This chapter covers cellular technologies LTE and 5G, focusing on their architectures, key features, and how they differ for the N10-009 exam. Understanding cellular is critical because wireless WAN connectivity is now a staple in enterprise networks, from branch offices to IoT deployments. Expect approximately 10-15% of exam questions to touch on cellular technologies, often comparing LTE and 5G specifications or identifying appropriate use cases.
Jump to a section
Imagine a nationwide highway system managed by a single authority (the carrier). LTE and 5G are like different generations of road design. LTE is a well-built 4-lane highway with predictable traffic flow, where each car (user device) gets a dedicated lane for the duration of its trip (circuit-switched core for voice, but packet-switched for data). 5G is a futuristic smart highway with 10 lanes that can dynamically change direction, speed limits, and even create temporary express lanes for emergency vehicles (ultra-reliable low-latency). The base stations (eNodeB for LTE, gNodeB for 5G) are like on-ramps and toll booths that manage entry and exit. The core network (EPC for LTE, 5GC for 5G) is the central traffic control center that handles routing, billing, and handoffs between different highway segments. Network slicing in 5G is like creating dedicated lanes for autonomous trucks (massive IoT) and another for live video streaming (enhanced mobile broadband), each with its own performance guarantees. The analogy breaks if you think of cellular as a single pipe; it's really a coordinated system of roads, ramps, and control centers.
What are LTE and 5G?
LTE (Long-Term Evolution) and 5G (Fifth Generation) are cellular network standards defined by 3GPP (3rd Generation Partnership Project). LTE is often marketed as 4G LTE and was the dominant cellular technology from 2010 onward. 5G began deployment around 2019 and is designed to support three main use cases: enhanced Mobile Broadband (eMBB), Ultra-Reliable Low-Latency Communications (URLLC), and massive Machine-Type Communications (mMTC).
For the N10-009 exam, you need to know the fundamental differences, not the full 3GPP specification. Key exam points include frequency bands, latency, throughput, and architecture components.
LTE Architecture (Evolved Packet System - EPS)
LTE uses a flat, all-IP network architecture consisting of:
- UE (User Equipment): The mobile device (phone, tablet, IoT module). - eNodeB (Evolved Node B): The base station that handles radio resource management, scheduling, and handovers. It connects to the core network via the S1 interface. - EPC (Evolved Packet Core): The core network components: - MME (Mobility Management Entity): Handles signaling, authentication, mobility, and bearer management. - S-GW (Serving Gateway): Routes and forwards user data packets, acts as mobility anchor during handovers. - P-GW (Packet Data Network Gateway): Connects to external IP networks (e.g., internet), allocates IP addresses, enforces QoS policies. - HSS (Home Subscriber Server): Database containing subscriber information and authentication keys.
LTE uses OFDMA (Orthogonal Frequency Division Multiple Access) for downlink and SC-FDMA for uplink. It operates in frequency bands from 700 MHz to 2.6 GHz (and higher in some regions). Peak theoretical downlink speed is 300 Mbps for Category 4 devices, but real-world speeds are 10-50 Mbps.
5G Architecture (5G System - 5GS)
5G introduces a new radio access network (NR - New Radio) and a service-based core (5GC). Key components:
- gNodeB (Next Generation Node B): The 5G base station, which can be split into Central Unit (CU) and Distributed Unit (DU) for flexible deployment. - 5GC (5G Core): Built on a service-based architecture (SBA) using Network Functions (NFs) such as: - AMF (Access and Mobility Management Function): Handles registration, connection, mobility, and access authentication. - SMF (Session Management Function): Manages PDU sessions, IP address allocation, and traffic steering. - UPF (User Plane Function): Handles packet routing, forwarding, and QoS enforcement (analogous to S-GW + P-GW). - AUSF (Authentication Server Function), UDM (Unified Data Management), PCF (Policy Control Function), etc.
5G uses two frequency ranges: FR1 (sub-6 GHz, 410-7125 MHz) and FR2 (millimeter wave, 24.25-52.6 GHz). Peak theoretical downlink speed is 20 Gbps, real-world speeds often exceed 1 Gbps on mmWave.
Key Differences for the Exam
| Feature | LTE | 5G | |---------|-----|----| | Latency | ~50 ms (ideal) | ~1 ms (URLLC) | | Peak DL | 300 Mbps (Cat 4) | 20 Gbps | | Frequency | Sub-6 GHz | Sub-6 + mmWave | | Core | EPC (MME, S-GW, P-GW) | 5GC (AMF, SMF, UPF) | | Air Interface | OFDMA/SC-FDMA | OFDMA (flexible numerology) | | MIMO | Up to 8x8 | Up to 64x64 | | Network Slicing | No | Yes (end-to-end) |
Network Slicing
5G allows multiple logical networks (slices) to run on the same physical infrastructure. Each slice is optimized for a specific service: e.g., a slice for IoT with low throughput but massive device density, and another for autonomous driving with ultra-low latency. This is achieved through resource isolation in the RAN, transport, and core.
Beamforming and Massive MIMO
5G uses advanced beamforming to focus radio signals directly at the user, increasing range and throughput. Massive MIMO uses dozens of antenna elements (e.g., 64x64) to serve multiple users simultaneously on the same time/frequency resource.
Carrier Aggregation
Both LTE and 5G support carrier aggregation, combining multiple frequency bands to increase bandwidth. LTE supports up to 5 component carriers (100 MHz total). 5G can aggregate many more, including across FR1 and FR2.
Dual Connectivity (EN-DC)
In early 5G deployments, devices connect simultaneously to LTE (for control) and 5G (for data). This is called E-UTRA-NR Dual Connectivity (EN-DC) and is a common exam topic.
Frequency Bands
LTE bands: 1-71 (e.g., Band 4 (AWS-1) 1700/2100 MHz, Band 12 (700 MHz), Band 41 (2.5 GHz) for TDD).
5G FR1 bands: n1-n96 (e.g., n71 (600 MHz), n41 (2.5 GHz), n78 (3.5 GHz)).
5G FR2 bands: n257-n261 (24-52 GHz).
QoS and Bearers
LTE uses EPS bearers to provide QoS. Each bearer has a QCI (QoS Class Identifier) value (1-9) determining priority, packet delay, and packet loss. 5G uses QoS Flows with 5QI (5G QoS Identifier).
Handover Types
LTE: S1-based handover (via MME) or X2-based (direct between eNodeBs).
5G: N2-based (via AMF) or Xn-based (direct between gNodeBs).
Verification Commands
On a mobile device (e.g., Android):
- *#*#4636#*#* -> Phone information -> shows network type (LTE, NR), signal strength, band.
- In field test mode on iPhones: *3001#12345#* -> Serving cell info.
On a network engineer's test tool (e.g., Qualcomm QXDM, TEMS):
Monitor RSRP (Reference Signal Received Power), RSRQ (Reference Signal Received Quality), SINR.
Configuration
Network engineers configure cells via OAM (Operations, Administration, and Maintenance) systems. Parameters include: - PCI (Physical Cell ID): 0-503 for LTE, 0-1007 for 5G. - TAC (Tracking Area Code): Identifies a group of cells. - Frequency and bandwidth: e.g., 20 MHz on Band 4. - Power settings: Max transmission power (e.g., 43 dBm for macro cell).
Common Exam Traps
Confusing LTE and 5G core components: MME is LTE, AMF is 5G.
Assuming 5G always means mmWave: 5G works in sub-6 GHz too, often called 'low-band' or 'mid-band'.
Thinking LTE is circuit-switched: LTE is all-IP; voice is over VoIP (VoLTE).
Overestimating typical speeds: 5G peak is 20 Gbps, but typical is 100-300 Mbps.
Device attaches to LTE network
The UE (User Equipment) scans for available LTE frequencies and synchronizes to a cell using the PSS (Primary Synchronization Signal) and SSS (Secondary Synchronization Signal). It then decodes the MIB (Master Information Block) on PBCH to get basic cell parameters like bandwidth and SFN. The UE initiates an RRC (Radio Resource Control) connection request to the eNodeB. The eNodeB responds with RRC Setup, establishing a signaling radio bearer (SRB1). The UE then sends an Attach Request (including IMSI or GUTI) to the MME via the eNodeB. The MME authenticates the UE with the HSS, then sends an Attach Accept with a default EPS bearer (for internet connectivity) and assigns an IP address via the P-GW.
5G device registers with 5GC
The UE scans for 5G NR cells using SSB (Synchronization Signal Block). It decodes MIB and SIB1 (System Information Block 1) to get cell access parameters. The UE sends an RRC Setup Request to the gNodeB. After RRC connection, the UE sends a Registration Request to the AMF (via N1 interface). The AMF selects an AUSF and UDM for authentication. Once authenticated, the AMF sends a Registration Accept, including a temporary ID (5G-GUTI) and allowed NSSAI (Network Slice Selection Assistance Information). The UE may then request a PDU session for data. The SMF allocates an IP address and establishes a data path through the UPF.
Data transfer over LTE bearer
User IP packets are encapsulated in GTP (GPRS Tunneling Protocol) tunnels between the eNodeB and S-GW, and between S-GW and P-GW. The eNodeB schedules radio resources (Resource Blocks) to the UE based on CQI (Channel Quality Indicator) reports. Downlink data arrives at the P-GW, which forwards it via the S-GW to the eNodeB, which transmits over the air on the assigned RBs. Uplink data follows the reverse path. The UE's IP address is allocated by the P-GW and remains unchanged during the session. QoS is enforced by the eNodeB and S-GW based on the EPS bearer's QCI.
5G data transfer with network slicing
The UE requests a PDU session with a specific S-NSSAI (Single Network Slice Selection Assistance Information). The AMF routes the request to the appropriate SMF and UPF for that slice. The UPF enforces slice-specific QoS policies (e.g., low latency for URLLC slice). Data packets are encapsulated in GTP-U tunnels between the gNodeB and UPF. The gNodeB uses 5G QoS Flows (identified by QFI) to map packets to appropriate radio resources. For URLLC, the gNodeB may use mini-slots (2, 4, or 7 OFDM symbols) instead of full slots to reduce latency. The UPF can also steer traffic to a local data network (MEC) for low-latency applications.
Handover between eNodeBs (LTE)
The serving eNodeB receives measurement reports from the UE indicating a neighbor cell with better signal (e.g., RSRP above threshold). The serving eNodeB decides to trigger a handover. It sends a Handover Request to the target eNodeB via the X2 interface (or S1 if X2 not available). The target eNodeB prepares resources and replies with Handover Request Acknowledge. The serving eNodeB sends an RRC Connection Reconfiguration with mobilityControlInfo to the UE, including the target cell's frequency and PCI. The UE synchronizes to the target cell and sends an RRC Connection Reconfiguration Complete. The target eNodeB sends a Path Switch Request to the MME to update the S-GW tunnel endpoint. Data flows through the target eNodeB.
5G handover with beam management
In 5G, the gNodeB configures the UE with measurement objects for SSB or CSI-RS beams. The UE reports beam measurements (e.g., L1-RSRP). The gNodeB may trigger a beam switch (intra-gNodeB) by sending an RRC Reconfiguration with a new TCI (Transmission Configuration Indicator) state. For inter-gNodeB handover, the source gNodeB sends a Handover Request to the target via Xn interface. The target gNodeB allocates a new C-RNTI and dedicated RACH preamble. The UE receives the handover command and performs random access to the target cell. The target gNodeB sends a Path Switch Request to the AMF to update the UPF tunnel. For EN-DC, the handover may involve both LTE and NR legs.
Enterprise Scenario 1: Branch Office with LTE Failover
A retail chain with 200 stores uses cable broadband as primary WAN and LTE as backup. Each store has a cellular router (e.g., Cradlepoint or Peplink) with an LTE modem. The router is configured with a keepalive (ICMP ping to a public IP every 10 seconds). When the primary link fails, the router swaps the default route to the LTE interface. The LTE connection uses a static IP from the carrier or a private APN for VPN back to HQ. Common issues: SIM card provisioning errors (wrong APN), carrier throttling after data cap (e.g., 20 GB), and antenna placement causing weak signal (RSRP below -120 dBm). The solution: use external MIMO antennas and monitor signal metrics (RSRP, SINR) via SNMP. On the exam, expect questions about failover timers (typically 10-30 seconds) and the need for a static IP for VPN termination.
Scenario 2: IoT Sensor Network Using LTE-M
A water utility deploys 10,000 sensors across a city to monitor pipe pressure. They use LTE-M (LTE Cat M1) because it supports low power, deep indoor penetration, and low data rates (up to 1 Mbps). Each sensor sends a 100-byte packet every hour. The carrier provides a dedicated APN with no internet access, only a private IP network. The sensors are configured with eDRX (extended Discontinuous Reception) cycles up to 40.96 seconds to save battery (10-year battery life). The network engineer must ensure the MME supports CIoT (Cellular IoT) optimizations like Control Plane CIoT EPS Optimization (data over signaling). Common misconfiguration: setting T3324 (active timer) too short, causing the device to detach before the next transmission. On the exam, know that LTE-M and NB-IoT are 3GPP Release 13 technologies and that eDRX values are configurable.
Scenario 3: 5G Fixed Wireless Access (FWA)
A rural ISP uses 5G CPE (Customer Premises Equipment) to provide broadband to homes up to 10 km from the tower. The CPE uses a high-gain directional antenna pointing at the gNodeB. The 5G signal uses mid-band (3.5 GHz) with beamforming. The CPE is configured with a static IP from the carrier. The network engineer must optimize the antenna alignment using the CPE's web interface showing RSRP and SINR. Common problem: foliage attenuation in summer, causing signal drop. The solution: use lower frequency band (e.g., n71 at 600 MHz) for better penetration. On the exam, know that FWA is a primary use case for 5G eMBB and that CPE devices often support both LTE and 5G for fallback.
N10-009 Objective 2.4: Cellular Technologies
The exam tests your ability to compare and contrast LTE and 5G, identify appropriate use cases, and understand basic architecture. Specific objectives:
2.4a: Compare LTE and 5G specifications (latency, throughput, frequency, coverage).
2.4b: Identify appropriate cellular technologies for given scenarios (e.g., LTE for IoT, 5G for low-latency).
2.4c: Understand cellular network architecture components (eNodeB, gNodeB, EPC, 5GC).
Common Wrong Answers and Why
'5G always uses millimeter wave' – Wrong. 5G operates in low-band (sub-1 GHz), mid-band (1-6 GHz), and mmWave (24+ GHz). The exam expects you to know that mmWave is only one part.
'LTE has higher latency than 5G' – While true in theory, many candidates assume LTE latency is always 100 ms. Actually, LTE can achieve ~50 ms, but 5G URLLC targets 1 ms.
'5G core is the same as LTE EPC' – Wrong. 5GC uses a service-based architecture with AMF, SMF, UPF, etc., completely different from MME, S-GW, P-GW.
'Cellular is only for smartphones' – The exam includes IoT, FWA, and vehicle-to-everything (V2X) use cases.
Specific Numbers and Terms
LTE peak downlink: 300 Mbps (Cat 4), 1 Gbps (Cat 6 with CA).
5G peak downlink: 20 Gbps.
LTE latency: ~50 ms.
5G URLLC latency: 1 ms.
5G frequency ranges: FR1 (410-7125 MHz), FR2 (24.25-52.6 GHz).
Network slicing: 5G only.
Beamforming: 5G only (though LTE has some forms).
Dual connectivity (EN-DC): 5G device connected to both LTE and 5G.
Edge Cases and Exceptions
VoLTE: Voice over LTE is not circuit-switched; it uses IMS (IP Multimedia Subsystem). The exam may ask about voice fallback to 3G (CSFB) if VoLTE not supported.
NB-IoT: Narrowband IoT is a variant of LTE (Cat NB1) for very low data rates and deep coverage.
5G Standalone vs Non-Standalone: NSA (Non-Standalone) uses LTE for control and 5G for data; SA (Standalone) uses 5G for both. The exam may ask which is used in early deployments (NSA).
How to Eliminate Wrong Answers
Read the scenario carefully: if it mentions 'low latency', look for 5G URLLC. If 'massive device count', think LTE-M or NB-IoT.
Know the architecture: if a question asks about 'MME', it's LTE. If 'AMF', it's 5G.
Frequency: if the question says '24 GHz', that's mmWave 5G.
Use process of elimination: eliminate options that mix LTE and 5G components.
LTE peak downlink speed is 300 Mbps; 5G peak is 20 Gbps.
LTE latency is ~50 ms; 5G URLLC latency is 1 ms.
5G operates in FR1 (sub-6 GHz) and FR2 (mmWave).
5G core uses service-based architecture (AMF, SMF, UPF); LTE uses EPC (MME, S-GW, P-GW).
Network slicing is unique to 5G.
EN-DC (dual connectivity) allows 5G devices to use both LTE and 5G simultaneously.
LTE-M and NB-IoT are low-power variants for IoT.
Beamforming and massive MIMO are key 5G features.
VoLTE uses IMS; LTE does not have circuit-switched voice.
5G standalone (SA) uses 5G core and NR; non-standalone (NSA) relies on LTE core.
These come up on the exam all the time. Here's how to tell them apart.
LTE (4G)
Peak downlink: 300 Mbps (Cat 4)
Latency: ~50 ms
Core: EPC (MME, S-GW, P-GW)
Frequency: Sub-6 GHz only
MIMO: Up to 8x8
5G NR
Peak downlink: 20 Gbps
Latency: 1 ms (URLLC)
Core: 5GC (AMF, SMF, UPF)
Frequency: Sub-6 GHz and mmWave
MIMO: Up to 64x64
Mistake
5G always requires a new SIM card.
Correct
5G can use existing 4G SIM (UICC) if the network supports it. However, for standalone 5G and network slicing, a new SIM (5G SIM) may be needed. The exam does not require deep SIM knowledge.
Mistake
LTE is circuit-switched for voice.
Correct
LTE is an all-IP packet-switched network. Voice is carried as VoIP using VoLTE (IMS). For fallback, CSFB (Circuit Switched Fallback) to 3G/2G is used.
Mistake
5G is just faster LTE.
Correct
5G introduces a new radio interface (NR), new core (5GC), network slicing, beamforming, and much lower latency. It's fundamentally different, not just a speed upgrade.
Mistake
More bars on a phone means faster speed.
Correct
Signal bars indicate received signal strength (RSRP), not throughput. A strong signal can still have low throughput due to congestion or poor SINR.
Mistake
5G millimeter wave can travel miles.
Correct
mmWave has very short range (a few hundred meters) and is easily blocked by buildings, trees, and even rain. It requires dense deployment of small cells.
Reveal each answer, then mark whether you got it right. Score 60%+ to unlock the next chapter.
LTE typically has a latency of 50 ms (ideal) while 5G URLLC (Ultra-Reliable Low-Latency Communications) targets 1 ms. Standard 5G eMBB latency is around 10-20 ms. The exam expects you to know the 1 ms figure for URLLC.
Not necessarily. For non-standalone (NSA) 5G, existing 4G SIMs work. For standalone (SA) 5G and network slicing, a 5G SIM (with enhanced security) may be needed. The exam doesn't test SIM details deeply.
Network slicing allows multiple virtual networks (slices) to run on the same physical 5G infrastructure. Each slice is optimized for a specific service (e.g., IoT, autonomous driving, broadband) with dedicated resources and QoS. This is a key differentiator from LTE.
EN-DC (E-UTRA-NR Dual Connectivity) is a mode where a 5G device connects simultaneously to an LTE eNodeB (for control signaling) and a 5G gNodeB (for data). It is used in early 5G deployments (NSA) to leverage existing LTE coverage.
5G uses two frequency ranges: FR1 (410-7125 MHz), which includes low-band (e.g., 600 MHz) and mid-band (e.g., 3.5 GHz), and FR2 (24.25-52.6 GHz), which is millimeter wave. The exam may ask about specific bands like n71 (600 MHz) or n78 (3.5 GHz).
Both are 3GPP Release 13 IoT technologies. LTE-M (Cat M1) supports higher data rates (up to 1 Mbps), lower latency (~10-15 ms), and mobility. NB-IoT (Cat NB1) supports very low data rates (~200 kbps), deeper coverage, and longer battery life (10+ years) but no mobility. Choose LTE-M for mobile IoT, NB-IoT for static sensors.
Beamforming is a technique that focuses the radio signal in a specific direction towards the user, rather than broadcasting in all directions. This increases signal strength, range, and throughput. 5G uses digital beamforming with massive MIMO arrays.
You've just covered Cellular Technologies: LTE and 5G — now see how well it sticks with free N10-009 practice questions. Full explanations included, no account needed.
Done with this chapter?