LTE Physical Layer Interview

Questions And Answers 1-10

Q01. Define Frame Structure?
Ans. To know all about lte frame structure click here and to know
more about 5G Frame Structure click here.

Q02. How many Sub-frame present in single Frame-

Structure, and size of each Sub-Frame in Time-domain?
Ans. In 1 Radio Frame (Single frame structure) have 10 Sub-frame,
each sub-frame have equal size of 1ms in time-domain.

Q03. How many Time-Slot are present in Sub-Frame?

Ans. 2 time slot (Tslot) are present in 1 sub-frame.

Q04. What is Cyclic Prefix(CP) in Frame-Structure?

Ans. Cyclic Prefix are used to avoid interference of OFDMA symbols.

Q05. What is Sampling rate in LTE? What is the Sampling

rate of Normal CP and Extended CP?
Ans. The sampling rate use in LTE:

LTE Bandwidth Sampling Sampling rate of Normal

support rate in lte CP/Extended CP

1.4 Mhz 128 10/9

3 Mhz 256 20/18

5 Mhz 512 40/36

10 Mhz 1024 80/72

 15 Mhz 2048Ts 160/144

20 Mhz 2048Ts 160/144

Q06. How many OFDM symbols are available in 1 Time slot in

Normal CP and Extended CP? In Frequency-domain or Time-
domain? in Sub-Frame and Frame?
Ans. Following Information are available in sub-frame, radio frame:
 In 1 Time slot 7 OFDM symbols in Normal CP and 6 OFDM in
Extended CP symbols are available.
 In frequency domain 84RE Normal CP and 72 RE in Extended
CP are available.
 In 1 sub-frame 14 OFDM symbols in Normal CP and 12 OFDMA
in Extended CP symbols are present respectively.
 1 Radio frame have 140 OFDMA symbols in Normal CP and 120
OFDMA in Extended CP symbols are present.
Q07. Difference between OFDMA and SC-FDMA? What is the
reason that OFDMA using in downlink and SC-FDMA using in
uplink direction?
Ans. In OFDM (Orthogonal Frequency Division Multiplexing)
structures the unique bandwidth is subdivided into more than one
sub-carriers. Each of this sub-carriers can them be in my opinion
modulated. Typically in OFDM structures we are able to have loads
of sub-carriers with a content spacing between them (15KHz on the
LTE case). Since the multiple sub-carriers in OFDM are transmitted
in parallel, it’s possible for every one to transmit with a lower image
rate. That improves robustness at the technology for mobile
propagation conditions.

      It is not possible to use OFDMA on the uplink because, as told

before, it offers a high Peak-to-average Power Ratio. SC-FDMA
(Singe Carrier FDMA) presents the advantage of a single service
multiplexing of getting a decrease Peak-to-average Power Ratio. On
SC-FDMA before making use of the IFFT the symbols are pre coded
via a DFT (Discrete Fourier Transform). This manner each sub-
carrier after de IFFT will contain part of each symbol. Looking to the
determine bellow it's miles viable to look the distinction among SC-
FDMA and OFDMS. Also, it's miles feasible to be aware that the inter
symbol interference may be reduced for the reason that all sub-
carriers on a time frame represent the identical symbol.

Q08. Define Sub-Carrier? How many Sub-Carrier are present

in Resource Block(RB)?
Ans. Sub-carrier spacing is decided through a situation of
orthogonality between the sub-carriers, which allows to decode
every one without interference form its neighbors.

      I think if we note to general sub-carrier in distinct LTE

Bandwidth we are able to identified the answer. 20MHz-
>1200subcarrier, 15MHz->900, 10MHZ->600, 5MHz->300, 3MHz-
>180, 1.4MHZ->72 (with 10% protect band for all), 12 is the
greatest common divisor of them.

Q09. What is the Smallest unit of Sub-Carrier?

Ans. In normal or extended it’s 15 Khz. But in MBSFN operations
it’s 7.5 Khz.

Q10. In extended CP. How many resource elements present

in a Resource Block(RB)?
Ans. Total 72 Resorce Elements are present in single Resorce
Block.

11. In Normal CP. How many resource elements(RE) present

in a Resource Block(RB)?
Ans. 84 Resource Elements are present in a Resource Block.

12. Difference between RB and PRB? their length in Time-

domain and Frequency-domain?
Ans. If we talk in time domain then we know that 1 resource block
have 0.5ms length, but if we talk frequency domain of 12 sub-
carriers then we gave reply of 1 PRB. The only difference is RB in
time domain and PRB in frequency domain.
13. What is the reason that OFDMA are using in downlink and
SC-FDMA in uplink?
Ans. Follow the Ques-No. 7 ans.

14. Types of Physical Channel?

Ans. In downlink PDSCH, PBCH channels we have, Instead of these
PHICH, PCFICH, PDCCH also physical channel work only in physical
layer these channel don’t have any transport channels.
In uplink PUSCH, PRACH channels we have, instead of these PUCCH
also use only in physical in uplink direction.

15. Describe Physical Control Channel and Shared Channel?

Ans. Common channels means that are common for all users. in
physical layer we have some control channel like PDCCH, PCFICH,
PHICH, PUCCH Shared channels are PDSCH, PUSCH. Note* in logical
channel and transport channel have different-different common
channels.

16. Describe Downlink Channel and Uplink Channel in

Physical control Channel?
Ans. PDCCH, PCFICH, PHICH in downlink & PUCCH is physical uplink
control channel.

17. Describe Downlink Channel and Uplink Channel in

Physical Shared Channel?
Ans. PDSCH in downlink & PUSCH in uplink.

18. Describe Primary Synchronization Signal(PSS) and

Secondary Synchronization Signal(SSS)?
Ans. PSS and SSS are using for synchronization with network. To
read more about PSS and SSS just clich here and read Que-08 to
Que-11 Answers
19. Define which Sequence eNB used to generate PSS and
SSS?
Ans. To read this answer please click here and read Que.12 ans

20. What are the job of Reference Signal in LTE? How many
Reference Signal are present in 1 Resource Block(RB)? How
many types of Reference Signal are available in LTE and their
Description?
Ans. Reference signal are using for channel estimation and pci
validation. There are 4 reference signals are present in 1 RB. In rel-
9 there are 4 types of reference signals are present (1. Cell specific,
2. UE specific, 3. MBMS specifc, 4. position specific). CSI reference
signals further using in next 3GPP releases.

21. Radio Channel Processing step?

Ans. This section describes a well-known structure, relevant to a
couple of physical channel.

     The base-band signal representing a downlink physical

channel is described in terms of the subsequent steps:

 scrambling of coded bits in each of the code words to be

transmitted on a physical channel
 Modulation of scrambled bits to generate complicated values
for modulated symbols
 Mapping of the complex-valued modulation symbols onto
one or numerous transmission layers
 Pre coding of the complex-valued modulation symbols on
every layer for transmission on the antenna ports
 Mapping of complex-valued modulation symbols for every
antenna port to resource elements
 Generate complex-valued time-domain OFDM signal for
every antenna port
22. Describe Master Information Block (MIB), System

Frame Number (SFN) and PHICH?

Ans. For more information of MIB click here and read Que.12
Answer.

For more information of SFN click here and read Que.15 & Que.19

Answer.

For more information of PHICH click here and read Que.30

Answer.

23. Describe PBCH and its position in Frame Structure and

what Information Carried by PBCH?

Ans. PBCH stands for Physical Broadcast Channel. In lte PBCH
have fixed position on Tslot 1 starting 4 ofdm symbols.

•    Total 240 bits PBCH reserve in Downlink Frame Structure.

•    PBCH carry MIB information.

•    PBCH present in every radio frame, sub-frame 0 and Tslot 1.

24. Describe PCFICH, its position in Frame Structure and

Information Carried by PCFICH?

Ans. PCFICH stands for Physical Control Format Indicator
Channel.

PCFICH provides the information how many ofdm symbols using

by PDCCH.

It works on Resource Element Group [REG].

1 REG == 4RE

if PDCCH reserve 1 ofdm symbol than PCFICH have 4 REG.

Location at PRB 0,1,3 and 4th.

25. Describe PDCCH, its position in Frame Structure and

Information Carried by PDCCH?

Ans. PDCCH stands for Physical Downlink Control Channel.

PDCCH position may varying as per traffic available on eNodeB

For e.g. in 1.4 MHz PDCCH can use ofdm symbols 1, 2, 3.

Reaming 3, 5,10,15,20 MHz bandwidth PDCCH can use ofdm

symbols 0, 1, 2.

PDCCH present in every frame every sub frame starting ofdm

symbols.
26. Describe PDSCH, its position in Frame Structure and

Information Carried by PDSCH?

Ans. PDSCH stands for Physical Downlink Shared Channel.

PDSCH present in every radio frame, every sub-frame.

PDSCH carry user related data.

27. Define PUCCH, its position in Frame Structure and

Information Carried by PUCCH?

Ans. PUCCH stands for Physical Uplink Control Channel.

Frame time and slot time in Uplink is the same as the downlink.
And the useful resource block structure is also equal both in
uplink and downlink. 7 symbols in one slot is equal in both uplink
and downlink.
A little bit of differences you would note would be the location of
the each channel. Normally in downlink case, a channel has a
tendency to lie across the entire bandwidth but the channels
within the uplink slot seem to be more localized. For example,
PUCCH is located most effective at the lowest and highest result
in frequency domain and reference indicators additionally
localized in time area or both time domain and frequency area.

28. Define PUSCH, its position in Frame Structure and

Information Carried by PUSCH?

Ans. PUSCH stands for Physical Uplink Shared Channel.

The above Que.27 image had shown the PUSCH position in uplink
frame structure.

PUSCH carry user data in uplink direction.

ENodeB give resources to ue on DCI format 0, ue use allocated

resource for transmitting their data in uplink direction.

29. What Modulation Technique are using in all Physical-

Channel?
Ans. Modulation techniques are provided in DCI in downlink
direction from eNodeB to ue.

And UCI in uplink direction from UE to ENodeB.

Total DCI formats are using Pdcch channel and UCI are using in
Pucch channel.
 30. What is REG?
Ans. The Resource Element Group is a group of 4 consecutive
resource elements.

PCFICH, PDCCH and PHICH resource elements are counts by how

many REG present in a radio frame.

31. What is CCE? How many CCE’s are required to carry

PDCCH? Explain different configurations?
Ans 31: Its a Control Channel Element which consist 9
REG(Resource element Group) and 1 REG is equivalent to 4
Resource Element so it means 1 CCE is equivalent to 36 Resource
Element. So its depend on the number of diffren RNTI’s control
information needed to be sent. There are two configuration present:
1.   Common search space-Maxm number of CCE present in this is 16
and carry the information for all UE,s like SI-RNTI,P-RNTI etc
2.   UE specific search space- Having information of specific particular
UE.

32. What is DCI? What is sent in DCI format 0?

Ans32: DCI is a Downlink control channel of PDCCH and its nothing
but any information carry by PDCCH channel is DCI. DCI used to
carry information about downlink and uplink details whether there is
any resource or data schedule to UE. DCI 0 format is used for
getting info about the Uplink Resources available or not.
 DCI format 0 Information

33. In case of 4×4 MIMO, how many reference signals are

there in an RB? How much %age they occupied by Ref
signals in this case?
Ans33: There are 4 antennas present and each one have 8
Reference signals but the position of reference signal are different in
all the antennas which is shown below:
 MIMO 4x4 reference signal

34. What is the valid Cyclic Redundancy Check(CRC) length

in bits?
Ans 34: A 15-bit cyclic redundancy check (CRC) value is calculated by the
transmitting node in the CRC field

35. Describe briefly that where and how many padding “0”
bits are inserted in code segmentation?

36. Which channel case Turbo coding is used? Which channel

case Bit Repetition Coding is used?

37. In case of Turbo Encoder, If block size is 80, what will be

the number of output bits?
Ans37: Number of output bits is 3x80-240bits

38. In case of Convolutional Encoder- If block size is 80,

what will be the number of output bits?
Ans38: Number of output bits will be-160 bits.

39. Define Channel Quality Index(CQI)? Which is the

Parameter value that belong to Excellent condition of UE's?
 Ans 39: Channel coding bits is report that send by UE to eNb for
indicating the experience getting by downlink channel.SNR and
SINR are the parameter which show the excellent condition of CQI.
CQI range in 1-15 and table is attached below:

40. Define PMCH, it's position in Frame Structure and

Information Carried by PMCH?
Ans40: Its a Physical Multicast Channel which define the physical
layer structure to carry multimedia broadcast and multicast
services,it ocuupied the 1,2,3 OFDM symbols in a subframe over the
entire  bandwidth.

41. Define PRACH? What Information Carried by PRACH?

Ans41: PRACH is physical random access channel used for carry the
preamble toward eNB to request for initaial set of Resources. It
carried few information:
a.     Prach config index
b.     High speed flag
c.     Zero correlation zone config
d.     Prach freq offset
 42. What is RNTI? What is the types of RNTI (with their
default values, if any)?
Ans 42: Radio network temporary identities used for provide the
identification to any signalling or setup, below are the identities:
a.     C-RNTI- 65527
b.    SI-RNTI-65535
c.    P-RNTI-65534
d.   T-C-RNTI-65523
e.    RA-RNTI- (1+t_id +10f_id) 16 bit and range(1-60)
f.     SPS-RNTI- 65523

43. What is C-RNTI? Difference between C-RNTI and T-C-

RNTI?
Ans 43: Cell RNTI is the RNTI allocate to Ue when its com in a RRC
connected state whereas T-C-RNTI is allocate when UE is in RRC
Idle state. Both are of 16 bits.

44. How will you get the Physical Cell ID from eNB even
without reading BCH?
Ans44: It can be calculated at the time of synchronous process
occurred and read PSS and SSS because PCI=3xSSS + PSS
 LTE UE Power On Interview
Questions Answers 1-10
LTE UE Power on Interview Questions Answers

Q01. In power on which Layer activate 1st ?

Ans. The NAS layer activate 1st when our mobile is switch on (power
on).

Q02. What is the 1st job RRC Layer performed during power

on procedure?
Ans. When, our UE is switch on, our UE NAS layer trigger a message
to RRC layer to provide all the plmn list present in a geographical
area. After that RRC Layer start scanning of all plmn’s and make a
list and send it back to NAS layer. 

Q03. How Physical Layer Scan all Frequencies and pick-up 1

frequency?
Ans. When NAS layer select a plmn (available in plmn list), then it
trigger a message towards RRC layer, RRC layer forward this
message to Physical layer to searching best cell behalf of cell access
and cell selection parameters available in SIB1.
Q04. How UE select a Frequency?
Ans. Once UE physical layer select a cell frequency behalf of priority
(set by operators), after that UE will tries to guess middle frequency
called as DC_frequency.

Q05. What is cell selection and re-selection procedure in lte?

Ans. When our UE is switch off it stored previous cell information
eg: previous cell frequency, bandwidth info and TAC like that. So
when UE is switch on it will tries with previous info based cell
selection. But if it’s not present then it will find new cell which
information's are present in SIB1.
The Cell re-selection is based on parameters deviation so our UE try
to find a next strong cell. so the formula is to do cell re-selection is
Srxlev>0 and Squal>0
where
Srxlev=Qrxlevmeas-(Qrxlevmin+Qrxlevminoffset)-pcompensation
Squal=Qqualmeas-(Qqualmin+Qqualoffset).

Q06. How UE guess middle DC frequency of a Bandwidth?

Ans. When UE pick a frequecy according priority it tries to guess
bandwidth middle DC-frequecy. It happen in middle frequency the
power value become 0db. So our UE know that this is middle part of
bandwidth then applied Zadoff-chu angular varience formula.

Q07. How NAS layer select PLMN if no.’s of PLMN information

provided by RRC Layer?
Ans. When RRC layer provide PLMN list to NAS layer, UE NAS layer
applied security level parameters to, every PLMN present in a list.
These security information present in USIM so that a USIM belongs
to particular operators, it will select only that operator network
without any fail.

Q08. What is PSS, which sequence is using in PSS?

Ans. PSS stands for Primary Synchronization Signal.
PSS is generated by Zadoff-chu Angular Varience.

Q09. What kind of information PSS Carry?

Ans. It provide Sector id eg: 0,1, 2.

Q10. What is the location of PSS in Type-1 Frame structure?

Ans. PSS present in every Radio frame and Sub-frame no. 0 and 5
on 1st time slot (ts).
And last OFDM symbol either Normal Cyclic or Extended Cyclic
prefix.

Q11. What is the location of PSS in Type-2 Frame structure?

Ans. PSS also present twice in Radio Frame in Type-2 (TDD) frame
structure.

 Sub Frame=1, ts=3, 2nd ofdm symbol, middle 62 subcarrier.

 And Sub Frame=6, ts=12, 2nd ofdm symbol
Q12. What is SSS, which sequence is using in SSS?
Ans. SSS stands for Secondary Synchronization Signal.

 SSS have special modified symbols but not follow zadoff-chu

sequence. it has 2 formula 1st formula used for odd criteria and 2nd
is used for even criteria. The output of formula contains 1 and -1,
here 1=>1+0j and -1=>-1+0j. so there is no imaginary Axis. so
graph is below:

only 2 angle (0' and 180').

Note** we don't use these angle for another symbols.

Q13. What kind of information SSS Carry?

Ans. It provide cell group id total 168 start from [0-167]

Q14. What is the location of SSS in Type-1 Frame structure?

Ans. SSS present twice in every Radio frame of Type-1 (fdd) frame
structure.

 Middle 62 sub-carriers (out of total 72 sub-carriers), top 5 and

bottom 5 sub-carriers are null of same ofdm symbol where SSS
present.
 Sub-frame no.0 and 5.
 time slot (ts) 0 and 10th.
 And second last OFDM symbol either Normal Cyclic or
Extended Cyclic prefix.
Q15. What is the location of SSS in Type-2 Frame structure?
Ans. SSS also present twice in Radio Frame in Type-2 (TDD) frame
structure.

 Sub Frame=0, ts=1, last ofdm symbol, middle 62 subcarrier.

 And Sub Frame=5, ts=11, last ofdm symbol

Q16. How UE calculate PCI?

Ans. PCI = 3 * Ncellgroupid + Nsectorid

 PCI = 3 * SSS + PSS

 PCI = 3 * 167 + 3
 Total [504] PCI are available in LTE.

Q17. After Calculate PCI how UE validate PCI, is it correct or not?

Ans. UE read Reference Signal for PCI validation and chennel
estimation.

Q18. What is the role of System Informations in Power on procedure?

Ans. System Information (SI) carry MIB and SIB1 to SIB12
information. And these SI gathers lots of parameters info which is
usefull to UE.

Q19. What is the difference between MIB and SIB in LTE?

Ans. MIB is 24 bit length system information block called Master
Information Block carry:

 3-bit Bandwidth information

 3-bit Phich information
 8-bit SFN (system frame number)info.
 10-bit Reserved
 And periodicity of 40ms in LTE.
SIB carry
 Cell Access,
 Cell-reselection,
 Frequency band indicator,
 SIB2-to-SIB12 scheduling information and much more.
 SIB1 periodicity in LTE is 80ms and present in subframe no. 5

Q20. What is P-compensation in cell selection procedure?

Ans. P-compensation is a maximum UE transmit power level may
use for cell Rach(read system information) minus maximum RF
output power of UE in dBm

Pcompensation max(UE_TXPWR_MAX_RACH-P_MAX,0)(dB)

Q21. What is p-max in p-compensation?

Ans. The p-max is maximum RF output power of the UE, and its measure in
dBm (decibels milliwatt)

Q22. What do you mean by cell priority in lte?

Ans. When our UE is switch on and a operator have multiple RAT available
on a cell then our UE select a 1st frequeny based on priority. For eg TDD
have maximum priority than FDD
Priority RAT technology

7 TDD

6 FDD

5 UTRA

4 GERAN
Note** above table is a example, only for understanding. Operators sets
priority according their network radio conditions.

Q23. How many types of Priority available in lte?

Ans. In LTE there are total 8 [0-7]types of priorities define. Priority 0 is the
lowest and priority 7 is the highest. All priority information present in SIB3
as Cell reselection information elements. And specification no. Is 36.331
(3GPP TS of RRC Layer).

Q24. What is Suitable Cell and Acceptable Cell what is the difference
between them?
Ans. When a UE is switch on it tries to camp on in a normal service, or a cell
provide normal services to every UE is called suitable cell.
Acceptable cell's are restricted for normal services but allow emergency
calls.

Q25. What is Barred Cell and Blacklisted Cell and difference between
them ?
Ans. Barred cell services are barred for normal class users like AC 0-9. But
are available for user who have AC 10-15. for eg AC-15 is for PLMN users
only. In another term its called a user who have class 15 sim-card can utilize
the services of barred cell (reserved cell).
        Blacklisted cell are those cell which are blacklist for a particular radio
network, these blacklisted cell can be inter, intra or inter-rat, A UE should
not consider these cell while sending measurement report, handovers events
or cell-re-selection criteria and save time and select a new cell faster and
reduce the neighbor cell list size.

Q26. What are Access Class (AC), How many AC are available in lte?
Ans. Access Class provide information to network that this is a normal user
or high priority user, behalf of that a EnodeB decide it have to provide the
resource to particular user or not, when EnodeB have less resources
available.
For eg a EnodeB have limited resource and suddenly no. Of users are
increase on site and Enodeb is unable to provide resource to every UE so it
restrict some UE and allocate available resources to particular users only
behalf of their AC.
In LTE we have 16 types of AC
 AC 0-9 for normal users only,
 AC 10 for emergency eg: police, ambulance, fire-brigade etc,
 AC 11 and 15 for PLMN users (operators use)only,
 AC 12 for security services users, eg: policemen, intelligence officers,
detective officers,
 AC 13 for utility services eg: water, electricity, gas services,
 AC 14 for emergency eg: disaster time govt provide some emergency
no.
Q27. From where UE get Barring information?
Ans. Barring information & Barring factor of a AC present in SIB2      MO-
Signalling
AC Barring Factor [0 to 0.95]
AC Barring Time [4,8,16,32,64,128,256,512 seconds]
AC Barring Step [0.05]
MO-Data
AC Barring Factor [0 to 0.95]
AC Barring Time [4,8,16,32,64,128,256,512 seconds]
AC Barring Step [0.05]

Q28. What do you mean by Barring Factor, Barring Step, Barring

Time?
Ans. AC Barring Factor [0 to 0.95] means how long, for a duration a UE treat
this cell as a barred.
Barring Time [4,8,16,32,64,128,256,512 seconds] means how much time
duration a cell is barred for AC user.

Q29. What is the duration's of above Barring Information Elements

have?
Ans. Barring Factor 0 to 0.95
Barring Time 4,8,16,32,64,128,256,512 seconds
Barring Step 0.05

Q30. What kind of Information is carry in MIB==>PHICH?

Ans. Master information block carry PHICH of 3 bits:-
PHICH 1-bit [normal or extended cyclic prefix info]
PHICH 2-bit [resource allocation info 1/6, 1/2, 1, 2] based on these value
identifies the ng groups of DL Resource blocks.

Que01. If AS layer provide all the PLMN list in a geographical

area then what NAS layer will do?
Que02. Is the entire PLMN list is visible for all the UE’s
present in a network?

Que03. Is a UE can make PLMN list at that area where

network is not available?

Que04. If a user purchase a sim-card from a particular circle

and switched on their device into another circle what
procedure ue will follow?

Que05. How many PLMN ids’ can be present in PLMN list?

Que06. When you power on your UE and AS layer search all

PLMN and create a list then how our sim is verified that this
is my PLMN?

Que07. Is your physical layer have own plmn list which need
to provide to higher layer?

Que08. What information UE het from PSS & apart from that?

Que09. How UE get the TS0 - to - TS19 ofdm boundary that

there are 6 ofdm symbols or 7 ofdm symbols in a slot?

Que10. What is the importance of MIB?

Que11. We have total 1024 SFN in lte means 210 -1 [0--

1023], but in MIB total SFN size is 8-bit what is the reason
 here?

Que12. In physical layer how many bits are align to MIB?

LTE FUNDAMENTALS
LTE/EPS Mobility Areas
Mobile Country Code(MCC):
(i)   MCC Represents the country that a entity belongs to!
(ii)  It’s a 12 bits.
o     Ex: 404, 405  India , 310  USA
Mobile Network Code(MNC):
(i)    MNC Represents the Network that a entity belongs to!
(ii)   It’s a 12 or 8 bits depends on MNC number.
Public Land Mobile Network(PLMN):
(i)    Represents a operator’s Network in a country!
(ii)   Either 20 bits or 24 bits.
  PLMN ID = MCC +  MNC
o   EX1: 404 07 : IDEA A.P, 404 13: VODAFONE, A.P
o   EX2: 272 07 : ELR IRELAND , 310 13 : VERIZON, USA
                 
GUMMEI :Global Unique MME ID: Unique in the world. see 5G identities
MCC + MNC + MMEGID + MMEID
PLMN ID + MMEGID +MMEID
MMEIGID: It’s a MME group Id, When more than two IDs serve together to
a set of common list of TAI. This arrangement is known as MME pool and
make a Groups of MME.
GLOBAL ENB-ID: Unique in the world
         MCC + MNC + MACRO ENB  ID
         PLMN ID + MACRO ENB  ID
Cell Identifications: When the UE is in Connected State, Network Knows
the UE’s Position at Cell Level!
(i)Cell Identification(CI):  Unique in a PLMN and 28 Bit Number
                                      
(ii)ECGI: Evolved Cell Global Identity: Unique in the World.
         ECGI = MCC + MNC +  CI
          ECGI = PLMN ID +  CI
                                     
(iii)PCI: Physical Cell ID: Used for Radio Operations
 -(0-503) 504 PCIs are repeated in a PLMN
  -Adjacent Cells must be configured with different PCIs.
TAI : Tracking Area Identity: Globally Unique
o   Tracking Area = Several Cells
o   PLMN Area = One or More Tracking Areas.
o   Each Area shall have an Unique Tracking Area Code - TAC
             TAI = MCC + MNC + TAC
             PLMN +  TAC
o   Ex: 404 07 56, 404 07 72, 404 13 72, 310 13 72
o   Whenever UE shifts from one TAI to another TAI, it would
perform an Tracking Area Update(TAU)
o   Network [MME] always maintains the present TAI
of a UE whenever the UE is in Registered State!    
TAI Lists:
o  Network May Group the Tracking Areas into a TAI List and Requests UE to no
t report the Tracking Area Updates if its present in one of the TAI from
the List!
o  So UEs need to perform TAU only if it
enters into a TAI Which is not part of TAI List!
o  This feature is also called as Multi-Tracking Area Registration!

UE IDENTIFICATION NUMBERS
UE PERMANENT IDs:
      IMSI: International Mobile Subscriber Identification
      IMSI = MCC + MNC + MSIN
      [OR] PLMN ID +  MSIN
      MS-ISDN(Mobile Subscriber- ISDN):Subscriber Number For ISDN
Services[Only for CS Services]
      CC + NDC +  SN
      IMEI(International Mobile Equipment Identity):Unique Identity for
Mobile Devices
     TAC + FAC + SN +  SV
UE Temporary IDs: To see 5GNR UE identities
         C-RNTI( Cell Radio Network Temporary Identity):Allocated by eNB when UE
Connects to it!
         GUTI( Global Unique Temporary Identity):Allocated by MME when UE
Successfully attaches to it!
   MCC + MNC + MMEGID + MMEID + M-TMSI
     eNB S1AP UEID, MME S1AP UEID

     MME S11 GTPC TEID, SGW S11 GTPC TEID

     SGW S5/S8 GTPC TEID, PGW S5/S8 GTPC TEID

      SeNB X2AP UE ID, TeNB X2AP UEID: During HO

UE Temporary IDs Diagram:

UE STATES
         RRC-IDLE <-> RRC-CONNECTED
         ECM-IDLE<-> ECM-CONNECTED
         EMM-DEREGISTERED <-> EMM-REGISTERED

LTE UE Attach Interview Que Ans

1-10
Q01. Which layer carry Attach Request Message in uplink direction?
Ans. RRC layer piggyback attach request message (a NAS message) in
uplink direction, because NAS layer not present in EnodeB. Once enodeb
received this message it forward this message to MME.
Q02. What are the information elements are presents in attach request
message?
Ans.
Q03. How UE get PDN connectivity request?
Ans. UE get default PDN connectivity information from Access Point Name,
yes APN have default PDN information. For eg internet (internet also a part of
PDN types)

Q04. What is the timer of Attach message? And it duration?

Ans. When UE send attach request it’s start timer T3410 and it’s duration is
15s.

Q05. What is the meaning of EPS Mobility Management (EMM) and what
kind of information it carry?
Ans. EMM is a sublayer of nas layer and provides the mobility management to
user equipment. EMM have 3 procedures:-
(1) EMM common procedure, (2) EMM specific procedure, (3) EMM
connection management procedure

**Note: All EMM procedure are describes in NAS layer interview que ans
page.

Q06. In which case UE carry IMSI or GUTI? Elloborate them?

Ans. GUTI always generate by MME and allocated to ue in Attach Accept
message.
When a user brought a new sim-card from market, at that time ue don’t have
any GUTI or S-TMSI. So we send attach request to mme with IMSI only for
1st time. Once ue received Attach accept and mme allocate GUTI then next
time we send attach request with GUTI and S-TMSI.

Q07. What are the Information Element are present in Authentication

Request Message?
Ans. Authentication Request message is transferred my MME 2 times, 1st time
mme send auth. Request ot HSS side and 2nd time it send to UE side.
Q08. What are the Information Element are present in Security Mode
Command?
Ans.
Q09. Suppose IMSI and GUTI both are not available, then what UE will
do?
Ans. In this case UE use IMEI to send attach request to MME.

Q10. How UE calculate Authentication Token and Random Value?

Ans. When MME send Authentication information request to HSS it send SN
ID (sequence identity). The authn. Token drive from k key present in hss. After
that hss sent back it to mme inside authen. token SN ID also present and
mme stored this information. And do same procedure in UE side also. Once
ue sent back response mme validate them.

Random value also present in HSS and USIM both and applied EPS AKA
Algorithm and drive XRES in hss and RES in UE.
Why Security Mode Command are using 2 times in Attach Procedure?
Q12. What is the difference between Attach Request, Attach Accept and
Attach Complete? And in which messages these informations is
present?
Q13. What is difference between Radio Bearer and EPS Bearer?
Q14. How many Radio Bearers are uses in LTE?
Q15. How many EPS Bearers are uses in LTE?
Q16. Which type of Attach Procedure UE will do to utilize IMS Services?
Q17. What are the information elements present in Initial Context Setup
and which protocol is using?
Q18. Once UE send Attach Request toward EnodeB then how EnodeB
identified the particular MME?
Q19. Attach Failure Causes?
Q20. Detach call flow(Procedure)?
Q21. Who generate IP address for UE? In which message UE get this IP
address?
Q22. How many maximum IP addresses a UE can have in lte?
Q23. How MME select S-Gw and P-Gw in LTE?
Q24. How MME get the PDN address of a specific UE in attach
procedure?
Q25. What are the Information Element present in Create Session
Request?
Q26. What are the causes of Authentication Failure?
Q27. What are the causes of Security Mode Command Failure?
Q28. What is Service Request?
Q29. What is the difference between Service Request and Extended
Service Request?
Q30. The RRC-Connection Re-configuration message receive by UE and
send by UE in Attach procedure in Which Signalling Radio Bearer(SRB)?
Q31. What is UE Capability Request,What are the Information Elements
present in UE Capability Request?
Q32. Who send Capability Request message to UE, Why Capability
Request is transmition in Attach Procedure 2 times?
Q33. How many Default and Dedicated Bearer a UE can establish in
LTE?
Q34. Where default bearer is present if UE don’t have DL/UL data?
Q35. Suppose UE have only partial Default Bearer present and suddenly
P-Gw receive Downlink Data then how MME re-activate default bearer?