Femto解決方案簡介

1、 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential1Cisco Confidential1Cisco Confidential1 2010 Cisco and/or its affiliates. All rights reserved.Femto 解決方案簡介 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential2Cisco Femtocell Architecture Cisco 網絡接口與信令流程系統(tǒng)配

2、置流程思科Femto 系統(tǒng)上海、蘇州測試及現(xiàn)狀 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential3Cisco Femtocell Architecture 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential4 網絡偵聽，無線自檢自優(yōu)化 企業(yè)級: 3 載波支持強大業(yè)務能力 家庭級: QoS 支持 安全接入控制 QoS 支持，保障用戶通話質量 3GPP R8/9 支持 TR-069 支持，減少運維成本 同時支持

3、WLAN TR-069支持，F(xiàn)AP即插即用 實時故障跟蹤，便捷確定故障點 安全網關、網關及FAP統(tǒng)一的性能及告警管理 業(yè)務、服務、支撐系統(tǒng)全面整合，端到端服務操作 易擴展，靈活實現(xiàn)10K1M的部署 模塊化設計 多操作系統(tǒng)支持 管理界面友好 多數(shù)據庫支持 持續(xù)演進融合AAA 豐富靈活的組網方式 高性能的軟硬件架構 安全網關（SeGW）可與HNB-GW合設或分設 統(tǒng)一用戶準入控制 3GPP R8/9 支持 同一平臺整合更多的網絡功能 軟件升級平滑演進到4G 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidentia

4、l5TD Femto端到端組網方案分為三個部分：Femto接入網、SeGW和FEMTO網關、Femto HLR、HMS驗證及網管系統(tǒng)。HNB安裝、部署在用戶家中，通過寬帶接入到公網（CMNET）和SeGW間建立IPsec Tunnel以保障業(yè)務安全性及用戶隱私。在IPsec Tunnel建立流程中， Femto HLR對HNB進行EAP-AKA/SIM鑒權認證，認證成功后，HNB與SeGW間的IPsec Tunnel才能建立并為HNB分配IuH接口地址，確保HNB和FEMTO網關信令與業(yè)務的正常轉發(fā)。FEMTO網關通過IuCS、IuPS接口接入現(xiàn)網核心網，接口協(xié)議棧與RNC完全一致，核心網側無

5、需改動。在啟用虛擬網關后，F(xiàn)emto網關在邏輯上分割成多個獨立的信令實體，每個實體與不同地市的MSC/SGSN建立信令連接。HMS基于TR-069協(xié)議對HNB進行自動配置，在HNB加電后，HMS會將所有用戶開戶數(shù)據下發(fā)給HNB，也可對其進行批量軟件升級等。 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential6星運網絡 ST平臺標準的 HNB-GW安全網關（SeGW）可與HNB-GW合設卓越性能高容量的 Iu 會話高容量的 IPsec IKEv2 隧道下一代平臺每會話的低能量消耗整合更多的網絡功能每會話

6、的高吞吐量基于各種業(yè)務的in-line service網絡接口10/100/1000 Ethernet10Gbps EthernetOC-3/12 ATM24.5 in. (62.23 cm.)17.5 in. (44.45 cm)24.0 in. (60.96 cm) 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential7IPSec家庭級 AP 特性業(yè)務能力同一載波支持R4和TD-HSDPA時隙 混合配置R4業(yè)務能力語音電話：AMR12.2Kbps，4 用戶視頻電話：CS UL64Kbps/DL64K

7、bpsR4數(shù)據業(yè)務：PS UL384Kbps/DL384KbpsCS/PS并發(fā)：VC+PS / VT+PS支持緊急呼叫HSDPA業(yè)務能力TD-HSDPA：1.6Mbps下載速率功率：標稱13dBm，可配置4個10/100M以太網口（1個WAN口，3個LAN口）支持SIM/USIM卡支持升級擴展能力軟件升級支持 6 用戶InternetMSCSGSNGGSNHNBGW/SeGWInternetHNBGxIuCSGnIuPSWmGy 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential8IPSec高效高性能

8、的網管系統(tǒng)業(yè)務能力整合現(xiàn)有的運營/業(yè)務系統(tǒng)設備自動預配置實時的設備管理和診斷故障和性能管理服務管理支持多廠商設備升級擴展能力對其他IP終端設備進行管理靈活進行容量擴充結合思科UCS平臺InternetMSCSGSNGGSNHNBGW/SeGWInternetHNBGxIuCSGnIuPSWmGy數(shù)量數(shù)量5k5k25k25k100k100k500k500kUCS TypeUCS C200UCS C200UCS C210UCS C210Processor per Server1124RAM per server (GB)661212Hard Disk per Server (GB)40080024

9、003200Server nb (no HA)1112Server # (with HA)2224 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential9IPSec支持多業(yè)務的AAA認證系統(tǒng)業(yè)務能力Femto基站鑒權閉合用戶群用戶鑒權鑒權用戶信息管理日志管理統(tǒng)計分析持續(xù)演進支持WLAN、固網ADSL、固網LAN接入認證，最終演進成為融合AAA結合思科UCS平臺InternetMSCSGSNGGSNHNBGW/SeGWInternetHNBGxIuCSGnIuPSWmGy支持用戶數(shù)（支持用戶數(shù)（APAP）

10、250k250k500k500k500k500k處理能力（請求處理能力（請求/ /秒）秒）80080080080010001000UCS TypeUCS C200UCS C200UCS C210Processor per Server222RAM per server (GB)81632Hard Disk per Server (GB)4008001000G 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential10網絡接口與信令流程 2010 Cisco and/or its affiliates. A

11、ll rights reserved.Cisco Confidential11UMTS HNBHNB-GW信令流程UTRAN - IPMSC/VLR SGSN 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential12系統(tǒng)安全(含鑒權)解決流程 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential13UEHNBUuIuhL1MACRLCRRCMMCC/SS/SMSRRCRLCMACL1SCTPRemote IPIP

12、Sec ESPTransport IPAccess LayersGeneric IP NetworkHNB-GW / SeGWAccess LayersTransport IPSCTPRemote IPRANAPSignalingTransportLayers(TS 25.412)SignalingTransportLayers(TS 25.412)RANAPMMCC/SS/SMSCNIu-CSTransport IPAccess LayersRANAPRUARANAPRUAIPSec ESP 2010 Cisco and/or its affiliates. All rights reser

13、ved.Cisco Confidential14UEHNBUuIuhL1MACRLCCS User DataRLCMACL1RTPUDPRemote IPIPSec ESPTransport IPAccess LayersGeneric IP NetworkHNB-GW/SeGwAccess LayersTransport IPRemote IPIPSec ESPTransport Network ControlAnd Data Transport(TS 25.414)Iu-UPCS User DataMSCIu-CSTransport IPAccess LayersUDPCS User Da

14、ta InterworkingRTPIu-UPTransport Network ControlAnd Data Transport(TS 25.414)Iu-UP 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential15UEHNBUuIuhL1MACRLCRRCGMM/SS/SMSRRCRLCMACL1SCTPRemote IPIPSec ESPTransport IPAccess LayersGeneric IP NetworkAccess LayersTransport IPRemote IPRA

15、NAPSignalingTransportLayers(TS 25.412)SignalingTransportLayers(TS 25.412)RANAPGMM/SS/SMSSGSNIu-PSTransport IPAccess LayersIPSec ESPHNB-GW/SeGWRANAPRUARANAPRUASCTP 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential16UEHNBUuIuHL1MACRLCPDCPPS User DataPDCPRLCMACL1UDPRemote IPIPSec

16、 ESPTransport IPAccess LayersGeneric IP NetworkAccess LayersTransport IPRemote IPGTP-UDataTransportLowerLayers(TS 25.414)GTP-UGGSNSGSNIu-PSTransport IPAccess LayersIPSec ESPIPDataTransportLowerLayers(TS 25.414)UDPIPHNB-GW/SeGW 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential1

17、7Femto網關通過在內存創(chuàng)建UE IMSI 與Femto AP的關聯(lián)列表，當網關從CN處收到Paging信令請求時，網關不會向與之相連的所有AP轉發(fā)，而是通過解析NAS層消息得到被叫UE的IMSI，然后在列表中查詢與被叫IMSI對應的Femto AP，將尋呼發(fā)送到指定AP，有效的減少了系統(tǒng)資源的消耗。UE IMSI 與Femto AP的關聯(lián)在網關發(fā)送給UE Register Accept后在內存建立。Paging 信令流程參見3GPP TS25.211 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidenti

18、al18 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential19HNB發(fā)起注冊請求后，由AAA服務器返回White-list來控制用戶接入。AAA 可以根據用戶Profile決定HNB為Open模式或Close模式。在Open mode下，所有的UE均可以注冊在該HNB下，Close mode模式下，只有White-list下列出的UE可以通過該HNB接入。 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential

19、20Femto 系統(tǒng)配置流程 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential21BroadbandInternetBOSSMobileNetwork1: 在BOSS中創(chuàng)建一個新的用戶/Create a Femto new acount2: 通過北向接口自動將用戶資料通過AAA發(fā)送至HMS，包括如用戶信息、服務信息,等。/AAA sends account information to HMS3: 用戶開啟HNB,連接SecGW/User power on AP6: HMS識別出HNB并與用戶信息綁

20、定，確認用戶位置，然后可以進行設備的設置。/Location verification, AP setup9: HNB 激活, 告知HMS/ HNB sends notification to HMS for its activationHMSAAAHNBGW/SecGWHNB DB5: 建立IPSec隧道/IPSec Tunnel setup4: AP I認證/EAP-SIM/EAP-AKA authentication8: HNBGW拿到AP的接入準則/AP whitelist download7: Iuh 登記/Iuh registration新建用戶新建用戶/Adding a new AP 2010 Cisco and/or its affiliates. All rights reserved.Cisco Confidential22BroadbandInternetBOSSMobileNetwork4: 建立Iu-CS/PS 鏈接5: 建立Iuh鏈接2:Optional 接入控制1。UE登記.HMSAAAHNBGW/SecGW技術熱線技術熱線6: UE 完成登記3: HNBGW 根據根據 UE IMSI作作 接入控制, HNB DBUE接入接入/UE registration 2010 Cisco