Prowid logo — programming courses PROWIDIT Education Academy

5G: NR, 5GC Core and VoNR

The 5G: NR, 5GC Core and VoNR course — IMT-2020 (eMBB, URLLC, mMTC), NSA EN-DC and SA, 5G NR (FR1/FR2, SCS, BWP, SSB, massive MIMO, CU/DU), 5GC SBA (HTTP/2 SBI, NRF, SCP, AMF, SMF, UPF, AUSF, UDM, PCF, NSSF, CHF, SEPP), NGAP, NAS-5GS, PFCP, QFI/5QI, SUPI/SUCI, S-NSSAI, Network Slicing, VoNR, EPS fallback and Open5GS + UERANSIM / srsRAN / free5GC
165 lessons · 13 labs · project
5 practicums · 31 troubleshooting cases
After the LTE/4G and EPC Core, IMS, VoLTE, and vIMS and Cloud Core (NFV) courses
Individual
Per month 200 AZN
Group
Per month 150 AZN
Paying for the full course in a group
15% discount
Installments
50/50
Subscription
from 30 AZN a month
How does a single 5G network simultaneously deliver multi-gigabit mobile broadband (eMBB), millisecond industrial control (URLLC) and connectivity for millions of sensors per square kilometer (mMTC), and why did the 5G Core (5GC) replace legacy point-to-point Diameter and GTP-C interfaces with a cloud-native Service-Based Architecture (SBA) running over HTTP/2 and JSON? In this capstone fourteenth course of the Telecom track, we dissect the 5G System (5GS = NG-RAN + 5GC) step by step, message by message, following 3GPP Releases 15–19 (TS 23.501, TS 23.502, TS 23.503, TS 24.501, TS 38.300, TS 38.401, TS 38.413, TS 29.244, TS 29.500, TS 29.510, TS 33.501). Foundations and architecture options: why 5G was created, IMT-2020 requirements, Non-Standalone (NSA Option 3/3x with EN-DC dual connectivity and EPC enhancements) vs Standalone (SA Option 2). The 5G NR air interface and NG-RAN: FR1 and millimeter-wave FR2 spectrum, scalable OFDM numerology (SCS 15/30/60/120 kHz), frame and slot structure, Bandwidth Parts (BWP), Synchronization Signal Blocks (SSB) and beam sweeping, massive MIMO and beamforming, TDD patterns, the SDAP/PDCP/RLC/MAC/PHY and RRC stack, the RRC_INACTIVE state, gNB and ng-eNB nodes, CU/DU functional split over F1, Xn and NG interfaces, and an O-RAN overview. The 5GC Service-Based Architecture: SBA concepts, producer/consumer service models, the HTTP/2 + REST + JSON + OpenAPI Service-Based Interface (SBI), NRF registration, discovery and OAuth2 tokens, Service Communication Proxy (SCP), AMF, SMF, UPF, AUSF, UDM, UDR, PCF, NEF, AF, NSSF, SMSF and CHF functions, reference points N1–N15, Huawei 5GC products (UNC, UDG, UDM, UPCF) and EPC-to-5GC node mapping. Protocols and identities: NAS-5GS (5GMM and 5GSM), NGAP, PFCP session and rule management (PDR, FAR, QER, URR, BAR), GTP-U with the PDU Session Container and QFI, SUPI and GPSI, SUCI privacy protection using ECIES public-key cryptography, 5G-GUTI, PEI, DNN and S-NSSAI (SST and SD). End-to-end procedures: 6-phase Registration (5G-AKA and EAP-AKA', NAS Security Mode and key hierarchy, Nudm_UECM/SDM, PCF access and mobility policies), PDU Session establishment, modification and release, N4 sessions, SSC modes 1/2/3, QoS Flows (QFI, 5QI table, SDAP two-step mapping), UE Route Selection Policy (URSP), Ethernet PDU and 5G LAN, URLLC features, RM/CM states, Paging, and Xn/N2 handovers. Network Slicing (NSSF, NSSAA), Multi-access Edge Computing (MEC with UL CL and branching point), NWDAF analytics, NEF API exposure, N26 interworking with 4G EPC and combined 4G/5G nodes. Converged charging with CHF (Nchf), Voice over NR (VoNR), EPS fallback to LTE, SMS over NAS, SEPP roaming security (N32, TLS and PRINS), Huawei UNC/UDG/UDM/UPCF operations, KPI and capacity dimensioning, 13 hands-on labs (Open5GS + UERANSIM, srsRAN Project in ZMQ mode and free5GC), 5 practicums, 31 real-world troubleshooting cases and a final capstone project.

Enrollment for a new group is open — send a request to reserve your seat

Lessons are taught live in Azerbaijani and Russian.

Enroll in the course Free trial lesson

Or study on your own in your personal account → with a subscription from 30 AZN a month

Before you start

Complete IP Networks for Telecom Engineers, LTE/4G and the EPC Core, IMS: Multimedia Core Network, VoLTE, VoWiFi and SRVCC, and vIMS and Cloud Core: NFV, MANO, Containers first: HTTP/2, TLS and mTLS, JSON, DNS, SCTP, GTP-U tunneling, OFDM and MIMO fundamentals, EPC architecture and procedures (Attach, EPS Bearers, QCI, PCC, CUPS and PFCP), IMS/VoLTE call flows, and cloud-native infrastructure (VNFs/CNFs, Kubernetes, microservices) are used here without repeating the basics.

How the course works

One topic, one lesson: interactive slides, multi-protocol signaling ladder diagrams spanning NGAP, NAS-5GS, PFCP, HTTP/2 SBI and SIP, animations of NR numerology, SSB beam sweeping, UPF selection, QoS Flow mapping and Network Slicing, KPI and core capacity calculations, exercises with automated answer checking, and study notes in three languages (az, ru, en). Every lesson includes a worked example, a “What can go wrong and how to find it” section, practice tasks and a self-check. Hands-on labs run on the track Docker testbed using Open5GS (5GC) + UERANSIM, with advanced labs on srsRAN Project (in ZMQ virtual radio mode) and free5GC.

Course outline

01

Introduction to 5G

  • why 5G was created, the three usage scenarios (eMBB, URLLC, mMTC)
  • IMT-2020 performance targets
  • 3GPP Releases 15–19 evolution
  • 5GS = NG-RAN + 5GC overview
  • Non-Standalone NSA (Option 3/3x and EN-DC dual connectivity)
  • EPC impacts in NSA and Standalone SA (Option 2) migration comparison
02

5G NR radio interface

  • FR1 and FR2 frequency ranges
  • scalable numerology (SCS 15/30/60/120 kHz)
  • frame, slot and symbol structure
  • Bandwidth Parts (BWP), Synchronization Signal Block (SSB) and beam sweeping
  • massive MIMO, beamforming
  • TDD patterns, the NR protocol stack (SDAP, PDCP, RLC, MAC, PHY and RRC) and the RRC_INACTIVE state
03

NG-RAN architecture

  • gNB and ng-eNB base stations
  • CU/DU functional split and the F1 interface
  • Xn and NG interfaces, O-RAN overview
  • and a deployment and radio parameter practicum
04

5GC core architecture

  • Service-Based Architecture (SBA)
  • NF services (Namf, Nsmf — producer and consumer roles)
  • the SBI bus over HTTP/2
  • REST, JSON and OpenAPI
  • NRF (registration, discovery, OAuth2)
  • Service Communication Proxy (SCP)
  • AMF, SMF, UPF, AUSF/UDM/UDR
  • PCF/NEF/AF, NSSF/SMSF/CHF functions
  • reference points N1–N15
  • NRF and DNS in an SA network
  • Huawei 5GC products (UNC, UDG, UDM, UPCF per documentation) and EPC-to-5GC node mapping
05

5G protocols

  • NAS-5GS (5GMM and 5GSM)
  • NGAP, PFCP (sessions and PDR, FAR, QER, URR, BAR rules)
  • GTP-U in 5G and QFI in the extension header
  • SBI HTTP/2 request/response anatomy
  • and a multi-protocol message dissection practicum
06

5G identities

  • SUPI and GPSI, SUCI privacy protection (ECIES encryption with the home network public key)
  • 5G-GUTI and 5G-S-TMSI, PEI and DNN
  • and S-NSSAI (SST and SD)
07

Registration and access security

  • registration types (initial, mobility, periodic, emergency)
  • the 6 phases of Registration (AMF selection, 5G-AKA and EAP-AKA', NAS Security Mode and key hierarchy, Nudm_UECM and Nudm_SDM, PCF access and mobility policy, Registration Accept and Complete)
  • UE Configuration Update
  • NAS Transport (SMS, UE policies)
  • Deregistration and a registration trace practicum
08

PDU Sessions, QoS and policy control

  • the PDU Session concept
  • SMF and UPF selection, PDU Session Establishment
  • N4 session procedures, PDU Session Modification and Release
  • AN Release to CM-IDLE, PDU session types (IPv4, IPv6, IPv4v6, Ethernet, Unstructured) and SSC modes 1/2/3
  • UPF reselection in SSC mode 3
  • QoS Flows and QFI, the standardized 5QI table
  • QoS rules and SDAP mapping to DRBs
  • Npcf_SMPolicyControl, UE Route Selection Policy (URSP)
  • Ethernet PDU and 5G LAN
  • URLLC features, and a PDU session and QoS trace practicum
09

5GC laboratory

  • Open5GS, UERANSIM, srsRAN Project and free5GC overview
  • bringing up the 5GC and UERANSIM testbed
  • provisioning a subscriber in UDM/UDR (SUPI, keys, DNN, S-NSSAI)
  • capturing registration across NGAP
  • NAS-5GS and SBI, decoding HTTP/2 SBI messages in Wireshark
  • NF registration and discovery via NRF
  • capturing PDU Session establishment (PFCP and GTP-U)
  • dissecting PDR, FAR and QER rules
  • configuring 5QI and AMBR in the subscription
  • testing SUCI IMSI encryption
  • failure injection (wrong key, DNN, slice)
  • an advanced lab with srsRAN Project and srsUE over ZMQ
  • and comparing the same scenario on free5GC
10

Mobility management

  • RM and CM state machines
  • Service Request, Paging
  • Xn handover, N2 handover
  • and Mobility Registration Update
11

Network Slicing, MEC, analytics and 4G interworking

  • Network Slicing concepts
  • slice selection with NSSF
  • slicing across RAN and Core
  • Network Slice-Specific Authentication and Authorization (NSSAA)
  • a lab with two slices and two UPFs
  • Multi-access Edge Computing (MEC, UL CL and branching point)
  • NWDAF network analytics
  • NEF API exposure, N26 interworking with 4G EPC
  • combined 4G/5G nodes (SMF+PGW-C, UPF+PGW-U, UDM+HSS, PCF+PCRF)
  • 5G and Time-Sensitive Networking (TSN) overview
  • and IoT in 5G (NB-IoT, LTE-M, RedCap)
12

Charging

  • converged charging architecture (CHF and Nchf services)
  • quota management and CDR generation in 5G
13

Voice, SMS and emergency services

  • IMS over 5GC (P-CSCF discovery, N5/Rx policy control)
  • VoNR registration, VoNR call setup
  • EPS fallback to LTE, SMS over NAS via SMSF
  • 5G emergency calls, 5G positioning with LMF overview
  • and a 5G voice trace practicum
14

Security and roaming

  • 5G security architecture (3GPP TS 33.501)
  • SBI security (mTLS and OAuth2)
  • SEPP and the N32 interface
  • N32 protection (TLS and PRINS)
  • 5G roaming architectures (Home Routed and Local Breakout) and 5G roaming over IPX
15

Huawei practice and operations

  • Huawei UNC baseline configuration objects
  • Huawei UDG baseline configuration
  • Huawei UDM and UPCF subscription and policy provisioning (per documentation)
  • Wireshark filters for 5G (ngap, nas-5gs, pfcp, http2)
  • 5GMM and 5GSM cause codes
  • 5G KPI calculations (registration, PDU sessions, handover, throughput) and 5GC capacity dimensioning
16

Problems, solutions and final project

  • 31 real-world 5G troubleshooting cases (Registration Reject #3 Illegal UE, #7 5GS services not allowed, #11 PLMN not allowed, #15 No suitable cells in TA, #27 N1 mode not allowed and #62 No network slices available; 5G-AKA SQN resynchronization and SUCI decryption failure; NG Setup Failure and unreachable AMF; NRF discovery failure, SBI 403 OAuth2 token rejection, 404 missing UDM subscription, 503 NF overload and expired SBI TLS certificates; PDU session rejection for unsubscribed DNN or disallowed S-NSSAI; SMF–UPF PFCP association failure, no IP traffic despite an active session due to FAR/routing/NAT, and unapplied QoS; Xn handover failure, paging timeout, EPS fallback failure, VoNR IMS registration failure and N26 session loss during 5G ↔ 4G mobility; SEPP/N32 roaming failure; NSA EN-DC SgNB Addition failure; low 5G throughput, subscriber blocked by CHF quota exhaustion, inter-slice interference and wrong slice selection due to URSP)
  • a systematic 5G troubleshooting workflow
  • and the final project — designing and verifying a voice-enabled 5G SA core (registration, PDU session, slicing, VoNR and EPS fallback, NF-to-Huawei product mapping, ladder diagrams, KPIs and acceptance checklist)
How do we teach?

Learning stages

01

Webinar

Students join the lesson live. At the end of each lesson, students are sent a video recording of the class.

02

Homework

Every assignment is based on the topic covered in the webinar. Homework helps you reinforce the material and understand it better.

03

Working with a mentor

The teacher stays in touch with the group both during the course and outside class. Any questions get answered right away.

04

Portfolio

During the course you'll complete several projects on different topics — they'll show employers what you can do.

Self-paced learning

The full curriculum in your personal account

166 topics with theory, examples and practice. The first 4 are free, the rest come with a subscription. Interactive lessons with slides and coding trainers: 165.

Start for free Subscription from 30 AZN a month
Section 1. Introduction to 5G8 topics
  1. Why 5G Was Created: Limits of LTE and New Connectivity Demands
  2. The Three 5G Usage Scenarios: eMBB, URLLC, and mMTC
  3. IMT-2020 Requirements: Throughput, Latency, Density, and Reliability
  4. 3GPP Releases 15–19: From Phase 1 5G to 5G-Advanced
  5. 5GS Architecture Overview: NG-RAN and the 5GC Core
  6. Non-Standalone (NSA): Option 3/3x and EN-DC Dual Connectivity
  7. EPC Impacts in NSA: NR Access Restrictions and Secondary RAT Traffic Reporting
  8. Standalone SA (Option 2) and Comparison of 3GPP Deployment Options
Section 2. 5G NR Radio Interface10 topics
  1. 5G NR Spectrum Ranges: FR1 and FR2
  2. NR Numerology: Subcarrier Spacing (SCS) 15/30/60/120 kHz
  3. NR Frame, Subframe, Slot, and Symbol Structure
  4. Bandwidth Parts (BWP)
  5. Synchronization Signal Block (SSB) and Beam Sweeping
  6. Massive MIMO: Large Antenna Arrays and Spatial Multiplexing
  7. Beamforming: Analog, Digital, and Hybrid Architectures
  8. TDD Patterns in 5G NR: Slot Formats and Network Synchronization
  9. NR Protocol Stack: SDAP, PDCP, RLC, MAC, PHY, and RRC
  10. The RRC_INACTIVE State: Fast Resume and Battery Saving
Section 3. NG-RAN Architecture5 topics
  1. NG-RAN Nodes: gNB and ng-eNB
  2. CU/DU Functional Split and the F1/E1 Interfaces
  3. The Xn and NG Reference Interfaces
  4. O-RAN Architecture: Open Fronthaul and RIC Controllers — Overview
  5. Practicum: 5G Deployment Options and NR Radio Parameter Calculations
Section 4. 5GC Core Architecture15 topics
  1. Service-Based Architecture (SBA): From Point-to-Point Links to a Service Bus
  2. NF Services (Namf_…, Nsmf_…): Producer, Consumer, and Interaction Models
  3. The SBI Protocol Stack: HTTP/2, REST, JSON, and OpenAPI 3.0
  4. Network Repository Function (NRF): NF Registration, Discovery, and OAuth2
  5. Service Communication Proxy (SCP): Indirect Communication and SBI Routing
  6. Access and Mobility Management Function (AMF)
  7. Session Management Function (SMF)
  8. User Plane Function (UPF)
  9. Authentication and Subscriber Data: AUSF, UDM, and UDR
  10. Policy Control and Network Exposure: PCF, NEF, and AF
  11. Specialized 5GC Functions: NSSF, SMSF, and CHF
  12. 5G Reference Points Map: N1–N15 and Their SBI Counterparts
  13. NRF and DNS in an SA Network: How Network Functions Discover Each Other
  14. Huawei 5GC Products: UNC, UDG, UDM, and UPCF (Per Documentation)
  15. Mapping 4G EPC Nodes to 5GC Functions: Architectural Comparison
Section 5. 5G Protocols6 topics
  1. 5G NAS Signaling (NAS-5GS): The 5GMM and 5GSM Sublayers
  2. NGAP Protocol: N2 Control Plane Signaling Between gNB and AMF
  3. PFCP Protocol on N4: Sessions and PDR, FAR, QER, URR, and BAR Rules
  4. GTP-U in 5G and QFI in the PDU Session Container Extension Header
  5. Anatomy of an SBI Request and Response: HTTP/2 Headers, JSON Body, and Status Codes
  6. Practicum: Dissecting NAS-5GS, NGAP, PFCP, GTP-U, and SBI Messages
Section 6. 5G Identities5 topics
  1. Subscriber Identities in 5G: SUPI and GPSI
  2. SUCI: Protecting the IMSI Over the Air with ECIES Public-Key Encryption
  3. Temporary Identities in 5G: 5G-GUTI and 5G-S-TMSI
  4. Permanent Equipment Identifier (PEI) and Data Network Name (DNN)
  5. Network Slice Identifier S-NSSAI: Slice/Service Type (SST) and Slice Differentiator (SD)
Section 7. Registration and Access Security12 topics
  1. Registration Types in 5G: Initial, Mobility, Periodic, and Emergency
  2. Registration Phase 1: Registration Request and AMF Selection
  3. Registration Phase 2: 5G-AKA Mutual Authentication
  4. EAP-AKA' Authentication: Unified Security Across 3GPP and Non-3GPP Access
  5. Registration Phase 3: NAS Security Mode and the 5G Key Hierarchy
  6. Registration Phase 4: UDM Registration (Nudm_UECM) and Subscription Retrieval (Nudm_SDM)
  7. Registration Phase 5: Access and Mobility Policy Control (Npcf_AMPolicyControl)
  8. Registration Phase 6: Registration Accept and Registration Complete
  9. UE Configuration Update (UCU): Updating UE Parameters Without Re-Registration
  10. NAS Transport Procedures: Carrying 5GSM, SMS, URSP Policies, and LPP Payloads
  11. Deregistration Procedures: UE-Initiated, AMF-Initiated, and UDM-Initiated
  12. Practicum: End-to-End 5G Registration Trace Analysis
Section 8. PDU Sessions, QoS, and Policy Control17 topics
  1. The PDU Session Concept: Logical Connectivity Between the UE and a Data Network
  2. SMF and UPF Selection: S-NSSAI, DNN, Location, and DNAI Criteria
  3. PDU Session Establishment: Step-by-Step Call Flow from UE to UPF
  4. N4 Session in Detail: How SMF Programs UPF Rules During PDU Session Setup
  5. PDU Session Modification: Adding and Updating QoS Flows
  6. PDU Session Release: UE-Initiated, SMF-Initiated, and PCF/UDM-Initiated
  7. AN Release Procedure: Transition to CM-IDLE and N3 Tunnel Deactivation
  8. PDU Session Types (IPv4, IPv6, IPv4v6, Ethernet, Unstructured) and SSC Modes
  9. UPF Reselection in SSC Mode 3: Make-Before-Break Anchor Relocation
  10. QoS Flows and the QoS Flow Identifier (QFI)
  11. The Standardized 5QI Table: Non-GBR, GBR, and Delay-Critical GBR Classes
  12. QoS Rules and Two-Step Mapping to Radio Bearers (SDAP and DRB)
  13. Session Management Policy Control: Npcf_SMPolicyControl Between SMF and PCF
  14. UE Route Selection Policy (URSP): Mapping Applications to Slices and PDU Sessions on the Device
  15. Ethernet PDU Sessions and 5G LAN-Type Service
  16. URLLC Mechanisms: Redundant Transmission, PDCP Duplication, and Sub-Millisecond Latency
  17. Practicum: PDU Session, PFCP Rules, and QoS Flow Trace Analysis
Section 9. 5GC Laboratory14 topics
  1. Track testbeds: how they work, how to start them, where to capture container traffic
  2. 5G Lab Tools: Open5GS, UERANSIM, srsRAN Project, and free5GC
  3. Lab: Deploying the Open5GS 5GC Core and UERANSIM on the Testbed
  4. Lab: Provisioning a 5G Subscriber in UDM/UDR (SUPI, Keys, DNN, S-NSSAI)
  5. Lab: Capturing and Analyzing 5G Registration (NGAP, NAS-5GS, and SBI in One Trace)
  6. Lab: Decoding HTTP/2 SBI Requests and Multipart JSON Payloads in Wireshark
  7. Lab: NF Registration, Heartbeat, and Service Discovery via NRF
  8. Lab: Capturing PDU Session Establishment and GTP-U User Plane Traffic with QFI
  9. Lab: Dissecting PDR, FAR, QER, and URR Rules on the N4 Interface
  10. Lab: Configuring 5QI, Session-AMBR, and Dedicated QoS Flows in the Subscription
  11. Lab: Enabling SUCI Privacy Protection (ECIES Profile A/B) on UERANSIM and Open5GS
  12. Lab: 5G Failure Injection and Diagnosis (Wrong Key, Unsubscribed DNN, Invalid Slice)
  13. Advanced Lab: Full 5G NR Radio Stack with srsRAN Project (gNB) and srsUE in ZMQ Mode
  14. Advanced Lab: Running and Comparing the Same 5G SA Scenario on free5GC
Section 10. Mobility Management in 5G6 topics
  1. Registration Management (RM) and Connection Management (CM) State Machines
  2. Service Request in 5G: Waking Up from CM-IDLE and Selective N3 Tunnel Activation
  3. Paging in 5G: Core-Initiated Paging (N2), RAN-Initiated Paging (Xn), and Paging Priority
  4. Xn-Based Handover: Direct Inter-gNB Preparation, Execution, and Path Switch
  5. N2-Based Handover: Core-Assisted Handover When Xn Is Unavailable or AMF/UPF Changes
  6. Mobility Registration Update: Moving Across Registration Areas and AMF Pools
Section 11. Network Slicing, Edge Computing, and Verticals12 topics
  1. Network Slice Concept: S-NSSAI, SST, SD, and NSI
  2. Slice Selection with NSSF and AMF Re-allocation
  3. End-to-End Slice Isolation Across RAN, Transport, and 5GC Core
  4. Network Slice-Specific Authentication and Authorization (NSSAA)
  5. Lab 9: Configuring Two Independent Network Slices in Open5GS
  6. Multi-Access Edge Computing (MEC) and Local Traffic Offload via UL CL
  7. Network Data Analytics Function (NWDAF): Data Collection and Closed-Loop AI
  8. Exposing Network Capabilities via NEF, CAPIF, and Open Gateway (CAMARA)
  9. 4G EPC and 5GC Interworking: N26 Interface and Combined Nodes
  10. Converged 4G/5G Core (Combo Core) Architecture in Operator Networks
  11. Industrial 5G: TSN Integration (5G Bridge) and Non-Public Networks (NPN)
  12. IoT in 5G: RedCap (NR-Light), eRedCap, and NB-IoT / LTE-M Connected to 5GC
Section 12. Convergent Charging in 5GC (CHF)2 topics
  1. Converged Charging Architecture: CHF and Nchf_ConvergedCharging (N40)
  2. Quota Management in CHF, PFCP URR Reporting, and 5G CDR Generation
Section 13. Voice, SMS, and Positioning in 5G: VoNR, EPS Fallback, SMSoNAS, and LMF8 topics
  1. Voice Architecture in 5G: IMS over 5GC, VoNR, and EPS Fallback Compared
  2. VoNR Registration: IMS PDU Session (5QI=5), P-CSCF Discovery, and SIP REGISTER
  3. VoNR Call Setup: SIP INVITE, N5 Policy Authorization, and Dedicated 5QI=1 Flow
  4. EPS Fallback: Moving a Voice Call from 5G NR to 4G VoLTE
  5. SMS in 5G: SMS over NAS (SMSF) vs SMS over IP (IMS)
  6. Emergency Calls (112/911) in 5G: Emergency Registration, SOS PDU Session, and E-CSCF
  7. High-Precision Positioning in 5G: LMF, LPP/NRPPa Protocols, and Radio Methods
  8. Practicum 5: Analyzing VoNR and EPS Fallback Signaling Traces (NGAP, NAS, SIP, N5)
Section 14. 5GC Security and Roaming: SBI TLS/OAuth2, SEPP, and N326 topics
  1. 5G Security Architecture (3GPP TS 33.501): Six Security Domains and 4G Comparison
  2. SBI Bus Security: PKI, mTLS 1.3 Certificates, and OAuth 2.0 (JWT) via NRF
  3. Security Edge Protection Proxy (SEPP) and the N32 Interface (N32-c and N32-f)
  4. Two N32 Protection Modes: End-to-End TLS and PRINS (JWE/JWS Through IPX)
  5. 5G Roaming Architecture: Local Breakout (LBO) and Home-Routed (HR) Modes
  6. 5G Roaming over IPX: DNS Resolution, N32/N9 Routing, and VoNR Roaming
Section 15. Operations, MML Commands, Wireshark, and KPIs7 topics
  1. Huawei UNC (AMF + SMF) Operations: MML Commands, Interfaces, and Subscriber Checks
  2. Huawei UDG (UPF + PGW-U) Operations: Checking N4 PFCP, IP Pools, and N3/N6 Tunnels
  3. Huawei UDM and UPCF Operations: Checking Subscriber Profiles, Slices, and QoS Policies
  4. Analyzing 5G Traces in Wireshark: Filters for NGAP, NAS-5GS, HTTP/2 SBI, PFCP, and GTP-U
  5. 5G Reject and Error Codes: 5GMM/5GSM Causes, NGAP Causes, and SBI HTTP Status Codes
  6. 5G Key Performance Indicators (KPIs) per 3GPP TS 28.552 and TS 28.554
  7. 5G Network Capacity Dimensioning: gNB, N2/N3 Transport, and 5GC Core Sizing
Section 16. Incident Case Studies (31 Real Cases), Troubleshooting Methodology, and Capstone Project33 topics
  1. Case 1: Registration Reject with 5GMM Cause #3 (Illegal UE)
  2. Case 2: Registration Reject with 5GMM Cause #7 (5GS Services Not Allowed)
  3. Case 3: Registration Reject with 5GMM Cause #11 (PLMN Not Allowed)
  4. Case 4: Registration Reject with 5GMM Cause #15 (No Suitable Cells in Tracking Area)
  5. Case 5: Registration Reject with 5GMM Cause #27 (N1 Mode Not Allowed)
  6. Case 6: Registration Reject with 5GMM Cause #62 (No Network Slices Available)
  7. Case 7: 5G-AKA Synchronization Failure (Cause #21) and SQN Resynchronization via AUTS
  8. Case 8: SUCI Decryption Failure in SIDF Due to ECIES Key Mismatch
  9. Case 9: Base Station to Core Connection Reject (NG Setup Failure)
  10. Case 10: AMF Unreachable from gNB (SCTP Association Failure on N2 Interface)
  11. Case 11: NF Discovery Failure in NRF (Empty nfInstances List Returned)
  12. Case 12: HTTP 403 Forbidden (ACCESS_TOKEN_ERR) on the SBI Bus Due to OAuth 2.0 Token Failure
  13. Case 13: HTTP 404 (USER_NOT_FOUND) When Querying Subscriber Profile in UDM
  14. Case 14: HTTP 503 Service Unavailable Storm During SBI Node Overload
  15. Case 15: PDU Session Reject with 5GSM Cause #27 (Missing or Unknown DNN)
  16. Case 16: PDU Session Reject Due to Slice and DNN Mismatch (5GSM Cause #67, #69, #70)
  17. Case 17: N4 Interface Outage Between SMF and UPF (PFCP Association and Heartbeat Failure)
  18. Case 18: PDU Session Established and IP Assigned, but No User Plane Traffic Flows
  19. Case 19: High-Priority QoS Not Applied or Traffic Throttled Unexpectedly
  20. Case 20: Call or Data Drop During Xn Handover Between gNBs
  21. Case 21: Incoming Calls and Packets Fail to Reach Subscriber in CM-IDLE (Paging Failure)
  22. Case 22: Voice Call Setup Fails During EPS Fallback from 5G to 4G LTE
  23. Case 23: VoNR Registration Fails (Missing P-CSCF Address in ePCO or IMS Voice Indicator)
  24. Case 24: IP Address Change and Session Drop When Moving from 5G SA to 4G LTE
  25. Case 25: 5G SA Roaming Fails Due to N32 Interface Error Between Visited and Home SEPP
  26. Case 26: 5G NR Leg Fails to Connect in a 5G NSA Network (X2 SgNB Addition Failure)
  27. Case 27: Low Throughput in 5G (50 Mbps Instead of 1 Gbps): Bottleneck Isolation Methodology
  28. Case 28: Internet Blocked Despite Positive Balance Due to CHF Quota Error (N40)
  29. Case 29: URLLC Slice Latency Degradation During Peak Load in Neighboring eMBB Slice
  30. Case 30: Core Network Outage Caused by Expired X.509 mTLS Certificate on the SBI Bus
  31. Case 31: Enterprise App Routed to the Wrong Slice Due to URSP Policy Error from PCF
  32. Unified Engineering Methodology for 5G Network Troubleshooting (Playbook)
  33. Capstone Project: Designing, Deploying, and Verifying a 5G SA Network with Two Slices and VoNR

Group and individual classes include a teacher, homework review and a certificate. The subscription gives you materials, exercises and progress tracking at your own pace, without teacher feedback.

5G: NR, 5GC Core and VoNR: how to enroll

Fill in the form and we will tell you the start date of the next group, the schedule and payment terms. Or come to a free trial lesson first.

+994 77 333 38 36 Or message us on WhatsApp right away info@prowid.com

By submitting the form, you agree that your data will be used only to contact you.

WhatsApp