Beruflich Dokumente
Kultur Dokumente
Introduction to
CDMA2000
1x/1x-EV-DO
This documentation contains proprietary information of RADCOM Ltd. and RADCOM Equipment
Inc. Such information is hereby supplied solely for the purpose of informing explicitly and properly
authorized persons of the documentation on the operation of RADCOM equipment. Without the
express prior written permission of RADCOM Ltd. and RADCOM Equipment Inc., no part of the
contents hereof may be used for any other purpose, disclosed to persons or firms outside the recipient
company, or reproduced by any means.
The text and drawings herein are for the purpose of illustration and reference only. The specifications
on which they are based are subject to change without notice.
Further Information
For further information contact:
US Office:
Israel Office:
RADCOM Ltd.
24 Raoul Wallenberg St., Tel Aviv, 69719, Israel
Tel: 972-3-6455055, Fax: 972-3-6474681
E-mail: info@radcom.com
China Office:
RADCOM Ltd.
Handerson Center, Office 506, Tower 3,
18 Jianguomennei Avenue, Beijing 1000005, P.R. China
Tel: +86-10-65187723, Fax: +86-10-65187721
E-mail: china@radcom.com
RADCOM UK
2440 The Quadrant
Aztec West, Almondsbury
Bristol, BS32 4AQ England
Tel: +44-145-487-8827, Fax: +44-145-487-8788
E-mail: uk@radcom.com
T able of Contents
Introduction
Table of Contents
I ntroduction
Operators are adopting different migration path by regions and countries for
3G deployment, considering an All-IP network as the final migration path.
The diagram below illustrates the migration path from 2G to 2.5G though 3G
of all cellular networks
CDMA2000 Features
General Information
1. CDMA2000 1x uses the same 1.25 Mhz of CDMA IS-95. A lot of service
providers may implement the CDMA2000 1x-EV-DO on a different
1.25Mhz, because the high data rate may damage the quality of the voice.
2. Because CDMA2000 is backward compatible to IS-95 and uses the same
1.25 Mhz in the 1x, operators can migrate from CDMA to CDMA2000 in
stages. Operators can decide to implement CDMA2000 initially only in
certain cities and then later deploy in other cities.
3. CDMA2000: Increases the spectral efficiency of the air interface by:
a. Improved (faster) power control compared to CDMA in the forward link.
It extends the capacity of the air by 50%. In CDMA (IS-95), the MS
informs the BTS if frames received are Good/Error. In CDMA2000, the
MS sends power control commands 16 times faster than IS-95 in order to
power down/up the forward link. The mechanism to power up and power
down, results in power saving and in increased capacity. As a result of
the power control, CDMA2000 delivers 50% more capacity than the
IS-95.
b. Transmit diversity: each antenna can transmit/receive to up to 6
different directions. The MS chooses the strongest frequency.
c. Smart antennas: these are antennas that are capable of directing the
antenna frequency’s radiation to the required direction. For example, to
direct the antennas to a crowd center in order to support better cover
and better power centralization.
d. QPSK modulation scheme: this is the modulation method in which the
CDMA technology changes the radio wave into bits. The QPSK method
actually changes the sinus of the electromagnetic wave into bits.
e. Improved digital coding techniques.
f. The 1x/1x-EV-DO/1x-EV-DV can utilize different vocoders and more
Walsh codes (up to 128) comparing to the 64 of CDMA, allowing for
higher data rates and more voice conversions compared to CDMA. The
3x enables 256 Walsh codes. The Walsh code is the mathematical
algorithm that differentiate between calls in the CDMA network. Each
signal is encoded with a Walsh code to differentiate between different
users. In CDMA2000 in each sector there can be 3*128 Walsh codes per
carrier. In CDMAOne there can be up to 64 Walsh codes
g. In CDMA2000 a new air channel, the SCH (supplemental channel) is
introduced. Up to 2 SCH for each MS (307.2kbps*2).
4. In a CDMA2000 session there can be few connections (a radio
connection is required only when needed to transfer data to or from the
network). When users only want to browse, they may have a session open
(the connected-application session is always active).
5. For the duration of the connection, CDMA2000 gives the user a dedicated
law data rate channel (FCH), Fundamental channel - 9.6 or 14.4 – the
same as for voice), and according to the user profile and traffic needs, the
user may be given 0,1 or 2 SCH channels. The SCH (Supplemental
channel) can vary both in the duration of the assignment and in the data
rate – from 9.6 up to 307.2 kbps for each channel. On the SCH, only data
(not voice or signaling) is transferred. Signaling is transferred on the law
data rate dedicated channel.
6. The BSC is responsible for negotiating (the duration and the data rate of
SCH) and signaling with the MS. The BSC is also responsible for the
efficiency allocation and de allocation of the SCH to the different users. In
addition, the BSC is responsible for detecting the rate and duration that
needs to be sent to the MS. The MS needs to request the SCH needed to
transfer data in the reverse link. In all cases the BSC is responsible for the
resources allocation.
7. In general, the SCH is large on the forward link (download) and small on
the reverse link.
8. The SCH duration is from 20 milliseconds up to 5.12 seconds for a single
data burst. The standards allow allocating and de allocating of infinite
duration of SCH.
9. Responsibilities of the BTS:
a. Assigning the Fundamental channel (FCHs) - the number of physical
resources available.
b. The FCH forward power (the power already allocated and available).
c. The Walsh codes required and those available.
d. SDU function: The SDU function (Selection/Distribution Unit function)
includes the following functions:
• Traffic Handler: This function exchanges traffic bits with the
associated vocoder or CDMA RLP function, and is directly connected to
the A5 interface.
• Signaling Layer 2: This function performs the layer 2 functionality of
the air interface signaling protocol and is responsible for the reliable
delivery of layer 3 signaling messages between the base station and the
mobile station.
• Multiplex Sublayer: This function multiplexes and demultiplexes user
traffic and signaling traffic for the air interface.
• Power Control: This function administrates the forward and reverse
link power control in a CDMA system. This function and the channel
element provide the power control function for the CDMA operation. As
part of this function, it generates or utilizes relevant power control
information that is exchanged over the air interface or with the channel
element.
• Frame Selection/Distribution: This function is responsible for
selecting the “best” incoming air interface reverse link frame from the
channel elements involved in the soft handoff. It also distributes forward
air interface frames to all channel elements involved in a call.
• Backhaul Frame Handler: This function demultiplexes the control
information and the air interface reverse frame from the frame received
over the backhaul network. It also multiplexes the control information
and the air interface frames in the forward direction.
• Control: This function provides control functions.
10. In CDMA2000, there is no need to replace the CDMA MS in order to
function in the network; but in order to receive the services of the
CDMA2000 the MS should be replaced.
11. CDMA2000 support (GSM-MAP), which can lead to harmonization and
dual system deployment with GSM in addition to WCDMA as well.
12. WCDMA and CDMA2000 have the same characteristics (roaming support,
same data rates, wide band, etc). The main difference between the
WCDMA and CDMA2000 is that the WCDMA uses only one wide band,
while CDMA2000, apart from the wide band uses several narrow bands
(low data rate channels).
13. The backhaul from the BTSs to the BSC and from the BSC to the MSC
could be via either microwave links or fixed facilities.
14. In CDMA2000 the billing is according to the data that is transferred.
15. There is 1.25 Mhz for the forward link and 1.25 for the reverse link.
16. When Asynchronous Transfer Mode (ATM) is used to provide signaling
transport, the ATM Adaptation Layer 5 (AAL5) protocol is employed.
When ATM is used to provide user traffic (voice/data) transport, the AAL2
protocol is used. Each BS has two or more ATM virtual circuits that
connect it to other BSs (regardless of whether switched or permanent
virtual circuits are used). These virtual circuits are comprised of one or
more virtual circuits using the AAL5 protocol for signaling, and one or
more virtual circuits using AAL2 for the user traffic connections. Use of
the AAL5 Permanent Virtual Circuit (PVC)/Switched Virtual Connection
(SVC) as the link layer of IP protocol stack shall follow.
Data Rates
IS-95 A/B 115.2 Kbps 10-40 Kbps 1.25 Mhz Voice and circuit
switched data
services
1xRTT 614.4 Kbps 80-100 Kbps 1.25 Mhz Voice, circuit
data and packet
data
1x-EV-DO 2.48 Mbps 600K-1Mbps 1.25 Mhz Packet data
services
3xRTT 2 Mbps 3.75 Mhz Voice, circuit
and packet
services
The EV-DO and W-CDMA (UMTS) support: 2 Mbps for fixed environment, 384
for pedestrian and 144 kbps for vehicular.
1. The MSC-VLR and HLR (All the circuit switched Core networks) need to
software upgrades in order to support the authentication and
authorization of the packet data network. Note, that it is still the CS-CN
(Circuit Switched Core Network), which authenticates and authorizes the
wireless access of the user during packet session initiation.
The MSC-VLR/HLR are updated with the Packet data user profile
information. The information is then downloaded from the HLR to the
VLR of the associated network switch during the successful registration
process.
2. HW upgrade in the BTS – A new digital processing HW “CDMA200
Chipset” which is a Multimode Channel Element card + SW upgrade.
3. New MS with new digital processing (“CDMA2000 Chipset”) that supports
radio channels to carry voice, Circuit switched data along with the packet
data services that requires low and high data rates.
4. SW update in the BSC in order to support IP routing.
5. Apart from routing the Time division multiplexing (TDM) traffic to the
circuit switched platform, the BSC routes the packet to and from the
PDSN.
6. A new Core network for CDMA2000 – PS-CN.
PDSN
1. Establishes, maintains and terminates Point-to-Point protocol (PPP)
session with the MS.
2. Establishes, maintains and terminates the logical link to the Radio
network across the radio-packet (R-P) interface.
3. Initiates Authentication, Authorization and Accounting (AAA) for the MS
to the packet data network (Internet) via the AAA Server.
4. Receives service parameters for the MS from the AAA.
5. Routes packet data between the RAN and the Internet (like NAS in the
Internet).
6. Collects usage data that is related to the AAA Server.
7. Supports both Simple and Mobile IP.
8. For Mobile IP the FA (foreign agent) should be implemented on the PDSN
(also a HA (home agent) is needed).
9. One BSC can interconnect to a few PDSNs for load balancing.
AAA
The AAA server, also called the RADIUS server, authenticates only the user
Internet access and not a user wireless access (same entity used in the
Internet). RADIUS – Remote Access Dial-In User Service, communicates with
the PDSN via IP. Authentication associated with PPP and Mobile IP
connection.
The Network Reference Model contains the following reference points A, Ater,
Aquinter, and Aquater.
• The A reference point is implemented by A1, A2, A5.
• The Ater reference point is implemented by A3 and A7.
• The Aquinter reference point is implemented by A8 and A9.
• The Aquater reference point is implemented by A10 and A11.
A5 The A5 interface carries a full duplex stream of bytes between the MSC
and the SDU function of the BSC.
A7 The A7 interface carries signaling information between a source BS and a
target BS.
A8 The A8 interface carries user traffic between the BS and the PCF.
A9 The A9 interface carries signaling information between the BS and the
PCF.
A10 The A10 interface carries user traffic between the PCF and the PDSN.
A11 The A11 interface carries signaling information between the PCF and the
PDSN.
A8 The A8 interface carries user traffic between the Access Network (AN) and
the Packet Control Function (PCF).
A9 The A9 interface carries signaling information between the AN and the
PCF.
A10 The A10 interface carries user traffic between the PCF and the PDSN.
A11 The A11 interface carries signaling information between the PCF and the
PDSN.
A12 The A12 interface carries signaling information related to terminal
authentication between the SC/MM function in the PCF and the AN AAA
(Authentication, Authorization and Accounting entity for 1x-EV-DO).
A13 The A13 interface carries signaling information between the SC/MM
function in the source PCF and the SC/MM function in the target PCF.
A14 The A14 interface carries signaling information between the SC/MM
function in the PCF and the AN.
A15 The A15 interface carries signaling information between ANs when inter-
AN paging is used.
Ax The Ax interface carries user traffic between the SC/MM function in the
PCF and the AN.
The A1, A2, A3, A5 and A7 interfaces are based on the use of:
1. T1 digital transmission system interfaces. Each 1.544 Mbps interface
provides 24*56 Kbps or 24*64 kbps channels, which can be used for traffic
or signaling as the operator requires.
2. E1 digital transmission interfaces consisting of 30*64 kbps user channels
can also be used for traffic or signaling, as the operator requires, and as
applicable to the network. As a BS/MSC agreed option, dedicated DS0
signaling link[s] may be used instead of the T1/E1 interface.
3. T3 digital transmission interfaces supporting transmission rates of 43.232
Mbps.
4. OC3 digital transmission interfaces supporting transmission rates of
155.52 Mbps.
The A8 to A15 interfaces are based on the use of the Internet Protocol, which
can operate across various physical layer media.
The functions provided by the network elements on either side of the MSC-BS
interface define the functions that the MSC-BS interface supports. The figure
below depicts a model of the MSC-BS Interface functional planes. The four
functional planes embody all of the functions that the MSC-BS Interface
supports.
The transmission facilities management plane is the basis for the MSC-BS
interface telecommunications services. It manages the transmission means for
the communication needs of the subscribers as well as the required
information transfer between the BS and MSC. The radio resource
management plane manages stable links between the MSs and the MSC and
supports the movement of subscribers during calls (i.e., handoff control). The
mobility management plane manages subscriber location data. The call-
processing plane manages call control and telecommunications services for the
subscribers.
Packet data calls allow users to exchange data between the MS and an IP data
network. For all calls supporting packet data services, a Packet Data Serving
Node (PDSN) exists that interfaces between the transmission of the data in
the fixed network and the transmission of the data over the air interface. The
PDSN interfaces to the BS through a Packet Control Function (PCF), which
may or may not be co-located with the BS.
There are three packet data service states:
Active/Connected, Dormant, and Null/Inactive.
The mobile may cross Packet Zone boundaries while in the Dormant State.
This is referred to as Dormant Handoff. The Dormant handoff procedures
allow the A10 connections between the PCF and PDSN to be moved (or
established) for the mobile when it enters a new packet zone.
The mobile may re-enter Active state (e.g., if the user has data to send) at any
time. This transition is referred to as Re-Activation from Dormant, and is not
related to Dormant Handoff (i.e., Re-Activation from Dormant is not related to
a mobility event).
Packet data is typically transmitted over the air on dedicated traffic channels.
Mechanisms also exist for transmitting data over the common channels. Short
Data Burst (SDB) is a part of the 3G Packet Data feature that enables small
amounts of data to be transmitted over the common channels. Common
Channel Packet Data is a mode of 3G Packet Data where all data is
transmitted using Short Data Bursts. A1 and A8 connections are maintained
during the Active / Connected State and released during transition to
Dormant or Null/Inactive State. The A10 connection is maintained during the
Active/Connected and the Dormant State.
Authentication
1. The first part is the MSC-VLR with the help of the HLR to authenticate
the user (handshaking, etc).
2. The MS and the RAN as part of coding of the information in the air encrypt
the data (voice and data).
3. Above those two steps, in order to authenticate the user to the Private IP
network and to the Internet, the PDSN with the help of the AAA server
authenticates and authorizes the user through password verification and
handshaking.
4. Above those 3 steps it is possible in the data core network (none wireless)
after the PDSN (AAA) authentication to implement IPSec. It is optional to
implement the IPSec on the PDSN.
5. Once connected to the application required, there may be also the
application’s own security mechanisms (such as banking, etc.).
Mobility Management
The responsibility for keeping the MS connected while moving on the network
(between different MSCs, etc.) is divided into two different cases: While in
active session, the RAN is responsible for the Handoff (in general for the Low
data rate channel we will always have SHO (Soft hand off), and as much as
the data increases in the SCH the SHO for SCH will decrease (the SHO for
SCH is limited).
While the mobile moves between BTSs but not in a session, and than between
BSCs and MSCs and PDSNs (while idle) it is the mobile’s responsibility to
update the network that it has moved by registering to a new MSC or PDSN.
It is important that the MS updates the system in the CS in order for the
system to be able to route the circuit voice calls to the mobile.
In idle mode the MS runs the mobility management procedure, and in active
the MS assists the RAN.
• The A8/A9 interfaces supports mobility between BSCs under the same PCF.
• The A10/A11 interfaces supports mobility between PCFs under the same
PDSN.
• Mobile IP supports mobility between PDSN/FA under the same Home
Agent.
• Hard handoff and soft handoff procedures realize the mobility between
BTSs.
• The A8/A9 interfaces support mobility between BSCs under the same PCFs.
• The A10/A11 interfaces support mobility between PCFs under the same
PDSN.
• Mobile IP supports mobility between PDSN/FA under the same Home
Agent.
• Hard handoff and soft handoff procedures realize the mobility between
BTSs.
• The A8/A9/A14 interfaces support mobility between ANs under the same
PCF.
• The A10/A11/A13 interfaces support mobility between PCFs under the same
PDSN.
• Mobile IP supports mobility between PDSNs under the same Home Agent.
The next step in establishing the packet data session is to allocate resources
on the Radio – Packet (R-P) interface. Once resources have been established,
the mobile communicates with the PDSN over the allocated channels in order
to set up a Point-to-Point Protocol (PPP) connection. During this process, the
packet switched core network, specifically the PDSN, assigns an Internet
Protocol (IP) address to the mobile station.
A The PCF determines that packet data is available for delivery to the
AT.
B The PCF sends an A9-BS Service Request message to the AN in order
to request packet service, and starts timer Tbsreq9.
C The AN responds with an A9-BS Service Response. The PCF stops
timer Tbsreq9 upon receipt of the A9-BS Service Response message.
D The AN sends a Page Message to the AT, on the control channel.
Highlights
• Protocol analysis for all major CDMA2000 interfaces including A1, A3, A7,
A8, A9, A10, A11, A12, A13, A14, and A15.
• A10/A11 online/offline sessions tracing
• A10/A11 online/offline sessions abnormal tracing
• A10 Connection Setup SDB (Short Data Burst information) Air link Record
• SDB (Short Data Burst information) Air link Record
• A10 Packet Accounting Procedures
• Supports Asynchronous PPP, Mobile IP and RADIUS.
• Monitors user-plane signaling and traffic such as PPP, ICMP, TCP, UDP,
HTTP, WAP, etc.
• GRE Traffic analysis
• Session flow, session analysis and error detection of the following Internet
protocols (PDSN to Internet connection): HTTP, FTP, POP-3, SMTP, Telnet,
TCP/IP, PPP, PAP, CCP, IPCP, CHAP, L2TP, LCP, WAP, WTP, WSP.
• Provides online and offline A12 network error tracing
• Automatically discovers, displays and monitors thousands of active and
closed PCF to AN AAA sessions.
• Analyzes signaling information related to terminal authentication between
the SC/MM function in the PCF and the AN AAA (Authentication,
Authorization and Accounting entity for 1x-EV-DO).
• Analyzes the AN-level authentication of the MS/AT device by authenticating
the results of a CHAP challenge/response operation invoked by the AN.
• Analyzes RADIUS protocol procedures as it flows between the AN and the
different RADIUS servers, e.g., RADIUS Home, RADIUS Visited and
RADIUS Broker.
• Analyzes the transition of MN ID, also used on the A8/A9 and A10/A11
interfaces. The MN ID identifier permits handoffs of PDSN packet data
sessions between ANs and between 1xEV-DO and IS-2000 systems.
• Automatically discovers, displays and monitors thousands of active and
closed CDMA2000 A10/A11, A12 and PI (Internet) sessions.
• Full PCN (Packet Core Network) call tracing from a single point including
A10/A11, A12 and Internet (PI) using the Network Consultant.
CDMA2000 Network
Physical Layer
The Physical layer application offers a display of all significant counters per
technology. The user can define event thresholds and later view them in a log
screen in addition there is a status LED for each counter.
Capture
The Capture application provides full line rate capture (up to 2.5 Gbps). The
data is captured to a 256 Mbyte hardware buffer or to the Performer Server’s
hard disk. Both online and offline filters and analyses are available.
Analysis
The Analysis application provides full line rate analysis (up to 2.5 Gbps) in
addition to full line rate analysis’ filters. It also provides an extensive set of
analyses per technology as well as flexible alarms
Traffic Generation
The Traffic Generator uses RADCOM’s protocol decode database & engine to
build and simulate CDMA2000 1x/1x-EV-DO protocols. It simulates pre-
captured CDMA2000 1x/1x-EV-DO protocols.
CDMA2000 Consultants
The user can analyze the registration and validate the network functionality
opening the 1x and 1x-Ev-DO data channel between the PCF and PDSN. In
addition, the GRE details can be displayed.
The Performance and Signaling behavior of MIP and PPP can be analyzed.
The user can analyze the important application layer protocols such as HTTP,
WAP etc and view and analyze session details.
In addition, they can analyze and troubleshoot the Internet Session flow.
The CDMA2000 Network Consultant provides full PCN session level analysis
from a single point -A10/A11, A12, Internet (PI) and allows the user to analyze
the user experience when accessing the 1x/1x-EV-DO data services. In
addition it provides online PCN error tracing as well as full PCN
calls/sessions abnormal. The Networks Consultant enables correlation of
information from multi links on a specific interface. Running both in online
and offline modes and allowing full PCN call tracing from a single point, it
completes RADCOM’s range of Consultants for troubleshooting and
maintaining CDMA2000 1x/1x-EV-DO systems.
Cellular Expert
Qconsole
Remote user GUI module providing remote access from any desktop to the
QManager server, and allowing the connection of multiple users to the
QManager simultaneously (from different terminals).
QExpert
Web-based analysis and reporting module, allowing authorized users to log
into their accounts and view the level of service provided to any traffic pattern,
destination or source.
Performer Infrastructure
The CDMA2000 and the Internet Consultant run on the Cellular Performer.
The cutting-edge infrastructure of the Cellular Performer provides users with
the following features:
• Full line rate
• Multi technology
• Multi port
• Large set of protocols decode
• Synchronized solution
• GEAR, analyzer on chip
• Independent filters’ engines supporting up to 2.5 Gbps
RADCOM’s GEAR
The GEAR is RADCOM’s proprietary, full-custom ASIC chip. It supports 2.5
Gbps (STM16; OC-48) and has 3 Independent filters’ engines, one for use with
the Capture application, one for the Analysis application and a third for use
with various online applications. The Capture buffer on the GEAR itself is up
to 1 Gigabyte. The GEAR supports an extensive set of analyses per technology.
In addition, as a result of utilizing a chip it provides high performance online
applications’ including CDMA2000, UMTS & GPRS Consultants, MediaPro,
UDDs, and many others.
Summary
Israel Office:
RADCOM Ltd.
24 Raoul Wallenberg St., Tel Aviv, 69719, Israel
Tel: 972-3-6455055, Fax: 972-3-6474681
E-mail: info@radcom.com
China Office:
RADCOM Ltd.
Handerson Center, Office 506, Tower 3,
18 Jianguomennei Avenue, Beijing 1000005, P.R. China
Tel: +86-10-65187723, Fax: +86-10-65187721
E-mail: china@radcom.com
Web Site:
http://www.radcom.com
©RADCOM, 2003