AT Commands PDF

page 1/198
Direction des Recherches et des Dveloppements

VELIZY R&D Center
Etablissement de VELIZY
NOTE D'ETUDE / TECHNICAL DOCUMENT
TITRE / TITLE :
AT Command Set for SAGEM HILO Module
RESUME / SUMMARY
This document presents the AT Command Set of the SAGEM SA :HILO modules.
The document is derived from SCT TMO MOD SPEC 0465 J - AT Command Set for SAGEM Modules.doc and
has been updated to take into account HILO new commands.
Mots cls / Keywords : AT commands, DATA, GPRS
Note dtude / Technical document : URD1 OTL 5635.1 008 / 70248 Edition 02
Document Sagem Communication Reproduction et divulgation interdites
Sagem Communication document. Reproduction and disclosure prohibited
page 2/198
VELIZY R&D Center
NOTE D'ETUDE / TECHNICAL DOCUMENT
FICHE RECAPITULATIVE / SUMMARY SHEET

Ed
Date
Rfrence
Date
Reference
20/09/2007
05/11/2007
URD1 OTL 5635.1

008 / 70248
URD1 OTL 5635.1
008 / 70248
Pages
modifies /
Changed
pages
Observations
Comments
Cration du document
/ Document creation
Corrections sur SMTP
/Corrections for SMTP
3
4
5
6
7
page 3/198
VELIZY R&D Center
SOMMAIRE / CONTENTS
1.
INTRODUCTION .........................................................................................................................................................8
1.1. Scope of the document ....................................................................................................................................8
1.2. Supported product ............................................................................................................................................8
1.3. Reference documents.......................................................................................................................................8
1.4. AT Command principle.....................................................................................................................................8
1.4.1.
Parameters...................................................................................................................................................9
1.4.2.
Possible answers.......................................................................................................................................9
1.4.3.
Multiple AT commands on the same command line.........................................................................9
1.4.4.
AT Commands on separate lines.........................................................................................................11
1.5. Modification of this document......................................................................................................................11
2.
V25TER AT COMMANDS........................................................................................................................................12
2.1.
2.2.
2.3.
2.4.
2.5.
2.6.
2.7.
2.8.
2.9.
2.10.
2.11.
2.12.
2.13.
2.14.
2.15.
2.16.
2.17.
2.18.
2.19.
2.20.
2.21.
2.22.
3.
A/ Command : Repeat previous command line........................................................................................12

+++ Command : Switch from data mode to command mode ...............................................................12
O Command : Switch from command mode to data mode ...................................................................13
E Command : Enable command echo ........................................................................................................13
Q Command : Set result code presentation mode ..................................................................................14
S0 Command : Set number of rings before automatically answering the call.................................14
S2 Command : Set character for the escape sequence (data to command mode).........................15
S3 Command : Command line termination character ............................................................................15
S4 Command : Set response formatting character.................................................................................16
S5 Command : Write command line editing character.......................................................................16
S7 Command : Set number of seconds to wait for connection completion.................................17
V Command : TA response format ..........................................................................................................17
X Command : Result code selection and call progress monitoring control.................................18
&C Command : Set circuit Data Carrier Detect (DCD) function mode............................................18
&D Command : Set circuit Data Terminal Ready (DTR) function mode.........................................19
&F Command : Restore manufactory configuration...........................................................................19
&W Command : Save stored profile........................................................................................................20
&V Command : Display current configuration .....................................................................................21
+IPR Command : Set fixed local rate ......................................................................................................22
B: Data rate selection..................................................................................................................................23
\N: Data transmission mode......................................................................................................................23
&K Command : Flow control option .......................................................................................................24
GENERAL AT COMMANDS....................................................................................................................................25
3.1.
3.2.
3.3.
3.4.
3.5.
3.6.
3.7.
3.8.
3.9.
3.10.
I Command : Request Identification Information.....................................................................................25

Z Command : Reset and restore user configuration ..............................................................................25
+CGMI Command : Request manufacturer identification......................................................................26
+CGMM Command : Request model identification.................................................................................26
+CGMR Command : Request revision identification..............................................................................27
+CGSN Command : Request product serial number identification (IMEI) ........................................27
+KGSN Command : Request product serial number identification and Software Version...........28
+KSGV Command : Read creation/modification date of SGV file .......................................................29
+CSCS Command : Set TE character set...................................................................................................29
+CIMI Command : Request international subscriber identity ..........................................................30
3.11.
3.12.
3.13.
3.14.
3.15.
3.16.
4.
CALL CONTROL COMMANDS..............................................................................................................................34

4.1.
4.2.
4.3.
4.4.
4.5.
4.6.
5.
A Command : Answer a call ..........................................................................................................................34

H Command : Disconnect existing connection........................................................................................34
D Command : Mobile originated call to dial a number ...........................................................................36
D>: Direct dialing from phonebook .............................................................................................................37
+CHUP Command : Hang up call .................................................................................................................37
+CRC Command : Set Cellular Result Codes for incoming call indication.......................................38
MOBILE EQUIPMENT CONTROL AND STATUS COMMANDS......................................................................39

5.1.
5.2.
5.3.
5.4.
5.5.
5.6.
5.7.
5.8.
5.9.
5.10.
5.11.
5.12.
5.13.
5.14.
5.15.
5.16.
5.17.
5.18.
5.19.
5.20.
5.21.
5.22.
5.23.
5.24.
5.25.
5.26.
5.27.
5.28.
5.29.
5.30.
5.31.
6.
page 4/198
+GCAP Command : Request complete TA capability list ..................................................................30
+GMI Command : Request manufacturer identification ....................................................................31
+GMM Command : Request model identification................................................................................31
+GMR Command : Request revision identification.............................................................................32
+GSN Command : Request product serial number identification (IMEI) identical to GSN .......32
+CMUX Command : Multiplexing mode .................................................................................................33
+CACM Command : Accumulated call meter (ACM) reset or query....................................................39

+CAMM Command : Accumulated call meter maximum (ACM max) set or query ..........................40
+CCWE Command : Call Meter maximum event......................................................................................41
+CALA Command : Set alarm time ..............................................................................................................42
+CALD Command : Delete alarm .................................................................................................................43
+CCLK Command : Real time clock ............................................................................................................43
*PSCPOF Command : Power off ..................................................................................................................44
+CIND Command : Indicator control...........................................................................................................44
+CLAC Command : List all available AT commands ..............................................................................45
+CMEC Command : Mobile Equipment control mode........................................................................45
+CFUN Command : Set Phone Functionality........................................................................................46
+CMER Command : Mobile Equipment event reporting....................................................................47
+CMEE Command : Report Mobile Termination error........................................................................48
+CMUT Command : Mute control ............................................................................................................48
+CPIN Command : Enter pin .....................................................................................................................49
*PSPRAS Command : Pin Remaining Attempt Status........................................................................50
+CPUC Command : Price per unit and currency table .......................................................................51
+CPWC Command : Power class.............................................................................................................52
*PSRDBS Command : Change Frequency Band class.......................................................................53
+CPAS Command : Phone Activity Status ............................................................................................54
+CSQ Command : Signal quality..............................................................................................................55
+KRIC Command : Ring indicator control .............................................................................................56
+KSREP Command : Mobile start-up reporting ...................................................................................57
+KGPIO Command : Hardware IO Contro..............................................................................................58
+KSLEEP Command : Power Management Control............................................................................59
+KCELL Command : Cell Environment Information ...........................................................................60
+CRMP Command : Ring Melody Playback ..........................................................................................61
+CRMC Command : Ring Melody Control .............................................................................................61
*PSVMWN Command : Voice Message Waiting Notification ............................................................63
+CRSM Command : SIM Restricted Access..........................................................................................64
*PSPWM Command : PWM control .........................................................................................................64
NETWORK SERVICE RELATED COMMANDS...................................................................................................66

6.1.
6.2.
6.3.
6.4.
6.5.
6.6.
6.7.
6.8.
6.9.
6.10.
6.11.
6.12.
+CAOC Command : Advice of charge information..................................................................................66

+CCFC Command : Call forwarding number and conditions control ................................................67
+CCWA Command : Call waiting..................................................................................................................68
+CHLD Command : Call hold and multiparty............................................................................................69
+CUSD: Unstructured Supplementary Service Data...............................................................................70
+CLCC Command : List current call ...........................................................................................................71
+CLCK Command : Facility lock ..................................................................................................................72
+CLIP Command : Calling line identification presentation ...................................................................73
+CLIR Command : Calling line identification restriction .......................................................................75
+CNUM Command : Subscriber number................................................................................................76
+COLP Command : Connected line identification presentation......................................................77
+COPN Command : Read operator name ..............................................................................................78
6.13.
6.14.
6.15.
6.16.
6.17.
7.
page 5/198
+COPS Command : Operator selection..................................................................................................79
+CPOL Command : Preferred PLMN list ................................................................................................80
+CPWD Command : Change password..................................................................................................81
+CREG Command : Network registration..............................................................................................82
+CSSN Command : Supplementary service notification ...................................................................83
PHONE BOOK MANAGEMENT .............................................................................................................................84

7.1.
7.2.
7.3.
7.4.
8.
+CPBF Command : Find phonebook entries ............................................................................................84

+CPBR Command : Read current phonebook entries............................................................................85
+CPBS Command : Select phonebook memory storage.......................................................................86
+CPBW Command : Write phonebook entries .........................................................................................87
SMS AT COMMANDS ..............................................................................................................................................88

8.1.
8.2.
8.3.
8.4.
8.5.
8.6.
8.7.
8.8.
8.9.
8.10.
8.11.
8.12.
8.13.
8.14.
8.15.
8.16.
8.17.
8.18.
9.
Preliminary comment ......................................................................................................................................88

Parameters definition......................................................................................................................................88
+CMGD Command : Delete SMS message ................................................................................................92
+CMGF Command : Select SMS message format ...................................................................................93
+CMGL Command : List SMS messages from preferred store ............................................................94
+CMGR Command : Read SMS message ..................................................................................................94
+CMGS Command : Send SMS message ..................................................................................................95
+CMGW Command : Write SMS message to memory............................................................................96
+CMSS Command : Send SMS message from storage..........................................................................97
+CNMI Command : New SMS message indication..............................................................................98
+CSCB Command : Select cell broadcast message ...........................................................................99
+CSCA Command : SMS service center address ..............................................................................100
+CSMP Command : Set SMS text mode parameters ........................................................................101
+CSMS Command : Select Message service ......................................................................................102
+CPMS Command : Preferred Message Storage ...............................................................................103
+CSDH Command : Show text mode parameters..............................................................................104
+CSAS Command : Save settings .........................................................................................................105
+CRES Command : Restore settings....................................................................................................106
DATA AND FAX AT COMMANDS........................................................................................................................107

9.1.
9.2.
9.3.
9.4.
9.5.
9.6.
9.7.
9.8.
9.9.
9.10.
9.11.
10.
GPRS AT COMMANDS......................................................................................................................................118
10.1.
10.2.
10.3.
10.4.
10.5.
10.6.
10.7.
10.8.
10.9.
11.
+CBST Command : Select bearer service type ......................................................................................107

+CRLP Command : Select radio link protocol parameter....................................................................108
+CR Command : Service reporting control .............................................................................................109
+FCLASS Command : Fax : Select, read or test service class...........................................................110
+FAE Command : Data/Fax auto answer .................................................................................................111
+FRM Command : Receive data.................................................................................................................112
+FTM Command : Transmit data ...............................................................................................................113
+FRS Command : Receive silence ............................................................................................................114
+FTS Command : Stop transmission and wait.......................................................................................115
+FRH Command : Receive data using HDLC framing ......................................................................116
+FTH Command : Transmit data using HDLC framing.....................................................................117
+CGATT Command : PS Attach or Detach ..........................................................................................118
+CGACT Command : PDP context activate or deactivate ...............................................................119
+CGCLASS Command : GPRS mobile station class ........................................................................120
+CGDCONT Command : Define PDP context .....................................................................................121
+CGDATA Command : Enter data state ...............................................................................................122
+CGPADDR Command : Show PDP address......................................................................................123
+CGQMIN Command : Quality of service profile (minimum acceptable) ....................................124
+CGQREQ Command : Request quality of service profile ..............................................................126
+CGREG Command : GPRS network registration status ................................................................127
SIM APPLICATION TOOLKIT AT COMMANDS ...........................................................................................128
11.1.
11.2.
11.3.
11.4.
Preliminary comments..............................................................................................................................128
*PSSTKI Command : SIM ToolKit Interface configuration ..............................................................130
*PSSTK Command : SIM Toolkit command ........................................................................................131
*PSSTK URC : SIM Toolkit unsolicited result code...........................................................................132
12.
page 6/198
AUDIO COMMANDS...........................................................................................................................................133
12.1.
12.2.
12.3.
12.4.
12.5.
12.6.
13.
+CLVL Command : Loudspeaker volume level..................................................................................133

+VIP Command : Initialize Voice Parameters......................................................................................134
+VTS Command : DTMF and Tone generation...................................................................................135
+VTD Command : Tone duration ...........................................................................................................136
+VGR Command : Received Gain Selection .......................................................................................136
+VGT Command : Transmit Gain Selection ........................................................................................138
PROTOCOL SPECIFIC COMMANDS .............................................................................................................139
13.1.
Preliminary comments..............................................................................................................................139
13.2.
CONNECTION CONFIGURATION...........................................................................................................139
13.2.1.
+KCNXCFG: GSM Connection Configuration.............................................................................139
13.2.2.
+KCNXCFG: GPRS Connection Configuration...........................................................................141
13.2.3.
+KCNXTIMER: Connection Timer Configuration .......................................................................142
13.2.4.
+KCNXPROFILE: Connection current profile configuration ...................................................143
13.3.
TCP Specific Commands .........................................................................................................................144
13.3.1.
+KTCPCFG: TCP Connection Configuration ..............................................................................144
13.3.2.
+KTCPCNX: TCP Connection .........................................................................................................145
13.3.3.
+KTCP_DATA: Incoming data through a TCP Connection .....................................................146
13.3.4.
+KTCPRCV: Receiving data through a TCP Connection .........................................................147
13.3.5.
+KTCPSND: Sending data through a TCP Connection ............................................................148
13.3.6.
+KTCPCLOSE: Closing current TCP operation..........................................................................149
13.4.
FTP Specific Commands..........................................................................................................................150
13.4.1.
+KFTPCFG: FTP Configuration ......................................................................................................150
13.4.2.
+KFTPRCV: Downloading FTP files ..............................................................................................151
13.4.3.
+KFTPSND: Uploading FTP files....................................................................................................152
13.4.4.
+KFTPDEL: Deleting FTP files........................................................................................................153
13.4.5.
+KFTPCLOSE: Ending current FTP connection ........................................................................153
13.5.
UDP Specific Commands.........................................................................................................................154
13.5.1.
+KUDPCFG: UDP Connection Configuration..............................................................................154
13.5.2.
+KUDPCLOSE: Closing current UDP operation.........................................................................155
13.5.3.
+KUDPSND: Sending data through an UDP Connection.........................................................155
13.5.4.
+KUDPRCV: Receiving data through an UDP Connection......................................................157
13.6.
SMTP Specific Commands ......................................................................................................................159
13.6.1.
+KSMTPPARAM: Connection Configuration ..............................................................................159
13.6.2.
+KSMTPPWD: Authentication Configuration..............................................................................160
13.6.3.
+KSMTPTO: Receivers Configuration ..........................................................................................161
13.6.4.
+KSMTPSUBJECT: Subject Configuration..................................................................................162
13.6.5.
+KSMTPUL: Send Message.............................................................................................................163
13.6.6.
+KSMTPCLEAR: Clear Parameters................................................................................................164
13.7.
POP3 Specific Commands.......................................................................................................................166
13.7.1.
+KPOPCNX: Connection Configuration .......................................................................................166
13.7.2.
+KPOPLIST: List Available Mail .....................................................................................................167
13.7.3.
+KPOPREAD: Download A Mail......................................................................................................168
13.7.4.
+KPOPDEL: Delete A Mail................................................................................................................169
13.7.5.
+KPOPQUIT: Close Connection .....................................................................................................170
13.7.6.
Specific Error Code For POP3 Commands..................................................................................170
14.
SPECIFIC FLASH COMMANDS.......................................................................................................................171
14.1.
14.2.
+KFLSHRD Command Read Flash command...................................................................................171

+KFLSHWR Command Write Flash command .................................................................................172
APPENDIX 1.
RESULT CODES AND UNSOLICITED MESSAGES ................................................................174
APPENDIX 2.
ERROR CODES...............................................................................................................................175
A2.1.
A2.2.
A2.3.
CME ERROR codes ...................................................................................................................................175

CMS ERROR codes ...................................................................................................................................177
GPRS ERROR codes .................................................................................................................................178
APPENDIX 3.
PIN CODE REQUIREMENT...........................................................................................................179
APPENDIX 4.
page 7/198
GSM 27.010 MULTIPLEXING PROTOCOL................................................................................180
APPENDIX 5.
SET OF AT COMMANDS SUPPORTED BY THE HILO
APPENDIX 6.
HOW TO USE TCP SPECIFIC COMMANDS .............................................................................185
APPENDIX 7.
HOW TO USE FTP SPECIFIC COMMANDS ..............................................................................186
APPENDIX 8.
HOW TO USE UDP SPECIFIC COMMANDS .............................................................................187
APPENDIX 9.
HOW TO USE MAIL SPECIFIC COMMANDS ............................................................................188
......................................................181
A9.1.
Mail Overview .............................................................................................................................................188
A9.1.1.
Mail Layout ..........................................................................................................................................188
A9.1.2.
Mail Header ..........................................................................................................................................188
A9.1.3.
Mail Body .............................................................................................................................................189
A9.2.
Mail Attachment..........................................................................................................................................189
A9.2.1.
Multipart Message .............................................................................................................................189
A9.2.2.
Attachment Format ............................................................................................................................190
A9.3.
How To Use SMTP Specific Commands ..............................................................................................191
A9.3.1.
Simple Mode ........................................................................................................................................191
A9.3.2.
Complex Mode ....................................................................................................................................193
A9.4.
How To Use POP3 Specific Commands ...............................................................................................194
APPENDIX 10.
HOW TO USE SIM TOOLKIT ........................................................................................................196
APPENDIX 11.
HOW TO SWITCH FROM DATA MODE TO COMMAND MODE ...........................................198
page 8/198
1. INTRODUCTION
1.1.
Scope of the document
This document presents the AT Command Set of the SAGEM SA HILO modules.
Each AT command is described and if necessary the standard reference is noted. (e.g.: 27.007] 7.5).
Some AT command are SAGEM SA proprietary: in this case it is clearly indicated.
1.2.
Supported product
This document specifies the AT commands of HILO modules.

HILO modules support all AT commands when using the latest software release. Please refer to section
Appendix 5 for the extensive list.
1.3.
1.4.
Reference documents
[04.08]
GSM 04.08 (6.7.1) Mobile radio interface layer 3 specification (Release 1997)
[22.022]
3GPP 22.022 (3.1.0) - Personalization of Mobile Equipment (ME); Mobile functionality

specification (Release 1999)
[27.005]
3GPP 27.005 (5.0.0) Equipment (DTE - DCE) interface for Short Message Service
(SMS) and Cell Broadcast Service (CBS)
[27.007]
3GPP 27.007 (6.0.0) - AT command set for User Equipment (UE) (Release 6)
[V24]
Recommandation UIT-T V.24 - Liste des dfinitions des circuits de jonction entre
l'quipement terminal de traitement de donnes et l'quipement de terminaison du
circuit de donnes
[V25ter]
ITU-T Recommendation V.25 ter - Serial asynchronous automatic dialing and control
[STK]
Interface Requirements specification for AT Commands of the SIM Application Toolkit

on HILO
[SIM]
Specification of the Subscriber Identity Module Mobile Equipment (SIM ME)

interface. (GSM 11.11 version 8.3.0 Release 1999)
[HW]
Module HILO Hardware specification
AT Command principle
The AT or at prefix must be set at the beginning of each line. To terminate a command line, a <CR>
character must be inserted.
page 9/198
Commands are usually followed by a response that includes <CR><LF><response><CR><LF>.
Throughout this document, only the responses are indicated, the <CR> and <LF> characters are omitted
intentionally.
Four kinds of extended AT commands are implemented:
Test Command
AT+CXXX=?
Read Command
AT+CXXX?
Write Command
AT+CXXX=<>
Execution command
AT+CXXX
The equipment returns the list of

parameters and values ranges set with the
with the corresponding Write command or
by internal processes.
This command returns the currently set
value of parameters.
This command sets user-related parameter
values.
The execution command reads nonvariable parameters affected by internal
processes in the equipment.
1.4.1. Parameters
In this document, the default parameters are underlined and the optional parameters are enclosed in
square brackets.
Optional parameters or sub-parameters can be omitted unless they are followed by other parameters.
A parameter in the middle of a string can be omitted by replacing it with a comma.
When the parameter is a character string, the string must be enclosed in quotation marks.
All space characters will be ignored when using strings without quotation marks.
1.4.2. Possible answers

There is always an answer sent by the TA to an AT Command line (except the very special case of a
TA setup for no answer, see ATQ).
The answer is always terminated by an indication of success or failure. However, regarding the setup
of the TA (by AT Commands), the message may be different.
Classical messages:
OK or ERROR
Extended Error message (see AT+CMEE):
+CME ERROR: <n>

(See Appendix for the different values for <n>)
Numeric Mode (see ATV) :
<n> with: <n> = 0 OK or <n> is an error code
1.4.3. Multiple AT commands on the same command line

You may enter several AT commands on the same line. This eliminates the need to type the "AT" or
"at" prefix before each command and to wait for the answer for each command. The main advantage is
to avoid loosing bandwidth on the link between DTE and the Module.
There is no separator between two basic commands but a semi-colon character is necessary between
two extended commands (prefix +).
page 10/198
The command line buffer accepts a maximum of 391 characters. If this number is exceeded none of
the commands will be executed and TA returns ERROR.
If a command is not supported, then the treatment of the line is stopped (i.e. the following ones are not
treated) and an error message is returned.
Example:
Command:
ATZ&K3+CBST=7,0,1;+CBST?
Answer:
+CBST=7,0,1
OK
page 11/198
1.4.4. AT Commands on separate lines

When you enter a series of AT commands on separate lines, it is strongly advised to leave a pause
between the preceding and the following command until the final answer (OK or Error message)
appears. This avoids sending too many AT commands at a time without waiting for a response for
each.
1.5.
Modification of this document
The commands described in this document are subject to change without notice, and shall only be
used as for usual AT commands use.
page 12/198
2. V25TER AT COMMANDS
2.1.
A/ Command : Repeat previous command line
A/ Repeat previous command line

Execute command
Response
Depend on the previous command
Syntax
A/
Parameters
None
Reference
V.25Ter
2.2.
Notes
Line does not need to end with terminating character
+++ Command : Switch from data mode to command mode
+++ Switch from data mode to command mode

Execute command
Syntax
+++
Response
This command is only available during data calls. The +++ characters sequence
causes to cancel de data flow over the AT interface and switch to command mode.
This allows entering AT commands while maintaining the data connection to the
remote device.
OK
Parameters
None
Reference
V.25Ter
Notes
To return to data mode, use the ATO command
Line does not need to end with terminating character
The + character may be changed with the ATS2 command (see following
chapters)
page 13/198
2.3.
O Command : Switch from command mode to data mode
ATO Switch from command mode to data mode

Test command
Response
TA returns to data mode from command mode:
CONNECT <text>
Syntax
ATO[<n>]
If connection is not successfully resumed

NO CARRIER
Parameter
<n>: 0: switch from command mode to data mode
Reference
V.25Ter
2.4.
Notes
ATO is the alternative command to the +++ escape sequence described in Chapter
2.2: When you have established a data call and TA is in command mode, ATO
causes the TA to resume the data connection and return to data mode.
E Command : Enable command echo
ATE Enable command echo

Execute command
Syntax
ATE[<value>]
Response
OK
Parameters
<value>:
Reference
V.25Ter
0 : Echo mode off

1 : Echo mode on
Notes
This setting determines whether or not the TA echoes characters received from TE
during command state
page 14/198
2.5.
Q Command : Set result code presentation mode
ATQ Set result code presentation mode

Execute command
Response
OK
(if <n> = 0)
Nothing
(if <n> = 1)
Syntax
ATQ[<n>]
Parameters
<n>: 0: result codes transmitted by TA
1: no result code transmitted by TA
Reference
V.25Ter
2.6.
Notes
Specifies whether or not the TA transmits any result code to the TE. Information
text transmitted in response is not affected by this setting.
S0 Command : Set number of rings before automatically answering the call
ATS0 Set number of rings before automatically answering the call

Read command
Syntax
ATS0?
Response
<n>
OK
Write command
Syntax
ATS0=<n>
Response
OK
Parameters
<n>: 0:
automatic answering deactivated
1-255: number of rings before automatically answering
Reference
V.25ter
Notes
See Data stored by &W for default value.
page 15/198
2.7.
S2 Command : Set character for the escape sequence (data to command

mode)
ATS2 Set character for the escape sequence (data to command mode)
Read command
Response
<n>
OK
Syntax
ATS2?
Write command
Response
OK
Syntax
ATS2=<n>
Parameters
<n>: only 43 (+) is supported
Reference
V.25ter
2.8.
Notes
The default character is + (043) and cannot be changed.
S3 Command : Command line termination character
ATS3 Command line termination character

Read command
Syntax
ATS3?
Response
<n>
OK
write command
Syntax
ATS3=<n>
Response
OK
Parameters
<n>: 13: command line termination character<CR>: carriage return.
Reference
V.25Ter
Notes
This parameter determines the character recognized by TA to terminate an
incoming command line (13 = <CR> by default); it cannot be changed.
page 16/198
2.9.
S4 Command : Set response formatting character
ATS4 Set response formatting character

Read command
Syntax
ATS4?
Response
<n>
OK
Write command
Syntax
ATS4=<n>
Response
OK
Parameters
<n>: 10: response formatting character <LF>: line feed.
Reference
V.25Ter
Notes
This parameter determines the character recognized by TA to terminate answer
line (10 = <LF> by default); it cannot be changed
2.10. S5 Command : Write command line editing character
ATS5 Write command line editing character

Read command
Syntax
ATS5?
Response
<n>
OK
write command
Syntax
ATS5=<n>
Response
OK
Parameters
<n>: 8: command line editing character <BS>: back space.
Reference
V.25Ter
Notes
This parameter determines the character recognized by TA to terminate an
incoming command line (8 = <backspace> by default); it cannot be changed.
page 17/198
2.11. S7 Command : Set number of seconds to wait for connection completion
ATS7 Set number of seconds to wait for connection completion

Read command
Syntax
ATS7?
Response:
<n>
OK
Write command
Syntax
ATS7=<n>
Response:
OK
Parameters:
<n>: 1...255: number of second to wait for connection completion
Reference
V.25Ter
Notes
See also AT&V for default values of this parameter
2.12. V Command : TA response format
ATV TA response format

Execute command
Syntax
ATV[<value>]
Response
0
(When numeric mode activated)
OK
(When verbose mode activated)
Parameters
<value>:
Reference
V.25Ter
0: Short result code format: <numeric code>.

1: Long result code format: <verbose code>
Notes
Data stored by &W for default value.
page 18/198
2.13. X Command : Result code selection and call progress monitoring control
ATX Result code selection and call progress monitoring control

Write command
Syntax
ATX[<value>]
Response
OK
Parameters
<value>:
Reference
V.25Ter
0 : CONNECT result code only returned, dial tone and busy detection are
both disabled
1 : CONNECT<text> result code only returned, dial tone and busy
detection are both disabled
2 : CONNECT<text> result code returned, dial tone detection is enabled,
busy detection is disabled
3 : CONNECT<text> result code returned, dial tone detection is disabled,
busy detection is enabled
4 : CONNECT<text> result code returned, dial tone and busy detection are
both enabled
Notes
2.14. &C Command : Set circuit Data Carrier Detect (DCD) function mode
AT&C Set circuit Data Carrier Detect (DCD) function mode

Execute command
Syntax
AT&C<value>
Response
OK
Parameters
<value>: 0 : DCD line is always active
1: DCD line is active in the presence of data carrier only.
Reference
V.25Ter
Notes
Data stored by &W for default value.
page 19/198
2.15. &D Command : Set circuit Data Terminal Ready (DTR) function mode
AT&D Set circuit Data Terminal Ready (DTR) function mode

Execute command
Syntax
AT&D<value>
Response
OK
Parameters
<value>:
0:
1:
2:
Reference
V.25Ter
TA ignores status on DTR.

Active->Inactive on DTR: Change to command mode while retaining
the connected data call.
Active->Inactive on DTR: Disconnect data call, change to command
mode. During state DTR inactive auto-answer is off.
Notes
The command AT&D only applies to data calls. Thus, a DTR drop from active to
inactive in AT&D2 mode will not hang up a voice call.
2.16. &F Command : Restore manufactory configuration
AT&F Restore Manufactory configuration

Execute command
Syntax
AT&F[<value>]
Response
OK
Parameters
<value>:
0:
Reference
V.25Ter
Restore parameters to manufactory values
Notes
See also AT&V
Restore manufactory values to active profile
page 20/198
2.17. &W Command : Save stored profile
AT&W Save stored profile

Execute
command
Syntax
AT&W
Response
OK
Parameters
Reference
SAGEM SA
Proprietary
Notes
This command saves the current configuration in a non erasable place.
See also AT&V
The default stored profile may be adapted for customer needs.
Configuration saved :
E:
Echo
Q:
Set result code presentation mode
V:
Verbose
X:
Extended result code
&C:
DCD control
&D:
DTR behavior
&R:
RTS control
&S0
DSR control
&K0
Flow control
FCLASS:
FCLASS
S0:
Set number of rings before automatically answering the call
S3:
Write command line termination character
S4:
Set response formatting character
S5:
Write command line editing character
S7:
Set number of seconds to wait for connection completion
S8:
Comma dial modifier time
S10:
Automatic disconnect delay
page 21/198
2.18. &V Command : Display current configuration
AT&V Display current configuration

Execute command
Response
ACTIVE PROFILE:
<current configuration>
Syntax
AT&V[<value>]
STORED PROFILE 0:
<user default configuration>
STORED PROFILE 1:
<manufactory configuration>
Parameters
<value>:
0:
Reference
SAGEM SA Proprietary
display active profile
Notes
The configuration is a text string on multiple lines as shown in the example below.
This string may vary depending on the manufactory, the product and the user
setup.
Example:
E1 Q0 V1 X4 &C1 &D1 &R1 &S0 +IFC= 0,2 &K0 +FCLASS0
S00:0 S03:13 S04:10 S05:8 S07:50 S08:2 S10:14
This command indicates the result of certain actions as shown below:

Active Profile
ATZ
Stored profile 0 or 1
AT&W
AT&F
Default Settings
page 22/198
2.19. +IPR Command : Set fixed local rate
AT+IPR Set fixed local rate

Test command
Syntax
AT+IPR=?
Response
+IPR: (list of supported auto-detectable <rate>s), (list of supported fixed-only
<rate>s)
OK
Read command
Syntax
AT+IPR?
Response
+IPR: <rate>
OK
Write command
Syntax
AT+IPR=<rate>
Response
OK
Parameters
<rate>:
bit rate per second
1200, 2400, 4800, 9600
19200, 38400, 57600, 115200, 230400, 460800
0 = autobaud
Reference
V.25ter
Notes
The speed is modified after sending the answer
page 23/198
2.20. B: Data rate selection
ATB Data Rate Selection

Execute Command
Syntax
ATB<rate>
Response
OK
Parameters
<rate>:
number from [0, 99], but meaningless.
Reference
V.25ter
Notes
The responses of this command are compliant with the recommendation but this
command has no effect.
It is recommended to use AT+CBST instead of this command
2.21. \N: Data transmission mode
AT\N Data Transmission Mode

Execute Command
Syntax
AT\N<x>
Response
OK
Parameters
<x>:
0:
4, 6:
Reference
V.25ter
transparent mode
RLP mode (non transparent)
Notes
Not support. It is recommended to use AT+CBST instead of this command
page 24/198
2.22. &K Command : Flow control option
AT&K Flow control command

Execute command
Syntax
AT&K<mode>
Response
OK
Parameters
<mode>: 0:
3:
4:
Reference
V.25ter
Disable all flow control

Enable bi-directional hardware flow control.
Enable XON/XOFF flow control.
Notes
Use AT&V0 to display the current flow control setting
page 25/198
3. GENERAL AT COMMANDS
3.1.
I Command : Request Identification Information
ATI Request identification information

Execute command
Syntax
ATI[<value>]
Response
<text> (depends on <value>)
OK
Parameter
<value>:
Reference
V.25ter
3.2.
(nothing):
0:
3:
4:
5:
Product name
Product name
Software version
Manufacturer identification text and Product name
Manufacturer identification text
Notes
<text> may take more than one line
Z Command : Reset and restore user configuration
ATZ Reset and restore user configuration

Execute command
Syntax
ATZ[<value>]
Response
OK
Parameter
<value>:
Reference
V.25ter
0: Reset and restore user configuration with profile 0

1: Reset and restore user configuration with profile 1
Notes
See also AT&V
page 26/198
3.3.
+CGMI Command : Request manufacturer identification
AT+CGMI Request manufacturer identification

Test command
Response
OK
Syntax
AT+CGMI=?
Execute command
Syntax
AT+CGMI
Response
(manufacturer identification text)
OK
Reference
[27.007] 5.1
Notes
3.4.
+CGMM Command : Request model identification
AT+CGMM Request model identification

Test command
Syntax
AT+CGMM=?
Response
OK
Execute command
Syntax
AT+CGMM
Response
(model identification text)
OK
Reference
[27.007] 5.2
Notes
page 27/198
3.5.
+CGMR Command : Request revision identification
AT+CGMR Request revision identification

Test command
Syntax
AT+CGMR=?
Response
OK
Execute command
Syntax
AT+CGMR
Response
(model revision identification text)
OK
Reference
[27.007] 5.3
Notes
3.6.
+CGSN Command : Request product serial number identification (IMEI)
AT+CGSN Request product serial number identification (IMEI)

Test command
Syntax
AT+CGSN=?
Response
OK
Execute command
Syntax
AT+CGSN
Response
<sn> (identification text for determination of the individual ME)
OK
Reference
[27.007] 5.4
Notes
page 28/198
3.7.
+KGSN Command : Request product serial number identification and

Software Version
AT+KGSN Request product serial number identification (IMEI)

Test command
Syntax
AT+KGSN=?
Response
+KGSN: (list of supported <imei type>s)
OK
Execute command
Response
Syntax
AT+KGSN=<imei type> If <imei type> = 0:
+KGSN: <IMEI>
OK
If <imei type> = 1:
+KGSN: < IMEISV>
OK
If <imei type> = 2:
+KGSN: < IMEISV_STR>
OK
Parameters
<IMEI>:
15 digits IMEI (8 digits for TAC + 6 digits for SNR + 1 check digit)
<IMEISV>:
16 digits IMEISV (8 digits for TAC + 6 digits for SNR + 2 SVN digits)
<IMEISV_STR>: formatted string : <15 digits>-<Check digit> SV:<Software version>
Reference
Notes
SAGEM S.A. proprietary This
command has been developped to provide the IMEI SV through

an AT Command
Example
AT+KGSN=0
AT+KGSN=1
+KGSN: 351578000023006
OK
+KGSN: 3515780000230001
OK
page 29/198
3.8.
+KSGV Command : Read creation/modification date of SGV file
AT+KSGV Read Creation/Modification date for SGV file

Execute command
Response
+KSGV : <generation date>,<modification date>
OK
Syntax
AT+KSGV
Parameters
<generation date>:
<modification date>:
"hh:mm DD/MM/YY"
"hh:mm DD/MM/YY"
Reference
Notes
SAGEM S.A. proprietary This
command is dedicated for OEM and allows to check the sgv file
(audio setup) used in the module firmware.
3.9.
+CSCS Command : Set TE character set
AT+CSCS Set TE character set

Test command
Syntax
AT+CSCS=?
Response
+CSCS: (list of supported <chset>)
OK
Read command
Syntax
AT+CSCS?
Response
+CSCS: <chset>
OK
Write command
Syntax
AT+CSCS=<chset>
Response
OK
Parameter
<chset>: GSM
UCS2
IRA
Reference
[27.007] 5.5
GSM default alphabet (GSM 03.38 subclause 6.2.1)

16 bit universal multiple-octet coded character set
(ISO/IEC 10646)
default value
Notes
Select the character set used for all string types (Phonebook entries,
SMS data, )
page 30/198
3.10. +CIMI Command : Request international subscriber identity
AT+CIMI Request international subscriber identity

Test command
Syntax
AT+CIMI=?
Response
OK
Execute command
Syntax
AT+CIMI
Response
<IMSI>: (International Mobile Subscriber Identify)
OK
Reference
[27.007] 5.6
Notes
3.11. +GCAP Command : Request complete TA capability list
AT+GCAP Request complete TA capability list

Execute command
Syntax
AT+GCAP
Response
+GCAP: list of <name>s
OK
Reference
V.25ter
Notes
Example:
+GCAP:+FCLASS,+CGSM
OK
page 31/198
3.12. +GMI Command : Request manufacturer identification
AT+GMI Request manufacturer identification

Test command
Syntax
AT+GMI=?
Response
OK
Execute command
Syntax
AT+GMI
Response
(manufacturer identification text)
OK
Reference
V.25ter
Notes
3.13. +GMM Command : Request model identification
AT+GMM Request model identification

Test command
Syntax
AT+GMM=?
Response
OK
Execute command
Syntax
AT+GMM
Response
OK
Reference
V.25ter
Notes
page 32/198
3.14. +GMR Command : Request revision identification
AT+GMR Request revision identification

Test command
Syntax
AT+GMR=?
Response
OK
Execute command
Syntax
AT+GMR
Response
OK
Reference
V.25ter
Notes
3.15. +GSN Command : Request product serial number identification (IMEI)

identical to GSN
AT+GSN Request product serial number identification (IMEI) identical to GSN

Test command
Syntax
AT+GSN=?
Response
OK
Execute command
Syntax
AT+GSN
Response
<sn> (identification text for determination of the individual ME)
OK
Reference
V.25ter
Notes
page 33/198
3.16. +CMUX Command : Multiplexing mode
AT+CMUX Multiplexing Mode

Test command
Response
+CMUX: (list of supported <mode>s),(list of supported <subset>s),(list of supported
<port_speed>s),(list of supported <N1>s),(list of supported <T1>s),(list of supported
<N2>s),(list of supported <T2>s),(list of supported <T3>s),(list of supported <k>s)
OK
Syntax
AT+CMUX=?
Read Command
Response
+CMUX: <mode>,[<subset>],<port_speed>,<N1>,<T1>, <N2>,<T2>,<T3>[,<k>]
OK
Syntax
AT+CMUX?
Write command
Syntax
AT+CMUX=<mode>[,<su
bset>[,<port_speed>[,<N
1>[,<T1>[,<N2>[,<T2>[,<
T3>[,<k>]]]]]]]]
Response
OK
Parameters
<mode>:
multiplexer Transparency Mechanism

0: Basic option
1: Advanced option
<subset>:
0 UIH frames used only
1 UI frames used only
<port_speed>: transmission rate(1-8)
1
9 600 bit/s
2
19 200 bit/s
3
38 400 bit/s
4
57 600 bit/s
5
115 200 bit/s
<N1>:
maximum frame size (1- 32768)
default Value : 31 (64 if Advanced option is used)
<T1>:
acknowledgement timer in units of ten milliseconds
1-255, where 10 is default (100 ms)
<N2>:
maximum number of re-transmissions
0-100, where 3 is default
<T2>:
response timer for the multiplexer control channel in units of ten
milliseconds
2-255, where 30 is default (300 ms)
<T3>:
wake up response timer in seconds
1-255, where 10 is default
<k>:
window size, for Advanced operation with Error Recovery options
1-7, where 2 is default.
Reference
[27.007] 5.7
Notes
Multiplexing protocol is described in 3 GPP TS 27 010
See Chapter Appendix 4 for a summary of SAGEM S.A. support
page 34/198
4. CALL CONTROL COMMANDS
4.1.
A Command : Answer a call
ATA Answer a call

Execute command
Syntax
ATA
Response:
CONNECT[<text>]
OK
ERROR
Reference
V.25Ter
Notes
4.2.
Data Connection established

Voice Connection established or if cancellation of the command
Response if no connection
See ATX for setup of the CONNECT message
H Command : Disconnect existing connection
ATH Disconnect existing connection
page 35/198
Execute command
Syntax
ATH[<type>]
Response:
OK
Parameters:
<type>:
0:
1:
2:
3:
4:
5:
Reference
V.25Ter
Type of call affected by ATH request. Voice call disconnection is also

dependant of +CVHU settings.
Same behavior as without parameter. Disconnect ALL calls on the
channel he command is requested All active or waiting calls, CS data
calls, GPRS call of the channel will be disconnected.
Disconnect all calls on ALL connected channels. All active or waiting
calls, CSD calls, GPRS call will be disconnected (clean up of all calls of
the ME).
Disconnect all connected CS data call only on the channel the
command is requested (Speech calls (active or waiting) or GPRS calls
are not disconnected).
Disconnect all connected GPRS calls only on the channel the
command is requested (Speech calls (active or waiting) or CS data
calls are not disconnected).
Disconnect all CS calls (either speech or data) but does not disconnect
waiting call (either Speech or data) on the channel the command is
requested.
Disconnect waiting call (either speech or data) but does not disconnect
other active calls (Either CS speech, CS data or GPRS) on the channel
the command is requested. (rejection of incoming call)
Notes
On this command, all calls in progress are ended
See also AT+CHLD
page 36/198
4.3.
D Command : Mobile originated call to dial a number
ATD Mobile originated Call to dial a number

Test command
Syntax
ATD=?
Response
1234567890*#+ABCDPTW,@!
OK
Read command
Syntax
ATD?
Response
1234567890*#+ABCDPTW,@!
OK
Execute command
Syntax
ATD[<n>][;]
Response:
NO DIALTONE
BUSY
NO CARRIER
NO ANSWER
CONNECT[<text>]
OK
The connection cannot be established

Data connection successfully connected
If successfully connected and voice call
Parameters:
<n>:
String of dialing digits and optionally V.25ter modifiers (dialing digits): 0-9, *
, #, +, A, B, C (maximum length: 20 digits)
<;>:
Only required to set up voice calls. TA remains in command mode.
Reference
V.25Ter
Notes
The command may be aborted generally when receiving an ATH command during
execution
Same behavior for ATDP, ATDR, ATDT, ATPD, ATRD, ATTD
OK answer may arrive after just after the ATD command or after the call is actually
active (see AT+COLP, chapter 6.11)
ATD Mobile originated Call to dial a number

Execute command
Syntax
ATD[<n>][;]
Response:
NO DIALTONE
BUSY
NO CARRIER
NO ANSWER
CONNECT[<text>]
OK
The connection cannot be established

Data connection successfully connected
If successfully connected and voice call
Parameters:
<n>:
String of dialing digits and optionally V.25ter modifiers (dialing digits): 0-9, *
, #, +, A, B, C (maximum length: 20 digits)
<;>:
Only required to set up voice calls. TA remains in command mode.
page 37/198
Notes
The command may be aborted generally when receiving an ATH command during
execution
Same behavior for ATDP, ATDR, ATDT, ATPD, ATRD, ATTD
OK answer may arrive after just after the ATD command or after the call is actually
active (see AT+COLP, chapter 6.11)
Reference
V.25Ter
4.4.
D>: Direct dialing from phonebook
ATD> Direct dialing from phonebook

Execute command
Syntax
ATD><str>[;]
ATD>[<mem>]<n>[;]
Response
See ATD
Parameters:
<str>:
alphanumeric field (if possible all available memories should be searched
for correct entry)
<mem>:
memory storage (ME, SM)
<n>:
entry location
Reference
[27.007] 6.2
4.5.
Notes
For memory storage locations, see AT+CPBS
+CHUP Command : Hang up call
AT+CHUP Hang up call

Execute command
Syntax
AT+CHUP
Response
OK
Test command
Syntax
AT+CHUP=?
Response
OK
Reference
[27.007] 6.5
Notes
Since only single mode is supported, the execution of the command always
disconnects active call. AT+CHUP has the same behavior as ATH
ends all calls in progress)
(i.e.
page 38/198
4.6.
+CRC Command : Set Cellular Result Codes for incoming call indication
AT+CRC Set Cellular Result Codes for incoming call indication

Test command
Syntax
AT+CRC=?
Response
+CRC: (list of supported <mode>)
OK
Read command
Syntax
AT+CRC?
Response
+CRC:<mode>
OK
Write command
Syntax
AT+CRC=[<mode>]
Response
OK
Parameters
<mode>:
Reference
[27.007] 6.11
0:
1:
disable extended format

enable extended format
Notes
When enabled, an incoming call is indicated with +CRING: <type>.
<type> :FAX or VOICE or ASYNC
page 39/198
5. MOBILE EQUIPMENT CONTROL AND STATUS COMMANDS
5.1.
+CACM Command : Accumulated call meter (ACM) reset or query
AT+CACM Accumulated call meter (ACM) reset or query

Test command
Response
OK
Syntax
AT+CACM=?
Read command
Response
+CACM: <acm> (current acm value)
OK
Syntax
AT+CACM?
Write command
Syntax
AT+CACM=<password>
(reset the value)
Response
OK
Parameters
<password>: SIM PIN2
Reference
[27.007] 8.25
Notes
This AT command needs SIM and network where AOC are

allowed.
page 40/198
5.2.
+CAMM Command : Accumulated call meter maximum (ACM max) set or

query
AT+CAMM Accumulated call meter maximum (ACM max) set or query

Test command
Syntax
AT+CAMM=?
Response
OK
Read command
Syntax
AT+CAMM?
Response
+CAMM: <acmmax>
OK
write command
Response
Syntax
+CAMM: <acmmax>
AT+CAMM=
[<acmmax>[,<passwd>]] OK
Parameters
<acmmax>:
<passwd>:
Reference
[27.007] 8.26
string type; three bytes of the max ACM value in hexadecimal format
0 disables ACMmax feature
SIM PIN2
Notes
This AT command needs SIM and network where AOC are

allowed.
page 41/198
5.3.
+CCWE Command : Call Meter maximum event
AT+CCWE Call Meter maximum event

Test command
Syntax
AT+CCWE=?
Response
+CCWE: (list of supported <mode>s)
OK
Read command
Syntax
AT+CCWE?
Response
+CCWE: <mode>
OK
Write command
Syntax
AT+CCWE=<mode>
Response
OK
Parameter
<mode>:
Reference
[27.007] 8.28
0: Disable the call meter warning event

1: Enable the call meter warning event
Notes
When enabled, a notification (+CCWV) is sent shortly (approx. 30s) before the
ACM max is reached.
This AT command needs SIM and network where AOC are allowed.
page 42/198
5.4.
+CALA Command : Set alarm time
AT+CALA Set alarm time

Test command
Response
+CALA: (list of supported <n>s),(list of supported <type>s)
OK
Syntax
AT+CALA=?
Read command
Response
[+CALA: <time>,<n1>,[<recurr>]
[<CR><LF>+CALA: <time>,<n2>,[<recurr>]
OK
Syntax
AT+CALA?
Write command
Syntax
AT+CALA=<time>[,<n>[,
<recurr>]]=<time>
Response
OK
Parameters
<time>:
<n>:
<recurr>:
<type>:
Reference
[27.007] 8.16
internal clock (Cf. +CCLK). String type "hh:mm:ss" if <recurr> is

present or"yy/mm/dd,hh:mm:ss" if not.
index of the alarm (range 1 to 5 for now).
string type value indicating day of week for the alarm in one of the
following formats:
"<1..7>[,<1..7>[]]" Sets a recurrent alarm for one or more days in
the week. The digits 1 to 7 corresponds to the days in the week,
Monday (1), , Sunday (7).
"0" Sets a recurrent alarm for all days in the week.
type of alarm (sound, LED, volume).
Notes
To set up a recurrent alarm for one or more days in the week, the <recurr>parameter may be used.
When an alarm is timed out and executed, the unsolicited result code +CALV:
<n> is returned.
When woken up by an alarm, the module is fully started. It is the responsibility of
the host to turn it off and to set a new alarm if recurrent alarms are not used.
Only for not recurrent alarm : if date and hour are over , +CME ERROR: 4 is
returned
After *PSCPOF command, +CALV: correctly received if autobaud speed is not
selected.
Examples
- at+cala=07/04/11,11:34:25
specified date and time
-> set a one shot alarm saved at index 1 for the
- at+cala=07/04/11,11:34:00 ,3 -> set a one shot alarm saved at index 3 for the
specified date and time
- at+cala=11:50:45 ,1,1,4
-> set a recurrent alarm saved at index 1 for every
monday and thursday at 11:50:45
noonWhen woken up by an alarm, the module is fully started. It is the responsibility of
the host to turn it off anew.
page 43/198
5.5.
+CALD Command : Delete alarm
AT+CALD Delete alarm

Test command
Syntax
AT+CALD=?
Response
+CALD: (list of supported <n>s)
OK
Write command
Syntax
AT+CALD=<n>
Response
OK
Parameters
<n>: index of the alarm
Reference
[27.007] 8.38
5.6.
Notes
Action command deletes an alarm in the MT
+CCLK Command : Real time clock
AT+CCLK Real time clock

Test command
Syntax
AT+CCLK=?
Response
OK
Read command
Syntax
AT+CCLK?
Response
+CCLK: <time>
Write command
Syntax
AT+CCLK=<time>
Response
OK
Parameter
<time>: string type value; format is "yy/MM/dd,hh:mm:ss+/-Timezone", where
characters indicate year (last two digits), month, day, hour, minutes,
seconds;
Reference
[27.007] 8.15
Notes
page 44/198
5.7.
*PSCPOF Command : Power off
AT*PSCPOF Power off

Execute command
Syntax
AT*PSCPOF
Response
OK
Reference
Notes
This command allows switching off the mobile. Note that OK result code will
appear immediately if the command is accepted and power off will occur after that.
Unexpected random characters may also be issued during switch off of MS.
5.8.
+CIND Command : Indicator control
AT+CIND Indicator control

Test command
Syntax
AT+CIND=?
Response
+CIND: ("battchg",(0-5)),("signal",(0-4)),("service",(0-1)),("message",(01)),("call",(0-1)),("roam",(0-1)),("smsfull",(0-1))
Read command
Syntax
AT+CIND?
Response
+CIND: <battchg>,<signal>,<service>,<call>, <smsfull>
Parameters
<battchg>: battery charge level (0-5)
<signal>: signal quality
(0-4)
<service>: service availability
(0-1)
<message>: Message received (0-1)
<call>:
call in progress
(0-1)
<roam>: Roaming indicator (0-1)
0: Home net
1: Roaming
<smsfull>: SMS memory storage (0-1)
0: Memory available
1: Memory full
Reference
[27.007] 8.9
Notes
<smsfull> indication not available on all products
page 45/198
5.9.
+CLAC Command : List all available AT commands
AT+CLAC List all available AT commands

Execute command
Syntax
AT+CLAC
Response
List of all supported AT Commands
+CLAC:<AT Command1><CR> <LF>
<AT Command2>[]]
OK
Parameters
Reference
[27.007] 8.37
Notes
This command provides the AT Command list available for the user
5.10. +CMEC Command : Mobile Equipment control mode
AT+CMEC Mobile Equipment control mode

Test command
Syntax
AT+CMEC=?
Response
+CMEC: (list of supported <keyp>s),(list of supported <disp>s),(list of supported
<ind>s)
OK
Read command
Syntax
AT+CMEC?
Response
+CMEC: <keyp>,<disp>,<ind>
OK
Write command
Response
Syntax
AT+CMEC=[<keyp>[,<d OK
isp>[,<ind>]]]
Parameters
<keyp>:
0: keypad management, not significant for HILO (no keypad)
<disp>:
0: display management, not significant for HILO (no display)
<ind>:
0: only ME can set the status of its indicators (command +CIND can only
be used to read the indicators)
Reference
[27.007] 8.6
Notes
Set command selects the equipment, which operates ME keypad, writes to ME
display and sets ME indicators
page 46/198
5.11. +CFUN Command : Set Phone Functionality
AT+CFUN Set Phone Functionality

Test command
Syntax
AT+CFUN=?
Response
+CFUN: (list of supported <fun>s), (list of supported <rst>s)
Read command
Syntax
AT+CFUN?
Response
+CFUN: <fun>
Write command
Response
Syntax
AT+CFUN=[<fun>[,<rst OK
>]]
Parameters
<fun>:
0: minimum functionality(not support);
1: full functionality;
<rst>:
0: Set the ME to <fun> power level immediately.
This is the default when <rst> is not given(not support);
1: reset the MT before setting it to <fun> power level
Reference
[27.007] 8.2
Notes
AT+CFUN=1,1 generates a blocking defense to reset the mobile. OK result code
will appear after reset has been completed. (AT+CFUN=1,1 has no effect on radio
on/off, it leaves it has is was before reset).
page 47/198
5.12. +CMER Command : Mobile Equipment event reporting
AT+CMER Mobile Equipment event reporting

Test command
Syntax
AT+CMER=?
Response
+CMER: (list of supported <mode>s),(list of supported <keyp>s),(list of supported
<disp>s),(list of supported <ind>s),(list of supported <bfr>s)
OK
Read command
Syntax
AT+CMER?
Response
+CMER: <mode>,<keyp>,<disp>,<ind>,<bfr>
OK
Write command
Response
Syntax
AT+CMER=[<mode>[,< OK
keyp>[,<disp>[,<ind>[,
Parameters
<bfr>]]]]]
<mode>: 0:
1:
<keyp>:
<disp>:
<ind>:
0:
0:
0:
1:
2:
<bfr>:
Reference
[27.007] 8.10
0:
buffer unsolicited result codes in the TA; if TA result code buffer is full,
codes can be buffered in some other place or the oldest ones can be
discarded.
discard unsolicited result codes when TA-TE link is reserved (e.g. in
on-line data mode); otherwise forward them directly to the TE
no keypad event reporting
no display event reporting
no indicator event reporting
indicator event reporting using result code +CIEV: <ind>,<value>.
<ind> indicates the indicator order number (as specified for +CIND)
and <value> is the new value of indicator. Only those indicator events,
which are not caused by +CIND shall be indicated by the TA to the TE
indicator event reporting using result code +CIEV: <ind>,<value>. All
indicator events shall be directed
from TA to TE
TA buffer of unsolicited result codes defined within this command is
cleared when <mode> 1 is entered
Notes
page 48/198
5.13. +CMEE Command : Report Mobile Termination error
AT+CMEE Report Mobile Termination Error

Test command
Syntax
AT+CMEE=?
Response
+CMEE: (list of supported <n>s)
OK
Read command
Syntax
AT+CMEE?
Response
+CMEE: <n>
OK
Write command
Syntax
AT+CMEE=[<n>]
Response
OK
Reference
[27.007] 9.1
Parameter
<n>:
0: disable +CME ERROR: <err> result code and use ERROR instead
1: +CME ERROR: <err> result code and use numeric <err> values
2: +CME ERROR: <err> result code and use verbose <err> values
Notes
See Data impacted by &F for default value.
5.14. +CMUT Command : Mute control
AT+CMUT Mute control

Test command
Syntax
AT+CMUT=?
Response
+CMUT: (list of supported <n>s)
OK
Read command
Syntax
AT+CMUT?
Response
+CMUT: <n>
OK
page 49/198
Write command
Response
OK
Syntax
AT+CMUT=<n>
Parameter
<n>: 0
1
Reference
[27.007] 8.24
mute off
mute on
Notes
Be careful, this command can only be used during voice call.
5.15. +CPIN Command : Enter pin
AT+CPIN Enter pin

Test command
Syntax
AT+CPIN=?
Response
OK
Read command
Syntax
AT+CPIN?
Response
+CPIN: <code>
Write command
Syntax
+CPIN=<pin>
[,<newpin>]
Response
OK
Parameters
<code>:
values reserved by this TS:
READY
ME is not pending for any password
SIM PIN
ME is waiting SIM PIN to be given
SIM PUK
ME is waiting SIM PUK to be given. Also, a second pin,
<newpin>, is used to replace the old pin in the SIM and
should thus be supplied
SIM PIN2
ME is waiting SIM PIN2 to be given (this <code> is
recommended to be returned only when the last executed
command resulted in PIN2 authentication failure (i.e. +CME
ERROR: 17); if PIN2 is not entered right after the failure, it is
recommended that ME does not block its operation)
SIM PUK2
ME is waiting SIM PUK2 to be given (this <code> is
recommended to be returned only when the last executed
command resulted in PUK2 authentication failure (i.e. +CME
ERROR: 18); if PUK2 and new PIN2 are not entered right
after the failure, it is recommended that ME does not block
its operation). Also, a second pin, <newpin>, is used to
replace the old pin in the SIM and should thus be supplied
PH-NET PIN ME is waiting personalization password to be given
<pin>, <newpin>:
string type value (8 characters max.)
Reference
[27.007] 8.3
Notes
Parameter <newpin> can only be used if SIM is PIN blocked. <pin> must be PUK.
Otherwise, the command is rejected
page 50/198
5.16. *PSPRAS Command : Pin Remaining Attempt Status
AT*PSPRAS PS Pin Remaining Attempt Status

Test command
Syntax
AT*PSPRAS=?
Response
*PSPRAS: ( list of supported <code>)
OK
Read command
Syntax
AT*PSPRAS?
Response
*PSPRAS: < pin1>, <puk1>,<pin2>,<puk2>
Write command
Syntax
AT*PSPRAS
Response
OK
Parameters
<pin1>:
<puk1>:
<pin2>:
<puk2>:
<code>:
integer type value indicating the number of false presentations

remaining for PIN1. The maximum value is 3, and the minimum
value is 0. Zero means that the PIN1 is blocked.
remaining for PUK1. The maximum value is 10, and the minimum
value is 0. Zero means that the PUK1 is blocked.
remaining for PIN2. The maximum value is 3, and the minimum
value is 0. Zero means that the PIN2 is blocked.
remaining for PUK2. The maximum value is 10, and the minimum
value is 0. Zero means that the PUK2 is blocked.
SIM PIN1, SIM PUK1, SIM PIN2, SIM PUK2
Reference
Notes
SAGEM S.A. proprietary This commands returns information about the number of codes attempts remaining.
command
Set command has no effect ( return OK)
page 51/198
5.17. +CPUC Command : Price per unit and currency table
AT+CPUC Price per unit and currency table

Test command
Syntax
AT+CPUC=?
Response
OK
Read command
Syntax
AT+CPUC?
Response
+CPUC: <currency>,<ppu>
OK
Write command
Response
Syntax
AT+CPUC=<currency>, OK
<ppu>[,<passwd>]
Parameters
<currency>:
Reference
[27.007] 8.27
string type; three-character currency code (e.g. .GBP.,

.DEM.);character set as specified with AT+CSCS.
<ppu>:
string type; price per unit; dot is used as a decimal separator (e.g.
.2.66.). The length is limited to 20 characters. If the string length is
exceeded, the command is terminated with an error. This string may
only contain digits and a dot. Leading zeros are removed from the
string.
<passwd>:
string type; SIM PIN2. String parameter which can contain any
combination of characters. The maximum string length is limited to 8
characters.
Notes
page 52/198
5.18. +CPWC Command : Power class
AT+CPWC Power class

Test command
Syntax
AT+CPWC=?
Response
+CPWC: list of supported (<band>,(list of <class>s)) pairs
OK
Read command
Syntax
AT+CPWC?
Response
+CPWC:
<curr_class1>,<def_class1>,<band1>[,<curr_class2>,<def_class2>,<band2>[...]]
OK
Write command
Syntax
AT+CPWC=[<class>
[,<band>]]
Response
OK
Parameters
<class>, <curr_classn>, <def_classn>:
0
default (not applicable to <curr_class>s or <def_classn>s)
1 MS output power class as in GSM 45.005 [38]
<band>, <bandn>:
0
GSM850
1
GSM900
2
GSM1800
3
GSM1900
Reference
[27.007] 8.29
Notes
Module must be rebooted for the selection to be effective
page 53/198
5.19. *PSRDBS Command : Change Frequency Band class
AT*PSRDBS Change Frequency Band

Test command
Response
* PSRDBS: (list of supported<mode>s ), (list of supported <GSM band>s ), (list of supported
<UMTS band>s )
Syntax
AT*PRDBS=?
Read command
Response
* PSRDBS: <GSM band> [ ,<UMTS band>]
Syntax
AT*PRDBS?
Write command
Syntax
*PSRDBS=<mode>
[,<GSMband> ,
[<UMTS band>]]
Response
OK
Parameter
<Mode>:
0 Set <Band> at next switch on (default value)
1 Set <Band> immediately by restarting stack
<GSM Band>: bit field type parameter; to set several bands sum up the values.
1 GSM 850
2 GSM 900
4 E-GSM
8 PCS 1800
16 PCS 1900
<UMTS Band>: bit field type parameter; to set several bands sum up the values.
1 UMTS band 1
2 UMTS band 2
4 UMTS band 3
8 UMTS band 4
16 UMTS band 5
32 UMTS band 6
Reference
Notes
page 54/198
5.20. +CPAS Command : Phone Activity Status
AT+CPAS Phone activity status

Test command
Syntax
AT+CPAS=?
Response
+CPAS: (list of supported <pas>s)
OK
Execute command
Syntax
AT+CPAS
Response
+CPAS: <pas>
OK
Response
<pas>:
0: ready
2: unknown
3: ringing
4:
Reference
[27.007] 8.1
call in progress
(ME allows commands from TA/TE)

(ME is not guaranteed to respond to instructions)
(ME is ready for commands from TA/TE, but the ringer is
active)
(ME is ready for commands from TA/TE, but a call is in
progress)
Notes
page 55/198
5.21. +CSQ Command : Signal quality
AT+CSQ Signal quality

Test command
Syntax
AT+CSQ=?
Response
+CSQ: (list of supported <rssi>s),(list of supported <ber>s)
OK
Execute command
Syntax
AT+CSQ
Response
+CSQ: <rssi>,<ber>
OK
Parameters
<rssi>:
0:
-113 dBm or less
1:
-111 dBm
2...30: -109... -53 dBm
31:
-51 dBm or greater
99:
not known or not detectable
<ber>: (in percent)
99:
not known or not detectable
Reference
[27.007] 8.5
Notes
page 56/198
5.22. +KRIC Command : Ring indicator control
AT+KRIC Ring indicator control

Test command
Response
+KRIC: (list of supported <masks>s),(list of supported <shape>s)
OK
Syntax
AT+KRIC=?
Read command
Response
+KRIC: <masks>,< shape >
OK
Syntax
AT+KRIC?
Write command
Response
Syntax
AT+KRIC=<mask>[,<sh OK
ape>]
Parameters
<mask>:
0x00:
0x01:
0x02:
0x04:
0x08:
0x10:
0x20:
<shape>:
0:
1:
Reference
(0-31)Use of RI signal
RI not used.
RI activated on incoming calls
(+CRING, RING)
RI activated on SMS
(+CMT, +CMTI)
RI activated on SMS-CB
(+CBM, +CBMI)
RI activated on USSD
(+CUSD)
RI activated on network state
(+CIEV)
RI activated on 0710 wakeup (to be used when GSM 07.10 protocol is
managed and the host is wakened up by RI. It will avoid the module to
close the GSM 07.10 because the host doesn't answer)
signal shape available only for incoming calls
Repeat pulses
The total length of the pulse is equivalent to the transfer of the RING or
CRING notification
Always active
The signal is set to active during the whole incoming call notification
Notes
For a SMS and other unsolicited messages, only one pulse is set.
If the 0710 is woken up by an incoming call only one pulse is set, even if shape=0 is
used.
The width of the pulse is 1s by default. It can be extended to 4s (according to
Customer).
Setup command only to send once to define the RI behavior.
Do not use the command while an incoming call, SMS, SMSCB, USSD
page 57/198
5.23. +KSREP Command : Mobile start-up reporting
AT+KSREP Mobile start-up reporting

Test command
Response
+KSREP: (list of supported <act>s)
OK
Syntax
AT+KSREP=?
Read command
Response
+KSREP: <act>,<stat>
OK
Syntax
AT+KSREP?
Write command
Response
OK
Syntax
AT+KSREP=<act>
Parameters
<act>: Indicates if the module must send a unsolicited code during the startup.
0: The module doesnt send an unsolicited code.
1: The module will send an unsolicited code.
<stat>: This code indicates the status of the module.
0: The module is ready to receive commands for the TE. No access code is
required.
1: The module is waiting for an access code. (The AT+CPIN? Command
can be used to determine it).
2: The SIM card is not present.
3: The module is in SIMlock state.
4: unrecoverable error.
5: unknown state.
Reference
Notes
The module uses unsolicited code once after the boot process +KSUP: <stat>
The KSUP notification will not be sent if the module is in autobaud mode and no bytes
have been received from TE to adapt the serial link to the actual speed
page 58/198
5.24. +KGPIO Command : Hardware IO Contro
AT+KGPIO Hardware IO Control

Test command
Response
+KGPIO: (list of supported <IO>s),(list of supported <cde>s)
OK
Syntax
AT+KGPIO=?
Read command
Response
OK
Syntax
AT+KGPIO?
Write command
Syntax
AT+KGPIO=<IO>,<cde>
Response
If <cde> = 2:
+KGPIO: <IO>, <current_value>
OK
Else
OK
Parameters
<IO>: Selected IO
1:
GPIO1, pin name of the connector.
2:
GPIO2, pin name of the connector.
3:
GPIO3, pin name of the connector
4:
5:
6:
GPIO6_SPI_IRQ, pin name of the connector
7:
GPIO7_SPI_CLK, pin name of the connector
8:
GPIO8_SPI_IN, pin name of the connector
<cde>: 0:
1:
2:
Reference
Reset the selected IO

Set the selected IO
Request the current value of the IO
Notes
Be aware that this command doesnt change the level of the IO after a reset of the
module.
page 59/198
5.25. +KSLEEP Command : Power Management Control
AT+KSLEEP Power management control

Test command
Response
+KSLEEP: (list of supported <mngt>s)
OK
Syntax
AT+KSLEEP=?
Read command
Response
+KSLEEP: <mngt>
OK
Syntax
AT+KSLEEP?
Write command
Response
OK
Syntax
AT+KSLEEP=<mngt>
Parameters
<mngt>: 0: The module doesnt go in sleep mode as long as DTR is set to high
level
1: The module decides by itself (internal timing) when it goes in sleep
mode
Reference
Notes
This parameter is part of the profile (see AT&V, ATZ, AT&F)
See the documents related to the power saving methods to have more details of the
possible methods
page 60/198
5.26. +KCELL Command : Cell Environment Information
AT+KCELL Cell Environment Information

Test command
Response
+KCELL: (list of supported <revision>s)
OK
Syntax
AT+KCELL=?
Read command
Response
OK
Syntax
AT+KCELL?
Write command
Syntax
AT+KCELL=<revision>
Response
+KCELL: <nbcells>[,<ARFCNi>,<BSICi>,<PLMNi>,<LACi>,<CIi>,<RSSIi>,<TAi>]
OK
Parameters
<revision>:
<nbcells>:
<ARFCN>:
<BSIC>:
<PLMN>:
<LAC>:
<CI>:
<RSSI>:
<TA>:
Reference
reserved for future purposes (only 0 for the moment)

number of base stations available. The first base station is the serving
cell (0 i 7)
Absolute Radio Frequency Channel Number
Base Station Identify Code
PLMN identifiers (3 bytes), made of MCC (Mobile Country Code), and
MNC (Mobile Network Code).
Location Area
Cell ID, 4 hexadecimal digits, e.g. ABCD.
Received signal level of the BCCH carrier, decimal value from 0 to 63.
The indicated value is an offset which should be added to 110 dBm
to get a value in dBm. See the formula specified in TS 05.08 Radio
Subsystem Link Control.
Timing advance. Available only during a communication (equals to
0xff=255 at any other time).
Notes
This command provides information related to the network environment and can be
used for example for localization calculation
Values in italic are not available during some times; i.e. during a communication
phase CI is not available, where TA is available only during a communication. By
default, all values will be initialized to 0xFF; thus when a value is returned equal to
0xFF, this will mean it was not possible to decode it.
Example
AT+KCELL=0
+KCELL: 5, 102,
15,02f810,61a9,abcd,28,255,82,3,02f810,41b1,bcde,29,255,84,1,02f810,58d0,cdef,3
0,255,119,22,02f810,ffff,ffff,12,255,106,16,02f810,ffff,ffff,24,255
OK
page 61/198
5.27. +CRMP Command : Ring Melody Playback
AT+CRMP Ring Melody Playback

Test command
Syntax
AT+CRMP=?
Response
+CRMP: (list of supported <call type>s),(list of supported <volume>s),(0),(list of
supported <index>s)
OK
Write command
Response
Syntax
OK
AT+CRMP=<call
type>[,<volume>[,<t
Parameters
ype>,<index>]]
<index>:
<volume>:
<call type>:
<type>:
Reference
[27.007] 8.35
integer which defines a ring melody(1-11).

integer which defines the sound level(1-3). The smaller the lower
integer which specifies the type of event which will start the ring.
0: Voice call (default value)
0: ring melody is manufacturer defined (unique supported value)
Notes
When playing a melody, if a parameter is not given, the value setup with AT+CRMC is
used, If <type> and <index> are defined, <calltype> is not taken in account.
5.28. +CRMC Command : Ring Melody Control
AT+CRMC Ring Melody control

Test command
Syntax
AT+CRMC=?
Response
+CRMC: (list of supported <index>s),(list of supported <volume>s),(list of supported
<call type>s)
OK
Read command
Syntax
AT+CRMC?
Response
+CRMC: <index>,<volume>,<calltype1>
+CRMC: <index>,<volume>,<calltype2>
...
OK
page 62/198
Write command
Response
Syntax
AT+CRMC=<index>,< OK
volume>[,<calltype>]
Parameters
<index>:
<volume>:
<calltype>:
Reference
[27.007] 8.34
integer which defines a ring melody.

integer which defines the sound level. The smaller the lower
integer which specifies the type of event which will start the ring.
0: Voice call (default value)
Notes
page 63/198
5.29. *PSVMWN Command : Voice Message Waiting Notification
AT*PSVMWN Voice mail indicator

Test command
Response
*PSVMWN: ( list of supported <mode>)
*PSVMWN: ( list of supported <mode>)
Syntax
AT*PSVMWN=?
OK
Read command
Response
*PSVMWN: < current mode>
OK
Syntax
AT*PSVMWN?
Write command
Syntax
AT*PSVMWN=<mode>
Response
OK
Parameters
<Mode>:
0 Disable presentation of notification
1 enable presentation of notification
<line Id >:
1 (Line 1)
2 (Aux. Line)
3 (data)
4 (fax)
<status>:
0 (No message waiting)
1 (at least one message is waiting)
<index>: Record index in EF SMS if the received MWI message has been
stored in SIM (if it sis a STORE MWI SMS)
0...255
<NbMsgWaiting>: Number of message waiting on line <line Id>
0...255
Reference
Notes
Set command enables/disables the presentation of notification result code from ME
to TE When <mode> = 1, * PSVMWI: <line Id > , <status>
[,<index>[,<NbMsgWaiting>]] (Voice Message Waiting Indication is sent to TE when
notification is received from network or at switch on.
page 64/198
5.30. +CRSM Command : SIM Restricted Access
AT+CRSM SIM RESTRICTED ACCESS

Test command
Syntax
AT+CRSM=?
Response
OK
Write command
Response
Syntax
AT+CRSM=<command>[ +CRSM: <sw1>,<sw2>[,<response>]
,<fileid>[,<P1>,<P2>,<P3 OK
>[,<data>]]]
Parameters
<command>: command passed on by the MT to the SIM; refer GSM 51.011 [28]
176
READ BINARY
178
READ RECORD
192
GET RESPONSE
242
STATUS
all other values are reserved
<fileid>:
integer type; this is the identifier of a elementary data file on SIM.
Mandatory for every command except STATUS
<Pi>:
integer type; parameters passed on by the MT to the SIM. These
parameters are mandatory for every command, except GET
RESPONSE and STATUS. The values are described in
GSM 51.011 [28]
<data>:
information which shall be written to the SIM (hexadecimal character
format; refer +CSCS)
<swi>:
integer type; information from the SIM about the execution of the
actual command. These parameters are delivered to the TE in both
cases, on successful or failed execution of the command
<response>: response of a successful completion of the command previously
issued (hexadecimal character format; refer +CSCS). STATUS and
GET RESPONSE return data, which gives information about the
current elementary data field. This information includes the type of file
and its size (refer GSM 51.011 [28]). After READ BINARY or READ
RECORD command the requested data will be returned. <response>
is not returned after a successful UPDATE BINARY or UPDATE
RECORD command
Reference
[27.007] 8.18
Notes
For safety reason, following <command>s are not supported
214
UPDATE BINARY
220
UPDATE RECORD
<data> is a string and so must be put between quotes ()\
5.31. *PSPWM Command : PWM control
AT*PSPWM PWM control

page 65/198
Write command
Syntax
AT*PSPWM=<output>,<
period >, <level>
Response
Reference
Notes
Parameters
< output >:
0:
PWM0
1:
PWM1
2:
BUZZER
< period >:
0..126 (when output is PWM0 or PWM1): as number of SYSCLK/8 period
0:
forces DC PWM output to be high
1..126: DC period is n+1 TSYSCLK/8, T = 1 /(26M / 8) = 307 ns
Or 0..1024(when output is buzzer): freq = SYSCLK / (period * 2 * 64)
When period = 203, then freq = 26M / (203 * 2* 64) = 1KHz
< level >:
ranges from 0 to 100 as a percentage
page 66/198
6. NETWORK SERVICE RELATED COMMANDS
6.1.
+CAOC Command : Advice of charge information
AT+CAOC Advice of charge information

Test command
Syntax
AT+CAOC=?
Response
+CAOC: (list of supported <mode>s)
OK
Read command
Syntax
AT+CAOC?
Response
+CAOC: <mode>
OK
Write command
Syntax
AT+CAOC=<mode>
Response
If <mode> = 0
+CAOC: <ccm>
OK
Else
OK
Execute command
Syntax
AT+CAOC
Response
+CAOC: <ccm>
OK
Parameters
<mode> : 0: query CCM value
1: deactivation of the unsolicited notification (+CCCM)
2: activation of the unsolicited notification
<ccm>:
string type; three bytes of the current CCM value in hexadecimal format
Reference
[27.007] 7.16
Notes
The unsolicited code is: +CCCM: <ccm>
When activated this message is sent to the TE every time there is a change in the
ccm value with a minimum of 10 seconds between 2 messages.
page 67/198
6.2.
+CCFC Command : Call forwarding number and conditions control
AT+CCFC Call forwarding number and conditions control

Test command
Response
+CCFC: (list: range of supported <reas>)
OK
Syntax
AT+CCFC=?
Write command
Syntax
AT+CCFC=<reas>,
<mode>[,<number>[,<t
ype>[,<class>[,<subad
dr>[,<satype>[,<time>]]
]]]]
Response
If <mode> = 2 and command successful:
+CCFC: <status>,<class1>[,<number>,<type>[,<subaddr>,<satype>[,<time>]]]
[+CCFC: <status>,<class2>[,<number>,<type>[,<subaddr>,<satype>[,<time>]]]]
[]
OK
Else
OK
Parameter
<reas>:
Reference
[27.007] 7.11
0: unconditional
1: mobile busy
2: no reply
3: not reachable
4: all call forwarding
5
all conditional call forwarding
<mode>:
0
disable
1
enable
2
query status
3
registration
4
erasure
<number>: string type phone number of forwarding address in format specified by
<type>
<type>:
type of address octet in integer format
<class>:
is a sum of integers each representing a class of information
(default 7)
1: voice
2: data
4: fax
<subaddr>: string type sub address of format specified by <satype>
<satype>: type of subaddress octet in integer format
<time>
1...30 when "no reply" is enabled or qurred, this gives the time in
seconds to wait before call is forwarded (default value is 20)
<status>:
0: not active
1: active
Notes
This command allows control of the call forwarding supplementary service
according to GSM 02.84
page 68/198
6.3.
+CCWA Command : Call waiting
AT+CCWA Call waiting

Test command
Syntax
AT+CCWA=?
Response
+CCWA: (list of supported <n>s)
OK
Read command
Syntax
AT+CCWA?
Response
+CCWA: <n>
OK
Write command
Syntax
AT+CCWA=[<n>
[,<mode>[,<class>]]]
Reference
[27.007] 7.12
Response
when <mode>=2 and command successful
+CCWA: <status>,<class1>
[+CCWA: <status>,<class2>[...]]
OK
Parameters
<n>: sets/shows the result code presentation status in the TA
0
disable
1
enable
<mode>:
when <mode> parameter is not given, network is not interrogated
0
disable
1
enable
2
query status
<class>:
sum of integers each representing a class of information (default 7):
1
voice (telephony)
2
data (refers to all bearer services; with <mode>=2 this may
refer only to some bearer service if TA does not support values
16, 32, 64 and 128)
4
fax (facsimile services)
<status>:
0
not active
1
active
<number>:
string type phone number of calling address in format specified by
<type>
<type>:
type of address octet in integer format (refer TS 24.008 [8]
subclause 10.5.4.7)
<alpha>:
optional string type alphanumeric representation of <number>
corresponding to the entry found in phonebook; used character set
should be the one selected with command Select TE Character Set
+CSCS
<CLI validity>: 0
CLI valid
1
CLI has been withheld by the originator.
2
CLI is not available due to interworking problems or limitations
of originating network.
Notes
When enabled (<n>=1), the following unsolicited code is sent to the TE:
+CCWA: <number>,<type>,<class>[,<alpha>][,<CLI validity>]
page 69/198
6.4.
+CHLD Command : Call hold and multiparty
AT+CHLD Call hold and multiparty

Test command
Syntax
AT+CHLD=?
Response
+CHLD: (list of supported <n>s)
OK
Execute command
Syntax
AT+CHLD=[<n>]
Response
OK
Parameters
<n>:
0 Terminate all held calls; or set UDUB (User Determined User Busy) for a
waiting call, i.e. reject the waiting call.
1 Terminate all active calls (if any) and accept the other call (waiting call or
held call)
1X Terminate the active call X (X= 1-7)
2 Place all active calls on hold (if any) and accept the other call (waiting call
or held call) as the active call
2X Place all active calls except call X (X= 1-7) on hold
3 Add the held call to the active calls
4 Explicit Call Transfer
Reference
[27.007] 7.13
Notes
page 70/198
6.5.
+CUSD: Unstructured Supplementary Service Data
AT+CUSD Unstructured supplementary service data

Test command
Syntax
AT+CUSD=?
Response
+CUSD: (list of supported <n>s)
OK
Read command
Syntax
AT+CUSD?
Response
+CUSD: <n>
OK
Unsolicited Notification
+CUSD: <m>[,<str>,<dcs>]
Write command
Response
Syntax
AT+CUSD=[<n>[,<str>[ OK
,<dcs>]]]
Parameters
<n>:
<str>:
<dcs>:
<m>:
parameter sets/shows the result code presentation status in the TA

0: disable the result code presentation to the TE (default value if no
parameter)
1: enable the result code presentation to the TE
2: cancel session (not applicable to read command response)
string type USSD-string (when <str> parameter is not given, network
is not interrogated):
if <dcs> indicates that 3GPP TS 23.038 [25] 7 bit default alphabet is
used:
if TE character set other than "HEX" (refer command Select TE
Character Set +CSCS): MT/TA converts GSM alphabet into current
TE character set according to rules of 3GPP TS 27.005 [24] Annex A
if TE character set is "HEX": MT/TA converts each 7-bit character of
GSM alphabet into two IRA character long hexadecimal number (e.g.
character (GSM 23) is presented as 17 (IRA 49 and 55))
if <dcs> indicates that 8-bit data coding scheme is used: MT/TA
converts each 8-bit octet into two IRA character long hexadecimal
number (e.g. octet with integer value 42 is presented to TE as two
characters 2A (IRA 50 and 65))
3GPP TS 23.038 [25] Cell Broadcast Data Coding Scheme in integer
format (default 0)
0 : no further user action required (network initiated USSD-Notify, or
no further information needed after mobile initiated operation)
1 : further user action required (network initiated USSD-Request, or
further information needed after mobile initiated operation)
2 : USSD terminated by network
3 : other local client has responded
4 : operation not supported
5 : network time out
Reference
[27.007] 7.15
6.6.
page 71/198
Notes
When TE sends an USSD to the network, the OK result code is sent before the
response of the network. When network answers, the response will be sent as an
URC (as if it was a network initiated operation, in case of error +CUSD: 4 will be
sent).
This allows the link not to be blocked for a long time (the network can take a long
time to answer a USSD request initiated by the TE).
The USSD session can be aborted using command at+cusd=2.
+CLCC Command : List current call
AT+CLCC List current call

Test command
Syntax
AT+CLCC=?
Response
OK
page 72/198
Execute command
Response
[+CLCC: <id1>,<dir>,<stat>,<mode>,<mpty>[,<number>,<type>[,<alpha>]]]
[+CLCC: <id2>,<dir>,<stat>,<mode>,<mpty>[,<number>,<type>[,<alpha>]]]
[]
OK
Syntax
AT+CLCC
Parameters
<id>:
integer type; call identification number as described in GSM 02.30 [19]
subclause 4.5.5.1; this number can be used in +CHLD command
operations
<dir>:
0: mobile originated (MO) call
1: mobile terminated (MT) call
<stat>:
state of the call)
0: active
1: held
2: dialing (MO call)
3: alerting (MO call)
4: incoming (MT call)
5: waiting (MT call)
<mode>: bearer/teleservice
0: voice
1: data
2: fax
3: voice followed by data, voice mode
4: alternating voice/data, voice mode
5: alternating voice/fax, voice mode
6: voice followed by data, data mode
7: alternating voice/data, data mode
8: alternating voice/fax, fax mode
9: unknown
<mpty>: 0: call is not one of multiparty (conference) call parties
1: call is one of multiparty (conference) call parties
<number>: string type phone number in format specified by <type>
<type>:
type of address octet in integer format (refer GSM 04.08 [8] subclause
10.5.4.7)
<alpha>: string type alphanumeric representation of <number> corresponding to the
entry found in phonebook; used character set should be the one selected
with command Select TE Character Set +CSCS
Reference
[27.007] 7.18
6.7.
Notes
This commands returns the current list of calls of ME
Example: Outgoing voice call in progress
+CLCC: 1,0,0,0,0
+CLCK Command : Facility lock
AT+CLCK Facility lock

Test command
Syntax
AT+CLCK=?
Response
+CLCK: (list of supported <fac>) OK
page 73/198
Execute command
Response
Syntax
AT+CLCK=<fac>,<mod If <mode> <> 2 and command is successful
OK
e>[,<passwd>
[,<class>]]
If <mode> = 2 and command is successful
+CLCK:<status>[,<class1>[<CR>,<LF>+CLCK:<status>,class2]]
Parameters
<fac>: values reserved by the present document:
"AO"
"OI"
"OX"
"AI"
"IR"
"AB"
"AG"
"AC"
"FD"
"SC"
"PN"
"PU"
"PP"
BAOC (Barr All Outgoing Calls) (refer 3GPP TS 22.088 [6] clause 1)
BOIC (Barr Outgoing International Calls) (refer 3GPP TS 22.088 [6] clause 1)
BOIC-exHC (Barr Outgoing International Calls except to Home Country) (refer
3GPP TS 22.088 [6] clause 1)
BAIC (Barr All Incoming Calls) (refer 3GPP TS 22.088 [6] clause 2)
BIC-Roam (Barr Incoming Calls when Roaming outside the home country)
(refer 3GPP TS 22.088 [6] clause 2)
All Barring services (refer 3GPP TS 22.030 [19]) (applicable only for mode>=0)
All outgoing barring services (refer 3GPP TS 22.030 [19]) (applicable only for
<mode>=0)
All incoming barring services (refer 3GPP TS 22.030 [19]) (applicable only for
<mode>=0)
SIM card or active application in the UICC (GSM or USIM) fixed dialing
memory feature (if PIN2 authentication has not been done during the current
session, PIN2 is required as <passwd>)
SIM (lock SIM/UICC card) (SIM/UICC asks password in MT power-up and
when this lock command issued)
Network Personalization (refer 3GPP TS 22.022 [33])
network subset Personalization (refer 3GPP TS 22.022 [33])
service Provider Personalization (refer 3GPP TS 22.022 [33])
<mode>:
Reference
[27.007] 7.4
6.8.
0 unlock
1 lock
2 query status
<status>:
0 not active
1 active
<passwd>: string type; shall be the same as password specified for the facility from
the ME user interface or with command Change Password +CPWD
<class>:
sum of integers each representing a class of information (default 7):
1 voice (telephony)
2 data (refers to all bearer services; with <mode>=2 this may refer only
to some bearer service if TA does not support values 16, 32, 64 and
128)
4 fax (facsimile services)
8 short message service
16 data circuit sync
32 data circuit async
Notes
This commands may be used by the TE to lock or unlock ME or network facilities
(with a password protection)
AT+CLCK="PN",2
--> Query the status of the Network Personalization
+CLCK: 0
--> unlock state
OK
+CLIP Command : Calling line identification presentation
AT+CLIP Calling line identification presentation

page 74/198
Test command
Syntax
AT+CLIP=?
Response
+CLIP: (list of supported <n>)
OK
Read command
Syntax
AT+CLIP?
Response
+CLIP: <n>,<m>
OK
Read command
Syntax
AT+CLIP=<n>
Response
OK
Parameters
<n>:
parameter sets/shows the result code presentation status in the TA

0: disable
1: enable
<m>:
parameter shows the subscriber CLIP service status in the network
0: CLIP not provisioned
1: CLIP provisioned
2: unknown (e.g. no network, etc.)
<number>:
string type phone number of format specified by <type>
<type>:
10.5.4.7)
<subaddr>:
string type subaddress of format specified by <satype>
<satype>:
type of subaddress octet in integer format (refer GSM 04.08 [8]
subclause 10.5.4.8)
<alpha>:
optional string type alphanumeric representation of <number>
corresponding to the entry found in phonebook; used character set
should be the one selected with command Select TE Character Set
+CSCS
<CLI validity>: 0: CLI valid
1: CLI has been withheld by the originator.
2 CLI is not available due to interworking problems or limitations of
originating network.
Reference
[27.007] 7.6
Notes
When the presentation to the CLI at the TE is enabled, the following notification is
sent after every ring notification
+CLIP: <number>,<type>[,<subaddr>,<satype>[,<alpha>,[<CLI validity>]]]
page 75/198
6.9.
+CLIR Command : Calling line identification restriction
AT+CLIR Calling line identification restriction

Test command
Syntax
AT+CLIR=?
Response
+CLIR: (list of supported <n>)
OK
Read command
Syntax
AT+CLIR?
Response
+CLIR: <n>,<m>
OK
Execute command
Syntax
AT+CLIR=<n>
Response
OK
Parameters
<n>:
parameter sets the adjustment for outgoing calls
0: presentation indicator is used according to the subscription of the CLIR
service
1: CLIR invocation
2: CLIR suppression
<m>:
parameter shows the subscriber CLIR service status in the network
0: CLIR not provisioned
1: CLIR provisioned in permanent mode
3: CLIR temporary mode presentation restricted
4: CLIR temporary mode presentation allowed
Reference
[27.007] 7.7
Notes
page 76/198
6.10. +CNUM Command : Subscriber number
AT+CNUM Subscriber number

Test command
Syntax
AT+CNUM=?
Response
+CNUM: (0-1),(129,145,161,128-255)
OK
Execute command
Syntax
AT+CNUM
Response
+CNUM: [<alpha1>],<number1>,<type1>[,<speed>,<service>[,<itc>]][<CR><LF>
+CNUM: [<alpha2>],<number2>,<type2>[,<speed>,<service>[,<itc>]][...]]
OK
Parameters
<alpha>:
<number>:
<type>:
<speed>:
<service>:
<itc>:
Reference
[27.007] 7.1
optional alphanumeric string associated with <number>; used character

set should be the one selected with command Select TE Character Set
+CSCS
string type phone number of format specified by <type>
10.5.4.7)
as defined in 27.007 subclause 6.7 or +CBST
service related to the phone number
0: asynchronous modem
1: synchronous modem
2: PAD Access (asynchronous)
3: Packet Access (synchronous)
4: voice
5: fax
also all other values below 128 are reserved by the present document
information transfer capability
0: 3.1kHz
1: UDI
Notes
Action command returns the MSISDNs related to the subscriber (this information
can be stored in the SIM or in the ME)
The Read Command (AT+CNUM?) returns an error
All the numbers are in the ON (Own number) phonebook
Example:
AT+CNUM
+CNUM: "TEL","0612345678",129
+CNUM: "","",255
+CNUM: "","",255
+CNUM: "","",255
OK
page 77/198
6.11. +COLP Command : Connected line identification presentation
AT+COLP Connected line identification presentation

Test command
Syntax
AT+COLP=?
Response
+COLP: (list of supported <n>s)
OK
Read command
Syntax
AT+COLP?
Response
+COLP: <n>,<m>
OK
Execute command
Syntax
AT+COLP=[<n>]
Response
OK
Parameters
<n>: parameter sets/shows the result code presentation status in the TA
0: disable
1: enable
<m>: parameter shows the subscriber COLP service status in the network
0: COLP not provisioned
1: COLP provisioned
<number>, <type>, <subaddr>, <satype>, <alpha>: refer +CLIP
Reference
[27.007] 7.8
Notes
This command refers to the GSM supplementary service COLP (Connected Line
Identification Presentation) that enables a calling subscriber to get the connected
line identity (COL) of the called party after setting up a mobile originated call.
When enabled (and called subscriber allows) >]] the following intermediate result
code is returned from TA toTE before any +CR or V.25ter [14] responses
+COLP: <number>,<type>[,<subaddr>,<satype> [,<alpha>]]
If COLP=1, the OK answer to an ATD Command happens only after the call is
active (and not just after the command)
page 78/198
6.12. +COPN Command : Read operator name
AT+COPN Read operator name

Test command
Syntax
AT+COPN=?
Response
OK
Execute command
Syntax
AT+COPN
Response
+COPN: <numeric1>,<alpha1>[<CR><LF>
+COPN: <numeric2>,<alpha2>
[...]]
OK
Parameters
<numeric>:
string type; operator in numeric format (see +COPS)
<alpha>: string type; operator in long alphanumeric format (see +COPS)
Reference
[27.007] 7.21
Notes
page 79/198
6.13. +COPS Command : Operator selection
AT+COPS Operator selection

Test command
Syntax
AT+COPS=?
Response
+COPS: [list of supported (<stat>,long alphanumeric <oper>,short alphanumeric
<oper>,numeric <oper>[,< AcT>])s][,,(list of supported <mode>s),(list of supported
<format>s)]
OK
Read command
Syntax
AT+COPS?
Response
+COPS: <mode>[,<format>,<oper>[,< AcT>]]
OK
Write command
Response
Syntax
AT+COPS=[<mode>[,<f OK
ormat>
Parameters
[,<oper>[,< AcT>]]]]
<mode>: 0
1
2
3
4
Reference
[27.007] 7.3
automatic (<oper> field is ignored)

manual (<oper> field shall be present, and <AcT> optionally)
unsupported
set the read format; use with <format>
manual/automatic (<oper> field shall be present); if manual selection
fails, automatic mode (<mode>=0) is entered
<format>: 0
long format alphanumeric <oper>
1
short format alphanumeric <oper>
2
numeric <oper>
<oper>:
string type; <format> indicates if the format is alphanumeric or
numeric
<stat>:
0
unknown
1
available
2
current
3
forbidden
<AcT>:
access technology selected:
0
GSM
1
GSM Compact
2
UTRAN
Notes
Only mode 0,1, 3 and 4 are supported
page 80/198
6.14. +CPOL Command : Preferred PLMN list
AT+CPOL Preferred PLMN list

Test command
Response
+CPOL: (list of supported <index>s),(list of supported <format>s)
OK
Syntax
AT+CPOL=?
Read command
Response
+CPOL:
<index1>,<format>,<oper1>[,<GSM_AcT1>,<GSM_Comp_AcT1>,<UTRAN_AcT1>]
[+CPOL:
<index2>,<format>,<oper2>[,<GSM_AcT2>,<GSM_Comp_AcT2>,<UTRAN_AcT2>]
[...]]
OK
Syntax
AT+CPOL?
Write command
Syntax
AT+CPOL=[<index>][,<
format>[,<oper>[,<GS
M_AcT>,<GSM_Compa
ct_AcT>,<UTRAN_AcT
>]]]
Response
OK
Reference
[27.007] 7.19
Notes
Parameters
<index>:
integer type; the order number of operator in the SIM/USIM

preferred operator list
<format>:
0 long format alphanumeric <oper>
1 short format alphanumeric <oper>
2 numeric <oper>
<opern>:
string type;
<format> indicates if the format is alphanumeric or numeric
(see +COPS)
<GSM_AcTn>:
GSM access technology:
0 access technology not selected
1 access technology selected
<GSM_Comp_AcTn>: GSM compact access technology:
<UTRA_AcTn>:
UTRA access technology:
page 81/198
6.15. +CPWD Command : Change password
AT+CPWD Change password

Test command
Syntax
AT+CPWD=?
Response
+CPWD: list of supported (<fac>,<pwdlength>)s
OK
Write command
Syntax
AT+CPWD=<fac>,
<oldpwd>,<newpwd>
Response
OK
Parameters
<fac>:
"AO"
"OI"
"OX"
"AI"
"IR"
"AB"
"P2"
"SC"
BAOC (Barr All Outgoing Calls)

BOIC (Barr Outgoing International Calls)
BOIC-exHC (Barr Outgoing International Calls except to Home
Country)
BAIC (Barr All Incoming Calls)
BIC-Roam (Barr Incoming Calls when Roaming outside the home
country)
All Barring services (refer GSM02.30[19]) (applicable only for
<mode>=0)
SIM PIN2<oldpwd> password specified for the facility from the user
interface or with command. If an old password has not yet been set,
<oldpwd> is not to enter.
SIM (lock SIM card) (SIM asks password in ME power-up and when
this lock command issued)
<oldpwd>, <newpwd>: string type; <oldpwd> shall be the same as password

specified for the facility from the ME user interface or with
command Change Password +CPWD and <newpwd> is the
new password; maximum length of password can be
determined with <pwdlength>
<pwdlength>:
integer type maximum length of the password for the facility
Reference
[27.007] 7.5
Notes
Test command returns a list of pairs which present the available facilities and the
maximum length of their password.
Write command sets a new password for the facility lock function..
page 82/198
6.16. +CREG Command : Network registration
AT+CREG Network registration

Test command
Syntax
AT+CREG=?
Response
+CREG: (list of supported <n>s)
OK
Read command
Syntax
AT+CREG?
Response
+CREG: <n>,<stat>[,<lac>,<ci>]
OK
Execute command
Syntax
AT+CREG=<n>
Response
OK
Parameters
<n>:
0: disable network registration unsolicited result code
1: enable network registration unsolicited result code +CREG: <stat>
2: enable network registration and location information unsolicited result code
+CREG: <stat>[,<lac>,<ci>]
<stat>: 0: not registered, ME is not currently searching a new operator to register to
1: registered, home network
2: not registered, but ME is currently searching a new operator to register to
3: registration denied
4: unknown
5: registered, roaming
<lac>: string type; two byte location area code in hexadecimal format (e.g. "00C3"
equals 195 in decimal)
<ci>:
string type; two byte cell ID in hexadecimal format
Reference
[27.007] 7.2
Notes
Set command controls the presentation of an unsolicited result code +CREG:
<stat> when <n>=1 and there is a change in the ME network registration status, or
code +CREG: <stat>[,<lac>,<ci>] when <n>=2 and there is a change of the
network cell.
page 83/198
6.17. +CSSN Command : Supplementary service notification
AT+CSSN Supplementary service notification

Test command
Syntax
AT+CSSN=?
Response
+CSSN: (list of supported <n>s), (list of supported <m>s)
OK
Read command
Syntax
AT+CSSN?
Response
+CSSN: <n>,<m>
OK
Write command
Syntax
AT+CSSN=<n>[,<m>]
Response
OK
Parameters
<n>: 0: Suppresses the +CSSI messages
1: Activates the +CSSI messages
<m>: 0: Suppresses the +CSSU messages
1: Activates the +CSSU messages
Reference
[27.007] 7.17
Notes
Currently, Modules support the following values:
CSSI: 0 to 6
CSSU: 0 to 5
page 84/198
7. PHONE BOOK MANAGEMENT
7.1.
+CPBF Command : Find phonebook entries
AT+CPBF Find phonebook entries

Test command
Syntax
AT+CPBF=?
Response
+CPBF: [<nlength>],[<tlength>]
OK
Execute command
Syntax
AT+CPBF=<findtext>
Response
[+CPBF: <index1>,<number>,<type>,<text>]
[+CBPF: <index2>,<number>,<type>,<text>]
OK
Parameters
<index1>, <index2>: integer type values in the range of location numbers of
phonebook memory
<number>:
string type phone number of format <type>
<type>:
type of address octet in integer format (refer GSM 04.08 [8]
subclause 10.5.4.7)
<findtext>, <text>:
string type field of maximum length <tlength>; character set as
specified by command Select TE Character Set +CSCS
<nlength>:
integer type value indicating the maximum length of field
<number>
<tlength>:
integer type value indicating the maximum length of field <text>
Reference
[27.007] 8.13
Notes
Execution command returns phonebook entries (from the current phonebook
memory storage selected with +CPBS)
page 85/198
7.2.
+CPBR Command : Read current phonebook entries
AT+CPBR Read current phonebook entries

Test command
Syntax
AT+CPBR=?
Response
+CPBR: (list of supported <index>s),[<nlength>],[<tlength>]
OK
Execute command
Syntax
AT+CPBR=<index1>
[,<index2>]
Response
[+CPBR: <index1>,<number>,<type>,<text>]
[+CPBR: <index2>,<number>,<type>,<text>]
OK
Parameters
<index1>, <index2>, <index>: integer type values in the range of location numbers of
phonebook memory
<number>:
string type phone number of format <type>
<type>:
type of address octet in integer format (refer GSM
04.08 [8] subclause 10.5.4.7)
<text>:
string type field of maximum length <tlength>; character
set as specified by command Select TE Character Set
+CSCS
<nlength>:
integer type value indicating the maximum length of
field <number>
<tlength>:
integer type value indicating the maximum length of
field <text>
Reference
[27.007] 8.12
Notes
Execution command returns phonebook entries in location number range
<index1>... <index2> from the current phonebook memory storage selected with
+CPBS.
page 86/198
7.3.
+CPBS Command : Select phonebook memory storage
AT+CPBS Select phonebook memory storage

Test command
Syntax
AT+CPBS=?
Response
+CPBS: (list of supported <storage>s)
OK
Read command
Syntax
AT+CPBS?
Response
+CPBS: <storage>[,<used>,<total>]
OK
Execute command
Syntax
AT+CPBS=<storage>
Response
OK
Parameters
<storage>:
"DC"
<used>:
<total>:
Reference
[27.007] 8.11
ME dialed calls list (+CPBW may not be applicable for this storage)
$(AT R97)$
"EN"
SIM/USIM (or MT) emergency number (+CPBW is not be
applicable for this storage)
"FD"
SIM fix dialing-phonebook
"MC" MT missed (unanswered received) calls list (+CPBW may not be
applicable for this storage)
"ON" SIM (or ME) own numbers (MSISDNs) list (reading of this storage
may be available through +CNUM also) $(AT R97)$
"RC" MT received calls list (+CPBW may not be applicable for this
storage)
"SM" SIM phonebook
integer type value indicating the number of used locations in selected
memory
integer type value indicating the total number of locations in selected
memory
Notes
Set command selects phonebook memory storage <storage>, which is used by
other phonebook commands
page 87/198
7.4.
+CPBW Command : Write phonebook entries
AT+CPBW Write phonebook entries

Test command
Syntax
AT+CPBW=?
Response
+CPBW: (list of supported <index>s),[<nlength>], (list of supported
<type>s),[<tlength>]
OK
Execute command
Response
Syntax
AT+CPBW=[<index>][, OK
<number>[,<type>[,<te
xt>]]]
Parameters
<index>:
integer type values in the range of location numbers of phonebook
memory
<number>: string type phone number of format <type>
<type>:
10.5.4.7) ; default 145 when dialling string includes international access
code character "+", otherwise 129
<text>:
string type field of maximum length <tlength>; character set as specified
by command Select TE Character Set +CSCS
<nlength>: integer type value indicating the maximum length of field <number>
<tlength>: integer type value indicating the maximum length of field <text>
Reference
[27.007] 8.14
Notes
Execution command writes phonebook entry in location number <index> in the
current phonebook memory storage selected with +CPBS
page 88/198
8. SMS AT COMMANDS
8.1.
Preliminary comment
The commands supported in both PDU and text modes are only described hereafter in the first one. One
must refer to the [27.005] for details about the latter if need be.
8.2.
Parameters definition
The following parameters are used in the subsequent clauses which describe all commands. The formats
of integer and string types referenced here are defined in V.25ter. The default values are for command
parameters, not for result code parameters.
Message Storage Parameters
<index>:
integer type; value in the range of location numbers supported by the associated
memory
<mem1>:
string type; memory from which messages are read and deleted (commands List
Messages +CMGL, Read Message +CMGR and Delete Message +CMGD); defined
values (others are manufacturer specific):
"BM" broadcast message storage
"ME" ME message storage
"MT" any of the storages associated with ME
"SM" (U)SIM message storage
"TA" TA message storage
"SR" status report storage
<mem2>:
string type; memory to which writing and sending operations are made (commands
Send Message from Storage +CMSS and Write Message to Memory +CMGW) ); refer
<mem1> for defined values
<mem3>:
string type; memory

forwarded directly to
<mem1> for defined
manufacturer specific
are always stored in
forwarded to TE
<stat>:
integer type in PDU mode (default 0), or string type in text mode (default "REC
UNREAD"); indicates the status of message in memory; defined values:
to which received SMs are preferred to be stored (unless

TE; refer command New Message Indications +CNMI); refer
values; received CBMs are always stored in "BM" (or some
storage) unless directly forwarded to TE; received status reports
"SR" (or some manufacturer specific storage) unless directly
"REC UNREAD"
"REC READ"
"STO UNSENT"
received unread message (i.e. new message)
received read message

stored unsent message (only applicable to SMs)
page 89/198
3
"STO SENT"
stored sent message (only applicable to SMs)
"ALL"
all messages (only applicable to +CMGL command)
<total1>:
integer type; total number of message locations in <mem1>
<total2>:
<total3>:
<used1>:
integer type; number of messages currently in <mem1>
<used2>:
<used3>:
Message Data Parameters

<ackpdu>:
3G TS 23.040 [3] RP-User-Data element of RP-ACK PDU; format is same as for

<pdu> in case of SMS, but without 3G TS 24.011 [6] SC address field and parameter
shall be bounded by double quote characters like a normal string type parameter
<alpha>:
string type alphanumeric representation of <da> or <oa> corresponding to the entry

found in MT phonebook; implementation of this feature is manufacturer specific; used
character set should be the one selected with command Select TE Character Set
+CSCS (see definition of this command in 3G TS 27.007 [9])
<cdata>:
3G TS 23.040 [3] TP-Command-Data in text mode responses; ME/TA converts each

8-bit octet into two IRA character long hexadecimal number (e.g. octet with integer
value 42 is presented to TE as two characters 2A (IRA 50 and 65))
<ct>:
3G TS 23.040 [3] TP-Command-Type in integer format (default 0)
<da>:
3G TS 23.040 [3] TP-Destination-Address Address-Value field in string format; BCD

numbers (or GSM 7 bit default alphabet characters) are converted to characters of the
currently selected TE character set (refer command +CSCS in3G TS 27.007 [9]); type
of address given by <toda>
<data>:
In the case of SMS: 3G TS 23.040 [3] TP-User-Data in text mode responses; format:
if <dcs> indicates that 3G TS 23.038 [2] GSM 7 bit default alphabet is used and
<fo> indicates that 3G TS 23.040 [3] TP-User-Data-Header-Indication is not set:
if TE character set other than "HEX" (refer command Select TE Character Set
+CSCS in 3G TS 27.007 [9]): ME/TA converts GSM alphabet into current TE character
set according to rules of Annex A
if TE character set is "HEX": ME/TA converts each 7-bit character of GSM 7 bit
default alphabet into two IRA character long hexadecimal number (e.g. character
(GSM 7 bit default alphabet 23) is presented as 17 (IRA 49 and 55))
if <dcs> indicates that 8-bit or UCS2 data coding scheme is used, or <fo>
indicates that 3G TS 23.040 [3] TP-User-Data-Header-Indication is set: ME/TA
converts each 8-bit octet into two IRA character long hexadecimal number (e.g. octet
with integer value 42 is presented to TE as two characters 2A (IRA 50 and 65))
In the case of CBS: 3G TS 23.041 [4] CBM Content of Message in text mode
responses; format:
-
if <dcs> indicates that 3G TS 23.038 [2] GSM 7 bit default alphabet is used:
page 90/198
if TE character set other than "HEX" (refer command +CSCS in 3G TS 27.007
[9]): ME/TA converts GSM alphabet into current TE character set according to rules of
Annex A
if TE character set is "HEX": ME/TA converts each 7-bit character of the GSM 7
bit default alphabet into two IRA character long hexadecimal number
if <dcs> indicates that 8-bit or UCS2 data coding scheme is used: ME/TA
converts each 8-bit octet into two IRA character long hexadecimal number
<dcs>:
depending on the command or result code: 3G TS 23.038 [2] SMS Data Coding
Scheme
(default
0), or Cell Broadcast Data Coding Scheme in integer format
<dt>:
3G TS 23.040 [3] TP-Discharge-Time in time-string format: yy/MM/dd,hh:mm:sszz,

where characters indicate year (two last digits), month, day, hour, minutes, seconds
and time zone. E.g. 6th of May 1994, 22:10:00 GMT+2 hours equals to
94/05/06,22:10:00+08
<fo>:
depending on the command or result code: first octet of 3G TS 23.040 [3] SMSDELIVER, SMS-SUBMIT (default 17), SMS-STATUS-REPORT, or SMS-COMMAND
(default 2) in integer format
<length>:
integer type value indicating in the text mode (+CMGF=1) the length of the message
body <data> > (or <cdata>) in characters; or in PDU mode (+CMGF=0), the length of
the actual TP data unit in octets (i.e. the RP layer SMSC address octets are not
counted in the length)
<mid>:
3G TS 23.041 [4] CBM Message Identifier in integer format
<mn>:
3G TS 23.040 [3] TP-Message-Number in integer format
<mr>:
3G TS 23.040 [3] TP-Message-Reference in integer format
<oa>:
3G TS 23.040 [3] TP-Originating-Address Address-Value field in string format; BCD

currently selected TE character set (refer command +CSCS in TS 27.07); type of
address given by <tooa>
<page>:
3G TS 23.041 [4] CBM Page Parameter bits 4-7 in integer format
<pages>:
3G TS 23.041 [4] CBM Page Parameter bits 0-3 in integer format
<pdu>:
In the case of SMS: 3G TS 24.011 [6] SC address followed by 3G TS 23.040 [3] TPDU
in hexadecimal format: ME/TA converts each octet of TP data unit into two IRA
character long hexadecimal number (e.g. octet with integer value 42 is presented to
TE as two characters 2A (IRA 50 and 65))
In the case of CBS: 3G TS 23.041 [4] TPDU in hexadecimal format
<pid>:
3G TS 23.040 [3] TP-Protocol-Identifier in integer format (default 0)
<ra>:
3G TS 23.040 [3] TP-Recipient-Address Address-Value field in string format; BCD

currently selected TE character set (refer command +CSCS in 3G TS 27.007 [9]); type
of address given by <tora>
<sca>:
3G TS 24.011 [6] RP SC address Address-Value field in string format; BCD numbers

(or GSM 7 bit default alphabet characters) are converted to characters of the currently
selected TE character set (refer command +CSCS in 3G TS 27.007 [9]); type of
address given by <tosca>
<scts>:
3G TS 23.040 [3] TP-Service-Centre-Time-Stamp in time-string format (refer <dt>)
page 91/198
<sn>:
3G TS 23.041 [4] CBM Serial Number in integer format
<st>:
3G TS 23.040 [3] TP-Status in integer format
<toda>:
3G TS 24.011 [6] TP-Destination-Address Type-of-Address octet in integer format

(when first character of <da> is + (IRA 43) default is 145, otherwise default is 129)
<tooa>:
3G TS 24.011 [6] TP-Originating-Address Type-of-Address octet in integer format

(default refer <toda>)
<tora>:
3G TS 24.011 [6] TP-Recipient-Address Type-of-Address octet in integer format

(default refer <toda>)
<tosca>:
3G TS 24.011 [6] RP SC address Type-of-Address octet in integer format (default refer

<toda>)
<vp>:
depending on SMS-SUBMIT <fo> setting: 3G TS 23.040 [3] TP-Validity-Period either in

integer format (default 167) or in time-string format (refer <dt>)
<vp>:
depending on SMS-SUBMIT <fo> setting: 3G TS 23.040 [3] TP-Validity-Period either in

integer format (default 167), in time-string format (refer <dt>), or if EVPF is supported,
in enhanced format (hexadecimal coded string with double quotes)
page 92/198
8.3.
+CMGD Command : Delete SMS message
AT+CMGD Delete SMS message

Test command
Response
+CMGD: (list of supported <index>s)[,(list of supported <delflag>s)]
OK
Syntax
AT+CMGD=?
Execute command
Syntax
AT+CMGD=<index>[,<
delflag>]
Response
OK
Parameters
<delflag>: an integer indicating multiple message deletion request as follows:
0 (or omitted) : Delete the message specified in <index>
1:
Delete all read messages from preferred message storage,
leaving unread messages and stored mobile originated
messages (whether sent or not) untouched
2:
Delete all read messages from preferred message storage and
sent mobile originated messages, leaving unread messages and
unsent mobile originated messages untouched
3:
Delete all read messages from preferred message storage, sent
and unsent mobile originated messages leaving unread
messages untouched.
4:
Delete all messages from preferred message storage including
unread messages.
Reference
[27.005] 3.5.4
Notes
Execution command deletes message from preferred message storage <mem1>
location <index>. If <delflag> is present and not set to 0 then the ME shall ignore
<index> and follow the rules for <delflag> shown before
page 93/198
8.4.
+CMGF Command : Select SMS message format
AT+CMGF Select SMS message format

Test command
Syntax
AT+CMGF=?
Response
+CMGF: (list of supported <mode>s)
OK
Read command
Syntax
AT+CMGF?
Response
+CMGF: <mode>
OK
Execute command
Syntax
AT+CMGF=[<mode>]
Response
OK
Parameters
<mode>:
1:
text mode
Reference
[27.005] 3.2.3
Notes
Set command tells the TA, which input and output format of messages to use.
<mode> indicates the format of messages used with send, list, read and write
commands and unsolicited result codes resulting from received messages. Mode
can be either PDU mode (entire TP data units used) or text mode (headers and
body of the messages given as separate parameters). Text mode uses the value of
parameter <chset> specified by command Select TE Character Set +CSCS to
inform the character set to be used in the message body in the TA-TE interface.
page 94/198
8.5.
+CMGL Command : List SMS messages from preferred store
AT+CMGL List SMS messages from preferred store

Test command
Response
+CMGL: (list of supported <stat>s)
OK
Syntax
AT+CMGL=?
Execute command
Response
Only if PDU mode (+CMGF=0) and command successful:
+CMGL:
<index>,<stat>,[<alpha>],<length><CR><LF><pdu>[<CR><LF>
+CMGL:<index>,<stat>,[<alpha>],<length><CR><LF><pdu>[...]]
OK
Syntax
AT+CMGL=[<stat>]
Parameters
<stat>: 0, 1, 2, 3, 4 in PDU mode
"REC UNREAD", "REC READ", "STO UNSET", "STO SENT", "ALL" in text mode
Reference
[27.005] 3.4.2 and 4.1
8.6.
Notes
Execution command returns messages with status value <stat> from preferred
message storage <mem1> to the TE. Entire data units <pdu> are returned
If status of the message is 'received unread', status in the storage changes to
'received read'.
<alpha> is optional, it is NOT used.
+CMGR Command : Read SMS message
AT+CMGR Read SMS message

Write command
Syntax
AT+CMGR=<index>
Response
if PDU mode (+CMGF=0) and command successful:
+CMGR: <stat>,[<alpha>],<length><CR><LF><pdu>
Reference
[27.005] 3.4.3 and 4.2
(+CMGR)
Notes
Execution command returns message with location value <index> from preferred
message storage <mem1> to the TE. Status of the message and entire message
data unit <pdu> is returned.
With AT+CMGR, if status of the message is 'received unread', status in the storage
changes to 'received read'.
<alpha> is optional, it is NOT used.
page 95/198
8.7.
+CMGS Command : Send SMS message
AT+CMGS Send SMS message

Test command
Response
OK
Syntax
AT+CMGS=?
Write command
Syntax
if PDU mode
(+CMGF=0):
AT+CMGS=<length><C
R>PDU is given<ctrlZ/ESC>
Response
if PDU mode (+CMGF=0) and sending successful:
+CMGS: <mr>[,<ackpdu>]
OK
Reference
[27.005] 3.5.1 and 4.3
Notes
<length> must indicate the number of octets coded in the TP layer data unit to be
given (i.e. SMSC address octets are excluded).
the TA shall send a four character sequence <CR><LF><greater_than><space>
(IRA 13, 10, 62, 32) after command line is terminated with <CR>; after that PDU
can be given from TE to ME/TA the DCD signal shall be in ACTIVE state while
PDU is given the echoing of given characters back from the TA is controlled by
V.25ter echo command E.
the PDU shall be hexadecimal format (similarly as specified for <pdu>) and given
in one line; ME/TA converts this coding into the actual octets of PDU when the
length octet of the SMSC address (given in the PDU) equals zero, the SMSC
address set with command Service Centre Address +CSCA is used; in this case
the SMSC Type-of-Address octet shall not be present in the PDU, i.e. TPDU starts
right after SMSC length octet sending can be cancelled by giving <ESC> character
(IRA 27) <ctrl-Z> (IRA 26) must be used to indicate the ending of PDU
page 96/198
8.8.
+CMGW Command : Write SMS message to memory
AT+CMGW Write SMS message to memory

Test command
Response
OK
Syntax
AT+CMGW=?
Write command
Syntax
if PDU mode
(+CMGF=0):
AT+CMGW=<length>[,
<stat>]<CR>PDU is
given<ctrl-Z/ESC>
Response
+CMGW: <index>
OK
Reference
[27.005] 3.5.3 and 4.4
Notes
Execution command stores a message to memory storage <mem2>. Memory
location <index> of the stored message is returned. By default message status will
be set to 'stored unsent', but parameter <stat> allows also other status values to be
given. (ME/TA manufacturer may choose to use different default <stat> values for
different message types.) The entering of PDU is done similarly as specified in
command Send Message +CMGS.
page 97/198
8.9.
+CMSS Command : Send SMS message from storage
AT+CMSS Send SMS message from storage

Test command
Response
OK
Syntax
AT+CMSS=?
Write command
Response
Syntax
AT+CMSS=<index>[,<d if PDU mode (+CMGF=0) and sending successful:
+CMSS: <mr>[,<ackpdu>]
a>[,<toda>]]
OK
Reference
[27.005] 3.5.2 and 4.7
Notes
Execution command sends message with location value <index> from message
storage <mem2> to the network (SMS-SUBMIT or SMS-COMMAND). If new
recipient address <da> is given for SMS-SUBMIT, it shall be used instead of the
one stored with the message. Reference value <mr> is returned to the TE on
successful message delivery. Optionally (when +CSMS <service> value is 1 and
network supports) <ackpdu> is returned. Values can be used to identify message
upon unsolicited delivery status report result code
Be careful, all the messages stored in the module may not be forwarded (for
instance, carrier messages as SMS replace)
page 98/198
8.10. +CNMI Command : New SMS message indication
AT+CNMI New SMS message indication

Test command
Syntax
AT+CNMI=?
Response
+CNMI: (list of supported <mode>s), (list of supported <mt>s), (list of supported
<bm>s), (list of supported <ds>s), (list of supported <bfr>s)
OK
Read command
Syntax
AT+CNMI?
Write command
Response
+CNMI: <mode>,<mt>,<bm>,<ds>,<bfr> OK
Syntax
AT+CNMI =[<mode>]
[,<mt>][,<bm>]
[,<ds>][,<bfr>]
Response
OK
Reference
[27.005] 3.4.1
Parameters
<mode>: 0: Buffer unsolicited result codes in the TA. If TA result code buffer is full,
indications can be buffered in some other place or the oldest indications
may be discarded and replaced with the new received indications.
1: Discard indication and reject new received message unsolicited result
codes when TA-TE link is reserved. Otherwise forward them directly to
the TE.
2: Buffer unsolicited result codes in the TA when TA-TE link is reserved
(e.g. in on-line data mode) and flush them to the TE after reservation.
Otherwise forward them directly to the TE.
<mt>:
0: No SMS-DELIVER indications are routed to the TE.
1: If SMS-DELIVER, when a SMS is received there is an unsolicited result
code +CMTI:<memory>,<index>
2: The message is not stored in the module.
<bm>:
0 No CBM indications are routed to the TE.
1: Idem than 0 but +CBMI are sent.
2: New CBMs are routed directly to the TE using unsolicited result code:
CBM: <length><CR><LF><pdu> (PDU mode enabled) or +CBM:
<sn>,<mid>,<dcs>,<page>,<pages><CR><LF><data> (text mode
Enabled).
<ds>:
0: No SMS-STATUS-REPORTs are routed to the TE.
1: SMS-STATUS-REPORTs are routed to the TE using unsolicited result
code: +CDS: <length><CR><LF><pdu> (PDU mode enabled) or
+CDS: <fo>,<mr>,[<ra>],[<tora>],<scts>,<dt>, <st>(text mode
enabled)
<bfr>:
0: The buffred notification are sent.
1: TA buffer of unsolicited result codes defined within this command is
cleared when <mode> 1...3 is entered.
Notes
page 99/198
8.11. +CSCB Command : Select cell broadcast message
AT+CSCB Select cell broadcast message

Test command
Response
+CSCB: (list of supported <mode>s)
OK
Syntax
AT+CSCB=?
Read command
Response
+CSCB: <mode>,<mids>,<dcss>
OK
Syntax
AT+CSCB?
Write command
Syntax
AT+CSCB=[<mode>[,<
mids>]]
Response
OK
Parameters
<mode>: 0: Accepts messages that are defined in <mids>
1: Does not accept messages that are defined in <mids>
<mids>:
String type; combinations of CBM message IDs (e.g. "0,1,5,320-478,922").
The number of ranges in <mids> parameter string is limited to 6. Intervals
not allowed.
<dcss>:
string type; all different possible combinations of CBM data coding
schemes (refer <dcs>) (default is empty string); e.g. "0-3,5"
Reference
[27.005] 3.3.4
Notes
Set command selects which types of CBMs are to be received by the ME.
The module doesnt managed SMSCB language, nor the data coding scheme
parameter (<dcss> parameter)
page 100/198
8.12. +CSCA Command : SMS service center address
AT+CSCA SMS service center address

Test command
Syntax
AT+CSCA=?
Response
OK
Read command
Syntax
AT+CSCA?
Response
+CSCA: <sca>,<tosca>
OK
Write command
Response
Syntax
AT+CSCA=<sca>[,<tos OK
ca>]
Reference
[27.005] 3.3.1
Notes
Set command updates the SMSC address, through which mobile originated SMS is
transmitted. In text mode, setting is used by send and write commands. In PDU
mode, setting is used by the same commands, but only when the length of the
SMSC address coded into <pdu> parameter equals zero.
page 101/198
8.13. +CSMP Command : Set SMS text mode parameters
AT+CSMP Set SMS text mode parameters

Test command
Syntax
AT+CSMP=?
Response
OK
Read command
Syntax
AT+CSMP?
Response
+CSMP: <fo>,<vp>,<pid>,<dcs>
OK
Write command
Response
Syntax
AT+CSMP=[<fo>[,<vp> OK
[,<pid>[,<dcs>]]]]
Reference
[27.005] 3.3.2
Notes
Set command is used to select values for additional parameters needed when SM
is sent to the network or placed in storage when text format message mode is
selected. It is possible to set the validity period starting from when the SM is
received by the SMSC (<vp> is in range 0... 255) or define the absolute time of the
validity period termination (<vp> is a string). The format of <vp> is given by <fo>. If
TA supports the EVPF, see 3G TS 23.040 [3], it shall be given as a hexadecimal
coded string (refer e.g. <pdu>) with double quotes.
When storing a SMS-DELIVER from the TE to the preferred memory storage in
text mode (refer command Write Message to Memory +CMGW), <vp> field can be
used for <scts>.
page 102/198
8.14. +CSMS Command : Select Message service
AT+CSMS Select Message service

Test command
Syntax
AT+CSMS=?
Response
+CSMS: (list of supported <service>s)
OK
Read command
Syntax
AT+CSMS?
Response
+CSMS: <service>,<mt>,<mo>,<bm>
OK
Write command
Syntax
AT+CSMS=<service>
Response
+CSMS: <mt>,<mo>,<bm>
OK
Parameters
<service>: 0: GSM 03.40 and 03.41 (the syntax of SMS AT commands is ompatible
with GSM 27.05 Phase 2 version 4.7.0; Phase 2+ features which do not
require new command syntax may be supported, e.g. correct routing of
messages with new Phase 2+data coding schemes)
<mt>:
Mobile Terminated Messages:
0: Type not supported
1: Type supported
<mo>:
Mobile Originated Messages:
1: Type supported
<bm>:
Broadcast Type Messages:
1: Type supported
Reference
[27.005] 3.2.1
Notes
Set command selects messaging service <service>. It returns the types of
messages supported by the ME: <mt> for mobile terminated messages, <mo> for
mobile originated messages and <bm> for broadcast type messages.
page 103/198
8.15. +CPMS Command : Preferred Message Storage
AT+CPMS Preferred Message Storage

Test command
Response
+CPMS: (list of supported <mem1>s), (list of supported <mem2>s), (list of supported
<mem3>s)
OK
Syntax
AT+CPMS=?
Read command
Response
+CPMS: <mem1>,<used1>,<total1>,<mem2>,<used2>,<total2>,<mem3>,<used3>,
<total3>
OK
Syntax
AT+CPMS?
Write command
Syntax
AT+CPMS=<mem1>[,<
mem2>[,<mem3>]]
Response
+CPMS: <used1>,<total1>,<used2>,<total2>,<used3>,<total3>
OK
Parameters
See chapter 8.2
Reference
[27.005] 3.2.2
Notes
Set command selects memory storages <mem1>,<mem2>,<mem3> to be used for
reading, writing, etc.
Default values are : mem1 = ME, mem2 = ME, mem3 = MT
Configuration is set to default values when the module starts.
Example
AT+CPMS=?
+CPMS: ("SM"),("SM"),("SM")
OK
AT+CPMS?
+CPMS: "SM",27,50,"SM",27,50,"SM",27,50
OK
AT+CPMS="SM"
+CPMS: 27,50,27,50,27,50
OK
AT+CPMS="SM","SM","SM"
+CPMS: 27,50,27,50,27,50
OK
page 104/198
8.16. +CSDH Command : Show text mode parameters
AT+CSDH Show Text Mode Parameters

Test command
Syntax
AT+CSDH=?
Response
+CSDH: (list of supported <show>s)
OK
Read command
Syntax
AT+CSDH?
Response
+CSDH: <show>
OK
Write command
Syntax
AT+CSDH=[<show>]
Response
OK
Parameter
<show> :
0:
1:
Reference
[27.005] 3.3.3
do not show header values defined in commands +CSCA and

+CSMP (<sca>, <tosca>, <fo>, <vp>, <pid> and <dcs>) nor
<length>, <toda> or <tooa> in +CMT, +CMGL, +CMGR result codes
for SMS-DELIVERs and SMS-SUBMITs in text mode; for SMSCOMMANDs in +CMGR result code, do not show <pid>, <mn>,
<da>, <toda>, <length> or <cdata>
show the values in result codes
Notes
Set command controls whether detailed header information is shown in text mode
result codes
page 105/198
8.17. +CSAS Command : Save settings
AT+CSAS Save Settings

Test command
Syntax
AT+CSAS=?
Response
+CSAS: (list of supported <profile>s)
OK
Write command
Syntax
AT+CSAS=[<profile>]
Response
OK
Parameter
<profile> :
Reference
[27.005] 3.3.3
profile number where user settings are to be stored (0 only)
Notes
Saves the active message service settings (+CSMP) to a non volatile memory.
Currently, mobile phone supports only one profile.
page 106/198
8.18. +CRES Command : Restore settings
AT+CRES Restore Settings

Test command
Syntax
AT+CRES=?
Response
+CRES: (list of supported <profile>s)
OK
Write command
Syntax
AT+CRES=[<profile>]
Response
OK
Parameter
<profile> :
Reference
[27.005] 3.3.3
profile number where user settings are stored

0 : values saved by the user
10 : default factory settings
Notes
Restore the saved message service settings (+CSMP) from a non volatile memory.
page 107/198
9. DATA AND FAX AT COMMANDS
9.1.
+CBST Command : Select bearer service type
AT+CBST Select bearer service type

Test command
Syntax
AT+CBST=?
Response
+CBST: (list of supported <speed>s),(list of supported <name>s),(list of sup-ported
<ce>s)
OK
Read command
Syntax
AT+CBST?
Response
+CBST: <speed>,<name>,<ce>
OK
Write command
Syntax
AT+CBST=[<speed>
[,<name>[,<ce>]]]
Response
OK
Parameter
<speed>:
0
Reference
[27.007] 6.7
auto bauding (automatic selection of the speed; this setting is possible in

case of 3.1 kHz modem and non-transparent service)
9600 bps (V.32)
9600 bps (V.110 or X.31 flag stuffing)
7
71
<name>:
0
data circuit asynchronous (UDI or 3.1 kHz modem)
<ce>:
1
non-transparent
Note
Set command selects the bearer service <name> with data rate <speed>, and the
connection element <ce> to be used when data calls are originated (refer 3G TS
22.002 [1]). Values may also be used during mobile terminated data call setup,
especially in case of single numbering scheme calls.
page 108/198
9.2.
+CRLP Command : Select radio link protocol parameter
AT+CRLP Select radio link protocol parameter

Test command
Response
+CRLP: (list of supported <iws>s),(list of supported <mws>s),(list of supported
<T1>s),(list of supported <N2>s)[,<ver1>[,(list of supported <T4>s)]]
[+CRLP: (list of supported <iws>s),(list of supported <mws>s),(list of supported
<T1>s),(list of supported <N2>s)[,<ver1>[,(list of supported <T4>s)]][...]]
Syntax
AT+CRLP=?
Read command
Response
+CRLP: <iws>,<mws>,<T1>,<N2>[,<ver1>[,<T4>]]
[+CRLP: <iws>,<mws>,<T1>,<N2>[,<ver2>[,<T4>]]
[...]]
OK
Syntax
AT+CRLP?
Write command
Syntax
AT+CRLP=[<iws>[,<m
ws>[,<T1>[,<N2>[,<ver
>[,<T4>]]]]]]
Response
OK
Parameters
<ver>, <verx>:
RLP version number in integer format; when

version indication is not present it shall equal 0
<iws>, <mws>, <T1>, <N2>, <T4>: IWF to MS window size, MS to IWF window size,
acknowledgement timer T1, retransmission
attempts N2, re-sequencing period T4 in integer
format (default values and value ranges depend
on RLP version; refer 3G TS 24.022 [18]): T1 and
T4 are in units of 10 ms.
Reference
[27.007] 6.8
Notes
Radio link protocol (RLP) parameters used when non-transparent data calls are
originated may be altered with set command. Available command subparameters
depend on the RLP versions implemented by the device (e.g. <ver> may not be
available if device supports only versions 0 and 1).
If radio link protocol is not used, but some other error correcting protocol (for
transparent data calls), V.25ter [14] Error Control Selection test command +ES=?
may be used to indicate the presence of the protocol.
Read command returns current settings for each supported RLP version <verx>.
Only RLP parameters applicable to the corresponding <verx> are returned.
Test command returns values supported by the TA as a compound value. If ME/TA
supports several RLP versions <verx>, the RLP parameter value ranges for each
<verx> are returned in a separate line.
Versions 0 and 1 share the same parameter set. Read and test commands shall
return only one line for this set (where <verx> is not present).
page 109/198
9.3.
+CR Command : Service reporting control
AT+CR Service reporting control

Test command
Syntax
AT+CR=?
Response
+CR: (list of supported <mode>s)
OK
Read command
Syntax
AT+CR?
Response
+CR: <mode>
OK
Write command
Syntax
AT+CR=[<mode>]
Response
OK
Parameters
<mode>: 0:
disables reporting
1:
enables reporting
<serv>:
ASYNC:
asynchronous transparent
SYNC:
synchronous transparent
REL ASYNC: asynchronous non-transparent
REL SYNC: synchronous non-transparent
GPRS [<L2P>]
GPRS
The optional <L2P> proposes a layer 2 protocol to use between the MT
and the TE. It is defined in the Enter GPRS Data Mode (+CGDATA)
command.
Reference
[27.007] 6.9
Notes
Set command controls whether or not intermediate result code +CR: <serv> is
returned from the TA to the TE. If enabled, the intermediate result code is
transmitted at the point during connect negotiation at which the TA has determined
which speed and quality of service will be used, before any error control or data
compression reports are transmitted, and before the intermediate result code
CONNECT is transmitted.
This command replaces V.25ter [14] command Modulation Reporting Control +MR,
which is not appropriate for use in the GSM/UMTS network. Possible error control
(other than radio link protocol) and data compression reporting can be enabled with
V.25ter commands Error Control Reporting +ER and Data Compression Reporting
+DR.
page 110/198
9.4.
+FCLASS Command : Fax : Select, read or test service class
AT+FCLASS Fax : Select, read or test service class

Test command
Syntax
AT+FCLASS=?
Response
(list of supported <n>s)
OK
Read command
Syntax
AT+FCLASS?
Response
<n>
OK
Write command
Syntax
AT+FCLASS=<n>
Response
OK
Parameters
<n>: 0: Select Data mode (default)
1: Select Facsimile Class 1
Reference
[27.007] C.2.1
Notes
page 111/198
9.5.
+FAE Command : Data/Fax auto answer
AT+FAE Data/Fax auto answer

Test command
Syntax
AT+FAE=?
Response
(List of supported <n>)
OK
Read command
Syntax
AT+FAE?
Response
<n>
OK
Write command
Syntax
AT+FAE=<n>
Response
OK
Parameters
<n>: 0: Disable data/fax auto answer mode.
The modem answers as a fax modem only (default)
1: Enable data/fax auto answer mode.
The modem answers as a fax or data modem
Reference
TIA578A
Notes
Not support.
page 112/198
9.6.
+FRM Command : Receive data
AT+FRM Receive data

Test command
Syntax
AT+FRM=?
Response
(List of supported <mode>s)
OK
Read command
Syntax
AT+FRM?
Response
+FRM:<mode>
OK
Write command
Syntax
AT+FRM=<mode>
Response
CONNECT
Or
NO CARRIER
Parameters
<mode>:
Reference
Modulation used by the other modem to transmit data. The mobile

phone should then enter in a receiving mode, using that modulation.
24: V27 ter 2400 bps
48: V27 ter 4800 bps
72: V29 7200 bps
96: V29 9600 bps
Notes
This command is fully supported only in fax mode (AT+FCLASS=1).
Set command only supported during FAX communication established. Read and
test command only supported in command mode
Read command always return 9600 bits/s because the communication must begin
at this speed
page 113/198
9.7.
+FTM Command : Transmit data
AT+FTM Transmit data

Test command
Syntax
AT+FTM=?
Response
(List of supported < mode >s)
OK
Read command
Syntax
AT+FTM?
Response
+FTM:<mode>
OK
Write command
Syntax
AT+FTM=< mode >
Response
CONNECT
Or
NO CARRIER
Parameters
< mode >:
Reference
TIA578A
Modulation used by the other modem to transmit data. The mobile

phone should then enter in a receiving mode, using that modulation.
24: V27 ter 2400 bps
48: V27 ter 4800 bps
72: V29 7200 bps
96: V29 9600 bps
Notes
Set command only supported during FAX communication established. Read and
test command only supported in command mode.
Read command always return 9600 bits/s because the communication must begin
at this speed
page 114/198
9.8.
+FRS Command : Receive silence
AT+FRS Receive silence

Test command
Syntax
AT+FRS=?
Response
OK
Read command
Syntax
AT+FRS?
Response
OK
Write command
Syntax
AT+FRS=<n>
Response
OK
Parameters
<n>: number of times of 10 ms of silence detected on the line to be waited for by the
modem before it can report OK to DTE (0-255)
Reference
TIA578A
Notes
Not support. This command is fully supported only in fax mode (AT+FCLASS=1).
page 115/198
9.9.
+FTS Command : Stop transmission and wait
AT+FTS Stop transmission and wait

Test command
Syntax
AT+FTS=?
Response
(list of supported < mode >s)
OK
Read command
Syntax
AT+FTS?
Response
+FTM:<mode>
OK
Write command
Syntax
AT+FTS=< mode >
Response
OK
Parameters
< mode >:
number of times of 10 ms of silence detected on the line to be waited
for by the modem before it can report OK to DTE (0-255)
Reference
Notes
Not support. This command is fully supported only in fax mode (AT+FCLASS=1).
page 116/198
9.10. +FRH Command : Receive data using HDLC framing
AT+FRH Receive data using HDLC framing

Test command
Syntax
AT+FRH=?
Response
(list of supported < mode >s)
OK
Read command
Syntax
AT+FRH?
Response
+FRH:<mode>
OK
Write command
Syntax
AT+FRH=< mode >
Response
OK
Parameters
< mode >:
Reference
TIA578A
modulation used by the other modem to transmit data, using HDLC

protocol.
3: V21 channel 2 300 bps
Notes
Set command only supported during FAX communication established.
page 117/198
9.11. +FTH Command : Transmit data using HDLC framing
AT+FTH Transmit data using HDLC framing

Test command
Syntax
AT+FTH=?
Response
(lsit of supported < mode >s)
OK
Read command
Syntax
AT+FTH?
Response
+FTH:<mode>
OK
Write command
Syntax
AT+FTH=< mode >
Response
OK
Parameters
< mode >:modulation used by the other modem to transmit data, using HDLC protocol.
3: V21 channel 2 300 bps
Reference
Notes
page 118/198
10.
GPRS AT COMMANDS
These commands are fully supported when the SIM card and the network have GPRS capability.
10.1. +CGATT Command : PS Attach or Detach
AT+CGATT PS Attach or Detach

Test command
Syntax
AT+CGATT=?
Response
+CGATT: (list of supported <state>s)
OK
Read command
Syntax
AT+CGATT?
Response
+CGATT: <state>
OK
Write command
Syntax
AT+CGATT= <state>
Response
OK
Parameters
<state>:
indicates the state of PS attachment
0: detached
1: attached
Reference
[27.007] 10.1.9
Notes
page 119/198
10.2. +CGACT Command : PDP context activate or deactivate
AT+CGACT PDP context activate or deactivate

Test command
Response
+CGACT: (list of supported <state>s)
OK
Syntax
AT+CGACT=?
Read command
Response
+CGACT: <cid>, <state>
OK
Syntax
AT+CGACT?
Write command
Syntax
AT+CGACT= <state>[,
<cid>]
Response
OK
Parameters
<state>: indicates the state of PDP context activation
0: deactivated
1: activated
Other values are reserved and will result in an ERROR response to the
execution command.
<cid>:
PDP Context Identifier is a numeric parameter which specifies a particular
PDP context definition. The parameter is local to the TE-MT interface and is
used in other PDP context-related commands.
Reference
[27.007] 10.1.10
Notes
page 120/198
10.3. +CGCLASS Command : GPRS mobile station class
AT+CGCLASS GPRS mobile station class

Test command
Response
+CGCLASS: (list of supported <class>s)
OK
Syntax
AT+CGCLASS=?
Read command
Response
+CGCLASS: <class>
OK
Syntax
AT+CGCLASS?
Write command
Syntax
AT+CGCLASS=<class>
Response
OK
Parameters
<class>: A string parameter which indicates the GPRS mobile class (in descending
order of functionality)
B class B
CC class C in circuit switched only mode (lowest)
Reference
[27.007] 10.1.17
Notes
Class A is not supported; the module must be restarted in order to be effective.
page 121/198
10.4. +CGDCONT Command : Define PDP context
AT+ CGDCONT Define PDP context

Test command
Response
+CGDCONT: (range of supported <cid>s), <PDP_type>,,,(list of supported
<d_comp>s), (list of supported <h_comp>s)[,(list of supported <pd1>s)[,[,(list of
supported <pdN>s)]]][...]]
OK
Syntax
AT+CGDCONT=?
Read command
Response
+CGDCONT: <cid>, <PDP_type>, <APN>,<PDP_addr>, <data_comp>,
<head_comp>[,<pd1>[,[,pdN]]
OK
Syntax
AT+CGDCONT?
Write command
Syntax
AT+CGDCONT=<cid>
,<PDP_type> ,<APN>
,<PDP_addr>
,<d_comp> ,<h_comp>
Response
OK
Parameters
<PDP_type>:
<APN>:
<PDP_address>:
<d_comp>:
<h_comp>:
<pd1>, <pdN>:
Reference
[27.007] 10.1.1
Packet Data Protocol type

A string parameter which specifies the type of packet data
protocol. Only IP Internet Protocol - IETF STD 5) is supported.
Access Point Name
A string parameter which is a logical name that is used to select
the GGSN or the external packet data network.
a string parameter that identifies the MT in the address space
applicable to the PDP. As only IP is currently supported, it shall
be an IP address.
If the value is null (0.0.0.0 or 0), then a value may be provided
by the TE during the PDP startup procedure or, failing that, a
dynamic address will be requested.
The read form of the command will continue to return the null
string even if an address has been allocated during the PDP
startup procedure. The allocated address may be read using the
+CGPADDR command.
a numeric parameter that controls PDP data compression.
0: off (default and only value supported)
a numeric parameter that controls PDP header compression
0: off (default and only value supported)
zero to N string parameters whose meanings are specific to the
<PDP_type>
Notes
The set command specifies PDP context parameter values for a PDP context
identified by the (local) context identification parameter, <cid>. The number of PDP
contexts that may be in a defined state at the same time is given by the range
returned by the test command.
A special form of the set command, +CGDCONT= <cid> causes the values for
context number <cid> to become undefined.
page 122/198
10.5. +CGDATA Command : Enter data state
AT+CGDATA Command Enter data state

Test command
Syntax
AT+CGDATA=?
Response
+CGDATA: (list of supported <L2P>s)
OK
Write command
Syntax
AT+CGDATA=[<L2P>
,[<cid> [,<cid> [,]]]]
Response
CONNECT
Parameters
<L2P>: a string parameter that indicates the layer 2 protocol to be used between the
TE and MT. Only PPP (Point-to-point) protocol is currently allowed.
Reference
[27.007]
<cid>: a numeric parameter which specifies a particular PDP context definition (see
the +CGDCONT command).
1..3
If option SECONDARY_PDP_CONTEXT_FTR is disabled
1..11 If option SECONDARY_PDP_CONTEXT_FTR is enabled
Notes
This command is used for PS internal tests with network emulators.

On real network functioning of +CGACT and then +CGDATA for data transfer is
not guaranteed. When activating a PDP context, PCO (protocol configuration
option) has to be provided to network. PCO can be provided to network only if a
PPP negotiation has been initiated between mobile and TE before activation (refer
to TS 27.060). For this, the channel must be in online data mode before activation.
PPP server will first negotiate PCO and then request PDP context activation: this is
possible only when using ATD*98 or ATD*99 command (online data state is
entered immediately when ATD received) Moreover +CGDATA does not fully
complies with recommendation, especially it does not behave as ATD*9x
Command : +CGDATA does not perform PS attach or PDP context activation. A
PDP must have been activated with +CGACT previously.
+CGDATA is used to open PPP server in FTA mode and switch channel to online
data mode To go back in online command, the +++ escape sequence has to be
sent on link in data mode +CGDATA can also be used to switch again channel to
online data mode (after +++) if PDP is still active (same behavior has ATO
command).
If no parameters are provided (i.e. +CGDATA=<CR>), the last <cid> activated with
+CGACT is used or the default EEPROM <cid> is used.
Only one <cid> in the command is supported (i.e. +CGDATA=PPP,<cid><CR>)
page 123/198
10.6. +CGPADDR Command : Show PDP address
AT+ CGPADDR Show PDP address

Test command
Response
+CGPADDR: (list of supported <cid>s)
OK
Syntax
AT+CGPADDR=?
Write command
Syntax
AT+CGPADDR=<cid>[,
<cid>,[]]
Response
+CGPADDR: <cid>, <PDP_addr>
[+CGPADDR: <cid>, <PDP_addr>
[]]
OK
Parameters
< PDP_addr >:
<cid>:
Reference
[27.007] 10.1.14
a string that identifies the MT in the address space applicable to

the PDP. The address may be static or dynamic. For a static
address, it will be the one set by the +CGDCONT command when
the context was defined. For a dynamic address it will be the one
assigned during the last PDP context activation that used the
context definition referred to by <cid>. <PDP_address> is omitted if
none is available.
"<n>.<n>.<n>.<n>" where <n>=0..255
1..3
Notes
The execution command returns a list of PDP addresses for the specified context
identifiers
Example : Ask for IP address according to cid=1 (identify the PDP context)
AT+CGPADDR=1
+CGPADDR: 1, 10.20.30.40
page 124/198
10.7. +CGQMIN Command : Quality of service profile (minimum acceptable)
AT+ CGQMIN Quality of service profile (minimum acceptable)

Test command
Response
+CGQMIN: <PDP_type>,(list of supported <precedence>s),(list of supported
<delay>s),(list of supported <reliability>s),(list of supported <peak>s),(list of
supported <mean>s)
[+CGQMIN:...]
OK
Syntax
AT+CGQMIN=?
Read command
Response
+CGQMIN: <cid>,<precedence>,<delay>,<reliability>,<peak>,<mean>
[+CGQMIN: ...]
OK
Syntax
AT+CGQMIN?
Write command
Syntax
AT+CGQMIN=[<cid>[,<
precedence>[,<delay>[
,<reliability>[,<peak>[,
<mean>]]]]]]
Response
OK/
Parameters
<precedence>:
<delay>:
<reliability>:
<peak>:
numeric parameter for the precedence class

0: network subscribed value
1: High Priority Service commitments shall be maintained ahead of
precedence classes 2 and 3
2: Normal priority Service commitments shall be maintained ahead
of precedence class 3
3: Low priority
numeric parameter for the delay class
numeric parameter for the reliability class
1: Non real-time traffic , error-sensitive application that cannot cope
with data loss
2: Non real-time traffic, error-sensitive application that can cope with
infrequent data loss
3: Non real-time traffic, error-sensitive application that can cope with
data loss, GMM/SM, and SMS
4: Real-time traffic, error-sensitive application that can cope with
data loss
5: Real-time traffic, error non-sensitive application that can cope
with data loss
numeric parameter for the peak throughput class
6: Up to 32 000 (256 kbit/s)
1: Up to 1 000 (8 kbit/s)
7: Up to 64 000 (512 kbit/s)
2: Up to 2 000 (16 kbit/s)
8: Up to 128 000 (1 024 kbit/s)
3: Up to 4 000 (32 kbit/s)
9: Up to 256 000 (2 048 kbit/s)
4: Up to 8 000 (64 kbit/s)
5: Up to 16 000 (128 kbit/s)
<mean>:
Reference
[27.007] 10.1.7
page 125/198
numeric parameter for the mean throughput class
10: 100 000 (~0.22 kbit/s)
1: 100 (~0.22 bit/s)
11: 200 000 (~0.44 kbit/s)
2: 200 (~0.44 bit/s)
12: 500 000 (~1.11 kbit/s)
3: 500 (~1.11 bit/s)
13: 1 000 000 (~2.2 kbit/s)
4: 1 000 (~2.2 bit/s)
14: 2 000 000 (~4.4 kbit/s)
5: 2 000 (~4.4 bit/s)
15: 5 000 000 (~11.1 kbit/s)
6: 5 000 (~11.1 bit/s)
16: 10 000 000 (~22 kbit/s)
7: 10 000 (~22 bit/s)
17: 20 000 000 (~44 kbit/s)
8: 20 000 (~44 bit/s)
18: 50 000 000 (~111 kbit/s)
9: 50 000 (~111 bit/s)
31: best effort
Notes
page 126/198
10.8. +CGQREQ Command : Request quality of service profile
AT+ CGQREQ Request quality of service profile

Test command
Response
+CGQREQ: <PDP_type>, (list of supported <precedence>s),(list of supported
supported <mean>s)
[+CGQREQ: <PDP_type>, (list of supported <precedence>s),(list of supported
supported <mean>s)
[]]
OK
Syntax
AT+CGQREQ=?
Read command
Response
+CGQREQ: <cid>,<precedence>,<delay>,<reliability>,<peak>,<mean>
[+CGQREQ: <cid>,<precedence>,<delay>,<reliability.>,<peak>,<mean>
[]]
OK
Syntax
AT+CGQREQ?
Write command
Syntax
+CGQREQ=[<cid>
[,<precedence >
[,<delay> [,<reliability.>
[,<peak> [,<mean>]]]]]]
Response
OK
Reference
[27.007] 10.1.4
Notes
This command allows the TE to specify a Quality of Service Profile that is used
when the MT sends an Activate PDP Context Request message to the network.
If a value is omitted for a particular class then the value is considered to be
unspecified
Parameters
<cid>:
a numeric parameter which specifies a particular PDP context

definition (see the +CGDCONT command).
<precedence>: a numeric parameter which specifies the precedence class
<delay>:
a numeric parameter which specifies the delay class
<reliability>:
a numeric parameter which specifies the reliability class
<peak>:
a numeric parameter which specifies the peak throughput class
<mean>:
a numeric parameter which specifies the mean throughput class
page 127/198
10.9. +CGREG Command : GPRS network registration status
AT+ CGREG GPRS network registration status

Test command
Syntax
AT+CGREG=?
Response
+CGREG: (list of supported <n>s)
OK
Read command
Syntax
AT+CGREG?
Response
+CGREG: <n>,<stat>[,<lac,<ci>]
OK
Write command
Syntax
AT+CGREG=[<n>]
Response
OK
Parameters
<n>:
0: disable network registration unsolicited result code
1: enable network registration unsolicited result code +CGREG: <stat>
2: enable network registration and location information unsolicited result code
+CGREG: <stat>[,<lac>,<ci>]
<stat>: 0: not registered, ME is not currently searching an operator to register to
The MS is in GMM state GMM-NULL or GMM-DEREGISTEREDINITIATED.
The GPRS service is disabled, the MS is allowed to attach for GPRS if
requested by the user.
1: registered, home network
The MS is in GMM state GMM-REGISTERED or GMM-ROUTING-AREAUPDATING-INITIATED INITIATED on the home PLMN.
2: not registered, but ME is currently trying to attach or searching an operator
to register to
The MS is in GMM state GMM-DEREGISTERED or GMM-REGISTEREDINITIATED. The GPRS service is enabled, but an allowable PLMN is
currently not available. The MS will start a GPRS attach as soon as an
allowable PLMN is available.
3: registration denied
The MS is in GMM state GMM-NULL. The GPRS service is disabled, the
MS is not allowed to attach for GPRS if requested by the user.
4: unknown
5: registered, roaming
The MS is in GMM state GMM-REGISTERED or GMM-ROUTING-AREAUPDATING-INITIATED on a visited PLMN.
<lac>: string type; two byte location area code in hexadecimal format (e.g. "00C3"
equals 195 in decimal)
<ci>:
string type; two byte cell ID in hexadecimal format
Reference
[27.007] 10.1.19
Notes
The set command controls the presentation of an unsolicited result code +CGREG:
<stat> when <n>=1 and there is a change in the MT's GPRS network registration
status, or code +CGREG: <stat>[,<lac>,<ci>] when <n>=2 and there is a change
of the network cell.
page 128/198
11.
SIM APPLICATION TOOLKIT AT COMMANDS
11.1. Preliminary comments
SAGEM SA has developed a proprietary set of commands to allow a DTE to interface with the SIM
Application Toolkit
Details about the implementation of the SIM Application Toolkit are provided in [STK]
The following table gives the list of each SIM ToolKit *PSSTK command parameter and the *PSSTK
URC Format.
page 129/198
Command name
COMMAND REJECTED
*PSSTK URC Format

NULL
AT*PSSTK: "NOTIFICATION", <CommandNumber>,
<TypeOfCommand>, <Presence>, <Alphabet>,
<AlphaId>, <IconId>, <IconQualifier>
AT*PSSTK: "SETUP CALL",
<CommandNumber>,<TypeOfCommand>,<Confirmation>
,<Presence1>,<Alphabet1>,<AlphaId1>,<IconId1>,<IconQ
ualifier1>,<Presence2>,<Alphabet2>,<AlphaId2>,<IconId2
>,<IconQualifier2>,<RepeatIndicatior>
AT*PSSTK: "DISPLAY TEXT",
<CommandNumber>,<Priority>,<Clear>,<ImmediateResp
onse>,<Alphabet>,<Text>,<IconId>,<IconQualifier>
AT*PSSTK: "GET INKEY", <CommandNumber>,
<ResponseFormat>, <ResponseAlphabet>,
<HelpInfo>,<Alphabet>,<Text>,<IconId>,<IconQualifier>
AT*PSSTK: "GET INPUT", <CommandNumber>,
<ResponseFormat>,<ResponseAlphabet>,<HideEntry>,<A
lphabetText>,<Text>,<IconId>,<IconQualifier>,<AlphabetD
efault>,<DefaultText>,<MinLength>,<MaxLength>,<HelpInf
o>
AT*PSSTK: "PLAY TONE", <Presence>, <Alphabet>,
<AlphaId>, <IconId>, <IconQualifier>,
<CommandNumber>, <Tone>,<Duration>
AT*PSSTK: "SELECT ITEM", <Presence>, <AlphaId>,
<Alphabet>,<IconId>, <IconQualifier>,
<CommandNumber>, <DefaultItem>, <HelpInfo>,
<NumberOfItem>
AT*PSSTK: "SETUP MENU", <Presence>, <Alphabet>,
<AlphaId>, <IconId>, <IconQualifier>,
<CommandNumber>,<DefaultItem>,<HelpInfo>,<Number
OfItem>
NOTIFICATION
SETUP CALL
DISPLAY TEXT
GET INKEY
GET INPUT
PLAY TONE
SELECT ITEM
SETUP MENU
REMOVE MENU
AT*PSSTK: "REMOVE MENU",<CommandNumber>
MENU SELECTION
NULL
ALL CALLS DISCONNECTED
NULL
USER ACTIVITY
NULL
IDLE SCREEN AVAILABLE
NULL
SETUP CALL TERMINATED
NULL
GET ITEM LIST
LANGUAGE NOTIFICATION
SETUP IDLE MODE TEXT

REFRESH
END CALL
DISCONNECT
PROCESSING
END SESSION
ABORT SESSION
CONTROL BY SIM
*PSSTK command
parameters list
"COMMAND REJECTED",
CommandNumber, cause
"NOTIFICATION",
CommandNumber,
IconDisplay
"SETUP CALL",
CommandNumber,
IconDisplay
"DISPLAY TEXT",
CommandNumber,
IconDisplay
"GET INKEY",
alphabet,Text,CommandNumb
er, IconDisplay, HelpRequest
"GET INPUT",
alphabet,Text,CommandNumb
er, IconDisplay, HelpRequest
"PLAY TONE",
CommandNumber,
IconDisplay
"SELECT ITEM",
CommandNumber,ItemIdentifi
er, IconDisplay,
IconDisplay,HelpRequest
"SETUP
MENU",CommandNumber,
IconDisplay
"REMOVE MENU ",
CommandNumber
"MENU
SELECTION",ItemIdentifier,
HelpRequest
"ALL CALLS
DISCONNECTED "
"USER ACTIVITY"
"IDLE SCREEN AVAILABLE"
"SETUP CALL TERMINATED
"
AT*PSSTK:"GET ITEM LIST",

"GET ITEM LIST",
<Item_index>,<ItemIdentifier>,<Alphabet>,
NumberOfItems
<p_Text>,<NextAction>,<IconId>, <IconQualifier>
AT*PSSTK:"LANGUAGE NOTIFICATION",
<CommandNumber>,<SpecificLanguage>,
NULL
<SimLanguage>
AT*PSSTK:"SETUP IDLE MODE TEXT",
"SETUP IDLE MODE TEXT",
<CommandNumber>, <Alphabet>, <Text>, <IconId>,
CommandNumber,
<IconQulifier>
IconDisplay
AT*PSSTK:
NULL
"REFRESH",<CommandNumber>,<RefreshType>
AT*PSSTK:"ENDCALL",<CommandNumber>,<CauseSele
NULL
ct>,<Cause>,<CallId>
AT*PSSTK="DISCONNECT",<CauseSelect>,<Cause>,<C
allIdListStatus0>,<CallIdListStatus1>,<CallIdListStatus2>,
<CallIdListStatus3>,<CallIdListStatus4>,<CallIdListStatus5
NULL
>,<CallIdListStatus6>,<CallId>,<MaxNumberOfCallRepeat
Attempts>,<RepeatCallAttemptWaitingTime>,<CallIdPrevi
ousState>
AT*PSSTK: "PROCESSING",<CommandNumber>
NULL
AT*PSSTK: "END SESSION"
NULL
AT*PSSTK: "ABORT SESSION"

AT*PSSTK: "CONTROL BY
SIM",<TypeOfCommand>,<Presence>,<Alphabet>,<Alpha
Id>
NULL
NULL
page 130/198
11.2. *PSSTKI Command : SIM ToolKit Interface configuration
AT*PSSTKI SIM ToolKit Interface configuration

Test command
Response
*PSSTKI: (List of supported <mode>s)
OK
Syntax
AT*PSSTKI=?
Read command
Syntax
AT*PSSTKI?
Response
*PSSTKI:<mode>
OK
Write command
Syntax
AT*PSSTKI=<mode>
Response
OK
Parameter
<mode>:
Reference
0: no *PSSTK unsolicited result code will be sent to TE. TE wont send

*PSSTK command to Module.
1: any *PSSTK unsolicited result code will be sent to TE.
Notes
The aim of this AT command is to configure the AT interface for SIM ToolKit support.
page 131/198
11.3. *PSSTK Command : SIM Toolkit command
AT*PSSTK SIM Toolkit *PSSTK as command

Write command
Response
Syntax
AT*PSSTK=<msg>,<pa OK
rameter1>,,<paramet
Parameters
erN>
<msg>: 1 Command require a SIM Toolkit answer:
MENU SELECTION
GET ITEM LIST
2 Command does not require a SIM Toolkit answer:
ALL CALLS DISCONNECTED
USER ACTIVITY
IDLE SCREEN AVAILABLE
SETUP CALL TERMINATED
3 Command used to answer an unsolicited result code:
COMMAND REJECTED
NOTIFICATION
SETUP CALL
DISPLAY TEXT
GET INKEY
GET INPUT
PLAY TONE
SELECT ITEM
SETUP MENU
REMOVE MENU
<parameter i>: Depends of <msg> value, For each value of <msg> a parameter list
is defined. For detail information about parameter list, please see the
.table
Reference
Notes
The *PSSTK can be used in two different ways:
*PSSTK is an unsolicited result code received from SIM Toolkit application
*PSSTK is sent by the DTE to the ME (used as a normal AT command)
page 132/198
11.4. *PSSTK URC : SIM Toolkit unsolicited result code
*PSSTK Unsolicited result code or possible response(s)

Result code or Possible
response(s)
Response
*PSSTK: <msg>,<parameter1>, , <parameterN>
OK
Parameters
<msg>:
1 Unsolicited result code not requiring an answer from DTE
LANGUAGE NOTIFICATION
CONTROL BY SIM
REFRESH
END CALL
DISCONNECT
PROCESSING
END SESSION
ABORT SESSION
2 Unsolicited result code requiring an answer from DTE
NOTIFICATION
SETUP CALL
DISPLAY TEXT
GET INKEY
GET INPUT
PLAY TONE
SELECT ITEM
SETUP MENU
REMOVE MENU
<parameter i>: Depends of <msg> value, For each value of <msg> a parameter list
is defined. For detail information about parameter list, please see the
.table
Notes
The *PSSTK can be used in two different ways:
*PSSTK is an unsolicited result code received from SIM Toolkit application
*PSSTK is sent by the DTE to the ME (used as a normal AT command)
page 133/198
12.
AUDIO COMMANDS
12.1. +CLVL Command : Loudspeaker volume level
AT+CLVL Loudspeaker volume level

Test command
Syntax
AT+CLVL=?
Response
+CLVL: (list of supported <level>s)
OK
Read command
Syntax
AT+CLVL?
Response
+CLVL: <level>
OK
Write command
Syntax
AT+CLVL=<level>
Response
OK
Parameter
<level>: Loudspeaker level (smallest value represents the lowest sound)
Reference
[27.007] 8.23
Notes
page 134/198
12.2. +VIP Command : Initialize Voice Parameters
AT+VIP Initialize voice parameter

Test command
Syntax
AT+VIP=?
Response
OK
Write command
Syntax
AT+VIP=<n>
Response
OK
Parameters
<n>: Mode
0
Handset
1
Handsfree
2
Headset
Reference
[27.007] C.2.6
(7 levels of volume, main audio interface)

(5 levels of volume, main audio interface)
(5 levels of volume, secondary audio interface)
Notes
It is possible to re-direct the audio paths as well as the audio parameters (filters,
gain) through the Audio tool provided by SAGEM S.A.
The mention to the main and secondary audio interfaces (Speaker and Micro) are
linked to the default audio parameters and defined in [HW]
The values are automatically reset after a call (return to 0).
Level volume are accessible with AT+CLVL
page 135/198
12.3. +VTS Command : DTMF and Tone generation
AT+VTS DTMF and tone generation

Test command
Syntax
AT+VTS=?
Response
(list of supported <tone1>s),(list of supported <tone2>s) ,(list of supported
<duration>s)
OK
Write command
Response
Syntax
AT+VTS=<DTMF1>,<D OK
TMF2>, , <DTMFn>
Or
AT+VTS= {<DTMF1>, Parameters
<duration>, {<DTMF2>, <DTMFi>:
<duration>,{<DTMFn
<tone1>:
>,<duration>}
<tone2>:
<duration>:
Reference
[27.007] C.2.11
a single ASCII character in the set 0-9, #,*,A-D. DTMF tones can be
issued only during a voice call.
0(see [27.007] C.2.11)
0(see [27.007] C.2.11)
0 (see [27.007] C.2.11)
Notes
The network shall ensure that the minimum length of tone and the minimum gap
between two subsequent tones (according to ETR 206) is achieved. (In ETR 206
the minimum duration of a DTMF tone is 70ms 5ms, the minimum gap between
DTMF tones is 65ms). There is no defined maximum length to the tone, however,
the operator may choose to put a pre-defined time limit on the duration of tones
sent to line (cf. [23.014]). That means that with n<6, DTMF will be generated with a
duration given by the network.
Total number of parameters is limited to 9.
page 136/198
12.4. +VTD Command : Tone duration
AT+VTD Tone duration

Test command
Syntax
AT+VTD=?
Response
OK
Read command
Syntax
AT+VTD?
Response
<n>
OK
Write command
Syntax
AT+VTD=<n>
Response
OK
Parameters
<n>: 0 (see [27.007] C.2.12)
Reference
[27.007] C.2.12
Notes
The network shall ensure that the minimum length of tone and the minimum gap
between two subsequent tones (according to ETR 206) is achieved. (In ETR 206
the minimum duration of a DTMF tone is 70ms 5ms, the minimum gap between
DTMF tones is 65ms). There is no defined maximum length to the tone, however,
the operator may choose to put a pre-defined time limit on the duration of tones
sent to line (cf. [23.014]). That means that with n<6, DTMF will be generated with a
duration given by the network.
12.5. +VGR Command : Received Gain Selection
AT+VGR Received Gain Selection

Test command
Syntax
AT+VGR=?
Response
OK
Read command
Syntax
AT+VGR?
Response
<n>
OK
page 137/198
Write command
Syntax
AT+VGR=<n>
Response
OK
Parameters
<n>: gain in dBm
255
+63.5
254
+63
129
+0.5
128
+0
127
-0.5
2
-63
1
-63.5
0
AUTO (i.e. adjusted values inside the module)
Reference
[27.007] C.2.4
Notes
page 138/198
12.6. +VGT Command : Transmit Gain Selection
AT+VGT Transmit Gain Selection

Test command
Syntax
AT+VGT=?
Response
OK
Read command
Syntax
AT+VGT?
Response
<n>
OK
Write command
Syntax
AT+VGT=<n>
Response
OK
Parameters
<n>: gain in dBm
255
+63.5
254
+63
129
+0.5
128
+0
127
-0.5
2
-63
1
-63.5
0
AUTO (i.e. adjusted values inside the module)
Reference
[27.007] C.2.5
Notes
page 139/198
13.
PROTOCOL SPECIFIC COMMANDS
13.1. Preliminary comments

SAGEM S.A. has developed a set of proprietary AT Commands to simplify data exchanges with different
protocols:
FTP
TCP/IP
UDP
SMTP
POP3
IMPORTANT :
After to be connected, you can use as usual AT commands (have a call, send sms) between a
read, write or close commands.
These commands are using a polling mode, it is up to application to check if data are available on a
socket by using specific protocol read AT commands.
13.2. CONNECTION CONFIGURATION
13.2.1.
+KCNXCFG: GSM Connection Configuration
+KCNXCFG GSM Connection configuration

Test command
Syntax
AT+KCNXCFG=?
Response
+KCNXCFG: (list of possible <cnxconf>s)
Read command
Syntax
AT+KCNXCFG?
Response
+KCNXCFG:
<cnxconf>,GSM,<dialupnb>,<nbmode>,<login>,<passwd>,<ip>,<dns1>,<dns2>
page 140/198
Write command
Syntax
AT+KCNXCFG=<cnx
cnf>,GSM,<dialupnb>,<nb
mode>[,[<login>][,[<passwo
rd>][,[<ip>][,[<dns1>][,[<dns
2>]]]]]
Reference
Response
OK
Parameters
<cnx cnf>:
Index of a set of parameters for configuring a connection (max value

200)
<dialupnb>:
String type. Indicates the dial-up number of the GSM connection.
<nbmode>:
Numeric parameter (max 20 bytes), indicates the numbering type of
the GSM connection :
0 analog
1 digital
<login>:
string type (max size 24 bytes), indicates the user name of the cnx
<password>:
string type (max size 24 bytes), indicates the password of the cnx
<ip>:
String type. Consists of dot-separated numeric (0-255) parameters on
the form a1.a2.a3.a4, if the mobile is supposed to work with a static
address. For dynamic address the value is 0.0.0.0 or an empty
string. Displayed value with read command will be 0.0.0.0 for
dynamic address. Note that with an empty value in the write
command the previously stored value will be kept.
<dns1>, <dns2>: String type. Consists of dot-separated numeric (0-255) parameters on
the form a1.a2.a3.a4, if the mobile is supposed to work with static
DNS addresses. For dynamic addresses the value is 0.0.0.0 or an
empty string. Displayed value with read command will be 0.0.0.0 for
Notes
This AT command is used to configure the bearer to be used for the IP Services.
As far as only one connection is allowed, the same connection will be used for all
the IP services therefore :
Defining a connection will remove the previous one.
If two different IP services require two different network configurations, the user
has to reuse the AT+ KCNXCFG command.
Between two IP services, the connection parameters are kept on, therefore between
two IP services using the same network settings, the connection parameters do not
need to be redefined.
By default, the IP and DNS address are dynamic (those values would be affected by
the network during the GSM or GPRS connection.
This connection will be used by the Module to access to the IP services described
on the following chapters. The AT+KCNXCFG command is only defined to set the
current parameters. The defined connection will be automatically opened when
needed by the IP services.
page 141/198
13.2.2.
+KCNXCFG: GPRS Connection Configuration
+KCNXCFG GPRS Connection configuration

Test command
Response
+KCNXCFG: (list of possible <cnxconf>s)
Syntax
AT+KCNXCFG=?
Read command
Response
+KCNXCFG: <cnx cnf>, GPRS,<apn>,<login>,<password>, <ip>,<dns1>,<dns2>
Syntax
AT+KCNXCFG?
Write command
Syntax
AT+KCNXCFG=<cnx
cnf>,GPRS,<apn>[,[<logi
n>][,[<password>][,[<ip>][,
[<dns1>][,<dns2>]]]]]
Reference
Response
OK
Parameters
<cnx cnf>:
Index of a set of parameters for configuring a connection (max value

200)
<apn>:
(Access Point Name) a string parameter (max size 63 bytes), logical
name used to select the GGSN or the external packet data network.
<login>:
string type (max size 24 bytes), indicates the user name of the cnx
<password>:
string type (max size 24 bytes), indicates the password of the cnx
<ip>:
String type. Consists of dot-separated numeric (0-255) parameters on
the form a1.a2.a3.a4, if the mobile is supposed to work with a static
address. For dynamic address the value is 0.0.0.0 or an empty
string. Displayed value with read command will be 0.0.0.0 for
command the previously stored value will be used.
<dns1>, <dns2>: String type. Consists of dot-separated numeric (0-255) parameters on
the form a1.a2.a3.a4, if the mobile is supposed to work with static
DNS addresses. For dynamic addresses the value is 0.0.0.0 or an
empty string. Displayed value with read command will be 0.0.0.0 for
Notes
This AT command is used to configure the bearer to be used for the future IP
Services.
As far as only one connection is allowed, the same connection will be used for all
the IP services therefore :
Defining a connection will remove the previous one.
If two different IP services require two different network configurations, the user
has to reuse the AT+ KCNXCFG command.
Between two IP services, the connection parameters are kept on, therefore between
two IP services using the same network settings, the connection parameters do not
need to be redefined.
By default, the IP and DNS address are dynamic (those values would be affected by
the network during the GSM or GPRS connection.
This connection will be used by the Module to access to the IP services described
on the following chapters. The AT+KCNXCFG command is only defined to set the
current parameters. The defined connection will be automatically opened when
needed by the IP services.
page 142/198
13.2.3.
+KCNXTIMER: Connection Timer Configuration
+KCNXTIMER Connection Timer Configuration

Test command
Syntax
AT+KCNXTIMER=?
Response
+KCNXTIMER: (list of supported <cnx cnf>s),(list of supported <tim1>s),(list of
supported <nbtrial>s),(list of supported <tim2>s)
OK
Read command
Syntax
AT+KCNXTIMER?
Response
+KCNXTIMER: <cnx cnf>,<tim1>,<nbtrial>,<tim2>
[CR><LF>+KCNXTIMER: <cnx cnf>, <tim1>,<nbrtrial>,<tim2>
Write command
Response
Syntax
OK
AT+KCNXTIMER=<cnx
cnf>[,[<tim1>][,[<nbrtrial>][
,<tim2>]]]]
Parameters
<cnx cnf>:
<tim1>:
<tim2>:
<nbtrial>:
Reference
Integer type. Index of a set of parameters for configuring a

connection (max value 200).
Connection timeout in seconds
Must be within 15s to 120s (30s by default)
Linger timer in seconds
Must be within 60s to 300s (60s by default)
0: deactivated (connection will not close by itself)
Number of attempts to connect to the network
Must take a value between 1 & 4 (2 by default)
Notes
page 143/198
13.2.4.
+KCNXPROFILE: Connection current profile configuration
+KCNXPROFILE Connection current profile configuration

Read command
Syntax
AT+KCNXPROFILE?
Response
+KCNXPROFILE: (list of supported<cnx cnf>s)
Write command
Syntax
AT+KCNXPROFILE=
<cnx cnf>
Response
OK
Parameters
<cnx cnf>:
Reference
Index of a set of parameters for configuring a connection.
Notes
This AT command specifies the current profile to configure the GPRS or GSM
connection for all subsequent TCP or FTP connections.
However, if the user wants to override this profile for one TCP (or FTP) session it may
use KTCPCFG (KFTPCFG) with the optional <cnx cnf> parameter.
page 144/198
13.3. TCP Specific Commands
13.3.1.
+KTCPCFG: TCP Connection Configuration
+KTCPCFG TCP Connection Configuration

Test command
Syntax
AT+KTCPCFG=?
Response
+KTCPCFG: (list of possible <mode>s)
OK
Read command
Syntax
AT+KTCPCFG?
Response
+KTCPCFG: <cnx cnf>,<mode>,<tcp remote address>,<tcp_port>
Write command
Syntax
AT+KTCPCFG=[<cnx
cnf>],<mode>,<tcp remote
address>,<tcp_port>
Response
OK
Parameters
<cnx conf>:
Index of a set of parameters for configuring one TCP session (see

KCNXCFG).
<mode>:
0: Client
The socket is defined as a standard TCP socket
<tcp remote address>: dot-separated numeric (0-255) parameters on the form
a1.a2.a3.a4 or explicit name of the remote server
<tcp_port>:
numeric parameter (0-65535)
Reference
Notes
Like in the FTP or in the SMTP cases, the TCP functionality is working with an autoconnect behaviour. Therefore,
When defining a TCP Server socket, the ME will open the current defined GSM or
GPRS link and wait for the incoming connection.
For TCP (working in the client mode), the GSM or GPRS line will be opened during
the <tim2> set by using the +KCNXTIMER command.
If the socket is defined as a <CLIENT> socket, <tcp_port> and <tcp_server>
define the port and the IP adress of the remote server we want to connect.
Only one TCP socket can be defined in the ME
page 145/198
13.3.2.
+KTCPCNX: TCP Connection
+KTCPCNX TCP Connection

Write command
Syntax
AT+KTCPCNX
Response
OK
NO CARRIER
+CME ERROR: <err>
+KTCP_NOTIF: <tcp_notif>
Parameters
<tcp_notif>:
Reference
Integer type. Indicates the cause of the TCP connection failure.

0- Network error
1- no more socket available; max. number already reached
2- Memory problem
3- DNS error
4-TCP disconnection by the server
5-TCP connection error
6-generic error
Notes
The answer to this command is OK if the TCP connection is successful
If the connection to the network fails, it returns NO CARRIER only.
If the connection to the network succeeds, but the TCP connection fails, the module
hangs up, returns to COMMAND mode and returns NO CARRIER followed by
+KTCP_NOTIF : 1 or +KTCP_NOTIF : 2 or KTCP_NOTIF : 3 or KTCP_NOTIF
: 5 or KTCP_NOTIF : 6
If the connection to the network and tcp succeed (ktcpcnx returns OK), but the
network fails, the module returns NO CARRIER followed by KTCP_NOTIF : 0.
If the connection to the network and tcp succeed (ktcpcnx returns OK), but the TCP
connection fails, the module returns +KTCP_NOTIF : 4 or +KTCP_NOTIF : 5 or
+KTCP_NOTIF : 6 or +KTCP_NOTIF : 2 .
The GSM or GPRS connection is supposed to be down before entering this
command
Beware when ktcpcnx returns OK the user must do a ktcpclose before a new
ktcpcnx.
page 146/198
13.3.3.
+KTCP_DATA: Incoming data through a TCP Connection

Unsolicited notification
Response
+KTCP_DATA: <ndata available>
Parameters
< ndata available>: Maximum number of bytes to be read
Reference
Notes
As soon as the connection is established, the module can receive data through the
TCP socket. This notification is sent when data are available in the receive buffer.
This notification will be sent one time. The controlling software must read the buffer
with KTCPRCV in order to activate the notification again.
page 147/198
13.3.4.
+KTCPRCV: Receiving data through a TCP Connection
+KTCPRCV TCP Receiving data through a TCP connection

Write command
Syntax
AT+KTCPRCV= <ndata>
Response
CONNECT
OK
+KTCP_NOTIF: <tcp_notif>
Parameters
<ndata>:
<tcp_notif>:
Reference
Maximum number of bytes the device is ready to receive (max

value 4294967295)
See command AT+KTCPCNX
Notes
This function is used to receive <ndata> data bytes through a previously opened
TCP socket.
<ndata> indicates the max data number that the terminal wishes to receive. If the
TCP socket contains more data than <ndata> bytes then only <ndata> bytes will be
received. If the TCP socket contains less data than <ndata> bytes then only TCP
sockets data will be received.
When <ndata> (max value) bytes or only available data in the TCP socket have
been received, the module returns to command state and returns OK.
The end of the downloading is defined by the transmission of the <ETX> character.
Therefore, if a <ETX> data has to be transmitted on the payload data, it should be
transmitted preceded by the <DLE> character to give <DLE><ETX> and the <DLE>
character will be transmitted as <DLE><DLE>.
Before using this command, it is highly recommended to configure the module for
Hardware flow control, using the command AT&K3.If a network disconnection
occurs during the reception, the command will first return the <ETX> character,
followed by NO CARRIER, followed by +KTCP_DOWN : 0.
If a tcp disconnection occurs during the reception the command will first return the
<ETX> character and the module returns OK, or +CME ERROR <err> end by
+KTCP_NOTIF: 4 or +KTCP_NOTIF: 5 or +KTCP_NOTIF: 6 or
+KTCP_NOTIF: 2.
Moreover if the user launches ktcprcv at command after a network down or tcp
disconnection (TCP disconnection by the server or TCP connection error), returns
OK until no more data is contained in the socket. When there is no more data in the
socket +CME ERROR <err> is returned.
If a DTR drop from active to inactive occurs during the reception, the command will
first return the <ETX> character, followed by +CME ERROR <err>.
page 148/198
13.3.5.
+KTCPSND: Sending data through a TCP Connection
+KTCPSND Sending data through a TCP connection

Write command
Syntax
AT+KTCPSND= <ndata>
Response
CONNECT
OK
+CME ERROR: <err>
NO CARRIER
+KTCP_NOTIF:< tcp_notif>
Parameters
<ndata>:
<tcp_notif>:
Reference
number of bytes the device wants to send (max value

4294967295)
See command AT+KTCPCNX
Notes
This function is used to send <ndata> bytes through a previously opened TCP
socket.
When <ndata> bytes have been sent, the module returns to command state and
returns OK. This message doesnt mean that the data have been sent through the
socket, but only that they have been transmitted to modules TCP layer.
In the case of a loss of network link while this command is in progress, the
command would return NO CARRIER followed by +KTCP_NOTIF : 0 instead of OK.
If a tcp disconnection occurs during the reception, the module returns OK, or +CME
ERROR <err> followed by +KTCP_NOTIF : 4 or +KTCP_NOTIF : 5 or
+KTCP_NOTIF : 6 or +KTCP_NOTIF : 2. Moreover if the user launches ktcpsnd
at command after a network down or tcp disconnection (TCP connection error), this
at command returns +CME ERROR <err>.
The end of the uploading is defined by the transmission of the <ETX> character.
Therefore, if an <ETX> data has to be transmitted on the payload data, it must be
character must be transmitted as <DLE><DLE>.
The user can abort the uploading by sending the ETX character.
Hardware flow control, using the command AT&K3.
page 149/198
13.3.6.
+KTCPCLOSE: Closing current TCP operation
+KTCPCLOSE Closing current TCP operation

Write command
Syntax
AT+KTCPCLOSE=
<closing_type>
Response
+CME ERROR: <err>
NO CARRIER
Parameters
<closing_type>:
Reference
0: abort. Fast closing of the TCP connection.

1: The TCP connection is properly closed, which means that data
sent to the module by AT+KTCPSND will be sent to the TCP
server and acknowledged before the socket is closed.
Notes
This function first closes the TCP socket and then closes the network connection. Then,
the module returns NO CARRIER.
page 150/198
13.4. FTP Specific Commands
13.4.1.
+KFTPCFG: FTP Configuration
+KFTPCFG FTP Configuration

Read command
Response
+KFTPCFG: <server name>,<login>,<password>,<port number>,<mode>
Syntax
AT+KFTPCFG?
Write command
Syntax
AT+KFTPCFG=[<cnx
cnf>],<server_name>
[,<login>[,
<password>[,<remote port
number> [,<mode>]]]]
Response
OK
Reference
Notes
Execution command sets the server name, the login, the password, the port number and
the mode for ftp operations.
Parameters
<cnx cnf>:
Index of a set of parameters for configuring one FTP session.
<server name>: string type. Consists of a dot-separater numeric (0-255) parameters
on the form a1.a2.a3.a4, to identify the ftp server or explicit name of
the server. Do not add ftp:// in the server name. Use server_path
variable to indicate the right path in the receive, send and delete
commands.
<login>:
string type, indicates the user name to be used during the FTP
connection.
<password>:
string type, indicates the password to be used during the FTP
connection.
<port number>: numeric parameter (0-65535). Indicates the remote command port
(21 by default)
<mode>:
numeric number. Indicates the initiator of the FTP connection.
0 actif.
The server is initiator of the FTP data connection
1 passif.
The client is initiator of the FTP data connection in
order to avoid the proxy filtrate. The passive data
transfert process listens on the data port for a
connection from the active transfert process in order to
open the data connection.
Note that only passive mode is currently supported, active mode is
internally switched to passive.
Example :
//use only the server name
AT+KFTPCFG=0,"ftp.connect.com","weblog","webpass",21,0
//use the files path in the receive command
directory/test","sagem_test.txt",1
page 151/198
13.4.2.
+KFTPRCV: Downloading FTP files
+KFTPRCV Downloading FTP files

Write command
Syntax
+KFTPRCV=[<server_p
ath>],<file_name>[,
<type of file>]
Response
CONNECT
OK
+CME ERROR<err>
NO CARRIER
+KFTP_ERROR : <ftp cause>
Parameters
<server_path>:
<file_name>:
<type of file>:
<ftp_cause> :
Reference
string type. Indicates the path of the file to be downloaded. An empty

string or no string indicates the downloading is done from the path
given by the <server_name> parameter.
string type. Indicates the name of the file to download.
Numeric type. Indicates the type of file (ASCII or binary) to transfer.
0 binary, (default value)
1 ASCII.
Integer type. Indicates the cause of the FTP connection failure.
0- the sending or the retrieving was impossible due to request
timeout.
1- it is impossible to connect to the server due to DNS resolution
failure.
2- it is impossible to upload or download a file due to connection
troubles.
3- the upload or download was impossible due to connection timeout
4-no network available.
Notes
Before using this command an FTP connection must have been achieved using
AT+KFTPCFG
If an IP connection which is not an FTP connection (SMTP or TCP) is ongoing, an
error code will be returned.
After sending the +KFTPRCV command, the user will receive the entire data
stream.
Therefore, if an <ETX> data has to be transmitted on the payload data, it will be
The user can abort the downloading by sending any character from the host. In this
case, the module will end the transfer by transmitting the EndOfText (ETX) followed
by ERROR
page 152/198
13.4.3.
+KFTPSND: Uploading FTP files
+KFTPSND Uploading FTP files

Write command
Syntax
+KFTPSND=[<server_p
ath>],<file_name>[,
<type of file>]
Response
CONNECT
ME receives data ended with the <ETX> Character
<ETX>.
OK
+CME ERROR <err>
NO CARRIER
Parameters
<server_path>:
<file_name>:
<type of file>:
<ftp_cause> :
Reference
string type. Indicates the path of the file to be uploaded. An empty

string or no string indicates the downloading is done from the path
given by the <server_name> parameter.
string type. Indicates the name of the file to upload.
1 ASCII.
timeout.
failure.
troubles.
4- no network available.
Notes
AT+KFTPCFG
After sending the +KFTPSND command, the host must send the entire data stream
of the file.
page 153/198
13.4.4.
+KFTPDEL: Deleting FTP files
+KFTPDEL Deleting FTP files

Write command
Syntax
+KFTPDEL=[<server>],
<file>[, <type>]
Response
OK
+CME ERROR <err>
NO CARRIER
Parameters
<server>: string type. Indicates the path of the file to be uploaded. An empty string or
no string indicates the downloading is done from the path given by the
<server_name> parameter.
<file>:
string type. Indicates the name of the file to upload.
<type>:
1 ASCII.
<ftp_cause> :
timeout.
failure.
troubles.
4- no network available.
Reference
13.4.5.
Notes
AT+KFTPCFG
+KFTPCLOSE: Ending current FTP connection
+KFTPCLOSE Ending current FTP connection

Write command
Syntax
+KFTPCLOSE
Response
OK
Reference
Notes
This command will close the connection to the FTP server
page 154/198
13.5. UDP Specific Commands
13.5.1.
+KUDPCFG: UDP Connection Configuration
+KUDPCFG UDP Connection Configuration

Test command
Syntax
AT+KUDPCFG=?
Response
+KUDPCFG: (n)
Read command
Syntax
AT+KUDPCFG?
Response
+KUDPCFG: <cnx cnf>
OK
Error cases
+CME ERROR <err>
err can take the following values:
83 : internal configuration error
64531 : active profile does not exist
Write command
Syntax
AT+KUDPCFG=[<cnx cnf>]
Response
+KUDPCFG: <socket num>
OK
if the UDP socket connection is successful <socket num> is the socket index to use
with +KUDPSEND and +KUDPRCV commands.
Error case
NO CARRIER
+CME ERROR: <err>
+KUDP_NOTIF: <udp_notif>
<udp_notif>:
Parameter
<cnx cnf>:
Reference
Integer type. Indicates the cause of the UDP connection failure.

0-Network error
1-no more socket available; max. number already reached
2-Memory problem
3- DNS error
5-UDP connection error
6-generic errorParameters
Index of a set of parameters for configuring one UDP session (see
KCNXCFG).
If no value is supplied to the command line, the default connection
profile is used.
Notes
Only one UDP socket can be defined in the ME
To open a new socket the user is invited to close the current socket thanks to
+KUDPCLOSE command.
A default profile must exist if the command line AT+KUDPCFG= is used otherwise
an error is raised.
page 155/198
13.5.2.
+KUDPCLOSE: Closing current UDP operation
+KUDPCLOSE Closing current UDP operation

Action command
Response
OK
Syntax
AT+KUDPCLOSE
Error case
+CME ERROR: <err>
err can take the following value:
82 : if no active session was found
Reference
Notes
This function closes the UDP socket and the network session.
13.5.3.
+KUDPSND: Sending data through an UDP Connection
+KUDPSND Sending data through an UDP connection

Write command
Syntax
AT+KUDPSND=<socket
num>,<udp remote
address>,<udp_port>,<nd
ata>
Response
CONNECT
OK
Error case
NO CARRIER
+CME ERROR: <err>
+KUDP_NOTIF:< udp_notif>
<udp_notif>:
Parameters
<socket num>:

0-Network error
2-Memory problem
3- DNS error
Integer type obtained by a previous KUDPCFG command.
<udp remote address>: dot-separated numeric (0-255) parameters on the form

<udp_port>:
<ndata>:
number of bytes the device wants to send (max value 4294967295)
Reference
page 156/198
Notes
This function is used to send <ndata> bytes through a previously opened UDP
socket.
When <ndata> bytes have been sent, the module returns to command state and
returns OK. This message doesnt mean that the data have been sent through the
socket, but only that they have been transmitted to modules UDP layer.
In the case of a loss of network link while this command is in progress, the
command would return NO CARRIER followed by +KUDP_NOTIF : 0 instead of OK.
If an udp disconnection occurs during the reception, the module returns OK, or
+CME ERROR <err> followed by +KUDP_NOTIF : 5 or +KUDP_NOTIF : 6 or
+KUDP_NOTIF : 2. Moreover if the user launches kudpsnd at command after a
network down this at command returns +CME ERROR <err>.
The end of the uploading is defined by the transmission of the <ETX> character.
Hardware flow control, using the command AT&K3.
page 157/198
13.5.4.
+KUDPRCV: Receiving data through an UDP Connection
+KUDPRCV UDP receiving data through an UDP connection

Write command
Syntax
AT+KUDPRCV=<socket
num>,<udp remote
address>,<udp_port>,<nd
ata>
Response
CONNECT
OK
+KUDP_DATA: <ndata present>
Error case
NO CARRIER
+CME ERROR: <err>
+KUDP_NOTIF:< udp_notif>
+KUDP_DATA_MISSED: <ndata missed>
<udp_notif>:

0-Network error
2-Memory problem
3- DNS error
<ndata present>: number of bytes available in the UDP socket.

<ndata missed>: number of bytes left (and definitely lost!) in the UDP socket.
Parameters
<socket num>:
Integer type obtained by a previous KUDPCFG command.
<udp remote address>: dot-separated numeric (0-255) parameters on the form

<udp_port>:
<ndata>:
number of bytes the device wants to send (max value 4294967295)
page 158/198
Reference
Notes
This function is used to receive <ndata> data bytes through a previously opened
UDP socket.
<ndata> indicates the max data number that the terminal wishes to receive. If the
UDP socket contains more data than <ndata> bytes then only <ndata> bytes will be
received.
When <ndata> (max value) bytes or only available data in the UDP socket have
been received, the module returns to command state and returns OK.
Therefore, if a <ETX> data has to be transmitted on the payload data, it should be
Hardware flow control, using the command AT&K3.If a network disconnection
occurs during the reception, the command will first return the <ETX> character,
followed by NO CARRIER. If an udp disconnection occurs during the reception the
command will first return the <ETX> character and the module returns OK, or +CME
ERROR <err> end by +KUDP_NOTIF: 5 or +KUDP_NOTIF: 6 or
+KUDP_NOTIF: 2.
Moreover if the user launches kudprcv at command after a network down, the
module returns OK until no more data is contained in the socket. When there is no
more data in the socket +CME ERROR <err> is returned.
If a DTR drop from active to inactive occurs during the reception, the command will
first return the <ETX> character, followed by +CME ERROR <err>.
page 159/198
13.6. SMTP Specific Commands
13.6.1.
+KSMTPPARAM: Connection Configuration
+KSMTPPARAM Connection Configuration

Test command
Response
+KSMTPPARAM: <server>, <port>, <sender>
OK
Syntax
AT+KSMTPPARAM=?
Read command
Response
+KSMTPPARAM: <server>, <port>, <sender>
OK
Syntax
AT+KSMTPPARAM?
Write command
Syntax
AT+KSMTPPARAM=
<server>,<port>,<sender>
Response
OK
Parameters
<server>:
Reference
String type. Indicates the basic name of the SMTP server. This
name must either integrate SMTP URL schemes separate from the
server name by . or an IPV4 address.
e.g: smtp.sagem.com or 80.156.25.12
<port>:
Numeric type. Indicates the SMTP server port.
<sender>:
String type. Indicates senders mail address.

e.g: mo200_xxx@sagem.com
Notes
<server> string maxlength is 255.
<port> max value is 65535.
<sender> string max length 256.
Usual SMTP default port is 25.
Between two emails sending, the <server > and <sender> fields are kept on inside
the ME, therefore if the same identifier accesses the same SMTP server, those
parameters do not need to be reloaded.
page 160/198
13.6.2.
+KSMTPPWD: Authentication Configuration
+KSMTPPWD Authentication Configuration

Test command
Syntax
AT+KSMTPPWD=?
Response
+KSMTPPWD: <login>, <password>
OK
Read command
Syntax
AT+KSMTPPWD?
Response
+KSMTPPWD: <login>, <password>
OK
Write command
Syntax
AT+KSMTPPWD=
<login>, <password>
Response
OK
Parameters
<login>:
<password>:
Reference
String type. Indicates the user name to be used during the SMTP
connection.
String type. Indicates the password to be used during the SMTP
connection.
Notes
<login> and <password> strings max length is 24.
By default, both <login> and <password> are empty. If the dedicated SMTP server
does not need authentication, theses values can be left empty.
The SMTP client only supports LOGIN authentication.
Between two emails sending, the <login> and <password> fields are kept on inside
the ME, therefore if the same identifier accesses the same SMTP server, those
parameters do not need to be reloaded
page 161/198
13.6.3.
+KSMTPTO: Receivers Configuration
+KSMTPTO Receivers Configuration

Test command
Syntax
AT+KSMTPTO=?
Response
+KSMTPTO: <to1> [, <to2> [, <cc1> [, cc2> ]]]
OK
Read command
Syntax
AT+KSMTPTO?
Response
+KSMTPTO: <to1> [, <to2> [, <cc1> [, cc2> ]]]
OK
Write command
Response
Syntax
OK
AT+ KSMTPTO =
<to1>[,<to2>[,<cc1>[,<cc2>
]]]
Parameters
<to1>:
Reference
String type. Indicates the name of the first receiver of the mail.
<to2>:
String type. Indicates the name of the second receiver of the mail.
<cc1>:
String type. Indicates the name of the first copy receiver of the mail.
<cc2>:
String type. Indicates the name of the second copy receiver of the
mail.
Notes
<to1>, <to2>, <cc1>, <cc2> strings max length 256.
The fields <to2>,<cc1> and <cc2> can be empty.
These fields are deleted after each successful mail sent.
page 162/198
13.6.4.
+KSMTPSUBJECT: Subject Configuration
+KSMTPSUBJECT Authentication Configuration

Test command
Syntax
AT+KSMTPSUBJECT=?
Response
+KSMTPSUBJECT: <subject>
OK
Read command
Syntax
AT+KSMTPSUBJECT?
Response
+KSMTPSUBJECT: <subject>
OK
Write command
Syntax
AT+KSMTPSUBJECT=
<subject>
Response
OK
Parameters
<subject>:
Reference
String type. Indicates the subject of the mail. Must use US-ASCII
charset
Notes
This field is deleted after each successful mail sent.
Must use US-ASCII charset.
<subject> string max length 255.
This field can be left empty.
page 163/198
13.6.5.
+KSMTPUL: Send Message
+KSMTPUL Send Message

Test command
Syntax
AT+KSMTPUL=?
Response
+KSMTPUL: <mode>, <size>
OK
Read command
Syntax
AT+KSMTPUL?
Response
ERROR
Write command
Syntax
AT+KSMTPUL=
<mode>, <size>
Response
CONNECT
The ME wait for the data ended with the character <ETX>
OK
+CME ERROR: <err>
NO CARRIER
Parameters
<mode>:
Reference
Numeric type. Indicates the transfer mode (header closed or not):

1- Normal mode. The mail header is minimal, the user only send the
mail body. This is use for simple mails without attachment.
0- Complex mode. The mail header minimal part is still handled by
the AT command but the header is not closed. The user is
responsible for completing and closing the mail header. This is
use for mails with attachment or complex headers.
(cf. examples)
<size>:
Numeric type. Amount of data transferred within the CONNECT,

including <ETX> character.
<err>:
See 2.7 Error codes for the SMTP transfer.
Notes
If another IP operation (FTP, SMTP or TCP) is ongoing, the command will return
an error.
If the GSM or GPRS connection is not up, before uploading the file the ME will
automatically open the predefined GSM or GPRS link.
The end of the file is defined by the <ETX> parameter. Therefore, if a <ETX> data
has to be transmitted on the payload data, it should be transmitted preceded by
the <DLE> character to give <DLE><ETX> and the <DLE> character will be
transmitted as <DLE><DLE>.
At the end of the SMTP transfer, the OK message indicates the status of the
transfer.
At the end of the SMTP transfer, whether it succeeds, the parameters associated
with the current mail (recipients, subjects) will be set to the NULL value.
Hardware flow control is required for serial link
page 164/198
13.6.6.
+KSMTPCLEAR: Clear Parameters
+KSMTPCLEAR Clearing Parameters

Test command
Syntax
AT+KSMTPCLEAR=?
Response
ERROR
Read command
Syntax
AT+KSMTPCLEAR?
Response
ERROR
Action command
Syntax
AT+KSMTPCLEAR
Response
OK
Reference
Notes
This command deletes all SMTP parameters.
page 165/198
Specific Error Code For The SMTP Commands

Code of <err>
Meaning
3000
Invalid SMTP server name.
3001
Invalid address identification.
3002
Invalid configuration. Parameter(s) is missing.
3003
Invalid data size - with KSMTPUL.
3010
The login or the password got an invalid value.
3011
Invalid authentication method.
3020
Invalid receivers of the mail TO1.
3021
Invalid receivers of the mail TO2.
3022
Invalid receivers of the mail CC1.
3023
Invalid receivers of the mail CC2.
3040
The SMTP transfer failed due to connection (GSM or GPRS) fails.
3041
The SMTP transfer failed due to TCP connection troubles.
3042
The SMTP transfer failed due to server TCP connection error.
3043
The SMTP download failed due to Request time out.
3044
The SMTP transfer failed due to SMTP protocol error.
3045
The SMTP transfer failed due to DTR drop.
3049
The SMTP transfer download failed due to internal error.
page 166/198
13.7. POP3 Specific Commands

13.7.1.
+KPOPCNX: Connection Configuration
+KPOPCNX Connection Configuration

Test command
Response
+KPOPCNX: <server>, <port>, <login>, <password>
OK
Syntax
AT+KPOPCNX=?
Read command
Response
+KPOPCNX: <server>, <port>, <login>, <password>
OK
Syntax
AT+KPOPCNX?
Write command
Syntax
AT+KPOPCNX=
<server>,<port>,<login>,
<password>
Reference
Response
OK
Parameters
<server>:
String type. Indicates the basic name of the POP3 server. This
name must either integrate POP3 URL schemes separate from the
server name by . or an IPV4 address.
e.g: pop.sagem.com or 80.156.25.12
<port>:
Numeric type. Indicates the POP3 server port.
<login>:
String type. Indicates the user name to be used during the POP3
connection.
<password>:
String type. Indicates the password to be used during the POP3

connection.
Notes
<server> string max length is 255.
<port> max value is 65535.
<login> and <password> strings max length is 24.
Usual POP3 default port is 110.
Once the command returns OK, the module is connected to the POP3 server.
This connection will be maintained until the KPOPQUIT command is sent or the
POP3 server closes the communication (Inactivity time out).
page 167/198
13.7.2.
+KPOPLIST: List Available Mail
+KPOPLIST List Available Mail

Test command
Syntax
AT+KPOPLIST=?
Response
ERROR
Read command
Syntax
AT+KPOPLIST?
Response
ERROR
Action command
Syntax
AT+KPOPLIST
Reference
Response
+KPOPLIST: <N> messages (<size> octets)
+KPOPLIST: <n1>,<size1>
OK
Parameters
<N>:
Numeric type. Indicates the number of available messages.
<size>:
Numeric type. Indicates the total size of the messages.
<n#>:
Numeric type. Indicates the index of the message.
<size#>:
Numeric type. Indicates the size in octet of the message #.
Notes
This command lists available mail in the POP3 server
page 168/198
13.7.3.
+KPOPREAD: Download A Mail
+KPOPREAD Download a Mail

Test command
Response
+KPOPREAD: <index>
OK
Syntax
AT+KPOPREAD=?
Read command
Response
+KPOPREAD: <index>
OK
Syntax
AT+KPOPREAD?
Write command
Syntax
AT+KPOPREAD=<index>
Response
CONNECT
Dataflow sent and ended with the character <ETX>
OK
+CME ERROR: <err>
NO CARRIER
Parameters
<index>:
Reference
Numeric type. Indicates the index of the mail to read.
Notes
Whether the asked mail ID is wrong the command returns the associated error
code nonetheless the connection with the server is maintained.
The end of the mail is defined by the <ETX> character. Therefore, if a <ETX> data
has to be transmitted on the payload data, it should be transmitted preceded by
the <DLE> character to give <DLE><ETX> and the <DLE> character will be
transmitted as <DLE><DLE>.
Whether an error is detected during the mail transfer, the connection with the
server is closed.
Hardware flow control is required for serial link
page 169/198
13.7.4.
+KPOPDEL: Delete A Mail
+KPOPDEL Delete a Mail

Test command
Syntax
AT+KPOPDEL=?
Response
+KPOPDEL: <index>
OK
Read command
Syntax
AT+KPOPDEL?
Response
+KPOPDEL: <index>
OK
Write command
Syntax
AT+KPOPDEL=<index>
Response
OK
Parameters
<index>:
Reference
Numeric type. Indicates the index of the mail to delete.
Notes
Whether the asked mail ID is wrong the command returns the associated error
code nonetheless the connection with the server is maintained.
The mail actually deleted by the server after the KPOPQUIT command.
page 170/198
13.7.5.
+KPOPQUIT: Close Connection
+KPOPQUIT Close Connection

Test command
Response
ERROR
Syntax
AT+KPOPQUIT=?
Read command
Response
ERROR
Syntax
AT+KPOPQUIT?
Action command
Syntax
AT+KPOPQUIT
Response
OK
Reference
Notes
This command closes the connection.
13.7.6.
Specific Error Code For POP3 Commands
As an error can occur while there is no command in progress, a no solicited notification is sent:
+KPOPNOTIF: <err>
For solicited and no solicited notifications, error codes will have the following meanings:
Code of <err>
Meaning
3100
Invalid POP server name.
3101
Not connected to the server.
3110
The login or the password got an invalid value or the server is

busy.
3111
Invalid mail index.
3140
The POP transfer failed due to connection (GSM or GPRS) fails.
3141
The SMTP transfer failed due to TCP connection troubles.
3142
The SMTP transfer failed due to server TCP connection error.
3143
The SMTP download failed due to Request time out.
3144
The SMTP transfer failed due to SMTP protocol error.
3145
The SMTP transfer failed due to DTR drop.
3149
The SMTP transfer download failed due to internal error.
page 171/198
14.
SPECIFIC FLASH COMMANDS
14.1. +KFLSHRD Command Read Flash command
AT+KFLSHRD : Read into flash module

Read command
Response
+KFLSH : <MAX_MEM>
OK (command supported)
or
command not supported)
Syntax
AT+KFLSHRD?
Write command
Response
Syntax
AT+KFLSHRD=<ADD>, CONNECT
OK
<NB_DATA>
+CME ERROR <err>
Parameters
<ADD> :
Decimal value value indicating the address of the first byte to read.
0 is for the first byte.
<NB_DATA> :
Decimal value indicating the number of bytes to read.
< MAX_MEM > : Constant decimal value (in byte) indicating the maximum space
available.
Reference
Notes
256K or 512K bytes are available.
The user can abort the downloading by DTR.
This command can read blocks of 1024 bytes.
Example
Read from address 589 to 1088 (length equals to 500 bytes) :
AT+KFLSHRD=589,500
CONNECT
500 bytes of DATA read from the flash
OK
page 172/198
14.2. +KFLSHWR Command Write Flash command
AT+KFLSHWR : Write into flash module

Read command
Response
+KFLSH : <MAX_MEM>
OK (command supported)
or
OK
Syntax
AT+KFLSHWR?
Write command
Syntax
AT+KFLSHWR=<ADD>
,<NB_DATA>,[<TIMEO
UT>]
Response
CONNECT
OK
+CME ERROR <err>
Parameters
<ADD> :
Decimal value indicating the address of the first byte to write.

0 is for the first byte.
<NB_DATA> :
Decimal value indicating the number of byte to write.
[<TIMEOUT>] : Decimal value indicating the time from connect message in
seconds before MT automatically closes the data mode connection.
By default, this time is 10s.
< MAX_MEM > : Constant decimal value (in byte) indicating the maximum space
available.
Reference
Notes
256K or 512K bytes are available.
The user can abort the downloading by DTR.
This command can write blocks of a maximum size of 1024 bytes.
If data are sending when module returns to command mode (Timeout action), no
data are stored, all data transmitted are lost.
Example
Write 1024 bytes from address 0. Timeout is set to 5s. 5s after connect message,
the module will return to command mode (even if data are transmitting) :
AT+KFLSHWR=0,1024,5
CONNECT
1024 bytes of DATA to write to the flash.
OK
page 173/198
APPENDIX
page 174/198
APPENDIX 1.
RESULT CODES AND UNSOLICITED MESSAGES

Numeric
Type
+CCCM: <ccm>
+CCWA: <number>,<type>,<class>[,<alpha>]
Verbose result code
like verbose
like verbose
Unsolicited
Unsolicited
+CLIP:
<number>,<type>[,<subaddr>,<satype>[,<alpha>]]
+CME ERROR: <err>
+CMS ERROR: <err>
like verbose
Unsolicited
like verbose
like verbose
+CMTI
+CBM
+CDS
+COLP: <number>,<type>[,<subaddr>
,<satype>[,<alpha>]]
+CR: <type>
+CREG: <stat>[,<lac>,<ci>]
+CRING: <type>
+CSSI: <code1>[,<index>]
+CSSU:
<code2>[,<index>[,<number>,<type>[,<subaddr>,<
satype>]]]
+CUSD: <m>[,<str>,<dcs>]
BUSY
CONNECT
like verbose
like verbose
like verbose
like verbose
Final
Final or
unsolicited
Unsolicited
Unsolicited
Unsolicited
Intermediate
like verbose
like verbose
like verbose
like verbose
like verbose
Intermediate
Unsolicited
Unsolicited
Intermediate
Unsolicited
like verbose
6
1
Unsolicited
Final
Intermediate
CONNECT <text>
manufacturer Intermediate
specific
ERROR
NO ANSWER
4
7
Final
Final
NO CARRIER
NO DIALTONE
OK
3
5
0
Final
Final
Final
RING
Unsolicited
Description
connection has been

established
like CONNECT but
manufacturer specific <text>
gives additional information
(e.g. connection data rate)
command not accepted
connection completion
timeout
connection terminated
no dial tone detected
acknowledges execution of a
command line
incoming call signal from
network
page 175/198
APPENDIX 2.
ERROR CODES
A2.1. CME ERROR codes

Code of
<err>
Meaning
0
1
2
3
4
5
10
11
12
13
14
15
16
17
18
20
21
22
23
24
25
26
27
30
31
32
40
41
42
43
44
45
46
47
100
Phone failure
No connection to phone
Phone-adapter link reserved
Operation not allowed
Operation not supported
PH-SIM PIN required
SIM not inserted
SIM PIN required
SIM PUK required
SIM failure
SIM busy
SIM wrong
Incorrect password
SIM PIN2 required
SIM PUK2 required
Memory full
Invalid index
Not found
Memory failure
Text string too long
Invalid characters in text string
Dial string too long
Invalid characters in dial string
No network service
Network timeout
network not allowed - emergency call only
network personalization PIN required
network personalization PUK required
network subset personalization PIN required
network subset personalization PUK required
service provider personalization PIN required
service provider personalization PUK required
corporate personalization PIN required
corporate personalization PUK required
Synchronization error, see details below for additional parameter
page 176/198
The error +CME ERROR: 100, 65xxx means a synchronization error, where 65xxx may be
65501
65502
65503
65504
65505
65506
65507
65508
65509
65510
65511
65512
content type unsupported

empty binary
too much objects
mobile memory full
unknown object
no activity log
reading error
writing error
invalid parameters
operation aborted by user
mobile busy
invalid index
65535
65534
65533
65532
invalid parameters
error allocating memory
write error
read error
65531
65530
65529
65528
65527
65526
65525
65524
65523
65522
65521
too many opened sessions

unknown session
too many (sub-)objects
object unknown
wap communication aborted
read error in multimedia processing
object type not supported
object format not supported
not enough memory for object upload
invalid object size
empty object
65001
65003
65004
65005
network problem
Wap session has been stopped
Memory full
Message too big
The error +CME ERROR: 100, 645xx means a protocol error, where 645xx may be :
+CME ERROR: 100,6450x

64500
64501
64502
64503
64504
64505
64506
64507
64540
64520
64521
64522
64523
64530
64531
FTP errors :
the file sent is corrupted
the file received is corrupted
the file does not exist
the file has not been deleted
an user abort is queried during the downloading
DTR drop from active to inactive during the data transfer
no FTP context is open
the directory does not exist
GPS_LTO_DATA_CORRUPTED
TCP errors :
DTR drop from active to inactive during the data transfer
data send by ktcpsnd are incoherent
no more data in tcp socket (ktcprcv)
TCP disconnection by the server not properly (ktcpsnd)
TCP and FTP errors :
The profile index doesnt exist
The active profile index doesnt exist
page 177/198
A2.2. CMS ERROR codes

Code of <err>
Meaning
1
8
10
21
27
28
29
30
38
41
42
47
50
69
81
95
96
97
98
Unassigned (unallocated) number

Operator determined barring
Call barred
Short message transfer rejected
Destination out of service
Unidentified subscriber
Facility rejected
Unknown subscriber
Network out of order
Temporary failure
Congestion
Resources unavailable, unspecified
Requested facility not subscribed
Requested facility not implemented
Invalid short message transfer reference value
Invalid message, unspecified
Invalid mandatory information
Message type non-existent or not implemented
Message not compatible with short message
protocol state
Information element non-existent or not
implemented
Protocol error, unspecified
Interworking, unspecified
Telematic interworking not supported
Short message Type 0 not supported
Cannot replace short message
Unspecified TP-PID error
Data coding scheme (alphabet) not supported
Message class not supported
Unspecified TP-DCS error
Command cannot be actioned
Command unsupported
Unspecified TP-Command error
TPDU not supported
SC busy
No SC subscription
SC system failure
Invalid SME address
Destination SME barred
SM Rejected-Duplicate SM
TP-VPF not supported
TP-VP not supported
D0 SIM SMS storage full
No SMS storage capability in SIM
Error in MS
Memory Capacity Exceeded
SIM Application Toolkit Busy
SIM data download error
Unspecified error cause
ME failure
SMS service of ME reserved
Operation not allowed
Operation not supported
Invalid PDU mode parameter
Invalid text mode parameter
SIM not inserted
99
111
127
128
129
130
143
144
145
159
160
161
175
176
192
193
194
195
196
197
198
199
208
209
210
211
212
213
255
300
301
302
303
304
305
310
page 178/198
311
312
313
314
315
316
317
318
320
321
322
330
331
332
340
500
SIM PIN required

PH-SIM PIN required
SIM failure
SIM busy
SIM wrong
SIM PUK required
SIM PIN2 required
SIM PUK2 required
Memory failure
Invalid memory index
Memory full
SMSC address unknown
no network service
Network timeout
NO +CNMA ACK EXPECTED
Unknown error
A2.3. GPRS ERROR codes

Code of <err>
Meaning
Errors related to a failure to perform an Attach

103
106
107
111
112
113
Illegal MS (#3)
Illegal ME (#6)
GPRS services not allowed (#7)
PLMN not allowed (#11)
Location area not allowed (#12)
Roaming not allowed in this location area (#13)
Errors related to a failure to activate a Context

132
133
134
service option not supported (#32)

requested service option not subscribed (#33)
service option temporarily out of order (#34)
Other GPRS Errors

149
148
150
PDP authentication failure

unspecified GPRS error
invalid mobile class
Values in parentheses are TS 24.008 cause codes.

Other values in the range 101 - 150 are reserved for use by GPRS.
page 179/198
APPENDIX 3.
PIN CODE REQUIREMENT
Most of the AT Commands are rejected (i.e. an error is returned to the DTE) if the PIN Code has not been
entered before (SIM requirement as described in [SIM]).
The list of the main commands which can be sent without code PIN is given below:
ATD (emergency calls)
AT+CPIN
ATI
AT+CGMI, AT+GMI
AT+CGMM, AT+GMM
AT+CGMR, AT+GMR
AT+CGSN, AT+GSN
AT+GCAP
AT+CPAS
AT+CIND
AT+CMEE
AT+KSREP
AT+IPR
ATE, ATV, ATS, ATZ
AT&F, AT&K, AT&D, AT&C
AT+CBST,
AT+CLVL
This list may be modified in case of special needs from the customer (contact SAGEM S.A. directly to
treat this kind of request)
Moreover, some of the commands required the PIN2 code. The list will be added in a next release of this
document. If need be, the reader can find the information in the [SIM] document.
page 180/198
APPENDIX 4.
GSM 27.010 MULTIPLEXING PROTOCOL
Main options
BASIC
ADVANCED
ADVANCED WITH ERROR RECOVERY
SABM
Frames
UA
DM
DISC
I (ERM)
RR (ERM)
RNR (ERM)
REJ (ERM)
UI (optional)
UIH
Multiplexer Controls DLC parameters negotiation (PN) (optional)
Power Saving control (PSC)
Multiplexer Close Down (CLD)
Test Command (Test)
Flow control On Command (Fcon)
Flow control Off Command (Fcoff)
Modem Status Command (MSC)
Non Supported Command response (NSC)
Remote Port Negotiation (RPN). (optional)
Remote Line Status command (RLS).(optional)
Service Negotiation Command (SNC)
Convergence Layers Type 1 - Unstructured Octet Stream
Type 2 - Unstructured Octet Stream with flow control,
break signal handling and transmission of v24 signal
states
Type 3 Uninterruptible Framed Data
Type 4 - Interruptible Framed Data
Link speed
CMUX parameters
Others
Maximum frame size

Acknowledgment timer
Maximum number of retransmissions
Response timer for control channel
Wake up response timer
Wake up procedure (see [RE2] sub clause 5.4.7)
Priority management
DLCI number limitation
YES
NO
NO
YES
YES
YES
YES
NO
NO
NO
NO
NO
YES
NO
YES
YES
YES
YES
YES
PARTIAL
YES
NO
NO
YES
YES
NO
NO
NO
9600, 19200, 38400,
57600, 115200
100
3
30
10
YES
YES
2
page 181/198
APPENDIX 5.
SET OF AT COMMANDS SUPPORTED BY THE HILO
HILO
The following table lists all the commands available for the SAGEM HiLo module.
Legend:
Command is Supported
Command is optional and may be activated or not based on the product definition discussed between
SAGEM and the customer
Command is supported and can be set according to different options
2.
2.1.
2.2.
2.3.
2.4.
2.5.
2.6.
2.7.
2.8.
2.9.
2.10.
2.11.
2.12.
2.13.
2.14.
2.15.
2.16.
2.17.
2.18.
2.19.
2.20.
2.21.
2.22.
3.
3.1.
3.2.
3.3.
3.4.
3.5.
3.6.
3.7.
3.8.
3.9.
3.10.
3.11.
3.12.
3.13.
3.14.
3.15.
V25TER AT COMMANDS
A/ Command : Repeat previous command line
+++ Command : Switch from data mode to command mode
O Command : Switch from command mode to data mode
E Command : Enable command echo
Q Command : Set result code presentation mode
S0 Command : Set number of rings before automatically answering the call
S2 Command : Set character for the escape sequence (data to command mode)
S3 Command : Write command line termination character
S4 Command : Set response formatting character
S5 Command : Write command line editing character
S7 Command : Set number of seconds to wait for connection completion
V Command : Set result code format mode
X Command : Set CONNECT result code format and call monitoring
&C Command : Set circuit Data Carrier Detect (DCD) function mode
&D Command : Set circuit Data Terminal Ready (DTR) function mode
&F Command : Restore manufactory configuration
&W Command : Save stored profile
&V Command : Display current configuration
+IPR Command : Set fixed local rate
B: Data rate selection
\N: Data transmission mode
&K Command : Flow control command
GENERAL AT COMMANDS
I Command : Request Identification Information
Z Command : Reset and restore user configuration
+CGMI Command : Request manufacturer identification
+CGMM Command : Request model identification
+CGMR Command : Request revision identification
+CGSN Command : Request product serial number identification (IMEI)
+KGSN Command : Request product serial number identification and SW Version
+KSGV Command : Read creation/modification date of SGV file
+CSCS Command : Set TE character Set
+CIMI Command : Request international subscriber identity
+GCAP Command : Request complete TA capability list
+GMI Command : Request manufacturer identification
+GMM Command : Request model identification
+GMR Command : Request revision identification
+GSN Command : Request product serial number identification (IMEI)

3.16.
4.
4.1.
4.2.
4.3.
4.4.
4.5.
4.6.
5.
5.1.
5.2.
5.3.
5.4.
5.5.
5.6.
5.7.
5.8.
5.9.
5.10.
5.11.
5.12.
5.13.
5.14.
5.15.
5.16.
5.17.
5.18.
5.19.
5.20.
5.21.
5.22.
5.23.
5.24.
5.25.
5.26.
5.27.
5.28.
5.29.
5.30.
5.31
6.
6.1.
6.2.
6.3.
6.4.
6.5.
6.6.
6.7.
6.8.
6.9.
6.10.
6.11.
6.12.
6.13.
6.14.
+CMUX Command : Multiplexing mode

CALL CONTROL COMMANDS
A Command : Answer a call
H Command : Disconnect existing connection
D Command : Mobile originated call to dial a number
D> : Direct dialing from phonebook
+CHUP Command : Hang up call
+CRC Command : Set Cellular Result Codes for incoming call indication
MOBILE EQUIPMENT CONTROL AND STATUS COMMANDS
+CACM Command : Accumulated call meter (ACM) reset or query
+CAMM Command : Accumulated call meter maximum (ACM max)
+CCWE Command : Call meter maximum event
+CALA Command : Set alarm time
+CALD Command : Delete alarm
+CCLK Command : Real time clock
*PSCPOF Command : Power off
+CIND Command : Indicator control (without <smsfull>)
+CLAC Command : List all available AT commands
+CMEC Command : Mobile Equipment control mode
+CFUN Command : Set Phone Functionality
+CMER Command : Mobile Equipment event reporting
+CMEE Command : Report Mobile Termination error
+CMUT Command : Mute control
+CPIN Command : Enter pin
+PSPRAS Command : PS Pin Remaining Attempt Status
+CPUC Command : Price per unit and currency table
+CPWC Command : Power class
*PSRDBS Command : Change Frequency Band
+CPAS Command : Phone Activity Status
+CSQ Command : Signal quality
+KRIC Command : Ring Indicator control
+KSREP Command : Mobile start-up reporting
+KGPIO Command : Hardware IO control
+KSLEEP Command : Power Management control
+KCELL Command : Cell Environnent Information
+CRMP Command : Ring Melody Playback
+CRMC Command : Ring Melody Control
*PSVMWN Command : Voice Message Waiting Notification
+CRSM Command : Restricted SIM Access
*PSPWM Command : PWM control
NETWORK SERVICE RELATED COMMANDS
+CAOC Command : Advice of charge Information
+CCFC Command : Call forwarding number and conditions control
+CCWA Command : Call waiting
+CHLD Command : Call hold and multiparty
+CUSD Command : Unstructured Supplementary Service Data
+CLCC Command : List current call
+CLCK Command : Facility lock
+CLIP Command : Calling line identification presentation
+CLIR Command : Calling line identification restriction
+CNUM Command : Subscriber number
+COLP Command : Connected line identification presentation
+COPN Command : Read operator name
+COPS Command : Operator selection
+CPOL Command : Preferred PLMN list
page 182/198

6.15.
6.16.
6.17.
7.
7.1.
7.2.
7.3
7.4.
8.
8.3.
8.4.
8.5.
8.6.
8.7.
8.8.
8.9.
8.10.
8.11.
8.12.
8.13.
8.14.
8.15.
8.16.
8.17.
8.18.
9.
9.1.
9.2.
9.3.
9.4.
9.5.
9.6.
9.7.
9.8.
9.9.
9.10.
9.11.
10
10.1.
10.2.
10.3.
10.4.
10.5.
10.6.
10.7.
10.8.
10.9.
11.
11.2.
11.3.
12
12.1.
12.2.
12.3.
12.4.
+CPWD Command : Change password

+CREG Command : Network registration
+CSSN Command : Supplementary service notification
PHONE BOOK MANAGEMENT
+CPBF Command : Find phonebook entries
+CPBR Command : Read current phonebook entries
+CPBS Command : Select phonebook memory storage
+CPBW Command : Write phonebook entries
SMS AT COMMANDS
+CMGD Command : Delete SMS message
+CMGF Command : Select SMS message format
+CMGL Command : List SMS messages from Preferred store
+CMGR Command : Read SMS message
+CMGS Command : Send SMS message
+CMGW Command : Write SMS message to memory
+CMSS Command : Send SMS message from storage
+CNMI Command : New SMS message indication
+CSCB Command : Select Cell broadcast message
+CSCA Command : SMS service center address
+CSMP Command : Set SMS text mode parameters
+CSMS Command : Select message service
+CPMS Command : Preferred message storage
+CSDH Command : Show text mode parameters
+CSAS Command : Save settings
+CRES Command : Restore settings
DATA AND FAX AT COMMANDS
+CBST Command : Select bearer service type
+CRLP Command : Select radio link protocol parameter
+CR Command : Service reporting control
+FCLASS Command : Fax : Select, read or test service class
+FAE Command : Data/Fax auto answer
+FRM Command : Receive data
+FTM Command : Transmit data
+FRS Command : Receive silence
+FTS Command : Stop transmission and wait
+FRH Command : Receive data using HDLC framing
+FTH Command : Transmit data using HDLC framing
GPRS AT COMMANDS
+CGATT Command : PS Attach or Detach
+CGACT Command : PDP context activate or deactivate
+CGCLASS Command : GPRS Mobile station class
+CGDCONT Command : Define PDP context
+CGDATA Command : Enter data state
+CGPADDR Command : Show PDP address
+CGQMIN Command : Quality of service profile (minimum acceptable)
+CGQREQ Command : Request quality of service profile
+CGREG Command : GPRS Network registration Status
SIM APPLICATION TOOLKIT AT COMMANDS
*PSSTKI Command : SIM ToolKit Interface configuration
*PSSTK Command : SIM Toolkit command
AUDIO COMMANDS
+CLVL Command : Loudspeaker volume level
+VIP Command : Initialize Voice parameters
+VTS Command : DTMF and Tone generation
+VTD Command : Tone duration
page 183/198

12.5.
12.6.
13.
13.2.1.
13.2.2.
13.2.3.
13.2.4.
13.3.1.
13.3.2.
13.3.3.
+VGR Command : Received Gain Selection

+VGT Command : Transmit Gain Selection
PROTOCOL SPECIFIC COMMANDS
+KCNXCFG : GSM Connection Configuration
+KCNXCFG : GPRS Connection Configuration
+KCNXTIMER : Connection Timer Configuration
+KCNXPROFILE : Connection current profile configuration
+KTCPCFG : TCP Connection Configuration
+KTCPCNX : TCP Connection
13.3.4. +KTCPRCV : Receiveing data through a TCP Connection
13.3.5. +KTCPSND : Sending data through a TCP Connection
13.3.6. +KTCPCLOSE : Closing current TCP operation
13.4.1.. +KFTPCFG : FTP Configuration
13.4.2
+KFTPRCV : Downloading FTP files
13.4.3. +KFTPSND : Uploading FTP files
13.4.4.. +KFTPDEL : Deleting FTP files
13.4.5. +KFTPCLOSE : Ending current FTP connection
13.5.1. +KUDPCFG : UDP Connection Configuration
13.5.2. +KUDPCLOSE : Closing current UDP operation
13.5.3. +KUDPSND : Sending data through a UDP Connection
13.5.4. +KUDPRCV : Receiveing data through a UDP Connection
13.6.1. +KSMTPPARAM: Connection Configuration
13.6.2. +KSMTPPWD: Authentication Configuration
13.6.3. +KSMTPTO: Receivers Configuration
13.6.4. +KSMTPSUBJECT: Subject Configuration
13.6.5. +KSMTPUL: Send Message
13.6.6. +KSMTPCLEAR: Clear Parameters
13.7.1. +KPOPCNX: Connection Configuration
13.7.2. +KPOPLIST: List Available Mail
13.7.3. +KPOPREAD: Download A Mail
13.7.4. +KPOPDEL: Delete a Mail
13.7.5. +KPOPQUIT: Close Connection
14.
Specific flash commands
14.1.
+KFLSHRD : Read data from the flash
14.2.
+KFLSHWR : Write data to the flash
page 184/198

page 185/198
APPENDIX 6.
HOW TO USE TCP SPECIFIC COMMANDS
at&k3
OK
AT+KCNXCFG=0,"GPRS","APN","log","passw
ord",0.0.0.0,0.0.0.0,0.0.0.0
OK
AT+KCNXTIMER=0,60,2,70
OK
AT+CGATT=1
OK
AT+KTCPCFG=0,0,"www.free.fr",80
OK
AT+KTCPCNX
OK
AT+KTCPSND=18
CONNECT
Data send
OK
AT+KTCPRCV=10000
CONNECT
HTTP/1.0 200 OK
Age: 0
Content-Type: text/html; charset=iso-8859-1
Server: Apache
Last-Modified: Wed, 24 Jan 2007 10:45:27 GMT
<!DOCTYPE HTML PUBLIC "-//W3C//DTD
HTML 4.01 Transitional//EN">
<html>
<head>
<title>Bienvenue sur Free :)</title>
<meta
http-equiv="Content-Type"
content="text/html; charset=iso-8859-1">
<META
HTTP-EQUIV="Refresh"
content="1200;URL=http://www.free.fr/">
a lot of data
OK
+KTCP_DATA: 1380
AT+KTCPRCV=10000
CONNECT
?cat=37"
c.free.fr/index.php?cat=188"
a lot of data
OK
+KTCP_DATA: 1380
AT+KTCPCLOSE=1
OK
class="linknav"
hardware flow control activation

Set GPRS parameters (APN, login, password)
Set Timers
Be sure to attach to network
Set TCP address and port number
Initiate the connection
Send TCP data after CONNECT. Do not forget the
ETX character. For example :
GET / HTTP/1.0
Read data (10000 bytes)
DATA read
+KTCP_DATA notification :
There are still 1380 bytes available on the socket
You can read again the data
DATA read
+KTCP_DATA notification :
There are still 1380 bytes available on the socket
Then you can close the socket
page 186/198
APPENDIX 7.
HOW TO USE FTP SPECIFIC COMMANDS
at&k3
OK
AT+KCNXCFG=0,"GPRS","APN","log","passw
ord",,,
OK
OK
AT+CGATT=1
OK
AT+KFTPCFG=0,"ftp.test.fr","userlogin","user
password",21,0
OK
AT+KFTPSND="","TestFile.txt"
CONNECT
Data send
OK
AT+KFTPRCV="","TestFile.txt"
CONNECT
F6E6E656374696F6E20746573742E
OK
Read the file called "TestFile.txt", data are sent and

end by ETX character.
AT+KFTPDEL="","TestFile.txt"
OK
Delete the file called "TestFile.txt"
AT+KFTPCLOSE
OK
Then you can close the connection
Set GPRS parameters (APN, login, password)

Set Timers
Be sure to attach to the network
Set FTP server address, login,password and port
number
Send data, store them in TestFile.txt file. After
CONNECT. Do not forget the ETX character.
page 187/198
APPENDIX 8.
HOW TO USE UDP SPECIFIC COMMANDS

at&k3
OK
AT+KCNXCFG=0,"GPRS","APN","log","passw Set GPRS parameters (APN, login, password)

ord",,,
OK
OK
Set Timers
AT+CGATT=1
OK
AT+KUDPCFG=0
+KUDPCFG: 2
OK
Create a new UDP socket (returned handle 2) with

the parameters associated to the connection profile
id number 0
AT+KUDPSND= 2,"82.234.17.52",32,18
CONNECT
Data send
OK
Send UDP data after CONNECT. Do not forget the

ETX character. For example :
GET / HTTP/1.0
+KUDP_DATA: 35
AT+KUDPRCV=2,"82.234.17.52",32,35
CONNECT
This is a simple UDP Protocol test.
OK
AT+KUDPRCV=2,"82.234.17.52",32,16
CONNECT
This is a simple
OK
+KUDP_DATA_MISSED: 19
AT+KUDPCLOSE
OK
Received notification that indicates the presence of

35 bytes in the socket.
Try to read 35 bytes from client port 32 and socket
2.
Same test but try to read 16 bytes (instead of 35)

from client port 32 and socket 2:
there are 19 unread bytes left and missed in the
UDP socket
Definitely close the UDP socket.
page 188/198
APPENDIX 9.
HOW TO USE MAIL SPECIFIC COMMANDS
A9.1. Mail Overview

The aim of this overview is to give several bases about how to build a mail body with or without attachment. For
a better understanding of mail transfer we recommend the reading of the following RFCs:
-
RFC 2822 or STD11: Internet Message Format.

RFC 2045: Multipurpose Internet Mail Extensions Part 1.
A9.1.1.
Mail Layout
Messages are divided into lines of characters. Theses lines are delimited with the two characters carriage-return
and line-feed; that is, the carriage return (CR) character (ASCII value 13) followed immediately by the line feed
(LF) character (ASCII value 10). The carriage-return/line-feed pair will be written in this document as CRLF.)
A message consists of header fields (collectively called "the header of the message") followed by a body. The
header is a sequence of lines of characters with special syntax that are used to describe the mail environment
(from whom, for whom, when, subject, body format ). The body is simply a sequence of characters that follows
the header and is separated from the header by an empty line (i.e., a line with nothing preceding the CRLF).
Note that, from the RFC, There are two limits that this standard places on the number of characters in a single
line. Each line of characters must be no more than 998 characters, and should be no more than 78 characters,
excluding the CRLF.
A9.1.2.
Mail Header
Header fields are lines composed of a field name, followed by a colon (":"), followed by a field body, and
terminated by CRLF. The header must only be composed of US-ASCII characters. Here is an example of field
presents in a mail header:
MIME-Version: 1.0<CRLF>
to: first.receiver@a.domain.com, second.receiver@a.domain.com<CRLF>
cc: first.copy@a.domain.com<CRLF>
from: sender@another.domain.com<CRLF>
subject: mail example<CRLF>
<CRLF>
The first field is to assume conformity with the MIME specification. The others fields will be parsed by the mail
application to present the message.
The header is closed by the last empty line, each character behind will be considered as part of the body.
page 189/198
A9.1.3.
Mail Body
The body of a message is simply lines of US-ASCII characters. The only two limitations on the body are as
follows:
- CR and LF MUST only occur together as CRLF; they MUST NOT appear independently in the
body.
- Lines of characters in the body MUST be limited to 998 characters, and SHOULD be limited to 78
characters, excluding the CRLF.
Note that mail attachment are encapsulated in the body an defined with specific header fields of the header, this
are called multipart message (cf. 3.2 MAIL ATTACHEMENT)
Here is the example of a simple mail:
to: first.receiver@a.domain.com<CRLF>
cc: first.copy@a.domain.com<CRLF>
subject: Simple mail example<CRLF>
<CRLF>
Hello,<CRLF>
<CRLF>
This is a mail example<CRLF>
<CRLF>
BR. <CRLF>
<CRLF>
A9.2. Mail Attachment

A9.2.1.
Multipart Message
As we have seen before, attachments are enclosed in the message body. This kind of message is called
multipart messages. Multipart messages are defined by a field in the header, the usual format is:
Content-type: multipart/mixed; boundary=<some text or hash><CRLF>
This field Content-Type defines the body as a suite of part separated by boundaries Note that with MIME 1.0
specifications the field Content-type can be omitted an the default value is Content-type : text/plain;
charset=us-ascii which means a simple body in US-ASCII characters.
Boundaries format is a double hyphen, --, followed by the boundary value defined in the header field and the
CRLF pair. In order to signify the end of the body, we use a special form of the boundary that format is a double
hyphen followed by the boundary value, another double hyphen and the CRLF pair.
Each part is structured as a regular internet message with a header that describes the content and the body. The
content of each part will also be described by the field Content-type.
page 190/198
Here is an example of two part message:
subject: Multipart mail example<CRLF>
Content-type: multipart/mixed; boundary=myboundary<CRLF>
<CRLF>
--myboundary<CRLF>
Content-type : text/plain; charset=us-ascii<CRLF>
<CRLF>
this is the first part<CRLF>
<CRLF>
--myboundary<CRLF>
<CRLF>
This is the second part<CRLF>
<CRLF>
--myboundary--<CRLF>
In the first part the content type of the body is specified and, as the second part does not specify anything, both
are US-ASCII text.
A9.2.2.
Attachment Format
As the body must only embed US-ASCII characters, the payload attached might be encoded. The encoding
algorithm will be signified in the parts header with the field Content-transfer-encoding. The commonly used
encoding algorithm is Base64
The MIME type of attachment is described by the Content-type field in the parts header. For example, we want
to send the image file landscape.jpg, we will build the following message:
subject: Image example<CRLF>
<CRLF>
--myboundary<CRLF>
Content-type : text/plain; charset=us-ascii<CRLF>
<CRLF>
Hello,<CRLF>
Here is the image I was talking about :<CRLF>
<CRLF>
--myboundary<CRLF>
Content-type: image/jpeg; name="landscape.jpg"<CRLF>
Content-transfer-encoding: base64<CRLF>
<CRLF>
base64 encoded file<CRLF>
<CRLF>
page 191/198
A9.3. How To Use SMTP Specific Commands

A9.3.1.
Simple Mode
We send the following mail to receiver.addr@domain and copy.addr@domain :

Hello,<CRLF>
<CRLF>
<CRLF>
BR. <CRLF>
<CRLF>
And another mail to receiver.addr@domain only:
Hello,<CRLF>
<CRLF>
I forgot to tell<CRLF>
<CRLF>
at&k3
OK
AT+KCNXCFG=0,"GPRS","APN","log","password" Set GPRS parameters (APN, login, password)

,,,
OK
OK
Set Timers
AT+KCNXPROFILE=0
OK
Activate GPRS profile
AT+CGATT=1
OK
AT+KSMTPPARAM=smtp.domain.com, 580,
sender.addr@domain
+KSMTPPARAM: smtp.domain.com, 580,
sender.addr@domain
OK
Fill in the connection parameters, the SMTP server

URL is smtp.domain.com at port 580.
AT+KSMTPPWD=mylogin,mypassword
+KSMTPPWD: mylogin, mypassword
OK
Fill in the authentication parameters.
AT+KSMTPTO=receiver.addr@domain,,copy. Fill in the receiver parameters, one direct et a copy.

addr@domain,
+KSMTPTO:
receiver.addr@domain,,copy.addr@domain,
OK
AT+KSMTPSUBJECT=Simple mail example
+KSMTPSUBJECT: Simple mail example
OK
Fill in the subject parameter.
page 192/198
AT+KSMTPUL=1,46
Send the mail in simple mode, we send 46 bytes to

the module.
The module connect the SMTP server and send the
header:
CONNECT
<CRLF>
Hello,<CRLF>
<CRLF>
<CRLF>
BR. <CRLF>
<CRLF>
<ETX>
OK
to: receiver.addr@domain<CRLF>
cc: copy.addr@domain<CRLF>
from: sender.addr@domain<CRLF>
subject: Simple mail example<CRLF>
<CRLF>
The mail is successfully sent.

We prepare to send the second mail
AT+KSMTPTO=receiver.addr@domain,,,
+KSMTPTO: receiver.addr@domain,,,
OK
Fill in the receiver parameter.
AT+KSMTPSUBJECT=Second mail example

+KSMTPSUBJECT: Second mail example
OK
Send the mail in simple mode, we send 36 bytes to

the module.
header:
AT+KSMTPUL=1,36
CONNECT
<CRLF>
Hello,<CRLF>
<CRLF>
I forgot to tell<CRLF>
<CRLF>
<ETX>
OK
AT+KSMTPCLEAR
OK
subject: Second mail example<CRLF>
<CRLF>

Clear the parameters set.
page 193/198
A9.3.2.
Complex Mode
We send a mail to receiver.addr@domain with the image landscape.jpg attached. In complex mode the first part
of the header is handled by the module thus we will send the following data through the KSMTPUL Command :
<CRLF>
--myboundary<CRLF>
<CRLF>
Hello,<CRLF>
<CRLF>
<CRLF>
--myboundary<CRLF>
Content-type: image/jpeg; name="landscape.jpg"<CRLF>
<CRLF>
AR15qfGTmlk[...]AAADJqdf462==<CRLF>
<CRLF>
<ETX>
Note that the encoded file in this example is not complete. We assume that the final size of the whole data block
to send is 15360.
at&k3
OK

,,,
OK
OK
Set Timers
AT+KCNXPROFILE=0
OK
AT+CGATT=1
OK
AT+KSMTPPARAM=smtp.domain.com, 580,
sender.addr@domain
+KSMTPPARAM: smtp.domain.com, 580,
sender.addr@domain
OK
Fill in the connection parameters, the SMTP server

URL is smtp.domain.com at port 580.
AT+KSMTPPWD=mylogin,mypassword
+KSMTPPWD: mylogin, mypassword
OK
Fill in the authentication parameters.
AT+KSMTPTO=receiver.addr@domain,,,
+KSMTPTO: receiver.addr@domain,,,
OK
Fill in the receiver parameters, one direct et a copy.
AT+KSMTPSUBJECT=Complex mail example

+KSMTPSUBJECT: Complex mail example
OK
page 194/198
AT+KSMTPUL=0,15360
Send the mail in simple mode, we send 15360 bytes

to the module.
first part of the header:
subject: Complex mail example<CRLF>
CONNECT
Content-type:multipart/mixed;
boundary=myboundary<CRLF>
<CRLF>
--myboundary<CRLF>
<CRLF>
Hello,<CRLF>
<CRLF>
<CRLF>
--myboundary<CRLF>
Content-type: image/jpeg;
name="landscape.jpg"<CRLF>
<CRLF>
AR15qfGTmlk[...]AAADJqdf462==<CRLF>
<CRLF>
<ETX>
OK
AT+KSMTPCLEAR
OK

Clear the parameters set.
A9.4. How To Use POP3 Specific Commands

at&k3
OK

,,,
OK
OK
Set Timers
AT+KCNXPROFILE=0
OK
AT+CGATT=1
OK
page 195/198
AT+KPOPCNX=pop.domain.com, 580,
mylogin,mypassword
+KPOPCNX: pop.domain.com, 580,
mylogin,mypassword
OK
AT+POPLIST
+KPOPLIST: 7 messages (214222 octets)
+KPOPLIST: 1,1566
+KPOPLIST: 2,146257
+KPOPLIST: 3,7081
+KPOPLIST: 4,1190
+KPOPLIST: 5,28034
+KPOPLIST: 6,1191
+KPOPLIST: 7,28036
OK
Connect the POP3 server URL is pop.domain.com

at port 580.
Connection established
Checkout available messages.
Download mail #6
AT+POPREAD=6
CONNECT
X-Apparently-To:
receiver.addr@domain
via
217.146.182.108; Fri, 04 May 2007 01:48:13 0700<CRLF>
Note that header is modified by the SMTP server,
[...]
this might induce heavier payload.
from: mailmodule@yahoo.fr<CRLF>
subject: TEST SMTP in MODE : SIMPLE<CRLF>
to: receive.addrr@domain <CRLF>
cc: copy.addr@domain<CRLF>
Start of body
<CRLF>
<CRLF>
Hello. This is a dummy MAIL text.<CRLF>
If you read this, test is successful<CRLF>
<CRLF>
<ETX>
OK
AT+KPOPDEL=6
OK
Delete mail #6
AT+POPLIST
+KPOPLIST: 6 messages (213031 octets)
+KPOPLIST: 1,1566
+KPOPLIST: 2,146257
+KPOPLIST: 3,7081
+KPOPLIST: 4,1190
+KPOPLIST: 5,28034
+KPOPLIST: 7,28036
OK
Check out list again:
AT+KPOPQUIT
OK
The mail #6 has been marked as deleted
Close the connection with the POP3 server.

Connection closed
page 196/198
APPENDIX 10.
HOW TO USE SIM TOOLKIT

Enter PIN CODE
AT+CPIN="1234"
OK
*PSSTK:"SETUP MENU",1,4,"SIMMAX",0,0,1,0,0,6
AT*PSSTK="SETUP MENU",1,0
OK
*PSSTK: "END SESSION"
AT*PSSTK="GET ITEM LIST",6
*PSSTK:
"GET
Number",0,0,0
ITEM
URC for Session Status : End of STK session

Use GET ITEM LIST command to get the list of
items
LIST",1,16,4,"Switch Item 1: Switch number.
*PSSTK: "GET ITEM LIST",2,17,4,"Utilities",0,0,0

*PSSTK:
"GET
Switch",0,0,0
Soon the module sends an unsolicited message

*PSSTK:SETUP MENU , it is the STK Setup menu
There are 6 items in STK menu.
Give response to URC "SETUP MENU". "1" is the
Command Number. Send Terminal response, OK
Item 2: Utilities
LIST",3,18,4,"Auto Item 3: Auto Switch
ITEM
*PSSTK: "GET ITEM LIST",4,19,4,"Hidden Phone Item 4:Hidden Phone Book

Book",0,0,0
*PSSTK: "GET ITEM LIST",5,20,4,"IP Call",0,0,0
*PSSTK:
"GET
Info.",0,0,0
ITEM
Item 5: IP Call
LIST",6,22,4,"Product Item 6:Product Info
OK
AT*PSSTK="MENU SELECTION",22
Select menu 6, whose ItemIdentifier is 22. After this

operation, it will enter into submenu of menu item 6.
OK
Totally 2 menus in this level.
*PSSTK: "SELECT ITEM",0,0,"",0,0,1,0,0,2
AT*PSSTK="GET ITEM LIST",2
Item 1 is Customer service, no more sub menus
*PSSTK:
"GET
service",0,0,0
ITEM
LIST",1,1,4,"Customer
Item 2 is LOT, no more sub menus
*PSSTK: "GET ITEM LIST",2,2,4,"LOT",0,0,0

OK
AT*PSSTK="SELECT ITEM",1,1,0,0
Select item 1
ItemIdentifier is 1
Customer
service,
whose
OK
URC DISPLAY TEXT info will be showed with
*PSSTK:
"DISPLAY Customer information, http://www.sim-max.com/
You have to use DISPLAY TEXT command to give
TEXT",1,0,1,0,4,"http://www.sim-max.com/",0,0
a response to STK.
AT*PSSTK="DISPLAY TEXT",1,0
OK
URC for session status.
page 197/198
*PSSTK: "END SESSION"
page 198/198
APPENDIX 11.
HOW TO SWITCH FROM DATA MODE TO COMMAND MODE
AT+CPIN=0000
OK
Enter PIN CODE
AT+CGDCONT=1,"IP","APN","0.0.0.0",0,0
OK
Configure the GPRS parameters
atd*99***1#
Dial up to have a data connection
CONNECT
~}#!}!}
}
}2}!}$}%}"}&}
}*}
}
}#}$#kZ~~}#!}!}!} }2}!}$}%}"}&} }*} } DATA exchanges (PPP)
}#}$#dJ~~}#!}!}"} }2}!}$}%}"}&} }*} }
}#}$#uz~
----------------------------------------------------------------- > Send +++ characters
OK
Switch to command mode is done
at
OK
It is possible to use AT commands
ato
CONNECT
~}#!}!}#}
}2}!}$}%}"}&}
}*}
}#}$#zj~~}#!}!}$} }2}!}$}%}"}&} }*}
}#}$#W}:~~}#!}!}%} }2}!}$}%}"}&} }*}
}#}$#X}*~~}#!}!}&} }2}!}$}%}"}&} }*}
}#}$#I:~~}#!}!}'} }2}!}$}%}"}&} }*}
}#}$#F*~~}#!}!}(} }2}!}$}%}"}&} }*}
}#}$#}3~~}#!}!})} }2}!}$}%}"}&} }*}
}#}$#}<~~}#!}!}*} }2}!}$}%}"}&} }*}
}#}$#}-~
NO CARRIER
Switch to data mode, resume the data connection

}
}
}
}
} DATA exchanges continue
}
}
}
End of connection

AT Commands PDF

Uploaded by

Copyright:

Available Formats

AT Commands PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

AT Commands PDF

Uploaded by

Copyright:

Available Formats

page 1/198

Direction des Recherches et des Dveloppements

NOTE D'ETUDE / TECHNICAL DOCUMENT

NOTE D'ETUDE / TECHNICAL DOCUMENT

FICHE RECAPITULATIVE / SUMMARY SHEET

URD1 OTL 5635.1

A/ Command : Repeat previous command line........................................................................................12

I Command : Request Identification Information.....................................................................................25

CALL CONTROL COMMANDS..............................................................................................................................34

A Command : Answer a call ..........................................................................................................................34

MOBILE EQUIPMENT CONTROL AND STATUS COMMANDS......................................................................39

+CACM Command : Accumulated call meter (ACM) reset or query....................................................39

NETWORK SERVICE RELATED COMMANDS...................................................................................................66

+CAOC Command : Advice of charge information..................................................................................66

PHONE BOOK MANAGEMENT .............................................................................................................................84

+CPBF Command : Find phonebook entries ............................................................................................84

SMS AT COMMANDS ..............................................................................................................................................88

Preliminary comment ......................................................................................................................................88

DATA AND FAX AT COMMANDS........................................................................................................................107

+CBST Command : Select bearer service type ......................................................................................107

SIM APPLICATION TOOLKIT AT COMMANDS ...........................................................................................128

+CLVL Command : Loudspeaker volume level..................................................................................133

PROTOCOL SPECIFIC COMMANDS .............................................................................................................139

SPECIFIC FLASH COMMANDS.......................................................................................................................171

+KFLSHRD Command Read Flash command...................................................................................171

RESULT CODES AND UNSOLICITED MESSAGES ................................................................174

CME ERROR codes ...................................................................................................................................175

PIN CODE REQUIREMENT...........................................................................................................179

SET OF AT COMMANDS SUPPORTED BY THE HILO

HOW TO USE TCP SPECIFIC COMMANDS .............................................................................185

HOW TO USE FTP SPECIFIC COMMANDS ..............................................................................186

HOW TO USE UDP SPECIFIC COMMANDS .............................................................................187

HOW TO USE MAIL SPECIFIC COMMANDS ............................................................................188

HOW TO USE SIM TOOLKIT ........................................................................................................196

HOW TO SWITCH FROM DATA MODE TO COMMAND MODE ...........................................198

Scope of the document

This document specifies the AT commands of HILO modules.

3GPP 22.022 (3.1.0) - Personalization of Mobile Equipment (ME); Mobile functionality

Interface Requirements specification for AT Commands of the SIM Application Toolkit

Specification of the Subscriber Identity Module Mobile Equipment (SIM ME)

Module HILO Hardware specification

The equipment returns the list of

1.4.2. Possible answers

Extended Error message (see AT+CMEE):

+CME ERROR: <n>

Numeric Mode (see ATV) :

<n> with: <n> = 0 OK or <n> is an error code

1.4.3. Multiple AT commands on the same command line

1.4.4. AT Commands on separate lines

Modification of this document

A/ Command : Repeat previous command line

A/ Repeat previous command line

+++ Command : Switch from data mode to command mode

+++ Switch from data mode to command mode

O Command : Switch from command mode to data mode

ATO Switch from command mode to data mode

If connection is not successfully resumed

E Command : Enable command echo

ATE Enable command echo