EPS Bearers (Default & Dedicated) in LTE 4G
Default vs dedicated bearers, the end-to-end bearer path (DRB / S1 / S5), and TFT filters.
An EPS bearer is the LTE network's basic unit of connectivity: a virtual pipe running from the UE all the way to the P-GW, carrying IP packets that share one agreed level of QoS. Everything you do on LTE — every web request, every VoLTE call, every video stream — rides on at least one such pipe. Get the bearer model straight and the rest of the EPS user plane (QoS, TFTs, GTP tunnels, radio mapping) clicks into place. This page is grounded in TS 23.401 (EPS architecture) and TS 36.300 (E-UTRAN overall description).
Introduction
The EPS bearer is the object around which the entire LTE user plane is organised. It is a logical connection with a QoS contract attached, running end to end from the UE to the P-GW (PDN Gateway), and it is the finest granularity at which LTE differentiates traffic. Every user-plane concept you meet in LTE — QoS (QCI/ARP), packet steering (TFT), core tunnelling (GTP-U/TEID), and the radio protocol stack (DRB/PDCP/RLC) — hangs off a bearer.
Bearers appear at specific moments in the UE lifecycle. The very first one, the default bearer, is created during attach and lives for as long as the UE keeps its PDN connection. Additional dedicated bearers are created on demand later — typically when a service such as a VoLTE call needs guaranteed treatment — and torn down when the service ends. Reading any LTE trace means tracking these bearers as they are set up, modified and released.
It matters because bearers are where policy becomes reality: an operator's decision that "voice must have bounded delay" turns into a GBR dedicated bearer at QCI 1 with a TFT that steers the RTP flow into it. Understand the bearer and you understand how a QoS intent becomes a scheduled packet.
On this page
Why EPS bearers are needed
In plain words: think of the EPS bearer as a dedicated delivery lane on a motorway. Ordinary web traffic rides the general-purpose lane (best-effort). When an ambulance (a VoLTE call) needs guaranteed, uninterrupted passage, the network opens a reserved lane with its own rules — and a sign at the on-ramp (the TFT) decides which vehicles are allowed into which lane. Every lane runs to the same exit (the P-GW), where it merges back into the open road (the internet).
Concretely, LTE needs bearers because different traffic needs different handling and the network must apply that handling consistently at every hop. Voice needs low, bounded delay and can tolerate a little loss; a file download needs throughput and hates loss. Rather than inspect every packet's application at every node, LTE groups flows with the same needs into one bearer and gives that bearer a single QoS label. Each node along the path — eNB, S-GW, P-GW — then treats the whole bearer identically, with no per-packet decision to make.
A logical, QoS-defined pipe from the UE to the P-GW, the finest unit at which LTE applies QoS. Every packet on one bearer gets identical treatment, fixed by that bearer's QCI and ARP.
So flows that need the same treatment can be handled together and predictably, without any node re-inspecting each packet's application. QoS is decided once, at bearer setup, and inherited everywhere.
The network concatenates per-hop segments (radio DRB, S1, S5/S8), binds each to the next, and installs TFT filters at the two ends so IP flows enter the right bearer.
What an EPS Bearer Is
Think of the EPS bearer as an end-to-end tunnel with a promise attached. The promise is QoS — a defined treatment (priority, guaranteed rate or not, tolerable delay and packet loss) that every packet in that bearer receives. The tunnel runs between the UE and the P-GW (PDN Gateway), which sits at the edge of the operator's network and anchors the connection to the external packet data network — the internet, or an operator service network such as an IMS APN.
The end-to-end, QoS-defined logical connection between the UE and the P-GW. It is the finest granularity at which LTE applies QoS — every packet on one bearer gets identical treatment, defined by that bearer's QCI and ARP.
Different traffic needs different handling: voice needs low, bounded delay; a file download just needs throughput. Grouping flows that share the same needs into one bearer lets every node along the path give them consistent, predictable treatment without inspecting each packet's application.
The single end-to-end bearer is built by concatenating per-hop segments (radio, S1, S5/S8). Each node binds one segment to the next, so a packet's QoS contract is preserved unbroken from the UE to the P-GW.
Beyond the P-GW there is no bearer — just an ordinary external IP connection to the internet or an application server. The bearer concept lives entirely inside EPS. That is the first mental boundary to draw: the EPS bearer is an operator-internal construct, and the outside world never sees it.
One QoS per bearer: the EPS bearer is the level of QoS granularity in LTE. If two flows need different QoS, they need different bearers. This is the single most important principle on this page, and it is exactly the point where NR later diverges — more on that below.
PDN Connection vs Bearer
These two terms are constantly confused, so pin them down before going further. A PDN connection is the association between the UE and one external packet data network (one APN), and it is what gives the UE an IP address. A bearer is a QoS pipe inside a PDN connection. One PDN connection therefore contains one or more bearers: exactly one default bearer plus zero or more dedicated bearers.
A UE can hold several PDN connections at once — for example one to an internet APN and one to an ims APN — and each is a separate IP context with its own IP address and its own default bearer. So the hierarchy reads: UE → one or more PDN connections → each with one default bearer and optional dedicated bearers → each bearer carrying one or more IP flows. The APN selects which external network you reach; the bearer decides how well your packets are treated on the way there.
Spec note: the IP address belongs to the PDN connection and is anchored on its default bearer. Dedicated bearers within the same PDN connection reuse that same IP address — they do not get their own. Releasing the default bearer therefore tears down the whole PDN connection and every dedicated bearer under it. A UE supports up to 8 EPS bearers per UE (bounded by the usable EBI space 5–15 split across its PDN connections), and up to 11 PDN connections in total.
The Bearer as Concatenated Segments
The end-to-end EPS bearer is not one physical connection; it is a chain of three segments stitched together, each hop bound to the next so the QoS treatment carries through. The core-network segments are realised as GTP-U tunnels — user-plane GPRS Tunnelling Protocol (TS 29.281), carried over UDP port 2152, where each tunnel endpoint is named by a TEID (Tunnel Endpoint Identifier), a 32-bit value that the peer stamps into the GTP header of every packet.
| Segment | Between nodes | Interface | Transport / tunnel |
|---|---|---|---|
Data Radio Bearer (DRB) | UE ↔ eNB | LTE-Uu (air) | Radio protocol stack: PDCP/RLC/MAC/PHY |
S1 bearer | eNB ↔ S-GW | S1-U | One GTP-U tunnel (per-bearer TEID) over UDP/IP |
S5/S8 bearer | S-GW ↔ P-GW | S5 (non-roaming) / S8 (roaming) | One GTP-U tunnel (per-bearer TEID) over UDP/IP |
Concatenated: DRB + S1 bearer + S5/S8 bearer = the EPS bearer. The eNB binds a DRB to an S1 bearer, and the S-GW binds that S1 bearer to an S5/S8 bearer, so a single IP packet passes through all three segments with the same QoS treatment end to end. The S-GW is a pure relay in the user plane: it does no QoS reclassification, it simply swaps one GTP-U tunnel for the next by mapping the incoming TEID to the outgoing one. Beyond the P-GW lies only the external IP connection to the PDN, with no bearer at all.
Cross-link — GTP: the S1 and S5/S8 segments are GTP-U tunnels. Each carries user packets inside a GTP header whose TEID identifies the destination bearer context at the receiving node. The control-plane siblings (GTP-C on S11/S5, over UDP port 2123) set these tunnels up; see the GTP tunnelling topic for the full header and TEID mechanics.
The Default Bearer — always on
When a UE attaches to LTE, the network immediately establishes one bearer for it: the default bearer. It is created during the attach procedure and stays up for as long as the UE keeps its PDN connection to that APN — you get exactly one default bearer per PDN connection, and it never goes away while the connection exists. Its job is to keep the pipe alive and give the UE always-on IP connectivity from the moment it attaches.
A default bearer is always non-GBR (no guaranteed bit rate). It is best-effort: the network reserves no fixed rate for it, so it flexes with available capacity — ideal for general internet traffic. It is assigned a QoS profile (a QCI and an ARP) at setup and keeps that profile for its whole lifetime. A typical internet default bearer runs at QCI 9 (or 8/6), while an IMS signalling default bearer runs at QCI 5.
One per PDN connection: attaching to a second APN (say, an IMS APN alongside the internet APN) creates a second PDN connection with its own default bearer and its own IP address. Each default bearer anchors exactly one PDN connection and cannot be torn down without releasing that whole connection.
The Dedicated Bearer — QoS on demand
A dedicated bearer is an additional bearer created on top of an existing default bearer to give a specific set of flows their own, usually stronger, QoS. It is always linked to a default bearer — it shares that PDN connection and its IP address — and it is set up on demand, typically triggered by the PCRF pushing a policy (a PCC rule) to the P-GW when an application such as an IMS voice session needs guaranteed treatment. The link back to its default bearer is carried explicitly in the Linked EPS Bearer Identity (LBI), which names the default bearer's EBI.
Unlike the default bearer, a dedicated bearer can be either GBR or non-GBR. The classic example is VoLTE: when a voice call is set up, IMS asks the PCRF for a GBR dedicated bearer at QCI 1, which reserves bandwidth so the voice media gets bounded delay and low loss for the duration of the call. When the call ends, the dedicated bearer is released and the default bearer stays. A non-GBR dedicated bearer is also possible — for example to give a particular application better priority (a lower QCI) without reserving a fixed rate.
GBR vs non-GBR: a GBR bearer reserves a guaranteed bit rate (GBR plus a ceiling MBR) end to end — used for real-time media like VoLTE (QCI 1) or conversational video (QCI 2). A non-GBR bearer is best-effort and rate-limited only by the aggregate APN-AMBR (per APN) and UE-AMBR (per UE). Default bearers are always non-GBR; dedicated bearers can be either.
Traffic Flow Templates — steering packets to the right bearer
Once a UE has more than one bearer, something has to decide which packet goes on which bearer. That job belongs to the Traffic Flow Template (TFT) — a set of packet filters that map IP flows to a particular bearer. Each filter matches on the classic IP 5-tuple: source IP address, destination IP address, source port, destination port, and protocol (plus optionally the ToS/DSCP and IPsec SPI). A packet that matches a dedicated bearer's filter rides that bearer; anything that matches nothing falls through to the default bearer.
| TFT | Lives in | Filters which direction | Effect |
|---|---|---|---|
UL TFT | The UE | Uplink | The UE matches its outgoing flows against the filters and picks the correct bearer to transmit on |
DL TFT | The P-GW | Downlink | The P-GW matches incoming flows from the PDN and routes each onto the correct bearer toward the UE |
Each packet filter within a TFT carries a packet filter identifier, an evaluation precedence value (0–255, lower is evaluated first), and the filter components themselves (each 5-tuple element is a distinct component type). Precedence matters because filters are tried in order and the first match wins, so a more specific filter must be given a lower precedence value than a broad catch-all. So a VoLTE flow's RTP media, matched by its 5-tuple, is steered onto the QCI 1 dedicated bearer, while ordinary web traffic falls through to the default bearer. The default bearer usually has a match-everything filter (or no explicit TFT at all), so anything not claimed by a dedicated bearer's TFT rides the default bearer — there is always a home for every packet. The P-GW installs both directions when it creates or modifies a bearer: it keeps the DL TFT locally and sends the UL TFT down to the UE (inside the bearer-setup NAS signalling), so both ends classify the same flows onto the same bearer consistently.
Why TFTs live at the edges: only the two ends of the bearer — the UE for uplink and the P-GW for downlink — ever inspect the IP 5-tuple. Every node in between (eNB, S-GW) just follows the bearer/tunnel binding. Classification happens once, at the point where IP packets first enter a bearer.
The Bearer Identifiers
A single EPS bearer is referred to by several different identifiers, one per interface, because each node names the bearer in its own context. Keeping them straight is essential when reading traces: the same bearer appears as an EBI in NAS, an E-RAB ID in S1AP, and a DRB ID in RRC.
| Identifier | Where it is used | Scope / meaning |
|---|---|---|
EPS Bearer Identity (EBI) | NAS (UE ↔ MME), end to end | The master identity of the EPS bearer. 4-bit value, range 5–15 (values 0–4 reserved). Assigned by the MME; uniquely names the bearer within the UE's context. |
E-RAB ID | S1AP (MME ↔ eNB) | Names the E-UTRAN Radio Access Bearer — the concatenation of the DRB and the S1 bearer. Numerically equal to the EBI, which is how the eNB links radio and S1 sides. |
DRB ID | RRC (UE ↔ eNB) | Names the Data Radio Bearer over the air (drb-Identity, range 1–32). The eNB maps each E-RAB to one DRB. |
Linked EPS Bearer Identity (LBI) | NAS, on dedicated bearers | Points a dedicated bearer at the EBI of the default bearer it belongs to, tying it into the right PDN connection. |
TEID (uplink / downlink) | GTP-U on S1-U and S5/S8 | Names the GTP-U tunnel endpoint for the bearer at each node; a 32-bit value whose presence in a packet's GTP header tells the receiver which bearer context it belongs to. |
The neat part is the numeric identity between EBI and E-RAB ID: the same value threads NAS and S1AP, so a bearer set up as EBI 6 in the attach signalling appears as E-RAB ID 6 when the MME asks the eNB to set up the radio side. The eNB then chooses a DRB ID for the air interface and maps it to that E-RAB. On dedicated bearers, the LBI is what stops the network from losing track of which default bearer — and therefore which PDN connection and IP address — a dedicated bearer hangs off.
Mapping onto the Radio — DRB to Logical Channel
On the radio side, the eNB maps each EPS bearer to a Data Radio Bearer (DRB) — the radio segment of the chain — and the DRB runs down the LTE user-plane protocol stack. There is exactly one DRB per EPS bearer, so the QoS distinction you set up in the core survives all the way down to how the MAC scheduler prioritises the corresponding logical channel.
| Layer | Role for the DRB |
|---|---|
PDCP | Header compression (ROHC), ciphering and integrity handling — one PDCP entity per DRB |
RLC | Segmentation/reassembly and, in AM, ARQ retransmission — one RLC entity (pair) per DRB |
Logical channel (DTCH) | Each DRB maps to one DTCH logical channel with a Logical Channel ID (LCID); MAC multiplexes DTCHs onto the transport channel |
MAC | Logical-channel prioritisation (LCP) and scheduling; the bearer's priority steers how the scheduler serves the DTCH |
So the mapping is a clean chain: an IP flow → classified by TFT onto an EPS bearer (named by its EBI) → carried on a DRB over the air → served by a dedicated PDCP and RLC entity → a DTCH logical channel that MAC schedules onto the shared transport channel. Because there is one DRB per EPS bearer and one logical channel per DRB, QoS is not re-derived at each layer — it is inherited straight down the stack from the bearer it belongs to.
LTE ↔ NR: LTE fixes QoS at the bearer — one QCI per bearer, so a new QoS need means a new bearer, and the mapping IP-flow→bearer→DRB is rigidly one-to-one. 5G NR breaks this apart: QoS is defined per QoS flow (identified by a QFI), and the gNB maps one or more QoS flows onto a DRB by policy using a new sublayer, SDAP, that sits above PDCP. NR keeps DRBs on the radio but drops the per-hop-bearer, one-QoS-per-bearer model of EPS in favour of flexible flow-to-DRB mapping in the RAN. LTE has no SDAP because there is nothing to map — the bearer is the QoS. In one line: the pipe moved from end-to-end-and-fixed (EPS bearer) to flow-based-and-RAN-mapped (QoS flow + DRB).
Default vs Dedicated — side by side
The two bearer types differ in when they are created, what QoS they can carry, and their relationship to the PDN connection. This is the table interviewers reach for most often:
| Default bearer | Dedicated bearer | |
|---|---|---|
| Created | At attach / PDN connection setup | On demand, later (e.g. by IMS via PCRF) |
| Lifetime | Whole life of the PDN connection | As long as the service needs it (e.g. call duration) |
| QoS type | Always non-GBR | GBR or non-GBR |
| How many | Exactly one per PDN connection | Zero or more, each linked (by LBI) to a default |
| Own IP address? | Yes — anchors the PDN connection's IP | No — shares the linked default bearer's IP |
| TFT | Often none / match-all | Always has a TFT (specific packet filters) |
| Typical use | Always-on best-effort data (QCI 9), IMS signalling (QCI 5) | VoLTE media (QCI 1), conversational video (QCI 2) |
⚠ Common pitfalls / gotchas
- Assuming a dedicated bearer has its own IP address. It does not — it reuses the linked default bearer's IP. Only the default bearer (one per PDN connection) anchors an IP address.
- Forgetting the EBI/E-RAB numeric identity. When correlating NAS and S1AP traces, the same bearer keeps its number (
EBI=E-RAB ID); only theDRB IDchosen by the eNB is free to differ. - Expecting AMBR to bound a GBR bearer.
APN-AMBR/UE-AMBRcap only non-GBR traffic; a GBR bearer is policed by its ownGBR/MBRand is not counted against the AMBR budget. - Overlooking TFT filter precedence. A too-broad filter with a low precedence value on a dedicated bearer can capture traffic meant for the default bearer — order the filters most-specific-first.
- Releasing the default bearer to "free resources". That tears down the entire PDN connection and every dedicated bearer under it, and the UE loses its IP address for that APN.
Summary
The EPS bearer is the atom of LTE connectivity: one end-to-end pipe from the UE to the P-GW, carrying one agreed QoS. Draw the boundaries in this order and the whole user plane falls into place — a PDN connection (one APN, one IP address) contains exactly one default bearer (always-on, non-GBR, born at attach) plus zero or more dedicated bearers (on-demand, GBR or non-GBR, linked back by LBI).
End to end, the bearer is really three concatenated segments — DRB + S1 bearer + S5/S8 bearer — with the two core segments realised as GTP-U tunnels named by TEIDs. Packets are steered onto the right bearer by TFT filters at the two edges (UE for uplink, P-GW for downlink), and the same bearer is named differently at each interface: EBI in NAS, E-RAB ID in S1AP (numerically equal), DRB ID in RRC. On the radio it is one DRB per bearer, one logical channel per DRB, so QoS is inherited straight down the stack.
Hold onto the one principle that everything else follows from: one EPS bearer = one QoS. A new QoS requirement means a new bearer — and that rigidity is exactly what 5G's per-flow (QFI) model later relaxes.
Q. What three segments make up an end-to-end EPS bearer, and which are GTP-U tunnels?
A. The DRB (UE↔eNB over the air), the S1 bearer (eNB↔S-GW), and the S5/S8 bearer (S-GW↔P-GW). The S1 and S5/S8 segments are GTP-U tunnels, each endpoint named by a TEID; the DRB is the radio segment carried by PDCP/RLC/MAC/PHY.
Q. Can a UE have a dedicated bearer without a default bearer?
A. No. A dedicated bearer is always linked (via its LBI) to an existing default bearer and shares its PDN connection and IP address. The default bearer is set up first at attach and must exist for the life of the PDN connection; dedicated bearers are added on top of it.
Q. What exactly maps an IP packet to the correct bearer, and where does that logic live?
A. The TFT — packet filters matching the IP 5-tuple. The UL TFT lives in the UE for uplink; the DL TFT lives in the P-GW for downlink. Both are provisioned when the bearer is created so classification is consistent in each direction; unmatched packets fall through to the default bearer.
Q. Why must a default bearer be non-GBR?
A. It is the always-on bearer that keeps the PDN connection alive for the whole session; permanently reserving a guaranteed bit rate for it would waste radio resources. Best-effort (non-GBR) treatment lets it flex with capacity, while GBR is reserved for dedicated bearers set up only when a real-time service needs them.
Q. The same bearer shows up as three different IDs in a trace — which and where?
A. EBI in NAS (UE↔MME), E-RAB ID in S1AP (MME↔eNB, numerically equal to the EBI), and DRB ID in RRC (UE↔eNB). The equal EBI/E-RAB value is what lets the eNB tie the radio and S1 sides together.
Q. How does LTE's QoS granularity differ from 5G NR's?
A. LTE applies one QoS per bearer — a new QoS requirement forces a new bearer. NR moves QoS to the per-flow level (each flow has a QFI) and lets the gNB map multiple QoS flows onto a DRB via SDAP, so QoS is decoupled from the rigid end-to-end bearer model of EPS.
Where EPS bearers connect
Bearers are the vehicle for QoS in LTE: their parameters come from the QoS model, the core-network segments ride on GTP tunnels, and the first bearer appears during attach. Follow any of these threads next.