Content for TS 24.502 Word version: 19.0.0
1 Scope p. 9
The present document specifies non-3GPP access network discovery and selection procedures, the access authorization procedure used for accessing non-3GPP access networks. These non-3GPP access networks can be trusted non-3GPP access networks, untrusted non-3GPP access networks or wireline access networks.
The present document also specifies the security association management procedures used for establishing IKEv2 and IPsec security associations:
- between the UE and the N3IWF and the procedures for transporting messages between the UE and the N3IWF over the non-3GPP access networks; and
- between the UE and the TNGF and the procedures for transporting messages between the UE and the TNGF over the non-3GPP access networks.
2 References p. 9
The following documents contain provisions which, through reference in this text, constitute provisions of the present document.
- References are either specific (identified by date of publication, edition number, version number, etc.) or non-specific.
- For a specific reference, subsequent revisions do not apply.
- For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document.
[1]
TR 21.905: "Vocabulary for 3GPP Specifications".
[2]
TS 23.501: "System Architecture for the 5G System; Stage 2".
[3]
TS 23.502: "Procedures for the 5G System; Stage 2".
[4]
TS 24.501: "Access-Stratum (NAS) protocol for 5G System (5GS); Stage 3".
[4A]
TS 24.301: "Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS); Stage 3".
[[5]
TS 33.501: "Security architecture and procedures for 5G System".
[6]
RFC 7296: "Internet Key Exchange Protocol Version 2 (IKEv2)".
[7]
TS 24.302: "Access to the 3GPP Evolved Packet Core (EPC) via non-3GPP access networks; Stage 3".
[8]
TS 23.003: "Numbering, addressing and identification".
[9]
RFC 3748: "Extensible Authentication Protocol (EAP)".
[10]
TS 33.402: "3GPP System Architecture Evolution (SAE); Security aspects of non-3GPP accesses."
[11]
RFC 4303: "IP Encapsulating Security Payload (ESP)".
[12]
RFC 4301: "Security Architecture for the Internet Protocol".
[13]
TS 23.122: "Non-Access-Stratum (NAS) functions related to Mobile Station (MS) in idle mode".
[14]
RFC 2784: "Generic Routing Encapsulation (GRE)".
[15]
RFC 2890: "Key and Sequence Number Extensions to GRE".
[16]
TS 23.503: "Policy and Charging Control Framework for the 5G System".
[17]
TS 24.526: "User Equipment (UE) policies for 5G System (5GS); Stage 3".
[18]
TS 23.402: "Architecture enhancements for non-3GPP accesses".
[19]
IEEE Std 802.11-2020: "IEEE Standard for Information technology - Telecommunications and information exchange between systems - Local and metropolitan area networks - Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications".
[20]
Wi-Fi Alliance: "Hotspot 2.0 (Release 2) Technical Specification, version 1.0.0", 2014-08-08.
[21]
ITU-T Recommendation E.212: "The international identification plan for public networks and subscriptions", 2016-09-23.
[22]
TS 24.007: "Mobile radio interface signalling layer 3; General aspects".
[23]
RFC 4555: "IKEv2 Mobility and Multihoming Protocol (MOBIKE)".
[24]
RFC 791: "INTERNET PROTOCOL".
[25]
RFC 8200: "Internet Protocol, Version 6 (IPv6) Specification".
[26]
RFC 2474: "Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers".
[27]
RFC 793: "Transmission Control Protocol".
[28]
TS 24.008: "Mobile radio interface Layer 3 specification; Core network protocols; Stage 3".
[29]
TS 38.413: "NG Application Protocol (NGAP)".
[30]
IEEE Std 802.1X™-2020: "IEEE Standard for Information technology - Telecommunications and information exchange between systems - Local and metropolitan area networks - Port-based Network Access Control".
[31]
RFC 4284 (January 2006): "Identity Selection Hints for the Extensible Authentication Protocol (EAP)".
[32]
RFC 1661: "The Point-to-Point Protocol (PPP)".
[33]
RFC 1570: "PPP LCP Extensions".
[34]
RFC 2410: "The NULL Encryption Algorithm and Its Use With IPsec".
[35]
TS 31.102: "Characteristics of the Universal Subscriber Identity Module (USIM) application".
[36]
CableLabs WR-TR-5WWC-ARCH-V02-200430: "5G Wireless Wireline Converged Core Architecture Technical Report".
[37]
RFC 7542: "The Network Access Identifier".
[38]
TS 24.368: "Non-Access Stratum (NAS) configuration Management Object (MO)".
[39]
TS 29.413: "Application of the NG Application Protocol (NGAP) to non-3GPP access".
[40]
TS 23.316: "Wireless and wireline convergence access support for the 5G System (5GS)".
[41]
TS 23.304: "Proximity based Services (ProSe) in the 5G System (5GS); Stage 2".
[42]
BBF TR-456 issue 2 (March 2022): "AGF Functional Requirements".
3 Definitions, symbols and abbreviations p. 11
3.1 Definitions p. 11
For the purposes of the present document, the terms and definitions given in TR 21.905 and the following apply. A term defined in the present document takes precedence over the definition of the same term, if any, in TR 21.905.
SNPN access operation mode for 5G NSWO:
A UE operating in SNPN access operation mode for 5G NSWO only selects SNPNs for 5G NSWO. The UE using 5G NSWO authenticates using credentials in the selected entry of "list of subscriber data" or using credentials in the USIM, if PLMN subscription is selected.
MTU:
Maximum transmission unit (MTU) is the largest PDU size which can be transmitted and received by a network entity in one single IP packet without any need for IP fragmentation.
NWt:
NWt is the reference point between the UE and the TNGF for establishing secure tunnel(s) between the UE and the TNGF so that control-plane and user-plane exchanged between the UE and the 5G core network is transferred securely over trusted non-3GPP access.
NWu:
NWu is the reference point between the UE and the N3IWF for establishing secure tunnel(s) between the UE and the N3IWF so that control-plane and user-plane exchanged between the UE and the 5G core network is transferred securely over untrusted non-3GPP access.
For the purposes of the present document, the following terms and definitions given in TS 23.501 apply:
5G Access Network
5G Core Network
5G NSWO
5G QoS flow
5G QoS identifier
5G System
5G-RG
Credentials Holder (CH)
FN-RG
Network identifier (NID)
PDU Session
Stand-alone Non-Public Network
ON-SNPN
TNGF
W-AGF
For the purposes of the present document, the following terms and definitions given in TS 23.003 apply:
Global Line Identifier (GLI)
Global Cable Identifier (GCI)
NAI
For the purposes of the present document, the following terms and definitions given in TS 33.501 apply:
SUPI
SUCI
For the purposes of the present document, the following terms and definitions given in TS 24.302 apply:
S2a connectivity
For the purposes of the present document, the following terms and definitions given in TS 24.501 apply:
Non 5G capable over WLAN (N5CW) device
SNPN access operation mode
W-AGF acting on behalf of the N5GC device
For the purposes of the present document, the following terms and definitions given in TS 23.316 apply:
Authenticable Non-3GPP (AUN3) device
Non-Authenticable Non-3GPP (NAUN3) device
Wireline access control plane protocol (W-CP)
Wireline access user plane protocol (W-UP)
For the purposes of the present document, the following terms and definitions given in TS 23.122 apply:
Registered SNPN
Subscribed SNPN
3.2 Abbreviations p. 12
For the purposes of the present document, the abbreviations given in TR 21.905 and the following apply. An abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in TR 21.905.
5GCN
5G Core Network
5GS
5G System
5G-AN
5G Access Network
5G-RG
5G Residential Gateway
5QI
5G QoS Identifier
AMF
Access and Mobility Management Function
AN
Access Network
ANDS
Access Network Discovery and Selection
ANDSP
Access Network Discovery and Selection Policy
ANQP
Access Network Query Protocol
AUN3
Authenticable Non-3GPP
AUSF
Authentication Server Function
CH
Credentials Holder
CP
Control Plane
CRG
Cable Residential Gateway
DHCP
Dynamic Host Configuration Protocol
DL
Downlink
DNS
Domain Name System
DSCP
Differentiated Services Code Point
ePDG
Evolved Packet Data Gateway
ESP
Encapsulating Security Payload
FN-BRG
Fixed Network Broadband Residential Gateway
FN-CRG
Fixed Network Cable Residential Gateway
FN-RG
Fixed Network Residential Gateway
FQDN
Fully Qualified Domain Name
H-PCF
A PCF in the HPLMN
IP
Internet Protocol
IPsec
Internet Protocol Security
MPS
Multimedia Priority Service
N3AN
Non-3GPP Access Network
N3IWF
Non-3GPP InterWorking Function
N5CW
Non 5G Capable over WLAN
N5GC
Non-5G Capable
NAI
Network Access Identifier
NAPTR
Naming Authority Pointer
NAUN3
Non-Authenticable Non-3GPP
NAS
Non Access Stratum
NID
Network Identifier
NSWO
Non-Seamless WLAN Offload
NSWOF
Non-Seamless WLAN Offload Function
PCF
Policy control Function
PDU
Protocol Data Unit
QFI
QoS Flow Identifier
RQI
Reflective QoS Indicator
SA
Security Association
SNPN
Stand-alone Non-Public Network
SPI
Security Parameters Index
SSID
Service Set Identifier
SUPI
Subscription Permanent Identifier
SUCI
Subscription Concealed Identifier
TCP
Transmission Control Protocol
TNAN
Trusted Non-3GPP Access Network
TNAP
Trusted Non-3GPP Access Point
TNGF
Trusted Non-3GPP Gateway Function
TWAN
Trusted WLAN Access Network
TWAP
Trusted WLAN Access Point
TWIF
Trusted WLAN Interworking Function
UL
Uplink
UP
User Plane
UPF
User Plane Function
V-PCF
A PCF in the VPLMN
W-AGF
Wireline Access Gateway Function
WLAN
Wireless Local Area Network
WLANSP
WLAN Selection Policy
