PlatformsFaststream SiliconFaststream RadioFaststream VisionConnected EdgeFaststream SecureMobility & Rail
ProductsSemiconductor IPWireless & RANEdge & GatewaysTracking & IdentificationSoftware & FrameworksConnected Systems
TechnologyRTL to GDSIIVerification methodologyDFT and silicon testLow-power designMixed-signal integrationDesign enablement5G protocol stackWireless and RF architectureBaseband and low PHYForward error correctionControl and data planeHigh-speed interfacesFirmware and bootSilicon root of trustSoftware-defined vehicleAutomotive OTAFunctional safety
AIAI Engineering ServicesEdge AI & Embedded MLComputer Vision EngineeringSensor Fusion & PerceptionAI Silicon & AccelerationMLOps for DevicesAI Visual InspectionPredictive MaintenanceDriver MonitoringVideo Analytics & Safety
SolutionsSemiconductorIndustrial AIConnected ProductsAsset TrackingAutomotive & MobilitySmart InfrastructureSecure IdentityWireless & SatelliteSmart WashroomsFuel ManagementSmart BuildingsWorker SafetyEnergy MonitoringSmart AgricultureSmart CityAutonomous PlatformsAssembly AutomationLiDAR Rail SafetyHardware Wallet
IndustriesSemiconductorTelecommunicationsIndustrial & ManufacturingAutomotive & MobilityTransportation & RailAerospace & DefenceHealthcare & MedicalEnergy & UtilitiesOil & GasRetailConsumer ElectronicsMedia & EntertainmentSmart Infrastructure & IoT
ServicesSystem Integration overviewASIC & SoC DesignFPGA DesignFPGA-to-ASIC ConversionAnalog, Mixed-Signal & RFHardware & High-Speed PCBEmbedded SoftwareCloud, OTA & Device ManagementManufacturing TransitionHow we engage
InsightCase StudiesKnowledge CenterWhite PapersGlossaryNewsletterResources & Support
CompanyAbout FaststreamEngineering ExcellenceLeadership & OrganisationHow We EngageQuality & ComplianceStandards & EcosystemPartners & EcosystemTrust CentreLocations & DeliveryNewsroom & MediaCareers
ContactStart a projectHow we engage
Talk to an engineer
APPLICATION NOTE

N3IWF: bringing Wi-Fi into the 5G core

A device can reach the 5G core over a network the operator does not own. The non-3GPP interworking function is the gateway that makes that possible — and it matters most where cellular coverage is poor, spectrum is unavailable, or an enterprise already has a wireless network it would rather keep.

N3IWFWiFiNon-3GPPUntrusted access5G coreConvergence
ShareLinkedInXEmail
THE FUNCTION

A tunnel that makes Wi-Fi look like access.

The 5G core expects to authenticate a subscriber and manage sessions. It does not, in principle, require that the subscriber arrived over 3GPP radio. The non-3GPP interworking function is what allows a device on a Wi-Fi network to present itself to the core as though it had.

The device establishes a secure tunnel to the interworking function over whatever IP connectivity it has. Signalling that would normally traverse the radio interface is carried inside that tunnel, and once established the core treats the session much as it would a cellular one — same identity, same policy, same session management.

The distinction that matters is trusted against untrusted access. Untrusted access assumes the intervening network is hostile and secures everything end to end to the interworking function. Trusted access, where the operator has a relationship with the access network, permits a lighter arrangement. Most enterprise deployments are untrusted, because the operator does not control the Wi-Fi.

WHERE IT EARNS ITS PLACE

Four situations where this is the right answer.

WHAT IS HARD

Five things that are not in the specification.

COMMON QUESTIONS

What engineers ask before they call.

01

What is N3IWF?

The non-3GPP interworking function: a gateway allowing a device to reach the 5G core over a network that is not 3GPP radio, typically Wi-Fi. The device builds a secure tunnel to it, and signalling that would normally cross the radio interface is carried inside that tunnel.

02

What is the difference between trusted and untrusted non-3GPP access?

Untrusted access assumes the intervening network is hostile and secures everything end to end to the interworking function. Trusted access, where the operator has a relationship with the access network, allows a lighter arrangement. Enterprise deployments are usually untrusted, because the operator does not control the Wi-Fi.

03

Why would an enterprise use this instead of private 5G?

Because it requires no licensed spectrum and no cellular radio deployment. Where a building already has good Wi-Fi and poor cellular penetration, extending core services over the existing network is considerably cheaper than building coverage.

04

What are the practical difficulties?

Mainly that the intervening network is not under operator control, so latency and loss cannot be managed the way radio resources can. Tunnel establishment also costs time and battery, mobility between access types is where implementations differ most, and device support is uneven.

FOUND THIS USEFUL?

Pass it on.

Written for engineers. Share it with one.

ShareLinkedInXEmail
KEEP READING

Related work.

BUILD WITH FASTSTREAM

Bring us the difficult part.

Tell us the specification, the constraint and the deadline. Programmes that cross silicon, radio, embedded and AI are where Faststream is strongest.