80
LTE/EPC Fundamentals

LTE-EPC

Embed Size (px)

DESCRIPTION

LTE Overview

Citation preview

Page 1: LTE-EPC

LTE/EPC Fundamentals

Page 2: LTE-EPC

2

Agenda

LTE Overview

LTE/EPC Network Architecture

LTE/EPC Network Elements

LTE/EPC Mobility & Session Management

LTE/EPC Procedure

LTE/EPS overview

Page 3: LTE-EPC

3

Agenda

Air Interface Protocols

LTE Radio Channels

Transport Channels and Procedure

LTE Physical Channels and Procedure

Page 4: LTE-EPC

LTE Overview

Page 5: LTE-EPC

5

Cellular Generations

• There are different generations as far as mobile communication is concerned:

– First Generation (1G)– Second Generation (2G)– 2.5 Generation (2.5G)– Third Generation (3G)– E3G (4G)– Fifth Generation(5G)

Page 6: LTE-EPC

6

History and Future of Wireless

data rates

< 1 Gbps

mobility

GSM/IS95

AMPS

WCDMA/cdma2000 HSPA LTE

802.11a/b/g802.11a/b/g

802.16a/d802.16a/d 802.16e802.16e

< 100 Mbps< 50 Mbps< 10 Mbps< 1 Mbps< 200 kbps

time2010200520001990

HIGH

LOW

2G3G 3G Enhacements 3G Evolution

802.11 802.11nWLAN Family

WiMAX Family1G

Page 7: LTE-EPC

7

3GPP Releases & Features

Page 8: LTE-EPC

8

Main LTE Requirements• Peak data rates of uplink/downlink 50/100 Mbps • Reduced Latency:

• Enables round trip time <10 ms• Ensure good level of mobility and security

• Optimized for low mobile speed but also support high mobile speed• Frequency flexibility and bandwidth scalability:

• with 1.25, 2.5, 5, 10, 15 and 20 MHz allocations• Improved Spectrum Efficiency:

• Capacity 2-4 times higher than with Release 6 HSPA• Efficient support of the various types of services, especially from the PS domain

• Packet switched optimized– Operation in FDD and TDD modes• Improved terminal power efficiency • Support for inter-working with existing 3GPP system and non-3GPP specified systems

Page 9: LTE-EPC

9

What is new in LTE?

– New radio transmission schemes:• OFDMA in downlink• SC-FDMA in uplink• MIMO Multiple Antenna Technology

– New radio protocol architecture:• Complexity reduction• Focus on shared channel operation, no dedicated channels anymore

– New network architecture: flat architecture:• More functionality in the base station (eNodeB)• Focus on packet switched domain

Page 10: LTE-EPC

10

What is new in LTE?

• Important for Radio Planning:– Frequency Reuse 1

No need for Frequency Planning Importance of interference control

– No need to define neighbour lists in LTE– LTE requires Physical Layer Cell Identity planning (504 physical layer cell IDs organised

into 168 groups of 3)– Additional areas need to be planned like PRACH parameters, PUCCH and PDCCH

capacity and UL Demodulation Reference Signal

Page 11: LTE-EPC

11

Reasons for changes

Time

Traffi

c vo

lum

e

New technology, interfaces, protocols

Simple low-cost architecture, seamless transition from old

technologies (smooth coexistence)

Quick time2market for new chipsets

OFDM, MIMO, large bandwidth, scalable PHY/RRM

Cooperation with chipset vendors

Flat LTE/SAE, co-location and migration concept

Page 12: LTE-EPC

12

Evolution Path to LTE

• Operator migration paths to LTE

>90 % of world radio access market migrating to LTE

Enabling flat broadband architecture

TD-SCDMAGSM /(E)GPRS

LTE

CDMA

I-HSPA

WCDMA /HSPA

TD-LTE

Page 13: LTE-EPC

LTE/EPC Network Architecture

Page 14: LTE-EPC

14

LTE/SAE Key Features – EUTRANEvolved NodeB• No RNC is provided anymore• The evolved Node Bs take over all radio management functionality.• This will make radio management faster and hopefully the network architecture simpler

IP transport layer• EUTRAN exclusively uses IP as transport layer

UL/DL resource scheduling• In UMTS physical resources are either shared or dedicated• Evolved Node B handles all physical resource via a scheduler and assigns them

dynamically to users and channels• This provides greater flexibility than the older system

Page 15: LTE-EPC

15

LTE/SAE Key Features – EUTRAN

QoS awareness• The scheduler must handle and distinguish different quality of service classes• Otherwise real time services would not be possible via EUTRAN• The system provides the possibility for differentiated service

Self configuration• Currently under investigation• Possibility to let Evolved Node Bs configure themselves• It will not completely substitute the manual configuration and optimization.

Page 16: LTE-EPC

Evolution of Network Architecture

Page 17: LTE-EPC

17

Evolution of Network Architecture

GGSN

SGSN

RNC

Node B (NB)

Direct tunnel

GGSN

SGSN

HSPA R7 HSPA R7 LTE R8

Node B + RNC Functionality

Evolved Node B (eNB)

GGSN

SGSN

RNC

Node B (NB)

HSPA R6

LTE

SAE GW

MME/SGSN

Page 18: LTE-EPC

18

LTE Network Architecture Evolution

Node B RNC SGSN GGSN

Internet

3GPP Rel 6 / HSPA

User planeControl Plane• Original 3G architecture.

• 2 nodes in the RAN.• 2 nodes in the PS Core Network.• Every Node introduces additional delay.• Common path for User plane and Control plane data.• Air interface based on WCDMA.• RAN interfaces based on ATM.• Option for Iu-PS interface to be based on IP

Page 19: LTE-EPC

19

LTE Network Architecture Evolution

Direct tunnel

3GPP Rel 7 / HSPA

Internet

Node B RNC

SGSNGGSN

User planeControl Plane

• Separated path for Control Plane and User Plane data in the PS Core Network.• Direct GTP tunnel from the GGSN to the RNC for User plane data: simplifies the Core Network and reduces signaling. • First step towards a flat network Architecture. • 30% core network OPEX and CAPEX savings with Direct Tunnel.• The SGSN still controls traffic plane handling, performs session and mobility management, and manages paging. • Still 2 nodes in the RAN.

Page 20: LTE-EPC

20

LTE Network Architecture Evolution

Direct tunnel

3GPP Rel 7 / Internet HSPA

Internet

Node B

SGSNGGSN

Node B(RNC Funct.) User plane

Control Plane

• I-HSPA introduces the first true flat architecture to WCDMA.• Standardized in 3GPP Release 7 as Direct Tunnel with collapsed RNC.• Most part of the RNC functionalities are moved to the Node B.• Direct Tunnels runs now from the GGSN to the Node B.• Solution for cost-efficient broadband wireless access.• Improves the delay performance (less node in RAN).• Deployable with existing WCDMA base stations.• Transmission savings

Page 21: LTE-EPC

21

LTE Network Architecture Evolution

Direct tunnel

3GPP Rel 8 / LTE

Internet

Evolved Node B

MMESAE GW

• LTE takes the same Flat architecture from Internet HSPA.• Air interface based on OFDMA.• All-IP network.• New spectrum allocation (i.e 2600 MHz band)• Possibility to reuse spectrum (i.e. 900 MHZ)

User planeControl Plane

Page 22: LTE-EPC

22

LTE Network Architecture Evolution - Summary

Node B RNC SGSN GGSN

Internet

3GPP Rel 6 / HSPA

Direct tunnel

3GPP Rel 7 / HSPA

Internet

Node B RNC

SGSNGGSN

Direct tunnel

3GPP Rel 7 / Internet HSPA

Internet

Node B

SGSNGGSN

Node B(RNC Funct.)

Direct tunnel

3GPP Rel 8 / LTE

Internet

Evolved Node B

MMESAE GW

Page 23: LTE-EPC

23

Terminology

EPS

EPC EPC - Evolved Packet Core

eUTRAN eUTRAN - Evolved UTRAN

EPS – Evolved Packet System

SAE - System Architecture Evolution

LTE - Long Term Evolution

IP Network

Page 24: LTE-EPC

24

Terminology – Interfaces----Logical view

EPC

S1S1 S1

X2 X2

eNodeBeNodeB eNodeB

Page 25: LTE-EPC

25

LTE/SAE Network Architecture

GGSN => Packet GatewaySGSN => Mobility server

BSCRNC

SGSN/ MME

GGSN/ P/S-GW

GSM, WCDMA

IP networks

LTE

SAE

MME = Mobility Management EntityP/S-GW = PDN/Serving gateway

Page 26: LTE-EPC

26

Overall EPS Architecture

Basic EPS entities & interfaces

Page 27: LTE-EPC

LTE/EPC Network Elements

Page 28: LTE-EPC

28

LTE/SAE Network Architecture Subsystems• LTE/SAE architecture is driven by the goal to optimize the system for packet

data transfer.• No circuit switched components • New approach in the inter-connection between radio access network and core

network

IMS/PDN

EPC

eUTRAN

LTE-UE

Page 29: LTE-EPC

29

EPS Architecture - Subsystems

LTE or EUTRAN SAE or EPC

Page 30: LTE-EPC

30

LTE/SAE Network Elements

LTE-UE

Evolved UTRAN (E-UTRAN)

MME S10

S6a

ServingGateway

S1-U

S11

PDNGateway

PDN

Evolved Packet Core (EPC)

S1-MME PCRF

S7Rx+

SGiS5/S8

EvolvedNode B(eNB)

cell

X2

LTE-Uu

HSS

MME: Mobility Management Entity

PCRF:Policy & Charging Rule Function

SAEGateway

Page 31: LTE-EPC

31

Evolved Node B (eNB)– RNC is not a part of E-UTRAN

• Completely removed from the architecture• eNB is the only one entity in E-UTRAN

– eNB main functions:• Serving cell (or several cells)• Provisioning of radio interface to UEs (eUu)• Physical layer (PHY) and Radio Resource Management (RRM)• Exchange of crucial cell-specific data to other base stations (eNBs) eNB

RNC

eNB

X2

RRM (bearer control, mobility control, scheduling, etc.)

ROHC (Robust Header Compression)

MME selection when no info provided from UE

User Plane data forwarding to SAE-GW

Transmission of messages coming from MME(i.e. broadcast, paging, NAS)

Ciphering and integrity protection for the air interface

Collection and evaluation of the measurements

Page 32: LTE-EPC

32

X2 interface

• Newly introduced E-UTRAN interface– Inter eNB interface

• X2 main functions:– Provisioning of inter eNB direct connection– Handover (HO) coordination without EPC involvement

Data packets buffered or coming from SAE-GW to the source eNB are forwarded to the target eNB

Improved HO performance (e.g. delay, packet loss ratio)– Load balancing

Exchange of Load Indicator (LI) messages between eNBs to adjust RRM parameters and/or manage Inter Cell Interference Cancellation (ICIC)

• X2 interface is not required– Inter eNB HO can be managed by MME

Source eNB <-> target eNB tunnel is established using MME

eNB

eNB

X2eNB

X2

X2

Page 33: LTE-EPC

33

EvolvedNode B(eNB)

MME

ServingGateway

S1-U

S1-MME

S11

HSS

S6aMME Functions

Non-Access-Stratum (NAS) Security (Authentication, integrity Protection)

Idle State Mobility Handling

Tracking Area updates

Radio Security Control

Trigger and distribution of Paging Messages to eNB

Roaming Control (S6a interface to HSS)

Inter-CN Node Signaling (S10 interface), allows efficient inter-MME tracking area updatesand attaches

Signalling coordination for SAE Bearer Setup/Release

Subscriber attach/detach

Control plane NE in EPC

Mobility Management Entity (MME)

• It is a pure signaling entity inside the EPC.• SAE uses tracking areas to track the position of idle UEs. The basic principle is identical to location or routing areas from 2G/3G. • MME handles attaches and detaches to the SAE system, as well as tracking area updates • Therefore it possesses an interface towards the HSS (home subscriber server) which stores the subscription relevant information and the currently assigned MME in its permanent data base.• A second functionality of the MME is the signaling coordination to setup transport bearers (SAE bearers) through the EPC for a UE.• MMEs can be interconnected via the S10 interface

Page 34: LTE-EPC

34

EvolvedNode B(eNB)

MME

Serving SAEGateway

S1-U

S1-MME

S5/S8

PDNGateway

S11

S6a

Serving SAE Gateway

• The serving gateway is a network element that manages the user data path (SAE bearers) within EPC.• It therefore connects via the S1-U interface towards eNB and receives uplink packet data from here and transmits downlink packet data on it. • Thus the serving gateway is some kind of distribution and packet data anchoring function within EPC.• It relays the packet data within EPC via the S5/S8 interface to or from the PDN gateway.• A serving gateway is controlled by one or more MMEs via S11 interface.

Local mobility anchor point:Switching the user plane path to a new eNB in case of Handover

Idle Mode Packet Buffering and notification to MME

Packet Routing/Forwarding between eNB, PDN GW and SGSN

Lawful Interception support

Serving Gateway Functions

Mobility anchoring for inter-3GPP mobility. This is sometimes referred to as the 3GPP Anchor function

Page 35: LTE-EPC

35

Packet Data Network (PDN) SAE Gateway

• The PDN gateway provides the connection between EPC and a number of external data networks. • Thus it is comparable to GGSN in 2G/3G networks.• A major functionality provided by a PDN gateway is the QoS coordination between the external PDN and EPC.• Therefore the PDN gateway can be connected via S7 to a PCRF (Policy and Charging Rule Function).

MME

ServingGateway

S5/S8

PDN SAEGateway

PDNSGi

PCRFS7 Rx+

S11

S6a

Policy Enforcement (PCEF)

Per User based Packet Filtering (i.e. deep packet inspection)

Charging & Lawful Interception support

PDN Gateway Functions

IP Address Allocation for UE

Packet Routing/Forwarding between Serving GW and external Data Network

Mobility anchor for mobility between 3GPP access systems and non-3GPP access systems. This is sometimes referred to as the SAE Anchor function

Packet screening (firewall functionality)

Page 36: LTE-EPC

36

Policy and Charging Rule Function (PCRF)

• The PCRF major functionality is the Quality of Service (QoS) coordination between the external PDN and EPC.• Therefore the PCRF is connected via Rx+ interface to the external Data network (PDN)• This function can be used to check and modify the QoS associated with a SAE bearer setup from SAE or to request the setup of a SAE bearer from the PDN. •This QoS management resembles the policy and charging control framework introduced for IMS with UMTS release 6.

MME

ServingGateway

S5/S8

PDN SAEGateway

PDNSGi

PCRFS7 Rx+

S11

S6a

Charging Policy: determines how packets should be accounted

QoS policy negotiation with PDN

PCRF: Policy & Charging Rule Function

Page 37: LTE-EPC

37

Home Subscriber Server (HSS)

• The HSS is already introduced by UMTS release 5.• With LTE/SAE the HSS will get additionally data per subscriber for SAE mobility and service handling. •Some changes in the database as well as in the HSS protocol (DIAMETER) will be necessary to enable HSS for LTE/SAE. •The HSS can be accessed by the MME via S6a interface.

Permanent and central subscriber database

HSS Functions

Stores mobility and service data for every subscriber

MME

HSS

S6a

Contains the Authentication Center(AuC) functionality.

Page 38: LTE-EPC

38

LTE Radio Interface and the X2 Interface

LTE-UuAir interface of EUTRAN Based on OFDMA in downlink and SC-FDMA in uplinkFDD and TDD duplex methodsScalable bandwidth 1.4MHz to currently 20 MHzData rates up to 100 Mbps in DL MIMO (Multiple Input Multiple Output) is a major component although optional.

X2Inter eNB interfaceHandover coordination without involving the EPCX2AP: special signalling protocolDuring HO, Source eNB can use the X2 interface to forward downlink packets still buffered or arriving from the serving gateway to the target eNB.This will avoid loss of a huge amount of packets during inter-eNB handover.

(E)-RRC User PDUsUser PDUs User PDUsUser PDUs

PDCP (ROHC = RFC 3095)

..

RLC

MAC

LTE-L1 (FDD/TDD-OFDMA/SC-FDMA)

TS 36.300

eNB

LTE-Uu

eNB

X2

User PDUsUser PDUs

GTP-U

UDP

IP

L1/L2

TS 36.424

X2-UP(User Plane)

X2-CP(Control Plane)

X2-AP

SCTP

IP

L1/L2TS 36.421

TS 36.422

TS 36.423

TS 36.421

TS 36.420[currently also in TS 36.300 §20]

Page 39: LTE-EPC

39

X2 Handover

Page 40: LTE-EPC

40

1

2

3

EUTRAN & EPC connected with S1-flex

Several cases

eNB 1 Single S1-MME Single S1-U

eNB 2 Single S1-MME Multiple S1-US1Flex-U

eNB 3 Multiple S1-ME S1Flex Single S1-U

Page 41: LTE-EPC

LTE/EPC Mobility & Session Management

Page 42: LTE-EPC

42

LTE/SAE Mobility Areas

•Two areas are defined for handling of mobility in LTE/SAE:

•The Cell •identified by the Cell Identity. The format is not standardized yet.

•Tracking Area (TA)•It is the successor of location and routing areas from 2G/3G.•When a UE is attached to the network, the MME will know the UE’s position on tracking area level. •In case the UE has to be paged, this will be done in the full tracking area. •Tracking areas are identified by a Tracking Area Identity (TAI).

Page 43: LTE-EPC

43

LTE/SAE Mobility Areas

• Tracking Areas

S-eNBTAI3

TAI3TAI3

TAI3

TAI3TAI3

TAI3

MME

HSS

eNB

TAI2

TAI2TAI2

TAI2

TAI2

TAI2TAI2

TAI2

TAI1

TAI1TAI1

TAI1

TAI1 eNB 1 2

MME

3

Cell Identity

Tracking Area

Page 44: LTE-EPC

44

Tracking Areas Overlapping

S-eNBTAI3

TAI3TAI3

TAI3

TAI3TAI3

TAI3

MME

HSS

eNB

TAI2

TAI2TAI2

TAI2

TAI2

TAI2TAI2

TAI2

TAI1-2TAI1

TAI1

TAI1 eNB 1 2

MME

3

Cell Identity

1.- Tracking areas are allowed to overlap: one cell can belong to multiple tracking

areas

TAI1-2

2.- UE is told by the network to be in several tracking areas simultaneously. Gain: when the UE enters a new cell, it checks which tracking areas the new cell is part of. If this TA is on UE’s TA list, then no tracking area update is necessary.

Page 45: LTE-EPC

45

Tracking Areas: Use of S1-flex Interface

TAI1-2

S-eNBTAI2

TAI2TAI2

TAI3

TAI3TAI3

TAI3

MME

HSS

eNB

TAI2

TAI2TAI2

TAI2

TAI2

TAI2TAI2

TAI2

TAI1

TAI1

TAI1eNB

S-MME

TAI1-2 MME Pooling:

several MME handle the

same tracking area

Cell Identity

321

1 2 3

Page 46: LTE-EPC

46

UE Identifications

• IMSI: International Mobile Subscriber Identity

• S-TMSI: SAE Temporary Mobile Subscriber Identity

• C-RNTI: Cell Radio Network Temporary Identity

• S1-AP UE ID: S1 Application Protocol User Equipment Identity

Page 47: LTE-EPC

47

UE Identifications: IMSI•IMSI:

• International Mobile Subscriber Identity.

• Used in SAE to uniquely identify a subscriber world-wide.

• Its structure is kept in form of MCC+MNC+MSIN:MCC: mobile country code MNC: mobile network codeMSIN: mobile subscriber identification number

•A subscriber can use the same IMSI for 2G, 3G and SAE access. •MME uses the IMSI to locate the HSS holding the subscribers permanent registration data for tracking area updates and attaches.

IMSI

MCC MNC MSIN

3 digits 2 digits 10 digits

Page 48: LTE-EPC

48

UE Identification: S-TMSI

• S-TMSI: • SAE Temporary Mobile Subscriber Identity• It is dynamically allocated by the serving MME (S-MME).• Its main purpose is to avoid usage of IMSI on air.• Internally the allocating MME can translate S-TMSI into IMSI and vice versa. • Whether the S-TMSI is unique per MME.• In case the S1flex interface option is used, then the eNB must select the right MME for

a UE. This is done by using some bits of the S-TMSI to identify the serving MME of the UE. This identifier might be a unique MME ID or a form of MME color code. Under investigation

S-TMSI

MME-ID orMME color code

32 bits

Page 49: LTE-EPC

49

UE Identifications: C-RNTI

C-RNTI:• Cell Radio Network Temporary Identity • C-RNTI is allocated by the eNB serving a UE when it is in active mode (RRC_CONNECTED)•This is a temporary identity for the user only valid within the serving cell of the UE.•It is exclusively used for radio management procedures.•X-RNTI identifications under investigation.

Page 50: LTE-EPC

51

UE Identifications Summary

IMSI International Mobile Subscriber IdentityS-TMSI S-Temporary Mobile Subscriber IdentityC-RNTI Cell Radio Network Temporary IdentityS-MME Serving MMES-eNB Serving E-Node BTAI Tracking Area Identity (MCC+MNC+TAC)

S-TMSI

MME-ID orMME color code

C-RNTI

eNB S1-AP UE-ID | MME S1-AP UE-ID

MCC

IMSIMNC MSIN

S-eNBTAI2TAI2

TAI2TAI3

TAI3TAI3

TAI3

MME

HSS

eNB

TAI2TAI2

TAI2TAI2

TAI2

TAI2TAI2

TAI2

TAI1TAI1

TAI1TAI1

TAI1eNB

1 2

S-MME

32

Cell IdentityMME Identity

3

1

Page 51: LTE-EPC

52

Terminology for 3G & LTE: Connection & Mobility Management

3G LTEConnection Management

GPRS Attached EMM RegisteredPDP Context EPS Bearer

Radio Access Bearer Radio Bearer + S1 BearerMobility Management

Location Area Not Relevant (no CS core)Routing Area Tracking Area

Handovers (DCH) and Cell reselections (PCH) when RRC

connected

Handover when RRC connected

RNC hides mobility from core network

Core Network sees every handover

Page 52: LTE-EPC

53

LTE Mobility & Connection States

•There are two sets of states defined for the UE based on the information held by the MME.

•These are:- EPS* Mobility Management (EMM) states- EPS* Connection Management (ECM) states

*EPS: Evolved Packet System

Page 53: LTE-EPC

54

EPS Mobility Management (EMM) states

•EMM-DEREGISTERED: •In this state the MME holds no valid location information about the UE•MME may keep some UE context when the UE moves to this state (e.g. to avoid the need for Authentication and Key Agreement (AKA) during every attach procedure)•Successful Attach and Tracking Area Update (TAU) procedures lead to transition to EMM-REGISTERED

•EMM-REGISTERED: •In this state the MME holds location information for the UE at least to the accuracy of a tracking area•In this state the UE performs TAU procedures, responds to paging messages and performs the service request procedure if there is uplink data to be sent.

Page 54: LTE-EPC

55

EPS Mobility Management (EMM) states

EMM deregistered

EMM registered

Attach

Detach

Page 55: LTE-EPC

56

EPS Connection Management (ECM) and LTE Radio Resource Control States•UE and MME enter ECM-CONNECTED state when the signalling connection is established between UE and MME

•UE and E-UTRAN enter RRC-CONNECTED state when the signalling connection is established between UE and E-UTRAN

RRC IdleRRC

Connected

ECM IdleECM

Connected

Page 56: LTE-EPC

57

EPS Connection Management (ECM) states

•ECM-IDLE:

•In this state there is no NAS signalling connection between the UE and the network and there is no context for the UE held in the E-UTRAN.•The location of the UE is known to within the accuracy of a tracking area •Mobility is managed by tracking area updates.

•ECM-CONNECTED:

•In this state there is a signalling connection between the UE and the MME which is provided in the form of a Radio Resource Control (RRC) connection between the UE and the E-UTRAN and an S1 connection for the UE between the E-UTRAN and the MME.•The location of the UE is known to within the accuracy of a cell.•Mobility is managed by handovers.

Page 57: LTE-EPC

58

RRC States•RRC_IDLE:

– No signalling connection between the UE and the E-UTRAN, i.e. PLMN Selection.

– UE Receives system information and listens for Paging.– Mobility based on Cell Re-selection performed by UE.– No RRC context stored in the eNB.– RACH procedure used on RRC connection establishment

•RRC_CONNECTED:– UE has an E-UTRAN RRC connection.– UE has context in E-UTRAN (C-RNTI allocated).– E-UTRAN knows the cell which the UE belongs to.– Network can transmit and/or receive data to/from UE.– Mobility based on handovers– UE reports neighbour cell measurements

Page 58: LTE-EPC

59

EPS Connection Management

• ECM Connected= RRC Connected + S1 Connection

eNB

MME

UE

RRC Connection S1 Connection

ECM Connected

Page 59: LTE-EPC

60

EMM & ECM States Transitions

EMM_Deregistered

ECM_Idle

Power On

Registration (Attach)

EMM_Registered

ECM_Connected

• Allocate C-RNTI, S_TMSI• Allocate IP addresses• Authentication• Establish security context

• Release RRC connection • Release C-RNTI• Configure DRX for paging

EMM_Registered

ECM_Idle

Release due to Inactivity

•Establish RRC Connection•Allocate C-RNTI

New TrafficDeregistration (Detach)Change PLMN

• Release C-RNTI, S-TMSI• Release IP addresses

Timeout of Periodic TA Update

• Release S-TMSI• Release IP addresses

Page 60: LTE-EPC

61

EMM & ECM States Summary

EMM_Deregistered

ECM_Idle

Network Context:• no context exists

Allocated IDs:• IMSI

UE Position:• unknown to network

Mobility:• PLMN/cell selection

UE Radio Activity:• none

EMM_Registered

ECM_Connected

Network Context:• all info for ongoing transmission/reception

Allocated IDs:• IMSI, S-TMSI per TAI• 1 or several IP addresses• C-RNTI

UE Position:• known on cell level

Mobility:• NW controlled handover

EMM_Registered

ECM_Idle

Network Context:• security keys• enable fast transition to ECM_CONNECTED

Allocated IDs:• IMSI, S-TMSI per TAI• 1or several IP addresses

UE Position:• known on TA level (TA list)

Mobility:• cell reselection

Page 61: LTE-EPC

62

LTE/SAE Bearer•The main function of every mobile radio telecommunication network is to provide subscribers with transport bearers for their user data.

•In circuit switched networks users get a fixed assigned portion of the network’s bandwidth.

•In packet networks users get a bearer with a certain quality of service (QoS) ranging from fixed guaranteed bandwidth down to best effort services without any guarantee.

•LTE/SAE is a packet oriented system

LTE/SAEBearer

PDN GW

UE

Page 62: LTE-EPC

63

SAE Bearer Architecture• SAE Bearer spans the complete network, from UE over EUTRAN and EPS up to the

connector of the external PDN. • The SAE bearer is associated with a quality of service (QoS) usually expressed by a label

or QoS Class Identifier (QCI).

cellS1-U

LTE-Uu

S5PDN

Sgi

eNB ServingGateway

PDNGateway

End-to-End Service

SAE Bearer Service (EPS Bearer) External BearerService

SAE Radio Bearer Service (SAE RB) SAE Access Bearer Service

Physical Radio Bearer Service S1 Physical Bearer Service

E-UTRAN EPC PDN

S5/S8 Bearer Service

Page 63: LTE-EPC

64

SAE Bearer Sections

• S5/S8 bearer –Between the PDN GW to SAE GW.–This is usually a GTP or MIP (Mobile IP) tunnel between the two network elements.

• SAE Access Bearer – Between eNB and SAE GW.– The SAE Access Bearer is implemented using the 2G/3G GTP (GPRS Tunneling

Protocol) protocol which builds a GTP tunnel between eNB and SAE GW. – The setup of this SAE Access Bearer is managed by the MME. – SAE GW and eNB do not directly exchange signaling to create it.

• Radio bearers – Between UE and eNB. – The eNB connects a radio bearer internally with the associated SAE access bearer

on S1-U interface. – The mapping of radio bearers to physical resources on the air interface is the major

task of the eNB scheduler.

Page 64: LTE-EPC

65

SAE Bearer Establishment

• It can be establish by MME or P-GW• MME:

– This happens typically during the attach procedure of an UE. Depending on the information coming from HSS, the MME will set up an initial SAE bearer, also known as the default SAE bearer. This SAE bearer provides the initial connectivity of the UE with its external data network.

• PDN Gateway: – The external data network can request the setup of a SAE bearer by issuing this

request via PCRF to the PDN gateway. This request will include the quality of service granted to the new bearer.

cellS1-U

UE

S5PDN

Sgi

eNB

ServingGateway

PDNGateway

SAE Bearer Service (EPS Bearer) External BearerService

MME

S1-MMES11

Page 65: LTE-EPC

66

QoS Class Indentifier (QCI) Table in 3GPP

GBR1

Guarantee Delay budget Loss rate ApplicationQCI

GBR

100 ms 1e-2 VoIP

2

GBR

150 ms 1e-3 Video call

3

GBR

300 ms 1e-6 Streaming

4

Non-GBR 100 ms 1e-6 IMS signalling5

Non-GBR 100 ms 1e-3 Interactive gaming6

Non-GBR 300 ms 1e-6TCP protocols : browsing, email, file download

7

Non-GBR 300 ms 1e-68

Non-GBR 300 ms 1e-69

Priority

2

4

5

1

7

6

8

9

50 ms 1e-3 Real time gaming3

Operators can define more QCIs

Several bearers can be aggregated together if they have the same QCI

Page 66: LTE-EPC

LTE/EPC Procedures

Page 67: LTE-EPC

68

Attach

MME

HSSPCRFUE eNB new

MME

ServingGateway(SGW)

PDNGateway

Attach Request

S-TMSI/IMSI,old TAI, IP address allocation

Authentication Request

Authentication Response

Update Location

Authentication Vector Request (IMSI)

Insert Subscriber Data

IMSI, subscription data = default APN, tracking area restrictions, …

Insert Subscriber Data Ack

Update Location Ack

EMM_Deregistered

Authentication Vector Respond

RRC_Connected

ECM_Connected

Page 68: LTE-EPC

69

Attach cont….

Update Bearer Response

Update Bearer Request

IP/TEID of eNB for S1u

Attach Complete

IP/TEID of eNB for S1u

RB Est. Resp.

Includes Attach Complete

Create Def. Bearer Req.

MMEHSSPCRF

UE eNB newMME

ServingGateway(SGW)

PDNGateway

S-TMSI, security info, PDN address, …,IP/TEID of SGW-S1u (only for eNB)

Create Def. Bearer Rsp.

IP/TEID of SGW-S1u, PDN address, QoS, …

Create Def. Bearer Rsp.

PDN address, IP/TEID of PDN GW,QoS according PCRF

select SAE GWCreate Default Bearer Request

IMSI, RAT type, default QoS, PDN address info

IMSI, …, IP/TEID of SGW-S5

Attach Accept

RB Est. Req.

Includes Attach Accept

UL/DL Packet Data via Default EPS Bearer

PCRF Interaction

EMM_Registered

ECM_Connected

Page 69: LTE-EPC

70

S1 Release• After attach UE is in EMM Registered state.• The default Bearer has been allocated (RRC connected + ECM connected) even it may

not transmit or receive data• If there is a longer period of inactivity by this UE, then we should free these admission

control resources (RRC idle + ECM idle)• The trigger for this procedure can come from eNB or from MME.

RRC Connection Release

MME

S1 Release Requestcause

Update Bearer Request

release of eNB S1u resourcesUpdate Bearer Response

ServingGateway(SGW)

PDNGateway

S1 Release Command

cause

S1 Release Complete

RRC Connection Release Ack

EMM_Registered

ECM_Connected

S1 Signalling Connection ReleaseEMM_Registered

ECM_Idle

Page 70: LTE-EPC

71

Detach • Can be triggered by UE or by MME.• During the detach procedure all SAE bearers with their associated tunnels and

radio bearers will be deleted.

MME

NAS: Detach Accepted

Delete Bearer Request

Delete Bearer Response

EMM-Registered

ServingGateway(SGW)

PDNGateway

NAS Detach Request

switch off flag Delete Bearer Request

Delete Bearer Response

PCRF

S1 Signalling Connection Release

RRC_Connected

ECM_Connected

EMM-Deregistered

RRC_Connected + ECM Idle

Note: Detach procedure initiated by UE.

Page 71: LTE-EPC

72

Detach

Note: Detach procedure initiated by MME.

MME

NAS: Detach Accepted

Delete Bearer Request

Delete Bearer Response

EMM-Registered

ServingGateway(SGW)

PDNGateway

NAS Detach Request

switch off flag Delete Bearer Request

Delete Bearer Response

PCRF

S1 Signalling Connection Release

RRC_Connected

ECM_Connected

EMM-Deregistered

RRC_Connected + ECM Idle

Page 72: LTE-EPC

73

Service Request• From time to time a UE must switch from ECM_Idle to ECM_connected• The reasons for this might be UL data is available, UL signaling is pending (e.g.

tracking area update, detach) or a paging from the network was received.

MMEServingGateway(SGW)

PDNGateway

Paging

S-TMSI, TAI/TAI-list

Service Request

DL Packet DataDL Packet NotificationPaging

S-TMSI

S-TMSI, TAI, service type

Authentication Requestauthentication challenge

Authentication ResponseAuthentication response

RRC_Idle+ ECM_Idle

ECM_Connected

RRC_Connected

Page 73: LTE-EPC

74

Service Request

MME

Initial Context Setup Req.

Update Bearer Request

eNB-S1 IP/TEIDUpdate Bearer Response

ServingGateway(SGW)

PDNGateway

SGW-S1 IP/TEID, QoSRB Establishment Req.

RB Establishment Rsp.Initial Context Setup Rsp.

eNB-S1 IP/TEID, ..

Page 74: LTE-EPC

75

Tracking Area Update (TAU) • Tracking area (TA) is similar to Location/Routing area in 2G/3G .• Tracking Area Identity = MCC (Mobile Country Code), MNC (Mobile Network

Code) and TAC (Tracking Area Code).• When UE is in ECM-Idle, MME knows UE location with Tracking Area accuracy.

Page 75: LTE-EPC

76

Tracking Area Update (1/2)

MME

HSSeNB new

MME MMEoldMME

newServingGateway(SGW)

PDNGateway

Tracking Area Update Request

Context RequestS-TMSI/IMSI,old TAI, PDN (IP) address allocation

S-TMSI/IMSI,old TAIContext Response

mobility/context data

Create Bearer Request

IMSI, bearer contexts

Context Acknowledge

S-TMSI/IMSI,old TAI

Update Bearer Request

new SGW-S5 IP/TEID

Create Bearer Response

new SGW-S1 IP/TEID

Update Bearer Response

PDN GW IP/TEID

oldServingGateway(SGW)UEEMM_Registered

RRC_Idle + ECM_Idle

RRC_Connected

ECM_Connected

Authentication / Security

Page 76: LTE-EPC

77

Tracking Area Update cont…

MME

HSSeNB new

MME MMEoldMME

newServingGateway(SGW)

PDNGateway

Update Location

new MME identity, IMSI, …

IMSI, cancellation type = update

Cancel Location Ack

Delete Bearer Request

TEID

Delete Bearer Response

Cancel Location

oldServingGateway(SGW)

Update Location Ack

Tracking Area Update Accept

new S-TMSI, TA/TA-list

Tracking Area Update Complete

EMM_Registered

RRC_Idle + ECM_Idle

Page 77: LTE-EPC

78

Handover Procedure

SAE GW

MME

Source eNB

Target eNB

SAE GW

MME

SAE GW

MME

SAE GW

MME

= Data in radio= Signalling in radio

= GTP tunnel= GTP signalling

= S1 signalling= X2 signalling

Before handover

Handover preparation

Radio handoverLate path switching

Note: Inter eNB Handover with X2 Interface and without CN Relocation

Page 78: LTE-EPC

79

User plane switching in Handover

Page 79: LTE-EPC

80

Automatic Neighbor Relations

1--UE reports neighbor cell signal including Physical Cell ID

1

24

3

2--Request for Global Cell ID reporting

3--UE reads Global Cell ID from BCH

4--UE reports Global Cell ID

Page 80: LTE-EPC

www.cognitel.com

THANK YOU