Accessing a 5G network via a non-3GPP access network

1. A method comprising:

relaying a first set of messages of a first type between a remote unit and a mobile communication network via a non-3GPP access network, wherein the first set of messages of the first type are encapsulated with a first encapsulation protocol and wherein the first set of messages of the first type initiate a registration procedure to the mobile communication network via the non-3GPP access network;

sending a connection setup request to the remote unit via the non-3GPP access network, wherein the connection setup request contains information for activating a second encapsulation protocol; and

relaying subsequent messages of the first type between the remote unit and the mobile communication network via the non-3GPP access network, wherein the subsequent messages of the first type are encapsulated with the second encapsulation protocol, wherein the subsequent messages of the first type complete the registration procedure.

2. The method of claim 1 , wherein the subsequent messages of the first type encapsulated with the second encapsulation protocol are marked with a specific EtherType and a virtual local area network (VLAN) identifier.

3. The method of claim 1 , further comprising:

receiving a first security key from the mobile communication network;

deriving a second security key from the first security key; and

forwarding the second security key to the non-3GPP access network.

4. The method of claim 3 , further comprising receiving an indication that a security association has been established for the remote unit in the non-3GPP access network, wherein the security association uses the second security key.

5. The method of claim 4 , wherein the connection setup request is sent to the remote unit via the non-3GPP access network in response to receiving the indication that the security association has been established for the remote unit in the non-3GPP access network.

6. The method of claim 1 , wherein sending the connection setup request comprises sending a request to establish a control plane connection using a first virtual local area network (VLAN) identifier, wherein messages over the control plane connection are encapsulated with the second encapsulation protocol.

7. The method of claim 1 , further comprising:

receiving a request to establish a protocol data unit (PDU) session from the mobile communication network; and

establishing one or more user plane connections with the remote unit in response to receiving the request to establish the PDU session, wherein messages on the one or more user plane connections are encapsulated with the second encapsulation protocol.

8. The method of claim 7 , wherein each of the one or more user plane connections is associated with a different virtual local area network (VLAN) identifier.

9. The method of claim 8 , wherein VLAN identifiers associated with the one or more user plane connections are different than a first VLAN identifier associated with a control plane connection.

10. The method of claim 7 , wherein each of the one or more user plane connections is associated with a different set of one or more quality of service flow identifiers.

11. A method comprising:

establishing a control plane connection with a remote unit over a non-3GPP access network during a registration procedure of the remote unit to a mobile communication network, wherein messages on the control plane connection are encapsulated with a first encapsulation protocol;

forwarding a request from the remote unit to establish a data connection with the mobile communication network, wherein the request is received via the control plane connection; and

establishing a plurality of user plane connections with the remote unit in response to the mobile communication network accepting the request, wherein messages on each of the plurality of user plane connections are encapsulated with the first encapsulation protocol.

12. The method of claim 11 , wherein the data connection comprises multiple quality of service (QoS) flows, wherein different ones of the multiple QoS flows are mapped to different ones of the plurality of user plane connections.

13. The method of claim 11 , wherein the control plane connection is associated with a first virtual local area network (VLAN) and each of the plurality of user plane connections is associated with a different VLAN identifier, wherein the first VLAN identifier is different than VLAN identifiers associated with the user plane connections.

14. A method comprising:

communicating a first set of messages of a first type with a mobile communication network via a non-3GPP access network, wherein the first set of messages of the first type are encapsulated with a first encapsulation protocol and wherein the first set of messages of the first type initiate a registration procedure to the mobile communication network via the non-3GPP access network;

receiving a connection setup request via the non-3GPP access network, wherein the connection setup request contains information for activating a second encapsulation protocol; and

communicating subsequent messages of the first type with the mobile communication network via the non-3GPP access network, wherein the subsequent messages of the first type are encapsulated with the second encapsulation protocol, wherein the subsequent messages of the first type complete the registration procedure.

15. The method of claim 14 , wherein the subsequent messages of the first type encapsulated with the second encapsulation protocol are marked with a specific EtherType and a virtual local area network (VLAN) identifier.

16. The method of claim 14 , further comprising:

creating a first security key using the first set of messages of the first type; and

establishing a security association with the non-3GPP access network, wherein the security association uses a second security key derived from the first security key.

17. The method of claim 16 , wherein the connection setup request is received via the non-3GPP access network in response to establishing the security association with the non-3GPP access network.

18. The method of claim 14 , further comprising establishing a control plane connection using a first virtual local area network (VLAN) identifier, wherein the control plane connection is established by the connection setup request that contains the first VLAN identifier and wherein messages on the control plane connection are encapsulated with the second encapsulation protocol.

19. The method of claim 14 , further comprising:

sending a request to establish a protocol data unit (PDU) session; and

receiving one or more messages via a control plane connection, each message requesting the establishment of a user plane connection, wherein messages on the user plane connection are encapsulated with the second encapsulation protocol.

20. A method comprising:

establishing a control plane connection with a non-3GPP access network node during a registration procedure with a mobile communication network via a non-3GPP access network, wherein the control plane connection is associated with a first virtual local area network (VLAN) identifier and wherein messages on the control plane connection are encapsulated with a first encapsulation protocol;

sending a request to establish a data connection with the mobile communication network, wherein the request is sent via the control plane connection; and

establishing a plurality of user plane connections with the non-3GPP access network node in response to the mobile communication network accepting the request, wherein messages on each of the plurality of user plane connections are encapsulated with the first encapsulation protocol, wherein each of the plurality of user plane connections is associated with a different VLAN identifier.