World of UMTS

UMTS Network Planes

PP IP/P UTRAN Non-Access Layer
Control Plane User Plane Control Plane

UMTS Protocols
Name AAL-2 AAL-5 ALCAP AMR ATM BMC BSSAP+ CAMEL 3GPP/ITU Standard I.363.2, I.366.1 I.363.5 Q.2630.1 26.071 I.361 25.324 29.018 23.078 29.078 23.041 24.008 25.425, 25.435, 25.427 24.008 23.040, 24.011 29.060 29.060 RFC 791 25.415 IETF SIGTRAN M3UA Draft 25.321 29.002 24.008 Q.703 Q.704 Q.2210 25.433 25.323 25.413 25.322 25.423 25.331 25.419 Q.711 RFC 2960 24.008 23.040, 24.011 24.080 Q.2130 Q.2140 Q.2110 Q.2150 Q.773 Description ATM Adaptation Layer - Type 2 ATM Adaptation Layer - Type 5 Access Link Control Application Part Adaptive Multi Rate Asynchronous Transfer Mode Broadcast-Multicast Control Base Station System Application Part Customized Application for Mobile network Enhanced Logic CAMEL Application Part Cell Broadcast Service Call Control Frame Protocol GPRS Mobility Management GPRS Short Message Service GPRS Tunneling Protocol - Control Plane GPRS Tunneling Protocol - User Plane Internet Protocol Iu User Protocol MTP3 User Adaptation Layer Medium Access Control Mobile Application Part Mobility Management Message Transfer Part - Level 2 Message Transfer Part - Level 3 Message Transfer Part - Level 3 - Broadband Node-B Application Part Packet Data Convergence Protocol Radio Access Network Application Part Radio Link Control Radio Network Subsystem Application Part Radio Resource Control Service Area Broadcast Protocol Signaling Connection Control Part Stream Control Transport Protocol Session Management Short Message Service Supplementary Service Service Specific Coordination Function - User-to-Network Interface Service Specific Coordination Function - Network-to-Network Interface Service Specific Connection Oriented Protocol Signaling Transport Converter Transaction Capabilities Application Part

UMTS Entities
Entity Name AuC CBC C-RNC D-RNC EIR GGSN GMSC HLR MS MSC Node-B RNS SGSN SMSC S-RNC UE USIM VLR Description Authentication Center Cell Broadcast Center Controlling Radio Network Controller Drift Radio Network Controller Equipment Identity Register Gateway GPRS Support Node Gateway MSC Home Location Register Mobile Station (=UE) Mobile Switching Center UMTS Base Station Radio Network Subsystem (RNC + Node-Bs) Serving GPRS Support Node Short Message Service Center Serving Radio Network Controller User Equipment (=MS) Universal Subscriber Identity Module Visitor Location Register

Core
User Plane

CAP CBS CC FP

CBS

GMM

PC

PP IP/P r2 Laye l ysica Ph

C/ MM/C S /S SMS /SM/ GMMS/SS GSM

CBS B MC
M/ MM/S S C/ G MS/S MM/C S GS S/S SM

GSMS

Radio Network Layer

AMR

P PDC

PP IP/P AMR P PDC

Control Plane

User Plane

GTP-C GTP-U IP Iu-UP

BMC

R UE

RRC RLC MAC

Transport Network Layer CBS RLC MAC PP IP/P

M/ MM/S S C/ G MS/S MM/C S GS /S SMS

RRC

Control Plane

User Plane

Control Plane

User Plane

M3UA MAC MAP MM MTP2 MTP3 MTP3b

AMR

BMC

PDC

WCD

MA WCD MA Spec &M ific O

UMTS Interfaces
Interface B C D E F G Gc Gd Gf Gi Gn Gp Gr Gs H Iu-PS Iu-CS Iu-BC Iub Description MSC - VLR MSC - HLR VLR - HLR MSC - MSC MSC - EIR VLR - VLR GGSN - HLR SGSN - SMSC SGSN - EIR GGSN - External IP network SGSN - GGSN GSN - External network's GSN SGSN - HLR SGSN - VLR HLR - AuC RNC - SGSN RNC - MSC / VLR RNC - CBC Node-B - RNC RNC - RNC Terminal - UE UE - Node-B

(Air Interface) terf ce)

P ALCA STC 3b M TP I F-UN SSC OP SSC L-5 AA ATM al hysic P

Uu

RRC P NBA RLC MAC P) ub-U FP (l 2 AALATM al hysic P P NBA CBS IP/P
M/ MM/S S C/ G MS/S MM/C S GS MS/S S

NBAP PDCP RANAP RLC RNSAP RRC SABP

PP BMC P

AMR

PDC

Node-B

I F-UN SSC P O SSC AAL-5

IP

RRC & ific O Spec M RLC MAC P) ub-U FP (l 2 AALATM al hysic P IP/P
M/ MM/S S C/ G MS/S MM/C S GS /S SMS

CBS PP BMC P AMR

SCCP SCTP SM SMS SS SSCF-UNI

Iub

P ALCA STC 3b MTP I F-UN SSC OP SSC AL-5 A ATM ical Phys I F-UN SSC OP SSC AAL-5 IP

PDC

RRC RNS AP RLC MAC P) ur-U FP (l 2 AALATM al hysic P RNS CBS PP IP/P
M/ MM/S S C/ G MS/S MM/C S GS /S SMS

SSCF-NNI SSCOP STC TCAP

ALCA STC

P A M3U CTP S IP

P SCC 3b MTP I -NN F SSC OP SSC AAL-5

AMR

BMC

A M3U CTP S IP

PDC

RRC AP RLC MAC P) ur-U FP (l 2 AALATM al hysic

MM/C C/SM S/SS

Typical UMTS Procedures

D-RNC

3b MTP I F-NN SSC OP SSC AAL-5 ATM ical Phys

CBS IP/P AMR

GMM /SM/G SMS /SS

Iur R

PP

P SAB

Uu

Iur

ALCA STC

SCC

UE

Node-B

RNC

SGSN

GGSN

Cell setup
NBAP: Cell Setup Request NBAP: Cell Setup Response

Common transport channels setup

NBAP: Common Transport Channel Setup Request (FACH and PCH) NBAP: Common Transport Channel Setup Response (FACH and PCH) NBAP: Common Transport Channel Setup Request (RACH) NBAP: Common Transport Channel Setup Response (RACH) FP: Downlink Synchronization (FACH) FP: Uplink Synchronization (FACH) FP: Downlink Synchronization (PCH) FP: Uplink Synchronization (PCH)

UMTS Standards
21.xxx 22.xxx 23.xxx 24.xxx 25.xxx Requirements specifications Service aspects Technical realization Signaling protocols (UE - CN network) UTRA aspects 25.1xx UTRA radio performance aspects 25.2xx UTRA radio aspects 25.3xx UTRA radio interface architecture, layer 2 and layer 3 aspects 25.4xx UTRA network aspects 25.41x Iu 25.42x Iur 25.43x Iub Codecs (speech, video, etc.) Data (Reserved) Signaling protocols (NSS) Program management UIM O&M Security aspects Test specifications Algorithms

A M3U CTP 3b S MTP I IP NN SCFS COP L-5 SS AA ATM al hysic P

3b MTP I F-NN SSC OP SSC AAL-5

A M3U P SCT IP P

l P lu-U

u-UP CBS

RAN

AP

ALCA

P 3b MTP I F-NN SSC OP SSC

SCC

S-RNC

STC 3b MTP I F-NN SSC OP SSC 5 AALM AT ical Phys

A M3U SCTP IP Phys ATM ical

-U GTP P UD IP 5 AALAAL2

UDP TCP/ IP 5 AAL-

SAB

Iu-BC
AMR P Iu-U M /SS /SMS M/CC RAN AP

AAL-

UDP TCP/ IP AL-5 A ATM ical Phys

Iu-CS
ALCA P

CBC
2 AALATM al hysic P ISDN e Voic MAP TCAP P SCC TP3 M 2 MTP ical Phys ISDN

IP/P

PP P

RRC connection setup

RRC: Connection Request (RACH) NBAP: Radio Link Setup Request NBAP: Radio Link Setup Response FP: Downlink Synchronization (DCH) FP: Uplink Synchronization (DCH) RRC: Connection Setup (FACH) RRC: Connection Setup Complete (DCH)

26.xxx 27.xxx 28.xxx 29.xxx 30.xxx 31.xxx 32.xxx 33.xxx 34.xxx 35.xxx

lu-U GMM /SM/ GS S MS/S

STC 3b MTP I F-NN SSC OP SSC 5 AALATM ical Phys

P SCC P3b MT I F-NN SSC P O SSC 5 AAL-

e Voic MAP TCAP P SCC TP3 M 2 MTP ical Phys

MSC/VLR
MAP TCAP Phys P SCC 3 MTP P2 MT ical Phys IP /PPP

e Voic

ical

RAN

AP

Iu-PS

SCC 3b MTP I F-NN SSC OP SSC

A M3U SCTP IP ATM al hysic

-U GTP P UD IP AL-5 A

IP/P

PP

E
Phys

ical

AL-5 P

-U GTP P UD IP B P+ SSA r2 Laye ical Phys

-C GTP UDP IP r2 Laye l ysica Ph

C/D/F/E

MAP TCAP P SCC P3 MT 2 MTP l ysica Ph

GMSC

ISDN

Phys

ical

Attach
GMM: Attach Request GMM: Attach Request GMM: Authentication and Ciphering Request GMM: Authentication and Ciphering Request GMM: Authentication and Ciphering Response GMM: Authentication and Ciphering Response RANAP: Security Mode Command RRC: Security Mode Command RRC: Security Mode Response RANAP: Security Mode Response GMM: Attach Accept GMM: Attach Accept GMM: Attach Complete GMM: Attach Complete Dedicated Transport Channels (**) Modes DCH Dedicated FDD/TDD Directions DL/UL Purpose Transfer of dedicated user information Common Transport Channels (*) BCH Broadcast PCH Paging RACH Random Access CPCH FACH DSCH USCH Common Packet Forward Link Access Downlink Shared Uplink Shared Modes FDD/TDD FDD/TDD FDD/TDD FDD/TDD FDD/TDD FDD/TDD TDD Directions DL DL UL UL DL DL UL Purpose Broadcast of system control information to an entire cell Broadcast of paging information Contention-based channel for transfer of relatively small amounts of data, e.g. for initial access or non-real-time dedicated control or traffic data Contention-based channel for transfer of bursty data traffic Transfer of small amounts of data Transfer of dedicated control or traffic data Transfer of dedicated control or traffic data

PSTN

Physical Layer Transport Channels

SGSN

MAP TCAP P SCC TP3 M 2 MTP al hysic P

P SCC 3 MTP P2 MT ical Phys

Gn/Gp

-U GTP DP U IP r2 Laye sical Phy

-C GTP P UD IP r2 Laye ical Phys

IP

/PPP

HLR/EIR/SMSC
MAP TCAP P SCC 3 MTP P2 MT ical Phys MAP TCAP

Gs
MAP TCAP P SCC TP3 M 2 MTP ical Phys

BSS

AP+

Gr/Gf/Gd

P SCC 3 MTP P2 MT ical Phys

GGSN
r2 Laye ical Phys

Gc

MSC/VLR

P SCC TP3 M 2 MTP ical Phys

(*) Requires in band identification of the UEs when particular UEs are addressed (**) UEs are identified by the physical channel, i.e. code and frequency for FDD and code, time slot and frequency for TDD

HLR/EIR/SMSC

Gi
IP Network

HLR

PDP Context activation

SM: Activate PDP Context Request SM: Activate PDP Context Request GTP: Create PDP Context Request GTP: Create PDP Context Response RANAP: RAB Assignment Request RRC: Radio Bearer Setup (DCH) RRC: Radio Bearer Setup Complete (DCH) RANAP: RAB Assignment Response SM: Activate PDP Context Accept SM: Activate PDP Context Accept

UMTS/GSM Network RADCOM Cellular Products

PrismLite
E BSS GMSC ISDN, PSTN... Product brand names may be trademarks of their A BSC MSC/VLR C,D GSM Radio Access Network Iu-CS Gb Gs Gf Gr F EIR HLR H AuC External Circuit Networks respective owners and are mentioned for reference only. Information subject to change without notice. RADCOM makes no warranty of any kind, expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. RADCOM is not liable for errors contained herein. RA - PUMTS. Revision A Iu-PS RNS Iur SGSN RNC Gn UMTS Radio Access Network SGSN Gn GGSN Gi PDN Internet Intranet Extranet External Packet Networks The data in this document relates to 3GPP Release 99. Uu Iub
High-performance WAN/LAN/ATM protocol analyzer. Versatile test solution for cellular networks, including GSM, GPRS, UMTS, CDMA and CDMA2000.

RC-100WFL
Lightweight, portable WAN/LAN/Telecom analyzer ideally suited for technical field support.

Performer
Comprehensive system testing and performance analysis solution for cellular and VoIP networks.

Closing session
SM: Deactivate PDP Context Request
SM: Deactivate PDP Context Request GTP: Delete PDP Context Request GTP: Delete PDP Context Response SM: Deactivate PDP Context Accept SM: Deactivate PDP Context Accept

MS

Um

BTS

Abis

Detach
GMM: Detach Request GMM: Detach Request GMM: Detach Accept GMM: Detach Accept RANAP: Iu Release Command RRC: Radio Bearer Release (DCH) RRC: Radio Bearer Release Complete (DCH) RRC: Connection Release (DCH) RRC: Connection Release Complete (DCH) NBAP: Radio Link Deletion Request NBAP: Radio Link Deletion Response RANAP: Iu Release Complete

RNS UE Uu Node-B Iub RNC

Circuit GSM Access Network Switched Core Network

UE

Node-B

Packet GSM Access Network Switched Core Network Gp

Protocol information and updates:

RADCOM home page:

www.protocols.com
International Headquarters: RADCOM Ltd., 24 Raoul Wallenberg Street, Tel-Aviv 69719 Israel, Tel: +972-3-6455055 Fax:+972-3-6474681, e-mail: info@radcom.co.il

www.radcom-inc.com
US Office: RADCOM Equipment Inc., 6 Forest Avenue, Paramus NJ 07652 USA, Tel: (201) 518-0033 Fax: (201) 556-9030, 1-800-RADCOM-4, e-mail: info@radcomusa.com

United Kingdom Office: RADCOM UK, 2440 The Quadrant, Aztec West, Almondsbury, Bristol, BS32 4AQ England, Tel: +44 1278 760201 Fax: +44 1454 878788, e-mail: mikep@radcom.co.il China Office: RADCOM Ltd., Handerson Center, Office 506, Tower 3, 18 Jianguomennei Avenue, Beijing 1000005, P.R. China, Tel: +86-10-65187723 Fax:+86-10-65187721, e-mail: china@radcom.co.il