PCRF Emulator

Emulates the PCRF over Diameter Gx interface to the PCEF/PGW
PCRF Emulator

Emulates the PCRF over Diameter Gx interface to the PCEF/PGW


Valid8's PCRF emulator is a software-based solution that mimics a real PCRF to test the rest of the core and user equipment.

What It Can Do For You

Cost effective solution to turn up eNBs, EPCs and test UEs

Why It’s Different

  • Scalable software-based architecture can run on a range of hardware from COTS and high-end customer provided hardware to Virtual Machines and the Cloud (e.g. Amazon AWS) for maximum versatility and performance
  • Web-based UI is easy to learn
  • HTTP API enable integration with automation test systems and other equipment
  • Stateful modeling provides accurate emulation of network elements


  • Emulates the Gx interface
  • True stateful simulation 
  • Supports authentication and location update and other scenarios
  • Report on messages received, response time, session duration
  • Generate valid and invalid/negative messages and call-scenarios (fully editable scenarios) 
  • Supports sending invalid messages including malformed, dropped, and misordered packets 
  • Check parameters in messages from SUT and flag errors
  • 3GPP-compliant interface
  • Core network 5G ready


  • Release 14 compliant
  • Category M1 UE support
  • TM6 and TM9 support
  • FDD only (FDD and HD-FDD UEs are supported)
  • Support of multiple CE levels (only CE-Mode A is supported)
  • Support of message repetition for MPDCCH, PDSCH and PUSCH in full duplex (only MPDCCH, PDSCH and PUSCH supported)
  • Support of localized MPDCCH transmission
  • EPDCCH support for Category M1
  • No frequency hopping
  • Bandwidth must be >= 5 MHz for cells that also need to support Category 0 and above UEs


  • Release 14 compliant
  • Single-tone and multi-tone category NB1 and NB2 UE support
  • 15 kHz and 3.75 kHz subcarrier spacing are supported
  • All operation modes (in-band, guard band and standalone) are supported
  • Multiple NB-IoT and LTE cells can be used at the same time in the same eNodeB
  • Support of multiple coverage levels
  • Support of all NPDCCH, NPDSCH, NPUSCH and NPRACH configurations
  • Support of control plane CIoT optimization
  • Support of multi-DRB mode


  • Gx Credit Control Request Response Time
  • Credit Control Requests/Answers Initial,Update and Terminate (CCR/A-I/U/T)
  • Abort Requests/Answers (ASR/A)
  • Reauthorization Requests/Answers (RAR/A)
  • Session Termination Request/Answers (STR/A)
  • Successful and Unsuccessful answers
Configurable Parameters
  • PLMN Mobile Country Code (MCC), Mobile Network Code (MNC)
  • IMSIs list
  • Credit Control Policy

Automation API

User commands can be fully automated using REST API. This includes performing all test control functions as well as collecting results and metrics. It can be integrated into virtually any CI system via the HTTP API, including Jenkins, CircleCI, Gitlab and others.


The application’s subsystems can be edited directly in the browser using TDL or by using the graphical tools. The Message Workshop allows for creating of test scenarios directly from the hex stream of a remote capture, while the Graphical Editor (on the feature roadmap for 2019) will allow for creating customized call scenarios by dragging and dropping the call flow to meet your test needs.

This is some text inside of a div block.

Use Cases

eNodeB Under Test

In the scenario where the eNodeB is to be tested, it can be tested by the Valid8 4G Network Emulator emulating the core network. Additionally, load and conformance tests are available for interfaces S1-MME and S1-U. In the case where the eNodeB needs to be tested on the RF side, it can be tested by the Valid8 4G UE Emulator.

Supported Scenarios:
  • ‍Power on / Start up
  • Attach
  • TAU
  • Attach
  • eRAB Setup
  • Detach
  • X2 handover
  • Emulates MME (for S1-MME) and SGW (for S1-U) along with all other needed core network elements, exposing all internal interfaces
  • Conformance tests available for S1-MME, S1-U, and X2

UE Under Test

For testing UE or IoT devices, the 5G, 4G or 3G Network Emulators can provide the entire core network as well as an emulated or real base station depending on your test needs.

Supported Scenarios:
  • ‍Power on
  • Attach
  • Detach
  • TAU
  • Data Connection
  • VoLTE Call
  • ‍End to end VoLTE test capability
  • Includes real femto, pico, or microcell eNodeB
  • Emulates all core network nodes and allows for data connection to external networks

PGW Under Test

For testing the PGW, the 4G Network Emulator can wrap around the node using the S5/8, S7, Sxx and SGi interfaces. Traffic can be originated from real or emulated UE and IoT devices.

Supported Scenarios:
  • ‍Create Session
  • Delete Session
  • Create Bearer
  • Modify Bearer
  • Delete Bearer
  • Echo
  • Emulates all required nodes for wrapping around, including MME and PCRF for testing over interfaces S5/8, S7, Sxx nd SGi

  • Exposes all internal interfaces
  • Conformance tests available for each interface (S5/8, S7, Sxx, SGi)
PCRF Emulator
PCRF Emulator

Summary of Specifications


3GPP TS 23.203, TS 29.212 (Gx)

IETF RFC 6733, IETF RFC3588, IETF RFC5516 (Diameter)



Product Details

Emulates PCRF to test the MME, eNB & UE


Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.

All Solutions

Valid8 exports its products strictly in accordance with all US Export Control laws and regulations which shall apply to any purchase or order. Specifications are subject to change without notice.

500 West Cummings Park, Suite 6550 Woburn, MA 01801
p: +1-855-482-5438
f: +1-781-996-3708

Ordering Information

PCRF Emulator

Load Options:
lte-pcrf-emulator-10 - 10 sessions, basic call
lte-pcrf-emulator-100 - 100 sessions, basic call
lte-pcrf-emulator-1,000 - 1,000 sessions, basic call
lte-pcrf-emulator-10,000 - 10,000 sessions, basic call
(others on request)

Protocol Interface Options:
(others on request)

Miscellaneous Options:
Security, fuzzing, penetration test
Network emulator internal impairments module

Datasheet Page

Related Video

Related Solutions

5G Core and RAN Network Emulator
  • Product Name: 5G Network Emulator 
  • Product Code: 5g-network-emulator
Datasheet Page
4G UE Emulator
  • Product Name: 4G UE Emulator 
  • Product Code: 4g-ue-emulator

Datasheet Page
MCX Load Tester

Product Name: MCPTT Load Tester 

Product Code: mcptt-load-tester

Datasheet Page
LTE EPC Emulator

Product Name: LTE Core Network Emulator 

Product Code: lte-core-network-emulator

Datasheet Page
  • Product Name: SIP Conformance
  • Product Code: sip-conformance-base-suite, sip-conformance-protos-suite, sip-conformance-torture-suite, sip-conformance-extensions-suite
Datasheet Page

Navigate through All Solutions