HiCellTek HiCellTek
← Home

What This Page Covers

5G field testing methodology for Gulf Cooperation Council operators (Saudi Arabia, UAE, Qatar, Kuwait): 5G SA registration failure diagnosis using 5GMM cause codes, mmWave walk test methodology for FR2 deployments in urban cores, enterprise URLLC validation for Vision 2030 projects, and NSSAI slicing verification per 3GPP TS 24.501 and TS 23.501.

5G Testing Gulf Operators

Gulf operators were among the first globally to launch 5G SA. Saudi Arabia (STC), UAE (e&), and Qatar (Ooredoo) hold some of the earliest 5G SA commercial launch dates in the world. Field testing in this environment requires protocol-level NAS decode, mmWave propagation methodology, and enterprise URLLC acceptance procedures aligned with Vision 2030 and national digital transformation mandates.

Gulf 5G Operator Reference

Country Operators 5G SA 5G NSA mmWave Primary bands
Saudi Arabia STC, Mobily, Zain Yes (2019) Yes Riyadh urban n78 primary, n258 Riyadh
UAE e& (Etisalat), du Yes (2019) Yes Dubai, Abu Dhabi n78, n258, n77 (e&)
Qatar Ooredoo, Vodafone Qatar Yes (2021) Yes Doha selected zones n78 primary, n258 Doha
Kuwait Zain, Ooredoo, STC Kuwait Partial Yes Kuwait City pilot n78
Oman Omantel, Ooredoo Oman Partial Yes None confirmed n78
Bahrain Batelco, VIVA, Zain Partial Yes None confirmed n78

5G SA launch dates and mmWave status subject to operator announcements. Verify with GSMA Intelligence for current commercial status.

5GMM Cause Codes — Gulf Deployment Diagnostics

5G SA registration failures in Gulf deployments cluster around NAS provisioning errors, not radio coverage. These cause codes appear in Registration Reject messages decoded via DIAG log 0xB821 and are invisible to RF-layer tools.

Cause Name 3GPP Reference Root cause Field action
#43 N1 mode not allowed TS 24.501 §9.11.3.2 No 5G SA subscription in UDM Check UDM subscriber profile for 5G SA flag
#62 No network slices available TS 24.501 §9.11.3.2 AMF cannot allocate any slice for this UE Check NSSF configuration and UDM slice list
#67 UE does not support slicing TS 24.501 §9.11.3.2 UE capability mismatch for requested slice Verify device supports requested S-NSSAI SST
#72 DNN not in slice TS 24.501 §9.11.3.2 DNN not authorized in S-NSSAI for this IMSI Correct DNN-to-slice binding in UDM
#73 DNN not supported TS 24.501 §9.11.3.2 AMF does not have a route for the requested DNN Verify SMF selection rules for the DNN
#74 Invalid PDU session identity TS 24.501 §9.11.3.2 PDU Session ID already in use or out of range UE re-registration required; check UE state machine

See 5G MM Cause Codes reference for full 5GMM and 5GSM cause code guide.

5G Test Procedures for Gulf Deployments

Procedure 1
5G SA Registration and NSSAI Validation

Decode the 5G NAS Registration Request and Registration Accept using DIAG log 0xB821. In the Registration Request: read the Requested NSSAI — confirm the device is requesting the correct S-NSSAI (SST=1 for eMBB, SST=2 for URLLC). In the Registration Accept: read the Allowed NSSAI — confirm the AMF granted the requested slices. A Registration Reject with cause #43 or #62 at this step indicates UDM or NSSF provisioning failure, not a radio issue. Reference: 3GPP TS 24.501 §5.5.1.2.2.

Procedure 2
5G NSA SCG Stability Test (Drive Test)

Drive test in 5G NSA mode with continuous SCG (Secondary Cell Group) state logging. Record SCGFailureInformation events (3GPP TS 38.331 §6.3.4): failure type (t310-Expiry, randomAccessProblem, rlcMaxNumRetx), GPS coordinates, and RSRP at the time of failure. Each SCG failure produces a temporary drop from 5G to 4G. Failures concentrated at specific GPS zones indicate NR beam coverage gaps or interference — not random equipment behavior. Continuous L3 logging is required; sampled measurement tools miss transient SCG failures.

Procedure 3
mmWave (FR2) Walk Test — Riyadh, Dubai, Doha

mmWave 5G (n258: 26 GHz) coverage radius is 50-300 m from the gNB in Gulf urban canyon conditions. Walk test methodology: (1) map the mmWave cell coverage footprint at ground level — record SS-RSRP (dBm = raw - 157 per 3GPP TS 38.215) vs. distance from the antenna; (2) test beam management events — in the RRC log, beam failure and beam recovery events (TS 38.331 §5.3.14) indicate zones where beam tracking fails; (3) test building edge transition — mmWave coverage drops to below -115 dBm within 5-10 m of entering a building; record the transition point and confirm the UE falls back to n78 sub-6 GHz. Throughput measurement: mmWave should deliver above 1 Gbps downlink in strong coverage (SS-RSRP above -90 dBm) with 200 MHz channel bandwidth.

Procedure 4
Enterprise URLLC Acceptance Test — Vision 2030 Sites

For Saudi Vision 2030 enterprise deployments (smart factories, NEOM, KAEC, industrial zones), the URLLC acceptance test covers five mandatory checks: (1) Confirm S-NSSAI SST=2 is in the Allowed NSSAI after registration; (2) Decode PDU Session Establishment Accept — confirm 5QI 80 or 5QI 82 in the QoS Rules IE (not 5QI 9 which is eMBB best-effort); (3) Measure round-trip latency at each machine station under full load — target below 10 ms per 3GPP TS 22.261 Table 7.3.1.2-1 motion control requirement; (4) Conduct slice isolation test — non-enterprise SIM must receive PDU Session Reject with 5GSM cause #72 on the SST=2 slice; (5) SS-RSRP walk test across the factory floor — confirm above -110 dBm at all machine positions including shadow zones behind metal equipment.

Procedure 5
5G SA Data Session Verification (PDU Session)

Decode the complete PDU Session Establishment sequence via NAS log (0xB821). In the PDU Session Establishment Request: read the S-NSSAI and DNN fields — confirm they match the enterprise configuration. In the PDU Session Establishment Accept: read the QoS Rules IE for 5QI value, PDU Session ID, and UPF tunnel endpoint. A PDU Session Reject with cause #72 (DNN not in slice) or #67 (resource unavailable) at this step confirms a core network provisioning failure, not a radio issue. Reference: 3GPP TS 24.501 §6.4.1.

5G SA vs. 5G NSA — Gulf Deployment Comparison

5G Standalone (SA)
  • Core: 5GC (AMF, SMF, UPF) — no EPC dependency
  • Registration: 5G NAS Registration (5GMM), not Attach
  • Slicing: NSSAI supported — SST/SD per slice
  • VoLTE: VoNR possible (or EPS Fallback to LTE IMS)
  • Failure mode: 5GMM cause codes — NAS provisioning layer
  • DIAG log: 0xB821 (NR5G NAS OTA)
  • Gulf SA operators: STC, e&, Ooredoo (earliest commercial SA launches worldwide)
5G Non-Standalone (NSA)
  • Core: EPC (MME, SGW, PGW) — LTE anchor
  • Registration: LTE Attach (EMM) — NR is secondary
  • Slicing: Not supported — LTE bearer model
  • Voice: VoLTE on LTE anchor (NR does not carry voice)
  • Failure mode: SCGFailureInformation — NR secondary cell
  • DIAG log: 0x713A (LTE NAS) + 0xB0EE (NAS state)
  • Gulf NSA operators: All Gulf operators had NSA before SA launch — some subscribers still on NSA

HiCellTek for Gulf 5G Testing

5G NAS Decoder (0xB821)

Decode 5G SA Registration Request/Accept/Reject, PDU Session Establishment, and all 5GMM/5GSM cause codes in real time. Read Requested NSSAI, Allowed NSSAI, 5QI in PDU Session Accept, and DNN-slice binding — without HSS or core access.

RF Monitor — NR Metrics

Live SS-RSRP, SS-SINR, NR ARFCN, beam index, and 5G SA/NSA mode display. mmWave-compatible: reads SS-RSRP in the FR2 range for n258 cells in Gulf urban cores. SCG state tracking for NSA deployments.

Drive Test + Indoor Walk Test

GPS-correlated 5G drive test (highway, urban ring road) with SCGFailureInformation logging and handover event capture. Indoor walk test mode for enterprise factory and campus URLLC coverage validation with floor-level mapping.

URLLC Acceptance Checklist

Export per-location RTT measurements, 5QI decode results, NSSAI validation outcomes, and slice isolation test results to Excel for enterprise acceptance reporting. Designed for Vision 2030 project documentation requirements.

Frequently Asked Questions

What are the most common 5G SA registration failures in Gulf operator deployments?

In Gulf 5G SA deployments (STC, e&, Ooredoo), the dominant registration failures are NAS-layer provisioning errors, not radio coverage gaps. Cause code #43 (N1 mode not allowed per 3GPP TS 24.501 §9.11.3.2) indicates the UDM does not have a 5G SA subscription provisioned for the IMSI — common when SIM cards are activated before the UDM profile is updated for 5G SA service. Cause code #72 (DNN not in slice) indicates the requested Data Network Name is not authorized within the subscriber's S-NSSAI — a DNN-to-slice binding mismatch in the UDM. Both failures are invisible to RF-layer tools and require NAS decode via DIAG log code 0xB821.

How is mmWave 5G testing different from sub-6 GHz 5G testing in Gulf deployments?

mmWave 5G (FR2: n257/n258/n260/n261 bands, 24-40 GHz) is deployed in Gulf urban cores (Riyadh, Dubai, Abu Dhabi, Doha) for high-capacity hotspot coverage. Testing differences from sub-6 GHz (FR1): (1) beam management — FR2 uses analog beamforming with beam sweeping; the RRC log shows beam index transitions (beam failure and beam recovery events in 3GPP TS 38.331 §5.3.14) that do not occur in FR1; (2) coverage radius is 50-300 m vs. 1-5 km for FR1 — walk test methodology replaces drive test; (3) the SS-RSRP reporting range for FR2 is -156 to -31 dBm (raw 0-127, dBm = raw - 157), the same formula as FR1 but values drop faster with distance; (4) building penetration: essentially zero — outdoor mmWave cells do not serve indoor areas.

What 5G test methodology applies to Vision 2030 enterprise deployments in Saudi Arabia?

Vision 2030 enterprise 5G deployments (smart factories, logistics hubs, industrial zones) typically require private 5G network validation per 3GPP TS 23.501 (network slicing) and TS 22.261 (URLLC service requirements). The test methodology covers: (1) 5G registration and NSSAI validation — confirm Allowed NSSAI matches the enterprise slice (SST=2 for URLLC or SST=3 for MCIOT); (2) 5QI verification — decode PDU Session Establishment Accept and confirm 5QI 80 or 5QI 82 is assigned (not 5QI 9); (3) latency measurement — per-location RTT under loaded and unloaded conditions against the 10 ms packet delay budget; (4) coverage validation — SS-RSRP walk test across the entire enterprise facility including machine shadow zones; (5) slice isolation — confirm unauthorized devices cannot access the enterprise slice.

Which 5G NR bands are deployed by Gulf operators for 5G SA?

Gulf 5G SA deployments use: n78 (3.5 GHz, TDD) as the primary 5G SA band for all Gulf operators — this is the most widely deployed 5G band in the region; n258 (26 GHz, mmWave, TDD) deployed in Riyadh, Dubai, Abu Dhabi, and Doha for dense urban hotspot capacity; n1 (2.1 GHz, FDD) used in some 5G NSA deployments anchored on LTE; n77 (3.7 GHz) deployed by some operators in the UAE. 5G SA on n78 provides typical SS-RSRP of -80 to -105 dBm at 200-500 m from gNB in urban street canyons. The threshold for 5G SA data service is SS-RSRP above -110 dBm per 3GPP TS 38.133.