Solutions
Capabilities
•••
Diagrams
Overview
Fixed hybrid networks that deliver ultrasecure, mission-ready communications by combining commercial and private 5G
Better together
Commercial Network Slicing
Our Team
Home
Private User Plane Function
Multi-Operator Core Network
Features
Logical Design
Security Controls
Applications and Access
Private 5G
Enhanced Capabilities
Hybrid OV-1
Edge Control
Our Solution
Problem
Macro network
Private network
A single small cell simultaneously broadcasts both the private network and T-Mobile’s commercial network from the same radio and antenna, enabling full spectrum utilization, higher capacity, improved throughput, lower costs, and a consistent carrier-grade experience.
Commercial network
Small cell
Multi-Operator Core Network (MOCN)
Our 5G Advanced network delivers expanded functionality
on T-Mobile’s shared commercial infrastructure
Private 5G
Commercial network slicing
ENHANCED CAPABILITIES
Edge Control
High bandwidth and low latency power video, sensors, and edge intelligence in real time
Private 5G delivers a secure, resilient, and mission‑tailored communications fabric designed specifically for high‑consequence federal, defense, homeland security, and public‑safety operations.
Real-Time Awareness,
Faster Decisions
Private 5G
Preemption
Priority access
End-to-end protected connectivity with encryption, MFA, continuous authentication, and always-on VPN
Fixed, mobile, and rapid-deploy networks adapt to missions across any environment or terrain
Device, spectrum, and policy control ensures compatibility and seamless evolution to next-gen networks
Eligible users move to the front of the communication line. They’re also exempt from preemption during extreme congestion.
Ultra‑Secure,
Zero‑Trust Communications
Resilient, Hybrid,
Deployable Architectures
Interoperable,
Future-Ready Ecosystem
Eligible users use WPS to prioritize calls on the receiving network, with no need to dial *272.
Dedicated spectrum and network slicing ensure low latency, high throughput, and priority access
Supports large-scale operations with secure, reliable communications across distributed and dynamic environments
WPS end-to-end prioritization
Guaranteed Performance,
Prioritized Traffic
If necessary, non-priority users on the network are dropped to the back of the line to make room for priority access users.
Mission-Scaled,
Always Connected
Edge Control
A cost-effective alternative to private networks, Edge Control enables seamless data routing between endpoints, servers and compute — delivering ultra-low latency, data sovereignty and scalability.
LOCALIZED BREAKOUT
Localized breakout keeps data within the on-site environment by anchoring traffic to a private UPF at the edge — reducing latency, eliminating unnecessary backhaul, and enabling secure, real-time processing for site-specific applications.
Data never leaves local environment
REMOTE BREAKOUT
Commercial 5G with mission-specific network slicing
Public–Private Mission Continuity
6
Federated Hybrid Slice
Deployed military units, disaster response, overseas embassies, and temporary secure sites
ISOLATED TRAFFIC PATHS
HIGH THROUGHPUT
FLEXIBLE SCALABILITY
Base security sensors, robotics, airfield/port operations, industrial control systems, energy infrastructure
2
Law enforcement, DHS field teams, emergency response, special operations, and joint task force mobility
CUI / National Security Missions
HIGH-BANDWIDTH UPLINK
LOW-LATENCY COMPUTE FABRIC
SECURE INTERCONNECTION
5
Logistics / Sustainment / Enterprise Operations Slice
(Analytics & ISR)
GRANULAR QoS
MASSIVE DEVICE SUPPORT
INTEGRATION WITH EDGE COMPUTE
MULTI-SITE SUPPORT
Our 5G Standalone architecture allows us to create multiple isolated virtual slices that deliver
security, performance, isolation, mobility and resilience for a full spectrum of missions.
Installations & Critical Infrastructure
AI/ML Enhanced Intelligence Slice
DYNAMIC RESOURCING
PORTABLE, FLY-AWAY, OR VEHICLE-MOUNTED 5G
EDGE ROUTING FOR DISCONNECTED OPERATIONS
SATELLITE OR MICROWAVE BACKHAUL INTEGRATION
Federal personnel moving between bases, field sites, government buildings, or public areas
4
INTENDED USE CASES
Austere or Tactical Environments
7
ISOLATED VIRTUAL SLICES
Expeditionary / Rapid‑Deployable Slice
1
Virtual reality
Intelligence operations, C2 nodes, secure base communications, national defense platforms, sensitive data movement
Ultra‑Secure Federal Slice
T-Mobile 5G Advanced slice
Surveillance
ISR missions, border surveillance, autonomous systems, real-time AI decision support
IoT / Sensor Fusion / Base Infrastructure Slice
ZERO-TRUST ENFORCEMENT
LAYERED ENCRYPTION + ALWAYS-ON VPN TUNNELS
ISOLATED PLMN / PRIVATE 5G SLICE
SECURE CUSTOMER-ONLY ROUTING
PROTECTED MOBILITY
DoD sustainment, FEMA logistics, GSA operations, and distributed enterprise functions
GUARANTEED SLA-GRADE LATENCY, JITTER AND THROUGHPUT
HYBRID MOBILITY
Telematics
Slice optimized for low latency
Public Safety & Defense Mobility
Slice optimized for high bandwidth
SEAMLESS PRIVATE-TO-MACRO HANDOFF
SHARED RAN INFRASTUCTURE (MOCN)
MISSION-FOCUSED SLAs
3
Mission‑Critical PTT / Voice / Video Slice
Slice optimized for low-power devices
Application availability zones
Satellite or fiber backhaul
Small cell
APPLICATIONS AND ACCESS
DATA
GOVCLOUD or customer data center
Private
data core
Full commercial core
LOGICAL DESIGN
How information is managed at each layer
OR
MFA
Local apps
REMOTELY MANAGED SYSTEMS
VOICE
LOCALLY MANAGED SYSTEMS
TAK PTT MDM
Always-on
VPN
Cellular macro site
Private UPF
SECURITY CONTROLS
Broad, multilayered coverage that delivers secure, mission-ready communications wherever needed
Commercial 5G
Private 5G
Commercial 5G
SOLUTION CAPABILITIES
Cybersecurity
Private Slice
Integrated standalone network supporting Controlled Unclassified Information (CUI)
Hybrid architecture
Expansive reach
End-to-end security
SOLUTION
T-Mobile 5G Advanced
with localized breakout
supporting edge compute
Private network capabilities
Future-ready technologies
End user devices
Satellite backhaul
A hybrid architecture combining carrier-grade 5G macro coverage with flexible private networks for secure, high-performance connectivity. Private networks
are deployed in configurable coverage bubbles up to 200 yards wide.
Edge compute
Hybrid OV-1
Private UPF
Full control of data and devices
CUI-ready
Secure, high-speed connectivity for operations, data, users, and IoT
Integrated private 5G network
Customer control
Meets 800–171 and CMMC 2.0 controls
Mission systems
Standalone
5G Advanced
Proven 3GPP standards, change management, fault isolation, and continuous optimization
Carrier-grade reliability
Enhanced features with seamless private-to-macro handoff
Private UPF gateway
6G-ready for sensing, UAV, and quantum security
Local traffic anchoring for security and isolation
Future-ready
End-to-end isolation
Ultra-low latency and high reliability
Tailored network parameters
Prioritized access
Protection from congestion and threats
Granular QoS
Customized performance
Guaranteed SLAs for mission-critical traffic
Multiple independent encryption layers
Always-on VPN
Zero-trust network access
Layered encryption
Integrates with existing MFA and IAM
Automatic, continuous secure tunneling
Continuous verification of identity, posture, and context
Multi-factor authentication
Private User Plane Function (UPF)
Private UPF routes sensitive data closer to the user, ensuring it remains within defined geographical boundaries. Benefits: reduced latency, improved performance, enhanced security and optimized costs.
Device off premises
Edge appliance and AI server both on premises
Remote breakout routes traffic from distributed devices back to a centralized edge location, where a private UPF and compute resources handle processing—balancing performance and control while supporting broader geographic connectivity.
APPLICATION LAYER ENCRYPTION
PRIVATE SLICE — RAN ISOLATION AND PRIORITY LAYER
ZERO TRUST NETWORK ACCESS
Always-on VPN
CUSTOMER NETWORKS
Full commercial core
How multiple security layers protect data and voice
AES256-OR-BETTER END-TO-END ENCRYPTED TUNNEL
128-NEA2 — AES-128 SIGNALING ENCRYPTION
Customer data center or cloud
T-MOBILE
Where data physically resides across the network
Private
UPF
LOCAL AREA
CUSTOMER LOCATION
Non-proprietary, widely supported ecosystem
A partner you can count on
Trusted partners with Department of War experience
Proven expertise
Sustainable ecosystem
U.S. based
T-Mobile operates networks while Nokia provides hardware and software
OUR TEAM
Experienced delivery
Technology leadership
Decades of cellular network leadership
Most advanced 3GPP network that continues
to evolve
Organizations struggle with secure, reliable connectivity across complex, fragmented systems
PROBLEM
When demand spikes, resources can shift dynamically to where they’re needed most