2/5/13

Telecom Tutorials by Samir Amberkar: LTE - end-to-end UE initial attach

LTE - end-to-end UE initial attach

LTE - end-to-end UE initial attach [Under LTE] E-UTRA and E-UTRAN overall description - 36.300, Rel 8 E-UTRAN access - 23.401, Rel 8 EMM and ESM - 24.301, Rel 8 GTPv2-C - 29.274, Rel 8 S1AP - 36.413, Rel 8 NAS overall - 24.007/8, Rel 8 RRC - 36.331, Rel 8 Numbering - 23.003, Rel 8 SAE Security architecture - 33.401, Rel 8 3G Security - 33.102, Rel 8 USIM Application - 31.102, Rel 8 In SAE/EPS article, we looked at LTE network architecture; in this article, we will look at end-to-end initial UE attach signaling.
Google About Feedback Information Theory Modulation Multiple Access OSI Model Data Link layer SS7 Word about ATM GSM GPRS UMTS WiMAX LTE Standard Reference Reference books Resources on Web Miscellaneous Mind Map Perl resources Magic MSC tool C programming ASCII table Project Management Simple Google box HTML characters Site traffic
Page view counter T o st a r t a t t a ch pr ocedu r e, EMM r equ est RRC Con n ect ion . In it ia l a t t a ch 2 3 .4 0 1 :5 .3 .2 .1 RRC in it ia t ion 3 6 .3 3 1 :5 .3 .3 .2 RRC Con n ect ion Requ est (Ca u se, Iden t it y - S-T MSI or r a n dom ). eNB in v ok es RRM a n d RRC pr ocedu r es. Sy n ch r on isa t ion a n d cell select ion pr ocedu r es in it ia t ed. MM/RR/PLMN da t a t a k en fr om USIM a pplica t ion . UE pow er s on . S6 a UICC E-UT RA N Uu S1 S1 1 S5 /S8

Updated or New Magic MSC 3.0 LTE UE NAS Overview 3GPP Modem Simulator Site traffic (Dec-12)

What is different with LTE UE initial attach ? In LTE, initial attach is combined with (default) PDN (IP) connectivity. You can call this default PD connectivity as default (or basic or initial) PDP context activation. This default connectivity is always of non-guaranted bit rate type (basically s which handles mostly bursty internet traffic). This default connectivity is called "default bearer". LTE no more use NAS terminology of "Sessions". By the way, LTE NAS consists only of Mobility Management (EMM) and Session Management (ESM). Additional PDP Contexts or Se different QoSs than default bearers) are called "dedicated bearers". Yes, it is misleading to call it "dedicated" !

Just like "Secondary PDP Context" in GPRS/UMTS, dedicated bearer has same PDN (IP) address as default bearer and specific QoS. Yes, Template) is utilised here (UE and PGW) too ! QoS is defined differently in LTE (check out 3GPP TS 36.300 section 13 and 23.401, section 4.7.3 Below is a end-to-end signaling diagram for UE initial attach. I have included lot of specification references to dig in further.
USIM UE eNB MME SGW PGW

278,575

RRC Con n ect ion Set u p (Ra dio con fig s RLC/PDCP/MA C/PHY r ela t ed t o SRB1 ) RRC in it ia t ion 3 6 .3 3 1 :5 .3 .3 .2 RRC Con n ect ion Set u p Com plet e (PLMN iden t it y , NA S PDU) NA S PDU con t a in EMM A t t a ch Requ est (old GUT I or IMSI, ESM PDN Con n ect iv it y Requ est ). RRC in it ia t ion 3 6 .3 3 1 :5 .3 .3 .2 EMM A t t a ch 2 4 .3 0 1 :5 .5 .1 .2 ESM PDN

samiramberkar-tutorials.blogspot.com/2011/10/lte-23.html

1/5

2/5/13

Telecom Tutorials by Samir Amberkar: LTE - end-to-end UE initial attach

ESM PDN Con n ect iv it y 2 4 .3 0 1 :6 .5 .1 .2 GUT I 2 3 .0 0 3 :2 .8 S1 A P - In it ia l UE Messa g e (UE S1 A P ID, NA S PDU, RRC ca u se) 3 6 .4 1 3 In it ia l UE:8 .6 .2 .1 MME m a y t r ig g er a u t h en t ica t ion , secu r it y & ciph er in g pr ocedu r es. 2 3 .4 0 1 Ov er a ll:5 .3 .2 .1

Dia m et er A u t h en t ica t ion In fo Requ est (IMSI, PLMN ID) S6 a in t er fa ce/Dia m et er a u t h en t ica t ion 2 9 .2 7 2 :5 .2 .3

Dia m et er A u t h en t ica t ion In fo A n sw er (A u t h In fo - RA ND, A UT N, SRES, K A SME) S1 A P - DL NA S T r a n spor t (NA S PDU - EMM A u t h en t ica t ion Requ est { RA ND, A UT N} ) 3 6 .4 1 3 In it ia l UE:8 .6 .2 .2 UE-EPC a u t h en t ica t ion 3 3 .4 0 1 :6 .1 EMM a u t h en t ica t ion 2 4 .3 0 1 :5 .4 .2 RRC DL In for m a t ion T r a n sfer (NA S EMM PDU) RRC DL In fo:5 .6 .1 UICC - A u t h en t ica t e UE w ou ld ex ecu t e A UT HENT ICA T E com m a n d in USIM a pplica t ion t o g et SRES a n d CK (Cih per in g Key ). USIM A u t h en t ica t e 3 1 .1 0 2 :5 .2 .1 RRC UL In for m a t ion T r a n sfer (NA S PDU - EMM A u t h en t ica t ion Respon se { SRES} ) RRC UL In fo:5 .6 .2 S1 A P - UL NA S T r a n spor t (NA S EMM PDU) 3 6 .4 1 3 In it ia l UE:8 .6 .2 .3 MME com pa r es SRES (r eceiv ed fr om UE a n d HSS). 3 3 .1 0 2 A u t h en t ica t ion :6 .3 MME t r ig g er s NA S secu r it y pr ocedu r e. NA S en cr y pt ion a n d in t eg r ir y k ey s (K N A Senc a n d K N A Si nt r espect iv ely ) w ill be der iv ed fr om K A SME r eceiv ed fr om HSS. 3 3 .4 0 1 Secu r it y k ey s:6 .2

UE NA S w ou ld st a r t ciph er in g a n d in t eg r it y pr ot ect ion (st a r t in g fr om n ex t Secu r it y Mode Com plet e m esssa g e). UE w ou ld der iv e K A SME fr om CK r eceiv ed fr om USIM (a s pa r t of A u t h en t ica t e com m a n d. UE w ou ld t h en der iv e NA S

EMM - Secu r it y Mode Com m a n d over RRC/S1AP trans port (UE Secu r it y ca pa bilit ies, Ciph er in g a lg or it h m , In t eg r it y a lg or it h m ) 3 3 .4 0 1 NA S secu r it y :7 .2 .4 .4 2 4 .3 0 1 EMM Secu r it y :5 .4 .3 .2

samiramberkar-tutorials.blogspot.com/2011/10/lte-23.html

2/5

2/5/13

Telecom Tutorials by Samir Amberkar: LTE - end-to-end UE initial attach

t h en der iv e NA S en cr y pt ion a n d in t eg r ir y k ey s (i.e. K N A Senc a n d K N A Si nt r espect iv ely ).

EMM - Secu r it y Mode Com plet e over RRC/S1AP trans port Dia m et er - Upda t e Loca t ion Requ est (IMSI, V isit ed PLMN ID, RA T t y pe) S6 a in t er fa ce/Dia m et er a u t h en t ica t ion 2 9 .2 7 2 :5 .2 .1 .1 Dia m et er - Upda t e Loca t ion A n sw er (Su bscr ipt ion da t a )

MME does t h e SGW (a n d PGW ?) select ion . 2 3 .4 0 1 SGW select ion :4 .3 .8 .2 GT P-C - Cr ea t e Session Requ est (IMSI, A PN, PGW S5 /S8 a ddr ess/F-T EID, PDN t y pe, EPS Bea r er ID, Defa u lt EPS QoS, A g g r eg a t e Ma x im u m Bit Ra t e, PDN a ddr ess (fix ed?), PCO) 2 9 .2 7 4 Cr ea t e Session :7 .2 .1 GT P-C - Cr ea t e Session Requ est (IMSI, A PN, SGW User pla n e T EID, PDN t y pe, EPS Bea r er ID, Defa u lt EPS QoS, A g g r eg a t e Ma x im u m Bit Ra t e, PDN a ddr ess (fix ed?), PCO) 2 9 .2 7 4 Cr ea t e Session :7 .2 .1 PGW u ses QoS policy (loca l or r eceiv ed fr om PCRF) t o com e ou t w it h a list of bea r er s (defa u lt + opt ion a l dedica t ed bea r es).

GT P-C - Cr ea t e Session Respon se (PDN a ddr ess, A g g r eg a t e Ma x im u m Bit Ra t e, PCO, Defa u lt /Dedica t ed bea r er con t ex t s { EPS bea r er ID, PGW User pla n e T EID, QoS} ) 2 9 .2 7 4 Cr ea t e Session :7 .2 .2 User DL da t a (if a n y ) t h r u GT P t u n n el (ov er S5 /S8 in t er fa ce). MME h a s n ow ev er y t h in g in pla ce t o in st r u ct eNB t o st a r t In it ia l Con t ex t Set u p pr ocedu r es. S1 UE con t ex t { S1 A P ID, Bea r er ID, T EIDs} w ou ld be cr ea t ed. K eN B is der iv ed fr om K A SME. 3 3 .4 0 1 Secu r it y k ey s:6 .2 GT P-C - Cr ea t e Session Respon se (PDN a ddr ess, A g g r eg a t e Ma x im u m Bit Ra t e, PCO, Defa u lt /Dedica t ed bea r er con t ex t s, SGW User pla n e T EID) 2 9 .2 7 4 Cr ea t e Session :7 .2 .2

RRM pr ocedu r es w ou ld "a dm it " EPS bea r er , cr ea t e S1 UE con t ex t { S1 A P ID, Bea r er ID, T EIDs} , in for m GT P-U a bou t Bea r er ID-T u n n el ID m a ppin g a n d in it ia t e fu r t h er RRC pr ocedu r es. Fir st pr ocedu r e w ou ld be A S Secu r it y pr ocedu r e t o st a r t Ciph er in g a n d

S1 A P - In it ia l Con t ex t Set u p Requ est (UE S1 A P ID, A g g r eg a t e Ma x im u m Bit Ra t e, defa u lt /dedica t ed bea r er { E-RA B IDs, QoS, SGW GT P T EID, NA S PDU, EPC T r a n spor t a ddr ess} , UE Secu r it y Ca pa bilit ies, Secu r it y k ey K eN B) 3 6 .4 1 3 In it ia l Con t ex t Set u p:8 .3 .1

samiramberkar-tutorials.blogspot.com/2011/10/lte-23.html

3/5

2/5/13

Telecom Tutorials by Samir Amberkar: LTE - end-to-end UE initial attach

Ciph er in g a n d In t eg r it y pr ot ect ion . eNB w ou ld der iv e User da t a en cr y pt ion a n d RRC en cr y pt ion & in t eg r it y k ey s fr om K eN B. T h ese k ey s r esepect iv ely a r e K U Penc , K RRCi nt , a n d K RRCenc . 3 3 .4 0 1 Secu r it y k ey s:6 .2 A lon g w it h Secu r it y , RRC Recon fig pr ocedu r e ca n be st a r t ed. Con t ex t Set u p:8 .3 .1 T r a n spor t a ddr ess is EPC IP a ddr ess t o w h ich u ser (UL) IP pa ck et s a r e t o be for w a r ded. 3 6 .4 1 4 T r a n spor t a ddr ess:5 .3 NA S PDU con t a in EMM A t t a ch A ccept (GUT I, ESM m essa g e). ESM m essa g e w ou ld be A ct iv a t e Defa u lt EPS Bea r er Con t ex t Requ est (EPS bea r er ID, QoS no ARP, PDN A ddr ess, A PN) 2 4 .3 0 1 EMM A t t a ch A ccept :5 .5 .1 .2 .4 2 4 .3 0 1 ESM Defa u lt Bea r er r equ est :6 .4 .1 .2

RRC A S Secu r it y Mode Com m a n d (Ciph er in g a lg or it h m , In t eg r it y a lg or it h m ) 3 3 .4 0 1 A S Secu r it y :7 .2 .4 .5 3 6 .3 3 1 RRC Secu r it y :5 .3 .4 RRC Con n ect ion Recon fig u r a ion [EPS bea r er ID, DRB ID, Ra dio con fig s RLC/PDCP/MA C/PHY , NA S pdu ] RRC 3 6 .3 3 1 :5 .3 .5

Sim ila r t o eNB, UE der iv es K U Penc , K RRCi nt , a n d K RRCenc fr om KeNB t o st a r t Ciph er in g a n d In t eg r it y pr ot ect ion . T h is w ou ld be a ck n ow ledg ed t o n et w or k .

RRC Secu r it y Mode Com plet e RRC 3 6 .3 3 1 :5 .3 .4 .1 RRC/L2 /PHY w ou ld be con fig u r ed for SRB2 a n d DRB. RRC w ou ld a ck n ow ledg e t h is is t o eNB a n d pa ss on NA S PDU t o EMM. RRC Con n ect ion Recon fig u r a t ion Com plet e RRC 3 6 .3 3 1 :5 .3 .5 UE NA S w ou ld con st r u ct EMM A t t a ch Com plet e m essa g e w h ich w ou ld con t a in ESM r eply a s w ell. S1 A P - In it ia l Con ex t Set u p Respon se (UE S1 A P IDs, E-RA Bs set u p { E-RA B ID, eNB GT P-U T EID, eNB T r a n spor t a ddr ess} ) 3 6 .4 1 3 In it ia l Con ex t Set u p:8 .3 .1 .2 EMM - A t t a ch Com plet e over RRC/S1AP trans port (ESM PDU) ESM PDU w ou ld con t a in ESM A ct iv a t e defa u lt EPS bea r er Con t ex t A ccept m essa g e (PCO). 2 4 .3 0 1 EMM A t t a ch :5 .5 .1 .2 .4 2 4 .3 0 1 ESM Defa u lt bea r er a ct iv a t ion :6 .4 .1 .3 GT P-C - Modify Bea r er Requ est (EPS bea r er IDs, eNB F-T EID) 2 9 .2 7 4 Modify Bea r er Requ est :7 .2 .7 For h a n dov er scen a r ios, SGW w ill h a v e t o t r ig g er GT P m odify bea r er pr ocedu r e t ow a r ds PGW ov er S8 in t er fa ce. GT P-C - Modify Bea r er Respon se 2 9 .2 7 4 Modify Bea r er Respon se:7 .2 .8

MME w ou ld t r ig g er GT P-C pr ocedu r e t ow a r ds SGW t o in for m eNB r ela t ed det a ils t o SGW .

samiramberkar-tutorials.blogspot.com/2011/10/lte-23.html

User UL da t a

4/5

2/5/13

Telecom Tutorials by Samir Amberkar: LTE - end-to-end UE initial attach

User UL da t a t h r ou g h DRB User UL da t a t h r ou g h GT P t u n n el (S1 1 in t er fa ce) User UL da t a t h r ou g h GT P t u n n el (S5 /S8 in t er fa ce) User DL da t a (if a n y bu ffer ed ea r lier ) t h r ou g h GT P t u n n el (S1 1 in t er fa ce) User DL da t a t h r ou g h DRB T h is com plet e LT E in it ia l a t t a ch pr ocedu r e. UE is a t t a ch ed, defa u lt bea r er a ct iv e. RRCCon n ect ed, EMMReg ist er ed, ECMCon n ect ed st a t e.

In next article, we will look at end-to-end signaling for dedicated bearer setup.

References: 3G Evolution: HSPA and LTE by Dahlman, Parkvall, Skld, and Beming, LTE - From Theory to Practice, Edited by Sesia, Toufik, an and SAE and the Evolved Packet Core: Driving the Mobile Broadband Revolution by Olsson, Sultana, Rommer, Frid, and Mulligan. Copyright Samir Amberkar 2010-11 LTE - QoS LTE Index

LTE - dedicated b

Posted on Tu esday , October 25, 2011

samiramberkar-tutorials.blogspot.com/2011/10/lte-23.html

5/5