>
Home5G NTNMobility & Higher LayersNR-NTN Call Flow
📡 Mobility & Higher LayersAdvanced

NR-NTN Call Flow — GNSS Fix to PDU Session

Every message a UE and network exchange from cold power-on to a data-carrying PDU session on an NR-NTN cell — and how many round trips of satellite delay each stage actually costs.

📚 3GPP-basedTS 38.331TS 38.300TS 23.502

The individual NR-NTN mechanisms — timing advance, Doppler, RACH, RRC — are easier to reason about once you see where each one sits in a real connection. This page walks a single UE end to end: GNSS fix, SIB19 acquisition, PRACH, RRC setup, NAS registration, and PDU session establishment, with a running note on how many satellite round trips each stage burns. On a GEO cell (≈540 ms round trip) that accounting is the difference between an attach that completes in a couple of seconds and one that takes ten.

Introduction

This is the same registration flow that a terrestrial NR device runs — cell selection, random access, RRC setup, NAS registration, PDU session establishment — with one new stage bolted on the front (GNSS acquisition) and every subsequent stage carrying more round-trip weight than its terrestrial equivalent. Nothing here replaces the terrestrial procedures; it schedules them around a much longer propagation delay.

Before RRC: GNSS and SIB19

  1. GNSS fix acquisition. The UE acquires its own position (cold start can take several seconds; a warm/assisted fix is much faster). No RF exchange with the satellite is needed for this step — it’s a receive-only GNSS operation.
  2. Cell search & SIB acquisition. The UE synchronises to the NR-NTN cell’s SSB, reads MIB/SIB1, then reads SIB19 for ephemeris, ta-Common, cellSpecificKoffset, kmac and the elevation-angle threshold.
  3. Local computation. Combining its GNSS position with the broadcast ephemeris, the UE computes its own timing-advance term and Doppler pre-compensation — see Timing Advance and Doppler & Frequency Pre-compensation. Only once this is done does the UE consider itself ready to attempt access.

Random access: PRACH to Msg4

With TA and Doppler pre-applied, the UE runs 4-step (or 2-step) random access as described in Random Access in NTN and PRACH & Preamble:

  1. Msg1 (PRACH preamble) — sent pre-advanced and frequency pre-compensated so it lands inside the gNB’s detection window despite the long path.
  2. Msg2 (RAR) — arrives after roughly one round trip; carries the closed-loop TA residual and the uplink grant for Msg3. The grant timing already accounts for cellSpecificKoffset so the scheduled Msg3 slot isn’t in the past by the time it arrives.
  3. Msg3 (RRCSetupRequest) — the UE’s first RRC message, carried on the granted PUSCH resource, requesting a connection with an establishment cause.
  4. Msg4 (RRCSetup, contention resolution) — the gNB confirms the UE won contention and delivers the RRC connection configuration.

This exchange alone costs roughly two full round trips (Msg1→Msg2, Msg3→Msg4) before the UE has an active RRC connection — on GEO that’s over a second before signalling has even reached NAS.

RRC connection setup

On receiving RRCSetup, the UE moves to RRC_CONNECTED and replies with RRCSetupComplete, which piggybacks the first NAS message (typically a Registration Request) so NAS signalling doesn’t need its own separate round trip to get started. See RRC & Connection Control (NR-NTN) for the NTN-specific IEs (NTN-Config, timer scaling) carried in this exchange.

NAS registration over the new RRC connection

  1. Registration Request (inside RRCSetupComplete) reaches the gNB, is forwarded over NGAP to the AMF.
  2. Authentication — AMF/AUSF challenge, UE responds with 5G-AKA material. Each authentication round trip pays the full satellite delay again.
  3. Security Mode Command / Complete — activates AS/NAS security.
  4. Registration Accept — confirms registration, assigns/updates the 5G-GUTI and TAI list. Because NTN tracking areas can map onto beam footprints or fixed ground cells depending on deployment, the TAI list here matters more for mobility than it does terrestrially — see GNSS, Location & TACs.

PDU session establishment and DRB setup

  1. PDU Session Establishment Request (NAS, often piggybacked or sent shortly after registration) reaches the SMF via AMF.
  2. SMF/UPF path setup — N4 session at the UPF, IP address allocation.
  3. RRCReconfiguration — the gNB configures the data radio bearer(s) mapped to the new PDU session’s QoS flows.
  4. RRCReconfigurationComplete — UE confirms; user-plane data can now flow, subject to the same TA/Doppler tracking continuing throughout the connection as the satellite moves.

Reading the flow as a log

Representative sequence — illustrative, exact message names/order vary by vendor trace format:

t=0.00s UE: GNSS fix acquired (age=0ms) t=0.05s UE: SIB1 + SIB19 read -> ephemeris, ta-Common, kOffset=541 slots (GEO) t=0.06s UE: local TA/Doppler pre-comp computed t=0.06s UE -> gNB: Msg1 PRACH preamble (pre-advanced, freq pre-compensated) t=0.60s gNB -> UE: Msg2 RAR (RTT ~0.54s) + UL grant (Koffset applied) t=0.61s UE -> gNB: Msg3 RRCSetupRequest t=1.15s gNB -> UE: Msg4 RRCSetup (contention resolved) t=1.16s UE -> gNB: RRCSetupComplete [+ NAS Registration Request] t=1.70s AMF -> UE: Authentication Request t=2.24s UE -> AMF: Authentication Response t=2.78s AMF -> UE: Registration Accept t=3.32s UE -> SMF: PDU Session Establishment Request t=3.90s gNB -> UE: RRCReconfiguration (DRB setup) t=3.91s UE -> gNB: RRCReconfigurationComplete t=3.92s Data plane active

Round-trip budget by cell type

StageRound tripsLEO-600 (≈4–8 ms/trip)GEO (≈540 ms/trip)
RACH (Msg1→Msg4)~2~16–30 ms~1.1 s
Authentication~2~16–30 ms~1.1 s
Registration Accept~1~8–15 ms~0.54 s
PDU session + DRB setup~2~16–30 ms~1.1 s
Approx. total~7≈60–100 ms≈3.5–4 s

Figures are illustrative order-of-magnitude estimates for the signalling round trips only; they exclude GNSS acquisition time, processing delays, and any retransmissions.

Summary

The NR-NTN call flow is the terrestrial 5G registration and PDU session procedure with one extra step at the very front (GNSS fix) and a round-trip cost at every stage that scales with orbit — a few tens of milliseconds on LEO, several seconds on GEO. Nothing in the message sequence itself changes; what changes is the patience the UE and network timers need, which is exactly what RRC timer scaling exists to provide.

Q&A Interview quickfire

Q. What is the one stage in an NR-NTN call flow that has no terrestrial equivalent at all?

A. GNSS fix acquisition before cell access is attempted. Terrestrial NR devices don't need their own position to access a cell; NR-NTN devices do, because the UE itself computes the timing-advance and Doppler pre-compensation that random access depends on.

Q. Roughly how many satellite round trips does registration plus PDU session setup cost on a GEO cell?

A. On the order of six to seven round trips across RACH, authentication, registration accept, and PDU session/DRB setup — at ~540 ms per round trip on GEO that's on the order of a few seconds of pure propagation delay before data can flow.

🎯

Preparing for a 4G/5G technical interview?

Mastering end-to-end call flows message-by-message is the baseline interviewers expect for tier-1 network testing and design roles. Get live feedback on how you hold up under real questions.

Book a Mock Interview ₹199 →

Where this leads next

The IoT-NTN call flow follows the same shape with a narrowband, lower-power UE in place of an NR device — worth comparing directly.