Chapter 2: Wireless IP Network Architectures

Jyh-Cheng Chen and Tao Zhang

IP-Based Next-Generation Wireless Networks
Published by John Wiley & Sons, Inc. January 2004

This material is protected under all Copyright Laws as they currently exist. 2004 Jyh-Cheng Chen and Tao Zhang, and John Wiley & Sons, Inc. All rights reserved. Notwithstanding users ability to use and modify the PowerPoint Slides, it is understood that the original version of these slides, as well as any and all modifications thereof, and all corresponding copyrights, shall at all times remain the property of Jyh-Cheng Chen and Tao Zhang, and John Wiley & Sons, Inc.
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Outline
2.1 3GPP Packet Data Networks 2.2 3GPP2 Packet Data Networks 2.3 MWIF All-IP Mobile Networks

2.1 3GPP Packet Data Networks

2.1.1 Network Architecture 2.1.2 Protocol Reference Model 2.1.3 Packet Data Protocols, Bearers, and Connections for Packet Services 2.1.4 Packet Data Protocol (PDP) Context 2.1.5 Steps for a Mobile to Access 3GPP Packet-Switched Services 2.1.6 User Packet Routing and Transport 2.1.7 Configuring PDP Addresses on Mobile Stations 2.1.8 GPRS Attach Procedure 2.1.9 PDP Context Activation and Modification 2.1.10 Radio Access Bearer Assignment 2.1.11 Packet-Switched Domain Protocol Stacks 2.1.12 Accessing IP Networks through PS Domain
3
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.1 3GPP conceptual network architecture (Release 5)

2.1.1 Network Architecture

Public Land Mobile Network (PLMN): a public network administrated by a single network operator for providing land mobile services Radio Access Networks (RANs)

PSTN and Circuit-Switched Wireless Network

External IP Networks

IP Multimedia Subsystem (IMS)

GMSC Circuit Switched Domain Information Servers Shared by PS and CS Domain (HSS, EIR, AuC)

GGSN

Core Network (CN)

GSM/EDGE RAN (GERAN) UMTS Terrestrial RAN (UTRAN) Broadband Radio Access Networks (BRANs) Circuit-Switched (CS) Domain Packet-Switched (PS) Domain IP Multimedia Subsystem (IMS) Information Servers

Packet Switched Domain

MSC + VLR

SGSN Core Network

GSM RAN (i.e., Base Station Subsystems) Radio Access Networks

UTRAN (UMTS Terrestrial Radio Access Network)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

GERAN and UTRAN

GERAN

2.1.1.1 Mobile Devices, Subscribers, and Their Identifiers

Mobile Station (MS): in GSM User Equipment (UE): in UMTS

Base Station Subsystem (BSS)

Base Transceiver Station (BTS) Base Station Controller (BSC)

Mobile Equipment (ME)

Terminal Equipment (TE) Mobile Termination (MT)

UTRAN

Radio Network Subsystem (RNS)

Node B Radio Network Controller (RNC)
7

Terminal Adapter (TA)

UMTS Subscriber Identity Module (USIM)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.2 Functional architecture of an user equipment (UE)

UE ME USIM
TE MT TA

Identifiers
International Mobile Station Equipment Identity (IMEI): identify MT

manufacturer, country, type

International Mobile Subscriber Identity (IMSI): globally unique and permanently assigned for each subscriber

stored on USIM
10

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.3 Structure of International Mobile Subscriber Identity (IMSI)

Identifiers (Cont.)
Temporary Mobile Subscriber Identity (TMSI)

No more than 15 digits

3 digits

2 3 digits

4-octet number assigned to a mobile temporarily by a MSC/VLR or by a SGSN P-TMSI mapping between TMSI and IMSI: only known by mobile and network single or multiple may acquire an IP address only when necessary
12

IP address
Mobile Country Code (MCC) Mobile Network Code (MNC) Mobile Subscriber Identification Number (MSIN)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

11

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

2.1.1.2 Circuit-Switched Domain in Core Network

Mobile-services Switching Center (MSC) Gateway MSC (GMSC) Visitor Location Register (VLR) Home Subscriber Server (HSS), Equipment Identity Register (EIR), and Authentication Center (AuC)

Switching vs. Call Control

MSC Server: call control and mobility management CS Media Gateway (CS-MGW): circuit switching, media conversion, payload processing (e.g., echo canceller, codec), payload transport

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

13

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

14

2.1.1.3 Packet-Switched Domain in the Core Network

Network access control: registration, authentication and authorization, admission control, message filtering, usage data collection Packet routing and transport: route user packets toward their destinations Mobility management: tracking the locations of mobile terminals, initiating paging, maintaining up-to-date routes
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Serving GPRS Support Node (SGSN)

Access control Location management: track the locations of mobiles; may report the location information to the HLR Route management: maintain and relay user traffic between the mobile and the GGSN Paging: initiating paging to idle mobiles Interface with service control platforms: contact point with CAMEL (Customized Applications for Mobile Enhanced Logic)
16

15

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Gateway GPRS Support Node (GGSN)

Packet routing and forwarding center: all user packets to and from a mobile in a PLMN will be sent first to a GGSN (refer to as the mobiles serving GGSN) Route and mobility management: maintain a route to the SGSN that is currently serving a mobile and uses the route to exchange the user traffic with the SGSN

Identifiers of SGSN and GGSN

IP address

may be private IP address used primarily with non-IP protocols, e.g., MAP or other SS7-based protocols

SGSN Number and GGSN Number

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

17

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

18

2.1.1.4 IP Multimedia Subsystem

Release 5 introduced the IP Multimedia Subsystem (IMS) Support real-time voice and multimedia IP services Use the Session Initiation Protocol (SIP) for signaling and session control for all real-time multimedia services Will be discussed in Chapter 3
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

2.1.1.5 Information Servers

Shared by CS and PS domains Home Subscriber Server (HSS)

Authentication Center (AuC)

master logical database maintain user subscription information to control network services Home Location Registrar (HLR): main component of HSS which maintains users identities, locations, and service subscription information maintain information to authenticate each user and to encrypt the communication accessed by the HSS maintain IMEIs of the subscribers

Equipment Identity Register (EIR)

19

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

20

To PSTN

To external IP networks Gi IMS

To external To GGSN in IP networks Other networks

2.1.2 Protocol Reference Model

RAN Internal Interfaces RAN-to-CN Interfaces CS CN Internal Interfaces

Fig. 2.4
CS-MGW Nb G VLR B E MSC Server Mc CS-MGW Nb A NC CS-MGW

Mc

GMSC Server Nc D

Go C HSS (HLR) F Gc H AuC GGSN

Gi

Gp

Gn Gr Gf SGSN Iu-PS

VLR B MSC Server Mc

EIR Gs

Gb Core Network Iu-CS UTRAN Abis Traffic interface Signaling interface GSM BSS BTS Um MT Radio Access Networks MT BTS Iu-CS Iur BSC RNC Iub Node B Cell Cell Uu Node B Cell Cell RNC

many interfaces use MAP protocol

PS CN Internal Interfaces

A IuCS

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

21

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

22

RAN Internal Interfaces

GERAN

RAN-to-CN Interfaces
GERAN

Abis Um Iub Iur: logical signaling interface Uu

23

UTRAN

UTRAN

A or Iu-CS: CS CN domain Gb or Iu-PS: PS CN domain Iu-CS: CS CN domain Iu-PS: PS CN domain A/Gb mode Iu mode
24

One and only one mode

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.5 Protocol reference model for 3GPP PS domain

MSC + VLR Gs D HSS/HLR Gr Gc External Packet Network Gi

2.1.3 Packet Data Protocols, Bearers, and Connections for Packet Services
Packet Data Protocol (PDP): used to exchange user packets over a 3GPP PS CN domain Packet Data Unit (PDU): user packet transported inside a 3GPP network over traffic bearer Traffic bearer: a set of network resources and data transport functions used to deliver user traffic between two network entities
25
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Node B Mobile Uu UTRAN Iub

RNC IuPS

SGSN Gn PS CN

GGSN

Gp

GGSN PS CN in different PLMN

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

26

Fig. 2.6 3GPP bearers (connections) for supporting packet-switched services

Mobile RNC
3GPP Bearer

Separation of Bearers
The (Traffic) Radio Bearers, Iu (Traffic) Bearers, Radio Access Bearers, and CN Bearers are managed by different protocols and procedures.

SGSN

GGSN

Radio Access Bearer (RAB)

CN Bearer

Radio Bearer

Iu Bearer Lower Layer Bearers

Lower Layer Bearers

Lower Layer Bearers

Iu Gn

allows different protocols and procedures to be used; evolve with less dependency on each other facilitates mobility management
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

27

28

Fig. 2.7 Signaling and traffic connections between mobile and SGSN
RRC Connection RANAP Connection

Connections
Radio Resource Control (RRC) connection

Mobile

Signaling Radio Bearer

Mobile-SGSN Signaling Connection

RNC

Iu Signaling Bearer

SGSN

Signaling Radio Bearer Traffic Radio Bearer

Radio Access Network Application Part (RANAP) connection

Traffic Radio Bearer Radio Access Bearer (RAB) Iu Traffic Bearer

Iu Signaling Bearers Iu Traffic Bearers

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

29

30

2.1.4 Packet Data Protocol (PDP) Context

A set of information that the network uses to determine how to forward user packets destined to and originated from a particular PDP address Contain the following main information

PDP States
ACTIVE state

INACTIVE state

contains update-to-date information for forwarding PDP packets between the mobile and the GGSN RABs may be established only when there are user packets may contain a valid PDP address, but will not contain valid routing and mapping information needed to determine how to process PDP packets no user data can be transferred changing location of a mobile user will not cause an update for the PDP context If a GGSN has user packets to send to a mobile, the GGSN may use Network-requested PDP Context Activation procedure to change the PDP context of the destination mobile into ACTIVE state. The GGSN may also discard packets destined to a mobile if the corresponding PDP context is in INACTIVE state.
32

PDP Address Routing Information: identifiers of tunnels and Access Point Name (APN) Quality of Service (QoS) Profiles: QoS Profile Subscribed, QoS Profile Requested, QoS Profile Negotiated

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

31

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.8 3GPP PDP context state transitions

PDP Context Modification

State Transition
PDP Context Activation PDP Context Modification

PDP Context ACTIVE

PDP Context Deactivation or Mobility Management state changes to PMM-IDLE or PMM-DETACHED

PDP Context Activation

modify the PDP Address or the attributes of the QoS profile Release 5 only allows the GGSN-initiated PDP Context Modification

PDP Context INACTIVE

PDP Context Deactivation

33 34

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

2.1.5 Steps for a Mobile to Access 3GPP Packet-Switched Services

GPRS Attach PDP Context Activation and RAB Establishment Register with the IMS
Mobile

HSS

GPRS Attach

SGSN

Fig. 1.9 Three-phased access to 3GPP packet-switched network and services

(a) Phase 1: Mobile registers with PS CN via GPRS Attach

1. Activate PDP Context Request 2. PDP Context Activation 3. Establish Radio Access Bearer Mobile 4. Activate PDP Context Accept SGSN GGSN

(b) Phase 2: Activate PDP Context and establish Radio Access Bearer.

SGSN Registration with IMS Mobile

GGSN IMS

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

35

(c) Phase 3: Registers with the IMS (only if the mobile wishes to use services provided by IMS). Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

36

GPRS Attach
A mobile registers with SGSN. A mobile provides its identity and service requirements to the SGSN and will be authenticated and authorized by the SGSN. Establish a Mobility Management Context on the mobile, in the RAN, and on the SGSN. This allows the RAN and the SGSN to track the mobiles location. Establish a signaling connection between the mobile and the SGSN. The mobile and the SGSN use this signaling connection to exchange signaling and control messages needed to perform the GPRS Attach procedure. Allow the mobile to access some services provided by the SGSN. Such services include sending and receiving SMS messages and being paged by the SGSN.
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

PDP Context Activation and RAB Establishment

A mobile can request the network to establish and activate a PDP Context for its PDP address after the mobile has performed GPRS Attach successfully. A successful PDP context activation will trigger the PS CN domain to establish the CN Bearer and the RAB. A mobile will be able to send and receive user packets over the PS CN domain.
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

37

38

Register with the IMS

When a mobile wishes to use the IPbased real-time voice or multimedia services provided by the IMS, the mobile needs to perform registration with the IMS. SIP registration procedure is used for a user to register with the IMS. Will be described in detail in Chapter 3
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

2.1.6 User Packet Routing and Transport

Inside the PS CN domain, IP is the main protocol for transporting user packets between network nods. IP is used for routing between GGSNs. Routing of user packets between SGSN and GGSN is based on GPRS-specific protocols and procedures.
40

39

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

IP Network

Packet Routing
GGSN acts as a central point for routing of all user packets. User packets are tunneled between RNC and SGSN, between SGSN and GGSN, and between two SGSNs.

Fig. 2.10
Gn

Gi

Gi

GGSN

GGSN

Gn GTP Tunnel GTP Tunnel

SGSN

SGSN

GPRS Tunneling Protocol (GTP): routing and mobility management

Iu GTP Tunnel

Iu GTP Tunnel

Host-specific routes are used to forward user packets between a mobile and a GGSN.

RNC

RNC

maintain an individual routing entry as part of a PDP context for every mobile terminal that has an active PDP context

Radio Bearer

User packets

Radio Bearer

Source Mobile Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Destination Mobile

41

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

42

Mapping between Identifiers

Packets addressed to the PDP address are delivered by the lower protocol to the IP layer through the Service Access Point.

PDP Context PDP Address IP Address IMSI P-TMSI NSAPI NSAPI

PDP Context PDP Address IMSI P-TMSI NSAPI

Tunnel Endpoint Identifier (TEID)

identified by a Network-layer Service Access Point Identifier (NSAPI) a unique NAPSI is used for each IP address exchanged during tunnel setup process

RAB ID

RAB ID Radio Access Bearer (RAB)

RAB ID

TEID GTP Tunnel

TEID

RB ID Radio Bearer (RB)

RB ID

TEID Iu Bearer

TEID

Radio Access Bearer Identifier (RAB ID) Radio Bearer Identifier (RB ID)
43

Mobile

RNC Mapping X Y

SGSN

GGSN

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

44

2.1.7 Configuring PDP Addresses on Mobile Stations

Use a static PDP address assigned by the visited 3GPP network Use a static PDP address assigned by an external IP network Acquire a PDP address dynamically from the visited 3GPP network Acquire a PDP address dynamically from an external IP network
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Dynamic PDP Address from an External IP Network

The visited PS domain first activates a PDP context without a PDP address for the mobile. The visited PS CN will not forward other user packets to or from the mobile before a valid PDP address is added to the mobiles PDP context. The mobiles serving GGSN in the visited network will have to learn the PDP address assigned to the mobile.
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

45

46

MS Attach Request

New SGSN

Old SGSN

EIR

GGSN

HLR

2.1.8 GPRS Attach Procedure

GPRS Attach procedure to attach to the PS domain IMSI Attach procedure to attach to the CS domain May combine GPRS Attach procedure and IMSI Attach procedure to attach to the PS and the CS domain simultaneously
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Identification Request Identification Response Identity Request Identity Response

Fig. 2.12
Authentication and Authorization

Authentication and Authorization

IMEI Verification

IMEI verification Update Location Cancel Location Cancel Location ACK Delete PDP Context Request Delete PDP Context Response Insert Subscriber Data Insert Subscriber Data ACK Update Location ACK

Attach Accept

47

Attach Complete Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

48

Attach Request
Identifiers of the mobile: P-TMSI or its IMSI, but not both P-TMSI Signature:

2.1.9 PDP Context Activation and Modification

PDP Address allocation: The network allocates an PDP address to the mobile if needed. CN Bearer Establishment: The network creates and activates the PDP context on GGSN and SGSN and establishes all the necessary bearers between SGSN and GGSN for transporting user and signaling traffic for the activated PDP context. RAB Assignment: The network establishes the Radio Access Bearers to carry user traffic.
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

3-octet number assigned to the mobile by the SGSN that assigned the P-TMSI used by the SGSNs to authenticate a P-TMSI can also be used by the mobile to authenticate the network node that is assigning the P-TMSI

Attach Type: indicate whether the Attach Request is for GPRS Attach only, GPRS Attach while already IMSI attached, or combined GPRS/IMSI Attach Location information: Routing Area Identity (RAI) (will be discussed in more detail in Chapter 4)
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

49

50

2.1.9 PDP Context Activation and Modification (Cont.)

2.1.9.1 Mobile-Initiated PDP Context Activation and Modification 2.1.9.2 Network-Requested PDP Context Activation 2.1.9.3 PDP Context Modification

2.1.9.1 Mobile-Initiated PDP Context Activation and Modification

Activate PDP Context Request

PDP Address: either 0.0.0.0 or specified by the mobile Network-layer Service Access Point Identifier (NSAPI) PDP Type Access Point Name (APN) QoS Requested PDP Configuration Options: optional PDP parameters directly with GGSN
52

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

51

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.13 3GPP mobile-initiated PDP context activation

Access Point Name (APN)

Select a service (or a GGSN) in the PS domain or a contact point in an external packet network Contain two main parts

1. Activate PDP Context Request

RNC

SGSN

2. Create PDP Context Request 3. Create PDP Context Response

GGSN

4. Establish or Modify Radio Access Bearers 5. Invoke Trace Mobile 8. Activate PDP Context Accept 6. Update PDP Context Request 7. Update PDP Context Response

Same name syntax as the Internet Domain Name Domain Name System (DNS) can be used to translate an APN to an IP address
53
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

APN Network Identifier APN Operator Identifier: identify the PLMN (optional)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

54

Create PDP Context Request

NSAPI: copied from Activate PDP Context Request PDP Type: copied from Activate PDP Context Request PDP Address: from the Activate PDP Context Request message APN: selected by SGSN QoS negotiated: QoS profile the SGSN agrees to support Tunnel Endpoint Identifier (TEID): created by SGSN based on mobiles IMSI and on the NSAPI in the Activate PDP Context Request Selection Mode: whether the APN was subscribed by mobile or selected by SGSN Charging Characteristics: what kind of charging the PDP context is liable for PDP Configuration Options: copied from the Activate PDP Context Request
55

Create PDP Context Response

TEID: to identify the GGSN side of the GTP tunnel PDP Address:

QoS Negotiated: QoS profile agreed by the GGSN PDP Configuration Options: relayed by intermediate nodes transparently to the mobile
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

a PDP address assigned by the GGSN 0.0.0.0 if the mobile asks to acquire from an external network

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

56

2.1.9.2 Network-Requested PDP Context Activation

GGSN must have static information about the PDP address

Fig. 2.14 3GPP networkrequested PDP context activation

HSS/HLR

For example, the GGSN needs to know the mobiles IMSI in order to query the HLR

3. Send Routing Info for GPRS ACK

2. Send Routing Info for GPRS 1. User packets

A Request PDP Context Activation message to the mobile to instruct the mobile to start the Mobile-initiated PDP Context Activation procedure described in Figure 2.13
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

4. PDU Notification Request 5. PDU Notification Response 6. Request PDP Context Activation SGSN 7. Mobile-Initiated PDP Context Activation Mobile GGSN

57

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

58

2.1.9.3 PDP Context Modification

Active PDP context can be modified PDP address: only a GGSN can initiate the process to modify the PDP address in an active PDP context QoS profiles: can be initiated by the mobile, GGSN, SGSN, or the RAN

Fig. 2.15 3GPP GGSN-initiated PDP context modification

RNC 2. Modify PDP Context Request SGSN 1. Update PDP Context Request GGSN

3. Modify PDP Context Accept

4. RAB Assignment Procedure (to modify existing RABs) Mobile

5. Update PDP Context Response

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

59

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

60

10

Update PDP Context Request

TEID: identify the SGSN end of the GTP tunnel NSAPI: identify the PDP context to be modified PDP Address: a new PDP address if the GGSN wishes to modify the PDP Address (optional) QoS Requested: new QoS profile suggested by the GGSN
61

2.1.10 Radio Access Bearer Assignment

RAB Assignment: assignment, modification and release of RAB In R5, can only be initiated by the network

Radio Resource Control (RRC) protocol will be used to establish, maintain, and release the Radio Bearers SGSN negotiates with the RAN about the QoS profile for the mobile
62

initiated by the SGSN upon triggered by other network entities in the CN or the RAN

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 1.16 3GPP Radio Access Bearer Assignment

2.1.11 Packet-Switched Domain Protocol Stacks

2.1.11.1 Gn and Gp interfaces and the GPRS Tunneling Protocol 2.1.11.2 The Iu-PS Interface 2.1.11.3 Gi, Gr, Gc, and Gs Interfaces 2.1.11.4 Mobile-to-GGSN Protocol Stacks

1. RAB Assignment Request 2. Establish, modify, and release Radio Bearers Mobile

RNC

3. RAB Assignment Responses

SGSN

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

63

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

64

2.1.11.1 Gn and Gp interfaces and the GPRS Tunneling Protocol

Gn: between SGSN and GGSN as well as SGSNs in the same PLMN Gp: between an SGSN and a GGSN in a different PLMN GPRS Tunneling Protocol (GTP) is used for both user plane and control plane

Fig. 1.17 3GPP Gn and Gp interface protocol stacks

GTP-U UDP IP Layer 2 Layer 1 SGSN

GTP-U UDP IP Layer 2 Layer 1 GGSN (a) Gn and Gp Interface User Plane.

GTP-C UDP IP Layer 2 Layer 1 SGSN

GTP-C UDP IP Layer 2 Layer 1 GGSN

(b) Gn and Gp Interface Control Plane.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

65

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

66

11

GPRS Tunneling Protocol (GTP)

GTP-C: manage (create, modify, and release) GTP-U tunnels, manage PDP contexts, location management, and mobility management

GTP Messages
Tunnel Management: activate, modify and remove PDP Contexts and their associated GTP tunnels Location Management: used by a GGSN to retrieve location information from the HLR Mobility Management: used between SGSNs to transfer mobility related information Path Management: used by a node to determine if a peer node is alive and to inform the peer node of what GTP header extensions it can support
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

multiple PDP contexts with the same PDP address will share a common GTP-C tunnel

GTP-U: establish and manage GTP tunnels used to tunnel user packets

one GTP-U tunnel between SGSN and GGSN will be established for every active PDP context
67

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

68

GTP Header Format

Version: 1 for the current version PT (Protocol Type): for 3GPP CN or GPRS/GSM E (Extension header Flag): indicates whether the Next Extension Header is present S (Sequence Number flag): indicates if the Sequence Number field is present PN (N-PDU Number Flag): indicates whether the N-PDU Number field is present Message Type: indicates the type of the GTP message N-PDU Number: used in inter-SGSN Routing Area Update procedure and some inter-system handoff procedures for coordinating data transmission between a mobile terminal and a SGSN

Fig. 2.18 GPRS Tunneling Protocol (GTP) header format

8 7 Version 6 5 PT 4 (*) 3 E 2 S 1 PN Message Type Length (1st octet) Length (2nd octet) Tunnel Endpoint Identifier (1st octet) Tunnel Endpoint Identifier (2nd octet) Tunnel Endpoint Identifier (3rdoctet) Tunnel Endpoint Identifier (4th octet) Sequence Number (optional) (1st octet) Sequence Number (optional) (2nd octet) N-PDU Number (optional) Next Extension Header Type (optional)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

69

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

70

2.1.11.2 The Iu-PS Interface

Tunnel Management: establishing, maintaining and releasing the GTP tunnels between a RNC and a SGSN Radio Access Bearer Management: establishing, maintaining and releasing Radio Access Bearers (RABs) Radio Resource Management: Radio Resource Admission Control by RNC Mobility Management: handoff between RNC; paging; positioning services
71

Fig. 2.19 3GPP Iu-PS interface protocol stacks

GTP-U UDP IP Layer 2 Layer 1 RNC (a) Iu-PS User Plane.

GTP-U UDP IP Layer 2 Layer 1 SGSN

RANAP SCCP Signaling Bearer AAL 5 ATM RNC (b) Iu-PS Control Plane.

RANAP SCCP Signaling Bearer AAL 5 ATM SGSN

RANAP: Radio Access Network Application Part SCCP: Signaling Connection Control Part
72

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

12

2.1.11.3 Gi, Gr, Gc, and Gs Interfaces

Gi: used by GGSN to connect to any external IP network Gr: between SGSN and HLR Gc: between GGSN and HLR Gs: between SGSN and MSC/VLR

Fig. 2.20 3GPP Gi interface protocol stack

IP Layer 2 Layer 1 GGSN Gi

IP Layer 2 Layer 1 External IP Network

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

73

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

74

Fig. 2.21 3GPP control-plane protocol stack between SGSN (or GGSN) and HLR

Fig. 2.22 3GPP control-plane protocol stack between GGSN and HLR based on GTP

MAP TCAP SCCP Signaling Bearer

Gr or Gc SGSN or GGSN

MAP TCAP SCCP Signaling Bearer

HLR GTP-C UDP IP Layer 2 Layer 1
Gn

MAP GTP-C TCAP UDP IP Layer 2 Layer 1 SCCP MTP 3 MTP 2 Layer 1
Gc

MAP TCAP SCCP MTP 3 MTP 2 Layer 1 HLR

TCAP: Transaction Capabilities Application Part

GGSN

GSN serving as Protocol Converter

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

75

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

76

Fig. 2.23 3GPP control-plane protocol stack between SGSN and MSC/VLR

2.1.11.4 Mobile-to-GGSN Protocol Stacks

Packet Data Convergence Protocol (PDCP)

Header compression for higher-layer data streams

IP Header Compression (IPHC) Robust Header Compression (ROHC)

BSSAP+ SCCP Signaling Bearer

Gs SGSN

BSSAP+ SCCP Signaling Bearer

MSC

BSSAP+: Base Station System Application Part+

Mapping higher-layer data into the underlying radio interface protocols Maintaining data transmission orders for upper layer protocols that have such requirement

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

77

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

78

13

Fig. 2.24 3GPP user-plane protocol stack between mobile and GGSN
Applications

Radio Link Control (RLC)

Provides logical link control over the radio interfaces A mobile can have multiple RLC connections Support

PDP (e.g., IP, PPP)

PDP (e.g., IP, PPP)

PDCP

PDCP

GTP-U

GTP-U

GTP-U

GTP-U

UDP RLC MAC Layer 1 Uu MS UTRAN RLC IP MAC Layer 1 Layer 2 Layer 1 Iu-Ps

UDP IP Layer 2 Layer 1

UDP IP Layer 2 Layer 1 Gn SGSN

UDP IP Layer 2 Layer 1 GGSN

Broadcast information related to the RAN and the CN to the mobiles Establish, maintain, and release RRC connections Establish, maintain, and release Radio Bearers Paging Radio power control Control of radio measurement and reporting Control of the on and off of ciphering between the mobile and the RAN

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

79

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

80

Fig. 2.25 3GPP control-plane protocol stack between mobile and SGSN

GMM, SM, and SMS

SMS

GMM

SM

SMS

GMM

SM

RRC RLC MAC

RRC RLC MAC

RANAP SCCP Signaling Bearer AAL 5

RANAP SCCP Signaling Bearer AAL 5 ATM Iu-PS SGSN

Layer 1 Uu MS

Layer 1 ATM RNS

GPRS Mobility Management (GMM): support mobility management functions including GPRS Attach and Detach operations, security, and routing area update procedure. Session Management (SM): support PDP context activation, modification, and deactivation SMS (Short Message Service): support short messages
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

81

82

2.1.12 Accessing IP Networks through PS Domain

User registration (e.g., authentication and authorization) with the external IP network Dynamic assignment of IP addresses to the mobile by the external IP network Encryption of user data transported between the mobile and the external IP network
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.26 Access another IP network through 3GPP PS domain

User Traffic

RNC Mobile

SGSN

GGSN Gi

Router

External IP Network

RAN

3GPP PS Domain

83

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

84

14

Transparent Access vs. Nontransparent Access

Transparent Access: The GGSN does not participate in any interaction between the mobile and the external IP network except transporting user packets. Non-transparent Access: The GGSN participates in at least one of the interactions between the mobile and the external IP network described above.

2.1.12 Accessing IP Networks through PS Domain

2.1.12.1 Transparent Access 2.1.12.2 Non-Transparent Access Using Mobile IP 2.1.12.3 Acquiring IP Address Dynamically Using DHCP from an External Network 2.1.12.4 Dial-up Access Using PPP
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

85

86

2.1.12.1 Transparent Access

Gain access to a GGSN in the local PS CN Acquire an IP address from the local PS domain to use as its PDP address in local PS CN domain Register with the external IP network

Fig. 2.27 Protocol stacks for transparent to IP networks through 3GPP PS CN

Higher-Layer IP Protocols (e.g., MIP, IPsec) UDP/TCP IP IP IP Layer 2 3GPP Packet Domain Bearer Layer 1 Gi Mobile Terminal GGSN

Higher-Layer IP Protocols (e.g., MIP, IPsec) UDP/TCP IP Layer 2 Layer 1 External IP Network

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

87

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

88

2.1.12.2 Non-Transparent Access Using Mobile IP

GGSN also serves as a MIPv4 FA Mobile uses the IP address of the GGSN as its FA CoA HA may be inside an external IP network

Fig. 2.28 Protocol stacks for non-transparent access to IP networks through PS CN domain

MIPv4 UDP IP

MIPv4 Foreign Agent UDP IP UDP IP Layer 2 3GPP Packet Domain Bearer Layer 1 Gi

MIPv4 UDP IP Layer 2 Layer 1 External IP Network

Mobile Terminal

GGSN

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

89

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

90

15

Fig. 2.29
Mobile SGSN Activate PDP Context Request (PDP Address = 0.0.0.0 APN=MIPv4FA)

GGSN With Mobile IP FA

Mobile IP HA

2.1.12.3 Acquiring IP Address Dynamically Using DHCP from an External Network

Before an IP address is assigned to the mobile by the external IP network, the PS CN domain should be able to relay DHCP messages between the mobile and external DHCP server. When an IP address is assigned to the mobile by the external IP network, the mobiles PDP contexts on the SGSN and the GGSN need to be updated to include the mobiles IP address.

Create PDP Context Request (PDP Address = 0.0.0.0 APN=MIPv4FA) Create PDP Context Response (PDP Address = 0.0.0.0)

Activate PDP Context Accept (PDP Address = 0.0.0.0)

Mobile IP Agent Advertisement

Mobile IP Registration Request (CoA = FA CoA = Address of GGSN)

Mobile IP Registration Request (CoA = FA CoA = Address of GGSN) Mobile IP Registration Reply Extract mobiles home address And enter it to PDP Context

Mobile IP Registration Reply

GGSN-initiated PDP Context Modification Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

91

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

92

Fig. 2.30 3GPP protocol stacks for supporting IP address assignment by external network using DHCP

Fig. 2.31
Mobile SGSN Activate PDP Context Request (PDP Address = 0.0.0.0)

GGSN with DHCP Relay Agent

DHCP Server in External IP Network

Create PDP Context Request (PDP Address = 0.0.0.0) Create PDP Context Response (PDP Address = 0.0.0.0)

Activate PDP Context Accept (PDP Address = 0.0.0.0)

DHCP Client Process UDP IP Lower Layers Mobile Station

DHCP Relay Agent UDP IP UDP IP

DHCP Server Process UDP IP Lower Layers External IP Network

DHCPDISCOVER

DHCPDISCOVER DHCPOFFER DHCPREQUEST DHCPACK Extract IP Address Assigned to Mobile DHCPACK

DHCPOFFER DHCPREQUEST

Lower Layers Lower Layers GGSN

GGSN-initiated PDP Context Modification

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

93

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

94

2.1.12.4 Dial-up Access Using PPP

Dialup refers to the process of establishing a link-layer connection to an IP network PPP connection is a natural choice for implementing the portion of a dialup connection over the PS domain L2TP may be used to extend the PPP connection from GGSN to external IP network

Fig. 2.32 Protocol stacks for dialup through 3GPP packet domain to an IP network

PPP

PPP

Protocols for tunneling over IP network (e.g., L2TP) UDP IP

Protocols for tunneling over IP network (e.g., L2TP) UDP IP Lower Layers LNS in External IP Network

Lower Layers Mobile

Lower Layers

Lower Layers

GGSN (LAC)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

95

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

96

16

Fig. 2.33 Signaling flows for dialup through 3GPP packet domain to an IP network
Visited Network External IP Network

2.2 3GPP2 PACKET DATA NETWORKS

2.2.1 3GPP2 Network Architecture 2.2.2 3GPP2 Packet Data Network Architecture 2.2.3 Protocol Reference Model 2.2.4 Access to 3GPP2 Packet Data Network 2.2.5 User Packet Routing and Transport 2.2.6 Protocol Stacks for Packet Data Services

1. Activate PDP Context Request (PDP Address = 0.0.0.0)

2. Create PDP Context Request (PDD Address = 0.0.0.0) 3. Create PDP Context Response (PDP Address = 0.0.0.0)

4. Activate PDP Context Accept (PDP Address = 0.0.0.0)

SGSN

GGSN

6. L2TP Negotiation

LNS

Mobile

5. Establish PPP and Configure IP over PPP

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

97

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

98

2.2.1 3GPP2 Network Architecture

Core network

Radio Networks (RNs)

cdma2000 base station

circuit-switched domain packet-switched domain

Radio Networks (RNs): based on circuitswitched technologies and is used for both circuit-switched and packetswitched services
99

System ID (SID): identify a system Network ID (NID): identify a network pair (SID, NID) (SID, NID): uniquely identify a network within a system Base Station Controller (BSC) Base Transceiver System (BTS)
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Base Station (BS)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

100

Fig. 2.34 3GPP2 conceptual network architecture

Circuit Switched Core Network Servers (e.g., SCP, VMS, MC, PDE, NPDB, SN) Ai Radio Network MSC C A HLR VLR B Pi

2.2.1.1 Circuit-Switched Core Network

Switching and call control components

PSTN

Mobile Switching Center (MSC) Home Location Registrar (HLR) Visitor Location Registrar (VLR) Equipment Identity Registrar (EIR) Service Control Point (SCP) Voice Message System (VMS) Message Center (MC) Position Determining Entity (PDE) Number Portability Database (NPDB) Service Node (SN)
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Information Servers

Service control servers

BTS BSC Aquinter Packet Switched Core Network AAA Server Pi Aquater PCF PDSN HA Pi Pi IP Network

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

101

102

17

2.2.2 3GPP2 Packet Data Network Architecture

2.2.2.1 Functional Architecture 2.2.2.2 Reference Network Architecture

2.2.2.1 Functional Architecture

Packet Data Serving Node (PDSN) Packet Control Function (PCF) Radio Resource Control (RRC) Mobile Station (MS) Home Agent (HA) Authentication, Authorization, Accounting (AAA)
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

103

104

Fig. 2.35 3GPP2 packet data network functional architecture

Packet Data Serving Node (PDSN)

Route IP packets between the 3GPP2 network and any external IP networks Route IP packets between mobile terminals inside the same operators 3GPP2 network Act as an IP address server to assign IP address to mobiles Act as a PPP server for mobiles (i.e., establish, maintain and terminate PPP session to a mobile terminal) Provide mobility management functions (FA) Communicate with an AAA server to authenticate and/or authorize MS
105 106

RRC

PCF

PDSN

HA

MS

AAA

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Packet Control Function (PCF)

Establish, maintain, and terminate layer-2 connections to the PDSN Maintain reachability information for mobile terminals Relay IP packets between RN and PDSN Tracks status of radio resources Communicate with RRC function on the BSC to manage radio resources
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Radio Resource Control (RRC)

Establish, maintain, and terminate radio connections to mobiles and management radio resources allocated to these connections Broadcast system information to mobiles Maintain status of mobile terminals (e.g., active, dormant)
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

107

108

18

Mobile Station (MS)

User Identity Module (UIM): removable or integrated into ME Mobile Equipment (ME)

Fig. 2.36 Functional architecture of a mobile station (MS)

MS ME
TE MT TA

Terminal Equipment (TE) Mobile Terminal (MT) Terminal Adapter (TA)

UIM
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

109

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

110

2.2.2.2 Reference Network Architecture

Simple IP Access

Fig. 2.37 3GPP2 packet data network reference physical architecture Home Access
Visited Access Provider Network 1 MSC/ VLR Provider Network

SS7 Network

HLR

mobile is assigned an IP address dynamically by PDSN obtain a new IP address when MS moves to a new PDSN
RN Mobile Terminal

Visited AAA

Home AAA Home IP Network

IP Network

AAA Broker AAA Network

Mobile IP Access

A10/A11 PDSN HA

Mobile IP (v4 or v6)

P-P Interface

Visited Access Provider Network 2

Home IP Network, Private Network, or Home Access Provider Network

PDSN Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

111

112

IPv6
PDSN acts as an IPv6 access router PPP is established between MS and PDSN IPv6 over PPP PDSN sends Router Advertisement MS can use IPv6 stateless autoconfiguration to construct and configure a local IPv6 address
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Relation with CS Network

Many critical capabilities in PS network rely on CS network

handoff, paging, connection setup

PS network does not directly interface with the CS network CS procedures are initiated by the BSC inside RN upon receiving data or requests from PCF
113
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

114

19

2.2.3 Protocol Reference Model

A Reference Point Ater Reference Point Aquinter Reference Point Aquarter Reference Point P-P Interface (optional)

Fig. 2.38 3GPP2 protocol reference model

MSC

Call Control And Mobility Management

Circuit Switch

PDSN

A1 (Signaling)

A2 (User Traffic)

A5 (User Traffic) A Reference Point

P-P Interface

A3 (User Traffic) BSC2 A3 (Signaling) A7 (Signaling) BSC1

A8 (User Traffic) A9 (Signaling) PCF

A10 (User Traffic) A11 (Signaling) PDSN

PDSN-to-PDSN Interface is used support fast handoff between PDSNs

115

Ater Reference Point

Aquinter Reference Point Traffic interface Signaling interface

Aquater Reference Point (R-P interface)

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

116

A Reference Point
Interface A1: carry signaling traffic between the Call Control and Mobility Management functions of the MSC and the Call Control function of the BSC Interface A2 and A5: carry different types of user traffic between the switch component of MSC and Selection and Distribution Unit (SDU) on BSC
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Ater Reference Point

Interface A3: carry signaling and user traffic between SDU on a source BSC and a target BTS for supporting soft handoff

A3 signaling controls the allocation and use of A3 user traffic channels

Interface A7: carry other signaling information not carried by the A3 interface between a source and a target BS

117

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

118

Aquinter Reference Point

A8 interface: transport user data traffic A9 interface: signaling between a BSC and a PCF The A8 and A9 interfaces are also used to support mobility between BSCs under the same PCF

Aquarter Reference Point (R-P Interface)

A10 interface: provide a path for user traffic A11 interface: signaling between the PCF and the PDSN The A10 and A11 interfaces are also used to support mobility between PCFs under the same PDSN
120

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

119

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

20

2.2.4 Access to 3GPP2 Packet Data Network

Step 1: Gain access to PDSN

Step 1

MS

BSC Origination ACK

MSC

PCF

PDSN

Foreign AAA Server

Home AAA Server

Mobile IP Home Agent

CM Service Request Assignment Request Establish Traffic radio channel A9-Setup-A8 Establish A10 A9-Connect-A8 Assignment Complete Establish PPP connection Mobile IP Agent Advertisement Mobile IP Registration Request

Step 1-A: Gain access to the Radio Network. Step 1-B: Setting up resources between the BSC and the PDSN.
May not need to set up A8 connection

Fig. 2.39 3GPP2 Packet Service Activation (using Mobile IP)

Authorization Request Authorization Response

Step 1-C: Establish PPP connection between mobile and PDSN.

Authorization Request Authorization Response

Step 2: MIPv4 registration

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Step 2

Mobile IP Registration Request Mobile IP Registration Request Reply Mobile IP Registration Request Reply Accounting Request Accounting Response

121

User packets over PPP

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

122

2.2.5 User Packet Routing and Transport

Mobile maintains a PPP connection to its serving PDSN All user packets to and from the mobile will be sent to the serving PDSN first A8 and A10 connections are implemented as IP tunnels using Generic Routing Encapsulation (GRE)
123

IP Network

Fig. 2.40
A10/A11

IP

IP

PDSN 1

PDSN 2

A10/A11 GRE Tunnel GRE Tunnel

PCF 1

PCF 2

A8/A9 GRE Tunnel PPP connections

A8/A9 GRE Tunnel

BSC 1

BSC 2

Radio Bearer

User packets

Radio Bearer

Source Mobile Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Destination Mobile

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

124

2.2.6 Protocol Stacks for Packet Data Services

2.2.6.1 Protocol Interfaces 2.2.6.2 Protocol Interfaces 2.2.6.3 Protocol Interface 2.2.6.4 Protocol and PDSN Stacks over A9 and A11 Stacks over A8 and A10 Stacks over P-P Stacks Between Mobile

2.2.6.1 Protocol Stacks over A9 and A11 Interfaces

Main messages of A9

A9-Setup-A8 and A9-Connect-A8 A9-Release-A8 and A9-Release-A8 Complete A9-Disconnect-A8 A9-Update-A8 and A9-Update-A8 Ack A9-Air Link (AL) Connected and A9-Air Link (AL) Connected Ack A9-Air Link (AL) Disconnected and A9-Air Link (AL) Disconnected Ack
126

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

125

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

21

2.2.6.1 Protocol Stacks over A9 and A11 Interfaces (Cont.)

A11 signaling protocol is modeled after the Mobile IPv4 protocol

Fig. 2.41 3GPP2 protocol stacks for the A9 and A11 interfaces

PDSN acts as if it was a MIPv4 HA PCF acts as if it was a MIPv4 FA

Main messages of A11

A11 Registration A11 Registration A11 Registration A11 Registration

Request Reply Update Acknowledge

A9 Signaling TCP/UDP IP Link Layer Physical Layer

BSC

A9 Signaling TCP/UDP IP Link Layer Physical Layer A9 PCF

A11 Signaling UDP IP Link Layer Physical Layer A11

A11 Signaling UDP IP Link Layer Physical Layer

PDSN

Soft state: PCF periodically sends A11 Registration Request to refresh A10 connection
127

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

128

2.2.6.2 Protocol Stacks over A8 and A10 Interfaces

GRE encapsulates a user packet by adding a GRE header to the user packet Sequence Number: ensure packet delivery order Key: identify the IP packets to and from each mobile terminal

Fig. 2.42 3GPP2 protocol stacks for the A8 and A10 interfaces

GRE IP Link Layer Physical Layer

BSC

GRE IP Link Layer Physical Layer A8 PCF

GRE IP Link Layer Physical Layer A10

GRE IP Link Layer Physical Layer

PDSN

PCF Session Identifier (PCF SID) PDSN Session Identifier (PDSN SID)
129

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

130

Fig. 2.43 Generic Routing Encapsulation (GRE) protocol header

0 1 2 3 4 5 6 7 8 90 1 2 3 4 5 C R K S s Recur Flags Ver 6 7 8 9 0 1 2 3 4 5 6 7 8 0 1 2 Protocol Type Offset (optional) Key (optional) Sequence Number (optional) Routing (optional) Checksum (optional)

2.2.6.3 Protocol Stacks over P-P Interface

The P-P interface is an optional interface used to support fast inter-PDSN handoff (see 4.4.4) Two individual interfaces

(a) GRE header format.

0 1 2 3 4 5 6 7 8 90 1 2 3 4 5 C R K S s Recur Flags Ver Key

6 7 8 9 0 1 2 3 4 5 6 7 8 0 1 2 Protocol Type

P-P Bearer Interface: P-P traffic connection to tunnel user packets between the PDSNs by GRE tunnel P-P Signaling Interface: signaling messages and procedures for managing the P-P traffic connections

Sequence Number (optional)

(b) Format of GRE header used for tunneling between PCF and PDSN or between BSC and PCF. Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

131

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

132

22

P-P Signaling
Modeled after the Mobile IPv4 protocol

Fig. 2.44 Protocol stacks for the P-P interface

P-P Signaling UDP IP, IPsec Link Layer Physical Layer Target PDSN (a) Control-plane protocol stack P-P Signaling UDP IP, IPsec Link Layer Physical Layer Serving PDSN

Serving PDSN acts as if it was a MIPv4 HA Target PDSN acts as if it was a proxy/MIPv4 FA

Main messages of A11

A11 A11 A11 A11

Registration Request Registration Reply Registration Update Registration Acknowledge

GRE IP, IPsec Link Layer Physical Layer Target PDSN (b) User-plane protocol stack

GRE IP, IPsec Link Layer Physical Layer Serving PDSN

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

133

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

134

2.2.6.4 Protocol Stacks Between Mobile and PDSN

Mobile is not in the process of fast inter-PDSN handoff (without P-P interface)

Fig. 2.45 3GPP2 protocol stacks for user data between mobile terminal and PDSN (without P-P interface)

IP PPP GRE LAC LAC IP Link Physical Link Link IP Link IP Link GRE GRE

IP PPP GRE

IP

IP

Link Access Control (LAC): establish, use, modify, remove of radio links

With P-P interface Signaling between a mobile and its serving PDSN

Link IP Link Physical Physical

Link

Physical Physical A8

Physical Physical

Physical

Set up PPP MIPv4 registration

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

A10 (R-P) PCF Serving PDSN CH

Mobile

BSC

135

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

136

Fig. 2.46 Protocol stacks for end-to-end user traffic transport when P-P interface is used
IP PPP GRE LAC LAC IP Link Physical Link Link IP Link IP Link IP Link IP Link IP Link Physical Physical P-P Target PDSN Serving PDSN CH Physical GRE GRE GRE GRE IP PPP GRE Link Link IP IP

Fig. 2.47 3GPP2 protocol stacks for signaling between mobile terminal and PDSN
MIPv4 Client UDP IP PPP GRE LAC LAC IP MAC Physical MAC Link IP Link IP Link IP Link Physical A10 PCF Serving PDSN Physical GRE GRE MIPv4 Foreign Agent UDP IP PPP GRE Link Layer UDP IP

Physical Physical A8

Physical Physical

Physical Physical

A10 (R-P) PCF

Physical Physical A8

Physical Physical

Mobile

BSC

Mobile

BSC

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

137

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

138

23

2.3 MWIF ALL-IP MOBILE NETWORKS

MWIF seeks to develop an end-to-end all-IP wireless network that will use IETF protocols to support all networking functions at the network-layer and higher layers, including naming and addressing, signaling, service control, routing, transport, mobility management, quality of service mechanisms, security, accounting, and network management. Unlike the 3GPP and 3GPP2 networks, the MWIF architecture will no longer rely on protocols or network entities in circuitswitched core networks.
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

2.3.1 Network Architectures

Core Network

All-IP using standard IETF protocols Independent of access-specific technologies used in different Access Networks

Access Networks

139

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

140

Layered Functional Architecture

Transport Layer (in both Access Network and Core Network) Control Layer Service Layer Application Layer The security and the OAM&P (Operation, Administration, Maintenance and Provisioning) functions may span across multiple functional layers.
Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

Fig. 2.48

Application Layer

3rd Party Applications

Service Layer Applications/Services, Directory Servers, Global Name Servers, Location Servers, Authorization Server, Policy Server Control Layer Mobility Management, Communication Session Management, Address Management, Resource Manager, Authentication, Accounting. Transport Layer Core Network Access Network Access Gateway Router

Security Functions

OAM&P

Router Router

IP Gateways

Media Gateways

Signaling Gateway

Mobile Terminals

External IP Networks

PSTN and Circuit-Switched Wireless Networks

141

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

142

O p e r a t io n s , A d m in ist r a tio n , M a in t e n a n c e & P r o v is io n in g

C o n f ig u r a t io n M anagem ent F a u lt M an agem en t S e c u r it y M anagem ent P erfo rm a n ce M anagem ent B illin g M anagem ent

S63 S11 S41 S e r v ic e D is c o v e r y Server S41 S40 G e o g r a p h ic L o c a tio n M anager S39 D ir e c t o r y S e r v ic e s S41 S26 L o c a tio n Server G lo b a l N am e Server S25 S24

S64

S66

S65 A p p lic a t io n F u n c t io n a l E n t itie s C ore N etw ork A p p lic a t io n T h ir d P a r ty A p p lic a tio n

S67

C o r e N e tw o r k F u n c tio n a l E n t itie s S16 R esource D ir e c t o r y P r o file Server

S13

S14

Fig. 2.49

2.3.2 Access to MWIF Networks

Access Network Registration

P o lic y R e p o s ito r y S33 S59 S58 S15

S38

A A A F u n c tio n a l E n tit ie s S48 S50 S51 S49 C o m m u n ic a t io n S e s sio n M anager S18 S19 S41 S29 S32 S41 S28 S52 M u ltim e d ia R esource C o n t r o lle r S47 M u lt im e d ia R esource F u n c tio n B 02 B 05 In te r n e t S27 S31 IP G a te w a y S20 S e s s io n A nchor S53 R esource M anager S30 S21 S22 R ou ter B 07 M e d ia G atew ay C o n t r o lle r S43 S44 S ig n a llin g G atew ay S12 A u t h o r is a tio n Server S56 S41 A u t h e n tic a t io n Server S55 S41 S60 A c c o u n t in g Server S57 S61 S62

H om e M o b ilit y M anager S36 H o m e IP A ddress M anager

S54

Basic Registration for Core Network

Specific to each access network

S17

S e s s io n P roxy

S35 S34 M o b ile A tte n d a n t A ccess T ra n sp o rt G atew ay B 01 B 03

C N I n te r w o r k in g F u n c tio n s

S23

S42

B 10

A ccess G atew ay IP A ddress M anager

SIP Registration

Enable a mobile to gain access to the core network and to send and receive IP packets over the core network Enable a user to use SIP to initiate and receive multimedia communications An integral part of session and service management
144

B 04

B 09

M e d ia G a te w a y

T r a n sp o r t G a te w a y F E s B 05 B 05 In tr a n e t B 06 P STN S46 S45 M A P N e tw o rk

A c c e ss N e tw o rk S37 T e r m in a l B 08 S68 U ser I d e n tit y M o d u le C o lle c t iv e

E n te r p r is e N etw ork

K ey
Snn
R e fe r e n c e P o in t ( S ig n a llin g )

N etw ork F u n c tio n a l E n tity

B nn
R e fe r e n c e P o in t (U se r D a ta B e a re r)

N etw ork

A r e fe r e n c e p o in t to a c o lle c tiv e g o e s to e v e r y n e tw o rk f u n c tio n a l e n tity w ith in th e c o lle c tiv e

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

143

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

24

Serving Network

Home Network Home Mobility Authentication Policy Server Repository Manager Home IP Address Manager

Terminal

Mobile Attendant

Authentication Policy Policy Server Repository Server

Profile Server

Access Network Registration Step 1 Obtain IP Address and Mobile Attendant Address Request Terminal Registration Request Authentication Policy Request Policy Response Request Authentication Step 2 Policy Request Policy Response

2.3.3 Session Management

2.3.3.1 Functional Entities, Protocol Reference Points and Stacks 2.3.3.2 Mobile-Initiated Call Setup

Fig. 2.50 MWIF basic registration procedure

Response Response Terminal Authentication Registration Step 3 Response Authentication

Request Terminal Registration Response Terminal Registration Profile Request Profile Response

Address Request Address Response

QoS Procedure Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

145

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

146

Serving Network DIAMETER AAA Server Global Name server S25 Communication Session Manager S19 Resource Directory S24 S22 Communication Communication Session Session Manager Manager Session S20 Anchor S41 S29 S21 S27 S28 Media Resource Controller IP Gateway Media Gateway Controller Authentication Authorization Accounting Terminal Core Network Access Transport Gateway SIP INVITE

Home Network

Session Proxy

IP Gateway SIP INVITE

CSM

Authentication Server

Authorization Server

Profile Server

Policy Repository

S49

S49

Request Authentication Response Authentication

S20

Session Anchor

S18

S18

Service Discovery Server S41

Fig. 2.52 MWIF mobile-originated call setup procedure

183 Call Processing PRACK 200 OK 200 OK ACK User Data

Request Authorization

Request Profile Response Profile Request Policy

Response Authorization SIP INVITE sent to destination

Response Policy

Session Proxy

Session Proxy S17 Access Gateway 183 Call Processing PRACK

183 Call Processing from destination

Fig. 2.51
Radio Access Network Visited Network Home Network User Data Copyright 2004 by John Wiley & Sons, Inc. All rights reserved. ACK

PRACK 200 OK

ACK User Data

147

Copyright 2004 by John Wiley & Sons, Inc. All rights reserved.

148

25