Quick Notes
Quick Notes
In 5G Standalone (SA) architecture, the core network is designed with a clear separation between the control plane and the user plane. Let’s dive into the key
components of the 5G core network and their functions.
This architecture, with its distinct roles for each component, enables 5G to deliver high-speed, low-latency services while supporting advanced features like
QoS handling and network slicing.
By separating control and user planes, 5G is optimized for flexibility, scalability, and efficiency, setting the stage for future innovations.
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
To ensure that the user gets sufficient resources in the radio network (especially during
busy hours), it is imperative to equip the radio access network with the right amount of
capacity. Capacity should not be under or over provisioned.
Note - There are few other actions that can be taken but above are the key actions be
taken during capacity optimization.
Control and user planes serve distinct but critical roles for managing signaling and user data
flow respectively. Here's a breakdown :
1. Control Plane
Responsible for managing signaling between the user equipment (UE) and the network,
including:
S11 GTP-C & S5 GTP-C: Interfaces that handle control plane signaling in the core network (MME to
SGW and SGW to PGW, respectively).
2. User Plane
Handles the actual transmission of user data (e.g., voice, video, and internet browsing):
Data Radio Bearer: Carries user data over radio interface bw UE and RAN.
S1 Bearer: The bearer path between the RAN and SGW.
S5 Bearer: Carries user data between SGW and PGW in core network.
E-UTRAN Radio Access Bearer: Data Radio Bearer + S1 Bearer
EPS Bearer: End-to-end IP connectivity from UE to PGW for data services.
Efficient communication requires seamless interaction between the Control Plane and User
Plane to manage both signaling and data delivery.
Understanding these technical fundamentals is key to enhancing network performance and to learn
it in detail, visit - https://lnkd.in/e9TpSHzF
Activate to view larger image,
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
Accessibility is one of the key performance indicator in providing services to end -users
by giving access to the network in an appropriate manner.
During access part, when UE (user equipment) connects to core network through NAS,
its state is termed as RRC connected. In this state, if there detects any problem at
physical layer then UE timer (T310) starts after receiving "out-of-sync" indications from
lower layer. Once these indications reached to the out of sync number defined (N310),
timer T311 starts and after T311 expires, UE goes to idle mode (disconnects from core
NW).
There can be different criteria set for “Out of Sync” indications, for example, BLER
(block error rate) of PDCCH/PCFICH is greater than or equal to 10%.
Similar criteria can be defined for “In Sync” such as - BLER is less than or equal to 2%.
Based on RSRP, UE monitors RS (reference signal) in the DL. If the reference signals
have enough strength so that the UE can decode consistently the PDCCH, then the link
is in-sync else it will be out of sync.
Value of these timers can be increased to reduce the radio link failures but it can add
more delay, so there is always a tradeoff.
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
RRC operates at the IP level (Layer 3) between the User Equipment (UE) and the base
station, playing a critical role in network accessibility and resource management. Its
functions include:
Connection Establishment:
RRC is responsible for setting up and releasing the RRC connection between the UE
and the base station. When a device wants to communicate with the network, RRC
handles the initial access and ensures a reliable connection.
As users move, RRC handles mobility management, including handovers between cells.
It ensures continuous service as the UE moves across the network, minimizing service
interruptions and ensuring seamless connectivity during handovers.
RRC facilitates NAS signaling, which is used for higher-level functions like
authentication, security, and mobility management that operate beyond the radio
network. This interface links the core network to the radio access network.
RRC is in charge of establishing radio bearers, which are carrying data between the UE
and the network. It ensures the bearer is correctly configured to meet the service
requirements (QoS, latency, etc.) and handles re-establishing the bearer if the
connection is interrupted. RRC also manages the release of radio bearers when
communication is complete to free up resources.
In mobile networks, Radio Resource Control (RRC) Idle state plays a key role in
network efficiency and UE (User Equipment) power saving and in this state -
MME does not hold valid location/routing information i.e. EMM (Mobility management) -
DEREGISTERED, and
UE does not have a NAS signaling connection with the MME i.e. ECM (Connection
management) IDLE
• PLMN selection
• Broadcast of system information
• Cell re-selection mobility
• Paging for mobile terminated data is initiated by EPC
• DRX for CN paging configured by NAS
• UE controlled mobility
• SIB10-11: Earthquake and Tsunami Warning System (ETWS) for emergency alerts, and few
more not listed here.
Understanding these key components is crucial for optimizing network performance and to
learn them in detail, visit - https://lnkd.in/e9TpSHzF
Activate to view larger image,
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
Radio resource control (RRC) protocol exists at IP level (layer 3) between UE and eNB.
The major functions of the RRC protocol include connection establishment and release
functions, broadcast of system information, radio bearer establishment,
reconfiguration/release, RRC connection mobility procedures, paging notification and
outer loop power control.
From OSS reports, RRC failure reasons can be identified and accordingly plan of action
to mitigate it is mechanized. Key reasons for low RRC success rate are as follow –
Note - There can be few other reasons for RRC failure but majority belongs to above
mentioned ones.
To learn about Network KPIs, please refer to the complete course on KPIs at -
https://lnkd.in/gAcpE_qz
Activate to view larger image,
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
This lecture belongs to the 4G course and link for the course : https://lnkd.in/e3D9ryQF
https://lnkd.in/eU2E4STP
4G PHY Layer
youtube.com
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
Handover - Phases
1. Handover Preparation:
The source Radio Access Network (RAN) requests the target RAN to prepare for the
User Equipment (UE). The target RAN reserves the necessary resources and sends
access information to the UE via the source RAN.
2. Handover Execution:
The source RAN commands the UE to switch to the target RAN, forwarding data
packets as the UE connects to the new network. This phase ends when the UE
successfully accesses the target cell.
3. Handover Completion:
The user data path is switched from the source to the target RAN. The target RAN
informs the Mobility Management Entity (MME) and SAE Gateway, and the bearer path
is updated. The source RAN releases the resources after the handover is confirmed
complete.
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
Each Network Slicing Instance (NSI) is instantiated through multiple Network Slice
Subnet Instance (NSSI), which consists of different network functions (access network:
AN /core network: CN) and associated resources (storage, processing, compute etc.),
example as follows -
Access NW : NSSI AN-1 and NSSI AN-2 each contain distinct sets of instances of AN
NFs.
Core NW : NSSI CN-1, NSSI CN-2 and NSSI CN-3 each contain distinct sets of
instances of CN NFs.
NSSI A combines NSSI AN-1 with NSSI CN-1 and corresponding TN connectivity
NSSI B combines NSSI AN-2 and NSSI CN-2 and corresponding TN connectivity
NSSI C combines NSSI AN-2 with NSSI CN-3 and corresponding TN connectivity. The
NSSI AN-2 is shared between NSSI B and NSSI C, while NSSI AN-1 is dedicated to
NSSI A.
CSP offers NSSI A as a Network Slice instance NSI A, in this relationship NSI A
represents NSSI A with associated Service Level Specification (SLS). It also offers
NSSI B as NSI B and NSSI C as NSI C. The SLS of NSI A satisfies the service
requirements of Communication Service Instance 1 and Communication Service
Instance 2. The SLS of NSI B satisfies the service requirements of Communication
Service Instance 2. The SLS of NSI C satisfies the service requirements of
Communication Service Instance 3.
Traditional vs 5G Network
The shift from traditional network (3G/4G) to 5G brings major improvements in flexibility
and performance.
a. Disaggregation in RAN
- Central Unit (CU): Handles non-real-time tasks like session management.
- Distributed Unit (DU): Performs real-time tasks like scheduling.
- Radio Unit (RU): Manages radio frequencies and antennas.
Disaggregation allows for more flexible deployment and optimization.
b. Midhaul
5G adds a midhaul layer between the CU and DU, improving traffic management and
reducing latency.
c. Edge Computing
Brings computing closer to users, reducing latency. This is essential for applications like
autonomous driving, AR, etc.
RSRP : Coverage
Reference Signal Received Power (RSRP) - It is a critical metric used to assess the
coverage of a 4G/5G mobile network.
This indicator measures the linear average over the power contributions of the resource
elements that carry cell specific reference signals within the considered measurement
frequency bandwidth.
The following classifications outline RSRP values and their corresponding signal
penetration capabilities:
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
Low throughput in LTE networks can be attributed to various factors, both within the
network and at the user equipment (UE) level. Here are some common reasons for low
throughput in network:
1. Poor Signal Strength: Weak signal strength) can significantly impact throughput.
This can occur due to distance from the cell tower or obstacles like buildings or terrain
etc.
5. Network Congestion: High user demand or congestion in the network can lead to
reduced throughput, especially during peak hours or in densely populated areas. This
congestion can occur at various network elements such as the radio interface, core
network, or backhaul links.
8. Packet Loss and Latency: High packet loss and latency can impact the efficiency
of data transmission and reduce overall throughput, especially for real-time applications
like video streaming or online gaming.
** To learn about such topics, please refer to the RAN Engineering course at -
https://lnkd.in/gAcpE_qz
Activate to view larger image,
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
Protocols - 4G RAN
RRC (L3) – The RRC protocol manages the control plane, handling signaling between the UE (User
Equipment) and the network.
The major functions of the RRC protocol include connection establishment/release functions, broadcast
of system information, radio bearer establishment, mobility procedures, paging notification and outer
loop power control.
PDCP (L2) - It deals with higher-layer data, ensuring efficient transmission through header
compression and encryption. It transfers user plane & control plane data.
RLC (L2)– The RLC protocol ensures reliable data transfer. With ARQ (Automatic Repeat Request), it
detects errors in data transmission and triggers retransmissions, ensuring that any corrupted or lost data
is resent
MAC (L2) – Medium Access Control is responsible for logical channel multiplexing, hybrid automatic
repeat request (HARQ), uplink/downlink scheduling, random access procedure, and maintenance of
uplink timing.
PHY layer (L1) handles crucial tasks like IFFT (Inverse Fast Fourier Transform), modulation, coding, and
rate matching. It contains different channels-
- Physical Broadcast Channel (PBCH), which carries part of the system information (MIB) required by the
UE to access the network; Primary and Secondary Synchronization Signals (PSS & SSS) for cell-search
procedures and cell identification;
- Physical control format indicator channel (PCFICH) to carry the number of OFDM symbols used for
transmission of PDCCHs in a subframe;
- Physical Hybrid Automatic request (HARQ) indicator (PHICH) to send ACK/NACK feedback to the UE for
the uplink blocks received by eNB;
Physical data shared channel (PDSCH) to carry user data, paging info & SIB msgs.
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
To keep the UE (user equipment) connected to the best serving cell (with best radio conditions) during
connected (RRC) mode, it is important to switch the call/session from one cell to another in an efficient
manner (without much delay or interruption) during mobility.
During this handover from one cell to another within same carrier frequency, different events occur
based on signal strength (RSRP) or signal quality (RSRQ):
1. A3 Offset - Neighbor becomes offset better than serving. Handover margin for better cell HO. Used
in measurement event type A3 where the event is triggered when the neighbor cell becomes better
than the serving cell by the value of the A3 offset. Normally, its value is 3dB.
2. A3 Hysteresis - Related Hysteresis of Handover Margin for Better Cell Handover of Intra-Frequency
Parameter is used within the entry and leave condition of the A3 triggered reporting condition.
Normally, its value is 0 but to avoid ping-pong its value can be increased.
3. Time to trigger - Time for which the specific criteria for the measurement event A3 must be met to
trigger a measurement report. Normally, its value is 320ms.
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
Accessibility measures how efficiently users access the network and obtain services.
Key KPIs :-
Random access (RA) is a basic procedure for uplink synchronization between user &
network to enable uplink transmission
High success rate - users can effectively setup a connection with network
Low success rate - call setup failures
RRC is a process where connection between user and network is established initially in
control plane.
Formula:
RRC Connection Setup Success Rate=Successful RRC Connection Setups/Total RRC
Connection Setup Attempts×100
Procedure initiated after RRC connection failure, caused by poor signal quality, radio
link failures, or mobility issues (e.g., handover failures).
It defines the bearer used for transmitting data packets (including voice, video, and
internet traffic characterized by QoS )
From <https://www.linkedin.com/in/rahulkaundal/recent-activity/all/>
what happen when we initially power ON our phone in LTE mobile network. As in the
table picture we can see it as following steps:
1. UE is powered ON
2. Cell sync and selection
3. RACH procedure
4. RRC Connection Request for the first time, it is contain Attach Request and PDN
Connectivity Request
5. UE building a control-plane with the core to do signaling
6. To be attached/registered to the network. EPC will check if the user are legal or not.
also to match capability with the UE
7. only after that, then UE will also build an user-plane connection with the core to do
data transfer
8. UE will always report the measurement that instructed by eNodeB
9. Attach complete means UE allowed to latch and get the services
10. Activate default EPS bearer means UE now has an internet connection through LTE
system
11. UE completely can do browsing, download or upload in the network
Activate to view larger image,
From <https://www.linkedin.com/in/imran-wali-595236a9/recent-activity/all/>
A. Actually 5G Icon appears in your phone due to LTE SIB2 that include
UpperLayerIndication-r15 IE flag that supposed to be "1" . So this scenario is likely
occurring because of 5G icon shows it is just configuration issue.
The GSM Association (GSMA) has agreed upon a set of 4 candidate UE configurations
which determine when a UE should display the 5G icon. These 4 configurations are
presented in Table (this config is depends on UE manufacture vendor).
configuration ‘A’ is the most conservative because it limits the UE to displaying the 5G
icon when the UE is already connected to both LTE and NR cells.
In contrast, Configuration ‘D’ is the most aggressive because it allows the UE to display
the 5G icon when using only an LTE cell belonging to an NSA Base Station, without
having to verify NR coverage.
Configurations ‘B’ and ‘C’ rely upon the UE verifying that NR coverage exists
Solution: some vendor have setting for UpperLayerIndicationSwitch that may configure
so let LTE SIB2 broadcast upperlayerindication-r15 only if E-UTRAN cell is configured
with at least one neighboring NRCell.
hashtag#OptimizationHassle
Activate to view larger image,
From <https://www.linkedin.com/posts/activity-6991149506096451585-dVy3/?
utm_source=share&utm_medium=member_desktop>
5G data transmission occurs across both time and frequency domains, with each
resource carefully managed to maximize efficiency and performance.
- Frequency Domain: Each slot includes 12 subcarriers, and these subcarriers form
resource blocks, used to efficiently allocate resources.
- Broadcast Channel (PBCH): Carries info - subcarrier spacing, frame number, and
control channel configurations, ensuring the UE can successfully connect
- The PSS, SSS, and PBCH form the Synchronization Signal Block (SSB), transmitted
every 20 milliseconds.
- Control Channel (PDCCH): Manages the transmission schedule, ensuring data is sent
at the right time.
- Shared Channel (PDSCH): Responsible for transmitting the actual data payload to the
UE.
Efficient frame structure is crucial for managing data transmission across a much faster
and more flexible wireless networks. Key components:
Frame:
Subframe:
Slot:
- Smallest unit of data transmission - one subcarrier in frequency domain and one
OFDM symbol in the time domain.
From <https://www.linkedin.com/feed/>
#Nokia_NSA
hashtag#NR_Notes
How to make RSI (root sequence index) planning in NR?
The purpose from RSI Planning is to eliminate RSI Clashes to enhance RACH SR performance.
- Using Different RSI Values per site.
- Using Same RSI Values per site with Different shift in Time Domain (PRACHConfigindex).
- Using Same RSI Values per site with Different shift in Frequency Domain(msg1-FrequencyStart)
From <https://www.linkedin.com/in/mahmoud-yousry-40a62a80/recent-activity/all/>
#5G_Nokia
hashtag#5G_Notes_NSA
How many center frequency in LTE & NR?
- In LTE we have 1 center frequency called : earfcn.
- In NR we have 2 center frequencies called : NR-ARFCN & GSCN.
•NR-ARFCN is applicable to the channel bandwidth.
•GSCN is applicable to the Synchronization Signals / PBCH Block (GSCN uses a coarse raster to reduce cell
search times)
•SSB Can be placed automatically at the bottom, middle, top of the channel
•Also in DT will scan GSCN Carrier only.
From <https://www.linkedin.com/in/mahmoud-yousry-40a62a80/recent-activity/all/>
What is RACH?
Ans: RACH (Random Access Channel) is a procedure in 5G networks that allows a User Equipment (UE)
to connect to the network and establish timing alignment for uplink transmission.
1) hashtag#CBRA : hashtag#Contention_Based_Random_Access
In 5G NR, there are two types of CBRA procedures:
4-step CBRA: The procedure used in LTE and NR-Release 15
2-step CBRA: Introduced in 3GPP Release-16 to reduce latency and control signaling overhead.
Definition: Contention-based random access (CBRA) is a procedure in which multiple users (UEs) can
attempt to access a network at the same time and use same preamble ID (0-63), which can lead to
Collision/contention.
-> Why two or more UE select same preamble?
Ans: Because less number of Preambles (0-63)
2) CFRA (Contention Free Random Access) -Whenever we are in connected mode, the eNodeB/gNodeB
provides dedicated preamble to the UE, it reduces latency and signalling overhead
Suppose, If we use CBRA at handover time and there is contention at any point, the network KPIs will be
degraded.
-> Contention Free Random Access Reduce Signalling overhead and Latency.
From <https://www.linkedin.com/search/results/all/?keywords=5G%20NSA%
20parameters&origin=GLOBAL_SEARCH_HEADER&sid=p*q>
Reasons..
Radio and Transmission Part...
Poor Signal Strength/Quality :
- Weak target cell signal (RSRP/RSRQ) due to distance or obstacles.
- Incorrect handover thresholds (e.g., hysteresis, time-to-trigger (TTT) settings).
Congestion :
- Target cell resource congestion (lack of PRBs, channels, or processing capacity).
Configuration Issues :
- Incorrect neighbor cell lists (missing or outdated entries).
- Faulty X2/S1 interfaces between eNodeBs or core network elements.
Mobility Challenges :
- High speed scenarios causing rapid cell changes.
- Radio link failure before handover completion.
Core Part...
Hardware Software aults
- eNodeB or UE hardware malfunctions.
- Software bugs in eNodeB, MME, or UE firmware.
Solutions..
Network Parameter Optimization:
Fine tune handover parameters such as:
- Event A3 offset (determines when handover is triggered)
- Time-to-trigger (TTT) values (prevents ping-pong handovers)
- Hysteresis margins (provides stability in decision making)
on es on ana e ent
- Expand capacity e.g., carrier aggregation and MIMO.
- Improve network coverage by:
2. Adjusting antenna tilts and azimuths.
3. Optimizing power levels.
4. Adding small cells in problem areas.
- Use admission control to prioritize handover requests.
- Implement smart load balancing through:
Hardware/Software Maintenance:
- Regular firmware updates for eNodeBs and UEs.
- Proactive hardware audits and redundancy checks.
These are reasons and solutions for handover failure in general in the generations not for 4G
only, I just focused on it as an example. but some techniques depends on specific system.
HO:
When the user moves out of coverage of one cell to another cell. For smooth operation
and to avoid call drop.
HO happens only in case of connected user.
Redirection:
When UE changes its RAT, cell redirection happens. and in redirection UE goes from
connected state to idle state.
and when a particular service and coverage is not available to one cell, the UE is
redirected by the eNB to other cells for better coverage and respective service
requested.
Cell Selec on
In Idle mode, when UE is not RRC connected to any particular cell, but it camps on a
cell instead.
In idle mode, the procedure of camping on a cell is called cell selection.
♋ Cell Re-selection:
When UE moves out of coverage of one cell to another cell in idle mode, UE has to
camp from one camp to another cell.
This process of reselecting a new cell, while UE is already camping on an existing
selected cell is called Cell Re-Selection.
From <https://www.linkedin.com/in/mahmoud-elhady-380122122/recent-activity/all/>
LTE Events.
Handover types Events ‐‐‐