Content for  TS 23.502  Word version:  18.5.0

UE to (R)AN: The NAS message container shall be included if the UE is sending a Service Request message as an Initial NAS message and the UE needs to send non-cleartext IEs, see clause 4.4.6 of TS 24.501. The Multi-USIM UE in CM-CONNECTED state may include the Release Request indication and optionally Paging Restriction Information in the Service Request message over 3GPP access, if the UE intends to leave CM-CONNECTED state. The Multi-USIM UE in CM-IDLE state may include the Release Request indication and not include Paging Restriction Information in the Service Request message over 3GPP access, if the UE intends to delete the Paging Restriction Information. If the Multi-USIM UE in CM-IDLE state decides not to accept the paging, it may send a Service Request message including a Reject Paging Indication and optionally Paging Restriction Information, unless it is not able to send this message e.g. due to UE implementation constraints. The List Of PDU Sessions To Be Activated is provided by UE when the UE wants to re-activate the PDU Session(s). The List Of Allowed PDU Sessions is provided by the UE when the Service Request is a response of a Paging or a NAS Notification for a PDU Session associated with non-3GPP access and identifies the PDU Sessions that can be transferred to 3GPP access. In the case of NG-RAN:

• The AN parameters include 5G-S-TMSI, Selected PLMN ID (or PLMN ID and NID, see clause 5.30 of TS 23.501), Establishment cause and may also include NSSAI information. The Establishment cause provides the reason for requesting the establishment of an RRC connection. Whether and how the UE includes the NSSAI information as part of the AN parameters is dependent on the value of the Access Stratum Connection Establishment NSSAI Inclusion Mode parameter, as specified in clause 5.15.9 of TS 23.501.
• The UE sends Service Request message towards the AMF encapsulated in an RRC message to the NG-RAN. The RRC message(s) that can be used to carry the 5G-S-TMSI and this NAS message are described in TS 38.331 and TS 36.331.

If the Service Request is triggered by the UE for user data, the UE identifies, using the List Of PDU Sessions To Be Activated, the PDU Session(s) for which the UP connections are to be activated in Service Request message. When the UE includes the List Of PDU Sessions To Be Activated, the UE shall indicate PDU Sessions only associated with the access the Service Request is related to. If the Service Request is triggered by the UE for signalling only, the UE doesn't identify any List Of PDU Sessions To Be Activated. If this procedure is triggered for paging response and the UE has at the same time some user data to be transferred, the UE identifies the PDU Session(s) whose UP connections are to be activated in Service Request message, by the List Of PDU Sessions To Be Activated. Otherwise the UE does not identify any PDU Session(s) in the Service Request message for paging response. As defined in TS 24.501 the UE shall include always-on PDU Sessions which are accepted by the network in the List Of PDU Sessions To Be Activated even if there are no pending uplink data for those PDU Sessions or when the Service Request is triggered for signalling only or when the Service Request is triggered for paging response. If the Service Request over 3GPP access is triggered in response to the paging or NAS Notification indicating non-3GPP access, the Service Request message shall identify the list of PDU Sessions associated with the non-3GPP access that can be re-activated over 3GPP access in the List Of Allowed PDU Sessions, as described in clause 4.2.3.3 (step 6) of this specification and in clause 5.6.8 of TS 23.501. When the UE over 3GPP access is in NB-N1 mode and the resulting number of PDU Sessions with user plane resources activated for the UE does not exceed the maximum number of supported user plane resources (0, 1 or 2), based on whether the UE supports UP data transfer and the UE's 5GMM Core Network Capability as described in clause 5.31.19 of TS 23.501, the AMF shall notify the SMF that reactivation of the user-plane resources for the corresponding PDU session(s) associated with non-3GPP access can be performed as defined in TS 24.501. If the Service Request is triggered to report PS Data Off status change and the UE is in Non-Allowed Area, the UE shall send Service Request message with an indication that the message is exempted from restriction (e.g. Non-Allowed Area). In this case, if the UE is in Non-Allowed Area, the UE shall not include the List Of PDU Sessions To Be Activated and as a result the always-on PDU Session is not re-activated during the Service Request procedure. The PDU Session status indicates the PDU Sessions available in the UE. The UE shall not trigger a Service Request procedure for a PDU Session corresponding to a LADN when the UE is outside the area of availability of the LADN. For UE in CM-CONNECTED state, only the List Of PDU Sessions To Be Activated and List Of Allowed PDU Sessions need to be included in the Service Request. The UE shall not trigger a Service Request procedure for a PDU Session associated to an S-NSSAI if the S-NSSAI is not valid as per the S-NSSAI location availability information.

(R)AN to AMF: N2 Message (N2 parameters, Service Request). Details of this step are described in TS 38.413. If the AMF can't handle the Service Request it will reject it. When NG-RAN is used, the N2 parameters include the 5G-S-TMSI, Selected PLMN ID (or PLMN ID and NID, see clause 5.30 of TS 23.501), Location information and Establishment cause, UE Context Request. If the UE is in CM-IDLE state, the NG-RAN obtains the 5G-S-TMSI in RRC procedure. NG-RAN selects the AMF according to 5G-S-TMSI. The Location Information relates to the cell in which the UE is camping. Based on the PDU Session status, the AMF may initiate PDU Session Release procedure in the network for the PDU Sessions whose PDU Session ID(s) were indicated by the UE as not available. When the Establishment cause is associated with priority services (e.g. MPS, MCX), or when the AMF determines that the UE has priority subscription (e.g. MPS, MCX) in the UDM, the AMF includes a Message Priority header to indicate priority information. Other NFs relay the priority information by including the Message Priority header in service-based interfaces, as specified in TS 29.500. The AMF enforces the Mobility Restrictions as specified in clause 5.3.4.1.1 of TS 23.501. If there is a Service Gap timer running in AMF for the UE and the AMF is not waiting for a MT paging response from the UE and the Service Request is not for regulatory prioritized services like Emergency services or not for exception reporting, the AMF rejects the Service Request with an appropriate cause. In addition, AMF may also provide a UE with a Mobility Management Back-off timer set to the remaining value of the Service Gap timer. If the AMF supports RACS and the AMF detects that the selected PLMN is different from the currently registered PLMN for the UE, the AMF determines the UE Radio Capability ID of the newly selected PLMN to the gNB as described in clause 5.4.4.1a of TS 23.501. For NR satellite access, the AMF may decide to verify the UE location and determine whether the PLMN is allowed to operate at the UE location, as described in clause 5.4.11.4 of TS 23.501. If the UE receives a Service Reject message with cause value indicating that the PLMN is not allowed to operate in the present UE location, the UE shall attempt to select a PLMN, as specified in TS 23.122.

AMF to (R)AN: N2 Request (security context, Mobility Restriction List, list of recommended cells / TAs / NG-RAN node identifiers). If the 5G-AN had requested for UE Context or there is a requirement for AMF to provide this e.g. the AMF needs to initiate fallback procedure as in clause 4.13.4.2 for Emergency services, AMF initiates NGAP procedure as specified in TS 38.413. The AMF may provide the indication of NCR-MT authorization information in the UE Context. For UE in CM-IDLE state, 5G-AN stores the Security Context in the UE AN context. Mobility Restriction List is described in clause 5.3.4.1 of TS 23.501. The 5G-AN uses the Security Context to protect the messages exchanged with the UE as described in TS 33.501. If the NG-RAN node had provided the list of recommended cells / TAs / NG-RAN node identifiers during the AN Release procedure (see clause 4.2.6), the AMF shall include it in the N2 Request. The RAN may use this information to allocate the RAN Notification Area when the RAN decides to enable RRC_INACTIVE state for the UE.

If the Service Request was not sent integrity protected or integrity protection verification failed, the AMF shall reject the Service Request as stated in TS 24.501. If the UE in CM-IDLE state triggered the Service Request to establish a signalling connection only, after successful establishment of the signalling connection the UE and the network can exchange NAS signalling and steps 4 to 11 and 15 to 22 are skipped. If the UE in Non-Allowed Area triggered the Service Request with an indication that the message is exempted from restriction (e.g. Non-Allowed Area), the AMF should accept the Service Request. In this case, if the UE is in Non-Allowed Area, the AMF rejects user plane setup request from the SMF except for emergency services. If the procedure was triggered in response to paging or NAS notification indicating non-3GPP access and the AMF received N1 SM Container only from the SMF in step 3a of clause 4.2.3.3, the AMF sends the NAS signalling including the N1 SM Container to the UE in step 7 of clause 4.2.3.3 without updating the access associated to the PDU Session. If the Service Request message is received over 3GPP access without a Release Request indication or a Reject Paging Indication, the AMF shall delete any stored Paging Restriction Information for this UE and stop restricting paging accordingly. If the Service Request message over 3GPP access includes a Release Request indication or a Reject Paging Indication, then:

• the AMF may accept or reject the received Paging Restriction Information requested by the UE based on operator policy. If the AMF rejects the Paging Restriction Information, the AMF removes any stored Paging Restriction Information from the UE context and discards the UE requested Paging Restriction Information. If the AMF accepts the Paging Restriction Information from the UE, the AMF stores the Paging Restriction Information from the UE in the UE context.
• If no Paging Restriction Information is provided, no paging restrictions apply and the AMF removes any stored Paging Restriction Information from the UE context.
• no User Plane resources are established and instead the AMF triggers the AN Release procedure as described in clause 4.2.6.

If the procedure was triggered in response to paging and the Service Request message includes a Reject Paging Indication, the AMF initiates the UCU procedure as described in step 7 of clause 4.2.3.3 before the triggering of the AN Release procedure.

[Conditional] AMF to SMF: The Nsmf_PDUSession_UpdateSMContext Request is invoked:

• If the UE identifies List Of PDU Sessions To Be Activated in the Service Request message;
• This procedure is triggered by the SMF but the PDU Session(s) identified by the UE correlates to other PDU Session ID(s) than the one triggering the procedure; or
• If this procedure is triggered by the SMF in response to paging or NAS notification indicating 3GPP access or if this step onwards is invoked following step 4a of clause 4.2.3.3 and the current UE location is outside the "Area of validity for the N2 SM information" provided by the SMF in step 3a of clause 4.2.3.3 or the "Area of validity for the N2 SM information" was not provided by the SMF in step 3a of clause 4.2.3.3, the AMF shall not send the N2 information provided by the SMF in step 3a of clause 4.2.3.3. Otherwise, if the current UE location is in the "Area of validity for the N2 SM information", steps 4 to 11 are skipped; or
• If this procedure is triggered by the SMF in response to paging or NAS notification indicating non-3GPP access and the AMF received N2 SM Information only, or both N1 SM Container and N2 SM Information in step 3a of clause 4.2.3.3.

If the DNN corresponds to an LADN then the "UE presence in LADN service area" indicates if the UE is IN or OUT of the LADN service area. If the AMF does not provide the "UE presence in LADN service area" indication and the SMF determines that the DNN corresponds to a LADN, then the SMF considers that the UE is OUT of the LADN service area. The AMF determines the PDU Session(s) for which the UP connection(s) shall be activated and sends an Nsmf_PDUSession_UpdateSMContext Request to SMF(s) associated with the PDU Session(s) with Operation Type set to "UP activate" to indicate establishment of User Plane resources for the PDU Session(s). The AMF determines Access Type and RAT Type, see clause 4.2.2.2.1. If the RAT type is NB-IoT, the AMF shall ensure that the number of PDU session(s) for which UP connection(s) are active does not exceed this UE's maximum number of supported user plane resources (0, 1 or 2) based on whether the UE supports UP data transfer and the UE 5GMM Core Network Capability as described in clause 5.31.19 of TS 23.501. If the procedure was triggered in response to paging or NAS Notification indicating non-3GPP access, the AMF received N2 SM Information in step 3a of clause 4.2.3.3 and the PDU Session for which the UE was paged or notified is not in the List Of Allowed PDU Sessions provided by the UE, the AMF notifies the SMF that the UE is not reachable. For other PDU Sessions in the List Of Allowed PDU Sessions the Service Request Procedure succeeds without re-activating the User Plane of any PDU Sessions, unless they have also been included by the UE in the List Of PDU Sessions To Be Activated. If the procedure was triggered in response to paging or NAS notification indicating non-3GPP access and the PDU Session for which the UE was paged or notified is in the List Of Allowed PDU Sessions provided by the UE and the AMF received N2 SM Information only or N1 SM Container and N2 SM Information from the SMF in step 3a of clause 4.2.3.3, the AMF notifies the SMF that the access type of the PDU session can be changed. The AMF discards any already received N1 SM Container and N2 SM Information. In Home Routed roaming case, the V-SMF triggers Nsmf_PDUSession_Update service operation towards the H-SMF to notify the access type of the PDU Session can be changed and the procedure continues as specified in clause 4.3.3.3 from step 1a to step 10. If the UE is accessing via the NB-IoT RAT, the AMF may inform all (H-)SMFs whether the RRC establishment cause is set to "MO exception data", as described in clause 5.31.14.3 of TS 23.501. The AMF may immediately send the MO Exception Data Counter to the (H-)SMF. If the AMF, based on configuration, as described in clauses 5.43.4 and 5.43.2 of TS 23.501, is aware that satellite backhaul category and/or GEO Satellite ID has changed and needs to be updated to the SMF, the AMF includes the new Satellite backhaul category or new GEO Satellite ID or both as described in clauses 5.43.4 and 5.43.2 of TS 23.501. The AMF may receive a Service Request to establish another NAS signalling connection via a new NG-RAN while it has maintained an old NAS signalling connection for UE still via an old NG-RAN. The new NG-RAN and the old NG-RAN can be the same NG-RAN node. In this case, AMF shall trigger the AN release procedure toward the old NG-RAN to release the old NAS signalling connection as defined in clause 4.2.6 and:

• For the PDU Sessions indicated by the UE in the List Of PDU Sessions To Be Activated, the AMF requests the SMF to activate the PDU Session(s) immediately by performing this step 4; and
• For the PDU Sessions indicated by the old NG-RAN in the "List of PDU Session ID(s) with active N3 user plane" but not in the List Of PDU Sessions To Be Activated sent by the UE, the AMF requests the SMF to deactivate the PDU Session(s).

Void

If the PDU Session ID corresponds to a LADN and the SMF determines that the UE is outside the area of availability of the LADN based on the "UE presence in LADN service area" from the AMF, the SMF decides to (based on local policies) either:

• keep the PDU Session, but reject the activation of User Plane connection for the PDU Session and inform the AMF about it. If the procedure has been triggered by a Network Triggered Service Request as described in clause 4.3.2.3, the SMF may notify the UPF that originated the Data Notification to discard downlink data for the PDU Sessions and/or to not provide further Data Notification messages; or
• to release the PDU Session: the SMF releases the PDU Session and informs the AMF that the PDU Session is released.

In any case of the two cases above the SMF answers to the AMF (step10) with an appropriate reject cause and the User Plane Activation of PDU Session is stopped. Otherwise, based on the location info received from the AMF, the SMF checks the UPF Selection Criteria according to clause 6.3.3 of TS 23.501 and determines to perform one of the following:

• accepts the activation of UP connection and continue using the current UPF(s);
• accepts the activation of UP connection and selects a new intermediate UPF (or add/remove an intermediate UPF), if the UE has moved out of the service area of the UPF that was previously connecting to the AN, while maintaining the UPF(s) acting as PDU Session Anchor. The steps to perform I-UPF addition/change/removal are described as conditional steps in the following of the current procedure; or
• rejects the activation of UP connection of a PDU Session of SSC mode 2 and trigger re-establishment of the PDU Session after Service Request procedure to perform the allocation of a new UPF to act as PDU Session Anchor, e.g. the UE has moved out of the service area of the anchor UPF which is connecting to NG-RAN.

In the case that the SMF fails to find suitable I-UPF, the SMF decides to (based on local policies) either:

• trigger re-establishment of PDU Session. After Service Request procedure, SMF sends N1 SM message to the UE via the AMF by invoking Namf_Communication_N1N2MessageTransfer containing the cause indicating PDU Session re-establishment is required for the UE; or
• keep the PDU Session, but reject the activation request of User Plane connection for the PDU Session and inform the AMF about it; or
• release the PDU Session after Service Request procedure.

If the SMF has determined that the UE is performing Inter-RAT mobility to or from the NB-IoT RAT then the SMF uses the "PDU Session continuity at inter RAT mobility" to determine how to handle the PDU Session.

[Conditional] SMF to UPF (PSA): N4 Session Modification Request. Depending on the network deployment, the CN Tunnel Info of UPF (PSA) allocated for N3 or N9 interface may be changed during the Service Request procedure, e.g. UPF connected to different IP domains. If different CN Tunnel Info need be used, the SMF sends N4 Session Modification Request message to UPF (PSA) and requests CN Tunnel Info providing the target Network Instance.

[Conditional] UPF (PSA) to SMF: N4 Session Modification Response. The UPF (PSA) sends an N4 Session Establishment Response message to the SMF. The UPF provides CN Tunnel Info to the SMF. The UPF (PSA) associate the CN Tunnel Info with UL Packet detection rules provided by the SMF. If the redundant I-UPFs are used for URLLC, each I-UPF provides UL CN Tunnel Info for N3 interface to the SMF in the N4 Session Establishment Response message. If the redundant N3 tunnels are used for URLLC, the UPF (PSA) provides redundant UL CN Tunnel Info for N3 interface to the SMF in N4 Session Establishment Response message.

[Conditional] SMF to new UPF (intermediate): N4 Session Establishment Request. If the SMF selects a new UPF to act as intermediate UPF for the PDU Session, or if the SMF selects to insert an intermediate UPF for a PDU Session which did not have an intermediate UPF, an N4 Session Establishment Request message is sent to the new UPF, providing Packet detection, Data forwarding, enforcement and reporting rules to be installed on the intermediate UPF. The CN Tunnel Info (on N9) of PSA, i.e. which is used to establish the N9 tunnel, for this PDU Session is also provided to the intermediate UPF. If a new UPF is selected by the SMF to replace the old (intermediate) UPF, the SMF may also include a request for the new UPF to allocate a second tunnel endpoint for buffered DL data from the old I-UPF and to indicate via usage reporting end marker reception on this second tunnel. In this case, the UPF is instructed by the SMF to buffer the DL data it may receive at the same time from the UPF (PSA).

New UPF (intermediate) to SMF: N4 Session Establishment Response. The new intermediate UPF sends an N4 Session Establishment Response message to the SMF. The UPF provides DL CN Tunnel Info as requested by SMF in step 6c. The SMF starts a timer, to be used in step 22a to release the resource in old intermediate UPF if there is one.

[Conditional] SMF to UPF (PSA): N4 Session Modification Request. If the SMF selects a new UPF to act as intermediate UPF for the PDU Session, the SMF sends N4 Session Modification Request message to PDU Session Anchor UPF, providing DL Tunnel Info from new intermediate UPF. If the new intermediate UPF was added for the PDU Session, the UPF (PSA) begins to send the DL data to the new I-UPF as indicated in the DL CN Tunnel Info. The UPF (PSA) sends one or more "end marker" packets for each N9 tunnel to the old I-UPF immediately after switching the path to new I-UPF. If the Service Request is triggered by the network and the SMF removes the old I-UPF but does not replace it with a new I-UPF, the SMF may also include a request for the UPF to allocate a second tunnel endpoint for buffered DL data from the old I-UPF and to indicate end marker reception on this second tunnel via usage reporting. In this case, the UPF (PSA) begins to buffer the DL data it may receive at the same time from the N6 interface. The UPF (PSA) sends one or more "end marker" packets for each N9 tunnel to the old I-UPF immediately after switching the path to (R)AN.

The UPF (PSA) sends N4 Session Modification Response message to SMF. If requested by SMF, the UPF (PSA) sends DL CN tunnel info for the old (intermediate) UPF to the SMF. The SMF starts a timer, to be used in step 22a to release the resource in old intermediate UPF if there is one. If the UPF that connects to RAN is the UPF (PSA) and if the SMF finds that the PDU Session is activated when receiving the Nsmf_PDUSession_UpdateSMContext Request in step 4 with Operation Type set to "UP activate" to indicate establishment of User Plane resources for the PDU Session(s), it deletes the AN Tunnel Info and initiates an N4 Session Modification procedure to remove Tunnel Info of AN in the UPF.

[Conditional] SMF to old UPF (intermediate): If the service request is triggered by the network and the SMF removes the old (intermediate) UPF, the SMF sends the N4 Session Modification Request message to the old (intermediate) UPF, providing the DL Tunnel Info for the buffered DL data. If the SMF allocated new I-UPF, the DL Tunnel Info is from the new (intermediate) UPF acting as N3 terminating point. If the SMF did not allocate a new I-UPF, the DL Tunnel Info is from the new UPF (PSA) acting as N3 terminating point. The SMF starts a timer to monitor the forwarding tunnel as step 6d or 7b. If the old I-UPF receives end marker packets and there is no associated tunnel to forward these packets, the old I-UPF discards the received end marker packets and does not send any Data Notification to SMF. If the SMF find the PDU Session is activated when receiving the Nsmf_PDUSession_UpdateSMContext Request in step 4 with Operation Type set to "UP activate" to indicate establishment of User Plane resources for the PDU Session(s), it deletes the AN Tunnel Info and initiates an N4 Session Modification procedure to remove Tunnel Info of AN in the UPF.

old UPF (intermediate) to SMF: N4 Session Modification Response The old (intermediate) UPF sends N4 Session Modification Response message to SMF.

[Conditional] old UPF (intermediate) to new UPF (intermediate): buffered downlink data forwarding If the I-UPF is changed and forwarding tunnel was established to the new I-UPF, the old (intermediate) UPF forwards its buffered data to the new (intermediate) UPF acting as N3 terminating point. If indicated by SMF in step 6c, the new I-UPF reports to SMF when end marker packet is received. Then the SMF initiates N4 Session Modification procedure to indicate the new I-UPF to send the buffered downlink packet(s) received from the UPF (PSA).

[Conditional] old UPF (intermediate) to UPF (PSA): buffered downlink data forwarding If the old I-UPF is removed and no new I-UPF is assigned for the PDU Session and forwarding tunnel was established to the UPF (PSA), the old (intermediate) UPF forwards its buffered data to the UPF (PSA) acting as N3 Terminating Point. If indicated by SMF in step 7a, the UPF (PSA) reports to SMF when the end marker packet has been received. Then the SMF initiates N4 Session Modification procedure to request the UPF (PSA) to send the buffered DL data received from the N6 interface.

[Conditional] SMF to AMF: If the UPF that connects to RAN is the UPF (PSA), the N3 CN Tunnel Info is the UL CN Tunnel Info of the UPF (PSA). If the UPF that connects to RAN is the new intermediate UPF, the CN N3 Tunnel Info is the UL Tunnel Info of the intermediate UPF. For the PDU Session with redundant I-UPFs or with redundant N3 tunnels for URLLC, the two UL N3 CN Tunnel Info are included, the SMF also indicates the NG-RAN that one of the CN Tunnel Info is used as the redundancy tunnel of the PDU session as described in clause 5.33.2.2 of TS 23.501. The SMF shall send N1 SM Container and/or N2 SM Information to the AMF when applicable. (e.g. when the SMF was notified from the AMF that the access type of the PDU Session can be changed in step 4). For a PDU Session that the SMF has determined to accept the activation of UP connection in step 5a or 5b, the SMF generates only N2 SM information and sends Nsmf_PDUSession_UpdateSMContext Response to the AMF to establish the User Plane(s). The N2 SM information contains information that the AMF shall provide to the NG-RAN. The SMF may indicate for each QoS Flow whether redundant transmission shall be performed by a corresponding redundant transmission indicator. If the SMF decided to change the PSA UPF for the SSC mode 3 PDU Session, the SMF triggers the change of SSC mode 3 PDU Session anchor as an independent procedure described in clause 4.3.5.2 or clause 4.3.5.3 after accepting the activation of UP of the PDU Session. For each QoS Flow, the SMF may at most request one of the following to the NG-RAN:

• ECN marking for L4S at NG-RAN in the case of ECN marking for L4S in RAN as described in clause 5.37.3 of TS 23.501; or,
• Congestion information monitoring as described in clauses 5.45.3 and 5.37.4 of TS 23.501; or,
• provide information for ECN marking for L4S at UPF in the case of ECN marking for L4S by PSA UPF as described in clause 5.37.3 of TS 23.501.

The SMF can reject the activation of UP of the PDU Session by including a cause in the Nsmf_PDUSession_UpdateSMContext Response. Following are some of the cases:

• If the PDU Session corresponds to a LADN and the UE is outside the area of availability of the LADN as described in step 5b;
• If the AMF notified the SMF that the UE is reachable only for regulatory prioritized service and the PDU Session to be activated is not for a regulatory prioritized service; or
• If the SMF decided to change the PSA UPF for the requested PDU Session as described in step 5b. In this case, after sending Nsmf_PDUSession_UpdateSMContext Response, the SMF triggers another procedure to instruct UE to re-establish the PDU Session as described in clause 4.3.5.1 for SSC mode 2.
• If the SMF received negative response in Step 6b due to UPF resource unavailability.

If the PDU Session has been assigned any EPS bearer ID, the SMF also includes the mapping between EPS bearer ID(s) and QFI(s) into the N2 SM information to be sent to the NG-RAN. The User Plane Security Enforcement information is determined by the SMF upon PDU session establishment as described in clause 5.10.3 of TS 23.501. If the User Plane Security Enforcement information indicates that Integrity Protection is "Preferred" or "Required", the SMF also includes the UE Integrity Protection Maximum Data Rate. The RSN and PDU Session Pair ID are included when applicable, as determined by the SMF during PDU Session establishment as described in clause 5.33.2.1 of TS 23.501.

AMF to (R)AN: The Allowed NSSAI for the Access Type for the UE and if available, Partially Allowed NSSAI (as described in clause 5.15.17 of TS 23.501), are included in the N2 message. If the subscription information includes Tracing Requirements, the AMF includes Tracing Requirements in the N2 Request. If the subscription information includes QMC Configuration information, the AMF includes QMC Configuration information in the N2 Request. If the UE triggered the Service Request while in CM-CONNECTED state, only N2 SM information received from SMF and MM NAS Service Accept are included in the N2 Request. If the Service Request procedure is triggered by the Network (as described in clause 4.2.3.3) while the UE is in CM-CONNECTED state, only N2 SM information received from SMF is included in the N2 Request. If the Service Request procedure is triggered by the Network (as described in clause 4.2.3.3) while the UE is in CM-IDLE state, only N2 SM information received from SMF and MM NAS Service Accept is included in the N2 Request. For a UE that was in CM-IDLE state when the Service Request was triggered, the NG-RAN stores the Security Context. If the Service Request is not triggered by UE for a signalling connection only, RAN also stores QoS Information for the QoS Flows of the PDU Sessions that are activated and N3 Tunnel IDs in the UE RAN context and Mobility Restriction List (as described in clause 5.3.4.1 of TS 23.501). MM NAS Service Accept includes PDU Session status in AMF. Any local PDU Session Release during the Session Request procedure is indicated to the UE via the Session Status. PDU Session Reactivation Result is provided in Service Accept for the PDU sessions in the List Of PDU Sessions To Be Activated and the PDU Session in the List of Allowed PDU Sessions which has caused paging or NAS notification. If the PDU Session Reactivation Result of a PDU Session is failure, the cause of the failure is also provided. One of the possible causes of failure for a PDU Session reactivation is when the AMF determines that the UE is not inside the NS-AoS of the network slice of the PDU Session. If the AMF accepts the Paging Restriction Information sent from the UE, the AMF informs the UE about the acceptance/rejection of the requested Paging Restriction Information in the MM NAS Service Accept message. If AMF receives multiple TAIs from the NG-RAN in step 2 and determines that some, but not all of them are forbidden by subscription or by operator policy, the AMF shall include the forbidden TAI(s) in the MM NAS Service Accept message. If there are multiple PDU Sessions that involves multiple SMFs, AMF does not need to wait for responses from all SMFs in step 11 before it sends N2 SM information to the RAN. However, the AMF shall wait for all responses from the SMFs before it sends MM NAS Service Accept message to the UE. AMF shall include at least one N2 SM information from SMF if this step is triggered for PDU Session User Plane activation. AMF may send additional N2 SM information from SMFs in separate N2 message(s) (e.g. N2 tunnel setup request), if there is any. Alternatively, if multiple SMFs are involved, the AMF may send one N2 Request message to (R)AN after all the Nsmf_PDUSession_UpdateSMContext Response service operations from all the SMFs associated with the UE are received. If the NG-RAN node had provided the list of recommended cells / TAs / NG-RAN node identifiers during the AN Release procedure (see clause 4.2.6), the AMF shall include it in the N2 Request. The NG-RAN may use this information to allocate the RAN Notification Area when the NG-RAN decides to enable RRC_INACTIVE state for the UE. The AMF includes the UE's "RRC Inactive Assistance Information" as defined in clause 5.3.3.2.5 of TS 23.501. If the NG-RAN node does not support RACS and the AMF have UE Radio Capability ID but not the UE Radio Capability information, then AMF will use Nucmf_UECapabilityManagement_Resolve to try to retrieve the corresponding UE Radio Capability information. If the NG-RAN node does not support RACS, or the AMF does not have UE Radio Capability ID in UE context, the AMF shall include the UE Radio Capability information, if available, to the NG-RAN node as described in TS 23.501. If the RAT Type is NB-IoT then NB-IoT specific UE Radio Access Capability Information is included instead, if available. If AMF has UE Radio Capability ID in UE context valid for the PLMN the UE is currently in and the NG-RAN supports RACS, the AMF signals the UE Radio Capability ID. If the NG-RAN node does not have mapping between the UE Radio Capability ID and the corresponding UE radio capabilities, it shall use the non-UE associated procedure described in TS 38.413 to retrieve the mapping from the AMF. The AMF may include the Core Network Assistance Information which includes Core Network assisted RAN parameters tuning and Core Network assisted RAN paging information as defined in TS 23.501. If the UE included support for restriction of use of Enhanced Coverage, the AMF sends Enhanced Coverage Restricted information to the (R)AN in the N2 message. If the UE and the AMF have negotiated to enable MICO mode and the AMF uses the Extended connected timer, then the AMF provides the Extended Connected time value to NG-RAN (see clause 5.31.7.3 of TS 23.501) in this step. The Extended Connected Time value indicates the minimum time the RAN should keep the UE in RRC_CONNECTED state regardless of inactivity. If the AMF accepted MICO mode in the last registration procedure and knows there may be mobile terminated data or signalling pending, the AMF maintains the N2 connection for at least the Extended Connected Time as described in clause 5.31.7.3 of TS 23.501 and provides the Extended Connected Time value to the RAN in N2 message with Service Accept message. The RAN should keep the UE in RRC_CONNECTED state for an Extended Connected Time period in order to ensure the downlink data and/or signalling is delivered to the UE. If the RAN receives two CN Tunnel Info for a PDU session in step 11 for redundant transmission, RAN also allocates two AN Tunnel Info correspondingly and indicate to SMF one of the AN Tunnel Info is used as the redundancy tunnel of the PDU session as described in clause 5.33.2.2 of TS 23.501.

(R)AN to UE: The NG-RAN performs RRC Connection Reconfiguration with the UE depending on the QoS Information for all the QoS Flows of the PDU Sessions whose UP connections are activated and Data Radio Bearers. For a UE that was in CM-IDLE state, if the Service Request is not triggered by UE for a signalling connection only, the User Plane security is established at this step, which is described in detail in TS 38.331 and TS 36.331. For a UE that was in CM-IDLE state, if the Service Request is triggered by UE for a signalling connection only, AS security context may be established in this step, which is described in detail in TS 38.331 and TS 36.331. If the N2 Request includes a NAS message, the NG-RAN forwards the NAS message to the UE. The UE locally deletes context of PDU Sessions that are not available in 5GC. After the User Plane radio resources are setup, the uplink data from the UE can now be forwarded to NG-RAN. The NG-RAN sends the uplink data to the UPF address and Tunnel ID provided in the step 11. If the NG-RAN can not establish redundant user plane for the PDU Session as indicated by the RSN parameter and PDU Session Pair ID, the NG-RAN takes the decision on how to proceed with the PDU Session as described in TS 23.501.

[Conditional] (R)AN to AMF: The message may include N2 SM information(s), e.g. AN Tunnel Info. NG-RAN may respond N2 SM information with separate N2 message (e.g. N2 tunnel setup response) if AMF sends separate N2 message in step 11. If multiple N2 SM information are included in the N2 Request message in step 12, the N2 Request Ack includes multiple N2 SM information and information to enable the AMF to associate the responses to relevant SMF. For List of PDU Sessions To Be Established, if the N2 SM information received from SMF included PDU Set QoS Parameters, NG-RAN includes the PDU Set Based Handling Support Indication in N2 SM information for the PDU Session that enables PDU Set based handling in NG-RAN as described in clause 5.37.5.3 of TS 23.501.

[Conditional] AMF to SMF: Nsmf_PDUSession_UpdateSMContext Request (N2 SM information, RAT Type, Access Type) per PDU Session to the SMF. The AMF determines Access Type and RAT Type, see clause 4.2.2.2.1. If the AMF received N2 SM information (one or multiple) in step 14, then the AMF shall forward the N2 SM information to the relevant SMF per PDU Session ID. If the UE Time Zone has changed compared to the last reported UE Time Zone then the AMF shall include the UE Time Zone IE in this message. If the PDU Session is moved from the non-3GPP access to 3GPP access (i.e. N3 tunnel for the PDU Session is established successfully), the SMF and AMF update associated access of the PDU Session. The UE updates associated access of the PDU Session when the user plane resource for the PDU Session is successfully established. Procedure for unpausing a charging pause initiated earlier is specified in clause 4.4.4. If a PDU Session is rejected by the serving NG-RAN with an indication that the PDU Session was rejected because User Plane Security Enforcement is not supported in the serving NG-RAN and the User Plane Enforcement Policy indicates "Required" as described in clause 5.10.3 of TS 23.501, the SMF shall trigger the release of this PDU Session. In all other cases of PDU Session rejection, the SMF can decide whether to release the PDU Session or to deactivate the UP connection of this PDU Session. If some of the QoS Flows of a PDU Session are not accepted by the serving NG-RAN, the SMF shall initiate the PDU Session Modification procedure to remove the non-accepted QoS Flows from the PDU Session after this procedure is completed.

[Optional] SMF to PCF: If dynamic PCC is deployed and if Policy Control Request Trigger condition(s) have been met (e.g. change of Access Type, change of UE location), performs SMF initiated SM Policy Modification procedure as defined in clause 4.16.5.1. The PCF may provide updated policies.

[Conditional] SMF to new intermediate UPF: N4 Session Modification Request (AN Tunnel Info and List of accepted QFI(s)). If the SMF selected a new UPF to act as intermediate UPF for the PDU Session in step 5b, the SMF initiates a N4 Session Modification procedure to the new I-UPF and provides AN Tunnel Info. The Downlink Data from the new I-UPF can now be forwarded to NG-RAN and UE.

[Conditional] UPF to SMF: N4 Session Modification Response.

[Conditional] SMF to UPF (PSA): N4 Session Modification Request (AN Tunnel Info, List of rejected QoS Flows). If a User Plane is to be setup or modified and after the modification there is no I-UPF, the SMF initiates a N4 Session Modification procedure to UPF (PSA) and provides AN Tunnel Info. The Downlink Data from the UPF (PSA) can now be forwarded to NG-RAN and UE. For QoS Flows in the List of rejected QoS Flows, the SMF shall instruct the UPF to remove the rules (e.g. Packet Detection Rules etc.) which are associated with the QoS Flows. If SMF decides to perform redundant transmission for one or more QoS Flows of the PDU, the SMF also indicates the UPF (PSA) to perform packet duplication for the QoS Flow(s) in downlink direction by forwarding rules. If the PCC rule(s) are updated in step 16, the SMF may initiate a N4 Session Modification procedure to UPF (PSA) based on the updated PCC rule(s).

[Conditional] UPF to SMF: N4 Session Modification Response.

[Conditional] SMF to AMF: Nsmf_PDUSession_UpdateSMContext Response.

[Conditional] SMF to new UPF (intermediate): N4 Session Modification Request. If forwarding tunnel has been established to the new I-UPF and if the timer SMF set for forwarding tunnel at step 8a has expired, SMF sends N4 Session modification request to new (intermediate) UPF acting as N3 terminating point to release the forwarding tunnel.

[Conditional] new UPF (intermediate) to SMF: N4 Session modification response. New (intermediate) UPF acting as N3 terminating point sends N4 Session Modification response to SMF.

[Conditional] SMF to UPF (PSA): N4 Session Modification Request. If forwarding tunnel has been established to the UPF (PSA) and if the timer SMF set for forwarding tunnel at step 7b has expired, SMF sends N4 Session modification request to UPF (PSA) acting as N3 Terminating Point to release the forwarding tunnel.

[Conditional] UPF (PSA) to SMF: N4 Session Modification Response. UPF (PSA) acting as N3 Terminating Point sends N4 Session Modification Response to SMF.

[Conditional] SMF to old UPF: N4 Session Modification Request or N4 Session Release Request. If the SMF decided to continue using the old UPF in step 5b, the SMF sends an N4 Session Modification Request, providing AN Tunnel Info. If the SMF decided to select a new UPF to act as intermediate UPF in step 5b and the old UPF is not PSA UPF, the SMF initiates resource release, after timer in step 6b or 7b expires, by sending an N4 Session Release Request (Release Cause) to the old intermediate UPF.

[Conditional] Old intermediate UPF to SMF: N4 Session Modification Response or N4 Session Release Response. The old UPF acknowledges with an N4 Session Modification Response or N4 Session Release Response message to confirm the modification or release of resources.