32
7/27/2019 LT3600 S6 LTE Operation http://slidepdf.com/reader/full/lt3600-s6-lte-operation 1/32 SECTION 6 LTE OPERATION LTE/SAE Engineering Overview I © Wray Castle Limited

LT3600 S6 LTE Operation

Embed Size (px)

Citation preview

Page 1: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 1/32

SECTION 6

LTE OPERATION

LTE/SAE Engineering Overview

I© Wray Castle Limited

Page 2: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 2/32

LTE/SAE Engineering Overview

II © Wray Castle Limited

Page 3: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 3/32

Idle Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.1

Cell Reselection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.2

E-UTRA Radio Measurements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.3

Measurements for RRC Connected Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.4

Measurement Gaps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5

Timing Advance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.6

CQI Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.7

MIMO Options for LTE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.8

EPS Initial Attach . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.9

Default Bearer Establishment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.10

EPC Support for Idle Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.11

TAU (Tracking Area Update) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.12

Idle-mode Signalling Reduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.13

Paging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.14

IMS Functions in Idle Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.15

Levels of Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.16

UE-Triggered Service Request . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.17

Handling Additional Traffic Flows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.18

Dedicated Bearer Creation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.19

IMS Connection Establishment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.20

Connected Mode Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.22

Intra-E-UTRAN Handover (X2-based) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.23

Inter-RAT HO Preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.24

Inter-RAT Handover Execution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.25

CONTENTS

LTE Operation

III© Wray Castle Limited

Page 4: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 4/32

LTE/SAE Engineering Overview

IV © Wray Castle Limited

Page 5: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 5/32

 At the end of this section you will be able to:

define the idle mode state for an LTE UE

identify all the key functions and procedures associated with idle mode operation

describe the cell reselection process

define the key radio measurements that are applicable to E-UTRA

describe how measurements are configured for the UE in connected mode

explain the need for and configuration of measurement gaps

describe timing advance adjustment for LTE

describe the process and application of CQI reporting

list and explain the MIMO options for LTE

discuss the reasoning behind the decision to make this a stage in the attach process

describe the activities related to IMS registration

discuss the roles played by various devices involved in EPS device selection outline the set of functions a UE will perform when in idle mode

describe the functions performed by the EPC in support of UEs in Idle Mode

outline the set of activities related to the TAU process

discuss the activities performed to allow UEs to be paged

outline the functions related to ISR (Idle-mode Signalling Reduction)

describe the actions performed by the MME and HSS in support of UE Reachability

discuss the use of the Service Request process and its relationship to the modify and create

bearer functions

list the stages through which the IMS connection establishment process must proceed

outline the processes used to establish CS services for EPS attached subscribers

describe how IMS signalling and media flows are routed and handled

outline the EPC’s support for charging

describe the functions that enable connected mode mobility management to operate

outline the processes employed to support various handover scenarios including intra-E-UTRAN

and inter-RAT HO

describe the procedures employed to detach a UE from the EPS

OBJECTIVES

LTE Operation

V© Wray Castle Limited

Page 6: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 6/32

LTE/SAE Engineering Overview

VI © Wray Castle Limited

Page 7: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 7/32

PLMN selectionand reselection

Cell selectionand reselection

Location

registration

Support for 

manual CSG IDselection

Locationregistrationresponse

Servicerequests

Indicationto user Manual

mode

 Automaticmode

 AvailablePLMNs

SelectedPLMN

Registrationarea changes

Locationregistrationresponse

NAS

control

Radio measurements

CSG IDselected

 Available CSGIDs to NAS

LT3600/v3.1 6.1© Wray Castle Limited

Idle Mode

Idle mode represents a state of operation for the UE where it has successfully performed the following:

PLMN selection, cell selection and location registration (by tracking area).

Once in idle mode, the UE will continue to reassess the suitability of its serving cell and, in some

circumstances, its serving network. In order to do this it will implement cell and PLMN reselection

procedures. A UE in idle mode will be monitoring its current serving cell in terms of radio performanceand signalling information. The radio performance measurements are done on the basis of a quality

measure. This is an assessment of radio signal strength and interference level, and it can be made for 

both the serving cell and its neighbours. The aim will be to ensure that the UE is always served by the

cell most likely to give the most reliable service should information transfer of any kind be required.

The UE will also be monitoring two key types of signalling from the serving cell system information

messages and paging or notification messages. System information messages convey all the cell and

system parameters. The UE will record changes in these parameters that may affect the service level

provided by the cell, or access rights to the cell. Changes in these parameters could provoke a cell

reselection, or a PLMN reselection. Paging or notification messages will result in connection

establishment.

 All of these procedures are performed through communication between the AS and the NAS. In general,

instructions are sent from the NAS to the AS; the AS then performs the requested procedure and returns

a result to the NAS.

If CSG (Closed Subscriber Group) is supported then these procedures are modified such that a cell’s

broadcast CSG ID forms another level of differentiation between cells. CSG is intended for use with

HeNBs (femtocells).

Further Reading: 3GPP TS 36.304:4.1

LTE Operation

Page 8: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 8/32

Based on priority of RAT/Frequency layers

and thresholds

Based on priority of RAT/Frequency layers

and thresholds

Based on measurements,offsets, parameters and

mobility status

1 sec since last reselectionCell is suitable

I-RATInter-frequency

E-UTRAInter-frequency E-UTRA

Intra-frequency

Low

Medium

High

Measurement rules

Evaluation

Ranking

Reselection

LT3600/v3.16.2 © Wray Castle Limited

Cell Reselection

Cell reselection in LTE both reuses many principles that were are well established in legacy technologies

and introduces new strategies. A key addition for LTE is the use of RAT/frequency prioritization. Each

frequency layer that the UE may be required to measure, either E-UTRA or any other RAT, is assigned a

priority. The cell-specific priority information is conveyed to UEs via system information messages.

 Additionally, UE-specific values can be supplied in dedicated signalling, in which case they take priority

over the system information values. Any indicated frequency layers that do not have a priority will not beconsidered by the UE for reselection.

In general, the measurement rules are used to reduce unnecessary neighbour cell measurements. The

UE always measures cells on a higher priority E-UTRA inter-frequency or I-RAT frequency. The UE will

only measure E-UTRA intra-frequency cells if the Srexlev value for the current selected cell falls below

an indicated threshold (Sintersearch). Similarly, the UE only measures E-UTRA inter-frequency or I-RAT

frequency cells on equal or lower priority layers if the Srexlev value for the current selected cell falls

below an indicated threshold (Snonintrasearch).

Measurements are then evaluated for potential reselection. Again, the frequency/RAT priority level is

used along with system-defined threshold for this assessment. A UE will always reselect a cell on a

higher priority frequency if its value of Srxlex exceeds Threshx,high for longer than TreselectionRAT. It willonly select a cell on a lower priority frequency when the Srxlev of the serving cell falls below

Threshserving,low and Srxlev of the neighbour is above Threshx,low for TreselectionRAT and there is no other 

alternative. For neighbour cells on intra-frequencies or on equal priority E-UTRA inter-frequencies, the

UE uses a ranking criterion ‘Rs’ for the serving cell and ‘Rn’ for the neighbour cell. Ranking is based on a

comparison of the respective Srxlev values with a hysteresis added to the serving cell value and an offset

added to the neighbour cell value. The UE will select the highest ranked cell if the condition is maintained

for TresectionRAT.

In addition to all of this, the UE will apply scaling to Treselection, hysteresis values and offset values

dependent on an assessment of its mobility state, which may be high, medium or low. This is based on

an analysis of resent reselection frequency.

Further Reading: 3GPP TS 36.304:5.2.4

LTE/SAE Engineering Overview

Page 9: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 9/32

(Reference Signal Received Power) (Received Signal Strength Indicator)

Total received power in RS OFDMsymbol periods including the serving

cell, all co-channel and adjacent channelinterference and thermal noise

Linear average power of the reference signalresource elements

The ratio of the reference signal power,calculated as N x RSRP, to the RSSI, where

N is the number of RBs in the RSSImeasurement bandwidth

(Reference Signal Received Quality)

RSRP RSSI

RSRQ

Serving cellServing cell

LT3600/v3.1 6.3© Wray Castle Limited

E-UTRA Radio Measurements

There are three key measurement values used in E-UTRA, the RSRP (Reference Signal Received

Power), the RSSI (Received Signal Strength Indicator) and the RSRQ (Reference Signal Received

Quality).

The standards define RSRP as:

‘The linear average over the power contributions of the resource elements that carry cell-specific

reference signals within the considered measurement frequency bandwidth’.

The standards define RSSI as:

‘The linear average of the total received power observed only in OFDM symbols containing

reference symbols for antenna port 0, in the measurement bandwidth, over N number of resource

blocks by the UE from all sources, including serving and non-serving cells, adjacent channel

interference, thermal noise, etc.’

The standards define RSRQ as:

‘The ratio N xRSRP/(E-UTRA carrier RSSI), where N  is the number of RBs of the E-UTRA carrier 

RSSI measurement bandwidth’.

Note that the measurement of RSRP is based on reference signals from antenna port 0, but where

antenna port 1 can be received reliably, reference signals from that port may also be included.

 Additionally, the values of RSRP and RSSI used to calculate RSRQ must have the same measurement

bandwidth.

Further Reading: 3GPP TS 36.214:5.1

LTE Operation

Page 10: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 10/32

UE

RRC Connected

eNBServing cell

Gap configuration

Quantity configuration

Measurement identities

Reporting configuration

Measurement objects

Measurement Parameters

Neighbour 

cells

LT3600/v3.16.4 © Wray Castle Limited

Measurements for RRC Connected Mode

When the UE becomes RRC connected, the measurement and reporting process as well as mobility

decisions becomes the responsibility of the eNB. The required measurement and reporting settings are

signalled to the UE in the RRCConnectionReconfiguration message.

The measurement object defines what the UE is to measure. This is defined as a frequency and

measurement bandwidth; optionally it may also contain a list of cells. If it does contain a list of cells thenthey will be indicated as either white list or black list. The UE will measure any cells it detects but will not

report black list cells. Frequency- or cell-specific offsets will also be included in this field.

The reporting configuration sets what quantities the UE is to measure, what quantities the UE is to report

and under what circumstances a measurement report is to be set. Reporting may be set as either trigger-

based, periodic or triggered periodic. This field also defines the other contents of the measurement report

message.

Measurement identities provides a reference number such that some part of this identified measurement

can be modified or removed in future.

The Quantity configuration sets the filtering to be used on the measurements that are taken.

The gap configuration defines periods when the UE can take measurements of neighbour cells.

Further Reading: 3GPP TS 36.331:5.5

LTE/SAE Engineering Overview

Page 11: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 11/32

eNBServing cell

Transmission gap(6 ms)

Transmission gap repetitionperiod (N x 10 ms)

Neighbour cell Neighbour cellNeighbour cell

LT3600/v3.1 6.5© Wray Castle Limited

Measurement Gaps

When the UE is in RRC connected mode it will be engaged in data transfer in the uplink or downlink

directions or both. In order to simplify the design of the UE it is not required to be able to take neighbour 

cell measurements and transfer data with the serving cell at the same time. This requires defined periods

where the UE is able to take neighbour cell measurements and is not required to communicate with the

serving cell.

Transmission gaps perform this function and are very similar in concept to compressed mode for UMTS.

The transmission gaps have a duration of 6 ms since this allows sufficient time to take measurements

and gain basic synchronization with most RATs in a single transmission gap. For GSM, however, 6 ms

remains a sufficient gap, but multiple transmission gaps are required to take measurements and

determine a cell’s BSIC (Base Station Identity Code).

The transmission gap period is variable, but will be a multiple of 10 ms.

The transmission gap pattern to be used by a UE is included in the measurement parameters.

Further Reading: 3GPP TS 36.133:8.1

LTE Operation

Page 12: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 12/32

eNB measures propagationdelay from PRACH preamble

TA step size is 16Ts (0.52 μs)

Correction is included in theRAR as a value of steps in the

range 0 to 1282 (0 to 0.67 ms

TA adjustments are madeusing MAC controlmessages in the PDSCH

Correction is a value in therange 0 to 63 interpreted as+/– 31 steps (+/– 16 μs)

LT3600/v3.16.6 © Wray Castle Limited

Timing Advance

In order to maintain orthogonality between uplink transmissions from multiples UEs in a cell, timing

adjustment must be applied to compensate for variations in propagation delay.

Initial timing advance is calculated at the eNB from a UE’s preamble transmission on the PRACH. The

timing advance correction is given as an 11-bit value although the range is limited to 0–1282 timing

advance steps. Granularity is in steps of 16Ts (0.52 μs) so timing advance can be varied between 0 and0.67 ms. One timing advance step corresponds to a distance change of c.78 m and is significantly

smaller than the normal CP. The maximum timing advance value corresponds to a range of c.100 km.

The maximum specified speed for a UE relative to an eNB is 500 km/h (139 m/s), which would require

slightly more than one timing advance change every two seconds. Consideration also needs to be given

to the possibility of more extreme changes in the multipath characteristics of a channel, for example the

sudden appearance or disappearance of a strong reflected path from a distant object or delay through a

repeater. However, these are extreme examples and, in any case, timing advance update commands

can indicate up to +/– 16 μs in a single step. Thus the rate at which timing advance commands need to

be sent in practice is typically much less than one every two seconds.

Timing update commands are transmitted to UEs as MAC control messages and as such are included inMAC PDUs carrying data for the UE on the PDSCH. The command itself is a six-bit value giving a

number range from 0–63. Values less than 31 will reduce timing advance and values greater than 31 will

increase timing advance.

Further Reading: 3GPP TS 36.213:4.2.3

LTE/SAE Engineering Overview

Page 13: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 13/32

Efficiency

(bits/symbol)

0 No TX ... ...

1 QPSK 0.076 0.1523

2 QPSK 0.12 0.2344

3 QPSK 0.19 0.377

4 QPSK 0.3 0.6016

5 QPSK 0.44 0.877

6 QPSK 0.59 1.1758

7 16QAM 0.37 1.47668 16QAM 0.48 1.9141

9 16QAM 0.6 2.4063

10 64QAM 0.45 2.7305

11 64QAM 0.55 3.3223

12 64QAM 0.65 3.9023

13 64QAM 0.75 4.5234

14 64QAM 0.85 5.1152

15 64QAM 0.93 5.5547

CQI Index ModulationApprox. code

rate

Downlink channel

adaptation based on

UE CQI reporting

Uplink channel adaptation based on

eNB measurements of UL data

transmissions and SRS if requested

LT3600/v3.1 6.7© Wray Castle Limited

CQI Reporting

Link adaptation is a crucial part of the LTE air interface and involves the variation of modulation and

coding schemes to maximize throughput on the air interface.

Link adaptation for scheduled uplink resources can be can be calculated by the eNB from a number of 

different inputs based on measurements of a UE’s uplink transmissions. Additionally the eNB may

request that UEs transmit sounding reference signals, the measurement results of which can also beused for link adaptation.

For downlink transmissions the eNB needs information about the success or otherwise of the UE in

receiving its downlink transmissions. The UE assesses the quality of the downlink signal through

measurements of the received signal and consideration of the error correction scheme. It then calculates

the maximum modulation and coding scheme that it estimates will maintain an error rate better than 10%.

This is indicated to the eNB as a CQI (Channel Quality Indicator) value. The table in the diagram (taken

from the 3GPP standards) shows how the CQI values are interpreted as modulation and coding

schemes. The table is also useful for estimating the likely physical layer throughput in a given radio

configuration.

Further Reading: 3GPP TS 36.213:7.2

LTE Operation

Page 14: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 14/32

Transmit Diversity Beamforming

Closed loop with PMI feedback

SU-MIMO (ranks up to 4)MU-MIMO (virtual MIMO)

LT3600/v3.16.8 © Wray Castle Limited

MIMO Options for LTE

In its first release, LTE is specified with several options for SU-MIMO implementation and a more limited

option for MU-MIMO operation. The specification include descriptions of operation up to rank 4 (4x4

MIMO).

The simplest option is not MIMO, as such, but uses the multi antenna array at an eNB to provide transmit

diversity. The standards allow configuration with up to four antennas at the base station. It is likely thatcross-polar antennas would be used as part of the antenna array, so a two-antenna array could be

implemented using a single cross-polar panel, with a four-antenna array requiring two cross-polar panels.

Transmit diversity involves the transmission of a single data stream to a single UE, but makes use of the

spatial diversity offered by the antenna array. This can increase channel throughput or increase cell

range.

There are also two beamforming options available. These are based on the use of a single layer with rank

one pre-coding but make use of a multi antenna array for beamforming to a single UE. The two options for 

this are a closed loop mode, which involves feedback of PMI (Pre-coding Matrix Indicators) from the UE,

and an open loop mode, which involves the transmission of UE-specific reference signals and the eNB

basing the pre-coding for beamforming on uplink measurements.

Full SU-MIMO configurations are available in LTE in the downlink direction with ranks up to four. However,

a maximum of two data streams is used, even when four antenna ports are available. In SU-MIMO the UE

can be configure to provide PMI feedback as well as RI (Rank Indicators), which indicates the rank that

the UE calculates will give the best performance.

In the first release of the LTE specification there is only a limited implementation of MU-MIMO specified. It

is applicable in the uplink direction and allows two UEs to use the same time frequency resource within

one cell.

Further Reading: 3GPP TS 36.211:6.3.3, 6.3.4, 36.213:7.1

LTE/SAE Engineering Overview

Page 15: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 15/32

UE eNB MME S-GW PDN-GW HSSEIR

1. AttachRequest

2. AttachRequest

3. AKA/Security

Optional Stage

4. IdentityRequest/Response

4. ME Identity Check

4. CipheredOptions Request

4. CipheredOptions Response

5. Update Location

5. Insert Subscriber Data

5. Insert Subscriber Data Ack

5. Update Location Ack

LT3600/v3.1 6.9© Wray Castle Limited

EPS Initial Attach

The UE’s objective when performing an attach is to register the subscriber’s identity and location with the

network to enable services to be accessed. During the attach procedure the UE will be assigned a default

EPS bearer to enable always-on connectivity with a PDN. The UE may be provided with details of a local

P-CSCF to enable it to register with the IMS.

 A simplified view of the attach process – assuming that it is an initial attach with stored details from arecent previous context for a UE using its H-PLMN (Home PLMN) and accessing via the Home E-UTRAN

 – is shown, and the stages of the process are described below.

Once a suitable cell has been selected the UE employs the Random Access procedure to request an

RRC connection with the chosen eNB. With that in place an Attach Request message (1) can be

transmitted. If the UE has previously been registered with the PLMN, it may include a previously assigned

GUTI in the message, otherwise the Attach Request message contains the subscriber’s IMSI and some

other parameters.

On receipt of the Attach Request the eNB either derives the identity of the previously used MME from the

supplied GUTI or selects an MME from the pool available and forwards the message (2).

The MME contacts the HSS indicated by the subscriber’s IMSI and in response receives the relevant

elements of the ‘quintuplet’ that allows the EPS-AKA process to take place (3).

Optionally, at this point the MME may be required to check the identity and status of the UE via the EIR

(4) using the ME Identity Check process. Ciphering may then be invoked over the air interface.

Once the AKA procedures have successfully concluded the MME transmits an Update Location message

to the HSS and receives the Insert Subscriber Data message in response containing the user’s service

profile (5). An Insert Subscriber Data Ack from the MME is followed by an Update Location Ack from the

HSS. The UE is now Attached to the EPC.

Further Reading: 3GPP TS 23.401:5.3.2

LTE Operation

Page 16: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 16/32

UE eNB MME S-GW PDN-GW HSSPCRF

6. Create DefaultBearer Request

7. PCC

Lookup

Optional Stage

8. Create DefaultBearer Response

9. Initial Context SetupRequest/ Attach Accept

10. RRC Conn

Reconfig

11. RRC Conn

Reconfig

Complete 12. Initial Context

Setup Response13. Direct

Transfer 14. Attach

CompleteData flow

LT3600/v3.16.10 © Wray Castle Limited

Default Bearer Establishment

 A default bearer must then be established and the MME selects the S-GW that will handle and a PDN-GW

that supports the requested APN. The MME issues a Create Default Bearer Request to the selected S-GW,

which assigns a GTP TEID to the EPS bearer and passes the request to the indicated PDN-GW (6).

If the network employs dynamic PCC the PDN-GW will query a PRCF for bearer parameters, otherwise the

bearer will be established using local QoS parameters stored in the PDN-GW (7).

 A Create Default Bearer Response message passes from the PDN-GW to the S-GW, which contains

relevant parameters such as the EPS bearer’s IP address and possibly the IP address or DNS name of a

local IMS P-CSCF. The S-GW creates the bearer as specified and passes the Create Default Bearer 

Response message to the MME (8). The details that define the S1-U service will also have been defined

during this stage.

The MME sends an Initial Context Setup Request/Attach Accept message, which contains the assigned

parameters for the EPS bearer context, to the eNB (9). That element in turn sends an RRC Connection

Reconfiguration message to the UE (10) to inform it of the bearer details and the changed air interface

parameters.

The UE returns an RRC Connection Reconfiguration Complete message (11) to verify that the radio bearer,

which was initially established just to carry the attach message, has been reconfigured to support the new

parameters. The eNB forwards an Attach Complete message to the MME (12).

The UE then sends a Direct Transfer message to the eNB (13), which confirms the details of the EPS

Bearer. Finally, the eNB sends an Attach Complete message to the MME to confirm that both the Attach

and the Default EPS Bearer processes have completed successfully.

Uplink and downlink data can now flow if required.

Further Reading: 3GPP TS 23.401:5.3.2

LTE/SAE Engineering Overview

Page 17: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 17/32

ECM StateEPS Bearer ID

QoS

TA 9

TA 12

MME Pool A

UE TA List UE Default Bearer 

Context – Inactive

TA 9TA 12

LT3600/v3.1 6.11© Wray Castle Limited

EPC Support for Idle Mode

The MME currently serving each UE is responsible for ensuring its ‘reachability’. It achieves this by

monitoring the current TA in which the terminal is located.

The EPS allows a cell to be a member of more than one TA. This allows a UE to roam within a set of 

contiguous TAs without being required to perform a TAU, which reduces the amount of location-related

signalling that is required, although it may conversely increase the amount of paging required per UEconnection request.

The MME reflects this extended mobility by maintaining a TA list for each registered UE within which the

list shows the set of TAs the UE is currently registered.

During a TAU, and periodically in the event that a TAU does not occur within a set time-frame, the MME

is responsible for reauthenticating each registered UE and for reissuing the M-TMSI used to

confidentially identify it.

When a UE drops into the ECM-IDLE state its existing default bearer can be ‘parked’ and any dedicated

bearers can either be parked or released. To support this, the MME stores details of the UE’s current

‘bearer contexts’ ready to reactivate them in the event of a UE or network-triggered Service Request.

 A TAU may result in the need to change the S-GW assigned to handle an idle UE’s bearer contexts or of 

the MME with which the UE is registered, if the reselected cell is associated with a different S-GW

Service Area or MME Pool.

If ISR (Idle-mode Signalling Reduction) is active for a UE, the MME may be required to pass location

updates and other pertinent information to the SGSN with which the UE is co-registered.

Further Reading: 3GPP TS 23.401:4.3.5

LTE Operation

Page 18: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 18/32

UE eNB MME HSS

TAU trigger event

1. TAU Request

2. TAU Request+ TAI and ECGI

3. Authentication/Security

Optional Stage

4. TAU Accept

5. TAU Complete

LT3600/v3.16.12 © Wray Castle Limited

TAU (Tracking Area Update)

 A TAU takes place between a UE and the MME with which it is registered and is triggered by the UE

detecting a change in TAI after a cell reselection. A TAU is also be used as part of the Initial Attach

process and may additionally be triggered by events such as the expiry of the periodic TAU timer or as

part of MME load balancing or rebalancing.

In the example message flow it is assumed that the UE is connected to its HPLMN and that an S-GWchange and MME relocation are not required.

 After detecting a change in TAI, the UE transmits a TAU Request message to the eNB (1). The TAU

Request contains data such as the old GUTI, old TAI, EPS bearer status and a NAS MAC (Message

 Authentication Code) for integrity protection purposes.

The eNB forwards the TAU Request (plus the new TAI and ECGI) to the MME indicated by the supplied

GUTI (2). If the MME indicated by the GUTI is not associated with the new eNB, an MME relocation will

be triggered and the base station will select a new MME to pass the TAU Request to.

If the integrity check of the MAC carried in the TAU Request is successful, the MME may elect not to

reauthenticate the UE. If the MME is configured to always reauthenticate, or if the integrity check fails,then the EPS-AKA process must be followed and a new GUTI (which includes the new M-TMSI) will be

issued (3).

Once the MME is satisfied that the UE/USIM is authentic and assuming that the UE is allowed to roam in

the new TA, it transmits a TAU Accept message to the eNB, which relays it to the UE (4). The TAU

 Accept message contains the new GUTI, if one was assigned, plus the current TA List associated with

the UE. The TA List enables the UE to determine the set of TAs within which it can roam without being

required to perform another TAU. The UE responds with a TAU Complete message (5), which finishes

the process.

Further Reading: 3GPP TS 23.401:5.3.3

LTE/SAE Engineering Overview

Page 19: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 19/32

S-GW

MME

GERAN/UTRAN

SGSN

PDN-GW

E-UTRAN

TA

RA

S3UE can reselect to any

registered RAT without

sending an update

UE and Bearer 

Contexts stored

UE and Bearer 

Contexts stored

UE paged across

all registered

areas

LT3600/v3.1 6.13© Wray Castle Limited

Idle-mode Signalling Reduction

ISR is designed, as the name suggests, to reduce the amount of UE-network and MME-SGSN signalling

required to manage idle mode terminals. ISR is a feature of the S3 and S16 interfaces and is not

available to legacy SGSNs that do not support them.

When an Idle UE activates (or is instructed to activate) ISR, copies of UE Context and Bearer Contexts

are stored in both an MME (for E-UTRAN access) and SGSN (for GERAN/UTRAN access). The UE isable to reselect freely between registered RATs without transmitting location updates, unless a change in

RAI or TAI is detected. Any location updates that are sent need only be transmitted via the RAT currently

in use; the receiving core network element will forward the update to its peer over the S3 interface.

The MME and SGSN both store copies of the UE’s bearer contexts and will both page for the UE. When

the UE needs to move to connected mode, whether in response to a page or to a user-initiated event, it

can do so by sending a Service Request via whichever RAT it is currently camped on. The receiving

device will then instruct the S-GW to re-establish the parked bearers.

 A UE with ISR activated maintains details of the RAT and therefore the RAT-specific temporary identifier 

that is in use using the TIN (Temporary Identity used in Next update) parameter.

The TIN can be set to P-TMSI (for GERAN/UTRAN access), GUTI (for E-UTRAN access) or RAT-related

TMSI. This last option means that the UE will use the P-TMSI or GUTI depending upon which RAT is

currently in use.

 A UE will deactivate ISR if it loses contact with one of the registered access networks. For example, a UE

might be within the coverage of both an E-UTRAN and a GERAN cell when ISR is activated but may

roam out of coverage of the E-UTRAN cell; in such circumstances it would revert to being attached to just

an SGSN.

Further Reading: 3GPP TS 23.401:Annex J

LTE Operation

Page 20: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 20/32

S1 Pagingmessages

TA 9

TA 12

UE TA List

TA 9TA 12

LT3600/v3.16.14 © Wray Castle Limited

Paging

The main purpose of the TAU process is to ensure that the MME knows roughly where each UE is in the

event that there is inbound traffic to deliver. Paging will usually be triggered by the receipt of an S-GW

Downlink Data Notification at the MME, indicating that data has arrived at the S-GW on the S5/S8 portion

of a parked EPS Bearer.

If it becomes necessary to contact an idle UE (that is, a UE that has entered the ECM-IDLE state), theMME will employ the paging process.

With no equivalent node to the RNC, EPS paging is managed directly between the MME and eNBs.

When a Paging message is to be sent, the MME checks the current TA list stored for the target UE and

inserts the paging data into the S1 paging messages sent to all eNBs in the indicated TAs.

Each eNB inserts the UE’s NAS paging ID (IMSI or S-TMSI can be used) into the appropriate repetitions

of its PCH. Paging groups may be established to reduce the number of repetitions of the PCH that each

UE is required to monitor; the operation of the paging reduction scheme is controlled via cell-specific

DRX (Discontinuous Reception) functions.

When a UE receives its paging ID on the PCH it initiates the service request process, which ensures that

any ‘parked’ EPS bearers are reactivated ready to carry traffic.

If a UE has ISR activated the paging notification will be forwarded to the peer core network node; either 

MME or SGSN.

Further Reading: 3GPP TS 23.401:5.3.4; 36.300

LTE/SAE Engineering Overview

Page 21: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 21/32

S-CSCF

UE EPS

Re-registration causes:

Change of IP Address

Change of PDN-GW

Expiry of Registration Timer 

LT3600/v3.1 6.15© Wray Castle Limited

IMS Functions in Idle Mode

There is no specific equivalent of idle mode in the IMS – a UE is either registered or deregistered.

The main function that an idle mode UE performs in relation to the IMS is to perform periodic re-

registration. The periodicity of the re-registration is determined by the registration expiry value included in

the initial Registration message and the process ensures that the S-CSCF is kept informed of the

reachability of each registered UE.

Re-registration is also required if the UE’s IP address changes – either as a result of a change of PDN-GW

or as part of a network’s DHCP IP address allocation processes (which may seek to reduce the

possibilities of fraud or connection hijack by periodically refreshing the IP addresses assigned to

terminals).

 An additional trigger for re-registration would be if the UE or IMS capabilities changed, for example if the

client supporting a new IMS application was loaded to the terminal.

Further Reading: 3GPP TS 23.228:5.2

LTE Operation

Page 22: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 22/32

PDN–GWS–GWeNBUE

IMS

Internet

Inactive Default

EPS Bearer 

Inactive Dedicated

EPS Bearer 

Reactivate ‘parked’

EPS Bearers

ServiceRequest

Modify/CreateDedicated

Bearer 

To carry new SDFs

LT3600/v3.16.16 © Wray Castle Limited

Levels of Connectivity

User connectivity in a combined EPS/IMS network requires two levels of connection to be established:

firstly, the radio and EPS bearers that will carry traffic through the E-UTRAN and EPC, and secondly the

IMS SIP and media connections that will carry call-related signalling and end-to-end user traffic.

 A UE’s default bearer may be an operator’s first choice for carrying application traffic, but if the QoS

demanded by a new service data flow is incompatible with that of the default bearer, then the PDN-GW/PCRF may decide that an additional dedicated bearer is established.

When a UE enters idle mode the physical S1 and radio resources assigned to the default EPS bearer will

be released and the bearer context details will be stored. Any existing dedicated bearers may be

released or stored also.

When the UE moves from ECM-IDLE to ECM-CONNECTED the stored bearer contexts will be

reactivated using the Service Request procedure.

Further Reading: 3GPP TS 23.401:5.3.4

LTE/SAE Engineering Overview

Page 23: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 23/32

UE eNB MME S-GW PDN-GW HSSPCRF

Trigger event

1. NAS Service

Request2. NAS Service

Request3. Authentication/Security

Optional Stage

4.S1 AP Initial Context

Setup Request5. Radio Bearer 

Establishment

6. Uplink Data Flow

7. S1 AP Initial Context

Setup Complete

8. Update Bearer 

Request

9. Update Bearer 

Request/Response

10. Update Bearer 

Response

11. Downlink Data Flow

LT3600/v3.1 6.17© Wray Castle Limited

UE-Triggered Service Request

 A UE will trigger a Service Request to reactivate its parked bearer contexts in response to a command

from an application client, the terminal management software or the user interface. A response to a

network initiated paging message will also trigger a Service Request.

The process begins with the transmission of a NAS: Service Request either following the random access

procedure or carried in scheduled uplink capacity. The NAS: Service Request contains the UE’s currentS-TMSI and the service type (data or paging response). The request is initially forwarded to the eNB

encapsulated in an RRC message (1).

Direct Transfer NAS messages were transparent to the UMTS Node B and were only accessible to the

RNC. In the E-UTRAN, NAS messages are switched from the RRC bearer used on the air interface to an

S1AP bearer for forwarding to the MME (2) and in some cases are interpreted by the eNB.

Depending upon configuration, the MME may initiate a reauthentication of the UE/USIM before

processing the Service Request (3).

The MME sends the eNB an S1AP: Initial Context Setup Request, which issues the commands that re-

establish physical resources for the stored bearer contexts on the S1 interface between the UE and theS-GW (4). The eNB allocates radio resources (5) on the air interface and informs the UE. Uplink traffic is

then able to flow (6). The eNB confirms these actions with an S1AP: Initial Context Setup Complete

message (7).

The MME instructs the S-GW to establish its end of the S1-U tunnels using the Update Bearer Request

message (8). If the PDN-GW has requested updates regarding the UE’s location, the S-GW will pass this

on in an Update Bearer Request (9). After the PDN-GW and S-GW return Update Bearer Responses,

data can begin to flow on the downlink (9, 10 and 11).

Further Reading: 3GPP TS 23.401:5.3.4

LTE Operation

Page 24: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 24/32

UE eNB MME S-GW PDN-GW HSSPCRF

Trigger event

1. Request Bearer Resource

Modification

2. Request Bearer Resource

Modification

3. PCC Lookup

Optional Stage

4. Existing TFT modified, new TFT or Bearer activated or existing TFT or Bearer deactivated

LT3600/v3.16.18 © Wray Castle Limited

Handling Additional Traffic Flows

If a UE determines that there is a requirement to establish a traffic flow aggregate (which may contain

one or more SDFs) to a new AF (Application Function) destination – in response to a user interface

request, for example – it will transmit a Request Bearer Resource Modification to the MME. If the UE had

been in Idle Mode when it made this determination it will first send a Service Request to reactivate the

existing bearers.

The MME forwards the request to the S-GW currently dealing with the UE’s EPS Bearer(s), which in turn

forwards it to the appropriate PDN-GW. If dynamic PCC is in use, the PDN-GW interacts with the PCRF

to determine how best to deal with the request: if static PCC is in use then the PDN-GW makes the

determination itself.

The Modification request includes the required QoS, the EPS Bearer ID and a TAD (Traffic Aggregate

Descriptor), which describes the modification function to be performed (add, modify or delete) and the

SDF 5-tuple details that enable the PCRF to build a packet filter for the flow. The PCC function will

evaluate the request and either accept or reject it. Accepted requests result in new or updated packet

filters.

In the case of a new traffic flow that is to be added to an existing bearer, the PCC function will add anadditional packet filter to the TFT (Traffic Flow Template) related to the bearer over which the flow will

travel. If the addition of the new flow alters the bearers QoS requirements the adjustment will be

communicated to other elements using the Update Bearer Request process.

In addition to UE-initiated Bearer Modification the EPC also supports PDN-GW-initiated Bearer 

Modification; HSS-initiated Bearer QoS Modification and MME and PDN-GW initiated Bearer 

Deactivation.

Further Reading: 3GPP TS 23.401:5.4

LTE/SAE Engineering Overview

Page 25: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 25/32

UE eNB MME S-GW PDN-GW HSSPCRF

1. Trigger event

2. Request Bearer 

Resource Modification 3. Request Bearer 

Resource Modification

4. PCC Lookup

Optional Stage

5. Create Dedicated

Bearer Request

6. Bearer Setup Request/

Session Management Request7. RRC Conn

Reconfig

7. RRC Conn

Reconfig

Complete8. Bearer Setup

Response

9. Direct Transfer 

10. Session Management

Response11. Create Dedicated

Bearer Response 12. IP-CAN Session

Modified

Data Flow

LT3600/v3.1 6.19© Wray Castle Limited

Dedicated Bearer Creation

If PCC decides that a new traffic flow is incompatible with any of the UE’s existing bearers it may decide

that a new Dedicated Bearer is required, in which case it will instruct the PDN-GW to issue a Create

Dedicated Bearer Request.

The stages of this process are outlined in the diagram.

Further Reading: 3GPP TS 23.401:5.4.1

LTE Operation

Page 26: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 26/32

UEHome

P-CSCF

HomeS-CSCF Destination IMS/UEHome

PDN-GW

Optional Stage

Trigger event

1. Invite

2. Invite3. Invite

4. Session Progress

Edit4. Session Progress

Edit4. Session Progress

5. Provisional

 Acknowledgement5. PRACK

5. PRACK

Resource

 Allocation

6. 200 OK

6. 200 OK

6. 200 OK

LT3600/v3.16.20 © Wray Castle Limited

IMS Connection Establishment

IMS connection establishment is the responsibility of SIP. The EPS default bearer is established to a

home network PDN-GW and maintained mainly to provide a path for SIP messaging between a UE and

its serving I-CSCF.

Consider an example SIP flow between a roaming UE and its home S-CSCF during which a media

session to a distant IMS-connected UE is initiated. Not all network elements involved in the processhave been shown.

In response to an instruction received via the user interface, the originating UE initiates the session by

transmitting a Service Request to reactivate its bearers followed by a SIP Invite message to the current

I-CSCF (1). The Invite message contains an SDP payload, which describes the type of connection the

originating UE wishes to establish with the destination UE.

The I-CSCF passes the message on to the assigned S-CSCF for authorization (2). The S-CSCF

discovers the called party’s home network and passes the Invite to an I-CSCF in that network for 

forwarding to the S-CSCF and the destination UE (3).

Once discovered, the destination UE inspects the SDP payload and determines if it can support thetype of service and QoS parameters specified. A Session Progress message is returned to the

originating UE containing the IP address of the distant terminal and a response to the SDP parameters

(4).

Each CSCF in the return path is able to approve or edit the SDP response so that the eventual media

session’s parameters match the capabilities of the busiest link in the chain.

The originating UE returns a PRACK (Provisional Acknowledgement), which confirms the parameters of 

the media session (5). This triggers the reservation of resources for the distant UE, which it confirms

with a 200 OK message (6).

Further Reading: 3GPP TS 23.228:5.4

LTE/SAE Engineering Overview

Page 27: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 27/32

UEHome

P-CSCFHome

S-CSCF Destination IMS/UEHomePDN-GW

VisitedMME

Optional Stage

7. Resource Bearer 

Resource Modification

8. Update8. Update

8. Update

9. Ringing

9. Ringing9. Ringing

Exchange of PRACK & 200 OK

 Answer 

11. 200 OK11. 200 OK

Resources

Committed

11. 200 OK

Media Flow

LT3600/v3.1 6.21© Wray Castle Limited

IMS Connection Establishment (continued)

Once confirmed, the originating UE may issue a Request Bearer Resource Modification to the MME to

trigger a modification of the default bearer, or possibly the establishment of a new dedicated bearer (7).

 An Update message is sent to the distant network to confirm that a bearer with the required QoS is

reserved (8).

 At this point the distant UE informs its user of the requested session and returns the Ringing indication to

the originating end (9).

When the called party answers, the distant UE sends a 200 OK message (11) (which, technically, is

issued in response to the original Invite message); the I-CSCFs instruct the PDN-GWs to release the

resources previously reserved for the session and data begins flowing directly between the UEs without

travelling through the IMS.

The mobile-terminated scenario follows the same procedure as mobile-originated procedure except it

begins with a SIP Invite message being sent to the terminating UE, which may result in the UE being

paged and a network-triggered Service Request to reactivate its default bearer from idle mode.

From that point onwards it can exchange SIP messages with the originating UE via its current

I-CSCF.

Further Reading: 3GPP TS 23.228:5.4

LTE Operation

Page 28: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 28/32

Intra-E-UTRAN Inter-S-GW Inter-MMEInter-system Non-3GPP

LT3600/v3.16.22 © Wray Castle Limited

Connected Mode Procedures

Mobility management functions related to UEs in the ECM-CONNECTED state with active EPS Bearers

and service data flows can be summarized as follows:

intra-E-UTRAN handover 

intra-E-UTRAN handover with S-GW relocation

intra-E-UTRAN handover with MME relocationInter-RAT handover 

E-UTRAN-Non-3GPP Access Handover 

Further Reading: 3GPP TS 23.401:5.5

LTE/SAE Engineering Overview

Page 29: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 29/32

UE SourceeNB

MME S-GW PDN-GWTargeteNB

1. Uplink and downlink data flow

Optional Stage

2. Handover Preparation

2. Handover Execution including new S1 tunnel creation

3. X2 Direct Forwarding

3. Uplink Data

4. Path Switch

Request 5. User Plane

Update Request

6. UE locationinformation updated

7. User Plane

Update Response

8. Downlink Data

9a. End Markers

9b. End Markers forwarded,

X2 data forwarding ends 10. Path Switch

Request Ack11. Release

Resources

LT3600/v3.1 6.23© Wray Castle Limited

Intra-E-UTRAN Handover (X2-based)

In this scenario a UE with active EPS bearers initiates the inter-eNB cell handover procedure when both

source and target eNBs are associated with the serving MME and S-GW and an X2 path can be

established between them.

 At the start of the process the UE is connected to the E-UTRAN and is taking neighbour cell

measurements (1). Traffic may or may not be flowing over the connected EPS Bearers. A neighbour cellachieves the criteria necessary for the UE to initiate handover, which is effected by the source and target

eNBs without core network involvement beyond the establishment of S1 resources towards the target

eNB (2).

Once the handover is complete the source eNB forwards any further downlink traffic received for the UE

to the target eNB either directly via the X2 interface (3); this is termed Direct Forwarding. Uplink traffic

travels from the target eNB to the S-GW via the newly established tunnel. The target eNB sends a Path

Switch Request to the MME informing it of the handover (4).

The MME determines that the existing S-GW is still capable of serving the UE and instructs it to switch

the Downlink user plane over to the tunnel created towards the new cell using a User Plane Update

Request message (5). If the PDN-GW has indicated that needs to be kept informed of the UE’s location(for variable charging purposes), the S-GW informs it using an Update Bearer Request (6).

The S-GW realigns the tunnel carrying the EPS bearer(s) to point to the target eNB and sends

confirmation to the MME that the path has been switched successfully (7); both uplink and downlink

traffic now travels over the new S1 tunnels (8). The S-GW sends ‘end marker’ packets to the source eNB

to confirm that the path has been switched, which are forwarded to the target eNB to indicate that X2

forwarding will cease (9).

The MME confirms the procedure to the new eNB with the Path Switch Request Ack message (10) and it

in turn confirms the handover to the old eNB using the Release Resource message (11).

Further Reading: 3GPP TS 23.401:5.5.1

LTE Operation

Page 30: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 30/32

UE SourceeNB

SourceS-GW

PDN-GWTargetRNC

TargetMMESGSN

Data Flow

Optional Stage

1. Handover decision

2. Handover Required

3. Forward Relocation

Required

4. Create Bearer Request/Response

5. Relocation Request

6. Relocation Request Ack

7. Forward Relocation

Response

8. Create Bearer Request/Response

LT3600/v3.16.24 © Wray Castle Limited

Inter-RAT HO Preparation

The example provided below is for handover of active traffic connections between a home-network

E-UTRAN cell and a home-network 3G UTRAN cell without an S-GW change and with no S12 Direct

Tunnel support.

Following a UE’s decision to request a handover (1), but before that handover can be initiated, a certain

amount of preparation must take place.

The source eNB determines that the indicated handover candidate is an inter-RAT neighbour and

informs the source MME using the Handover Required S1AP message (2).

The source MME selects a target SGSN and issues a Forward Relocation Request via the S3 interface

(3).

If the target SGSN has an S4 interface to the existing S-GW it issues a Create Bearer Request to that

S-GW (4). If the target SGSN has no S4 interface to the serving S-GW (if they are in different PLMNs for 

example) then the target SGSN must select a local target S-GW, establish a bearer to it and then initiate

an S-GW Relocation between the source and target nodes. Inter-PLMN traffic travels from visited S-GW

to home PDN-GW, not visited SGSN to home PDN-GW.

The target SGSN instructs the target BSC/RNC to reserve radio resources for the UE in the target cell

using the Relocation Request message (5), and the target RNC responds with Relocation Request Ack

once this is complete (6).

Once the GERAN/UTRAN RAB and PDP context are in place, the target SGSN sends the Forward

Relocation Response to the source MME (7).

Further Reading: 3GPP TS 23.401:5.5.2

LTE/SAE Engineering Overview

Page 31: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 31/32

UE SourceeNB

SourceS-GW

PDN-GWTargetRNC

TargetMMESGSN

Data Flow

Optional Stage

9. Handover Command

10a . HO from E-UTRAN

Command

Release and reconnect

10b. HO to UTRAN

Complete11a. Downlink Data via Direct Forwarding (eNB-RNC)

Direct Forwarding

11b. Downlink Data via Indirect Forwarding

Indirect Forwarding

11a/b. Downlink Data

11c. Uplink Data

12. Relocation Complete

13. Forward Relocation Complete

LT3600/v3.1 6.25© Wray Castle Limited

Inter-RAT Handover Execution

The UE remains connected to the source E-UTRAN cell during the preparation phase, but once

alternative resources are in place the source MME issues a Handover Command to the source eNB (9),

which in turn sends a HO from E-UTRAN Command to the UE (10a). This message encapsulates a

‘transparent container’ that travels between the target RNC and the UE, which contains details of the

resources that have been reserved for the UE in the target cell.

The UE releases its E-UTRAN resources and performs the access activities required to establish

connectivity in the target UTRAN cell and sends the Handover to UTRAN Complete message (10b) in the

new cell to confirm the connection.

 As the tunnel from the PDN-GW has not yet been realigned, Downlink packet traffic destined for the UE

is still being sent to the source eNB and must be forwarded to the target RNC. Direct forwarding between

the source eNB and target RNC (11a) uses an unnamed forwarding interface. Indirect Forwarding travels

between source eNB, source S-GW, target SGSN and target UTRAN (11b). Once the handover is

complete, the UE can send traffic on the uplink via the PDP Context that has been created towards the

SGSN, from where it will be forwarded to the S-GW and on to the PDN-GW (11c).

Once the UE has successfully connected to the UTRAN cell the target RNC sends a RelocationComplete message (12) to the target SGSN, which in turn informs the source MME using the Forward

Relocation Complete message (13).

Further Reading: 3GPP TS23.401:5.5.2

LTE Operation

Page 32: LT3600 S6 LTE Operation

7/27/2019 LT3600 S6 LTE Operation

http://slidepdf.com/reader/full/lt3600-s6-lte-operation 32/32

UE SourceeNB

SourceS-GW

PDN-GWTargetRNC

TargetMMESGSN

14. Update Bearer Request/Response

Optional Stage

15. Data Flow

16. Routing Area Update

17. Release Resources 17. Delete Bearer 

Request/Response

18. Delete Bearer 

Request/Response(if Indirect

Forwarding used)

Direct Forwarding

Indirect Forwarding

Inter-RAT HO Execution (continued)

The target SGSN issues an Update Bearer Request to the S-GW (14), which initiates the path switch.

 Any indirect forwarding will cease and downlink traffic will travel from the S-GW directly to the target

SGSN (15). If the relocation involved a change in S-GW the PDN-GW would also need to be informed so

that it could realign its end of the EPS bearer tunnel.

The UE performs a RAU (Routing Area Update) (16) and the target SGSN may decide to instruct the UEto reauthenticate.

The MME started a timer when the handover initiated; when it expires it instructs the source S-GW and

source eNB to release any resources and contexts stored for the UE (17).

If indirect forwarding was employed, the source S-GW and SGSN will release any tunnel resources that

were created (18).

Traffic is now flowing to the UE from the PDN-GW, via an S-GW to an SGSN and onwards via the

UTRAN.

LTE/SAE Engineering Overview