4G UE Emulator

Emulates LTE UE to test the eNB with a variety of traffic options including VoLTE IMS, HTTP, UDP, TCP and Ping.
4G UE Emulator

Emulates LTE UE to test the eNB with a variety of traffic options including VoLTE IMS, HTTP, UDP, TCP and Ping.


The Valid8 4G UE Emulator provides a cost-effective, scalable, solution for generating realistic UE calls in testing scenarios

What It Can Do For You

The 4G UE Emulator solution is capable of simulating and testing several devices individually or in parallel. It is a scalable solution that enables the generation of up to hundreds of calls over the Uu interface. It is useful for eNodeB feature and capacity testing and any use case where real call generation is needed.

  • It can simulate UEs
  • It can test eNodeB

Why It’s Different

It provides many advantages over using real UEs or basic simulators, including: 

  • Software based UEs are much more flexible in terms of adding new features than real UEs.
  • Real UEs often become obsolete within a few years
  • Easier to execute scripts over large numbers of virtual UEs than on real UEs
  • The HW doesn’t need to change when increasing the number of virtual UEs
  • The band for software based UEs are fully configurable, unlike real UEs
  • TCO (total cost of ownership) for software based UE solution is less expensive than real UEs


  • Scalable architecture
  • 3GPP release 8 - 12
  • Includes PHY, MAC, RLC, PDCP, RRC, and NAS layers
  • IP traffic generator (ping, UDP, HTTP)
  • Supports Valid8 VoIP Load Tester (includes VoLTE)
  • UE data pass-thru
  • Automation API
  • Voice Quality Measurement (VQM) for QoS
  • FDD with half duplex or full duplex UEs
  • TDD support now available


The Valid8 4G Network Emulator is compromised of multiple subsystems that are available individually or in parallel, and are scalable to fit your needs. The individual emulators are controllable through their call controllers, and the traffic can be captured through use of a remote capture tool such as Wireshark.

  • ‍eNodeB (femto, pico, or emulated)
  • MME
  • SGW
  • PGW
  • OCS
  • HSS
  • PCRF
  • ePDG
  • ‍S1 Attach Requests/Successes/Fails
  • S1 Detach Requests/Successes/Fails
  • S1 Dedicated Bearer Requests/Successes/Fails
  • Current Active Sessions/ Bearers
  • Number of Sessions/ Bearers Created
  • S1 Attach Request Response Time
  • S1 Dedicated Bearer Setup Request Response Time
  • S1 Detach Request Response Time
  • S1 Authentication Request Response Time
  • S6a Authentication Request Response Time
  • S1 Tracking Area Update Request Response Time 
Configurable Parameters
  • Mobile Country Code
  • Mobile Network Code
  • eNodeB Type
  • IP Addres S1 Interface
  • IP Address eNodeB
  • Primary DNS Address
  • Secondary DNS Adress
  • MAC Address Public Gateway
  • GTP Tunnel IP Address and Port
  • GTP Tunnel eNodeB IP Address
  • Integrity Algorithm
  • IP Address to assign UEs on LAN

Automation API

User commands can be fully automated using REST API. This includes performing all test control functions as well as collecting results and metrics. It can be integrated into virtually any CI system via the HTTP API, including Jenkins, CircleCI, Gitlab and others.


The application’s subsystems can be edited directly in the browser using TDL or by using the graphical tools. The Message Workshop allows for creating of test scenarios directly from the hex stream of a remote capture, while the Graphical Editor (on the feature roadmap for 2019) will allow for creating customized call scenarios by dragging and dropping the call flow to meet your test needs.

This is some text inside of a div block.

Use Cases

eNodeB Under Test

In the scenario where the eNodeB is to be tested, it can be tested by the Valid8 4G Network Emulator emulating the core network. Additionally, load and conformance tests are available for interfaces S1-MME and S1-U. In the case where the eNodeB needs to be tested on the RF side, it can be tested by the Valid8 4G UE Emulator.

Supported Scenarios:
  • ‍Power on / Start up
  • Attach
  • TAU
  • Attach
  • eRAB Setup
  • Detach
  • X2 handover
  • Emulates MME (for S1-MME) and SGW (for S1-U) along with all other needed core network elements, exposing all internal interfaces
  • Conformance tests available for S1-MME, S1-U, and X2

PCRF Under Test

For testing the PCRF, the 4G Network Emulator can wrap around the PCRF with the core network and IMS.

Supported Scenarios:

PGW Under Test

For testing the PGW, the 4G Network Emulator can wrap around the node using the S5/8, S7, Sxx and SGi interfaces. Traffic can be originated from real or emulated UE and IoT devices.

Supported Scenarios:
  • ‍Create Session
  • Delete Session
  • Create Bearer
  • Modify Bearer
  • Delete Bearer
  • Echo
  • Emulates all required nodes for wrapping around, including MME and PCRF for testing over interfaces S5/8, S7, Sxx nd SGi

  • Exposes all internal interfaces
  • Conformance tests available for each interface (S5/8, S7, Sxx, SGi)

UE Under Test

For testing UE or IoT devices, the 5G, 4G or 3G Network Emulators can provide the entire core network as well as an emulated or real base station depending on your test needs.

Supported Scenarios:
  • ‍Power on
  • Attach
  • Detach
  • TAU
  • Data Connection
  • VoLTE Call
  • ‍End to end VoLTE test capability
  • Includes real femto, pico, or microcell eNodeB
  • Emulates all core network nodes and allows for data connection to external networks
4G UE Emulator
4G UE Emulator

Summary of Specifications

The Valid8 4G Network Emulator is capable of simulating and testing several devices individually or in parallel and is scalable to fit your needs.



  • ‍3GPP TS 23.401 (EUTRAN)
  • 3GPP TS 24.301 (NAS)
  • 3GPP TS 29.060 (GTPv1)
  • 3GPP TS 29.274 (GTPv2-C)
  • 3GPP TS 29.281 (GTPv1-U)
  • 3GPP TS 36.413 (S1AP)
  • 3GPP TS 36.414 (S1-U)
  • IETF RFC5246 (TLS, Protocol (1.0, 1.1, 1.2))
  • IETF RFC6101 (SSL, Protocol Version 3.0)
  • IETF RFC793 (TCP)
  • IETF RFC768 (UDP)
  • IETF RFC4960 (SCTP)
  • IETF RFC791 (IPv4)
  • IETF RFC2460 (IPv6)
  • IETF RFC3711 (SRTP)
  • IETF RFC1035 (DNS)
  • IETF RFC2131 (DHCP)
  • IETF RFC3261 (SIP)


  • ‍Internal femtocell: 400 - 6000 Mhz; including Bands 1 - 44 plus unlicensed 5Ghz band and others
  • Includes CBRS band
  • Duplex: FDD & TDD
  • Interface Uu to UE
  • SIMs are software-based and configurable

UEs Emulated

  • ‍Scalable; up to 256 per unit

UE Configuration

  • ‍IMSI
  • Secret key
  • UE category
  • Duplex mode
  • Default APN
  • Tunnel setup script
  • Power on/off via script
  • Simulation on user plane


  • ‍HTTP
  • Ping
  • Flooding
  • VoLTE


  • ‍2X2; requires additional Valid8 unit with RF module


  • Roadmap

Product Details


  • ‍Intel-based; scalable to meet performance needs 


  • ‍P5088/01 includes base kit (simulated eNB) 
  • P5089/01 includes LTE pico eNB (single band) 
  • P8110/02 includes LTE femto eNB (multi band) 
  • Conformance tests available for each interface (S1, S5, S6a, S7, S11, Rx, Gx, Gy, Ro) 

Operating System 

  • ‍Protocol Engine (Linux-based) 

User Interface 

  • ‍Browser-based, touch-optimized graphical user interface 


  • ‍HTTP API 

Max output power 

  • ‍31 mW (femto RF module option) 
  • 1000 mW per Tx (exernal picocell option) 

Connector types

  • ‍Femtocell: SMA female 
  • Picocell: N-type female 

Hardware dimensions 

  • ‍M1: 4.5” x 4.5” x 1.75” 
  • M3: 19” x 15.75” x 3.5”; appx. 16.7lb 

Power supply 

  • ‍M3: 520W AC to DC, 100 - 240v 


  • Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.
All Solutions

Valid8 exports its products strictly in accordance with all US Export Control laws and regulations which shall apply to any purchase or order. Specifications are subject to change without notice.

500 West Cummings Park, Suite 6550 Woburn, MA 01801
p: +1-855-482-5438
f: +1-781-996-3708

Ordering Information

  • Product Name: 4G UE Emulator 
  • Product Code: 4g-ue-emulator

Datasheet Page

Related Video

Related Solutions

  • Product Name: SIP Conformance
  • Product Code: sip-conformance-base-suite, sip-conformance-protos-suite, sip-conformance-torture-suite, sip-conformance-extensions-suite
Datasheet Page
4G Core And RAN Network Emulator
  • Product Name: 4G Network Emulator
  • Product Code: 4g-network-emulator

Datasheet Page

Navigate through All Solutions