Question: Over the Gxx Reference Point, what information is transported when a BBERF is located at the S-GW for PMIP-based S5/S8 in an H(e)NB scenario?
Option 1: UE's global IP address and TCP source port number of IPSec tunnel
Option 2: H(e)NB local IP address and the UDP source port number of IPSec tunnel if NA(P)T is detected
Option 3: ePDG IP address and QoS Rules for WLAN scenario
Option 4: BBERF's IP address and the destination port number for all outgoing traffic
Explanation: In an H(e)NB scenario where the BBERF is located at the S-GW for PMIP-based S5/S8, the Gxx Reference Point is specifically used to transport the H(e)NB's local IP address and the UDP source port number of the IPSec tunnel, but only if Network Address (and Port) Translation (NA(P)T) is detected. This ensures proper routing and security in the network.