HOME JOBS SITE MAP CONTACT US
COMPANYNEWS & EVENTSPRODUCTSCUSTOMERS & SOLUTIONSPARTNERSSUPPORT
UMA/GAN FMC

Customers

WIRELESS ACCESS AND FMC SOLUTIONS

> SIP SERVICES OVER 3G AND RCS
> LTE voice & IC
> WiMAX access
> Femtocell access
> UMA/GAN FMC
> 3GPP I-WLAN

WIRELINE SOLUTIONS

> IMS wireline enterprise services
> IP trunking for PBXs

CABLE SOLUTIONS

INTERCONNECT AND PEERING SOLUTIONS

> Interconnect & Peering
> GSMA IPX proxy

ENTERPRISE AND CONTACT CENTER SOLUTIONS

> SBCs IN THE ENTERPRISE
> SBCs IN THE CONTACT CENTER
> IP TRUNKING FOR PBXs

Government solutions

IMS & SBCs

> 3GPP IMS R 7
> ETSI TISPAN R 1
> PacketCable R 2.0
> MSF R 3

     Download PDF
UMA/GAN FMC solution

Mobile operators are turning to multiple fixed-mobile convergence (FMC) solutions to leverage the investment in their core services infrastructure to increase revenue opportunities and customer loyalty. One approach to FMC involves the 3GPP Unlicensed Mobile Access (UMA) architecture to enhance the subscriber experience with attractive tariffs and increased radio coverage while reducing backhaul and macro RAN costs for the operator. The UMA or Generic Access Network (GAN) architecture uses IPsec tunnels to deliver GSM-signaled voice and packet data services to dual mode handsets on WiFi access networks connected to the Internet or a managed IP network. Optionally, these services can be delivered via a femtocell to GSM handsets or via a terminal adapter to POTS phones. 

Applications

Using UMA, GSM mobile operators can further facilitate fixed-mobile substitution into areas with poor radio coverage by delivering voice and packet data services from their existing mobile core network to multiple types of access points including:  

  • Dual mode WiFi/ GERAN (GSM EDGE Radio Access Network) endpoints with UMA client
  • Femtocell access points supporting existing GSM and UMTS  handsets
  • Terminal adaptors to offer a fixed line telephony service

Challenges 

The Internet, over which UMA-based services are transported, is a radical departure from the controlled and secure radio spectrum in which mobile operators typically deliver their voice, data and entertainment services. Delivering these services over the Internet introduces unique challenges, including:

  • Security – protect network resources from attack and ensure privacy of subscribers’ communications
  • Service reach – deliver services over untrusted access networks or to handsets protected by firewalls
  • SLA assurance – manage network load and requests for service to ensure service availability and quality

To address these issues multiservice security gateways (MSG) are used at the border between the mobile operator’s core network and the Internet to solve the challenges associated with providing trusted, first class interactive communication services.

Solution

Acme Packet’s UMA/GAN solution consists of its Net-Net® security gateway deployed at the Internet-access border of a mobile operator’s network. Acme Packet’s MSG fulfills the role of the UMA Security Gateway (SeGW) and is designed to satisfy the critical requirements for delivering voice and data services securely over the untrusted Internet and WiFi access networks. It is responsible for controlling IPsec tunnels used to transport GSM-signaled voice and packet data services to the endpoint or femtocell.

Security – There are security risks to UMA-based applications as GSM-signaled voice and packet data services must be tunneled through an untrusted and unmanaged Internet access network to a core network. Acme Packet’s MSG provides that secure bridge between the customer premises and the mobile operator’s network—protecting both the service core as well as subscriber identity and confidentiality.

 Feature

Benefit
3GPP Wm interface (DIAMETER) to AAA servers 
  • Controls access to services
  • Authenticates endpoints
IPsec tunnel mode encryption/decryption of GSM voice and packet data services
  • Ensures user confidentiality and prevents identity theft
  • Mitigates service theft
  • Ensures integrity of the payload and protects  tampering
Hardware-based packet filtering and access control
  • Prevents layer 3 and layer 4 denial of service (DoS) attacks on the MSG
  • Prevents non-malicious overloads of the service core
  • Provides service to legitimate endpoints in the event of a DoS/DDoS attack
  • Dynamically accepts or rejects traffic based on device behavior
Monitoring and reporting
  • Provides alarms for attacks and overloads
  • Aids attack response and fraud investigation with audit trails
  • Provides secure monitoring and management access to protect from unauthorized personnel

Service reach maximization – Subscriber dual-mode handsets or femtocells are generally located behind untrusted access networks not controlled by the mobile operator, presenting challenges in delivering services to that endpoint. Acme Packet Net-Net SG provides NAT traversal and multiservice virtualization to extend subscriber reach and types of services supported.

 Feature

Benefit
Multiservice architecture with application virtualization
  • Supports local partitioning for multiple local MSGs with resource dedication to specific services (e.g., residential and enterprise, retail and wholesale, or multiple MVNO customers)
  • Reduces the number of network elements and lowers capital expenditures
IP address allocation
  • Assigns IP addresses to endpoints via local address pools or RADIUS VSAs 
NAT traversal
  • Enables services to traverse premise-based NAT devices by using UDP encapsulation 
Dead peer detection 
  • Permits efficient scaling of resources by preventing exhaustion of encryption resources 
  • Aids troubleshooting by altering administrators of unreachable end points

SLA assurance – Voice quality and service availability can be compromised by oversubscribed network resources. The Acme Packet Net-Net SG uses upstream and downstream policers to ensure availability of dual mode handsets, femtocell access points, and the core network.

 Feature

Benefit
Overload prevention for core network elements (DNS servers, UMA network controllers, media gateways, etc.)
  • Prevents RTP service and bandwidth abuse by endpoints
  • Assures network and service availability to subscribers
Endpoint overload protection
  • Prioritizes GSM signaling and voice over Internet and data traffic
  • Prevents downlink traffic from overwhelming endpoints

©2003-0 Acme Packet, All Rights Reserved, Notices.