and Procedures (eLecture)

Release-With-Redirect from LTE to NR SA

• Moves UEs from LTE to SA in connected mode

• Triggered at:
• Initial connection setup NR SA
Good NR
Coverage
• Incoming handover
• Connection reestablishment Release with Redirect
to NR in Connected Mode

• Event B1 used to find suitable NR coverage LTE

• Three ways to set up B1:

• Measure forever Pathloss
• Measure once then stop

e )
• Measure periodically

ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-274
274

LTE RAN Protocols and Procedures (eLecture)

Measurement Sequence for RwR to NR SA

- LTE configuration
Measure forever
RRC Connection Setup

Wait Measure …
time
waitForStartNRMeas nrB1MobilityTimerLessTtt = -1 (measure forever)

Measure once then stop

RRC Connection Setup

Wait Measure Wait …

time
waitForStartNRMeas waitForResumeNRMeas = -1 (wait forever)
nrB1MobilityTimerLessTtt +
ReportConfigB1NR.timeToTriggerB1

Measure periodically
RRC Connection Setup

Wait Measure Wait Measure Wait …

)
e
time

ur
waitForStartNRMeas waitForResumeNRMeas waitForResumeNRMeas
nrB1MobilityTimerLessTtt + nrB1MobilityTimerLessTtt +

ct
ReportConfigB1NR.timeToTriggerB1 ReportConfigB1NR.timeToTriggerB1

LTE RAN Protocols and Procedures (eLecture)

Outgoing NR IRAT Handover

• The feature extends the NR Coverage-

Triggered NR Session Continuity feature.

• The feature reuses measurements inititated

by the NR Coverage-Triggered NR Session
Continuity feature.

• RwR is triggered only if handover cannot be

performed.

)e
ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-276
276

LTE RAN Protocols and Procedures (eLecture)

IRAT Handover from NR to EUTRAN

AMF MME
N26

gNB eNB

RRC: MeasurementReport(B2)
NGAP: HANDOVER REQUIRED Relocation Request
S1AP: HANDOVER REQUEST

S1AP: HANDOVER REQUEST

Relocation Response ACKNOWLEDGE
NGAP: HANDOVER COMMAND

RRC: MobilityFromNRCommand
Random Access

RRC: RCConnectionReconfigurationComplete

Relocation Complete Notification S1AP: HANDOVER NOTIFY

NGAP:

)
UE CONTEXT RELEASE COMMAND

e
ur
Relocation Complete Ack

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-277
277

LTE RAN Protocols and Procedures (eLecture)

Serving Becomes Worse than Threshold 1 and IRAT

Neighbor Becomes Better than Threshold 2 (Event B2)

)e
Trigger when Serving cell < threshold1 – hysteresis and IRAT neighbor cell > threshold2 + hysteresis for Time to trigger

ur
Eg. threshold1 = -108 dBm, threshold2 = -105 dBm hysteresis = 1 dB, TimeToTrigger = 640 ms

ct
B2 event sent when serving cell RSRP is worse than -109 dBm and the neighbor cell is better than -104 dBm for 640 msec

LTE RAN Protocols and Procedures (eLecture)

RwR to LTE – Bad coverage

When the coverage of the NR cell falls below the defined
threshold the UE will send an A2 measurement report.
When the event is triggered, the UE sends a report to the
gNodeB, which releases the UE and redirects it to the AMF
selected LTE frequency. gNB

When selecting the LTE frequency, the frequencies are Measurement Configuration (Cell A)
ranked by: RRC: RRC Reconfiguration (Measurement Configuration)

EUtranFreqRelation.connectedModeMobilityPrio. RRC: RRC Reconfiguration Complete

RRC Measurement Report (event A2)

The LTE frequency with highest priority, that is supported
by the UE, is selected. If more than one frequency has the
highest priority, then the lowest frequency is selected. A Trigger RwR due to bad coverage
frequency cannot be selected if connectedModeMobilityPrio
is set to empty. RRC Release (redirectedCarrierInfo)

RwR to LTE due to NGAP: UE Context Release Request

critical coverage NGAP: UE Context Release Command

e )
ur
NGAP: UE Context Release Complete
CPI (NR RAN )

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-279
279

LTE RAN Protocols and Procedures (eLecture)

Serving Cell Becomes worse than Threshold

(Event A2 Critical)

)e
Trigger when Serving cell < Threshold - hysteresis for Time to trigger

ur
Eg. Threshold = -113 dBm, hysteresis = 1 dB, TimeToTrigger = 320 ms

ct
A2 critical event will be sent when the serving cell RSRP is worse than -114 dBm for 320 msec

LTE RAN Protocols and Procedures (eLecture)

EPS Fallback for IMS Voice

gNB
AMF
PDU session Established

NGAP: PDU Session Resource Modification Request

(fiveQI 1)
QoS rules received from SMF
GBR flow for voice:
Trigger EPS Fallback

NGAP: PDU Session Resource Modification Response

(cause radioNetwork : ims-voice-eps-fallback-or-rat-fallback-triggered)

EPS Fallback to LTE can be performed in one of the following ways:

EPS Fallback Procedure

)
1) Blind release with redirect.

e
2) Measurement-based release with redirect.

ur
3) Measurement-based handover. (preferred)

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-281
281

LTE RAN Protocols and Procedures (eLecture)

SA Event B1 (used for EPS Fallback for IMS voice)

(LTE Cell)

)e
Trigger when LTE neighbour cell > Threshold + hysteresis for Time to trigger

ur
Eg. threshold = -110 dBm, hysteresis = 1 dB, TimeToTrigger = 160 ms

ct
B1 event will be sent when the neighbor LTE cell RSRP is better than -109 dBm for 160 msec

LTE RAN Protocols and Procedures (eLecture)

Service Request-Based Emergency Fallback

— The UE request service for an emergency call by sending a
NAS Service Request with Service Type=Emergency
Fallback gNB AMF
— The UE may send Service Request in idle or connected
UE is registered in 5GC (TS 23.502 chapter 4.2.2)
mode. The NG-RAN forwards it to the 5GC (AMF) in:
— Initial UE Message (UE in idle) RRC: UL Message Transfer
NGAP: UL
NAS: Service Request(Emergency Fallback)
— Uplink NAS Transport (UE in connected) NAS
Transport in
NGAP: Initial UE Message
NAS: Service Request (Emergency Fallback) connected
mode
— The AMF “orders” emergency fallback from the NG-RAN by
Emergency call detected
including the Emergency Fallback Indicator IE in: AMF initiates Emergency Fallback
— Initial Context Setup Request (UE in Idle)
— UE Context Modification Request (UE in connected) NGAP: Initial Context Setup Request NGAP: UE
(Emergency Fallback Indicator IE) Context
Modification
Request in
— NG-RAN Releases the UE with redirect to E-UTRA, sends connected

)
response message to AMF and initiates a release of the UE mode

e
Release with Redirect to E-UTRA

ur
Context.

ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-283
283

LTE RAN Protocols and Procedures (eLecture)

Summary of Chapter 5
The students should now be able to:
Explain Mobility in LTE
1. Explain the Intra-Frequency Handover (X2 and S1 Handover)
2. Discuss Coverage Triggered Session Continuity
3. Explain Inter-frequency Handover
4. Explain IRAT Handover
5. Describe CS Fallback
6. Discuss Single Radio Voice Call Continuity (SRVCC) Handover to UTRAN/GERAN/CDMA1x
7. Explain VoLTE and WiFi Calling Mobility

)e
8. Describe LTE-NR Interworking

ur
ct
Le
© Ericsson
PA1 AB 2023| |03810-V1
| 2023-10-17 Mobility || LZU1084329 R2A || Page
Ericsson Internal Figure 5-284
284

LTE RAN Protocols and Procedures (eLecture)

Course Objectives
After completion of this course, the participants will now be able to

1. Explain the EPS Protocol Architecture

LTE RAN Protocols and Procedures (eLecture)

ericsson.com/training

Sigcomm16 Tutorial 5g SDN NFV Part1
No ratings yet
Sigcomm16 Tutorial 5g SDN NFV Part1
124 pages
S01M01 - 2G Radio-Principles - Ed03
No ratings yet
S01M01 - 2G Radio-Principles - Ed03
171 pages
2_5G Rel 161718 更新 _JH_V02_downloadable
No ratings yet
2_5G Rel 161718 更新 _JH_V02_downloadable
47 pages
Radio Mobile Life Cycle and Deployment Process V1.0
No ratings yet
Radio Mobile Life Cycle and Deployment Process V1.0
68 pages
03 - RA23503EN162GLA0 - SRAN On Baseband Dimensioning
No ratings yet
03 - RA23503EN162GLA0 - SRAN On Baseband Dimensioning
21 pages
wireless-fundamental
No ratings yet
wireless-fundamental
69 pages
Mobile Network Dimensioning
No ratings yet
Mobile Network Dimensioning
8 pages
Jots 4.1 PDF
100% (2)
Jots 4.1 PDF
47 pages
NASA 3GPP Study Final Project Report Consol UDR
No ratings yet
NASA 3GPP Study Final Project Report Consol UDR
134 pages
Qualcomm 5g Vision Presentation
No ratings yet
Qualcomm 5g Vision Presentation
23 pages
191014 5G Roadmap for TSDSI WS Dropmann Nokia
No ratings yet
191014 5G Roadmap for TSDSI WS Dropmann Nokia
22 pages
SRAN10.0 Multi-Band, Multimode, and Multi-Antenna Network Planning and Optimization Solution
No ratings yet
SRAN10.0 Multi-Band, Multimode, and Multi-Antenna Network Planning and Optimization Solution
106 pages
ICLTERPOP Section 3 - LTE Link Budgets PDF
No ratings yet
ICLTERPOP Section 3 - LTE Link Budgets PDF
82 pages
Dino Flores LTE Release 13 5G June 2015
No ratings yet
Dino Flores LTE Release 13 5G June 2015
21 pages
Oc1 6g-Sandbox 5g-Loraloc Uo FC
No ratings yet
Oc1 6g-Sandbox 5g-Loraloc Uo FC
12 pages
Orthogonal Frequency Division Multiplexing (OFDM) System Simulation
No ratings yet
Orthogonal Frequency Division Multiplexing (OFDM) System Simulation
21 pages
5G Core 21.1 Solution Overview ISSUE 2.0
No ratings yet
5G Core 21.1 Solution Overview ISSUE 2.0
57 pages
NSN Doc
No ratings yet
NSN Doc
47 pages
Cloud-AI-Native 6G powered by eBPF
No ratings yet
Cloud-AI-Native 6G powered by eBPF
20 pages
Netmanias.2013.09.11-LTE QoS - SDF and EPS Bearer QoS (En) PDF
No ratings yet
Netmanias.2013.09.11-LTE QoS - SDF and EPS Bearer QoS (En) PDF
16 pages
5G Protocols
No ratings yet
5G Protocols
35 pages
Session 6-5 Technology Solution for LTE-印度-Vineet Verma-final
No ratings yet
Session 6-5 Technology Solution for LTE-印度-Vineet Verma-final
62 pages
LTE Security I: Concept and Authentication
No ratings yet
LTE Security I: Concept and Authentication
13 pages
C Ran
No ratings yet
C Ran
10 pages
3 - RNP - Exercise - Ed4 - Released
No ratings yet
3 - RNP - Exercise - Ed4 - Released
102 pages
Aricent LIPA SIPTO Whitepaper PDF
No ratings yet
Aricent LIPA SIPTO Whitepaper PDF
14 pages
04 5G Networking Planning Practice For Coverage Prediction ISSUE1.00
No ratings yet
04 5G Networking Planning Practice For Coverage Prediction ISSUE1.00
35 pages
Mobile Network Operator Infrastructure Security Solution
No ratings yet
Mobile Network Operator Infrastructure Security Solution
46 pages
Dense Air
No ratings yet
Dense Air
38 pages
VCSCF - Student Book
100% (1)
VCSCF - Student Book
348 pages
Increasing LTE RAN Capacity EBrief 2022
No ratings yet
Increasing LTE RAN Capacity EBrief 2022
6 pages
5G NR Training 2022
No ratings yet
5G NR Training 2022
66 pages
Dokumen - Tips - Zte Ran Sharing Solution For Workshop v11
No ratings yet
Dokumen - Tips - Zte Ran Sharing Solution For Workshop v11
46 pages
R 07 08 OFDM (A) For Wireless Communications
No ratings yet
R 07 08 OFDM (A) For Wireless Communications
63 pages
A Flexible X-Haul Network For 5G and Beyond: Jörg-Peter Elbers and Jim Zou
No ratings yet
A Flexible X-Haul Network For 5G and Beyond: Jörg-Peter Elbers and Jim Zou
21 pages
Your Partner For Wireless Engineering Solutions: Mobile Professionals, Inc
No ratings yet
Your Partner For Wireless Engineering Solutions: Mobile Professionals, Inc
64 pages
5G Channel Coding
No ratings yet
5G Channel Coding
5 pages
LTE Mobile Transport Evolution: Strategic White Paper
No ratings yet
LTE Mobile Transport Evolution: Strategic White Paper
16 pages
GoB Patterns For 5G Sub-6 GHZ Cmwave mMIMO RUs
No ratings yet
GoB Patterns For 5G Sub-6 GHZ Cmwave mMIMO RUs
30 pages
5G Cell Parameter Planning（Based on GC）-V0.1
No ratings yet
5G Cell Parameter Planning（Based on GC）-V0.1
27 pages
LTE FDD Network Planning and Optimization
No ratings yet
LTE FDD Network Planning and Optimization
23 pages
3GPP Network Slicing: Georg Mayer, 3GPP CT Chairman, Huawei
No ratings yet
3GPP Network Slicing: Georg Mayer, 3GPP CT Chairman, Huawei
10 pages
An Analysis of The Requirements For Session Border Control in IMS Networks
No ratings yet
An Analysis of The Requirements For Session Border Control in IMS Networks
46 pages
Netmanias.2014.08.22-LTE Policy and Charging Control (PCC) (En)
No ratings yet
Netmanias.2014.08.22-LTE Policy and Charging Control (PCC) (En)
19 pages
Chapter 1 - 5G and Mobile Private Networks-compressed
No ratings yet
Chapter 1 - 5G and Mobile Private Networks-compressed
39 pages
RRM Features RL10 17A
No ratings yet
RRM Features RL10 17A
600 pages
Mocnmoran PDF
No ratings yet
Mocnmoran PDF
12 pages
B Ultra Cloud Core CNDP Smi 5g Lab v1
No ratings yet
B Ultra Cloud Core CNDP Smi 5g Lab v1
62 pages
GPRS Dimensioning and Performance Workshop
No ratings yet
GPRS Dimensioning and Performance Workshop
24 pages
Aircom K025 LTE Technology For Engineers Asset - 2
100% (1)
Aircom K025 LTE Technology For Engineers Asset - 2
324 pages
5g-advanced-evolution-towards-6g
No ratings yet
5g-advanced-evolution-towards-6g
18 pages
Lte Epc PDF
No ratings yet
Lte Epc PDF
31 pages
5G SFP Backhaul Installation Alternatives
No ratings yet
5G SFP Backhaul Installation Alternatives
5 pages
3GPP TS 24.008
No ratings yet
3GPP TS 24.008
727 pages
Radio Frequency (RF) Engineering in Telecom: Telecom Titans: Building the Connected World, #3
From Everand
Radio Frequency (RF) Engineering in Telecom: Telecom Titans: Building the Connected World, #3
Jordan Grant
No ratings yet
Lte Radio Access Network Protocols and Procedures
No ratings yet
Lte Radio Access Network Protocols and Procedures
151 pages
LTE Protocol, Procedure, Performance Management & Optimization Training Material
No ratings yet
LTE Protocol, Procedure, Performance Management & Optimization Training Material
237 pages
LTE Training
No ratings yet
LTE Training
144 pages
Course Description - LTE L13A Air Interface and Protocols Procedures
No ratings yet
Course Description - LTE L13A Air Interface and Protocols Procedures
4 pages
LTE System Principle ISSUE 1.01
No ratings yet
LTE System Principle ISSUE 1.01
84 pages
Scene 1-Discussing To Buy Phone For Son/daughter (Untuk College) - Plan Untuk Pergi Kedai
No ratings yet
Scene 1-Discussing To Buy Phone For Son/daughter (Untuk College) - Plan Untuk Pergi Kedai
3 pages
B.3. Planilla Cambios de Serial Tradicional
No ratings yet
B.3. Planilla Cambios de Serial Tradicional
18 pages
3g Kpi Formula Alu Ericsson
0% (1)
3g Kpi Formula Alu Ericsson
18 pages
Current Location 19
No ratings yet
Current Location 19
10 pages
4G Technology: Past Simple
No ratings yet
4G Technology: Past Simple
4 pages
Wireless Short Message Service (SMS) Tutorial
No ratings yet
Wireless Short Message Service (SMS) Tutorial
9 pages
Redmi
No ratings yet
Redmi
10 pages
OJT Daily Time Record and Diary
No ratings yet
OJT Daily Time Record and Diary
144 pages
3g Mobile Communication Technology
No ratings yet
3g Mobile Communication Technology
12 pages
Price Realizacii
No ratings yet
Price Realizacii
118 pages
Shiv 7 4 Resume Ericsson
No ratings yet
Shiv 7 4 Resume Ericsson
5 pages
AfriCell Day 1
No ratings yet
AfriCell Day 1
39 pages
ch#5
No ratings yet
ch#5
18 pages
Phones List
No ratings yet
Phones List
7 pages
Mobility Management For 5G Mobile Networks
No ratings yet
Mobility Management For 5G Mobile Networks
5 pages
SR Hvg072m DNG l900
No ratings yet
SR Hvg072m DNG l900
129 pages
Usage Details: Mahik
No ratings yet
Usage Details: Mahik
10 pages
Huawei UTRAN Dual Carrier Implementation Guide
No ratings yet
Huawei UTRAN Dual Carrier Implementation Guide
10 pages
AP106 - Wi-Fi or 5G Cellular
No ratings yet
AP106 - Wi-Fi or 5G Cellular
26 pages
Clear Code Traffica Faulty
No ratings yet
Clear Code Traffica Faulty
24 pages
CEll Numbers
No ratings yet
CEll Numbers
115 pages
2G/3G/4G Personal GPS Tracker: MT90 Series
No ratings yet
2G/3G/4G Personal GPS Tracker: MT90 Series
2 pages
Mobile Comp Syllabus
No ratings yet
Mobile Comp Syllabus
1 page
Gec 2016 2017 Updated - 013118
No ratings yet
Gec 2016 2017 Updated - 013118
34 pages
MSC Pool VMS6 Presentation
No ratings yet
MSC Pool VMS6 Presentation
101 pages
Identities & Traffic Management
No ratings yet
Identities & Traffic Management
30 pages
Presented By:-Kaleb Lule
100% (1)
Presented By:-Kaleb Lule
29 pages
3G Sunset FFF
No ratings yet
3G Sunset FFF
7 pages
Target Config
No ratings yet
Target Config
21 pages
CME ERROR's (GSM Equipment Related Codes)
No ratings yet
CME ERROR's (GSM Equipment Related Codes)
4 pages

LTE_Protocols and Procedures

Uploaded by

LTE_Protocols and Procedures

Uploaded by

LTE RAN Protocols and Procedures (eLecture)

LTE RAN Protocols and

© Ericsson AB 2023 | LZU1084239 R2A 0

This is a Learning Product, which contains simplifications. Therefore, it must

The Learning Product documentation is not intended to replace the technical

In this context, it is also strictly forbidden to screen record in picture, audio, or

© Ericsson AB 2023 | LZU1084239 R2A 1

1. Explain the EPS Protocol Architecture

© Ericsson AB 2023 | LZU1084239 R2A 2

EPS Protocols Introduction

LTE RAN Protocols and Procedures(eLecture)

© Ericsson AB 2023 | LZU1084239 R2A 3

1. Distinguish between the different EPS protocol types.

© Ericsson AB 2023 | LZU1084239 R2A 4

© Ericsson AB 2023 | LZU1084239 R2A 5

Signalling Protocols (Layer 3)

© Ericsson AB 2023 | LZU1084239 R2A 6

© Ericsson AB 2023 | LZU1084239 R2A 7

MenuAP L3 Signalling Protocol

© Ericsson AB 2023 | LZU1084239 R2A 8

TLC L2 Transport Protocol

© Ericsson AB 2023 | LZU1084239 R2A 9

Freddy’s Restaurant Order Example

© Ericsson AB 2023 | LZU1084239 R2A 10

3GPP Project Co-ordination Group (PCG)

TSG RAN TSG SA TSG CT

© Ericsson AB 2023 | LZU1084239 R2A 11

3GPP LTE and SAE Work Items

TSG RAN LTE

© Ericsson AB 2023 | LZU1084239 R2A 12

© Ericsson AB 2023 | LZU1084239 R2A 13

Key Points for E-UTRAN Deployment

© Ericsson AB 2023 | LZU1084239 R2A 14

E-UTRAN with EPC and 5GC

EPC D G Gx S Network 5GC

© Ericsson AB 2023 | LZU1084239 R2A 15

5G Core compared to EPC

S1-MME MME S6a HSS PCRF S S

S S EPC: Evolved Packet Core

© Ericsson AB 2023 | LZU1084239 R2A 16

Disclaimer on Discussion Points

© Ericsson AB 2023 | LZU1084239 R2A 17

EPS Bearer External Bearer

E-RAB S5/S8 Bearer

Data Radio Bearer S1 Bearer

Uu S1-U S5/S8 SGi

© Ericsson AB 2023 | LZU1084239 R2A 18

UE States with EPS

Tracking Area (TA)

© Ericsson AB 2023 | LZU1084239 R2A 19

CM-IDLE CM-CONNECTED CM-CONNECTED CM-IDLE

UE power off Traffic/Registration Request/Update

© Ericsson AB 2023 | LZU1084239 R2A 20

EPS Control Plane Protocols

UE eNodeB X2 MME S10 SGW PGW

X2AP X2AP GTP-C GTP-C

SCTP SCTP UDP UDP

© Ericsson AB 2023 | LZU1084239 R2A 21

EPS User Plane Protocols LTE Uu S1-U S5/S8 SGi

© Ericsson AB 2023 | LZU1084239 R2A 22

Support for Dual Connectivity in EUTRAN

© Ericsson AB 2023 | LZU1084239 R2A 23

EPS Protocol Categories

Radio Resource Control (RRC)

X2 Application Protocol (X2AP) Medium Access Control (MAC)

© Ericsson AB 2023 | LZU1084239 R2A 24

© Ericsson AB 2023 | LZU1084239 R2A 25

Quality of Service and

LTE RAN Protocols and Procedures(eLecture)

© Ericsson AB 2023 | LZU1084239 R2A 26

© Ericsson AB 2023 | LZU1084239 R2A 27

Service Service Service Service Service Service

© Ericsson AB 2023 | LZU1084239 R2A 28

Network Security Concepts

© Ericsson AB 2023 | LZU1084239 R2A 29

Security on Uu & S1 Interfaces