courses > Cellular IoT Foundations > Cellular network architecture and radio fundamentals
Cellular network architecture and radio fundamentals
It sits between the radio base stations and the internet, and because it is packet-switched from the ground up, it is well-suited to data-only IoT traffic.
The eNodeB handles radio access, the MME handles control signaling, the HSS stores subscriber identity, the SGW routes local data, and the PGW is the gateway to the internet.
Data flows through the user plane (eNodeB → SGW → PGW), while signaling flows through the control plane (eNodeB → MME → HSS).
Because it tracks which devices are asleep and when they wake, it is the component behind Power Saving Mode (PSM) and eDRX.
It assigns IP addresses and applies APN and QoS policies, so decisions like private vs. public APN are really PGW-configuration decisions.
When a device won't attach, the components tell you whether to look at the radio (eNodeB), the signaling (MME/HSS), or the data path (SGW/PGW).
When your IoT device sends a simple temperature reading, that pulse of data triggers a high-speed relay race across a sophisticated infrastructure called the Evolved Packet Core (EPC) — the all-IP backbone of modern LTE networks. This lesson traces the path your data takes from the radio base station through the network core to the internet. By the end, you'll have the mental model needed to troubleshoot connection issues and optimize device performance with confidence.
The EPC is the "core network" — the infrastructure that sits between the radio base stations your device connects to and the internet or private data networks your data needs to reach. Introduced in the 3GPP Release 8 specification, it is an all-IP, packet-switched architecture, meaning there is no circuit-switched voice legacy baked in — everything is data packets from the start. Before LTE, cellular networks were built for voice calls first and data second; the EPC changed that completely. This matters for IoT because IoT devices almost never make voice calls — they send data — and the EPC was designed from the ground up to handle that traffic efficiently.
The eNodeB (Evolved Node B) is the base station — the cell tower your IoT device communicates with over the air. It handles the radio interface, managing everything from signal modulation to scheduling which devices get to transmit and when. In LTE, the eNodeB is smarter than its 2G and 3G predecessors: it makes many radio resource decisions locally, which reduces latency and improves efficiency. It connects to the core network through two separate interfaces — the S1-MME interface for control signaling and the S1-U interface for user data.
The MME (Mobility Management Entity) is the brain of the control plane. It handles all the signaling between your device and the network:
The HSS (Home Subscriber Server) is the network's primary database of subscriber information. It stores the device's identity (the IMSI from the SIM), its authentication keys, its service profile, and its current location. When the MME needs to authenticate a device, it queries the HSS — think of the HSS as the network's "identity and permissions" database.
The SGW (Serving Gateway) is the first stop for user data — the actual payload your device sends. It acts as a local data anchor, routing packets between the eNodeB and the PGW, managing the data-path switch during handovers so packets aren't lost, and buffering downlink data when a device is idle until the MME pages it awake.
The PGW (Packet Data Network Gateway) is where your device's data exits the cellular network and enters the internet or a private enterprise network. It assigns your device its IP address, enforces Quality of Service (QoS) policies, and handles charging and accounting. It's also where operators can apply traffic filtering, deep packet inspection, or route traffic through a private APN for security.
A simple transmission from your temperature sensor follows a clear path:
Meanwhile, the signaling that set up this session — authentication, bearer establishment, security — flows through a parallel path: from the eNodeB through S1-MME to the MME, and from the MME to the HSS for credential verification. These components work as an integrated system, not isolated boxes.
1. What is the Evolved Packet Core (EPC)?
2. Which EPC component assigns your IoT device its IP address?
3. In the EPC, which path does user data take from the device to the internet?
Understand what the Control Plane and User Plane are, why they're separated, and what the MME, SGW, and PGW each do within their respective planes.
Start lesson