LTE Quick Reference                  Home : www.sharetechnote.com

 

 

 

 

LTE-BL/CE (LTE-M1) - Fullstack Protocol Sequence

 

You may say 'LTE-BL/CE(LTE-M1) is simpler than legacy LTE'. It is true. But it is true only in terms of Hardware design perspective. In terms of protocol point of view, it is not simpler than the legacy LTE. Actually, based on my experience, it is more complicated than the legacy LTE mainly due to the nature of repeatative transmission and narrowband allocation. Also MPDCCH resource allocation parameter is not as straightforward as legacy LTE PDCCH parameter.

If you are working with protocol stack implementation and verification, you need to go through each and every steps of following sequence and you need to have all the detailed informations for each step both on UE and test equipment.

For the comparison with legacy LTE, I put the step in grey that is required in legacy LTE but not happen in BL / CE. I also put some comments in 'Memo' column for these steps.

 

NOTE : Following sequence is based on the sequence that would be seen in eNB. Of course, you should see the same sequence on UE side except that UE should have its counter part sequence to < NW >. Some people may think I am writing this table just to confuse people :), but this table is what I have been most often for protocol troubleshooting.

Step

Direction

Message

Memo

1 UE <--- SS MIB (Specification Details)  
2 UE <--- SS SIB1 (Specification Details)  
3 UE <--- SS SIB2,3 and others (Specification Details)  
4 UE ---> SS

PRACH (RACH Preamble)-Msg1

 
5

< NW >

PHY_PRACH_IND  
6

< NW >

MAC_DATA_IND  
7 UE <--- SS

RACH Response - Msg2

 
8

< NW >

MAC_DATA_REQ  
9

< NW >

PHY_PRACH_REQ  
10 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RAR in UE
11

< NW >

PHY_PRACH_IND  
12

< NW >

MAC_DATA_IND  
13

< NW >

RLC_DATA_IND  
14 UE ---> SS

RRC Connection Request - Msg3

 
15

< UE >

UE MAC start mac-ContentionResolutionTimer

3GPP 36.321 5.1.5

CR Timer value is set in SIB2

16 UE <--- SS ACK (PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

17 UE <--- SS Contention Resolution - Msg4 SS must send CR before CRtimer get expired
18

< UE >

UE MAC stop mac-ContentionResolutionTimer

 
19

< NW >

MAC_DATA_REQ  
20

< NW >

PHY_PRACH_REQ  
21 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode CR in UE
22 UE <--- SS

RRC Connection Setup

In some case, this message gets piggybacked to step 8.
23

< NW >

RLC_DATA_REQ  
24

< NW >

MAC_DATA_REQ  
25

< NW >

PHY_DATA_REQ  
26 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RRC Conn Setup
27 UE ---> SS HARQ ACK  
28 UE ---> SS Scheduling Request To send RLC ACK from UE
29 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RLC ACK from UE
30

< NW >

PHY_DATA_REQ  
31

< NW >

MAC_DATA_REQ  
32 UE ---> SS RLC ACK  
33 UE <--- SS ACK (PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

34 UE ---> SS Scheduling Request To send RRC Conn Setup Complete from UE
35 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RRC Conn Setup Complete from UE
36

< NW >

PHY_DATA_IND  
37

< NW >

MAC_DATA_IND  
38

< NW >

RLC_DATA_IND  
39

< NW >

PDCP_DATA_IND  
40 UE ---> SS

RRC Connection Setup Complete

+ Attach Requeset

+ (PDN Conn Request)

 
41 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

42 UE <--- SS RLC ACK  
43

< NW >

MAC_DATA_REQ  
44

< NW >

PHY_DATA_REQ  
45 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RLC ACK in UE
46 UE <--- SS

Authentication Request

 
47

< NW >

PDCP_DATA_REQ  
48

< NW >

RLC_DATA_REQ  
49

< NW >

MAC_DATA_REQ  
50

< NW >

PHY_DATA_REQ  
51 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode Authentication Request in UE
52 UE ---> SS HARQ ACK  
53 UE ---> SS Scheduling Request To send RLC ACK from UE
54 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RLC ACK from UE
55 UE ---> SS RLC ACK  
56 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

57

< NW >

PHY_DATA_REQ  
58

< NW >

MAC_DATA_REQ  
59 UE ---> SS Scheduling Request  
60 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

 
61

< NW >

PHY_DATA_IND  
62

< NW >

MAC_DATA_IND  
63

< NW >

RLC_DATA_IND  
64

< NW >

PDCP_DATA_IND  
65 UE ---> SS

Authentication Response

 
66 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

67 UE <--- SS RLC ACK  
68

< NW >

MAC_DATA_REQ  
69

< NW >

PHY_DATA_REQ  
70 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RLC ACK in UE
71 UE <--- SS

NAS Security Mode Command

 
72

< NW >

PDCP_DATA_REQ  
73

< NW >

RLC_DATA_REQ  
74

< NW >

MAC_DATA_REQ  
75

< NW >

PHY_DATA_REQ  
76 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode NAS Security Mode Command in UE
77 UE ---> SS HARQ ACK  
78 UE ---> SS Scheduling Request(PUCCH) To send RLC ACK from UE
79 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RLC ACK from UE
80

< NW >

PHY_DATA_IND  
81

< NW >

MAC_DATA_IND  
82 UE ---> SS RLC ACK  
83 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

84 UE ---> SS Scheduling Request(PUCCH) To Send NAS Security Mode Complete
85 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To Send NAS Security Mode Complete
86

< NW >

PHY_DATA_IND  
87

< NW >

MAC_DATA_IND  
88

< NW >

RLC_DATA_IND  
89

< NW >

PDCP_DATA_IND  
90 UE ---> SS

NAS Security Mode  Complete

 
91 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

92 UE <--- SS RLC ACK  
93

< NW >

MAC_DATA_REQ  
94

< NW >

PHY_DATA_REQ  
95 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RLC ACK in UE
96 UE <--- SS

RRC Security Mode Command

 
97

< NW >

PDCP_DATA_REQ  
98

< NW >

RLC_DATA_REQ  
99

< NW >

MAC_DATA_REQ  
100

< NW >

PHY_DATA_REQ  
101 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RRC Security Mode Command in UE
102 UE ---> SS HARQ ACK  
103 UE ---> SS Scheduling Request To send RLC ACK from UE
104 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RLC ACK from UE
105

< NW >

PHY_DATA_IND  
106

< NW >

MAC_DATA_IND  
107 UE ---> SS RLC ACK  
108 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

109 UE ---> SS Scheduling Request To send RRC Security Mode Complete from UE
110 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RRC Security Mode Complete from UE
111

< NW >

PHY_DATA_IND  
112

< NW >

MAC_DATA_IND  
113

< NW >

RLC_DATA_IND  
114

< NW >

PDCP_DATA_IND  
115 UE ---> SS

RRC Security Mode Complete

 
116 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

117 UE <--- SS RLC ACK  
118

< NW >

MAC_DATA_REQ  
119

< NW >

PHY_DATA_REQ  
120 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RLC ACK in UE
121   < Many other message can be added here depending on NW >  

122

UE <--- SS

RRC Connection Reconfiguration

+ Attach Accept

+ Activate Default EPS Bearer Context Request

 

123

< NW >

PDCP_DATA_REQ  
124

< NW >

RLC_DATA_REQ  
125

< NW >

MAC_DATA_REQ  
126

< NW >

PHY_DATA_REQ  
127 UE ---> SS HARQ ACK  
128 UE ---> SS Scheduling Request(PUCCH) To send RLC ACK from UE
129 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RLC ACK from UE
130

< NW >

PHY_DATA_IND  
131

< NW >

MAC_DATA_IND  
132 UE ---> SS RLC ACK  
133 UE ---> SS Scheduling Request(PUCCH) To send RRC Connection Reconfig Complete from UE
134 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RRC Connection Reconfig Complete from UE
135

< NW >

PHY_DATA_IND  
136

< NW >

MAC_DATA_IND  
137

< NW >

RLC_DATA_IND  
138

< NW >

PDCP_DATA_IND  
139 UE ---> SS

RRC Connection Reconfiguration Complete

+ Attach Complete

+ Activate Default EPS Bearer Context Accept

 
140 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

141 UE <--- SS RLC ACK  
142

< NW >

MAC_DATA_REQ  
143

< NW >

PHY_DATA_REQ  
144 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RLC ACK in UE
145   < IP Data Traffic if needed >  
146 UE <--- SS RRC Connection Release  
147

< NW >

PDCP_DATA_REQ  
148

< NW >

RLC_DATA_REQ  
149

< NW >

MAC_DATA_REQ  
150

< NW >

PHY_DATA_REQ  
151 UE <--- SS DCI 6-1 (6-1A or 6-1B, MPDCCH) To decode RRC Connection Release in UE
152 UE ---> SS HARQ ACK  
153 UE ---> SS Scheduling Request(PUCCH) To send RLC ACK from UE
154 UE <--- SS

UL Grant (DCI 6-0A or 6-0B, MPDCCH)

To send RLC ACK from UE
155

< NW >

PHY_DATA_IND  
156

< NW >

MAC_DATA_IND  
157 UE ---> SS RLC ACK  
158 UE <--- SS ACK(PHICH)

This does not happen since PHICH is not supported in BL/CE

See UL HARQ page for this

159 UE < Now UE should be in IDLE mode >  

 

 

(1) MIB

 

BCCH-BCH-Message

    message

        dl-Bandwidth: n100 (5)

        phich-Config

            phich-Duration: normal (0)

            phich-Resource: oneSixth (0)

        systemFrameNumber: 00 [bit length 8, 0000 0000 decimal value 0]

        schedulingInfoSIB1-BR-r13: 4 PDSCH repetitions - TBS 504 bits (10)

        spare: 00 [bit length 5, 3 LSB pad bits, 0000 0... decimal value 0]

 

HEX : A0 01 40

 

 

(2) SIB1

 

systemInformationBlockType1-BR-r13

    cellAccessRelatedInfo

        plmn-IdentityList: 1 item

            Item 0

                PLMN-IdentityInfo

                    plmn-Identity

                        mcc: 3 items

                            Item 0

                                MCC-MNC-Digit: 0

                            Item 1

                                MCC-MNC-Digit: 0

                            Item 2

                                MCC-MNC-Digit: 1

                        mnc: 2 items

                            Item 0

                                MCC-MNC-Digit: 0

                            Item 1

                                MCC-MNC-Digit: 1

                    cellReservedForOperatorUse: notReserved (1)

        trackingAreaCode: 0001

        cellIdentity: 00000010

        cellBarred: notBarred (1)

        intraFreqReselection: allowed (0)

        .... ..0. csg-Indication: False

    cellSelectionInfo

        q-RxLevMin: -140dBm (-70)

    freqBandIndicator: 2

    schedulingInfoList: 1 item

        Item 0

            SchedulingInfo

                si-Periodicity: rf8 (0)

                sib-MappingInfo: 0 items

    si-WindowLength: ms40 (6)

    systemInfoValueTag: 1

    nonCriticalExtension

        nonCriticalExtension

            nonCriticalExtension

                nonCriticalExtension

                    cellAccessRelatedInfo-v1250

                    nonCriticalExtension

                        cellSelectionInfoCE-r13

                            q-RxLevMinCE-r13: -140dBm (-70)

                        bandwidthReducedAccessRelatedInfo-r13

                            si-WindowLength-BR-r13: ms40 (1)

                            si-RepetitionPattern-r13: everyRF (0)

                            schedulingInfoList-BR-r13: 1 item

                                Item 0

                                    SchedulingInfo-BR-r13

                                        si-Narrowband-r13: 6

                                        si-TBS-r13: b504 (5)

                            fdd-DownlinkOrTddSubframeBitmapBR-r13: subframePattern40-r13 (1)

                                subframePattern40-r13: 1c1c1c1c1c

                            fdd-UplinkSubframeBitmapBR-r13: ffc0

                            startSymbolBR-r13: 2

                            si-HoppingConfigCommon-r13: off (1)

 

 

HEX :  48 40 04 03 00 01 00 00 00 18 00 10 00 60 A4 91 80 70 80 55 8E 0E 0E 0E 0E 7F EC

 

(2) SIB2 and others

 

sib2

    radioResourceConfigCommon

        rach-ConfigCommon

            preambleInfo

                numberOfRA-Preambles: n52 (12)

            powerRampingParameters

                powerRampingStep: dB2 (1)

                preambleInitialReceivedTargetPower: dBm-108 (6)

            ra-SupervisionInfo

                preambleTransMax: n7 (4)

                ra-ResponseWindowSize: sf10 (7)

                mac-ContentionResolutionTimer: sf64 (7)

            maxHARQ-Msg3Tx: 4

            preambleTransMax-CE-r13: n10 (6)

            rach-CE-LevelInfoList-r13: 1 item

                Item 0

                    RACH-CE-LevelInfo-r13

                        preambleMappingInfo-r13

                            firstPreamble-r13: 0

                            lastPreamble-r13: 10

                        ra-ResponseWindowSize-r13: sf20 (0)

                        mac-ContentionResolutionTimer-r13: sf80 (0)

                        rar-HoppingConfig-r13: off (1)

        bcch-Config

            modificationPeriodCoeff: n2 (0)

        pcch-Config

            defaultPagingCycle: rf64 (1)

            nB: oneThirtySecondT (7)

        prach-Config

            rootSequenceIndex: 123

            prach-ConfigInfo

                prach-ConfigIndex: 12

                ..0. .... highSpeedFlag: False

                zeroCorrelationZoneConfig: 0

                prach-FreqOffset: 0

        pdsch-ConfigCommon

            referenceSignalPower: 0dBm

            p-b: 2

        pusch-ConfigCommon

            pusch-ConfigBasic

                n-SB: 1

                hoppingMode: interSubFrame (0)

                pusch-HoppingOffset: 0

                .0.. .... enable64QAM: False

            ul-ReferenceSignalsPUSCH

                ..0. .... groupHoppingEnabled: False

                groupAssignmentPUSCH: 0

                0... .... sequenceHoppingEnabled: False

                cyclicShift: 0

        pucch-ConfigCommon

            deltaPUCCH-Shift: ds2 (1)

            nRB-CQI: 4

            nCS-AN: 6

            n1PUCCH-AN: 0

        soundingRS-UL-ConfigCommon: release (0)

            release: NULL

        uplinkPowerControlCommon

            p0-NominalPUSCH: -99dBm

            alpha: al09 (6)

            p0-NominalPUCCH: -96dBm

            deltaFList-PUCCH

                deltaF-PUCCH-Format1: deltaF-2 (0)

                deltaF-PUCCH-Format1b: deltaF1 (0)

                deltaF-PUCCH-Format2: deltaF-2 (0)

                deltaF-PUCCH-Format2a: deltaF-2 (0)

                deltaF-PUCCH-Format2b: deltaF-2 (0)

            deltaPreambleMsg3: -2dB (-1)

        ul-CyclicPrefixLength: len1 (0)

        bcch-Config-v1310

            modificationPeriodCoeff-v1310: n64 (0)

        pcch-Config-v1310

            paging-narrowBands-r13: 1

            mpdcch-NumRepetition-Paging-r13: r1 (0)

            nB-v1310: one64thT (0)

        freqHoppingParameters-r13

        pusch-ConfigCommon-v1310

        prach-ConfigCommon-v1310

            rsrp-ThresholdsPrachInfoList-r13: 1 item

                Item 0

                    RSRP-Range: -68dBm <= RSRP < -67dBm (73)

            mpdcch-startSF-CSS-RA-r13: fdd-r13 (0)

                fdd-r13: v1 (0)

            prach-HoppingOffset-r13: 0

            prach-ParametersListCE-r13: 1 item

                Item 0

                    PRACH-ParametersCE-r13

                        prach-ConfigIndex-r13: 12

                        prach-FreqOffset-r13: 0

                        prach-StartingSubframe-r13: sf2 (0)

                        maxNumPreambleAttemptCE-r13: n3 (0)

                        numRepetitionPerPreambleAttempt-r13: n1 (0)

                        mpdcch-NarrowbandsToMonitor-r13: 2 items

                            Item 0

                                mpdcch-NarrowbandsToMonitor-r13 item: 2

                            Item 1

                                mpdcch-NarrowbandsToMonitor-r13 item: 1

                        mpdcch-NumRepetition-RA-r13: r1 (0)

                        prach-HoppingConfig-r13: off (1)

        pucch-ConfigCommon-v1310

            n1PUCCH-AN-InfoList-r13: 1 item

                Item 0

                    N1PUCCH-AN-InfoList-r13 item: 57

            pucch-NumRepetitionCE-Msg4-Level0-r13: n1 (0)

            pucch-NumRepetitionCE-Msg4-Level1-r13: n1 (0)

    ue-TimersAndConstants

        t300: ms400 (3)

        t301: ms400 (3)

        t310: ms100 (2)

        n310: n1 (0)

        t311: ms5000 (2)

        n311: n1 (0)

        t300-v1310: ms2500 (0)

        t301-v1310: ms2500 (0)

    freqInfo

        additionalSpectrumEmission: 1

    timeAlignmentTimerCommon: infinity (7)

 

 

HEX :  00 00 6C 59 3F 60 20 9B 00 0A 02 03 C7 B3 00 01 E4 00 00 04 26 00 01 BD F0 00 01 88 77 78 00 00 C9 20 00 CC 00 00 88 07 80 39 05 B4 10 01 01 C0 01 C0

 

 

(14) RRC Connection Request

 

rrcConnectionRequest

    criticalExtensions: rrcConnectionRequest-r8 (0)

        rrcConnectionRequest-r8

            ue-Identity: randomValue (1)

                randomValue: 4dbd31f12f

            establishmentCause: mo-Signalling (3)

            spare: 00 [bit length 1, 7 LSB pad bits, 0... .... decimal value 0]

 

HEX : 54 DB D3 1F 12 F6

 

 

(22) RRC Connection Setup

 

rrcConnectionSetup-r8

    radioResourceConfigDedicated

        srb-ToAddModList: 1 item

            Item 0

                SRB-ToAddMod

                    srb-Identity: 1

                    rlc-Config: defaultValue (1)

                        defaultValue: NULL

                    logicalChannelConfig: defaultValue (1)

                        defaultValue: NULL

        mac-MainConfig: explicitValue (0)

            explicitValue

                timeAlignmentTimerDedicated: infinity (7)

        physicalConfigDedicated

            pdsch-ConfigDedicated

                p-a: dB-3 (2)

            pucch-ConfigDedicated

                ackNackRepetition: release (0)

                    release: NULL

            uplinkPowerControlDedicated

                p0-UE-PUSCH: 0dB

                deltaMCS-Enabled: en0 (0)

                .... ..1. accumulationEnabled: True

                p0-UE-PUCCH: 0dB

                pSRS-Offset: 3

                filterCoefficient: fc4 (4)

            antennaInfo: defaultValue (1)

                defaultValue: NULL

            schedulingRequestConfig: setup (1)

                setup

                    sr-PUCCH-ResourceIndex: 0

                    sr-ConfigIndex: 20

                        [Periodicity: 20]

                        [Subframe Offset: 5]

                    dsr-TransMax: n64 (4)

            epdcch-Config-r11

                config-r11: setup (1)

                    setup

                        setConfigToAddModList-r11: 1 item

                            Item 0

                                EPDCCH-SetConfig-r11

                                    setConfigId-r11: 0

                                    transmissionType-r11: distributed (1)

                                    resourceBlockAssignment-r11

                                        numberPRB-Pairs-r11: n2 (0)

                                        resourceBlockAssignment-r11: 0380

                                    dmrs-ScramblingSequenceInt-r11: 0

                                    pucch-ResourceStartOffset-r11: 0

                                    mpdcch-config-r13: setup (1)

                                        setup

                                            csi-NumRepetitionCE-r13: sf1 (0)

                                            mpdcch-pdsch-HoppingConfig-r13: off (1)

                                            mpdcch-StartSF-UESS-r13: fdd-r13 (0)

                                                fdd-r13: v1 (0)

                                            mpdcch-NumRepetition-r13: r1 (0)

                                            mpdcch-Narrowband-r13: 1

            ce-Mode-r13: setup (1)

                setup: ce-ModeA (0)

 

HEX : 60 12 9B 07 E8 68 C3 06 4C 00 0A 40 E2 41 A1 04 52 0C 07 00 00 00 14 0D 88 00 00 00 40 04 80

 

 

(40) RRC Connection Setup Complete + Attach Requeset + PDN Connection Request

 

rrcConnectionSetupComplete-r8

    selectedPLMN-Identity: 1

    registeredMME

        mmegi: 8001 [bit length 16, 1000 0000  0000 0001 decimal value 32769]

        mmec: 00 [bit length 8, 0000 0000 decimal value 0]

    dedicatedInfoNAS: 1760842a7a030741020bf600f1108001000000000105f070...

        Non-Access-Stratum (NAS)PDU

            0001 .... = Security header type: Integrity protected (1)

            .... 0111 = Protocol discriminator: EPS mobility management messages (0x7)

            Message authentication code: 0x60842a7a

            Sequence number: 3

            0000 .... = Security header type: Plain NAS message, not security protected (0)

            .... 0111 = Protocol discriminator: EPS mobility management messages (0x7)

            NAS EPS Mobility Management Message Type: Attach request (0x41)

            0... .... = Type of security context flag (TSC): Native security context (for KSIasme)

            .000 .... = NAS key set identifier:  (0)

            .... 0... = Spare bit(s): 0x00

            .... .010 = EPS attach type: Combined EPS/IMSI attach (2)

            EPS mobile identity

                Length: 11

                .... 0... = Odd/even indication: Even number of identity digits

                .... .110 = Type of identity: GUTI (6)

                Mobile Country Code (MCC): Unknown (1)

                Mobile Network Code (MNC): Unknown (01)

                MME Group ID: 32769

                MME Code: 0

                M-TMSI: 0x00000001

            UE network capability

                Length: 5

                1... .... = EEA0: Supported

                .1.. .... = 128-EEA1: Supported

                ..1. .... = 128-EEA2: Supported

                ...1 .... = 128-EEA3: Supported

                .... 0... = EEA4: Not supported

                .... .0.. = EEA5: Not supported

                .... ..0. = EEA6: Not supported

                .... ...0 = EEA7: Not supported

                0... .... = EIA0: Not supported

                .1.. .... = 128-EIA1: Supported

                ..1. .... = 128-EIA2: Supported

                ...1 .... = 128-EIA3: Supported

                .... 0... = EIA4: Not supported

                .... .0.. = EIA5: Not supported

                .... ..0. = EIA6: Not supported

                .... ...0 = EIA7: Not supported

                0... .... = UEA0: Not supported

                .0.. .... = UEA1: Not supported

                ..0. .... = UEA2: Not supported

                ...0 .... = UEA3: Not supported

                .... 0... = UEA4: Not supported

                .... .0.. = UEA5: Not supported

                .... ..0. = UEA6: Not supported

                .... ...0 = UEA7: Not supported

                0... .... = UCS2 support (UCS2): The UE has a preference for the default alphabet

                .0.. .... = UMTS integrity algorithm UIA1: Not supported

                ..0. .... = UMTS integrity algorithm UIA2: Not supported

                ...0 .... = UMTS integrity algorithm UIA3: Not supported

                .... 0... = UMTS integrity algorithm UIA4: Not supported

                .... .0.. = UMTS integrity algorithm UIA5: Not supported

                .... ..0. = UMTS integrity algorithm UIA6: Not supported

                .... ...0 = UMTS integrity algorithm UIA7: Not supported

                0... .... = ProSe direct discovery: Not supported

                .0.. .... = ProSe: Not supported

                ..0. .... = H.245 After SRVCC Handover: Not supported

                ...1 .... = Access class control for CSFB: Supported

                .... 0... = LTE Positioning Protocol: Not supported

                .... .0.. = Location services (LCS) notification mechanisms: Not supported

                .... ..0. = SRVCC from E-UTRAN to cdma2000 1xCS: Not supported

                .... ...0 = Notification procedure: Not supported

            ESM message container

                Length: 42

                ESM message container contents: 021ad011d127238080211001000010810600000000830600...

                    0000 .... = EPS bearer identity: No EPS bearer identity assigned (0)

                    .... 0010 = Protocol discriminator: EPS session management messages (0x2)

                    Procedure transaction identity: 26

                    NAS EPS session management messages: PDN connectivity request (0xd0)

                    0001 .... = PDN type: IPv4 (1)

                    .... 0001 = Request type: Initial request (1)

                    ESM information transfer flag

                        1101 .... = Element ID: 0xd-

                        .... 000. = Spare bit(s): 0x00

                        .... ...1 = EIT (ESM information transfer):

                                    Security protected ESM information transfer required

                    Protocol Configuration Options

                        Element ID: 0x27

                        Length: 35

                        [Link direction: MS to network (0)]

                        1... .... = Extension: True

                        .... .000 = Configuration Protocol: PPP for use with IP PDP type or

                                    IP PDN type (0)

                        Protocol or Container ID: Internet Protocol Control Protocol (0x8021)

                            Length: 0x10 (16)

                            PPP IP Control Protocol

                                Code: Configuration Request (1)

                                Identifier: 0 (0x00)

                                Length: 16

                                Options: (12 bytes), Primary DNS Server IP Address,

                                                     Secondary DNS Server IP Address

                                    Primary DNS Server IP Address

                                        Type: Primary DNS Server IP Address (129)

                                        Length: 6

                                        Primary DNS Address: 0.0.0.0

                                    Secondary DNS Server IP Address

                                        Type: Secondary DNS Server IP Address (131)

                                        Length: 6

                                        Secondary DNS Address: 0.0.0.0

                        Protocol or Container ID: DNS Server IPv4 Address Request (0x000d)

                            Length: 0x00 (0)

                        Protocol or Container ID: IP address allocation via NAS signalling(0x000a)

                            Length: 0x00 (0)

                        Protocol or Container ID: MS Support of Network Requested

                                    Bearer Control indicator (0x0005)

                            Length: 0x00 (0)

                        Protocol or Container ID: IPv4 Link MTU Request (0x0010)

                            Length: 0x00 (0)

                        Protocol or Container ID: MS support of Local address

                                    in TFT indicator (0x0011)

                            Length: 0x00 (0)

            Tracking area identity - Last visited registered TAI

                Element ID: 0x52

                Mobile Country Code (MCC): Unknown (1)

                Mobile Network Code (MNC): Unknown (01)

                Tracking area code(TAC): 1

            DRX Parameter

                Element ID: 0x5c

                SPLIT PG CYCLE CODE: 10 (10)

                0000 .... = CN Specific DRX cycle length coefficient: CN Specific DRX cycle

                            length coefficient / value not specified by the MS (0)

                .... 0... = SPLIT on CCCH: Split pg cycle on CCCH is not supported

                            by the mobile station

                .... .000 = Non-DRX timer: no non-DRX mode after transfer state (0)

            TMSI Status

                1001 .... = Element ID: 0x9-

                .... 000. = Spare bit(s): 0

                .... ...0 = TMSI flag: no valid TMSI available

            Mobile station classmark 2

                Element ID: 0x11

                Length: 3

                0... .... = Spare: 0

                .10. .... = Revision Level: Used by mobile stations supporting R99

                            or later versions of the protocol (2)

                ...0 .... = ES IND: Controlled Early Classmark Sending option is not implemented

                            in the MS

                .... 1... = A5/1 algorithm supported: encryption algorithm A5/1 not available

                .... .111 = RF Power Capability: RF Power capability is irrelevant

                            in this information element (7)

                0... .... = Spare: 0

                .0.. .... = PS capability (pseudo-synchronization capability):

                            PS capability not present

                ..01 .... = SS Screening Indicator: Capability of handling of ellipsis notation

                            and phase 2 error handling  (1)

                .... 1... = SM capability (MT SMS pt to pt capability): Mobile station supports

                            mobile terminated point to point SMS

                .... .0.. = VBS notification reception: no VBS capability or

                            no notifications wanted

                .... ..0. = VGCS notification reception: no VGCS capability or

                            no notifications wanted

                .... ...0 = FC Frequency Capability: The MS does not support the E-GSM or

                            R-GSM band

                1... .... = CM3: The MS supports options that are indicated in classmark 3 IE

                .0.. .... = Spare: 0

                ..1. .... = LCS VA capability (LCS value added location request notification

                            capability): LCS value added location request notification

                            capability supported

                ...0 .... = UCS2 treatment: the ME has a preference for the default alphabet

                .... 0... = SoLSA: The ME does not support SoLSA

                .... .1.. = CMSP: CM Service Prompt: Network initiated MO CM connection request

                            supported for at least one CM protocol

                .... ..1. = A5/3 algorithm supported: encryption algorithm A5/3 available

                .... ...0 = A5/2 algorithm supported: encryption algorithm A5/2 not available

            Additional update type

                1111 .... = Element ID: 0xf-

                .... 00.. = Preferred CIoT network behaviour: No additional information (0)

                .... ..0. = SAF: Keeping the NAS signalling connection is not required after the

                            completion of the tracking area updating procedure

                .... ...1 = AUTV: SMS only

            GUTI type - Old GUTI type

                1110 .... = Element ID: 0xe-

                .... 000. = Spare bit(s): 0x00

                .... ...0 = GUTI type: Native GUTI

            MS network feature support

                1100 .... = Element ID: 0xc-

                .... 000. = Spare bit(s): 0

                .... ...1 = Extended periodic timers: MS supports the extended periodic timer

                            in this domain

    nonCriticalExtension

        nonCriticalExtension

            gummei-Type-r10: native (0)

 

 

HEX : 20 30 80 01 00 59 17 60 84 2A 7A 03 07 41 02 0B F6 00 F1 10 80 01 00 00 00 00 01 05 F0 70 00 00 10 00 2A 02 1A D0 11 D1 27 23 80 80 21 10 01 00 00 10 81 06 00 00 00 00 83 06 00 00 00 00 00 0D 00 00 0A 00 00 05 00 00 10 00 00 11 00 52 00 F1 10 00 01 5C 0A 00 90 11 03 4F 18 A6 F1 E0 C1 60

 

 

(122) RRC Connection Reconfiguration + Attach Accept + Activate Default EPS Bearer Context Request

 

rrcConnectionReconfiguration-r8

    dedicatedInfoNASList: 1 item

        Item 0

            DedicatedInfoNAS: 272b3022ca02074202e0060000f1100001002d521ac10105...

                Non-Access-Stratum (NAS)PDU

                    0010 .... = Security header type: Integrity protected and ciphered (2)

                    .... 0111 = Protocol discriminator: EPS mobility management messages (0x7)

                    Message authentication code: 0x2b3022ca

                    Sequence number: 2

                    0000 .... = Security header type: Plain NAS message, not security protected (0)

                    .... 0111 = Protocol discriminator: EPS mobility management messages (0x7)

                    NAS EPS Mobility Management Message Type: Attach accept (0x42)

                    0000 .... = Spare half octet: 0

                    .... 0... = Spare bit(s): 0x00

                    .... .010 = Attach result: Combined EPS/IMSI attach (2)

                    GPRS Timer - T3412 value

                        GPRS Timer: timer is deactivated

                            111. .... = Unit: value indicates that the timer is deactivated (7)

                            ...0 0000 = Timer value: 0

                    Tracking area identity list - TAI list

                        Length: 6

                        0... .... = Spare bit(s): 0x00

                        .00. .... = Type of list: list of TACs belonging to one PLMN,

                                    with non-consecutive TAC values (0)

                        ...0 0000 = Number of elements: 0 [+1 = 1 element(s)]

                        Mobile Country Code (MCC): Unknown (1)

                        Mobile Network Code (MNC): Unknown (01)

                        Tracking area code(TAC): 1

                    ESM message container

                        Length: 45

                        ESM message container contents: 521ac101050403...

                            0101 .... = EPS bearer identity: EPS bearer identity value 5 (5)

                            .... 0010 = Protocol discriminator:

                                        EPS session management messages (0x2)

                            Procedure transaction identity: 26

                            NAS EPS session management messages: Activate default EPS bearer

                                                                 context request (0xc1)

                            EPS quality of service

                                Length: 1

                                Quality of Service Class Identifier (QCI): QCI 5 (5)

                            Access Point Name

                                Length: 4

                                APN: APN

                            PDN address

                                Length: 5

                                0000 0... = Spare bit(s): 0x00

                                PDN type: IPv4 (1)

                                PDN IPv4: 192.168.1.1

                            Protocol Configuration Options

                                Element ID: 0x27

                                Length: 27

                                [Link direction: Network to MS (1)]

                                1... .... = Extension: True

                                .... .000 = Configuration Protocol: PPP for use with IP PDP type

                                            or IP PDN type (0)

                                Protocol or Container ID: Internet Protocol Control Protocol

                                                          (0x8021)

                                    Length: 0x10 (16)

                                    PPP IP Control Protocol

                                        Code: Configuration Nak (3)

                                        Identifier: 0 (0x00)

                                        Length: 16

                                        Options: (12 bytes), Primary DNS Server IP Address,

                                                             Secondary DNS Server IP Address

                                            Primary DNS Server IP Address

                                                Type: Primary DNS Server IP Address (129)

                                                Length: 6

                                                Primary DNS Address: 100.168.1.101

                                            Secondary DNS Server IP Address

                                                Type: Secondary DNS Server IP Address (131)

                                                Length: 6

                                                Secondary DNS Address: 100.168.1.101

                                Protocol or Container ID: DNS Server IPv4 Address (0x000d)

                                    Length: 0x04 (4)

                                    IPv4: 192.168.1.2

                    EPS mobile identity - GUTI

                        Element ID: 0x50

                        Length: 11

                        .... 0... = Odd/even indication: Even number of identity digits

                        .... .110 = Type of identity: GUTI (6)

                        Mobile Country Code (MCC): Unknown (1)

                        Mobile Network Code (MNC): Unknown (01)

                        MME Group ID: 32769

                        MME Code: 0

                        M-TMSI: 0x00000001

                    GPRS Timer - T3402 value

                        Element ID: 0x17

                        GPRS Timer: timer is deactivated

                            111. .... = Unit: value indicates that the timer is deactivated (7)

                            ...0 0000 = Timer value: 0

                    GPRS Timer - T3423 value

                        Element ID: 0x59

                        GPRS Timer: timer is deactivated

                            111. .... = Unit: value indicates that the timer is deactivated (7)

                            ...0 0000 = Timer value: 0

                    EPS network feature support

                        Element ID: 0x64

                        Length: 1

                        0... .... = Control plane CIoT EPS optimization: Not supported

                        .0.. .... = EMM-REGISTERED w/o PDN connectivity: Not supported

                        ..0. .... = Support of EXTENDED SERVICE REQUEST for packet services:

                                    Not supported

                        ...0 0... = CS-LCS: no information about support of location services

                                            via CS domain is available (0)

                        .... .0.. = Location services via EPC: Not supported

                        .... ..1. = Emergency bearer services in S1 mode: Supported

                        .... ...1 = IMS voice over PS session in S1 mode: Supported

                    Additional update result

                        1111 .... = Element ID: 0xf-

                        .... 00.. = Spare bit(s): 0x00

                        .... ..10 = AURV: SMS only (2)

    radioResourceConfigDedicated

        srb-ToAddModList: 1 item

            Item 0

                SRB-ToAddMod

                    srb-Identity: 2

                    rlc-Config: defaultValue (1)

                        defaultValue: NULL

                    logicalChannelConfig: defaultValue (1)

                        defaultValue: NULL

        drb-ToAddModList: 1 item

            Item 0

                DRB-ToAddMod

                    eps-BearerIdentity: 5

                    drb-Identity: 1

                    pdcp-Config

                        discardTimer: infinity (7)

                        rlc-AM

                            .... .1.. statusReportRequired: True

                        headerCompression: notUsed (0)

                            notUsed: NULL

                    rlc-Config: am (0)

                        am

                            ul-AM-RLC

                                t-PollRetransmit: ms200 (39)

                                pollPDU: p4 (0)

                                pollByte: kB125 (4)

                                maxRetxThreshold: t32 (7)

                            dl-AM-RLC

                                t-Reordering: ms200 (30)

                                t-StatusProhibit: ms200 (40)

                    logicalChannelIdentity: 3

                    logicalChannelConfig

                        ul-SpecificParameters

                            priority: 6

                            prioritisedBitRate: infinity (7)

                            bucketSizeDuration: ms100 (1)

                            logicalChannelGroup: 1

        physicalConfigDedicated

 

HEX : 22 06 02 A9 39 59 81 16 50 10 3A 10 17 00 30 00 07 88 80 00 08 01 6A 90 D6 08 08 28 20 1A 0A 82 70 28 0E 05 40 08 09 38 DC 04 01 08 80 18 00 00 84 08 33 25 40 0B 2C 18 33 25 40 0B 28 00 68 26 05 40 08 12 80 5F B0 07 88 84 00 08 00 00 00 00 08 BF 02 CF 03 20 08 1F 93 13 E0 FA 81 BC 27 09 FD 40 6A E5 00 00