(R)AN to UE: The NG-RAN performs RRC Connection Reconfiguration with the UE depending on the QoS Information for all the QoS Flows of the PDU Sessions whose UP connections are activated and Data Radio Bearers. For a UE that was in CM-IDLE state, if the Service Request is not triggered by UE for a signalling connection only, the User Plane security is established at this step, which is described in detail in TS 38.331  and TS 36.331 . For a UE that was in CM-IDLE state, if the Service Request is triggered by UE for a signaling connection only, AS security context may be established in this step, which is described in detail in TS 38.331  and TS 36.331 .
If the N2 Request includes a NAS message, the NG-RAN forwards the NAS message to the UE. The UE locally deletes context of PDU Sessions that are not available in 5GC.
NOTE 3: The reception of the Service Accept message does not imply the successful activation of the User Plane radio resources.
NOTE 4: In case not all the requested User Plane AN resources are successfully activated, TS 38.413  will define how to handle this.
After the User Plane radio resources are setup, the uplink data from the UE can now be forwarded to NG-RAN. The NG-RAN sends the uplink data to the UPF address and Tunnel ID provided in the step 11.