Apparatus and methods are described for establishing a connection to a subscriber access network, such as a 3G network, over and untrusted network, such as a wireless LAN. A stream ID is assigned to a mobile device upon initialization of the device, and the stream ID remains active until the device powers down, loses WLAN coverage, or de-registers with the network. Both voice and data calls may be routed over the tunnel using the assigned stream ID.