MARTIN SAUTER works in the telecommunications industry as a thought leader, researcher, book author, and blogger based in Cologne. His interests are focused on mobile communication networks, multimedia applications and especially the wireless Internet.

• Preface to Fourth Edition xv1 Global System for Mobile Communications (GSM) 11.1 Circuit-Switched Data Transmission 21.1.1 Classic Circuit Switching 21.1.2 Virtual Circuit Switching over IP 31.2 Standards 41.3 Transmission Speeds 51.4 The Signaling System Number 7 61.4.1 The Classic SS-7 Protocol Stack 71.4.2 SS-7 Protocols for GSM 101.4.3 IP-Based SS-7 Protocol Stack 111.5 The GSM Subsystems 121.6 The Network Subsystem 121.6.1 The Mobile Switching Center (MSC), Server, and Gateway 131.6.2 The Visitor Location Register (VLR) 161.6.3 The Home Location Register (HLR) 171.6.4 The Authentication Center 211.6.5 The Short Messaging Service Center (SMSC) 231.7 The Base Station Subsystem (BSS) and Voice Processing 241.7.1 Frequency Bands 241.7.2 The Base Transceiver Station (BTS) 261.7.3 The GSM Air Interface 281.7.4 The Base Station Controller (BSC) 351.7.5 The TRAU for Voice Encoding 391.7.6 Channel Coder and Interleaver in the BTS 431.7.7 Ciphering in the BTS and Security Aspects 451.7.8 Modulation 481.7.9 Voice Activity Detection 481.8 Mobility Management and Call Control 501.8.1 Cell Reselection and Location Area Update 501.8.2 The Mobile-Terminated Call 511.8.3 Handover Scenarios 541.9 The Mobile Device 561.10 The SIM Card 581.11 The Intelligent Network Subsystem and CAMEL 63Questions 65References 662 General Packet Radio Service (GPRS) and EDGE 692.1 Circuit-Switched Data Transmission over GSM 692.2 Packet-Switched Data Transmission over GPRS 702.3 The GPRS Air Interface 722.3.1 GPRS vs. GSM Timeslot Usage on the Air Interface 722.3.2 Mixed GSM/GPRS Timeslot Usage in a Base Station 742.3.3 Coding Schemes 752.3.4 Enhanced Datarates for GSM Evolution (EDGE) 762.3.5 Mobile Device Classes 792.3.6 Network Mode of Operation 802.3.7 GPRS Logical Channels on the Air Interface 812.4 The GPRS State Model 842.5 GPRS Network Elements 872.5.1 The Packet Control Unit (PCU) 872.5.2 The Serving GPRS Support Node (SGSN) 882.5.3 The Gateway GPRS Support Node (GGSN) 902.6 GPRS Radio Resource Management 912.7 GPRS Interfaces 952.8 GPRS Mobility Management and Session Management (GMM/SM) 992.8.1 Mobility Management Tasks 1002.8.2 GPRS Session Management 103Questions 105References 1063 Universal Mobile Telecommunications System (UMTS) and High-Speed Packet Access (HSPA) 1073.1 Overview 1073.1.1 3GPP Release 99: The First UMTS Access Network Implementation 1083.1.2 3GPP Release 4: Enhancements for the Circuit-Switched Core Network 1113.1.3 3GPP Release 5: High-Speed Downlink Packet Access 1113.1.4 3GPP Release 6: High-Speed Uplink Packet Access (HSUPA) 1123.1.5 3GPP Release 7: Even Faster HSPA and Continued Packet Connectivity 1133.1.6 3GPP Release 8: LTE, Further HSPA Enhancements and Femtocells 1133.2 Important New Concepts of UMTS 1143.2.1 The Radio Access Bearer (RAB) 1143.2.2 The Access Stratum and Non-Access Stratum 1153.2.3 Common Transport Protocols for CS and PS 1163.3 Code Division Multiple Access (CDMA) 1163.3.1 Spreading Factor, Chip Rate, and Process Gain 1193.3.2 The OVSF Code Tree 1203.3.3 Scrambling in Uplink and Downlink Direction 1223.3.4 UMTS Frequency and Cell Planning 1233.3.5 The Near–Far Effect and Cell Breathing 1243.3.6 Advantages of the UMTS Radio Network Compared to GSM 1263.4 UMTS Channel Structure on the Air Interface 1283.4.1 User Plane and Control Plane 1283.4.2 Common and Dedicated Channels 1283.4.3 Logical, Transport, and Physical Channels 1293.4.4 Example: Network Search 1333.4.5 Example: Initial Network Access Procedure 1353.4.6 The Uu Protocol Stack 1373.5 The UMTS Terrestrial Radio Access Network (UTRAN) 1423.5.1 Node-B, Iub Interface, NBAP, and FP 1423.5.2 The RNC, Iu, Iub and Iur Interfaces, RANAP, and RNSAP 1433.5.3 Adaptive Multirate (AMR) NB and WB Codecs for Voice Calls 1483.5.4 Radio Resource Control (RRC) States 1503.6 Core Network Mobility Management 1553.7 Radio Network Mobility Management 1563.7.1 Mobility Management in the Cell-DCH State 1563.7.2 Mobility Management in Idle State 1653.7.3 Mobility Management in Other States 1663.8 UMTS CS and PS Call Establishment 1683.9 UMTS Security 1723.10 High-Speed Downlink Packet Access (HSDPA) and HSPA+ 1743.10.1 HSDPA Channels 1743.10.2 Shorter Delay Times and Hybrid ARQ (HARQ) 1763.10.3 Node-B Scheduling 1783.10.4 Adaptive Modulation and Coding, Transmission Rates, and Multicarrier Operation 1793.10.5 Establishment and Release of an HSDPA Connection 1813.10.6 HSDPA Mobility Management 1823.11 High-Speed Uplink Packet Access (HSUPA) 1833.11.1 E-DCH Channel Structure 1843.11.2 The E-DCH Protocol Stack and Functionality 1873.11.3 E-DCH Scheduling 1893.11.4 E-DCH Mobility 1913.11.5 E-DCH-Capable Devices 1923.12 Radio and Core Network Enhancements: CPC 1933.12.1 A New Uplink Control Channel Slot Format 1933.12.2 Reporting Reduction 1943.12.3 HS-SCCH Discontinuous Reception 1953.12.4 HS-SCCH-less Operation 1953.12.5 Enhanced Cell-FACH and Cell/URA-PCH States 1963.13 Radio Resource State Management 1973.14 Automated Emergency Calls (eCall) from Vehicles 198Questions 199References 2004 Long Term Evolution (LTE) and LTE-Advanced Pro 2034.1 Introduction and Overview 2034.2 Network Architecture and Interfaces 2064.2.1 LTE Mobile Devices and the LTE Uu Interface 2074.2.2 The eNB and the S1 and X2 Interfaces 2104.2.3 The Mobility Management Entity (MME) 2134.2.4 The Serving Gateway (S-GW) 2154.2.5 The PDN-Gateway 2154.2.6 The Home Subscriber Server (HSS) 2174.2.7 Billing, Prepaid, and Quality of Service 2184.3 FDD Air Interface and Radio Network 2194.3.1 OFDMA for Downlink Transmission 2204.3.2 SC-FDMA for Uplink Transmission 2224.3.3 Quadrature Amplitude Modulation for Subchannels 2234.3.4 Symbols, Slots, Radio Blocks, and Frames 2254.3.5 Reference and Synchronization Signals 2264.3.6 The LTE Channel Model in the Downlink Direction 2274.3.7 Downlink Management Channels 2284.3.8 System Information Messages 2294.3.9 The LTE Channel Model in the Uplink Direction 2304.3.10 MIMO Transmission 2334.3.11 HARQ and Other Retransmission Mechanisms 2364.3.12 PDCP Compression and Ciphering 2384.3.13 Protocol Layer Overview 2394.4 TD-LTE Air Interface 2404.5 Scheduling 2424.5.1 Downlink Scheduling 2424.5.2 Uplink Scheduling 2464.6 Basic Procedures 2474.6.1 Cell Search 2474.6.2 Attach and Default Bearer Activation 2504.6.3 Handover Scenarios 2544.6.4 Default and Dedicated Bearers 2594.7 Mobility Management and Power Optimization 2604.7.1 Mobility Management in RRC Connected State 2604.7.2 Mobility Management in RRC Idle State 2634.7.3 Mobility Management and State Changes in Practice 2654.8 LTE Security Architecture 2674.9 Interconnection with UMTS and GSM 2684.9.1 Cell Reselection between LTE and GSM/UMTS 2684.9.2 RRC Connection Release with Redirect from LTE to GSM/UMTS 2704.9.3 Handover from LTE to UMTS 2714.9.4 Returning from UMTS and GPRS to LTE 2714.10 Carrier Aggregation 2724.10.1 CA Types, Bandwidth Classes, and Band Combinations 2734.10.2 CA Configuration, Activation, and Deactivation 2754.10.3 Uplink Carrier Aggregation 2784.11 Network Planning Aspects 2794.11.1 Single Frequency Network 2794.11.2 Cell-Edge Performance 2794.11.3 Self-Organizing Network Functionality 2814.11.4 Cell Site Throughput and Number of Simultaneous Users 2824.12 CS-Fallback for Voice and SMS Services with LTE 2834.12.1 SMS over SGs 2844.12.2 CS-Fallback for Voice Calls 2854.13 Network Sharing – MOCN and MORAN 2884.13.1 National Roaming 2884.13.2 MOCN (Multi-Operator Core Network) 2894.13.3 MORAN (Mobile Operator Radio Access Network) 2904.14 From Dipoles to Active Antennas and Gigabit Backhaul 2904.15 IPv6 in Mobile Networks 2924.15.1 IPv6 Prefix and Interface Identifiers 2934.15.2 IPv6 and International Roaming 2954.15.3 IPv6 and Tethering 2964.15.4 IPv6-Only Connectivity 2974.16 Network Function Virtualization 2984.16.1 Virtualization on the Desktop 2994.16.2 Running an Operating System in a Virtual Machine 2994.16.3 Running Several Virtual Machines Simultaneously 3004.16.4 Virtual Machine Snapshots 3004.16.5 Cloning a Virtual Machine 3014.16.6 Virtualization in Data Centers in the Cloud 3024.16.7 Managing Virtual Machines in the Cloud 3034.16.8 Network Function Virtualization 3034.16.9 Virtualizing Routers 3054.16.10 Software-Defined Networking 3054.17 Machine Type Communication and the Internet of Things 3064.17.1 LTE Cat-1 Devices 3074.17.2 LTE Cat-0 Devices and PSM 3074.17.3 LTE Cat-M1 Devices 3084.17.4 LTE NB1 (NB-IoT) Devices 3084.17.5 NB-IoT – Deployment Options 3094.17.6 NB-IoT – Air Interface 3094.17.7 NB-IoT – Control Channels and Scheduling 3104.17.8 NB-IoT Multicarrier Operation 3114.17.9 NB-IoT Throughput and Number of Devices per Cell 3124.17.10 NB-IoT Power Consumption Considerations 3124.17.11 NB-IoT – High Latency Communication 3134.17.12 NB-IoT – Optimizing IP-Based and Non-IP-Based Data Transmission 3144.17.13 NB-IoT Summary 316Questions 316References 3175 VoLTE, VoWifi, and Mission Critical Communication 3215.1 Overview 3215.2 The Session Initiation Protocol (SIP) 3225.3 The IP Multimedia Subsystem (IMS) and VoLTE 3265.3.1 Architecture Overview 3265.3.2 Registration 3285.3.3 VoLTE Call Establishment 3305.3.4 LTE Bearer Configurations for VoLTE 3325.3.5 Dedicated Bearer Setup with Preconditions 3345.3.6 Header Compression and DRX 3365.3.7 Speech Codec and Bandwidth Negotiation 3375.3.8 Alerting Tone, Ringback Tone, and Early Media 3405.3.9 Port Usage 3405.3.10 Message Filtering and Asserted Identities 3415.3.11 DTMF Tones 3425.3.12 SMS over IMS 3435.3.13 Call Forwarding Settings and XCAP 3445.3.14 Single Radio Voice Call Continuity 3465.3.15 Radio Domain Selection, T-ADS, and VoLTE Interworking with GSM and UMTS 3495.3.16 VoLTE Emergency Calls 3505.4 VoLTE Roaming 3525.4.1 Option 1: VoLTE Local Breakout 3535.4.2 Option 2: VoLTE S8-Home Routing 3545.5 Voice over WiFi (VoWifi) 3565.5.1 VoWifi Network Architecture 3565.5.2 VoWifi Handover 3595.5.3 Wi-Fi-Preferred vs. Cellular-Preferred 3605.5.4 SMS, MMS, and Supplementary Services over Wi-Fi 3605.5.5 VoWifi Roaming 3615.6 VoLTE Compared to Fixed-Line IMS in Practice 3625.7 Mission Critical Communication (MCC) 3635.7.1 Overview 3635.7.2 Advantages of LTE for Mission Critical Communication 3645.7.3 Challenges of Mission Critical Communication for LTE 3655.7.4 Network Operation Models 3675.7.5 Mission Critical Push To Talk (MCPTT) – Overview 3685.7.6 MCPTT Group Call Establishment 3705.7.7 MCPTT Floor Control 3715.7.8 MCPTT Group Call Types 3725.7.9 MCPTT Configuration and Provisioning 3725.7.10 eMBMS for MCPTT 3735.7.11 Priority and Quality of Service 376Questions 376References 3776 5G New Radio (NR) and the 5G Core 3796.1 Introduction and Overview 3796.1.1 Reasons for Initially Launching 5G as a Hybrid Solution 3806.1.2 Frequency Range 1 and 2 3816.1.3 Dynamic Spectrum Sharing in Low- and Mid-Bands 3816.1.4 Network Deployments and Organization of this Chapter 3826.2 5G NR Non-Standalone (NSA) Architecture 3826.2.1 Network Architecture and Interfaces 3826.2.2 3GPP 5G Deployment Options 1–7 and Dynamic Spectrum Sharing 3856.2.3 Options 3, 3A, and Option 3X 3876.2.4 Fronthaul Interface 3886.3 5G TDD Air Interface 3886.3.1 Flexible OFDMA for Downlink Transmission 3906.3.2 The 5G Resource Grid: Symbols, Slots, Resource Blocks, and Frames 3926.3.3 Synchronization and Reference Signals 3936.3.4 Massive-MIMO for Beamforming and Multi-User Data Transfer 3956.3.5 TDD Slot Formats 3986.3.6 Downlink Control Channels 4006.3.7 Uplink Channels 4016.3.8 Bandwidth Parts 4016.3.9 The Downlink Control Channel and Scheduling 4036.3.10 Downlink Data Throughput in Theory and Practice 4056.3.11 Uplink Data Throughput 4076.3.12 TDD Air Interface for mmWave Bands (FR2) 4076.4 5G FDD Air Interface 4096.4.1 Refarming and Dynamic Spectrum Sharing 4106.5 EN-DC Bearers and Scheduling 4156.5.1 Split Bearers, Flow Control 4166.5.2 Two UE Transmitter Requirement for EN-DC 4176.6 Basic Procedures and Mobility Management in Non-Standalone Mode 4186.6.1 Establishment of an LTE-Only Bearer as 5G Anchor 4196.6.2 5G NR Cell Addition in Non-Standalone Mode 4226.6.3 When to Show a 5G Indicator 4266.6.4 Handover Scenarios 4276.6.5 EN-DC Signaling Radio Bearers 4306.6.6 5G Non-Standalone and VoLTE 4306.7 Network Planning and Deployment Aspects 4316.7.1 The Range of Band n78 4316.7.2 Backhaul Considerations 4326.8 5G NR Standalone (SA) Architecture and Basic Procedures 4326.8.1 5G Core Network Functions 4326.8.2 Network Interfaces 4346.8.3 Subscriber and Device Identifiers 4356.8.4 5G Core Network Procedures Overview 4356.8.5 Connection Management 4366.8.6 Registration Management Procedure 4366.8.7 Session Management 4376.8.8 Mobility Management 4426.8.9 New Security Features 4446.8.10 The 5G Core and Different RAN Deployments 4466.8.11 5G and 4G Core Network Interworking 4466.8.12 The 5G Core Network and SMS 4516.8.13 Cloud Native 5G Core 4516.9 The 5G Air Interface in Standalone Operation 4546.9.1 RRC Inactive State 4546.9.2 System Information Messages 4556.9.3 Measurement Configuration, Events, and Handovers 4566.10 Future 5G Functionalities 4576.10.1 Voice Service in 5G 4576.10.2 Ethernet and Unstructured PDU Session Types 4596.10.3 Network Slicing 459Questions 461References 4617 Wireless Local Area Network (WLAN) 4657.1 Wireless LAN Overview 4657.2 Transmission Speeds and Standards 4657.3 WLAN Configurations: From Ad Hoc to Wireless Bridging 4687.3.1 Ad Hoc, BSS, ESS, and Wireless Bridging 4697.3.2 SSID and Frequency Selection 4727.4 Management Operations 4747.5 The MAC Layer 4797.5.1 Air Interface Access Control 4797.5.2 The MAC Header 4827.6 The Physical Layer and MAC Extensions 4837.6.1 IEEE 802.11b – 11 Mbit/s 4847.6.2 IEEE 802.11g with up to 54 Mbit/s 4867.6.3 IEEE 802.11a with up to 54 Mbit/s 4887.6.4 IEEE 802.11n with up to 600 Mbits/s 4897.6.5 IEEE 802.11ac – Wi-Fi 5 – Gigabit Wireless 4977.6.6 IEEE 802.11ax – Wi-Fi 6 – High Efficiency Extensions 5027.6.7 IEEE 802.11ad – Gigabit Wireless at 60 GHz 5067.7 Wireless LAN Security 5107.7.1 Wired Equivalent Privacy (WEP) and Early Security Measures 5107.7.2 WPA and WPA2 Personal Mode Authentication 5107.7.3 WPA and WPA2 Enterprise Mode Authentication – EAP-TLS 5127.7.4 WPA and WPA2 Enterprise Mode Authentication – EAP-TTLS 5137.7.5 WPA and WPA2 Enterprise Mode Authentication – EAP-PEAP 5157.7.6 WPA and WPA2 Enterprise Mode Authentication – EAP-SIM 5167.7.7 WPA and WPA2 Encryption 5187.7.8 Wi-Fi-Protected Setup (WPS) 5197.7.9 WPA3 Personal Mode Authentication 5207.7.10 Protected Management Frames 5227.8 IEEE 802.11e and WMM – Quality of Service 523Questions 530References 5318 Bluetooth and Bluetooth Low Energy 5338.1 Overview and Applications 5338.2 Physical Properties 5348.3 Piconets and the Master/Slave Concept 5388.4 The Bluetooth Protocol Stack 5408.4.1 The Baseband Layer 5408.4.2 The Link Controller 5468.4.3 The Link Manager 5498.4.4 The HCI Interface 5498.4.5 The L2CAP Layer 5528.4.6 The Service Discovery Protocol 5548.4.7 The RFCOMM Layer 5568.4.8 Overview of Bluetooth Connection Establishment 5578.5 Bluetooth Security 5588.5.1 Pairing up to Bluetooth 2.0 5598.5.2 Pairing with Bluetooth 2.1 and Above (Secure Simple Pairing) 5608.5.3 Authentication 5628.5.4 Encryption 5638.5.5 Authorization 5638.5.6 Security Modes 5648.6 Bluetooth Profiles 5658.6.1 Basic Profiles: GAP, SDP, and the Serial Profile 5678.6.2 Object Exchange Profiles: FTP, Object Push, and Synchronize 5688.6.3 Headset, Hands-Free, and SIM Access Profile 5708.6.4 High-Quality Audio Streaming 5748.6.5 The Human Interface Device (HID) Profile 5778.7 Bluetooth Low Energy 5778.7.1 Introduction 5778.7.2 The Lower BLE Layers 5798.7.3 BLE SMP, GAP, and Connection Establishment 5818.7.4 BLE Authentication, Security, and Privacy 5828.7.5 BLE ATT and GATT 5838.7.6 Practical Example 5858.7.7 BLE Beacons 5878.7.8 BLE and IPv6 Internet Connectivity 588Questions 589References 590Index 593

MARTIN SAUTER works in the telecommunications industry as a thought leader, researcher, book author, and blogger based in Cologne. His interests are focused on mobile communication networks, multimedia applications and especially the wireless Internet.

• Preface to Fourth Edition xv1 Global System for Mobile Communications (GSM) 11.1 Circuit-Switched Data Transmission 21.1.1 Classic Circuit Switching 21.1.2 Virtual Circuit Switching over IP 31.2 Standards 41.3 Transmission Speeds 51.4 The Signaling System Number 7 61.4.1 The Classic SS-7 Protocol Stack 71.4.2 SS-7 Protocols for GSM 101.4.3 IP-Based SS-7 Protocol Stack 111.5 The GSM Subsystems 121.6 The Network Subsystem 121.6.1 The Mobile Switching Center (MSC), Server, and Gateway 131.6.2 The Visitor Location Register (VLR) 161.6.3 The Home Location Register (HLR) 171.6.4 The Authentication Center 211.6.5 The Short Messaging Service Center (SMSC) 231.7 The Base Station Subsystem (BSS) and Voice Processing 241.7.1 Frequency Bands 241.7.2 The Base Transceiver Station (BTS) 261.7.3 The GSM Air Interface 281.7.4 The Base Station Controller (BSC) 351.7.5 The TRAU for Voice Encoding 391.7.6 Channel Coder and Interleaver in the BTS 431.7.7 Ciphering in the BTS and Security Aspects 451.7.8 Modulation 481.7.9 Voice Activity Detection 481.8 Mobility Management and Call Control 501.8.1 Cell Reselection and Location Area Update 501.8.2 The Mobile-Terminated Call 511.8.3 Handover Scenarios 541.9 The Mobile Device 561.10 The SIM Card 581.11 The Intelligent Network Subsystem and CAMEL 63Questions 65References 662 General Packet Radio Service (GPRS) and EDGE 692.1 Circuit-Switched Data Transmission over GSM 692.2 Packet-Switched Data Transmission over GPRS 702.3 The GPRS Air Interface 722.3.1 GPRS vs. GSM Timeslot Usage on the Air Interface 722.3.2 Mixed GSM/GPRS Timeslot Usage in a Base Station 742.3.3 Coding Schemes 752.3.4 Enhanced Datarates for GSM Evolution (EDGE) 762.3.5 Mobile Device Classes 792.3.6 Network Mode of Operation 802.3.7 GPRS Logical Channels on the Air Interface 812.4 The GPRS State Model 842.5 GPRS Network Elements 872.5.1 The Packet Control Unit (PCU) 872.5.2 The Serving GPRS Support Node (SGSN) 882.5.3 The Gateway GPRS Support Node (GGSN) 902.6 GPRS Radio Resource Management 912.7 GPRS Interfaces 952.8 GPRS Mobility Management and Session Management (GMM/SM) 992.8.1 Mobility Management Tasks 1002.8.2 GPRS Session Management 103Questions 105References 1063 Universal Mobile Telecommunications System (UMTS) and High-Speed Packet Access (HSPA) 1073.1 Overview 1073.1.1 3GPP Release 99: The First UMTS Access Network Implementation 1083.1.2 3GPP Release 4: Enhancements for the Circuit-Switched Core Network 1113.1.3 3GPP Release 5: High-Speed Downlink Packet Access 1113.1.4 3GPP Release 6: High-Speed Uplink Packet Access (HSUPA) 1123.1.5 3GPP Release 7: Even Faster HSPA and Continued Packet Connectivity 1133.1.6 3GPP Release 8: LTE, Further HSPA Enhancements and Femtocells 1133.2 Important New Concepts of UMTS 1143.2.1 The Radio Access Bearer (RAB) 1143.2.2 The Access Stratum and Non-Access Stratum 1153.2.3 Common Transport Protocols for CS and PS 1163.3 Code Division Multiple Access (CDMA) 1163.3.1 Spreading Factor, Chip Rate, and Process Gain 1193.3.2 The OVSF Code Tree 1203.3.3 Scrambling in Uplink and Downlink Direction 1223.3.4 UMTS Frequency and Cell Planning 1233.3.5 The Near–Far Effect and Cell Breathing 1243.3.6 Advantages of the UMTS Radio Network Compared to GSM 1263.4 UMTS Channel Structure on the Air Interface 1283.4.1 User Plane and Control Plane 1283.4.2 Common and Dedicated Channels 1283.4.3 Logical, Transport, and Physical Channels 1293.4.4 Example: Network Search 1333.4.5 Example: Initial Network Access Procedure 1353.4.6 The Uu Protocol Stack 1373.5 The UMTS Terrestrial Radio Access Network (UTRAN) 1423.5.1 Node-B, Iub Interface, NBAP, and FP 1423.5.2 The RNC, Iu, Iub and Iur Interfaces, RANAP, and RNSAP 1433.5.3 Adaptive Multirate (AMR) NB and WB Codecs for Voice Calls 1483.5.4 Radio Resource Control (RRC) States 1503.6 Core Network Mobility Management 1553.7 Radio Network Mobility Management 1563.7.1 Mobility Management in the Cell-DCH State 1563.7.2 Mobility Management in Idle State 1653.7.3 Mobility Management in Other States 1663.8 UMTS CS and PS Call Establishment 1683.9 UMTS Security 1723.10 High-Speed Downlink Packet Access (HSDPA) and HSPA+ 1743.10.1 HSDPA Channels 1743.10.2 Shorter Delay Times and Hybrid ARQ (HARQ) 1763.10.3 Node-B Scheduling 1783.10.4 Adaptive Modulation and Coding, Transmission Rates, and Multicarrier Operation 1793.10.5 Establishment and Release of an HSDPA Connection 1813.10.6 HSDPA Mobility Management 1823.11 High-Speed Uplink Packet Access (HSUPA) 1833.11.1 E-DCH Channel Structure 1843.11.2 The E-DCH Protocol Stack and Functionality 1873.11.3 E-DCH Scheduling 1893.11.4 E-DCH Mobility 1913.11.5 E-DCH-Capable Devices 1923.12 Radio and Core Network Enhancements: CPC 1933.12.1 A New Uplink Control Channel Slot Format 1933.12.2 Reporting Reduction 1943.12.3 HS-SCCH Discontinuous Reception 1953.12.4 HS-SCCH-less Operation 1953.12.5 Enhanced Cell-FACH and Cell/URA-PCH States 1963.13 Radio Resource State Management 1973.14 Automated Emergency Calls (eCall) from Vehicles 198Questions 199References 2004 Long Term Evolution (LTE) and LTE-Advanced Pro 2034.1 Introduction and Overview 2034.2 Network Architecture and Interfaces 2064.2.1 LTE Mobile Devices and the LTE Uu Interface 2074.2.2 The eNB and the S1 and X2 Interfaces 2104.2.3 The Mobility Management Entity (MME) 2134.2.4 The Serving Gateway (S-GW) 2154.2.5 The PDN-Gateway 2154.2.6 The Home Subscriber Server (HSS) 2174.2.7 Billing, Prepaid, and Quality of Service 2184.3 FDD Air Interface and Radio Network 2194.3.1 OFDMA for Downlink Transmission 2204.3.2 SC-FDMA for Uplink Transmission 2224.3.3 Quadrature Amplitude Modulation for Subchannels 2234.3.4 Symbols, Slots, Radio Blocks, and Frames 2254.3.5 Reference and Synchronization Signals 2264.3.6 The LTE Channel Model in the Downlink Direction 2274.3.7 Downlink Management Channels 2284.3.8 System Information Messages 2294.3.9 The LTE Channel Model in the Uplink Direction 2304.3.10 MIMO Transmission 2334.3.11 HARQ and Other Retransmission Mechanisms 2364.3.12 PDCP Compression and Ciphering 2384.3.13 Protocol Layer Overview 2394.4 TD-LTE Air Interface 2404.5 Scheduling 2424.5.1 Downlink Scheduling 2424.5.2 Uplink Scheduling 2464.6 Basic Procedures 2474.6.1 Cell Search 2474.6.2 Attach and Default Bearer Activation 2504.6.3 Handover Scenarios 2544.6.4 Default and Dedicated Bearers 2594.7 Mobility Management and Power Optimization 2604.7.1 Mobility Management in RRC Connected State 2604.7.2 Mobility Management in RRC Idle State 2634.7.3 Mobility Management and State Changes in Practice 2654.8 LTE Security Architecture 2674.9 Interconnection with UMTS and GSM 2684.9.1 Cell Reselection between LTE and GSM/UMTS 2684.9.2 RRC Connection Release with Redirect from LTE to GSM/UMTS 2704.9.3 Handover from LTE to UMTS 2714.9.4 Returning from UMTS and GPRS to LTE 2714.10 Carrier Aggregation 2724.10.1 CA Types, Bandwidth Classes, and Band Combinations 2734.10.2 CA Configuration, Activation, and Deactivation 2754.10.3 Uplink Carrier Aggregation 2784.11 Network Planning Aspects 2794.11.1 Single Frequency Network 2794.11.2 Cell-Edge Performance 2794.11.3 Self-Organizing Network Functionality 2814.11.4 Cell Site Throughput and Number of Simultaneous Users 2824.12 CS-Fallback for Voice and SMS Services with LTE 2834.12.1 SMS over SGs 2844.12.2 CS-Fallback for Voice Calls 2854.13 Network Sharing – MOCN and MORAN 2884.13.1 National Roaming 2884.13.2 MOCN (Multi-Operator Core Network) 2894.13.3 MORAN (Mobile Operator Radio Access Network) 2904.14 From Dipoles to Active Antennas and Gigabit Backhaul 2904.15 IPv6 in Mobile Networks 2924.15.1 IPv6 Prefix and Interface Identifiers 2934.15.2 IPv6 and International Roaming 2954.15.3 IPv6 and Tethering 2964.15.4 IPv6-Only Connectivity 2974.16 Network Function Virtualization 2984.16.1 Virtualization on the Desktop 2994.16.2 Running an Operating System in a Virtual Machine 2994.16.3 Running Several Virtual Machines Simultaneously 3004.16.4 Virtual Machine Snapshots 3004.16.5 Cloning a Virtual Machine 3014.16.6 Virtualization in Data Centers in the Cloud 3024.16.7 Managing Virtual Machines in the Cloud 3034.16.8 Network Function Virtualization 3034.16.9 Virtualizing Routers 3054.16.10 Software-Defined Networking 3054.17 Machine Type Communication and the Internet of Things 3064.17.1 LTE Cat-1 Devices 3074.17.2 LTE Cat-0 Devices and PSM 3074.17.3 LTE Cat-M1 Devices 3084.17.4 LTE NB1 (NB-IoT) Devices 3084.17.5 NB-IoT – Deployment Options 3094.17.6 NB-IoT – Air Interface 3094.17.7 NB-IoT – Control Channels and Scheduling 3104.17.8 NB-IoT Multicarrier Operation 3114.17.9 NB-IoT Throughput and Number of Devices per Cell 3124.17.10 NB-IoT Power Consumption Considerations 3124.17.11 NB-IoT – High Latency Communication 3134.17.12 NB-IoT – Optimizing IP-Based and Non-IP-Based Data Transmission 3144.17.13 NB-IoT Summary 316Questions 316References 3175 VoLTE, VoWifi, and Mission Critical Communication 3215.1 Overview 3215.2 The Session Initiation Protocol (SIP) 3225.3 The IP Multimedia Subsystem (IMS) and VoLTE 3265.3.1 Architecture Overview 3265.3.2 Registration 3285.3.3 VoLTE Call Establishment 3305.3.4 LTE Bearer Configurations for VoLTE 3325.3.5 Dedicated Bearer Setup with Preconditions 3345.3.6 Header Compression and DRX 3365.3.7 Speech Codec and Bandwidth Negotiation 3375.3.8 Alerting Tone, Ringback Tone, and Early Media 3405.3.9 Port Usage 3405.3.10 Message Filtering and Asserted Identities 3415.3.11 DTMF Tones 3425.3.12 SMS over IMS 3435.3.13 Call Forwarding Settings and XCAP 3445.3.14 Single Radio Voice Call Continuity 3465.3.15 Radio Domain Selection, T-ADS, and VoLTE Interworking with GSM and UMTS 3495.3.16 VoLTE Emergency Calls 3505.4 VoLTE Roaming 3525.4.1 Option 1: VoLTE Local Breakout 3535.4.2 Option 2: VoLTE S8-Home Routing 3545.5 Voice over WiFi (VoWifi) 3565.5.1 VoWifi Network Architecture 3565.5.2 VoWifi Handover 3595.5.3 Wi-Fi-Preferred vs. Cellular-Preferred 3605.5.4 SMS, MMS, and Supplementary Services over Wi-Fi 3605.5.5 VoWifi Roaming 3615.6 VoLTE Compared to Fixed-Line IMS in Practice 3625.7 Mission Critical Communication (MCC) 3635.7.1 Overview 3635.7.2 Advantages of LTE for Mission Critical Communication 3645.7.3 Challenges of Mission Critical Communication for LTE 3655.7.4 Network Operation Models 3675.7.5 Mission Critical Push To Talk (MCPTT) – Overview 3685.7.6 MCPTT Group Call Establishment 3705.7.7 MCPTT Floor Control 3715.7.8 MCPTT Group Call Types 3725.7.9 MCPTT Configuration and Provisioning 3725.7.10 eMBMS for MCPTT 3735.7.11 Priority and Quality of Service 376Questions 376References 3776 5G New Radio (NR) and the 5G Core 3796.1 Introduction and Overview 3796.1.1 Reasons for Initially Launching 5G as a Hybrid Solution 3806.1.2 Frequency Range 1 and 2 3816.1.3 Dynamic Spectrum Sharing in Low- and Mid-Bands 3816.1.4 Network Deployments and Organization of this Chapter 3826.2 5G NR Non-Standalone (NSA) Architecture 3826.2.1 Network Architecture and Interfaces 3826.2.2 3GPP 5G Deployment Options 1–7 and Dynamic Spectrum Sharing 3856.2.3 Options 3, 3A, and Option 3X 3876.2.4 Fronthaul Interface 3886.3 5G TDD Air Interface 3886.3.1 Flexible OFDMA for Downlink Transmission 3906.3.2 The 5G Resource Grid: Symbols, Slots, Resource Blocks, and Frames 3926.3.3 Synchronization and Reference Signals 3936.3.4 Massive-MIMO for Beamforming and Multi-User Data Transfer 3956.3.5 TDD Slot Formats 3986.3.6 Downlink Control Channels 4006.3.7 Uplink Channels 4016.3.8 Bandwidth Parts 4016.3.9 The Downlink Control Channel and Scheduling 4036.3.10 Downlink Data Throughput in Theory and Practice 4056.3.11 Uplink Data Throughput 4076.3.12 TDD Air Interface for mmWave Bands (FR2) 4076.4 5G FDD Air Interface 4096.4.1 Refarming and Dynamic Spectrum Sharing 4106.5 EN-DC Bearers and Scheduling 4156.5.1 Split Bearers, Flow Control 4166.5.2 Two UE Transmitter Requirement for EN-DC 4176.6 Basic Procedures and Mobility Management in Non-Standalone Mode 4186.6.1 Establishment of an LTE-Only Bearer as 5G Anchor 4196.6.2 5G NR Cell Addition in Non-Standalone Mode 4226.6.3 When to Show a 5G Indicator 4266.6.4 Handover Scenarios 4276.6.5 EN-DC Signaling Radio Bearers 4306.6.6 5G Non-Standalone and VoLTE 4306.7 Network Planning and Deployment Aspects 4316.7.1 The Range of Band n78 4316.7.2 Backhaul Considerations 4326.8 5G NR Standalone (SA) Architecture and Basic Procedures 4326.8.1 5G Core Network Functions 4326.8.2 Network Interfaces 4346.8.3 Subscriber and Device Identifiers 4356.8.4 5G Core Network Procedures Overview 4356.8.5 Connection Management 4366.8.6 Registration Management Procedure 4366.8.7 Session Management 4376.8.8 Mobility Management 4426.8.9 New Security Features 4446.8.10 The 5G Core and Different RAN Deployments 4466.8.11 5G and 4G Core Network Interworking 4466.8.12 The 5G Core Network and SMS 4516.8.13 Cloud Native 5G Core 4516.9 The 5G Air Interface in Standalone Operation 4546.9.1 RRC Inactive State 4546.9.2 System Information Messages 4556.9.3 Measurement Configuration, Events, and Handovers 4566.10 Future 5G Functionalities 4576.10.1 Voice Service in 5G 4576.10.2 Ethernet and Unstructured PDU Session Types 4596.10.3 Network Slicing 459Questions 461References 4617 Wireless Local Area Network (WLAN) 4657.1 Wireless LAN Overview 4657.2 Transmission Speeds and Standards 4657.3 WLAN Configurations: From Ad Hoc to Wireless Bridging 4687.3.1 Ad Hoc, BSS, ESS, and Wireless Bridging 4697.3.2 SSID and Frequency Selection 4727.4 Management Operations 4747.5 The MAC Layer 4797.5.1 Air Interface Access Control 4797.5.2 The MAC Header 4827.6 The Physical Layer and MAC Extensions 4837.6.1 IEEE 802.11b – 11 Mbit/s 4847.6.2 IEEE 802.11g with up to 54 Mbit/s 4867.6.3 IEEE 802.11a with up to 54 Mbit/s 4887.6.4 IEEE 802.11n with up to 600 Mbits/s 4897.6.5 IEEE 802.11ac – Wi-Fi 5 – Gigabit Wireless 4977.6.6 IEEE 802.11ax – Wi-Fi 6 – High Efficiency Extensions 5027.6.7 IEEE 802.11ad – Gigabit Wireless at 60 GHz 5067.7 Wireless LAN Security 5107.7.1 Wired Equivalent Privacy (WEP) and Early Security Measures 5107.7.2 WPA and WPA2 Personal Mode Authentication 5107.7.3 WPA and WPA2 Enterprise Mode Authentication – EAP-TLS 5127.7.4 WPA and WPA2 Enterprise Mode Authentication – EAP-TTLS 5137.7.5 WPA and WPA2 Enterprise Mode Authentication – EAP-PEAP 5157.7.6 WPA and WPA2 Enterprise Mode Authentication – EAP-SIM 5167.7.7 WPA and WPA2 Encryption 5187.7.8 Wi-Fi-Protected Setup (WPS) 5197.7.9 WPA3 Personal Mode Authentication 5207.7.10 Protected Management Frames 5227.8 IEEE 802.11e and WMM – Quality of Service 523Questions 530References 5318 Bluetooth and Bluetooth Low Energy 5338.1 Overview and Applications 5338.2 Physical Properties 5348.3 Piconets and the Master/Slave Concept 5388.4 The Bluetooth Protocol Stack 5408.4.1 The Baseband Layer 5408.4.2 The Link Controller 5468.4.3 The Link Manager 5498.4.4 The HCI Interface 5498.4.5 The L2CAP Layer 5528.4.6 The Service Discovery Protocol 5548.4.7 The RFCOMM Layer 5568.4.8 Overview of Bluetooth Connection Establishment 5578.5 Bluetooth Security 5588.5.1 Pairing up to Bluetooth 2.0 5598.5.2 Pairing with Bluetooth 2.1 and Above (Secure Simple Pairing) 5608.5.3 Authentication 5628.5.4 Encryption 5638.5.5 Authorization 5638.5.6 Security Modes 5648.6 Bluetooth Profiles 5658.6.1 Basic Profiles: GAP, SDP, and the Serial Profile 5678.6.2 Object Exchange Profiles: FTP, Object Push, and Synchronize 5688.6.3 Headset, Hands-Free, and SIM Access Profile 5708.6.4 High-Quality Audio Streaming 5748.6.5 The Human Interface Device (HID) Profile 5778.7 Bluetooth Low Energy 5778.7.1 Introduction 5778.7.2 The Lower BLE Layers 5798.7.3 BLE SMP, GAP, and Connection Establishment 5818.7.4 BLE Authentication, Security, and Privacy 5828.7.5 BLE ATT and GATT 5838.7.6 Practical Example 5858.7.7 BLE Beacons 5878.7.8 BLE and IPv6 Internet Connectivity 588Questions 589References 590Index 593

MARTIN SAUTER works in the telecommunications industry as a thought leader, researcher, book author, and blogger based in Cologne. His interests are focused on mobile communication networks, multimedia applications and especially the wireless Internet.

• Preface to Fourth Edition xv1 Global System for Mobile Communications (GSM) 11.1 Circuit-Switched Data Transmission 21.1.1 Classic Circuit Switching 21.1.2 Virtual Circuit Switching over IP 31.2 Standards 41.3 Transmission Speeds 51.4 The Signaling System Number 7 61.4.1 The Classic SS-7 Protocol Stack 71.4.2 SS-7 Protocols for GSM 101.4.3 IP-Based SS-7 Protocol Stack 111.5 The GSM Subsystems 121.6 The Network Subsystem 121.6.1 The Mobile Switching Center (MSC), Server, and Gateway 131.6.2 The Visitor Location Register (VLR) 161.6.3 The Home Location Register (HLR) 171.6.4 The Authentication Center 211.6.5 The Short Messaging Service Center (SMSC) 231.7 The Base Station Subsystem (BSS) and Voice Processing 241.7.1 Frequency Bands 241.7.2 The Base Transceiver Station (BTS) 261.7.3 The GSM Air Interface 281.7.4 The Base Station Controller (BSC) 351.7.5 The TRAU for Voice Encoding 391.7.6 Channel Coder and Interleaver in the BTS 431.7.7 Ciphering in the BTS and Security Aspects 451.7.8 Modulation 481.7.9 Voice Activity Detection 481.8 Mobility Management and Call Control 501.8.1 Cell Reselection and Location Area Update 501.8.2 The Mobile-Terminated Call 511.8.3 Handover Scenarios 541.9 The Mobile Device 561.10 The SIM Card 581.11 The Intelligent Network Subsystem and CAMEL 63Questions 65References 662 General Packet Radio Service (GPRS) and EDGE 692.1 Circuit-Switched Data Transmission over GSM 692.2 Packet-Switched Data Transmission over GPRS 702.3 The GPRS Air Interface 722.3.1 GPRS vs. GSM Timeslot Usage on the Air Interface 722.3.2 Mixed GSM/GPRS Timeslot Usage in a Base Station 742.3.3 Coding Schemes 752.3.4 Enhanced Datarates for GSM Evolution (EDGE) 762.3.5 Mobile Device Classes 792.3.6 Network Mode of Operation 802.3.7 GPRS Logical Channels on the Air Interface 812.4 The GPRS State Model 842.5 GPRS Network Elements 872.5.1 The Packet Control Unit (PCU) 872.5.2 The Serving GPRS Support Node (SGSN) 882.5.3 The Gateway GPRS Support Node (GGSN) 902.6 GPRS Radio Resource Management 912.7 GPRS Interfaces 952.8 GPRS Mobility Management and Session Management (GMM/SM) 992.8.1 Mobility Management Tasks 1002.8.2 GPRS Session Management 103Questions 105References 1063 Universal Mobile Telecommunications System (UMTS) and High-Speed Packet Access (HSPA) 1073.1 Overview 1073.1.1 3GPP Release 99: The First UMTS Access Network Implementation 1083.1.2 3GPP Release 4: Enhancements for the Circuit-Switched Core Network 1113.1.3 3GPP Release 5: High-Speed Downlink Packet Access 1113.1.4 3GPP Release 6: High-Speed Uplink Packet Access (HSUPA) 1123.1.5 3GPP Release 7: Even Faster HSPA and Continued Packet Connectivity 1133.1.6 3GPP Release 8: LTE, Further HSPA Enhancements and Femtocells 1133.2 Important New Concepts of UMTS 1143.2.1 The Radio Access Bearer (RAB) 1143.2.2 The Access Stratum and Non-Access Stratum 1153.2.3 Common Transport Protocols for CS and PS 1163.3 Code Division Multiple Access (CDMA) 1163.3.1 Spreading Factor, Chip Rate, and Process Gain 1193.3.2 The OVSF Code Tree 1203.3.3 Scrambling in Uplink and Downlink Direction 1223.3.4 UMTS Frequency and Cell Planning 1233.3.5 The Near–Far Effect and Cell Breathing 1243.3.6 Advantages of the UMTS Radio Network Compared to GSM 1263.4 UMTS Channel Structure on the Air Interface 1283.4.1 User Plane and Control Plane 1283.4.2 Common and Dedicated Channels 1283.4.3 Logical, Transport, and Physical Channels 1293.4.4 Example: Network Search 1333.4.5 Example: Initial Network Access Procedure 1353.4.6 The Uu Protocol Stack 1373.5 The UMTS Terrestrial Radio Access Network (UTRAN) 1423.5.1 Node-B, Iub Interface, NBAP, and FP 1423.5.2 The RNC, Iu, Iub and Iur Interfaces, RANAP, and RNSAP 1433.5.3 Adaptive Multirate (AMR) NB and WB Codecs for Voice Calls 1483.5.4 Radio Resource Control (RRC) States 1503.6 Core Network Mobility Management 1553.7 Radio Network Mobility Management 1563.7.1 Mobility Management in the Cell-DCH State 1563.7.2 Mobility Management in Idle State 1653.7.3 Mobility Management in Other States 1663.8 UMTS CS and PS Call Establishment 1683.9 UMTS Security 1723.10 High-Speed Downlink Packet Access (HSDPA) and HSPA+ 1743.10.1 HSDPA Channels 1743.10.2 Shorter Delay Times and Hybrid ARQ (HARQ) 1763.10.3 Node-B Scheduling 1783.10.4 Adaptive Modulation and Coding, Transmission Rates, and Multicarrier Operation 1793.10.5 Establishment and Release of an HSDPA Connection 1813.10.6 HSDPA Mobility Management 1823.11 High-Speed Uplink Packet Access (HSUPA) 1833.11.1 E-DCH Channel Structure 1843.11.2 The E-DCH Protocol Stack and Functionality 1873.11.3 E-DCH Scheduling 1893.11.4 E-DCH Mobility 1913.11.5 E-DCH-Capable Devices 1923.12 Radio and Core Network Enhancements: CPC 1933.12.1 A New Uplink Control Channel Slot Format 1933.12.2 Reporting Reduction 1943.12.3 HS-SCCH Discontinuous Reception 1953.12.4 HS-SCCH-less Operation 1953.12.5 Enhanced Cell-FACH and Cell/URA-PCH States 1963.13 Radio Resource State Management 1973.14 Automated Emergency Calls (eCall) from Vehicles 198Questions 199References 2004 Long Term Evolution (LTE) and LTE-Advanced Pro 2034.1 Introduction and Overview 2034.2 Network Architecture and Interfaces 2064.2.1 LTE Mobile Devices and the LTE Uu Interface 2074.2.2 The eNB and the S1 and X2 Interfaces 2104.2.3 The Mobility Management Entity (MME) 2134.2.4 The Serving Gateway (S-GW) 2154.2.5 The PDN-Gateway 2154.2.6 The Home Subscriber Server (HSS) 2174.2.7 Billing, Prepaid, and Quality of Service 2184.3 FDD Air Interface and Radio Network 2194.3.1 OFDMA for Downlink Transmission 2204.3.2 SC-FDMA for Uplink Transmission 2224.3.3 Quadrature Amplitude Modulation for Subchannels 2234.3.4 Symbols, Slots, Radio Blocks, and Frames 2254.3.5 Reference and Synchronization Signals 2264.3.6 The LTE Channel Model in the Downlink Direction 2274.3.7 Downlink Management Channels 2284.3.8 System Information Messages 2294.3.9 The LTE Channel Model in the Uplink Direction 2304.3.10 MIMO Transmission 2334.3.11 HARQ and Other Retransmission Mechanisms 2364.3.12 PDCP Compression and Ciphering 2384.3.13 Protocol Layer Overview 2394.4 TD-LTE Air Interface 2404.5 Scheduling 2424.5.1 Downlink Scheduling 2424.5.2 Uplink Scheduling 2464.6 Basic Procedures 2474.6.1 Cell Search 2474.6.2 Attach and Default Bearer Activation 2504.6.3 Handover Scenarios 2544.6.4 Default and Dedicated Bearers 2594.7 Mobility Management and Power Optimization 2604.7.1 Mobility Management in RRC Connected State 2604.7.2 Mobility Management in RRC Idle State 2634.7.3 Mobility Management and State Changes in Practice 2654.8 LTE Security Architecture 2674.9 Interconnection with UMTS and GSM 2684.9.1 Cell Reselection between LTE and GSM/UMTS 2684.9.2 RRC Connection Release with Redirect from LTE to GSM/UMTS 2704.9.3 Handover from LTE to UMTS 2714.9.4 Returning from UMTS and GPRS to LTE 2714.10 Carrier Aggregation 2724.10.1 CA Types, Bandwidth Classes, and Band Combinations 2734.10.2 CA Configuration, Activation, and Deactivation 2754.10.3 Uplink Carrier Aggregation 2784.11 Network Planning Aspects 2794.11.1 Single Frequency Network 2794.11.2 Cell-Edge Performance 2794.11.3 Self-Organizing Network Functionality 2814.11.4 Cell Site Throughput and Number of Simultaneous Users 2824.12 CS-Fallback for Voice and SMS Services with LTE 2834.12.1 SMS over SGs 2844.12.2 CS-Fallback for Voice Calls 2854.13 Network Sharing – MOCN and MORAN 2884.13.1 National Roaming 2884.13.2 MOCN (Multi-Operator Core Network) 2894.13.3 MORAN (Mobile Operator Radio Access Network) 2904.14 From Dipoles to Active Antennas and Gigabit Backhaul 2904.15 IPv6 in Mobile Networks 2924.15.1 IPv6 Prefix and Interface Identifiers 2934.15.2 IPv6 and International Roaming 2954.15.3 IPv6 and Tethering 2964.15.4 IPv6-Only Connectivity 2974.16 Network Function Virtualization 2984.16.1 Virtualization on the Desktop 2994.16.2 Running an Operating System in a Virtual Machine 2994.16.3 Running Several Virtual Machines Simultaneously 3004.16.4 Virtual Machine Snapshots 3004.16.5 Cloning a Virtual Machine 3014.16.6 Virtualization in Data Centers in the Cloud 3024.16.7 Managing Virtual Machines in the Cloud 3034.16.8 Network Function Virtualization 3034.16.9 Virtualizing Routers 3054.16.10 Software-Defined Networking 3054.17 Machine Type Communication and the Internet of Things 3064.17.1 LTE Cat-1 Devices 3074.17.2 LTE Cat-0 Devices and PSM 3074.17.3 LTE Cat-M1 Devices 3084.17.4 LTE NB1 (NB-IoT) Devices 3084.17.5 NB-IoT – Deployment Options 3094.17.6 NB-IoT – Air Interface 3094.17.7 NB-IoT – Control Channels and Scheduling 3104.17.8 NB-IoT Multicarrier Operation 3114.17.9 NB-IoT Throughput and Number of Devices per Cell 3124.17.10 NB-IoT Power Consumption Considerations 3124.17.11 NB-IoT – High Latency Communication 3134.17.12 NB-IoT – Optimizing IP-Based and Non-IP-Based Data Transmission 3144.17.13 NB-IoT Summary 316Questions 316References 3175 VoLTE, VoWifi, and Mission Critical Communication 3215.1 Overview 3215.2 The Session Initiation Protocol (SIP) 3225.3 The IP Multimedia Subsystem (IMS) and VoLTE 3265.3.1 Architecture Overview 3265.3.2 Registration 3285.3.3 VoLTE Call Establishment 3305.3.4 LTE Bearer Configurations for VoLTE 3325.3.5 Dedicated Bearer Setup with Preconditions 3345.3.6 Header Compression and DRX 3365.3.7 Speech Codec and Bandwidth Negotiation 3375.3.8 Alerting Tone, Ringback Tone, and Early Media 3405.3.9 Port Usage 3405.3.10 Message Filtering and Asserted Identities 3415.3.11 DTMF Tones 3425.3.12 SMS over IMS 3435.3.13 Call Forwarding Settings and XCAP 3445.3.14 Single Radio Voice Call Continuity 3465.3.15 Radio Domain Selection, T-ADS, and VoLTE Interworking with GSM and UMTS 3495.3.16 VoLTE Emergency Calls 3505.4 VoLTE Roaming 3525.4.1 Option 1: VoLTE Local Breakout 3535.4.2 Option 2: VoLTE S8-Home Routing 3545.5 Voice over WiFi (VoWifi) 3565.5.1 VoWifi Network Architecture 3565.5.2 VoWifi Handover 3595.5.3 Wi-Fi-Preferred vs. Cellular-Preferred 3605.5.4 SMS, MMS, and Supplementary Services over Wi-Fi 3605.5.5 VoWifi Roaming 3615.6 VoLTE Compared to Fixed-Line IMS in Practice 3625.7 Mission Critical Communication (MCC) 3635.7.1 Overview 3635.7.2 Advantages of LTE for Mission Critical Communication 3645.7.3 Challenges of Mission Critical Communication for LTE 3655.7.4 Network Operation Models 3675.7.5 Mission Critical Push To Talk (MCPTT) – Overview 3685.7.6 MCPTT Group Call Establishment 3705.7.7 MCPTT Floor Control 3715.7.8 MCPTT Group Call Types 3725.7.9 MCPTT Configuration and Provisioning 3725.7.10 eMBMS for MCPTT 3735.7.11 Priority and Quality of Service 376Questions 376References 3776 5G New Radio (NR) and the 5G Core 3796.1 Introduction and Overview 3796.1.1 Reasons for Initially Launching 5G as a Hybrid Solution 3806.1.2 Frequency Range 1 and 2 3816.1.3 Dynamic Spectrum Sharing in Low- and Mid-Bands 3816.1.4 Network Deployments and Organization of this Chapter 3826.2 5G NR Non-Standalone (NSA) Architecture 3826.2.1 Network Architecture and Interfaces 3826.2.2 3GPP 5G Deployment Options 1–7 and Dynamic Spectrum Sharing 3856.2.3 Options 3, 3A, and Option 3X 3876.2.4 Fronthaul Interface 3886.3 5G TDD Air Interface 3886.3.1 Flexible OFDMA for Downlink Transmission 3906.3.2 The 5G Resource Grid: Symbols, Slots, Resource Blocks, and Frames 3926.3.3 Synchronization and Reference Signals 3936.3.4 Massive-MIMO for Beamforming and Multi-User Data Transfer 3956.3.5 TDD Slot Formats 3986.3.6 Downlink Control Channels 4006.3.7 Uplink Channels 4016.3.8 Bandwidth Parts 4016.3.9 The Downlink Control Channel and Scheduling 4036.3.10 Downlink Data Throughput in Theory and Practice 4056.3.11 Uplink Data Throughput 4076.3.12 TDD Air Interface for mmWave Bands (FR2) 4076.4 5G FDD Air Interface 4096.4.1 Refarming and Dynamic Spectrum Sharing 4106.5 EN-DC Bearers and Scheduling 4156.5.1 Split Bearers, Flow Control 4166.5.2 Two UE Transmitter Requirement for EN-DC 4176.6 Basic Procedures and Mobility Management in Non-Standalone Mode 4186.6.1 Establishment of an LTE-Only Bearer as 5G Anchor 4196.6.2 5G NR Cell Addition in Non-Standalone Mode 4226.6.3 When to Show a 5G Indicator 4266.6.4 Handover Scenarios 4276.6.5 EN-DC Signaling Radio Bearers 4306.6.6 5G Non-Standalone and VoLTE 4306.7 Network Planning and Deployment Aspects 4316.7.1 The Range of Band n78 4316.7.2 Backhaul Considerations 4326.8 5G NR Standalone (SA) Architecture and Basic Procedures 4326.8.1 5G Core Network Functions 4326.8.2 Network Interfaces 4346.8.3 Subscriber and Device Identifiers 4356.8.4 5G Core Network Procedures Overview 4356.8.5 Connection Management 4366.8.6 Registration Management Procedure 4366.8.7 Session Management 4376.8.8 Mobility Management 4426.8.9 New Security Features 4446.8.10 The 5G Core and Different RAN Deployments 4466.8.11 5G and 4G Core Network Interworking 4466.8.12 The 5G Core Network and SMS 4516.8.13 Cloud Native 5G Core 4516.9 The 5G Air Interface in Standalone Operation 4546.9.1 RRC Inactive State 4546.9.2 System Information Messages 4556.9.3 Measurement Configuration, Events, and Handovers 4566.10 Future 5G Functionalities 4576.10.1 Voice Service in 5G 4576.10.2 Ethernet and Unstructured PDU Session Types 4596.10.3 Network Slicing 459Questions 461References 4617 Wireless Local Area Network (WLAN) 4657.1 Wireless LAN Overview 4657.2 Transmission Speeds and Standards 4657.3 WLAN Configurations: From Ad Hoc to Wireless Bridging 4687.3.1 Ad Hoc, BSS, ESS, and Wireless Bridging 4697.3.2 SSID and Frequency Selection 4727.4 Management Operations 4747.5 The MAC Layer 4797.5.1 Air Interface Access Control 4797.5.2 The MAC Header 4827.6 The Physical Layer and MAC Extensions 4837.6.1 IEEE 802.11b – 11 Mbit/s 4847.6.2 IEEE 802.11g with up to 54 Mbit/s 4867.6.3 IEEE 802.11a with up to 54 Mbit/s 4887.6.4 IEEE 802.11n with up to 600 Mbits/s 4897.6.5 IEEE 802.11ac – Wi-Fi 5 – Gigabit Wireless 4977.6.6 IEEE 802.11ax – Wi-Fi 6 – High Efficiency Extensions 5027.6.7 IEEE 802.11ad – Gigabit Wireless at 60 GHz 5067.7 Wireless LAN Security 5107.7.1 Wired Equivalent Privacy (WEP) and Early Security Measures 5107.7.2 WPA and WPA2 Personal Mode Authentication 5107.7.3 WPA and WPA2 Enterprise Mode Authentication – EAP-TLS 5127.7.4 WPA and WPA2 Enterprise Mode Authentication – EAP-TTLS 5137.7.5 WPA and WPA2 Enterprise Mode Authentication – EAP-PEAP 5157.7.6 WPA and WPA2 Enterprise Mode Authentication – EAP-SIM 5167.7.7 WPA and WPA2 Encryption 5187.7.8 Wi-Fi-Protected Setup (WPS) 5197.7.9 WPA3 Personal Mode Authentication 5207.7.10 Protected Management Frames 5227.8 IEEE 802.11e and WMM – Quality of Service 523Questions 530References 5318 Bluetooth and Bluetooth Low Energy 5338.1 Overview and Applications 5338.2 Physical Properties 5348.3 Piconets and the Master/Slave Concept 5388.4 The Bluetooth Protocol Stack 5408.4.1 The Baseband Layer 5408.4.2 The Link Controller 5468.4.3 The Link Manager 5498.4.4 The HCI Interface 5498.4.5 The L2CAP Layer 5528.4.6 The Service Discovery Protocol 5548.4.7 The RFCOMM Layer 5568.4.8 Overview of Bluetooth Connection Establishment 5578.5 Bluetooth Security 5588.5.1 Pairing up to Bluetooth 2.0 5598.5.2 Pairing with Bluetooth 2.1 and Above (Secure Simple Pairing) 5608.5.3 Authentication 5628.5.4 Encryption 5638.5.5 Authorization 5638.5.6 Security Modes 5648.6 Bluetooth Profiles 5658.6.1 Basic Profiles: GAP, SDP, and the Serial Profile 5678.6.2 Object Exchange Profiles: FTP, Object Push, and Synchronize 5688.6.3 Headset, Hands-Free, and SIM Access Profile 5708.6.4 High-Quality Audio Streaming 5748.6.5 The Human Interface Device (HID) Profile 5778.7 Bluetooth Low Energy 5778.7.1 Introduction 5778.7.2 The Lower BLE Layers 5798.7.3 BLE SMP, GAP, and Connection Establishment 5818.7.4 BLE Authentication, Security, and Privacy 5828.7.5 BLE ATT and GATT 5838.7.6 Practical Example 5858.7.7 BLE Beacons 5878.7.8 BLE and IPv6 Internet Connectivity 588Questions 589References 590Index 593