Serving Gateway Overview


Serving Gateway Overview
 
 
The ASR 5000 core platform provides wireless carriers with a flexible solution that functions as a Serving Gateway (S-GW) in Long Term Evolution-System Architecture Evolution (LTE-SAE) wireless data networks.
This overview provides general information about the S-GW including:
 
 
eHRPD Network Summary
In a High Rate Packet Data (HRPD) network, mobility is performed using client-based mobile IPv6 or Client Mobile IPv6 (CMIPv6). This involves the mobile node with an IPv6 stack maintaining a binding between its home address and its care-of address. The mobile node must also send mobility management signaling messages to a home agent.
The primary difference in an evolved HRPD (eHRPD) network is the use of network mobility (via proxy) allowing the network to perform mobility management, instead of the mobile node. This form of mobility is known as Proxy Mobile IPv6 (PMIPv6).
One of the eHRPD network’s functions is to provide interworking of the mobile node with the 3GPP Evolved Packet Core (EPC). The EPC is a high-bandwidth, low-latency packet network also know as System Architecture Evolution (SAE), supporting the Long Term Evolution Radio Access Network (LTE RAN). The following figure shows the relationship of the eHRPD network with the EPC.
 
eHRPD Network
 
eHRPD Network Components
The eHRPD network is comprised of the following components:
 
Evolved Access Network (eAN)
The eAN is a logical entity in the radio access network used for radio communications with an access terminal (mobile device). The eAN is equivalent to a base station in 1x systems. The eAN supports operations for EPS – eHRPD RAN in addition to legacy access network capabilities.
 
Evolved Packet Control Function (ePCF)
The ePCF is an entity in the radio access network that manages the relay of packets between the eAN and the HSGW. The ePCF supports operations for the EPS – eHRPD RAN in addition to legacy packet control functions.
The ePCF supports the following:
 
 
HRPD Serving Gateway (HSGW)
The HSGW is the entity that terminates the HRPD access network interface from the eAN/PCF. The HSGW functionality provides interworking of the AT with the 3GPP EPS architecture and protocols specified in 23.402 (mobility, policy control (PCC), and roaming). The HSGW supports efficient (seamless) inter-technology mobility between LTE and HRPD with the following requirements:
 
 
SAE Network Summary
The System Architecture Evolution was developed to provide a migration path for 3GPP systems and introduce higher data rates and lower latency for a variety of radio access technologies. SAE defines the packet network supporting the high-bandwidth radio network as the Evolved Packet Core (EPC). The EPC provides mobility between 3GPP (GSM, UMTS, and LTE) and non-3GPP radio access technologies, including CDMA, WiMAX, WiFi, High Rate Packet Data (HRPD), evolved HRPD, and ETSI defined TISPAN networks.
The following figure shows the interworking of the EPC with the different radio access technologies.
 
EPC Interworking with Radio Access Technologies
 
E-UTRAN EPC Network Components
The E-UTRAN EPC network is comprised of the following components:
 
eNodeB
The eNodeB is the LTE base station and is one of two nodes in the SAE Architecture user plane (the other is the S-GW). The eNodeB communicates with other eNodeBs via the X2 interface. The eNodeB communicates with the EPC via the S1 interface. The user plane interface is the S1-U connection to S-GW. The signaling plane interface is the S1-MME connection to MME.
Basic functions supported include:
 
 
Mobility Management Entity (MME)
The MME is the key control-node for the LTE access-network. The MME provides the following basic functions:
 
 
Serving Gateway (S-GW)
For each UE associated with the EPS, there is a single S-GW at any given time providing the following basic functions:
 
 
PDN Gateway (P-GW)
For each UE associated with the EPS, there is at least one P-GW providing access to the requested PDN. If a UE is accessing multiple PDNs, there may be more than one P-GW for that UE. The P-GW provides the following basic functions:
 
 
Product Description
The Serving Gateway routes and forwards data packets from the UE and acts as the mobility anchor during inter-eNodeB handovers. Signals controlling the data traffic are received on the S-GW from the MME which determines the S-GW that will best serve the UE for the session. Every UE accessing the EPC is associated with a single S-GW.
 
S-GW in the Basic E-UTRAN/EPC Network Topology
 
S-GW in the Basic E-UTRAN/EPC Network Topology
The S-GW is also involved in mobility by forwarding down link data during a handover from the E-UTRAN to the eHRPD network. An interface from the eAN/ePCF to an MME provides signaling that creates a GRE tunnel between the S-GW and the eHRPD Serving Gateway.
 
S-GW in the Basic E-UTRAN/EPC and eHRPD Network Topology
 
S-GW in the Basic E-UTRAN/EPC and eHRPD Network Topology
The functions of the S-GW include:
 
 
Product Specifications
The following information is located in this section:
 
 
Licenses
The S-GW is a licensed product. A session use license key must be acquired and installed to use the S-GW service.
The following licenses are available for this product:
 
 
Hardware Requirements
Information in this section describes the hardware required to enable S-GW services.
 
Platforms
The S-GW service operates on the ASR 5000 Series platform.
 
Components
The following application and line cards are required to support S-GW functionality on an ASR 5000 platform:
 
System Management Cards (SMCs): Provides full system control and management of all cards within the ASR 5000 platform. Up to two SMC can be installed; one active, one redundant.
Packet Services Cards (PSCs): Within the ASR 5000 platform, PSCs provide high-speed, multi-threaded PDP context processing capabilities for 4G S-GW services. Up to 14 PSCs can be installed, allowing for multiple active and/or redundant cards.
Switch Processor Input/Outputs (SPIOs): Installed in the upper-rear chassis slots directly behind the SMCs, SPIOs provide connectivity for local and remote management, central office (CO) alarms. Up to two SPIOs can be installed; one active, one redundant.
Line Cards: Installed directly behind PSCs, these cards provide the physical interfaces to elements in the E-UTRAN EPC data network. Up to 26 line cards can be installed for a fully loaded system with 13 active PSCs, 13 in the upper-rear slots and 13 in the lower-rear slots for redundancy. Redundant PSCs do not require line cards. Ethernet 10/100, Ethernet 1000 or 10 Gigabit Ethernet line cards are available for IP connections to other network elements.
Redundancy Crossbar Cards (RCCs): Installed in the lower-rear chassis slots directly behind the SPCs/SMCs, RCCs utilize 5 Gbps serial links to ensure connectivity between Ethernet Ethernet 1000 line cards and every PSC in the system for redundancy. Two RCCs can be installed to provide redundancy for all line cards and PSCs.
note_smallImportant: Additional information pertaining to each of the application and line cards required to support LTE-SAE services is located in the Hardware Platform Overview chapter of the Cisco ASR 5000 Series Product Overview Guide.
 
Operating System Requirements
The S-GW is available for all Cisco ASR 5000 platforms running StarOS Release 9.0 or later.
 
Network Deployment(s)
This section describes the supported interfaces and the deployment scenarios of a Serving Gateway.
 
Serving Gateway in the E-UTRAN/EPC Network
The following figure displays a simplified network view of the S-GW and how it interconnects with other 3GPP Evolved-UTRAN/Evolved Packet Core network devices.
 
S-GW in the E-UTRAN/EPC Network
 
Supported Logical Network Interfaces (Reference Points)
The following figure displays the specific network interface between a Serving Gateway and other E-UTRAN network devices.
 
Supported S-GW Interfaces in the E-UTRAN/EPC Network
The S-GW provides the following logical network interfaces in support of the E-UTRAN/EPC network:
 
S1-U Interface
This reference point provides bearer channel tunneling between the eNodeB and the S-GW. It also supports eNodeB path switching during handovers.
Supported protocols:
 
 
 
S4 Interface
This reference point provides tunneling and management between the S-GW and an SGSN.
Supported protocols:
 
 
 
S5/S8 Interface
This reference point provides tunneling (bearer channel) and management (signaling channel) between the S-GW and the P-GW. The S8 interface is used for roaming scenarios. The S5 interface is used for non-roaming.
Supported protocols:
 
 
 
S11 Interface
This reference point provides GTP-C control signal tunneling between the MME and the S-GW.
Supported protocols:
 
 
 
S12 Interface
This reference point provides GTP-U bearer/user direct tunneling between the S-GW and a UTRAN Radio Network Controller (RNC). This interface provides support for inter-RAT handovers between the 3G RAN and EPC allowing a direct tunnel to be initiated between the RNC and S-GW, thus bypassing the R8 SGSN and reducing latency.
Supported protocols:
 
 
 
Gxc Interface
This signaling interface supports the transfer of policy control and charging rules information (QoS) between the Bearer Binding and Event Reporting Function (BBERF) on the S-GW and a Policy and Charging Rules Function (PCRF) server.
Supported protocols:
 
 
 
Diameter Rf Interface
The Rf interface is used for offline (post-paid) charging between the Charging Trigger Function (CTF, S-GW) and the Charging Data Function (CDF). It follows the Diameter base protocol state machine for accounting (RFC 3588) and includes support for IMS specific AVPs (3GPP TS 32.299)
Supported protocols:
 
 
 
Features and Functionality - Base Software
This section describes the features and functions supported by default in the base software for the S-GW service and do not require any additional licenses to implement the functionality.
note_smallImportant: To configure the basic service and functionality on the system for the S-GW service, refer to the configuration examples provided in the Serving Gateway Administration Guide.
The following features are supported and brief descriptions are provided in this section:
 
 
ANSI T1.276 Compliance
ANSI T1.276 specifies security measures for Network Elements (NE). In particular it specifies guidelines for password strength, storage, and maintenance security measures.
ANSI T1.276 specifies several measures for password security. These measures include:
 
These measures are applicable to the ASR 5000 Platform and the Web Element Manager since both require password authentication. A subset of these guidelines where applicable to each platform will be implemented. A known subset of guidelines, such as certificate authentication, are not applicable to either product. Furthermore, the platforms support a variety of authentication methods such as RADIUS and SSH which are dependent on external elements. ANSI T1.276 compliance in such cases will be the domain of the external element. ANSI T1.276 guidelines will only be implemented for locally configured operators.
 
Bulk Statistics Support
The system's support for bulk statistics allows operators to choose to view not only statistics that are of importance to them, but also to configure the format in which it is presented. This simplifies the post-processing of statistical data since it can be formatted to be parsed by external, back-end processors.
When used in conjunction with the Web Element Manager, the data can be parsed, archived, and graphed.
The system can be configured to collect bulk statistics (performance data) and send them to a collection server (called a receiver). Bulk statistics are statistics that are collected in a group. The individual statistics are grouped by schema. Following is a partial list of supported schemas:
 
System: Provides system-level statistics
Card: Provides card-level statistics
Port: Provides port-level statistics
MAG: Provides MAG service statistics
S-GW: Provides S-GW node-level service statistics
IP Pool: Provides IP pool statistics
APN: Provides Access Point Name statistics
The system supports the configuration of up to four sets (primary/secondary) of receivers. Each set can be configured with to collect specific sets of statistics from the various schemas. Statistics can be pulled manually from the system or sent at configured intervals. The bulk statistics are stored on the receiver(s) in files.
The format of the bulk statistic data files can be configured by the user. Users can specify the format of the file name, file headers, and/or footers to include information such as the date, system host name, system uptime, the IP address of the system generating the statistics (available for only for headers and footers), and/or the time that the file was generated.
The Cisco Web Element Manager is capable of further processing the statistics data through XML parsing, archiving, and graphing.
The Bulk Statistics Server component of the Web Element Manager parses collected statistics and stores the information in its PostgreSQL database. It can also generate XML output and can send it to a Northbound NMS or an alternate bulk statistics server for further processing.
Additionally,the Bulk Statistics server can archive files to an alternative directory on the server. The directory can be on a local file system or on an NFS-mounted file system on the Web Element Manager server.
note_smallImportant: For more information on bulk statistic configuration, refer to the Configuring and Maintaining Bulk Statistics chapter in the System Administration Guide.
 
Circuit Switched Fall Back (CSFB) Support
Circuit Switched Fall Back (CSFB) enables the UE to camp on an EUTRAN cell and originate or terminate voice calls through a forced switchover to the circuit switched (CS) domain or other CS-domain services (for example, Location Services (LCS) or supplementary services). Additionally, SMS delivery via the CS core network is realized without CSFB. Since LTE EPC networks were not meant to directly anchor CS connections, when any CS voice services are initiated, any PS based data activities on the EUTRAN network will be temporarily suspended (either the data transfer is suspended or the packet switched connection is handed over to the 2G/3G network).
CSFB provides an interim solution for enabling telephony and SMS services for LTE operators that do not plan to deploy IMS packet switched services at initial service launch.
The S-GW supports CSFB messaging over the S11 interface over GTP-C. Supported messages are:
The S-GW forwards Suspend Notification messages towards the P-GW to suspend downlink data for non-GBR traffic; the P-GW then drops all downlink packets. Later, when the UE finishes with CS services and moves back to E-UTRAN, the MME sends a Resume Notification message to the S-GW which forwards the message to the P-GW. The downlink data traffic then resumes.
 
Location Reporting
Location reporting can be used to support a variety of applications including emergency calls, lawful intercept, and charging. This feature reports both user location information (ULI) and user CSG information (UC)I.
ULI data reported in GTPv2 messages includes:
TAI-ID: Tracking Area Identity
MCC: MNC: Mobile Country Code, Mobile Network Code
TAC: Tracking Area Code
UCI data reported in GTPv2 messages includes:
MCC: MNC: Mobile Country Code, Mobile Network Code
CSG-ID: Closed Subscriber Group Identifier
Access Mode: CSG access mode received from the sourc eNodeB or RNC
The S-GW stores the ULI and UCI, and also reports the information to the accounting framework. This may lead to generation of Gz and Rf Interim records. The S-GW also forwards the received ULI and UCI to the P-GW. If the S-GW receives the UE time zone IE from the MME, it forwards this IE towards the P-GW across the S5/S8 interface.
 
Congestion Control
The congestion control feature allows you to set policies and thresholds and specify how the system reacts when faced with a heavy load condition.
Congestion control monitors the system for conditions that could potentially degrade performance when the system is under heavy load. Typically, these conditions are temporary (for example, high CPU or memory utilization) and are quickly resolved. However, continuous or large numbers of these conditions within a specific time interval may have an impact the system’s ability to service subscriber sessions. Congestion control helps identify such conditions and invokes policies for addressing the situation.
Congestion control operation is based on configuring the following:
 
Congestion Condition Thresholds: Thresholds dictate the conditions for which congestion control is enabled and establish limits for defining the state of the system (congested or clear). These thresholds function in a way similar to operational thresholds that are configured for the system as described in the Thresholding Configuration Guide. The primary difference is that when congestion thresholds are reached, a service congestion policy and an SNMP trap, starCongestion, are generated.
A threshold tolerance dictates the percentage under the configured threshold that must be reached in order for the condition to be cleared. An SNMP trap, starCongestionClear, is then triggered.
Port Utilization Thresholds: If you set a port utilization threshold, when the average utilization of all ports in the system reaches the specified threshold, congestion control is enabled.
Port-specific Thresholds: If you set port-specific thresholds, when any individual port-specific threshold is reached, congestion control is enabled system-wide.
Service Congestion Policies: Congestion policies are configurable for each service. These policies dictate how services respond when the system detects that a congestion condition threshold has been crossed.
note_smallImportant: For more information on congestion control, refer to the Congestion Control appendix in the System Administration Guide.
 
IP Access Control Lists
IP access control lists allow you to set up rules that control the flow of packets into and out of the system based on a variety of IP packet parameters.
IP access lists, or Access Control Lists (ACLs) as they are commonly referred to, control the flow of packets into and out of the system. They are configured on a per-context basis and consist of “rules” (ACL rules) or filters that control the action taken on packets that match the filter criteria. Once configured, an ACL can be applied to any of the following:
 
note_smallImportant: The S-GW supports interface-based ACLs only. For more information on IP access control lists, refer to the IP Access Control Lists appendix in the System Administration Guide.
 
IPv6 Capabilities
IPv6 enables increased address efficiency and relieves pressures caused by rapidly approaching IPv4 address exhaustion problem.
The S-GW platform offers the following IPv6 capabilities:
IPv6 Connections to Attached Elements
IPv6 transport and interfaces are supported on all of the following connections:
 
Routing and Miscellaneous Features
 
Management System Overview
The system's management capabilities are designed around the Telecommunications Management Network (TMN) model for management - focusing on providing superior quality Network Element (NE) and element management system (Web Element Manager) functions. The system provides element management applications that can easily be integrated, using standards-based protocols (CORBA and SNMPv1, v2), into higher-level management systems - giving wireless operators the ability to integrate the system into their overall network, service, and business management systems. In addition, all management is performed out-of-band for security and to maintain system performance.
Cisco's O+M module offers comprehensive management capabilities to the operators and enables them to operate the system more efficiently. There are multiple ways to manage the system either locally or remotely using its out-of-band management interfaces.
These include:
 
The following figure demonstrates these various element management options and how they can be utilized within the wireless carrier network.
 
Element Management Methods
note_smallImportant: P-GW management functionality is enabled by default for console-based access. For GUI-based management support, refer to the Web Element Manager section in this chapter.
note_smallImportant: For more information on command line interface based management, refer to the Command Line Interface Reference and P-GW Administration Guide.
 
Multiple PDN Support
Enables an APN-based user experience that enables separate connections to be allocated for different services including IMS, Internet, walled garden services, or offdeck content services.
The Mobile Access Gateway (MAG) function on the S-GW can maintain multiple PDN or APN connections for the same user session. The MAG runs a single node level Proxy Mobile IPv6 (PMIP) tunnel for all user sessions toward the Local Mobility Anchor (LMA) function of the P-GW.
When a user wants to establish multiple PDN connections, the MAG brings up the multiple PDN connections over the same PMIPv6 session to one or more P-GW LMAs. The P-GW in turn allocates separate IP addresses (Home Network Prefixes) for each PDN connection and each one can run one or multiple EPC default and dedicated bearers. To request the various PDN connections, the MAG includes a common MN-ID and separate Home Network Prefixes, APNs and a Handover Indication Value equal to one in the PMIPv6 Binding Updates.
 
Online/Offline Charging
The Cisco EPC platforms support offline charging interactions with external OCS and CGF/CDF servers. To provide subscriber level accounting, the Cisco EPC platform supports integrated Charging Transfer Function (CTF) and Charging Data Function (CDF) / Charging Gateway Function (CGF). Each gateway uses Charging-IDs to distinguish between default and dedicated bearers within subscriber sessions.
The ASR 5000 platform offers a local directory to enable temporary file storage and buffer charging records in persistent memory located on a pair of dual redundant RAID hard disks. Each drive includes 147GB of storage and up to 100GB of capacity is dedicated to storing charging records. For increased efficiency it also possible to enable file compression using protocols such as GZIP.
The offline charging implementation offers built-in heart beat monitoring of adjacent CGFs. If the Cisco P-GW has not heard from the neighboring CGF within the configurable polling interval, it will automatically buffer the charging records on the local drives until the CGF reactivates itself and is able to begin pulling the cached charging records.
 
Online: Gy Refedrence Interface
The P-GW supports a Policy Charging Enforcement Function (PCEF) to enable Flow Based Bearer Charging (FBC) via the Gy reference interface to adjunct Online Charging System (OCS) servers. The Gy interface provides a standardized Diameter interface for real-time content-based charging of data services. It is based on the 3GPP standards and relies on quota allocation. The Gy interface provides an online charging interface that works with the ECS Deep Packet Inspection feature. With Gy, customer traffic can be gated and billed. Both time- and volume-based charging models are supported.
 
Offline: Ga/Gz Reference Interfaces
The Cisco P-GW supports 3GPP Release 8 compliant offline charging as defined in TS 32.251,TS 32.297 and 32.298. Whereas the S-GW generates SGW-CDRs to record subscriber level access to PLMN resources, the P-GW creates PGW-CDRs to record user access to external networks. Additionally when Gn / Gp interworking with SGSNs is enabled, the GGSN service on the P-GW records G-CDRs to record user access to external networks.
To provide subscriber level accounting, the Cisco S-GW supports integrated Charging Transfer Function (CTF) and Charging Data Function (CDF). Each gateway uses Charging-IDs to distinguish between default and dedicated bearers within subscriber sessions.
The Ga/Gz reference interface between the CDF and CGF is used to transfer charging records via the GTPP protocol. In a standards based implementation, the CGF consolidates the charging records and transfers them via an FTP or SFTP connection over the Bm reference interface to a back-end billing mediation server. The Cisco EPC gateways also offer the ability to transfer charging records between the CDF and CGF serve via FTP or SFTP. CDR records include information such as Record Type, Served IMSI, ChargingID, APN Name, TimeStamp, Call Duration, Served MSISDN, PLMN-ID, etc.
The Offline Charging implementation offers built-in heart beat monitoring of adjacent CGFs. If the Cisco P-GW has not heard from the neighboring CGF within the configurable polling interval, it automatically buffers the charging records on the local drives until the CGF reactivates itself and is able to begin pulling the cached charging records.
 
Offline: Rf Reference Interface:
Cisco EPC platforms also support the Rf reference interface to enable direct transfer of charging files from the CTF function of the S-GW to external CDF or CGF servers. This interface uses Diameter Accounting Requests (Start, Stop, Interim, and Event) to transfer charging records to the CDF/CGF. Each gateway relies on triggering conditions for reporting chargeable events to the CDF/CGF. Typically as EPS bearers are activated, modified or deleted, charging records are generated. The EPC platforms include information such as Subscription-ID (IMSI), Charging-ID (EPS bearer identifier) and separate volume counts for the uplink and downlink traffic.
 
Operator Policy Support
The operator policy provides mechanisms to fine tune the behavior of subsets of subscribers above and beyond the behaviors described in the user profile. It also can be used to control the behavior of visiting subscribers in roaming scenarios, enforcing roaming agreements and providing a measure of local protection against foreign subscribers.
An operator policy associates APNs, APN profiles, an APN remap table, and a call-control profile to ranges of IMSIs. These profiles and tables are created and defined within their own configuration modes to generate sets of rules and instructions that can be reused and assigned to multiple policies. In this manner, an operator policy manages the application of rules governing the services, facilities, and privileges available to subscribers. These policies can override standard behaviors and provide mechanisms for an operator to get around the limitations of other infrastructure elements, such as DNS servers and HSSs.
The operator policy configuration to be applied to a subscriber is selected on the basis of the selection criteria in the subscriber mapping at attach time. A maximum of 1,024 operator policies can be configured. If a UE was associated with a specific operator policy and that policy is deleted, the next time the UE attempts to access the policy, it will attempt to find another policy with which to be associated.
A default operator policy can be configured and applied to all subscribers that do not match any of the per-PLMN or IMSI range policies.
The S-GW uses operator policy to set the Accounting Mode - GTPP (default), RADIUS/Diameter or none. However, the accounting mode configured for the call-control profile will override this setting.
Changes to the operator policy take effect when the subscriber re-attaches and subsequent EPS Bearer activations.
 
QoS Bearer Management
Provides a foundation for contributing towards improved Quality of User Experience (QoE) by enabling deterministic end-to-end forwarding and scheduling treatments for different services or classes of applications pursuant to their requirements for committed bandwidth resources, jitter and delay. In this way, each application receives the service treatment that users expect.
An EPS bearer is a logical aggregate of one or moreService Data Flows (SDFs), running between a UE and a P-GW in case of GTP-based S5/S8, and between a UE and HSGW in case of PMIP-based S2a connection. An EPS bearer is the level of granularity for bearer level QoS control in the EPC/E-UTRAN. The Cisco P-GW maintains one or more Traffic Flow Templates (TFTs) in the downlink direction for mapping inbound Service Data Flows (SDFs) to EPS bearers. The P-GW maps the traffic based on the downlink TFT to the S5/S8 bearer. The Cisco P-GW offers all of the following bearer-level aggregate constructs:
QoS Class Identifier (QCI): An operator provisioned value that controls bearer level packet forwarding treatments (for example, scheduling weights, admission thresholds, queue management thresholds, link layer protocol configuration, etc). Cisco EPC gateways also support the ability to map the QCI values to DiffServ codepoints in the outer GTP tunnel header of the S5/S8 connection. Additionally, the platform also provides configurable parameters to copy the DSCP marking from the encapsulated payload to the outer GTP tunnel header.
Guaranteed Bit Rate (GBR): A GBR bearer is associated with a dedicated EPS bearer and provides a guaranteed minimum transmission rate in order to offer constant bit rate services for applications such as interactive voice that require deterministic low delay service treatment.
Maximum Bit Rate (MBR): The MBR attribute provides a configurable burst rate that limits the bit rate that can be expected to be provided by a GBR bearer (e.g. excess traffic may get discarded by a rate shaping function). The MBR may be greater than or equal to the GBR for a given dedicated EPS bearer.
Aggregate Maximum Bit Rate (AMBR): AMBR denotes a bit rate of traffic for a group of bearers destined for a particular PDN. The Aggregate Maximum Bit Rate is typically assigned to a group of Best Effort service data flows over the Default EPS bearer. That is, each of those EPS bearers could potentially utilize the entire AMBR, e.g. when the other EPS bearers do not carry any traffic. The AMBR limits the aggregate bit rate that can be expected to be provided by the EPS bearers sharing the AMBR (e.g. excess traffic may get discarded by a rate shaping function). AMBR applies to all Non-GBR bearers belonging to the same PDN connection. GBR bearers are outside the scope of AMBR.
Policing and Shaping: The Cisco P-GW offers a variety of traffic conditioning and bandwidth management capabilities. These tools enable usage controls to be applied on a per-subscriber, per-EPS bearer or per-PDN/APN basis. It is also possible to apply bandwidth controls on a per-APN AMBR capacity. These applications provide the ability to inspect and maintain state for user sessions or Service Data Flows (SDF's) within them using shallow L3/L4 analysis or high touch deep packet inspection at L7. Metering of out-of-profile flows or sessions can result in packet discards or reducing the DSCP marking to Best Effort priority. When traffic shaping is enabled the P-GW enqueues the non-conforming session to the provisioned memory limit for the user session. When the allocated memory is exhausted, the inbound/outbound traffic for the user can be transmitted or policed in accordance with operator provisioned policy.
 
Subscriber Level Trace
Provides a 3GPP standards-based session level trace function for call debugging and testing new functions and access terminals in an LTE environment.
As a complement to Cisco's protocol monitoring function, the S-GW supports 3GPP standards based session level trace capabilities to monitor all call control events on the respective monitored interfaces including S1-U, S11, S5/S8, and Gxc. The trace can be initiated using multiple methods:
 
Note: Once the trace is provisioned it can be provisioned through the access cloud via various signaling interfaces.
The session level trace function consists of trace activation followed by triggers. The EPC network element buffers the trace activation instructions for the provisioned subscriber in memory using camp-on monitoring. Trace files for active calls are buffered as XML files using non-volatile memory on the local dual redundant hard drives on the ASR 5000 platform. The Trace Depth defines the granularity of data to be traced. Six levels are defined including Maximum, Minimum and Medium with ability to configure additional levels based on vendor extensions.
All call control activity for active and recorded sessions is sent to an off-line Trace Collection Entity (TCE) using a standards-based XML format over an FTP or secure FTP (SFTP) connection. In the current release the IPv4 interfaces are used to provide connectivity to the TCE. Trace activation is based on IMSI or IMEI.
Once a subscriber level trace request is activated it can be propagated via the S5/S8 signaling to provision the corresponding trace for the same subscriber call on the P-GW. The trace configuration will only be propagated if the P-GW is specified in the list of configured Network Element types received by the S-GW. Trace configuration can be specified or transferred in any of the following message types:
As subscriber level trace is a CPU intensive activity the maximum number of concurrently monitored trace sessions per Cisco P-GW or S-GW is 32. Use in a production network should be restricted to minimize the impact on existing services.
 
Support Interfaces (Reference Points)
S1-U (E-UTRAN EPC)
In an E-UTRAN network S1-U is the per-bearer user plane tunneling reference interface between the S-GW and eNodeB. The S-GW provides the local mobility anchor point for inter-eNodeB hand-overs. It provides inter-eNodeB path switching during hand-overs when the X2 handover interface between base stations cannot be used. The S1-U interface uses GPRS tunneling protocol for user plane (GTP-Uv1). GTP encapsulates all end user IP packets and it relies on UDP/IP transport. The S1-U interface also supports IPSec IKEv2.
In order to support S1-U hand-overs the source eNodeB initiates the hand-over by sending the hand-over required message over the S1-MME interface to the MME. The MME then determines if the S-GW needs to be relocated. The eNodeB decides which EPS bearers are subject to forwarding to the target base station. In the S1-U hand-over, the hand-off occurs indirectly from the source eNodeB to the target via the source and target S-GWs.
S11 (E-UTRAN EPC)
S11 is the reference interface that provides the control plane protocol (GTP-Cv2) between the MME and S-GW. As with all GTP-based interfaces S11 relies on UDP/IP transport. A GTP tunnel is identified in each node with a Tunnel Endpoint ID (TEID), IP address and UDP port number. The TEID values are exchanged between the tunnel endpoints using GTP-C. There is one GTP-C tunnel between the MME and S-GW for each mobile terminal. The GTP protocol provides the following functions:
 
Bearer management function: This functionality is responsible for bearer management; setting up, modifying and releasing EPS bearers, which are triggered by the MME. The release of EPS bearers may be triggered by the P-GW or HSS as well. The messages include Create Session request, Create Bearer request, Create bearer response etc. Additionally GTP tunnel management messages may be sent for any of the following reasons:
Path management function: This functionality is responsible for managing the path between the tunnel endpoints. It includes messages like ECHO request, ECHO response and version not supported indication.
Mobility management functions: This functionality consists of messages that are exchanged between GTP end points to manage UE mobility. Messages such as Forward Relocation request/response are sent between end points. These messages are not sent on the S11 interface.
S12 (E-UTRAN EPC)
S12 is a standards based reference interface defined in 3GPP TS 23.401. It was designed for enabling inter-RAT handovers between EPC and UMTS access networks using direct tunnel procedures between the S-GW and an RNC in the 3G RAN. The S12 reference interface is loosely based on the standard Gn interface between gateway support nodes and as such it uses GTPv1-U tunneling. Conceptually similar to the direct tunneling procedures in 3G networks, the S12 optimizes the bearer plane by introducing single tunnels between the S-GW and RNC, bypassing the R8 SGSN and thus increasing scalability and reducing latency.
S5/S8 GTP (E-UTRAN EPC)
In accordance with 3GPP TS 23.401 the Cisco S-GW platform supports GTPv2-C and GTPv1-U call control and user plane tunnelling. A GTP tunnel is identified in each node with a Tunnel Endpoint ID (TEID), an IP address and a UDP port number. The S-GW and P-GW nodes provision separate GTP tunnels for each attached subscriber and for the individual PDN connections initiated by the UE. The StarOS distributed software architecture enables each function to run as independent stand-alone services on separate chassis or as simultaneous combination services running on the same platform.
The S5 reference interface provides user plane tunnelling and tunnel management between an S-GW and P-GW located within the same administrative domain. It is used for S-GW relocation due to UE mobility and if the S-GW needs to connect to a non-collocated P-GW for the required PDN connectivity.
The S8 reference interface is an inter-PLMN reference point providing user and control plane between the S-GW in the VPLMN and the P-GW in the HPLMN. It is based on the Gp reference point as defined between SGSN and GGSN. S8a is the inter PLMN variant of S5.
S4 (E-UTRAN EPC)
An SGSN can be upgraded to support 3GPP R8 S4-SGSN functions designed specifically to interconnect GERAN/UTRAN access network to the EPC nodes. The S-GW includes the new S4 interface based on GTPv2-u protocol. The S4-SGSN facilitates soft hand-offs with the EPC network by providing control and mobility support between the inter-3GPP anchor function of the S-GW. The S4 reference interface provides user plane tunneling between the S-GW and 3GPP R8 SGSN in the event that direct tunneling is not used.
Using this facility, the S-GW becomes the common anchor point for all 3GPP types of access (2G, 3G, LTE), which simplifies the mobility and control of the traffic in roaming scenarios.
Rf (Diameter)
The Diameter Rf interface supports offline charging (3GPP 32.240) for network services that are paid for periodically. For example, a user may have a subscription for voice calls that is paid monthly. The Rf protocol allows an IMS Charging Trigger Function (CTF) to issue offline charging events to a Charging Data Function (CDF). The charging events can either be one-time events or may be session-based.
The S-GW supports the enabling of this Diameter interface via operator policy. Options for accounting mode include: GTPP (default), RADIUS / Diameter or None.
 
Threshold Crossing Alerts (TCA) Support
Thresholding on the system is used to monitor the system for conditions that could potentially cause errors or outage. Typically, these conditions are temporary (i.e high CPU utilization, or packet collisions on a network) and are quickly resolved. However, continuous or large numbers of these error conditions within a specific time interval may be indicative of larger, more severe issues. The purpose of thresholding is to help identify potentially severe conditions so that immediate action can be taken to minimize and/or avoid system downtime.
The system supports Threshold Crossing Alerts for certain key resources such as CPU, memory, IP pool addresses, etc. With this capability, the operator can configure threshold on these resources whereby, should the resource depletion cross the configured threshold, a SNMP Trap would be sent.
The following thresholding models are supported by the system:
 
Alert: A value is monitored and an alert condition occurs when the value reaches or exceeds the configured high threshold within the specified polling interval. The alert is generated then generated and/or sent at the end of the polling interval.
Alarm: Both high and low threshold are defined for a value. An alarm condition occurs when the value reaches or exceeds the configured high threshold within the specified polling interval. The alert is generated then generated and/or sent at the end of the polling interval.
Thresholding reports conditions using one of the following mechanisms:
 
SNMP traps: SNMP traps have been created that indicate the condition (high threshold crossing and clear) of each of the monitored values.
Generation of specific traps can be enabled or disabled on the chassis. Ensuring that only important faults get displayed. SNMP traps are supported in both Alert and Alarm modes.
Logs: The system provides a facility called threshold for which active and event logs can be generated. As with other system facilities, logs are generated Log messages pertaining to the condition of a monitored value are generated with a severity level of WARNING.
Logs are supported in both the Alert and the Alarm models.
Alarm System: High threshold alarms generated within the specified polling interval are considered outstanding until a the condition no longer exists or a condition clear alarm is generated. Outstanding alarms are reported to the system's alarm subsystem and are viewable through the Alarm Management menu in the Web Element Manager.
The Alarm System is used only in conjunction with the Alarm model.
note_smallImportant: For more information on threshold crossing alert configuration, refer to the Thresholding Configuration Guide.
 
Features and Functionality - External Application Support
This section describes the features and functions of external applications supported on the S-GW. These services require additional licenses to implement the functionality.
 
 
Web Element Manager
The Web Element Manager (WEM) provides a graphical user interface (GUI) for performing fault, configuration, accounting, performance, and security (FCAPS) management of the ASR 5000 platform.
The Web Element Manager is a Common Object Request Broker Architecture (CORBA)-based application that provides complete fault, configuration, accounting, performance, and security (FCAPS) management capability for the system.
For maximum flexibility and scalability, the Web Element Manager application implements a client-server architecture. This architecture allows remote clients with Java-enabled web browsers to manage one or more systems via the server component which implements the CORBA interfaces.
The following figure demonstrates various interfaces between the Cisco Web Element Manager and other network components.
 
Web Element Manager Network Interfaces
note_smallImportant: For more information on WEM support, refer to the WEM Installation and Administration Guide.
 
Features and Functionality - Optional Enhanced Feature Software
This section describes the optional enhanced features and functions for the S-GW service.
Each of the following features require the purchase of an additional license to implement the functionality with the S-GW service.
This section describes following features:
 
 
Direct Tunnel
In accordance with standards, one tunnel functionality enables the SGSN to establish a direct tunnel at the user plane level - a GTP-U tunnel, directly between the RAN and the S-GW.
 
GTP-U with Direct Tunnel
In effect, a direct tunnel reduces data plane latency as the tunnel functionality acts to remove the SGSN from the data plane and limit the SGSN to the control plane for processing. This improves the user experience (for example, expedites web page delivery, reduces round trip delay for conversational services). Additionally, direct tunnel functionality implements the standard SGSN optimization to improve the usage of user plane resources (and hardware) by removing the requirement from the SGSN to handle the user plane processing.
Typically, the SGSN establishes a direct tunnel at PDP context activation using an Update PDP Context Request towards the S-GW. This means a significant increase in control plane load on both the SGSN and S-GW components of the packet core. Hence, deployment requires highly scalable S-GWs since the volume and frequency of Update PDP Context messages to the S-GW will increase substantially. The ASR 5000 platform capabilities ensure control plane capacity will not be a limiting factor with direct tunnel deployment.
For more information on Direct Tunnel configuration, refer to the Direct Tunnel Configuration appendix in this guide.
 
Inter-Chassis Session Recovery
The ASR 5000 platform provide industry leading carrier class redundancy. The systems protects against all single points of failure (hardware and software) and attempts to recover to an operational state when multiple simultaneous failures occur.
The system provides several levels of system redundancy:
 
Even though Cisco provides excellent intra-chassis redundancy with these two schemes, certain catastrophic failures which can cause total chassis outages, such as IP routing failures, line-cuts, loss of power, or physical destruction of the chassis, cannot be protected by this scheme. In such cases, the MME Inter-Chassis Session Recovery (ICSR) feature provides geographic redundancy between sites. This has the benefit of not only providing enhanced subscriber experience even during catastrophic outages, but can also protect other systems such as the RAN from subscriber re-activation storms.
ICSR allows for continuous call processing without interrupting subscriber services. This is accomplished through the use of redundant chassis. The chassis are configured as primary and backup with one being active and one in recovery mode. A checkpoint duration timer is used to control when subscriber data is sent from the active chassis to the inactive chassis. If the active chassis handling the call traffic goes out of service, the inactive chassis transitions to the active state and continues processing the call traffic without interrupting the subscriber session. The chassis determines which is active through a propriety TCP-based connection called a redundancy link. This link is used to exchange Hello messages between the primary and backup chassis and must be maintained for proper system operation.
Interchassis Communication
Chassis configured to support ICSR communicate using periodic Hello messages. These messages are sent by each chassis to notify the peer of its current state. The Hello message contains information about the chassis such as its configuration and priority. A dead interval is used to set a time limit for a Hello message to be received from the chassis' peer. If the standby chassis does not receive a Hello message from the active chassis within the dead interval, the standby chassis transitions to the active state. In situations where the redundancy link goes out of service, a priority scheme is used to determine which chassis processes the session. The following priority scheme is used:
 
Checkpoint Messages
Checkpoint messages are sent from the active chassis to the inactive chassis. Checkpoint messages are sent at specific intervals and contain all the information needed to recreate the sessions on the standby chassis, if that chassis were to become active. Once a session exceeds the checkpoint duration, checkpoint data is collected on the session. The checkpoint parameter determines the amount of time a session must be active before it is included in the checkpoint message.
note_smallImportant: For more information on inter-chassis session recovery support, refer to the Interchassis Session Recovery appendix in System Administration Guide.
 
IP Security (IPSec) Encryption
Enables network domain security for all IP packet switched LTE-EPC networks in order to provide confidentiality, integrity, authentication, and anti-replay protection. These capabilities are insured through use of cryptographic techniques.
The Cisco S-GW supports IKEv1 and IPSec encryption using IPv4 addressing. IPSec enables the following two use cases:
 
note_smallImportant: You must purchase an IPSec license to enable IPSec. For more information on IPSec support, refer to the IP Security appendix in this guide.
 
Lawful Intercept
The Cisco Lawful Intercept feature is supported on S-GW. Lawful Intercept is a licensed enabled, standards-based feature that provides telecommunications service providers with a mechanism to assist law enforcement agencies in monitoring suspicious individuals for potential illegal activity. For additional information and documentation on the Lawful Intercept feature, contact your local Cisco sales representative.
 
Layer 2 Traffic Management (VLANs)
Virtual LANs (VLANs) provide greater flexibility in the configuration and use of contexts and services.
VLANs are configured as tags on a per-port basis and allow more complex configurations to be implemented. The VLAN tag allows a single physical port to be bound to multiple logical interfaces that can be configured in different contexts. Therefore, each Ethernet port can be viewed as containing many logical ports when VLAN tags are employed.
note_smallImportant: For more information on VLAN support, refer to the VLANs appendix in the System Administration Guide.
 
Session Recovery Support
Provides seamless failover and reconstruction of subscriber session information in the event of a hardware or software fault within the system preventing a fully connected user session from being disconnected.
In the telecommunications industry, over 90 percent of all equipment failures are software-related. With robust hardware failover and redundancy protection, any card-level hardware failures on the system can quickly be corrected. However, software failures can occur for numerous reasons, many times without prior indication. StarOS has the ability to support stateful intra-chassis session recovery (ICSR) for S-GW sessions.
When session recovery occurs, the system reconstructs the following subscriber information:
Session recovery is also useful for in-service software patch upgrade activities. If session recovery is enabled during the software patch upgrade, it helps to preserve existing sessions on the active packet services card during the upgrade process.
note_smallImportant: For more information on session recovery support, refer to the Session Recovery appendix in the System Administration Guide.
 
Always-On Licensing
Traditionally, transactional models have been based on registered subscriber sessions. In an "always-on" deployment model, however, the bulk of user traffic is registered all of the time. Most of these registered subscriber sessions are idle a majority of the time. Therefore, Always-On Licensing charges only for connected-active subscriber sessions.
A connected-active subscriber session would be in "ECMConnected state," as specified in 3GPP TS 23.401, with a data packetsent/received within the last one minute (on average).This transactional model allows providers to better manage and achievemore predictable spending on their capacity as a function of the Total Cost of Ownership (TCO).
 
How the Serving Gateway Works
This section provides information on the function of the S-GW in an EPC E-UTRAN network and presents call procedure flows for different stages of session setup and disconnect.
The S-GW supports the following network flows:
 
 
GTP Serving Gateway Call/Session Procedures in an LTE-SAE Network
The following topics and procedure flows are included:
 
 
Subscriber-initiated Attach (initial)
This section describes the procedure of an initial attach to the EPC network by a subscriber.
 
Subscriber-initiated Attach (initial) Call Flow
 
Subscriber-initiated Attach (initial) Call Flow Description
 
Subscriber-initiated Detach
This section describes the procedure of detachment from the EPC network by a subscriber.
 
Subscriber-initiated Detach Call Flow
 
Subscriber-initiated Detach Call Flow Description
 
Supported Standards
The S-GW service complies with the following standards.
 
 
3GPP References
 
 
3GPP2 References
 
 
IETF References
 
 
Object Management Group (OMG) Standards
 
 

Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883