UE eNB MME HSS S+P-GW

BCCH System Information

RRC RRC

PRACH: RACH preamble Random Access

MAC MAC

DL-SCH: RACH response

MAC MAC

UL-SCH: RRC Connection Request

(Initial UE identity, Cause)
RRC RRC
DL-SCH: RRC Connection Setup
(SRB1 parameter)
RRC RRC RRC Connection Establishment

UL-SCH: RRC Connection Setup Complete

(NAS: EMM attach request
+ ESM PDN connectivity request)
RRC RRC

Initial UE message
(NAS: EMM attach request
+ ESM PDN connectivity request)
eNB-UE-S1AP-ID
S1AP S1AP

Downlink NAS Transport

(NAS: Identify request)
S1AP S1AP
DL-SCH*: DL Information Transfer Identification Procedure
(NAS: Identify Request) (Used when the UE is connecting for
RRC RRC the first time and has no valid GUTI)
UL-SCH*: UL Information Transfer
(NAS: Identify Response
RRC RRC
Uplink NAS Transport
(NAS: Identify response)
S1AP S1AP

Authentication Info Request

(IMSI)
S6A S6A
Authentication Info Answer
(E-UTRAN vector:
RAND, XRES, AUTN, KASME)
S6A S6A
Downlink NAS Transport
+ NAS: Authentication Request
S1AP S1AP Authentication procedure
DL-SCH*: DL Information Transfer
+ NAS: Authentication Request
RRC RRC
UL-SCH*: UL Information Transfer
+ NAS: Authentication Response
RRC RRC
Uplink NAS Transport
+ NAS: Authentication Response
S1AP S1AP

Update Location Request

(IMSI, PLMN)
S6A S6A
Update Location Answer
(APN, QCI, MSISDN, AMBR
Mobile IP address)
S6A S6A
EPC Bearer Creation (S11 abstraction)
Create Session Request
(EBI, APN, Mobile IP address
AMBR, CSGI)
S11 S11
Create Session Response
(S-GW TEID)
S11 S11

Initial Context Setup Request

(NAS: EMM attach accept
+ ESM Activate default bearer req)
+ Bearer params(e-RAB id, S-GW TEID)
+ MME-UE-S1AP-ID
S1AP S1AP

DL-SCH: Security Mode Command

(Security Configuration)
RRC RRC

UL-SCH: Security Mode Complete

RRC RRC

DL-SCH: UE Capability Enquiry

RRC RRC
Initial Context Setup

UL-SCH: UE Capability Information

RRC RRC

UE Capability Info Indication

S1AP S1AP

DL-SCH: RRC Connection Reconfiguration

(Bearer Setup + NAS EMM Attach Accept
+ ESM Activate default bearer req)
RRC RRC
UL-SCH: RRC Connection
Reconfiguration Complete
RRC RRC
Initial Context Setup Response
(eNB TEID)
S1AP S1AP

UL-SCH*: UL Information Transfer

(NAS: EMM attach complete
+ ESM Activate default bearer resp)
RRC RRC
Uplink NAS Transport + NAS
+ (S1-U eNB TEID)
S1AP S1AP Default EPS bearer activation
Modify Bearer Request
(S1-U eNB TEID)
S11 S11

Modify Bearer Response

S11 S11

Downlink NAS Transport

+ NAS: EMM Information
S1AP S1AP
DL-SCH*: DL Information Transfer
+ NAS: EMM Information
RRC RRC

LTE Active RRC Connected LTE Active EPC bearer active

Figure 1: Control Plane Initial Attach Procedure + Default Bearer Creation

Optional procedure

* Sent on SRB1 if SRB2 is not established yet

Abstraction link

1 Written by Sebastien ROUX 2013

c - Eurecom
2 Written by Sebastien ROUX 2013
c - Eurecom
 SCTP S1AP NAS MME APP S6A S+P-GW APP

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
RRC Establishment Cause, E-UTRAN CGI, Current time
Initial UE message
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU, TAI
S-TMSI, CSG Id, GUMMEI, Cell Access Mode, Used only when UE context is not known in MME
GW Transport Layer Address, Relay Node Indicator Attach Request
Default APN: NULL, UE network cap,
EPS attach type, KSI, GUTI, IMEI, IMSI Authentication Information Request
Request type: Initial, PDN Type PLMN Id, IMSI,
Destination Host, Destination Realm
Supported Features, Number of vectors=1,
Immediate Response

Authentication Information Answer

Result Code, Supported Features
E-UTRAN Vector: RAND, XRES, AUTN, KASME

Authentication Request
Downlink NAS transport
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU

Send Data Req

OUT Stream, Association ID, Payload, Payload Length
This procedure should be initiated only when
UE is not authenticated or for an initial at-
New Data Indication tach
IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
Uplink NAS Transport
eNB UE S1AP ID, MME UE S1AP ID,
NAS PDU, E-CGI, TAI
Update Location Request
IMSI, Initial Attach, RAT Type, UE SRVCC Capability
Authentication Response Terminal Information: IMEISV Skip subscriber data flag set when MME al-
PLMN Id ready knows UE APN Configuration
Supported Features
S6A flag, Don’t skip subscriber data

Update Location Answer

Result Code = DIAMETER SUCCESS, Subscription Data:
{ Subscriber Status, Network Access Mode, RAU TAU timer
AMBR, MSISDN, APN Configuration Profile
[Default-APN Id, APN-Configuration<1:n>(UE IP<0:2>,
Service Selection, QOS profile, APN-AMBR,
PDN GW address)]}

Create Session Request

IMSI, RAT Type, Initial Attach, UE time zone
ECGI, TAI, CSG Id
APN, PDN type, Selection Mode, PAA, APN-AMBR
Bearer to create<1>: EBI, QOS, S-GW F-TEID, TFT

3
Create Session Response
Bearer Creation Result
PAA, APN-AMBR, QoS, TFT, EBI
S1-U S-GW TEID, S-GW Address
Initial Context Setup Request
NAS PDU, eNB UE S1AP ID, MME UE S1AP ID Attach Accepted + Default Bearer
AMBR, APN-AMBR, QoS, S-GW Address,
S1-U S-GW TEID, KeNB
security cap (encryption/integrity)
Send Data Req
OUT Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
UE Capability Indication
eNB UE S1AP ID, MME UE S1AP ID,
UE Radio Capability
New Data Indication
IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
Initial Context Setup Response
eNB UE S1AP ID, MME UE S1AP ID,
E-RAB: ID, Tranport Address, GTP-TEID

Attach Complete
Default Bearer Creation Result(UE side)
Modify Bearer Request
EBI,
S1-U eNB (TEID + Address)

Modify Bearer Response

Result
EBI, Cause, S1 SGW F-TEID

Figure 2: MME detailed behaviour: Default Bearer Creation

MME application or default MME
MME
parameter

S1AP S1AP provided parameter

c
NAS NAS provided parameter

S6A HSS provided parameter

Written by Sebastien ROUX 2013

S11 S+P-GW provided parameter

SCTP SCTP provided parameter

- Eurecom
Optional Optional parameter
 SCTP S1AP NAS MME APP S6A S+P-GW APP

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
RRC Establishment Cause, E-UTRAN CGI, Current time
Initial UE message
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU, TAI
S-TMSI, CSG Id, GUMMEI, Cell Access Mode,
GW Transport Layer Address, Relay Node Indicator Attach Request
Default APN: NULL, UE network cap,
EPS attach type, KSI, GUTI, IMEI, IMSI Authentication Information Request
Request type: Initial, PDN Type PLMN Id, IMSI,
Destination Host, Destination Realm
Supported Features, Number of vectors=1,
Immediate Response

Authentication Information Answer

Result Code 6= DIAMETER SUCCESS
Failure Indication
Diameter to NAS mapped cause value
(See 3GPP TS 29.272 Table A.1)

Downlink NAS transport

eNB UE S1AP ID, MME UE S1AP ID, NAS PDU

Send Data Req

OUT Stream, Association ID, Payload, Payload Length

Figure 3: MME detailed behaviour: Default Bearer Rejected (S6A Authentication Failure)

SCTP S1AP NAS MME APP S6A S+P-GW APP

New Data Indication

IN Stream, Association ID, Payload, Payload Length Initial UE message
S1-MME eNB IP address eNB UE S1AP ID, MME UE S1AP ID, NAS PDU, TAI
RRC Establishment Cause, E-UTRAN CGI, Current time
S-TMSI, CSG Id, GUMMEI, Cell Access Mode,
GW Transport Layer Address, Relay Node Indicator Attach Request
Default APN: NULL, UE network cap,
EPS attach type, KSI, GUTI, IMEI, IMSI Authentication Information Request
Request type: Initial, PDN Type PLMN Id, IMSI,
Destination Host, Destination Realm

4
Supported Features, Number of vectors=1,
Immediate Response

Authentication Information Answer

Result Code, Supported Features
E-UTRAN Vector: RAND, XRES, AUTN, KASME

Authentication Request
Downlink NAS transport
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU

Send Data Req

OUT Stream, Association ID, Payload, Payload Length

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
Uplink NAS Transport
eNB UE S1AP ID, MME UE S1AP ID,
NAS PDU, E-CGI, TAI
Update Location Request
IMSI, Initial Attach, RAT Type, UE SRVCC Capability
Authentication Response Terminal Information: IMEISV
PLMN Id
Supported Features, Destination Host/Realm
S6A flag, Don’t skip subscriber data

Update Location Answer

Result Code 6= DIAMETER SUCCESS
Failure Indication
Diameter to NAS mapped cause value
(See 3GPP TS 29.272 Table A.1)

Downlink NAS transport

eNB UE S1AP ID, MME UE S1AP ID, NAS PDU
Send Data Req
OUT Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address

Figure 4: MME detailed behaviour: Default Bearer Rejected (S6A Update Location Failure)

c
Written by Sebastien ROUX 2013 - Eurecom
 SCTP S1AP NAS MME APP S6A S+P-GW APP

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
RRC Establishment Cause, E-UTRAN CGI, Current time,
Initial UE message
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU, TAI
S-TMSI, CSG Id, GUMMEI, Cell Access Mode,
GW Transport Layer Address, Relay Node Indicator Attach Request
Default APN: NULL, UE network cap,
EPS attach type, KSI, GUTI, IMEI, IMSI Authentication Information Request
Request type: Initial, PDN Type PLMN Id, IMSI,
Destination Host, Destination Realm
Supported Features, Number of vectors=1,
Immediate Response

Authentication Information Answer

Result Code, Supported Features
E-UTRAN Vector: RAND, XRES, AUTN, KASME

Authentication Request
Downlink NAS transport
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU

Send Data Req

OUT Stream, Association ID, Payload, Payload Length

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
Uplink NAS Transport
eNB UE S1AP ID, MME UE S1AP ID,
NAS PDU, E-CGI, TAI
Update Location Request
IMSI, Initial Attach, RAT Type, UE SRVCC Capability
Authentication Response Terminal Information: IMEISV
PLMN Id
Supported Features
S6A flag, Don’t skip subscriber data

Update Location Answer

Result Code = DIAMETER SUCCESS, Subscription Data:
{ Subscriber Status, Network Access Mode, RAU TAU timer
AMBR, MSISDN, APN Configuration Profile
[Default-APN Id, APN-Configuration<1:n>(UE IP<0:2>,

5
Service Selection, QOS profile, APN-AMBR,
PDN GW address)]}

Create Session Request

IMSI, RAT Type, Initial Attach, UE time zone
ECGI, TAI, CSG Id
APN, PDN type, Selection Mode, PAA, APN-AMBR
Bearer to create<1>: EBI, QOS, S-GW F-TEID, TFT

Create Session Response

Cause 6= Attach Accepted
Failure Indication
S11 to NAS mapped cause value
(See 3GPP TS 29.274 Table 8.4.1)

Downlink NAS transport

eNB UE S1AP ID, MME UE S1AP ID, NAS PDU
Send Data Req
OUT Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address

Figure 5: MME detailed behaviour: Default Bearer Rejected (S-GW Failure)

MME application or default MME
MME
parameter

S1AP S1AP provided parameter

NAS NAS provided parameter

S6A HSS provided parameter

S11 S+P-GW provided parameter

SCTP SCTP provided parameter

Optional Optional parameter

c
Written by Sebastien ROUX 2013 - Eurecom
 SCTP S1AP NAS MME APP S6A S+P-GW APP

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
RRC Establishment Cause, E-UTRAN CGI, Current time
Initial UE message
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU, TAI
S-TMSI, CSG Id, GUMMEI, Cell Access Mode,
GW Transport Layer Address, Relay Node Indicator Attach Request
Default APN: NULL, UE network cap,
EPS attach type, KSI, GUTI, IMEI, IMSI Authentication Information Request
Request type: Initial, PDN Type PLMN Id, IMSI,
Destination Host, Destination Realm
Supported Features, Number of vectors=1,
Immediate Response

Authentication Information Answer

Result Code, Supported Features
E-UTRAN Vector: RAND, XRES, AUTN, KASME

Authentication Request
Downlink NAS transport
eNB UE S1AP ID, MME UE S1AP ID, NAS PDU

Send Data Req

OUT Stream, Association ID, Payload, Payload Length

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
Uplink NAS Transport
eNB UE S1AP ID, MME UE S1AP ID,
NAS PDU, E-CGI, TAI
Update Location Request
IMSI, Initial Attach, RAT Type, UE SRVCC Capability
Authentication Response Terminal Information: IMEISV
PLMN Id
Supported Features
S6A flag, Don’t skip subscriber data

Update Location Answer

Result Code = DIAMETER SUCCESS, Subscription Data:
{ Subscriber Status, Network Access Mode, RAU TAU timer
AMBR, MSISDN, APN Configuration Profile
[Default-APN Id, APN-Configuration<1:n>(UE IP<0:2>,
Service Selection, QOS profile, APN-AMBR,
PDN GW address)]}

Create Session Request

IMSI, RAT Type, Initial Attach, UE time zone

6
ECGI, TAI, CSG Id
APN, PDN type, Selection Mode, PAA, APN-AMBR
Bearer to create<1>: EBI, QOS, S-GW F-TEID, TFT

Create Session Response

Bearer Creation Result
PAA, APN-AMBR, QoS, TFT, EBI
S1-U S-GW TEID, S-GW Address for UP
Initial Context Setup Request
NAS PDU, eNB UE S1AP ID, MME UE S1AP ID Attach Accepted + Default Bearer
AMBR, APN-AMBR, QoS, S-GW Address,
S1-U S-GW TEID, KeNB,
security cap (encryption/integrity)
Send Data Req
OUT Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address

New Data Indication

IN Stream, Association ID, Payload, Payload Length
S1-MME eNB IP address
Initial Context Setup Failure
eNB UE S1AP ID, MME UE S1AP ID,
Cause, Criticality Diagnostics

Delete Session Request

Linked EPS Bearer Id

Delete Session Response

Result

Figure 6: MME detailed behaviour: Default Bearer Rejected (eNB Reject or Failure)
MME application or default MME
MME
parameter

S1AP S1AP provided parameter

NAS NAS provided parameter

S6A HSS provided parameter

S11 S+P-GW provided parameter

c
SCTP SCTP provided parameter

Written by Sebastien ROUX 2013

Optional Optional parameter

- Eurecom