Section: 7B.4 Authentication for UE behind 5G-RG and FN-RG
Content: A UE that is connected to a 5G-RG or FN-RG, can access the 5GC via the N3IWF or via the TNGF. A UE behind a FN-RG can use the untrusted non-3GPP access procedure as defined in TS 23.502[ Procedures for the 5G System (5GS) ] [8] clause 4.12.2.2 to access the 5GC via the N3IWF. A UE behind a 5G-RG can use either the untrusted non-3GPP access as defined in TS 23.502[ Procedures for the 5G System (5GS) ] [8] clause 4.12.2.2, or trusted N3GPP-access as defined in TS 23.502[ Procedures for the 5G System (5GS) ]  [8] clause 4.12a.2.2. A UE connecting to the 5G-RG or FN-RG via WLAN supporting IEEE 802.1X can use the NSWO authentication procedure as specified in Annex S of the present document. When the UE uses untrusted non-3GPP access, the authentication of the UE is as specified in clause 7.2.1. When the UE uses trusted non-3GPP access, the authentication of the UE is as specified in clause 7A.2.1.