IMS Introduction 4

2e
Introduction IMS
2e
Ulf Spangenberger
Overview 2e
• IMS basics
 Basic functionality
 Architecture + Interfaces
 Subscriber data • VoLTE features
 Registration procedure  Precondition
 Invite procedure  Gating
 SRVCC
• VoLTE with IMS  eSRVCC
 EME call
 Subscriber data LTE
 (emSRVCC)
 Registration procedure LTE
 Invite procedure LTE
 SDP + Codecs
 SIP + Routing
Introduction in IMS 2 Ulf Spangenberger

IMS intro 2e
“The IP Multimedia Subsystem or

IP Multimedia Core Network Subsystem (IMS)
is an architectural framework
for delivering IP multimedia services”
Service/Application
voice layer
IMS layer
172.27.132.232
text
Transport layer

Call setup via IMS 2e
Application Application Application

Server AS1 Server AS2 Server AS3
IP1 Call routing CS

Gate
Fixed / DSL LI
way
User authentication
Session
IPMultimediaSubsystem
IP4
Initiation
Call routing
Protocol
Security
Charging
LTE LTE
Trigger data path setup
IP2 Session IP3
Description
Protocol
RTP/RTCP

IMS architecture 2e
DNS
AS
Sh
ENUM
diameter ISC SIP
• Security (TH, SLA)

S6a HSSd
MME -FE HSS One-NDS • Call routing
diameter
LDAP
IMS
Ic
SIP Mw Cx diameter IMS
SIP
Gm P- I- S-
UE CSCF CSCF CSCF
CSCF
I-BCF BGCF
Mj, Mg
SIP
MGCF
diameter Rx
H.248 Iq
A-BGF • Trigger data path setup • Call routing
PCRF • Security (SBC) • Authentication
• LI • LI
Gx • Charging • Charging
P-GW
Call control signalling
VoLTE test bed overview User plan traffic HSS/HLR CSCF OpenTAS
PS/UTRAN sign/traffic
Other control traffic FlexiNG NVS/MSS 2e
MGW
GERAN/UTRAN
Uu D 10.200.241.206
10.200.137.3 MSS MAP D MMTEL D
10.200.136.5 HLR-FE MAP MRFC MAP
10.200.136.8/.9
SCC-AS
10.200.50.152
10.200.24.177 Gr Sh IP-SM-GW SMS-C
LDAP
MAP diameter Ut/XCAP
SGSN
10.200.50.154
One-NDS 10.200.50.144
172.24.6.81/.82 ISC
10.200.82.84
SIP MGCF
LDAP 10.200.81.101
I/S/E-CSCF
SGs Sv 10.200.81.164/.166 Cx Mj, Mg
Gn SGSAP GTPv2 BGCF
10.200.81.106 diameter SIP
GTPv1
10.200.81.106
10.200.81.101 10.200.81.101 10.200.136.34/.35
S6a
diameter HSSd-FE
Mw
SIP Mr, Mp
MEGACO
10.200.53.192/27 10.50.45.33 PCRF 10.200.84.71 10.200.81.101 10.200.81.221
10.200.53.208/27 (EME)
10.50.45.49
Ut LDAP Rx Mn
HTTP MME 10.50.45.25
diameter P-CSCF
10.200.84.103 ATCF / EATF
S1-MME S11 10.200.81.135 Iq
Gx
LTE-Uu S1AP GTPv2 Gm MEGACO
10.50.45.49 diameter
10.50.45.209 SIP
10.50.53.192/.193
eNB SGi
10.50.54.66 10.50.54.32 (LB)
10.50.54.33/.34 IP www 10.200.83.19
Mb
10.50.54.66 S1-U 10.50.54.35/.36 S5

172.24.6.113 10.200.8.40
GTPv1 S-GW GTPv2 P-GW/ A-BGF
eUTRAN MGW/MRFP
10.50.54.37/.38 GGSN 10.200.83.148 10.200.83.180
10.200.136.96/29
10.200.136.104/29
Gn
GTPv1 DNS
Subscriber data One-NDS, hss 1 2e
IMPU (IP Multimedia PUblic Identity) URI: Uniform resource identifier -> SIP-URI / TEL-URI
sip:<user part>@<host/domain part>
tel:<telefone number>
sip:+493179106001@tb17.mchm.nsn-rdnet.com
IMPI (IP Multimedia Private Identity) <any string> used for authentication
derived IMPI = IMPU without „sip:“
+493179106001@tb17.mchm.nsn-rdnet.com
Credentials, e.g. password

iFC (initial Filter Criteria) priority -> sequence

application server -> destination
trigger point -> filter
default handling
ConditionTypeCNF: 1 SPT:
SPT ID: 2
SPT: Condition Negated: 0
SPT ID: 0 Group: 2
Condition Negated: 0 SPT Class: SIPHeader
Group: 0 Header: "Content-Type"
SPT Class: SessionCase Content: "application/sdp„
Value: 0 "ORIGINATING SESSION„
SPT:
SPT: SPT ID: 3
SPT ID: 1 Condition Negated: 0
Condition Negated: 0 Group: 3
Group: 1 SPT Class: SessionDescription
SPT Class: Method Line: "body"
Value: "INVITE" Content: "m=(audio|video|image)„

Registration procedure 2e
IMPU/IMPI
DNS AS
IMPU1
IMPU2
scscf2 HSSd-FE iFC AS
One-NDS
3rd party registration

NAPTR <domain> IMPU1
registered
User-Authentication Multimedia-Auth IMPU2
UAR/A: Do we know this subscriber? MAR/A: I need the credentials
Is subscriber registered? Server-Assignment
SAR/A: I need the subscription data (e.g. iFCs,
additional IMPUs)
I-CSCF S-CSCF
I-CSCF S-CSCF
P-CSCF I-CSCF S-CSCF
REGISTER sip:<domain> REGISTER sip:<domain> REGISTER sip:<scscf2>
From: IMPU1
To: IMPU1
IMPU1 IMPU1 scscf2 scscf1 cap 1 2 prio 1 weight 80 IMPU1 pcscf3

IMPU2 IMPU2 IP address scscf2 cap 3 4 prio 1 weight 20 IMPU2
iFC

REGISTER message flow 2e
P- I- S-
HSS AS
CSCF CSCF CSCF
Select I-CSCF
REGISTER based on DNS
UAR (S-CSCF already assigned?)
REGISTER
UAA
Select S-CSCF
based on config
MAR
REGISTER
MAA (provide credentials)
401 Unauthorized (nonce)
REGISTER (auth.header with reponse)
UAA (provide S-CSCF FQDN)
SAR
REGISTER
SAA (provide iFCs, IMPUs)

200 OK (P-Associated-URI = <default IMPU>
3rd party REGISTER
P-Associated-URI = add. IMPUs)
200 OK

REGISTER message flow, cont. 2e
P- I- S-
HSS AS
CSCF CSCF CSCF
SUBSCRIBE (Event: reg)

LIR (which S-CSCF is assigned)
LIA (S-CSCF)
SUBSCRIBE (Event: reg)
200 OK
NOTIFY (event=registered)
200 OK

INVITE procedure, originating side 2e
AS
AS ENUM DNS
Domain based routing
No such name NAPTR <valid_domain>

<#>
sip:<#>@<valid_domain>
I-BCF
A IMS
P- S-
CSCF CSCF
INVITE A INVITE A
sip:<#>@<domain> sip:<#>@<domain>
From: IMPU-A From: IMPU-A iFC
UE-A BGCF MGCF

IMPU-A scscf2 IMPU-A pcscf3
IP address
iFC
Number based routing

iFC sources and destinations 2e
HSS AS
Cx
OpenTAS External
S-CSCF iFC iFC

operator services
operator services
operator services
User services
iFC iFC
Incoming
Outgoing
Forced
iFC iFC
nena, transcoding … FEE
iFC
enum, snh, numglob,
GAT, PI, … LoPS
EATF role
ISC
ims/cscf/scscf/
OperatorService Service Control (SC)
nena: National Emergency Number Assiciation LoPS: Local Plugin Service PI: Prefix Insertion numglob: Number Globalization
FEE: Feature Expansion Environment GAT: Global Address Translation snh: Service Number Handling

INVITE procedure, terminating side 2e
IMPU-B
sip:<#>@<valid_domain> scscf4
One- HSSd AS
-FE AS
NDS
Location-Info (LIR/A)
I-
CSCF
S- P-
B
CSCF CSCF
/
INVITE INVITE B INVITE B INVITE
I-BCF
sip:<#>@<valid_domain> sip:<#>@<valid_domain> sip:<contact from REG> sip:<#>@<UE IP>
B iFC
UE-B
IMPU-B pcscf3 IMPU-B scscf4
IP address
iFC

INVITE message flow 2e
P- S- AS ENUM S- AS P-
I-CSCF HSS
CSCF CSCF A DNS CSCF B CSCF
B
A A B B
INVITE
INVITE
INVITE
ENUM NAPTR
SIP-URI
domain NAPTR
domain IPs
LIR
INVITE
LIA ( S-CSCF FQDN)

INVITE
INVITE
INVITE
INVITE
RINGING
200 OK
ACK

VoLTE specific IMS feature 2e
VoLTE basic VoLTE with precondition VoLTE with Gating
REGISTER Provisioning, see „basic“ see „basic“

OpenTAS
INVITE T-ADS (OpenTAS) SIP: 183 Session Progress, Update Rx: Flow status,
Rx -> PCRF SDP: curr, des, conf Message manipulation
SRVCC eSRVCC VoLTE EME

emSRVCC
REGISTER OpenTAS (SCC-AS) OpenTAS, ATCF See „basic“
INVITE - OpenTAS - OpenTAS + ATCF - E-CSCF + EATF (SCC-AS)

- Domain transfer - Domain transfer - Domain transfer
request with STN-SR request with ATCF- request with E-STN-SR
STN-SR
OpenTAS: ATCA based Telefon Application Server ATCF: Access Transfer Control Function
T-ADS: Terminating - Access Domain Selection EATF: Emergency Access Transfer Function
STN-SR: Session Transfer Number – Single Radio PCRF: Policy and Charging Rule Function
eSRVCC: enhanced Single Radio Voice Call Continuity SCC-AS: Service Centralization and Continuity-Application Server

IMPU (IMSI-derived) sip:<IMSI>@ ims.mnc<MNC>.mcc<MCC>.3gppnetwork.org
sip:555103114300011@ims.mnc010.mcc555.3gppnetwork.org
! For Registration only !
! For USIM UEs only !
IMPI (IMSI-derived) <IMSI>@ ims.mnc<MNC>.mcc<MCC>.3gppnetwork.org

555103114300011@ims.mnc010.mcc555.3gppnetwork.org
Credentials = AKA vectors

IMS AKA authentication

-> OpenTAS

Subscriber data One-NDS, hlr 1 2e
-> MSS
-> OpenTAS

Subscriber data One-NDS, hlr 2 2e
-> MME
-> OpenTAS

Register message flow, VoLTE 2e
P- I- S- Open
HSS
CSCF CSCF CSCF TAS
Select I-CSCF
SAE- REGISTER
eNB
GW UAA
3rd party Register
IP1 QCI 9 Select S-CSCF
based on config
IP2 QCI 5 3rd party REGISTER (;DataRepository, Default IMPU)
MAR
MAR HLR
REGISTER
(IMPU = IMSI derived, IPsec -UE)
LTE attach REGISTER UDR (Repository Data)
MAA (provide
credentials)
401 Unauthorized
RD
UAR (S-CSCF already assigned?) UDA (SIP-Basic-Data)
REGISTER
RDA (MMTEL)
401 Unauthorized (IPsec – P-CSCF) 200 OK
SAR
REGISTER (IPsec tunnel) REGISTER
200 OK
SAA (provide iFCs, IMPUs)
IPsec 200 OK (P-Associated-URI = MSISDN IMPU
P-Associated-URI = tel-uri) 3rd party REGISTER
200 OK

INVITE message flow, VoLTE 2e
P- S- Open ENUM S- Open P-

I-CSCF HSS
CSCF CSCF TAS-A DNS CSCF TAS-B CSCF
B
A A B B
INVITE (IMPU-B)
QCI 5
INVITE
T-ADS - Register status, - OPTIONS time out
INVITE (SDP) - T-ADS information via HSS from MME
INVITE
ENUM/domain NAPTR
Gx a OPTIONS
eNB
SAE- SIP-URI/domain IPs
GW INVITE (IMPU-B)
LIR 200 OK
INVITE
IP1 QCI 9: Data b INVITE (MSRN) get MSRN from HLR
QCI 5: SIP LIA ( S-CSCF FQDN)
IP2 Break out
INVITE
QCI 1: RTP
Dedicated bearer setup INVITE
INVITE
INVITE
RINGING
200 OK (SDP)
AAA ACK AAA
AAR
AAR
- Flow descriptor
PCRF (IP address + port) PCRF
- Codec list
- Bandwidth
Gx Rx
SDP 2e
Requested bandwidth for Destination IP address for
RTP/RTCP RTP/RTCP
Media type
Destination port for RTP
(RTCP = RTP +1)
Ordered codec list

(payload type)
> 96 is dynamic range
Mapping from payload type

to encoding name
AMR modes
Precondition attributes
Stream mode directionality

Codecs 2e
G.711 – (static 8, 0)
• 8kHz / 8bit + no compression => 64 kbit/s
• used for ISDN and VoIP in fixed line environment
• good voice quality (MOS = 4,4)
AMR (Adaptive Multirate Codec) – (dynamic)
• 8kHz / 13bit
• 4,75 – 12,2 kbit/s
• bit rate according to radio quality
• used in GSM and UMTS
• 12,2 kbit/s mode ≈ G.711
AMR-WB (AMR-Wide band) – (dynamic)
• 16kHz / 14bit
• 6,6 – 23,85 kbit/s
• 12,65 kbit/s mode ≈ G.722 with 56 kbit/s (MOS = 4,5)
• lower modes for bad radio conditions
• higher modes for background noise environment,
combined voice and music
• G.722.2

VoLTE config, Rx 2e
P-CSCF: Access Network Table P-CSCF / PDF Support: PDF List
Check for diameter connection with:

Originating host = pcs10-ims
Originating realm = tb11.mchm.nsn-rdnet.com
Common: Diameter Table


OpenTAS

emSRVCC

STN-SR

VoLTE, „ghost ringing“ 2e

I-CSCF HSS
B
A A B B
INVITE (SDP)
RINGING
BYE BYE
200 OK (SDP)
AAA ACK AAA
AAR (Flow descriptor, AAR (Flow descriptor,

Codec list, Codec list,
PCRF Bandwidth) Bandwidth) PCRF
SAE-
eNB
GW
AAA
Data: QCI 9
SIP: QCI 5
RTP: QCI 1

Precondition 2e
• Precondition: a set of constraints that must be fulfilled before the user is alerted (rfc3312)
• new SDP attributes
curr (current status), des (desired status), conf (confirmation status)
• Offer/Answer message flow
A -> B
Initial INVITE (SDP) Delay ringing
A B until curr=des
for A
Session Progress (SDP) B -> A

Inform me
when
curr=conf
RAB setup B
RAB setup A
UPDATE (SDP) A -> B
curr=conf=des
200 OK (SDP)
Ringing

VoLTE, precondition 2e

I-CSCF HSS
B
A A B B
INVITE (SDP)
183 Session progress (SDP)
AAR/A AAR/A
PCRF PCRF
PRACK (Session progress)
200 OK (PRACK)
QCI 1 Update (SDP)
QCI 1
200 OK (Update, SDP)
AAR/A AAR/A
PCRF PCRF
RINGING
200 OK (Invite)
AAR/A AAR/A
PCRF PCRF
ACK

VoLTE config, Precondition 2e
UE feature -> Nothing to configure


OpenTAS

emSRVCC

STN-SR

Early media / Gating OFF 2e
P- S- Open ENUM S- Open

I-CSCF HSS
CSCF CSCF TAS-A DNS CSCF TAS-B MGCF
B
A A B
T-ADS UE-B not
INVITE (SDP)
registered
-> break out
183 Session progress (SDP)
AAR/A
PCRF Paging via

RTP (Announcement) SGs ->
CS fall back
Early media:
Gating OFF
(RTP before 200 OK)
RINGING
200 OK (SDP)
ACK

Early media / Gating ON 2e

I-CSCF HSS
B
A A B B
INVITE (SDP)
183 Session Progress (SDP)
AAR/A AAR/A
RTP
PCRF Suppress 200 OK PCRF

-> Use Early media for fraudulent communication
Gating ON

Early media, standard handling 2e
< IMS 10.1
Gating =
ON/OFF
P- 183 Session Progress (SDP)

CSCF
B
SIP header:
P-Early-Media: sendrecv
SIP body:
a-line: sendrecv
AAR/A
Gating=ON -> Flow-status: disabled

Gating=OFF -> Flow-status: enabled

Early media, intelligent handling 2e
IMS 10.1
Gating = Gating =
Accepted Accepted
P- P- 183 Session Progress (SDP)

CSCF CSCF MM
A B
SIP header: SIP header: SIP header:
P-Early-Media: inactive, P-Early-Media: inactive P-Early-Media: sendrecv
gated SIP body: SIP body:
SIP body: a-line: sendrecv a-line: sendrecv
a-line: sendrecv
AAR/A AAR/A
Flow-status: enabled Flow-status: disabled Gating ON
P- 183 Session Progress (SDP)

Gating OFF
CSCF MGCF
A SIP header:
P-Early-Media: sendrecv
SIP body:
a-line: sendrecv
AAR/A
Flow-status: enabled

Gating 10.1, complete call flow 2e

I-CSCF HSS
B
A A B B
MM -> P-Early-Media = Inactive

INVITE (SDP)
AAR/A AAR/A
183 Session progress (P-Early-Media = Inactive, gated; SDP)
PCRF PCRF
PRACK (Session progress)
200 OK (PRACK) QCI 1
QCI 1 Update (SDP)

MM -> P-Early-Media = Inactive
200 OK (Update, P-Early-Media = Inactive, gated; SDP)
AAR/A AAR/A
PCRF PCRF
RINGING
no MM
200 OK (Invite)
AAR/A AAR/A
PCRF PCRF
ACK

VoLTE config, Gating 1 2e
P-CSCF / PDF Support: Gq features per Access Type
P-CSCF: Access Networks
Gating Gating (access Flow status in: Flow status in: Gating result
networks) - 183 session progress - 200 OK (final)
- Update
On Legacy / Forced disabled enabled ON

Off Legacy enabled - OFF
Off Forced disabled enabled ON
On/Off Accepted enabled for UE-A enabled for UE-A OFF (UE-A)
disabled for UE-B enabled for UE-B ON (UE-B)
new in 10.1

Message manipulation - part 1
P-CSCF: SPS Configuration Table
INGRESS INGRESS
E1 E2
P-CSCF
E2 E1
EGRESS EGRESS

Message manipulation - part 2
reinsert.xml
<clist>
<manipulation>
<name>Remove received PEM header</name>
<rule>
<remove>
<path-what>/response/header[@name=’P-Early-Media’]</path-what>
</remove>
</rule>
</manipulation>
<manipulation> MmConfigClist.sh
<name>Insert PEM header with inactive value</name> –p
<rule> –add /home/mm/reinsert.xml
<add>
<path-where>/response</path-where>
<path-what>./header[@name=’P-Early-Media’]</path-what>
<value>inactive</value>
</add>
</rule>
</manipulation>
</clist>

SIP basics, RFC 3261 2e
• Application layer control protocol

• HTTP like transaction model
user agent request user agent
client server
provisional
responses (1xx)
Final response (2xx, 3xx, 4xx, 5xx, 6xx) SIP dialog
server request client

response
• Syntax: start-line/header/[body]
• Private header -> flexible
• Coded as text string -> easy to read

• Independant from the media description protocol
• Reconfiguration of media stream possible -> first audio, then also video

SIP header 2e
Integer that is decremented at
each hop
address were response is
expected
SIP URI of the originator
+ random string SIP URI of the original
target of the request
Identifier for this call

(to-tag + from-tag + Call-ID
= dialog ID
Sequence number
SIP URI were future

requests are expected
Description and length of

the message body

SIP routing 2e
Originating side Terminating side

INVITE
SIP header
Route:
IP source = mobile IP IP source = P-CSCF IP Via:
IP destination = P-CSCF IP IP destination = S-CSCF IP Contact:
Record-Route:
?
RINGING / 200OK
? ACK / INVITE / BYE

SIP routing, initial request, INVITE 2e
SIP SIP SIP

proxy proxy proxy
A B C
Request-URI: sip:UE-B Request-URI: sip:UE-B Request-URI: sip:UE-B

Request-URI: sip:UE-B
Via: proxy-A Via: proxy-B Via: proxy-C
Via: UE-A
Record-route: sip:proxy-A Via: proxy-A Record-route: sip:proxy-C
Contact: sip:UE-A
Via: proxy-B
route set
Via: UE-A Record-route: sip:proxy-A - proxy-C
Contact: sip:UE-A Via: UE-A Via: proxy-A
Record-route: sip:proxy-A - proxy-A
Contact: sip:UE-A
Via: UE-A
Contact: sip:UE-A
Contact-A
Dialog-ID
Via: proxy-C
Via: proxy-C Via: proxy-B
Via: proxy-C Via: proxy-B Via: proxy-A
Via: proxy-A Via: UE-A
Via: proxy-B
Via: proxy-C Via: UE-A Record-route: sip:proxy-C
Via: proxy-A
Via: proxy-B Record-route: sip:proxy-C Record-route: sip:proxy-A
Via: UE-A
Via: proxy-A Record-route: sip:proxy-A Contact: sip:UE-B
Record-route: sip:proxy-C
route set Via: UE-A Record-route: sip:proxy-A Contact: sip:UE-B
- proxy-A Record-route: sip:proxy-C Contact: sip:UE-B
- proxy-C Record-route: sip:proxy-A
Contact: sip:UE-B
Contact-B
Dialog-ID

SIP routing, subsequent request, e.g. BYE 2e
SIP SIP SIP

proxy proxy proxy
A B C
Request-URI: Contact-B Request-URI: Contact-B Request-URI: Contact-B

route set Route: sip:proxy-A Route: sip:proxy-A Route: sip:proxy-A
- proxy-A Route: sip:proxy-C Route: sip:proxy-C Route: sip:proxy-C
Via: UE-A Via: proxy-A Via: proxy-C
- proxy-C
Contact: sip:UE-A Record-route: sip:proxy-A Record-route: sip:proxy-C
Via: UE-A Via: proxy-A
Contact: sip:UE-A Record-route: sip:proxy-A
Contact-B Via: UE-A
Dialog-ID Contact: sip:UE-A
Via: proxy-C
Via: proxy-A
Via: UE-A
Via: proxy-C
Via: proxy-A
Via: proxy-C Record-route: sip:proxy-A
Via: UE-A
Via: proxy-A Contact: sip:UE-B
Via: UE-A Record-route: sip:proxy-A
Record-route: sip:proxy-C Contact: sip:UE-B
Record-route: sip:proxy-A
Contact: sip:UE-B

SIP routing, IMS 2e
Invite
P- S- I- S- P-
CSCF CSCF CSCF CSCF CSCF
A A B B B
UE-A UE-B
Via:
Record-Route:

SIP routing, IMS + AS 2e
Open Open
TAS TAS Invite
P- S- I- S- P-
A A B B B
UE-A UE-B

SIP routing, B2BUA 2e
UAC UAS UAC UAS UAC UAS
SIP Dialog 2
AS AS
B2BUA B2BUA
SIP Dialog 1 SIP Dialog 3
P- S- I- S- P-
A A B B B
Proxy Proxy Proxy Proxy Proxy

UE-A UE-B
SIP Dialog UE-A – UE-B

SIP dialog, RTP „segments“ 2e
AS AS
P- S- I- S- P-
A A B B B
UE-A UE-B
PCRF PCRF
P-GW A-BGF MGW MGW A-BGF P-GW


OpenTAS

emSRVCC

STN-SR

SRVCC 2e
SIP Dialog 2
SIP Dialog 1 Open Open SIP Dialog 3
TAS TAS
Update B-side
UE-A UE-B
P- S- I- S- P-
A A B B B
P-GW A-BGF A-BGF P-GW
SIP Dialog 3
MSS
MGW

SRVCC, signalling 2e
Open Open
HSS
TAS TAS
UE-A UE-B
P- S- I- S- P-
A A B B B
MSS
INVITE (tel:+<OpenTAS-STN-SR>)
LIR (OpenTAS-STN-SR)
PSI user - OpenTAS
Update A-BGF LIA (OpenTAS-SIP-URI)
INVITE (tel:+<OpenTAS-STN-SR>)
CMN Active
INVITE (Updated SDP)
200 OK Forward new SDP to remote side
200 OK
BYE
Release old call leg


OpenTAS

emSRVCC

STN-SR

eSRVCC 2e
SIP Dialog 2
SIP Dialog 1 Open Open SIP Dialog 3
TAS TAS UE-B
Update B-side
UE-A
P-
P- S- I- S-
CSCF
CSCF CSCF CSCF CSCF
B/
A A B B
ATCF
A-BGF
P-GW A-BGF P-GW
ATGW
SIP Dialog 4
MSS
MGW

eSRVCC, signalling 2e
Open Open
HSS
TAS TAS
UE-A UE-B
P-
P- S- I- S-
CSCF
CSCF CSCF CSCF CSCF
B/
A A B B
ATCF
MSS
INVITE (tel:+<ATCF-STN-SR>)
LIR (ATCF-STN-SR)
PSI user - ATCF
LIA (ATCF-SIP-URI)
INVITE (tel:+<ATCF-STN-SR>)
Update ATGW
200 OK
INVITE (ATU-STI, target dialog)

200 OK Inform OpenTAS
BYE

Register message flow, VoLTE + eSRVCC 2e
P- ATCF I- S- Open
HSS
CSCF CSCF CSCF TAS
Involve ATCF 3rd party Register

REGISTER
REGISTER + 3rd party REGISTER (;DataRepository, Default IMPU)
ATCF info UAA + original REGISTER in SIP Body (ATCF URI, ATCF-STN-SR)
SAE-
eNB
GW Select S-CSCF UDR (Repository Data)
based on config
IP1 QCI 9
MAR
MAR 200 OK UDA (Basic-SIP-Data)
IP2 QCI 5 REGISTER
REGISTER MAA (provide

MAA credentials) UDR (STN-SR, SRVCC capab.)
(provide credentials)
(IMSI derived IMPU) 401 Unauthorized Compare
UDA (TAS-STN-SR, …) STN-SR
MESSAGE (SIP body -> ATU-STI)
REGISTER
200 OK
LTE attach SAR
MME
REGISTER
200 OK PUR
SAA (provide iFCs,
Insert add. IMPUs)
Sub.Data (TAS-STN-SR -> ATCF-STN-SR)
200 OK
(P-Associated-URI) 3rd party REGISTER
PUA
200 OK

Odyssee of the ATCF-STN-SR
2e
MGW
GERAN/UTRAN
Include in Profile Update

Uu D 10.200.241.206
Request -> Overwrite
10.200.137.3 MSS MAP D MMTEL D
10.200.136.5 HLR-FE HSS data
MAP MRFC MAP
10.200.136.8/.9
Include in 3rd party
SCC-AS
10.200.50.152
REGISTER -> OpenTAS
10.200.24.177 Gr
Configure TAS- Sh IP-SM-GW SMS-C
LDAP
MAP
STN-SR diameter Ut/XCAP
SGSN Used as request URI in
10.200.50.154
One-NDS 10.200.50.144
domain transfer INVITE
172.24.6.81/.82
Send back ATCF- ISC
10.200.82.84 MGMT-URI SIP MGCF
LDAP 10.200.81.101
I/S/E-CSCF
Include in Handover SGs Sv Mj, Mg
10.200.81.164/.166 Cx
Gn by UE
request triggered SGSAP GTPv2 BGCF
10.200.81.106 diameter SIP
GTPv1
domain transfer 10.200.81.106
10.200.81.101
S6a Include in Location Info Forward10.200.136.34/.35
10.200.81.101
INVITE
diameter HSSd-FE
Request to find ATCFMw to ATCF
SIP Mr, Mp
MEGACO
10.200.53.192/27 10.50.45.33 PCRF Include in REGISTER
10.200.84.71 10.200.81.101 10.200.81.221
10.200.53.208/27 (EME)
10.50.45.49 -> S-CSCF
Ut LDAP Rx Mn
HTTP MME 10.50.45.25
diameter P-CSCF Configure ATCF-
10.200.84.103 ATCF / EATF STN-SR
S1-MME S11Include in Insert 10.200.81.135 Iq
Subscriber Data Request Gx
LTE-Uu S1AP GTPv2 Gm MEGACO
10.50.45.49 diameter
10.50.45.209 -> Update MME data SIP
10.50.53.192/.193
eNB SGi
10.50.54.66 10.50.54.32 (LB)
10.50.54.33/.34 IP www 10.200.83.19
Mb
10.50.54.66 S1-U 10.50.54.35/.36 S5

172.24.6.113 10.200.8.40
GTPv1 S-GW GTPv2 P-GW/ A-BGF
eUTRAN MGW/MRFP
10.50.54.37/.38 GGSN 10.200.83.148 10.200.83.180
10.200.136.96/29
10.200.136.104/29
Gn
GTPv1 DNS
INVITE message flow, VoLTE + eSRVCC 2e
P- S-
Open ENUM S- Open P-
CSCF CSCF I-CSCF HSS
TAS-A DNS CSCF TAS-B CSCF
A/ A B
B B
ATCF
QCI 5 INVITE (SDP (c) = IP2)
INVITE
INVITE
(SDP (c) = UE-A IP)
ENUM/domain NAPTR Add Req.
Add Repl. - IP2 Add Repl.
Add Req. - IP1, IP2 SIP-URI/domain IPs - Inact. - IP3, IP4
Open
- UE-A IP LIR
- Inact. INVITE BGW IP4
IP3
Open
BGW IP2 LIA ( S-CSCF FQDN)
IP1
INVITE INVITE
Anchoring SDP (c) = IP4)
INVITE
RINGING 200 OK
200 OK
(SDP (c) = UE-B IP)
(SDP (c) = IP1) 200 OK (SDP (c) = IP3)
AAA ACK AAA
AAR Modify Req. AAR

Modify Req.
- UE-A IP - UE-B IP
Open - IP3 - IP2 Open
PCRF - send/rec. - send/rec. PCRF
BGW BGW
IP1 IP2 Rx + Dedicated bearer setup IP3 IP4

VoLTE config, eSRVCC – CSCF 1 2e
P-CSCF: Access Network Table BC : PDF Support Realm table
BC : Realm to BGW table
BC : BGW table

BC: Access H248 profiles
Open BGW phase 0
Open BGW phase 1
BC: Supported Codecs Table

VoLTE config, eSRVCC – HSS 1 2e

VoLTE config, eSRVCC – HSS 2 2e

P-CSCF: ATCFs own STN-SR for eSRVCC P-CSCF: Access Network Table
P-CSCF: Enable eSRVCC support
Access network entry for MSC with:

Network Type = SRVCC
Core Realm / Access Realm = same as for UE entry


OpenTAS

emSRVCC

STN-SR

EME Register 2e

EME Invite 2e
INVITE urn:service:sos
INVITE urn:service:sos.fire
INVITE urn:service:sos.police
INVITE urn:service:sos.<…>

EME call, basic scenarios 2e
EME type REGISTER INVITE remark

Detected EME registration EME call 23.167, 7.2
Detected No registration EME call no SIM card
Detected Normal registration EME call Not according to
standard *
Detected -.- EME call + SRVCC IMEI issue
Undetected Normal registration Call with EME number Supported *
* Recommended to
a.) reject by IMS to force UE to perform detected EME
b.) handle via S-CSCF to provide SRVCC service
STN-SR configured at: PSI

STN-SR (TAS) HSS: per subscriber pointing to TAS
STN-SR (ATCF) ATCF: per P-CSCF pointing to ATCF
E-STN-SR MSS: per domain pointing to EATF

emSRVCC 2e
Open
TAS
UE-B = PSAP SIP Dialog 2
SIP Dialog 1 UE-A
S-
E- P-
MGCF EATF
CSCF CSCF
Update B-side
Public Safety
Answering Point MGW A-BGF P-GW
E-STN-SR
MSS
MGW

emSRVCC, signalling 2e
HSS
EATF
UE-A
I- E- P-
MGCF CSCF CSCF CSCF
A A A
MSS
INVITE (tel:+<E-STN-SR>)
LIR (E-STN-SR)
PSI user - EATF
LIA (EATF-SIP-URI)
INVITE (tel:+<E-STN-SR>)
INVITE
Forward new SDP to remote side
200 OK 200 OK
BYE
200 OK

Register message flow, VoLTE EME 2e
P- I- S- Open
HSS TAS
CSCF CSCF CSCF
Select I-CSCF
REGISTER
SAE- UAA
eNB
GW Select S-CSCF
based on config
IP1 QCI 9
MAR
IP2 QCI 5 REGISTER only IMS AKA and
TlsDigestAkaV2 allowed
IP3 401
QCIUnauthorized
5
REGISTER UAR (S-CSCF already assigned?)
REGISTER
(IMSI derived IMPU,
contact: sos) UAA (provide S-CSCF FQDN)
SAR
LTE attach REGISTER
200 OK
SAA (provide iFCs, add. IMPUs)
200 OK (P-Associated-URI = MSISDN IMPU
P-Associated-URI = IMSI derived IMPU 3rd party REGISTER
P-Associated-URI = tel-uri)
200 OK

INVITE message flow, VoLTE EME 2e
E- Open ENUM Open

P- HSS S-CSCF P-CSCF
S-CSCF
CSCF TAS-AEATF DNS MGCF TAS-B
CSCF B B
QCI 5 urn:service:sos -> sip:911@<domain>

911 is emergency number -> local E-CSCF
INVITE urn:service:sos
iFC (EME call + IMEI) for EATF

INVITE (911)
Anchor call (IMEI) LIR
iFC for LRF: 911 -> PSAP LIA ( S-CSCF FQDN)

INVITE
PSAP is emergency number INVITE
INVITE (breakout via BGCF) INVITE
INVITE
Session Progress/RINGING
200 OK (SDP)
Gx
AAA SAE-
ACK eNB
GW
AAR
- Flow descriptor IP1 QCI 9: Data
(IP address + port)
- Codec list IP2 QCI 5: SIP
PCRF - Bandwidth
- Service-URN = sos IP3 QCI 5: SIP
Gx Rx QCI 1: RTP
Dedicated bearer setup
Invite message flow, VoLTE EME, details 2e
SectorID Table of Phone

EATF nena GAT Number Ranges M
P- G
CSCF BGCF C
F
E-CSCF
Message Manipulation
sos -> 911 SectorID table + PANI: To: 110 => replace 911->110 in R-URI
sos.police -> 110 => PSAP = <TAI> + 911 To: 112 => replace 911->112 in R-URI
sos.fire -> 112
911 INVITE: urn:service:sos INVITE: sip:911@<IMS domain> INVITE: sip:<TAI>911@<IMS domain> INVITE: sip:<TAI>911@<MGCF>
To: urn:service:sos To: sip:911@<IMS domain> To: sip:911@<IMS domain> To: sip:911@<IMS domain>
PANI: PANI: PANI: PANI:
110 INVITE: urn:service:sos.police INVITE: sip:110@<IMS domain> INVITE: sip:<TAI>911@<IMS domain> INVITE: sip:<TAI>110@<MGCF>
To: urn:service:sos.police To: sip:110@<IMS domain> To: sip:110@<IMS domain> To: sip:110@<IMS domain>
112
INVITE: urn:service:sos.fire INVITE: sip:112@<IMS domain> INVITE: sip:<TAI>911@<IMS domain> INVITE: sip:<TAI>112@<MGCF>
To: urn:service:sos.fire To: sip:112@<IMS domain> To: sip:112@<IMS domain> To: sip:112@<IMS domain>

VoLTE config, EME 1 2e
TPD settings for IMS installation

P-CSCF (basic solution)
urn:service:sos -> 911

911 is emergency number
P-CSCF:
CSCFB: Table of Phone Number Ranges
P-CSCF: SIP URI of E-CSCF 91

[mm@tb17-cscf1 ~]$ cat eme110police.xml
P-CSCF (advanced solution) <clist>
<manipulation>
<name>replace URI in the request line</name>
<rule>
Message Manipulation <replace>
<path-what>/request/request_line/uri</path-what>
sos -> 911 <value>sip:110@tb17.mchm.nsn-rdnet.com</value>
</replace>
sos.police -> 110 </rule>
<rule>
sos.fire -> 112 <replace>
<path-what>/request/header[@name='To']</path-what>
<value>sip:110@tb17.mchm.nsn-rdnet.com</value>
</replace>
</rule>
</manipulation>
</clist>
P-CSCF: SPS Configuration Table
CSCFB: Table of Phone Number Ranges

E-CSCF
iFC for LRF: 911 -> PSAP
iFC (EME call + IMEI) for EATF

SectorID table + PANI:
=> PSAP = <TAI> + 911
S-CSCF: Forced Operator Service
( SectorID table
(SipMethod == "INVITE") AND instr, sectorid, psap, LLLL_8yy, MSC_8yy, NPA_411, PPPP_411, MSC_411, ENSP,
(SipHeader == "IsEmergency") AND psap_cap, ECRC, cellformat
a, 5551030390001D03, sip:3039911@tb17.mchm.nsn-rdnet.com, , , , , , , , , E
(SipHeader == "Contact","urn\:gsma\:imei\:([-0-9]+)") a, 5551010220019D01, sip:1022911@tb17.mchm.nsn-rdnet.com, , , , , , , , , E
)
sectorID = PANI PSAP number

E-CSCF iFCs for GAT
To: 110 => replace 911->110 in R-URI

To: 112 => replace 911->112 in R-URI
S-CSCF: Forced Operator Service
(
(SipMethod == "INVITE")
) (
AND (SipMethod == "INVITE")
( )
(SipHeader == "IsEmergency") AND
) (
AND (SipHeader == "IsEmergency")
( )
(SipHeader == "To","sip:110") AND
) (
(SipHeader == "To","sip:112")
)

P-CSCF: Access Network Table
IP range that corresponds to the EME APN

We want … Config parameter Value

Undetected mobile EME calls should be P-CSCF: TRUE
rejected, option a.) - Reject Emergency Calls for
Mobile
- Access type = GGSN - Reason Phrase for Rejecting
- Normal registration Emergency Calls
Registered EME call should be handled by S-CSCF: FALSE
E-CSCF and not S-SCSF addServiceRouteforEM
EME registrations should only be allowed P-CSCF (Access Network Table): 1

for EME APN Allow Emergency Registrations For EME APN IP
range only
Allow for detected unregistered EME calls P-CSCF: FALSE

Disable emergency calls for
unregistered users
Allow EME SRVCC for undetected EME P-CSCF: TRUE
calls -> S-CSCF, option b.) E-CSCF for unregistered users only

Thank you 2e
BACKUP

Abbreviations 2e
CSCF: Call Session Control Function

HSS: Home Subscriber Server
HSSd: HSS distributed (based on One-NDS)
P-CSCF: Proxy- CSCF
I-CSCF: Interrogating-CSCF
S-CSCF: Serving-CSCF
I-BCF: Interconnection Border Control Function
BGCF: Breakout Gateway Control Function
DNS: Domain Name System / Server

ENUM: E.164 Number Mapping
FEE: Feature Expansion Environment
iFC: Initial Filter Criteria
ISC: IMS Service Control
LoPS: Local Plugin Service
NAPTR: Name Authority Pointer
RTP: Real-time Transport Protocol
SBC: Session Border Controler
SDP: Session Description Protocol
SIP: Session Initiation Protocol
SLA: Service Level Agreement
TH: Topology Hiding
URI: Uniform Resource Identifier
URN: Uniform Resource Name

ENUM 2e
Subscriber provisioning:
- HSSd
- ENUM (E.164 NUmber Mapping): Translation of E.164 numbers to an URI, i.e. SIP-URI
root@inum-sec:/etc/bind]$ cat 5.2.7.1.9.4.e164.arpa

$ORIGIN .
$TTL 180 ; 3 minutes
5.2.7.1.9.4.e164.arpa IN SOA inum.mchm.nsn-rdnet.com. hostmaster.inum-pdns.mchm.nsn-rdnet.com. (
2013032101 ; serial
120 ; refresh (2 minutes)
360 ; retry (6 minutes)
86400 ; expire (1 day)
180 ; minimum (3 minutes)
)
$TTL 60 ; 1 minute
NS inum.mchm.nsn-rdnet.com.
$ORIGIN 7.6.5.2.7.1.9.4.e164.arpa.
* NAPTR 10 20 "u" "E2U+sip" "!^(.*)$!sip:\\1@tb11.mchm.nsn-rdnet.com!" .

IR.92 2e
Signalling
Data

QCI values 2e
QCI: Quality of Service Class Indicator GBR: Guaranteed Bit Rate

EME standard 2e

EME standard 2e

IMS Introduction 4

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

IMS Introduction 4

Uploaded by

Copyright:

Available Formats

2e

Introduction in IMS 2 Ulf Spangenberger

“The IP Multimedia Subsystem or

Introduction in IMS 3 Ulf Spangenberger

Application Application Application

IP1 Call routing CS

Introduction in IMS 4 Ulf Spangenberger

• Security (TH, SLA)

10.50.54.66 S1-U 10.50.54.35/.36 S5

Introduction in IMS 7 Ulf Spangenberger

iFC (initial Filter Criteria) priority -> sequence

Introduction in IMS 8 Ulf Spangenberger

3rd party registration

IMPU1 IMPU1 scscf2 scscf1 cap 1 2 prio 1 weight 80 IMPU1 pcscf3

Introduction in IMS 9 Ulf Spangenberger

SAA (provide iFCs, IMPUs)

Introduction in IMS 10 Ulf Spangenberger

SUBSCRIBE (Event: reg)

SUBSCRIBE (Event: reg)

Introduction in IMS 11 Ulf Spangenberger

No such name NAPTR <valid_domain>

UE-A BGCF MGCF

Number based routing

Introduction in IMS 12 Ulf Spangenberger

S-CSCF iFC iFC

Introduction in IMS 13 Ulf Spangenberger

Introduction in IMS 14 Ulf Spangenberger

LIA ( S-CSCF FQDN)

Introduction in IMS 15 Ulf Spangenberger

VoLTE basic VoLTE with precondition VoLTE with Gating

REGISTER Provisioning, see „basic“ see „basic“

SRVCC eSRVCC VoLTE EME

INVITE - OpenTAS - OpenTAS + ATCF - E-CSCF + EATF (SCC-AS)

Introduction in IMS 16 Ulf Spangenberger

IMPI (IMSI-derived) <IMSI>@ ims.mnc<MNC>.mcc<MCC>.3gppnetwork.org

Introduction in IMS 17 Ulf Spangenberger

IMS AKA authentication

Introduction in IMS 18 Ulf Spangenberger

Introduction in IMS 19 Ulf Spangenberger

Introduction in IMS 20 Ulf Spangenberger

Introduction in IMS 21 Ulf Spangenberger

Introduction in IMS 22 Ulf Spangenberger

P- S- Open ENUM S- Open P-

AAA ACK AAA

Ordered codec list

Mapping from payload type

Introduction in IMS 24 Ulf Spangenberger

Introduction in IMS 25 Ulf Spangenberger

Check for diameter connection with:

Common: Diameter Table

Introduction in IMS 26 Ulf Spangenberger

VoLTE basic VoLTE with precondition VoLTE with Gating

REGISTER Provisioning, see „basic“ see „basic“

SRVCC eSRVCC VoLTE EME

INVITE - OpenTAS - OpenTAS + ATCF - E-CSCF + EATF (SCC-AS)

Introduction in IMS 27 Ulf Spangenberger

P- S- Open ENUM S- Open P-

AAA ACK AAA

AAR (Flow descriptor, AAR (Flow descriptor,

Introduction in IMS 28 Ulf Spangenberger

Session Progress (SDP) B -> A

Introduction in IMS 29 Ulf Spangenberger