BroadNet
Protocols BroadNet answer

SIGTRAN adaptation layers — M3UA, M2UA, SUA explained

Last reviewed 1 min readReviewed by BroadNet engineering
Quick answer

Inside SIGTRAN, the SS7 application protocols (MAP, ISUP, SCCP) need a bridge to the IP/SCTP transport. That bridge is an adaptation layer. Three are in production use: M2UA (replaces MTP2), M3UA (replaces MTP3), and SUA (SCCP-User Adaptation — bypasses MTP3 entirely and connects SCCP directly to SCTP). Picking the right layer is mostly about how much of the legacy SS7 stack you want to keep.

Plain-language definitionVendor-neutralReviewed May 28, 2026
The long answer

Everything worth knowing, nothing that isn't.

§01

M3UA — the workhorse

M3UA (MTP3 User Adaptation) is the most widely deployed SIGTRAN adaptation layer in the world. It carries everything that MTP3 used to carry — TCAP-bearing MAP/CAP, SCCP-routed services — over SCTP, while preserving SS7 Point Code addressing. Most operator-to-operator SIGTRAN peerings use M3UA. If you are reading SIGTRAN docs and unsure which layer applies, default-assume M3UA.

§02

M2UA — the SG link replacement

M2UA (MTP2 User Adaptation) is used when you need to expose what used to be a single TDM SS7 link as an IP link to a Signalling Gateway (SG). It preserves MTP2 semantics (per-link sequencing, flow control). M2UA appears in operator deployments where the legacy SG hardware speaks MTP2 and the new core speaks IP, and somebody needs to bridge the two. Outside that bridging use case, M2UA is rarely seen on greenfield deployments.

§03

SUA — bypassing MTP3 entirely

SUA (SCCP-User Adaptation) connects SCCP-using applications (MAP, CAP, INAP, RANAP) directly to SCTP — there is no MTP3 in the stack at all, and there are no SS7 Point Codes on the IP side. SUA is the future-clean approach but adoption has been limited; most operators picked M3UA because it preserved the operational model they already understood. SUA is more common in IMS/HLR deployments and in some greenfield 4G/5G signalling cores.

§04

Operational and compliance angle

An SS7 firewall must inspect at the right layer — a firewall configured to inspect M3UA-encapsulated SCCP/MAP will miss attacks delivered via SUA, and vice versa. BroadNet's signalling firewall (/operators/ss7-firewall) inspects all three adaptation layers in a single policy engine, with shared peer-reputation across the stack. For GSMA FS.07 alignment, the categorisation and rate-limiting rules apply regardless of adaptation layer.

BNWritten by the BroadNet engineering team·Operating carrier-grade messaging since 2003, headquartered in Dubai·Editorial standards
Build with this

Need help wiring this up?

The pages below are the products and integration guides that put this concept on the wire. If you'd rather walk through it live, our engineering team takes calls same-day during MENA working hours.

Talk to our engineering team
Feedback

Was this answer helpful?

Your vote helps us prioritise which answers to expand with examples, diagrams, and code snippets.

Was this answer helpful?
Thanks — noted. We'll keep this answer maintained.
Got it. Tell us what was missing — send a quick note.

How we write and review content

Still need help?

Talk to a real engineer about your build.

We reply within one business day, and production accounts get 24/7 support. Our solutions engineers ship code, not scripts.

$ curl -X POST https://api.broadnet.me/sms/sendSms
Response SLA
Test-access requestsReply within 1 business day
Production24 / 7 · < 15 min
Operator NOC24 / 7 · pager