LTE Voice Options (VoLTE, CSFB, SRVCC)
How voice reaches an LTE phone — native VoLTE over IMS, CS Fallback to 2G/3G, and SRVCC for mid-call continuity.
LTE was built as a packet-only system — there is no circuit-switched (CS) domain anywhere in the Evolved Packet System, so there is nothing inside LTE to carry a classic voice call. That single architectural decision is the whole reason LTE voice arrives as a set of "options." VoLTE turns the call into IP packets and keeps it on LTE using IMS; CSFB borrows a 2G/3G circuit when IMS/VoLTE is not deployed; and SRVCC rescues a live VoLTE call by moving it to a circuit when the UE runs out of LTE coverage. This page is grounded in TS 23.401 (the EPS architecture), TS 23.216 (SRVCC) and TS 23.272 (CSFB and SMS over SGs).
Introduction
LTE voice "options" are the three mechanisms — VoLTE, CSFB and SRVCC — that let an LTE subscriber make and keep a phone call even though the Evolved Packet System has no circuit-switched domain of its own. They are not competing features so much as three answers to one problem: how to deliver a conversational voice service on a network designed only for IP packets.
They enter the picture at different moments in the call lifecycle. VoLTE is used at call setup when the network has an IMS core and good coverage. CSFB is used at call setup when it does not, moving the UE to 2G/3G for the call. SRVCC is used mid-call, only after a VoLTE call already exists, to rescue it when LTE coverage runs out. Which one applies is driven by what the operator has deployed and by an explicit NAS indication the network sends during attach.
Why it matters: whether a call connects, how fast it sets up, and whether it survives the walk out of an LTE cell all depend on which option is in play and whether its prerequisites — IMS, the SGs interface, the Sv interface, a combined attach — are actually in place. Getting the decision tree straight turns a confusing list of acronyms into one clear model of how LTE voice works and how it migrates over time.
On this page
Why LTE Needs Voice "Options" at All
In plain words: imagine a brand-new motorway built only for cars, with no rail line anywhere on it — but you still need to move a train. You have two honest choices: put the train's cargo into trucks and drive it down the motorway (that is VoLTE — voice repackaged as IP packets), or drive the train to the nearest old railway and run it there (that is CSFB — send the UE to 2G/3G, which still has tracks). And if a truck is already rolling down the motorway when the road runs out, you transfer its load onto a waiting train before it stops (that is SRVCC).
In 2G and 3G, voice rode a dedicated circuit-switched domain. The MSC set up an end-to-end circuit, reserved a fixed 64 kbit/s timeslot, and speech flowed over it for the whole call. LTE deliberately threw that model away. The Evolved Packet System defined in TS 23.401 is entirely packet-switched: there is no MSC, no CS bearer, no circuit inside LTE to place a call on. Everything — web traffic, video, and voice alike — is an IP packet riding an EPS bearer between the UE and the P-GW.
That is liberating for data and awkward for voice. A phone call is not just "some packets"; it is a low-latency, low-jitter, tightly bounded conversational flow that users judge harshly. So to deliver voice to an LTE UE you have exactly two families of answers. Either you carry the voice as packets over LTE itself using the IP Multimedia Subsystem (that is VoLTE), or you move the UE away from LTE to a radio access that still owns a circuit-switched domain (that is CSFB). A third mechanism, SRVCC, is not a way to start a call at all — it only matters once a VoLTE call already exists and LTE coverage is about to vanish underneath it.
LTE (the EPS) is packet-only: no CS domain, no MSC, no circuit. Voice must therefore be either packetised over IMS on LTE, or handed to a legacy RAT that still has a circuit.
Collapsing to an all-IP core simplifies the network and lets one bearer model serve every service. The price is that voice, historically a circuit service, no longer has a native home and must be re-created as a managed packet flow.
Three named mechanisms fill the gap: VoLTE (native IMS packets on LTE), CSFB (fall to 2G/3G for the call), and SRVCC (carry a live VoLTE call over to a circuit at the coverage edge).
One-line intuition: LTE has no circuit. Either you make voice into packets and keep it on LTE (VoLTE), or you shove the UE onto 2G/3G that still has a circuit (CSFB), or you carry a live packet call over to a circuit as coverage drops (SRVCC).
Which option a given UE actually uses is not arbitrary. It is decided by what the network has deployed, what the UE is capable of, and an explicit indication the network sends during attach — the IMS Voice over PS support flag, covered later on this page. Get that mental model straight and the three options stop being a confusing list and become one decision tree.
VoLTE — Native Voice as Packets over IMS
VoLTE (Voice over LTE) is the target solution, and every other option on this page exists only to work around its absence. In VoLTE the entire call — both the signalling and the speech — is carried as IP packets over LTE, using the IP Multimedia Subsystem (IMS) with the Multimedia Telephony (MMTEL) service layered on top. The UE never leaves LTE, keeps its data session live throughout, and gets the best possible voice quality because the media stays on the fast, low-latency LTE air interface.
Native IMS/MMTEL telephony over LTE. The SIP signalling that registers the UE and sets up or tears down the call rides a non-GBR bearer on QCI=5; the actual voice codec packets ride a dedicated guaranteed-bit-rate (GBR) bearer on QCI=1 that is created the moment the call is answered and released when it ends.
Keeping the call on LTE gives the lowest latency, best voice quality (wideband/EVS codecs), and fastest setup, and it avoids kicking the UE off LTE and its data for every call. It is the only option that genuinely uses LTE for voice, so it is the end-state every operator is migrating toward.
Needs end-to-end support: an IMS/MMTEL core, VoLTE support in the eNB (GBR bearer admission control, robust coverage, TTI bundling / RoHC), and a VoLTE-capable UE. On call setup the network installs the QCI=1 bearer via a dedicated bearer activation and the speech flows over LTE.
The two-bearer split is the single most important VoLTE detail and a perennial interview target. SIP is bursty, delay-tolerant control traffic, so it gets a non-GBR bearer at QCI=5 that is set up when the UE registers with IMS and stays up for the life of the IMS session. The voice media is a steady, delay-sensitive stream, so it gets its own GBR bearer at QCI=1 with a reserved bit rate, created only when there is an active call to carry. Standardised QCI characteristics live in TS 23.401.
| EPS bearer | QCI | Resource type | Priority / delay budget | Carries |
|---|---|---|---|---|
| Voice media bearer | QCI=1 | GBR | Priority 2, ~100 ms packet delay budget | The conversational voice codec packets themselves (RTP) |
| IMS signalling bearer | QCI=5 | Non-GBR | Priority 1, ~100 ms packet delay budget | The SIP messages that register the UE and set up / tear down the call |
The default (non-GBR) bearer used for ordinary internet data typically sits at QCI=9 (or QCI=8), which is why a VoLTE-capable UE ends up with a distinct bearer per traffic class: QCI=9 for data, QCI=5 for IMS SIP, and QCI=1 for the speech. The QCI=1 bearer is the only guaranteed-bit-rate one of the three, which is exactly what protects the conversation from congestion on the shared cell.
Spec anchor: the EPS bearer model and standardised QCI values are in TS 23.401; SRVCC procedures are in TS 23.216; CSFB and SMS-over-SGs procedures are in TS 23.272. The IMS Voice over PS support indication that steers all of this is signalled in the NAS Attach Accept / TAU Accept inside the EPS network feature support IE.
The catch is exactly the one VoNR faces in 5G: VoLTE needs the full stack ready end to end and good enough LTE coverage to sustain a GBR voice bearer without dropping packets. Where IMS is not yet deployed, or where the network operator has not enabled it, VoLTE is simply not on the table and the network must use CSFB instead. And where VoLTE is running but the UE walks past the edge of LTE, SRVCC is what stops the call from dropping. Those are the next two sections.
CSFB — Fall Back to 2G/3G for the Call
CSFB (Circuit-Switched Fallback), specified in TS 23.272, is the classic interim answer for networks that do not yet have VoLTE/IMS. The idea is blunt: the UE does its data on LTE, but the instant a voice call needs to be set up, the network moves the UE down to 2G/3G — which still has a real circuit-switched domain — and the call runs there as an ordinary CS call. There is no voice on LTE in a CSFB network at all; LTE is used only for data and to trigger the drop.
A procedure that moves an LTE UE with a pending CS voice call to GERAN/UTRAN so the call completes on the legacy circuit-switched domain. It requires the SGs interface between the MME and the MSC, and a combined EPS/IMSI attach so the UE is registered in both the PS and CS domains simultaneously.
VoLTE needs IMS end to end plus solid coverage; that takes years to build out. Until then, operators launch LTE for high-speed data but re-use the mature, ubiquitous 2G/3G circuit for voice — fewer dropped calls, no IMS investment required, and a fast path to market.
The UE performs a combined attach; the MME registers it with the MSC over SGs. On an incoming call the MSC pages via the MME; the MME pages the UE on LTE, the UE answers with an Extended Service Request, and the eNB moves it to 2G/3G by inter-RAT handover (PS handover) or by RRCConnectionRelease with redirection.
The trigger sequence is a favourite exam question, so it is worth memorising as four steps:
- At power-on the UE does a combined EPS/IMSI attach; the
MMEregisters it with theMSCover theSGsinterface, so the CS domain always knows which tracking area the UE is in. - For a mobile-terminated call the
MSCsends anSGsAP-PAGING-REQUESTto theMME, which pages the UE on LTE; the UE replies with an Extended Service Request carrying the CS fallback indicator. (A mobile-originated call skips paging — the UE just sends the Extended Service Request directly.) - The eNB moves the UE to GERAN/UTRAN — either an inter-RAT handover (smoother, uses UE measurements, keeps the PS session via PS handover) or
RRCConnectionReleasewith redirection (faster to issue, but the UE must re-acquire and re-connect on the target). - On 2G/3G the UE completes the call as a normal circuit-switched call; when it ends, the UE returns to LTE by reselection or fast return.
SGs; an incoming call pages via the MSC, the UE answers with an Extended Service Request, the eNB moves it to 2G/3G by handover or redirect, and the call runs on the legacy circuit.Handover vs redirect: an inter-RAT handover uses UE measurements and is smoother but slower to prepare; a redirect via RRCConnectionRelease is quicker to issue but the UE must re-select and re-connect on the target, adding call-setup delay. Both are valid CSFB triggers — either way the cost of CSFB is the extra time to leave LTE, which hurts call-setup latency and briefly interrupts the LTE data session. The full step-by-step is on the dedicated CS Fallback page.
SRVCC — Keep a VoLTE Call Alive When LTE Runs Out
SRVCC (Single Radio Voice Call Continuity), defined in TS 23.216, solves a completely different problem from CSFB, and conflating the two is the most common mistake. In SRVCC the call is already a live VoLTE/IMS call running on LTE, and the UE is about to leave LTE coverage — typically because VoLTE coverage is a smaller footprint than legacy 2G/3G. Without intervention the packet call would simply drop as the LTE radio link fails. SRVCC hands the in-progress packet voice call over to a 2G/3G circuit-switched leg so the conversation continues without interruption.
Mid-call continuity: an active IMS/MMTEL voice call on LTE is transferred to a CS bearer on GERAN/UTRAN when the UE moves out of LTE coverage. "Single radio" means the UE only ever transmits on one radio access at a time, so the network — not the UE — must orchestrate the transfer.
VoLTE coverage is often smaller than the legacy 2G/3G footprint, especially at cell edge and indoors. Without SRVCC, walking out of LTE during a call would drop it. SRVCC preserves call continuity at the coverage boundary — the same guarantee CS mobility always gave.
On measurement reports showing LTE is fading, the eNB triggers an SRVCC handover toward the MME. The MME signals an SRVCC-capable MSC Server (the enhanced MSC-S) over the Sv interface, which sets up the CS leg and coordinates with IMS to move the media path from the packet call to the new circuit call, then the LTE leg is released.
Two subtleties are worth carrying into an interview. First, SRVCC needs the enhanced MSC Server and the Sv interface (MME ↔ MSC-S) — a plain legacy MSC will not do, because the transfer has to be anchored and coordinated with IMS session continuity. Second, the reason "single radio" matters at all is battery and cost: earlier dual-radio VCC schemes needed the UE to run two radios at once, which SRVCC explicitly avoids by making the network do the switch while the UE keeps just one transmitter active.
IMS session continuity across the switch is what actually stops the media from dropping, and it hinges on the call being anchored in IMS before the transfer. Modern deployments place the ATCF (Access Transfer Control Function) and ATGW (Access Transfer Gateway) in the media path so that, at the moment of SRVCC, only the access leg is redirected while the far end and the IMS anchor stay put — giving a faster, more reliable transfer than re-anchoring the whole session. The UE signals its SRVCC capability so the network knows the option is available.
The key contrast to memorise: CSFB moves the UE before the call starts — there is no LTE voice call yet because the network has no VoLTE — whereas SRVCC moves a call that is already running on VoLTE. Put differently, CSFB is what a network without VoLTE does for every call; SRVCC is what a network with VoLTE does only when a call is about to fall off the edge of LTE coverage. The dedicated SRVCC page walks the full handover signalling.
Prerequisites — What Each Option Demands
None of these options is free; each requires specific network elements, interfaces, and NAS procedures to be in place before it can work. Laying the prerequisites side by side is the quickest way to see why operators cannot simply "turn on VoLTE" overnight, and why CSFB was the pragmatic first step for almost everyone.
| Option | Core network needs | Access / interface needs | UE / NAS needs |
|---|---|---|---|
VoLTE | Full IMS/MMTEL core (P/I/S-CSCF, TAS); QCI=1 + QCI=5 bearer support in P-GW/PCRF | eNB GBR bearer admission control; solid LTE coverage; robustness features (RoHC, TTI bundling) | VoLTE-capable UE; IMS registration; voice domain preference set to IMS PS |
CSFB | Legacy MSC retained and reachable | SGs interface (MME ↔ MSC); overlapping 2G/3G coverage | Combined EPS/IMSI attach so the UE is registered in both PS and CS domains |
SRVCC | SRVCC-capable MSC Server (MSC-S); IMS session continuity (ATCF/ATGW) | Sv interface (MME ↔ MSC-S); overlapping 2G/3G coverage | VoLTE call already active; UE indicates SRVCC capability |
Beyond call setup, there is a second prerequisite thread that trips people up: the network must tell the UE, explicitly, whether packet voice is even available, and it must have a plan for SMS. Both are handled by NAS-level indications and by choosing an SMS transport.
The IMS Voice over PS indication (commonly the IMS VoPS flag inside the EPS network feature support IE) is sent to the UE in the Attach Accept and TAU Accept. If it says voice over PS is supported in the current tracking area, the UE knows it may attempt VoLTE; if it says not supported, a voice-capable UE knows it must rely on CSFB instead. This is what lets the UE make the VoLTE-versus-CSFB decision per registration area, rather than guessing.
SMS is the other loose end, because a text message historically also rode the CS domain. There are two answers, and which one a network uses tracks its migration stage:
| SMS transport | How it works | Typical use |
|---|---|---|
| SMS over SGs | The MME tunnels SMS to/from the MSC over the same SGs interface used for CSFB paging, so no CS voice fallback is needed just to send a text. | CSFB-era networks; also the SMS fallback for VoLTE networks that have not enabled SMS over IP. |
| SMS over IP | SMS is carried as an IMS (SIP MESSAGE) payload, fully on the packet domain — no CS domain touched at all. | Mature VoLTE networks aiming to retire the CS domain entirely. |
Why the combined attach matters: without a combined EPS/IMSI attach the CS domain has no idea where the UE is, so the MSC cannot page it for a terminating call and cannot deliver SMS over SGs. The combined attach and the SGs interface are therefore the joint foundation of both CSFB voice and SGs-based SMS.
The Operator Migration Path
The three options are not competing products an operator picks between forever — they are stages on a road. Reading them as a timeline explains why almost every operator deployed them in the same order, and why CSFB and SRVCC are gradually being switched off.
Stage 1 — LTE data, CSFB voice. When LTE first launched there was no IMS core and coverage was patchy. Operators lit up LTE for its headline data speeds and pointed all voice at the existing, trusted 2G/3G circuit via CSFB, with SMS over SGs for texts. This got LTE handsets to market quickly with zero risk to the voice service, at the cost of slower call setup and a brief data interruption on every call.
Stage 2 — VoLTE plus SRVCC. As the IMS/MMTEL core was deployed and LTE coverage densified, operators enabled VoLTE so voice finally rode LTE natively. But because VoLTE coverage still had holes, they simultaneously turned on SRVCC so that a VoLTE call reaching the coverage edge could be handed to the 2G/3G circuit instead of dropping. In this stage the network signals IMS VoPS "supported" where VoLTE is available and falls back to CSFB only where it is not.
Stage 3 — VoLTE everywhere, legacy sunset. Once VoLTE coverage matches the legacy footprint and SMS over IP is in place, the CS domain is no longer needed. Operators refarm 2G/3G spectrum for LTE/NR, and the need for both CSFB and SRVCC fades — there is no longer anywhere to fall back to, nor any coverage gap to bridge. This is also why 5G, which never had a CS domain to begin with, uses EPS Fallback to VoLTE rather than any true circuit fallback.
5G analogue: 5G repeats this pattern with new names. VoLTE's successor is VoNR (voice native on NR). The 5G stand-in for CSFB is EPS Fallback — but note it falls back to VoLTE (packet IMS voice on LTE), because the 5G Core has no CS domain to fall back to, so true CSFB cannot exist in 5G SA. SRVCC has largely faded in 5G because operators keep voice on IMS end to end.
Comparing the Three Options
The three options answer different questions, so the cleanest way to hold them in your head is a single table plus a decision tree. Start with the comparison across the four axes that matter — where the voice actually runs, what it requires, the resulting quality, and when the network uses it.
| Axis | VoLTE | CSFB | SRVCC |
|---|---|---|---|
| Where voice runs | On LTE, as IMS packets (QCI=1 media, QCI=5 signalling) | On 2G/3G, as a circuit-switched call | Starts on LTE (VoLTE), continues on a 2G/3G circuit |
| Requires | End-to-end IMS/MMTEL + VoLTE eNB + VoLTE UE, good LTE coverage | SGs interface (MME↔MSC), combined EPS/IMSI attach, 2G/3G coverage | VoLTE + SRVCC-capable MSC-S, Sv interface (MME↔MSC-S) |
| Voice quality | Best — wideband/EVS, low latency, no interruption | Legacy CS quality; slower setup; brief data interruption | Starts HD on VoLTE, steps down to CS quality after transfer |
| When used | Target end-state; the default whenever available | Networks without VoLTE/IMS — move UE to legacy for the call | An active VoLTE call whose UE is leaving LTE coverage |
How does the UE know which of these to expect? During attach the network signals the IMS Voice over PS support indication (the IMS VoPS flag in the EPS network feature support IE) in the Attach Accept / TAU Accept. If it says voice over PS is supported, the UE knows it can attempt VoLTE; if not, and the UE has voice capability, it uses CSFB. Combined with the UE's own configured voice domain preference, this fixes which option is used per registration. The decision tree below folds all three options together.
IMS and a QCI=1 media bearer are available the UE uses VoLTE, otherwise it uses CSFB to a 2G/3G circuit. Only for an already-active VoLTE call whose UE is losing LTE coverage does SRVCC apply, carrying the call over to a circuit so it does not drop.LTE ↔ NR: 5G solves the same "no circuit domain" problem, and the 5G Core is even more strictly packet-only. The direct heir to VoLTE is VoNR (voice as IMS packets native on NR, using 5QI-based flows rather than QCI). Where NR coverage or IMS-on-NR is not ready, the AMF triggers EPS Fallback (or RAT fallback) to move the UE to LTE and complete the call as VoLTE — there is no true CSFB in 5G SA because there is no CS domain to fall back to. SRVCC from NR to 3G was specified but is rarely deployed; operators keep voice anchored in IMS and lean on EPS Fallback instead.
Summary
LTE has no circuit-switched domain, so voice has to be reconstructed — and the three options are the three honest ways to do it. VoLTE carries the call as IMS packets natively on LTE, splitting SIP signalling onto a non-GBR QCI=5 bearer and the voice media onto a guaranteed QCI=1 bearer; it is the target end-state and the default whenever the IMS core and coverage allow. CSFB is the pre-VoLTE workaround that moves the UE to a 2G/3G circuit at call setup, needing the SGs interface and a combined EPS/IMSI attach. SRVCC is the mid-call rescue that hands an already-running VoLTE call to a circuit at the coverage edge, needing an SRVCC-capable MSC-S and the Sv interface.
The cleanest mental test is timing and starting point: CSFB acts before the call and there is no LTE voice call at all; SRVCC acts during a call that is already VoLTE. The IMS VoPS indication in the Attach/TAU Accept, plus the UE's voice-domain preference, decides VoLTE versus CSFB per registration area. Read as a migration timeline — CSFB first, then VoLTE+SRVCC, then VoLTE everywhere with the CS domain retired — the whole set falls into place, and its 5G echo (VoNR with EPS Fallback) follows the same logic.
Quick Q&A
Q. Why does LTE need voice "options" at all — why not just carry the call?
A. Because the EPS is packet-only (TS 23.401). There is no circuit-switched domain and no MSC inside LTE, so a classic voice call has nothing to run on. You either turn voice into packets over IMS (VoLTE) or move the UE to 2G/3G, which still has a circuit (CSFB).
Q. Which QCI values does VoLTE use, and what does each carry?
A. Two bearers. IMS signalling (SIP) rides a non-GBR bearer on QCI=5; the voice media (RTP codec packets) rides a dedicated GBR bearer on QCI=1 created when the call is answered. The GBR bearer is what reserves the bit rate the conversation needs.
Q. What is the difference between CSFB and SRVCC?
A. Timing and starting point. CSFB moves the UE to 2G/3G before the call — the network has no VoLTE, so it never sets up an LTE voice call; it needs the SGs interface and a combined attach. SRVCC acts during a call already running as VoLTE, handing it to a CS leg when the UE leaves LTE coverage so it does not drop; it needs an SRVCC-capable MSC Server and the Sv interface.
Q. How does the UE decide whether to use VoLTE or CSFB?
A. From the IMS Voice over PS (IMS VoPS) support indication the network sends in the Attach Accept / TAU Accept, combined with the UE's own voice domain preference. If IMS VoPS indicates PS voice is supported, the UE attempts VoLTE; otherwise it uses CSFB.
Q. Why is a combined EPS/IMSI attach required for CSFB?
A. It registers the UE in the CS domain (the MSC) as well as the PS domain, over the SGs interface. Without it the MSC would not know where the UE is and could neither page it for a terminating call nor deliver SMS over SGs.
Q. If a network has VoLTE, does it still need SMS over SGs?
A. Only until it enables SMS over IP. A VoLTE network without SMS-over-IP still delivers texts via SMS over SGs (tunnelled through the MME to the MSC). Once SMS over IP is deployed, SMS rides IMS as a SIP payload and the CS domain can be retired.
Where these options connect
Each option has its own detailed procedure — the packet call setup, the fallback to legacy, and the mid-call rescue — and each is the natural next read from here.