Private 5G

• 1: Solution
• 1.1: Overview
• 1.2: Components
• 1.3: Design

1 - Solution

1.1 - Overview

The current landscape of enterprise networking is experiencing a profound transformation, supported by the emergence of private 5G networks. Though public 5G networks provide enhanced mobile broadband experiences to consumers and enterprises, private 5G (P5G) enables organizations to deploy dedicated, high-performance cellular networks for their specific requirements and based on the latest 3GPP standards. P5G complements Wi‑Fi to provide a customized experience under enterprise control, over large areas, and with dedicated resources—supporting wide area, high speed, deterministic, and latency-sensitive applications.

Private 5G offers the following:

• Separation from public network

• Control radio to configure fine-grained QoS/SLA

• Spectrum protected from wireless interference

• SIM‑based device identity

• Ability to cover larger areas than Wi‑Fi per radio

• Improved handover with support for high mobility

HPE Aruba Networking is at the forefront of this evolution, offering robust and scalable private 5G solutions tailored for diverse industry needs.

In the United States, the Federal Communications Commission (FCC) has played a crucial role in enabling private 5G networks by opening 150 MHz of the Citizens Broadband Radio Service (CBRS) band (3.55 GHz – 3.70 GHz) for shared use without additional costs and contractual agreements associated with carrier contracts. CBRS is a spectrum-sharing framework in the 3.5 GHz band that enables dynamic allocation of frequency resources among different tiers of users. The three-tiered access model includes:

• Incumbent Access

• Priority Access License (PAL)

• General Authorized Access (GAA)

Incumbent Access users, such as naval radar systems, have the highest priority and protection. PAL users, typically commercial entities, have priority over GAA users, who can utilize the spectrum opportunistically when it is not in use by higher-tier users. Within the CBRS band, a portion is designated for PAL users, specifically between 3550 MHz and 3650 MHz. This constitutes 100 MHz of the total CBRS band. Up to seven PALs may be licensed in any given county, subject to a cap of four aggregated PAL channels per licensee. In other worfs, full 150 MHz CBRS spectrum is available for general authorized access out of which 70 MHz may be reserved for PAL holders (per US county). Typically, each channel is 10 MHz.

P5G vs Wi-Fi

The future of the enterprise network is not either/or. Multiple different types of connectivity — Wi‑Fi, wired, Bluetooth, Zigbee, private 5G, LoRa and others — are and will continue to be used in the enterprise to support a wide range of use cases. The direction will evolve from focusing on the specific type of network connectivity and devices to one that uses connectivity as a way to meet business outcomes.

Private 5G and Wi‑Fi have often been discussed in terms of one vs. the other. However, the two are highly complementary and enterprises are exploring new ways to use private 5G and Wi‑Fi 6/Wi‑Fi 6E in tandem:

• Private 5G provides wider area coverage, high-speed mobility, and deterministic network access.

• Wi‑Fi 6, Wi‑Fi 6E (802.11ax) and Wi-Fi 7 (802.11be) deliver the highest network capacity in dense deployments, particularly indoors.

Advantages of P5G

Enterprises are adopting private 5G for many reasons, including the strengths in the following areas:

• Segmentation of mission‑critical traffic: Some enterprises are looking to deploy a separate network for business‑critical applications that operates over relatively clean spectrum alongside existing Wi‑Fi networks. For example, a large public venue might deploy private cellular for back‑office applications like mobile ticket scanning and reserve the Wi‑Fi network for guest use.

• Wider area coverage: Due to higher power limits, and higher radio receiver sensitivity, private 5G can cover more area per access point (albeit at a lower per‑AP throughput). Less cabling is needed which lowers costs, minimizes the impact on landscaping, and simplifies the connection to hard‑to‑reach areas like mines.

• Deterministic network access: Private 5G infrastructure coordinates the resources of each forwarding node to guarantee priority, latency, and bandwidth per application per device. To illustrate how this works in practice, consider a busy conference room. With private 5G, the moderator ensures that each attendee gets their turn to speak and that no one talks over another person.

• High‑speed mobility: High‑speed mobility without any loss of connectivity is required to avoid costly work stoppages. With private 5G, hand‑off decisions are controlled by the network and benefit from the wider area coverage that requires fewer handoffs. Private 5G is ideal for robotics, autonomous vehicles, and warehouse operations.

• Seamless indoor cellular coverage: Private 5G ensures uninterrupted connectivity across all areas of a facility. This reliable coverage supports critical operations and enhances communication and productivity within the organization.

Key use cases for P5G

Private cellular networks (LTE and 5G) represent an emerging market with most investments thus far in energy, mining, manufacturing, transportation, logistics, government, and public venues. As private cellular networks become more closely integrated with existing Wi-Fi networks, opportunities open across a broader range of markets, including coverage over larger areas, segregating guest from back-of-house traffic, ensuring more deterministic mobility for high-velocity IoT clients, or filling gaps in public network coverage. Examples include:

• Retailers can operate mobile point-of-sale devices and inventory scanners, connect building IoT systems, feed ruggedized tablets on forklifts, and power robotic warehouse systems.

• Manufacturers can use wirelessly enabled power tools to record every aspect of a product’s creation as the product moves down the line, and apply machine vision systems for automated quality inspection.

• Public venues can perform ticket scanning, enable push-to-talk (PTT) voice communication between staff members, and provide secure sideline data terminals for sports teams to make real-time decisions.

• Hospitals can deliver latency-sensitive medical telemetry to nursing stations and electronic medical record servers, and provide PTT voice communication for clinical staff, and enhance in-building cellular service for patients, families, and staff.

• Mining and heavy industry can cover large areas without the need to run cable.

• Educational institutions can backhaul massive data from security cameras and provide wide-area outdoor coverage.

• The transportation sector can use P5G on connected vehicle, fleet management, logistic optimization and real-time traffic planning.

• The energy sector can use P5G for remote monitoring, digital oil fields, grid monitoring, mines.

HPE Aruba Networking Private 5G

HPE Aruba Networking Private 5G is a full stack offering designed to meet enterprise requirements. As part of the solution, two flexible deployment options are available.

1. “Turnkey” as a full stack, integrated deployment in which all components of the solution, including small cell radios, are supplied and supported by HPE.

2. “Modular,” in which the customer deploys 4G/5G mobile core technology but leverages third party small cell radios, SIMs, and other components to support regional requirements and/or specialized use cases.

1.2 - Components

The HPE Aruba Networking Private 5G turnkey deployment model masks the complexity inherent in private cellular network deployments. Typically, enterprises work with up to 7 vendors for dashboard customization, mobile core, underlying server, indoor or outdoor radios, and SIM or eSIM cards, plus assistance from communication services providers knowledgeable in 3GPP to configure and manage the solution.

To facilitate the purchase, deployment, and management of private cellular networks, private 5G turnkey option includes everything needed for an enterprise to deploy a private cellular network, eliminating the complex and time-consuming process of dealing with multiple vendors. In addition, configuration automation enables network administrators to set up and manage a private cellular network without expertise or extensive training related to cellular concepts.

The turnkey option includes components and offerings that are all pre-integrated and supported:

• Cloud-based management dashboard

• HPE server(s) as core appliance

• Combo 4G/5G mobile core software

• Small cell Radios (4G/5G Indoor and outdoor)

• Spectrum Access System (required for U.S. deployments)

• Physical SIM or eSIM

Cloud-based management dashboard

The cloud dashboard is a federated, multi-tenant management layer, designed with a similar look and feel as HPE Aruba Networking Central for ease of use. It includes zero touch provisioning and multiple easy to follow wizards such as creating a network, adding subscribers, and more for ease of automation. The dashboard also provides user-specific access and roles to enhance security and allows network administrators to setup and manage the network without extensive training.

Hardware appliance

An HPE ProLiant server is used for the solution which is a scalable platform that delivers exceptional compute performance, memory density, and scalability along with the high-speed data transfer rate needed to run mobile core technology. The HPE ProLiant server is engineered to optimize IT services with a cloud operating experience, built-in security, and optimized performance for workloads to drive business forward. The appliance is pre-loaded and pre-configured with required core software. The appliance can be used either in redundant (HA) or non-redundant (non-HA) setups.

Private 5G core

The private 5G core consists of combo 4G/5G software that is pre-loaded and pre-configured on the core appliance. The core functions as the central control unit of the private cellular network, performing tasks such as mobility control, subscriber management, and policy enforcement. The software includes all 4G and 5G services so organizations can begin with 4G (often to support existing device types) and then migrate to 5G without needing to upgrade the software version or altogether start with 5G. This provides much flexibility for organizations switching between 4G and 5G without the need to change hardware or the software.

The necessary software and network functions are pre-loaded and pre-configured as virtual machines (e.g., control plane, user plane, etc.) along with an Operation and Maintenance (OAM) VM that is responsible for connectivity to the cloud dashboard.

Small cell radios (4G and 5G)

Small cell radios (4G and 5G) make up the cellular RAN (Radio Access Network). The private 5G Small Cells are offered in both indoor and outdoor options that operate on b48 (LTE) and n48 (5G) frequency bands in the U.S. With these options, a variety of enterprise user endpoints and use cases can be supported. For analogy purposes, small cell radios can be compared to Wi-Fi access points that connect end-user devices.

The small cell radios are designed to enhance coverage and capacity in dense indoor and outdoor environments, making them ideal for applications in smart factories, campuses, and other enterprise settings. Data privacy and control are ensured by confining the private 5G network within enterprise premises, while also providing scalability to adapt to evolving connectivity needs. Advanced features such as network slicing, edge computing, and enhanced mobility further optimize network performance, empowering organizations to harness the full potential of 5G technology for their digital transformation initiatives.

Early deployments will configure the radios with the necessary information to connect to the core and communicate with the SAS server, future versions will leverage the radio management software to control the radios.

Spectrum access system (SAS)

For U.S. markets, the private 5G turnkey option also includes integration with a Spectrum Access System (SAS) provider to enable use of shared spectrum, in the 3.55 – 3.70 GHz band know as Citizen’s Broadband Radio Service (CBRS), thereby eliminating the need to acquire spectrum from mobile operators. SAS dynamically allocates spectrum access to different users based on the location of small cell radios and prioritizes usage to prevent interference with existing incumbents, ensuring efficient and fair use of the available frequencies.

The private 5G turnkey option is integrated with Federated Wireless SAS to protect incumbents, eliminating the need for customers to interact with the SAS user interface. This ensures a seamless experience without any direct customer involvement with the SAS interface.

SIM/eSIM

A SIM (Subscriber Identity Module) is a small card used in end user mobile devices to store information that uniquely identifies a user to a mobile network. SIM can be either in a physical form factor that typically need to be inserted in a SIM slot on the end user device or as an eSIM (Embedded SIM) that is embedded directly into a device and can be programmed with profiles without need for a physical card. The key functions of a SIM/eSIM include:

• Identification: The SIM card stores the International Mobile Subscriber Identity (IMSI), a unique number that identifies the user within the mobile network.

• Authentication: When a device connects to a network, the SIM card is used to authenticate the user’s access to the network. This involves verifying the IMSI and a unique authentication key stored on the SIM.

• Storage: SIM cards can store limited amounts of data, such as contacts and text messages. However, modern smartphones often use internal memory or cloud storage for these functions.

• Network Access: The SIM card contains information about the network, including the Mobile Country Code (MCC) and Mobile Network Code (MNC), which help the device connect to the appropriate cellular network.

With private 5G, organizations can purchase physical SIMs or eSIMs in packs of 10 to simplify the purchasing process. Provisioning of SIMs/eSIMs can be performed via CSV files or manual updates using the cloud-based management dashboard interface.

User equipment

User Equipment (UE) is any device connecting to the cellular network. The SIM/eSIM can be used on UE such as smartphones, tablets, 5G bridges, IoT devices, etc.

The UE and RAN must support the same generation of cellular:

• All 4G UE will connect to a 4G small cell radio

• 4G UE will not connect to a 5G small cell radio

• Most 5G UE will connect to 4G small cell radio

• All 5G UE will connect to 5G small cell radio

The bottom line is that backward compatibility depends on the UE and not the RAN.

Combining the private 5G key components, a high-level workflow of the solution is as follows: end-user SIM-enabled devices connect to the private 5G network through small cell radios, which securely interface with a 4G/5G combo core. The core then manages network access based on configured authentication, network slicing, and policy enforcement to redirect user traffic to private apps or to internet.

1.3 - Design

Key elements necessary for deploying the HPE Aruba Networking Private 5G turnkey option are detailed, starting with an overview of the general architecture. Guidance is provided on planning and determining the specific hardware and software subscriptions required for a particular site, ensuring optimal network performance and coverage. Additionally, comprehensive plans for the necessary network infrastructure are included, encompassing all critical components and configurations needed to establish a robust and efficient private 5G deployment.

General architecture

Building on the key components of the private 5G turnkey deployment, the integration of these components within the overall architecture is examined. The analysis highlights the placement of each element—such as small cell radios, the 4G/5G combo core, and other critical infrastructure within the private 5G network—illustrating their roles and interactions in delivering comprehensive and efficient network services.

1. Cloud management dashboard:

   • Starting point for managing the private 5G network at the customer site, including configuration of core, SIM/subscriber information, network services, PLMNs, etc.

   • License or subscription enablement occurs here for licensing the radios and UEs.

   • All the services and orchestration are implemented and run here

2. Hardware appliance (resides on-premises)

   • The M2000 core appliances are mounted and deployed on-premises at customer site

   • Serves as the demarcation for ingress/egress of Private 5G traffic

   • Terminates traffic from indoor and outdoor 4G and 5G small cell radios

3. Small cell radios: (resides on-premises)

   • 4 options: 4G indoor or outdoor radio, 5G indoor or outdoor radio

   • 5G small cell radios are designed for higher performance, offering faster speeds, lower latency, and greater network efficiency. However, they exclusively support 5G UEs, meaning older 4G-only devices cannot connect. These radios are ideal for applications requiring advanced 5G capabilities, such as ultra-reliable low-latency communication (URLLC) and high-bandwidth applications.

   • 4G small cell radios support a wide range of devices, including older and typically more cost-effective UEs. These radios are compatible with both 4G and 5G UEs, allowing seamless connectivity for legacy and modern devices alike. However, when used with a 5G UE, connectivity is limited to 4G capabilities.

4. SIMs/eSIMs: (resides in UE - User Equipment)

   • Both physical SIM and eSIMs are supported

   • SIM provisioning is orchestrated through cloud management dashboard

Procurement workflow

Deploying the private 5G turnkey option includes purchasing both hardware appliances as well as software subscriptions. Determining the number of hardware and software subscriptions required for a private 5G deployment involves assessing the specific coverage area, user density, and network performance needs. This process includes:

1. Evaluate the necessary small cell radios options from the RF design perspective

   • Indoor and/or Outdoor, 4G and/or 5G small cell radios

2. Determine the number of M2000 core appliances are required (two are required for full redundancy)

   • One core appliance (standalone) supports up to 150 small cell radios and 4000 subscribers

   • Two core appliances (redundancy) support up to 250 small cell radios and 6000 subscribers

3. Based on the small cell RF design, define:

   • Type and quantity of small cell radios

   • Duration of small cell radio subscriptions (1, 3, 5, 7, and 10-year subscriptions)

4. Based on end user device survey, define the User Equipment (UE)/Device subscription

   • Determine the quantity of SIMs/eSIM required

   • Duration of user device subscriptions (1, 3, 5, 7, and 10-year subscriptions)

Once the requirements are established, the ordering process can be streamlined by working with HPE Aruba’s sales and support teams to ensure a tailored and efficient deployment.

Network planning

The private 5G turnkey option includes M2000 core appliance(s) and small cell radios that will be deployed on-premises alongside the customer’s existing network infrastructure. This deployment involves the small cell radios communicating with the M2000 core appliance, the M2000 core appliance interacting with the cloud dashboard, and the small cell radios connecting with the Spectrum Access System (SAS) in the United States. Additionally, managing data traffic requires careful network planning. Therefore, it is essential to identify requirements such as VLAN reservations, switch connectivity, and the specific ports that need to be opened on the customer site’s firewall.

Required VLANs for M2000 core

Required VLANs for small cell radios

The small cell radios should be able to communicate both to the Radio VLAN IP addresses defined on the M2000 core and to SAS (https://spectrum-connect.federatedwireless.com/v1.2) on the Internet for US. DNS should be configured (manual or through DHCP) on radio. For handoffs between radios, PTP grandmaster can be used. If PTP grandmaster is planned to be used on site, the small cell radios should be able to reach the PTP grandmaster.

Ports to be opened in on-premises firewall