4G/LTE - Timers

 

 

 

Timer - EPS Mobility Management - NW Side

 

The MME runs its own set of EMM timers. Most of them supervise a message that the MME sends and wait for the answer from the UE. The rest decide how long the MME keeps an idle UE reachable before it stops paging and detaches the UE.

I'll start with the network side table from 24.301. Then I'll show how each timer pairs with a UE side timer, how the reachability timers work, and what later releases have added. The UE side timers are on a separate page, Timer - EPS Mobility Management - UE Side.

EMM Timers on the Network Side

Each row is one timer that runs in the MME. The last column is different from the UE side table. It describes the 1st to 4th expiry, because the MME normally retransmits and gives up on the fifth expiry, as NOTE 1 says.

Following table comes from 24.301 - 10.2 Timers of EPS mobility management (Table 10.2.2: EPS mobility management timers – Network side)

 

TIMER
NUM.

TIMER
VALUE

STATE

CAUSE OF START

NORMAL STOP

ON THE
1st, 2nd, 3rd, 4th
EXPIRY (NOTE 1)

T3413

NOTE 2

EMM REGISTERED

Paging procedure for EPS services initiated

Paging procedure for EPS services completed

Network dependent

T3422

6s

EMM DEREGISTERED INITIATED

DETACH REQUEST sent

DETACH ACCEPT received

Retransmission of DETACH REQUEST

T3450

6s

EMM-COMMON PROC-INIT

ATTACH ACCEPT sent
TRACKING AREA UPDATE ACCEPT sent with GUTI
TRACKING AREA UPDATE ACCEPT sent with TMSI
GUTI REALLOCATION COMMAND sent

ATTACH COMPLETE received
TRACKING AREA UPDATE COMPLETE received
GUTI REALLOCATION COMPLETE received

Retransmission of the same message type, i.e. ATTACH ACCEPT,TRACKING AREA UPDATE ACCEPT or GUTI REALLOCATION COMMAND

T3460

6s

EMM-COMMON PROC-INIT

AUTHENTICATION REQUEST sent
SECURITY MODE COMMAND sent

AUTHENTICATION RESPONSE received
AUTHENTICATION FAILURE received
SECURITY MODE COMPLETE received
SECURITY MODE REJECT received

Retransmission of the same message type, i.e.AUTHENTICATION REQUEST or SECURITY MODE COMMAND

T3470

6s

EMM-COMMON PROC-INIT

IDENTITY REQUEST sent

IDENTITY RESPONSE received

Retransmission of IDENTITY REQUEST

Mobile
reachable

Default 4 min greater than T3412

All except EMM DEREGISTERED

Entering EMM-IDLE mode

NAS signalling connection established

Network dependent, but typically paging is halted on 1st expiry

Implicit
detach
timer

NOTE 3

All except EMM DEREGISTERED

The mobile reachable timer
expires while the network is in
EMM-IDLE mode

NAS signalling connection established

Implicitly detach the UE on 1st expiry

           

NOTE 1:

Typically, the procedures are aborted on the fifth expiry of the relevant timer. Exceptions are described in the corresponding procedure description.

NOTE 2:

The value of this timer is network dependent.

NOTE 3:

The value of this timer is network dependent. If ISR is activated, the default value of this timer is 4 minutes greater than T3423.

 

Let's put a number on NOTE 1. T3450 is 6 seconds, and the MME retransmits ATTACH ACCEPT on each of the first four expiries. So the MME waits about 30 seconds in total for ATTACH COMPLETE before it aborts the procedure. T3460 and T3470 follow the same pattern for AUTHENTICATION REQUEST, SECURITY MODE COMMAND and IDENTITY REQUEST.

The last two rows work differently. The mobile reachable timer and the implicit detach timer do not guard a message. They measure how long an idle UE has been silent, and the section on reachability explains them.

  • A network side retransmission timer is short : 6 seconds for T3422, T3450, T3460 and T3470, because the UE is in EMM-CONNECTED mode and should answer at once.
  • The MME repeats a message up to four times : on the fifth expiry, it normally aborts the procedure.
  • T3413 has no fixed value : the paging supervision time is network dependent, and so is the action on its expiry.

How do the network timers pair with the UE timers ?

A NAS procedure has two ends, and each end has its own supervision timer. When you read a log, it helps to know which timer is running on the other side. The table below puts the two sides of each procedure next to each other, based on 24.301 v20.0.0.

 

Network timer

Message the MME sends

UE side timer for the same procedure

T3450

ATTACH ACCEPT, TRACKING AREA UPDATE ACCEPT, GUTI REALLOCATION COMMAND

T3410 or T3430, which stop when the ACCEPT arrives

T3460

AUTHENTICATION REQUEST, SECURITY MODE COMMAND

T3416 keeps RAND and RES; T3418 and T3420 run after AUTHENTICATION FAILURE

T3470

IDENTITY REQUEST

none

T3422

DETACH REQUEST from the network

T3421 is used for a DETACH REQUEST from the UE

T3413

paging for EPS services

none; the UE answers with SERVICE REQUEST, supervised by T3417

Mobile reachable

no message; runs in EMM-IDLE mode

T3412, the periodic TAU timer

 

The attach shows how the two sides work together. The UE sends ATTACH REQUEST and starts T3410. The MME answers with ATTACH ACCEPT, and at that moment T3410 stops on the UE side and T3450 starts on the network side. T3450 stops only when ATTACH COMPLETE arrives. So a lost ATTACH COMPLETE shows up in the log as a repeated ATTACH ACCEPT, not as a new ATTACH REQUEST.

Detach is the one procedure with a timer of the same kind on both sides. T3421 supervises a DETACH REQUEST from the UE, and T3422 supervises a DETACH REQUEST from the MME. Which timer runs tells you which side started the detach.

  • A network timer usually starts when the UE timer stops : the same message, for example ATTACH ACCEPT, ends one wait and begins the next.
  • A repeated ACCEPT in a log points to the network timer : it means the MME did not receive the COMPLETE message before T3450 expired.
  • T3470 has no UE side partner : the UE answers IDENTITY REQUEST directly, without a timer of its own.

How long does the MME keep an idle UE reachable ?

An idle UE sends nothing until its next periodic TAU, so the MME cannot see whether the UE is still in coverage. The MME solves this with two timers that run while the UE is in EMM-IDLE mode. Their values are linked to the UE timers T3412 and T3423.

The mobile reachable timer starts when the UE enters EMM-IDLE mode. Its default value is 4 minutes greater than T3412, so the UE has a margin of 4 minutes for its periodic TAU. With the default T3412 of 54 minutes, the mobile reachable timer runs for 58 minutes. If it expires, the network typically stops paging the UE.

The implicit detach timer starts when the mobile reachable timer expires while the network is in EMM-IDLE mode. Its value is network dependent. When ISR is activated, its default value is 4 minutes greater than T3423. On its first expiry, the MME implicitly detaches the UE, without sending any message.

Both timers stop when a NAS signalling connection is established. So a periodic TAU, a service request or a paging response resets the whole chain. A UE that returns after an implicit detach usually receives a reject with EMM cause #10 "Implicitly detached", and it has to attach again.

  • The mobile reachable timer follows T3412 : if the operator changes T3412, the reachability window on the MME changes with it.
  • Paging stops before the UE is detached : the MME first stops paging on the mobile reachable timer, and detaches only on the implicit detach timer.
  • An implicit detach is silent : the UE learns about it only when its next request is rejected, typically with cause #10.

What has changed in later releases ?

The table above matches an early release of 24.301. 24.301 v20.0.0, Release 20, keeps every row of it and adds three more timers on the network side. It also gives most retransmission timers a second value for coverage enhancement.

The new timers are listed below. Two of them belong to the power saving features eDRX and PSM, and one belongs to service gap control.

 

Timer

Value

What it controls

T3415

smaller than T3-RESPONSE of 29.274

Paging for a UE that uses eDRX. On expiry, the MME aborts the paging procedure.

T3447

network dependent

Service gap control. While it runs, the UE is not allowed to start a connection for uplink user data.

active timer

equal to T3324, when the MME sends T3324

Power saving mode. On expiry, the network typically stops paging the UE.

 

The retransmission timers also have a longer value in WB-S1/CE mode. This applies when the UE supports CE mode B, and in some satellite access types. T3422, T3460 and T3470 grow from 6 seconds to 24 seconds, and T3450 grows from 6 seconds to 18 seconds. In NB-S1 mode, the timer value is calculated as described in clause 4.7 of 24.301.

Two existing rows have also changed. T3413 now also stops when the paging procedure is aborted. And the mobile reachable timer has more rules in its note. If the UE is attached for emergency bearer services, the timer is set equal to T3412, and on expiry the MME detaches the UE. If the MME sends T3346 larger than T3412 in a reject, it sets the two reachability timers so that their sum is greater than T3346.

  • PSM and eDRX change what reachable means : the active timer and T3415 let the MME stop paging a UE that is in a power saving period by design.
  • CE mode lengthens the retransmission timers : a UE with many repetitions needs more time to answer each message.
  • T3447 runs on both sides : the UE and the MME each run T3447 for service gap control, so both sides agree when uplink user data is allowed again.

Reference

  • 3GPP TS 24.301 v20.0.0 - clause 10.2, Table 10.2.1, EPS mobility management timers - UE side, and Table 10.2.2, EPS mobility management timers - network side