Quectel EG060V-EA AT Commands Manual V1.0

EG060V-EA
AT Commands Manual
LTE-A Module Series
Version: 1.0
Date: 2021-03-08
Status: Released
www.quectel.com
LTE-A Module Series
EG060V-EA AT Commands Manual
Our aim is to provide customers with timely and comprehensive service. For any assistance,
please contact our company headquarters:
Quectel Wireless Solutions Co., Ltd.

Building 5, Shanghai Business Park Phase III (Area B), No.1016 Tianlin Road, Minhang District, Shanghai
200233, China
Tel: +86 21 5108 6236
Email: info@quectel.com
Or our local office. For more information, please visit:

http://www.quectel.com/support/sales.htm.
For technical support, or to report documentation errors, please visit:

http://www.quectel.com/support/technical.htm
Or email to support@quectel.com.
General Notes
Quectel offers the information as a service to its customers. The information provided is based upon
customers’ requirements. Quectel makes every effort to ensure the quality of the information it makes
available. Quectel does not make any warranty as to the information contained herein, and does not
accept any liability for any injury, loss or damage of any kind incurred by use of or reliance upon the
information. All information supplied herein is subject to change without prior notice.
Disclaimer
While Quectel has made efforts to ensure that the functions and features under development are free
from errors, it is possible that these functions and features could contain errors, inaccuracies and
omissions. Unless otherwise provided by valid agreement, Quectel makes no warranties of any kind,
implied or express, with respect to the use of features and functions under development. To the maximum
extent permitted by law, Quectel excludes all liability for any loss or damage suffered in connection with
the use of the functions and features under development, regardless of whether such loss or damage
may have been foreseeable.
Duty of Confidentiality
The Receiving Party shall keep confidential all documentation and information provided by Quectel,
except when the specific permission has been granted by Quectel. The Receiving Party shall not access
or use Quectel’s documentation and information for any purpose except as expressly provided herein.
Furthermore, the Receiving Party shall not disclose any of the Quectel's documentation and information
to any third party without the prior written consent by Quectel. For any noncompliance to the above
requirements, unauthorized use, or other illegal or malicious use of the documentation and information,
Quectel will reserve the right to take legal action.
Quectel_EG060V-EA_AT_Commands_Manual 1 / 161
LTE-A Module Series
Copyright
The information contained here is proprietary technical information of Quectel. Transmitting, reproducing,
disseminating and editing this document as well as using the content without permission are forbidden.
Offenders will be held liable for payment of damages. All rights are reserved in the event of a patent grant
or registration of a utility model or design.
Copyright © Quectel Wireless Solutions Co., Ltd. 2021. All rights reserved.
LTE-A Module Series
About the Document
Revision History
Version Date Author Description
Paddy LI/Igni LI/

- 2021-01-28 Creation of the document
Ethan BI/Martin WANG
Paddy LI/Igni LI/
1.0 2021-03-08 First official release
Ethan BI/Martin WANG
LTE-A Module Series
Contents
About the Document ................................................................................................................................... 3

Contents ....................................................................................................................................................... 4
Table Index ................................................................................................................................................... 8
1 Introduction .......................................................................................................................................... 9
1.1. AT Command Syntax ................................................................................................................ 9
1.1.1. Definitions ........................................................................................................................ 9
1.1.2. AT Command Syntax....................................................................................................... 9
1.2. AT Command Responses ....................................................................................................... 11
1.3. Supported Character Sets ....................................................................................................... 11
1.4. AT Command Interface ........................................................................................................... 11
1.5. Unsolicited Result Code .......................................................................................................... 11
1.6. Declaration of AT Command Examples .................................................................................. 12
2 General Commands ........................................................................................................................... 13

2.1. ATI Display Product Identification Information...................................................................... 13
2.2. AT+GMI Request Manufacturer Identification ...................................................................... 14
2.3. AT+GMM Request Model Identification ................................................................................ 14
2.4. AT+GMR Request Revision Identification of Software Release .......................................... 15
2.5. AT+CGMI Request Manufacturer Identification.................................................................... 15
2.6. AT+CGMM Request Model Identification ............................................................................. 16
2.7. AT+CGMR Request Revision Identification of Software Release ........................................ 16
2.8. AT+GSN Request International Mobile Equipment Identity (IMEI) ...................................... 17
2.9. AT+CGSN Request International Mobile Equipment Identity (IMEI) .................................... 18
2.10. ATQ Set Result Code Presentation Mode ............................................................................ 18
2.11. ATV TA Response Format .................................................................................................... 19
2.12. ATE Set Command Echo Mode............................................................................................ 20
2.13. AT+CFUN Set UE Functionality............................................................................................ 21
2.14. AT+CMEE Configure Error Message Format ....................................................................... 22
2.15. AT+CSCS Select TE Character Set ..................................................................................... 23
2.16. AT+QURCCFG Configure URC Output Port ........................................................................ 24
3 Status Control Commands ............................................................................................................... 26

3.1. AT+CPAS Mobile Equipment Activity Status ........................................................................ 26
3.2. AT+CEER Report Extended Error ........................................................................................ 27
3.3. AT+QCFG Extended Configuration Settings ........................................................................ 28
3.3.1. AT+QCFG=" usbnet" USB Network Card Configuration ............................................ 29
3.3.2. AT+QCFG="devmode" Device Mode Configuration ..................................................... 29
3.3.3. AT+QCFG="IMS" IMS Service Configuration ............................................................. 30
3.3.4. AT+QCFG="nwscanmode" Configure Network Search Mode ................................... 31
3.3.5. AT+QCFG="band" Band Configuration ...................................................................... 32
3.3.6. AT+QCFG="servicedomain" Configure Service Domain ........................................... 33
3.3.7. AT+QCFG="tone/incoming" Enable/Disable Ringing Tone........................................ 34
LTE-A Module Series
4 (U)SIM Related Commands ............................................................................................................... 36

4.1. AT+CIMI Request International Mobile Subscriber Identity (IMSI) ...................................... 36
4.2. AT+CLCK Facility Lock ......................................................................................................... 37
4.3. AT+CPIN Enter PIN .............................................................................................................. 39
4.4. AT+CPWD Change Password .............................................................................................. 41
4.5. AT+CSIM Generic (U)SIM Access ....................................................................................... 42
4.6. AT+CRSM Restricted (U)SIM Access .................................................................................. 43
4.7. AT+QCCID Show ICCID ....................................................................................................... 44
4.8. AT+QSIMDET (U)SIM Card Detection ................................................................................. 45
4.9. AT+QSIMSTAT (U)SIM Insertion Status Report .................................................................. 46
5 Network Service Commands ............................................................................................................ 48

5.1. AT+COPS Operator Selection .............................................................................................. 48
5.2. AT+CREG Network Registration Status ............................................................................... 50
5.3. AT+CSQ Signal Quality Report ............................................................................................ 52
5.4. AT+CPOL Preferred Operator List ....................................................................................... 53
5.5. AT+COPN Read Operator Names ....................................................................................... 54
5.6. AT+CTZU Automatic Time Zone Update.............................................................................. 55
5.7. AT+CTZR Time Zone Reporting ........................................................................................... 56
5.8. AT+QSPN Query the Service Provider Name ...................................................................... 57
5.9. AT+QNWINFO Query Network Information ......................................................................... 58
5.10. AT+QNWLOCK="common/lte" Network Locking Configuration ........................................... 59
5.11. AT+QENG Query Primary Serving Cell and Neighbour Cell Information ............................ 60
5.12. AT+QCAINFO Query Carrier Aggregation Parameters ....................................................... 65
6 Call Related Commands .................................................................................................................... 67

6.1. AT+QECCNUM Configure Emergency Call Numbers ......................................................... 67
7 Phonebook Commands ..................................................................................................................... 69

7.1. AT+CNUM Subscriber Number ............................................................................................ 69
7.2. AT+CPBS Select Phonebook Memory Storage ................................................................... 70
7.3. AT+CPBF Find Phonebook Entries ...................................................................................... 71
7.4. AT+CPBR Read Phonebook Entries .................................................................................... 72
7.5. AT+CPBW Write Phonebook Entry ...................................................................................... 73
8 Short Message Service Commands ................................................................................................. 75

8.1. AT+CSMS Select Message Service ..................................................................................... 75
8.2. AT+CMGF Message Format................................................................................................. 76
8.3. AT+CSCA Service Center Address ...................................................................................... 77
8.4. AT+CPMS Preferred Message Storage ............................................................................... 78
8.5. AT+CMGD Delete Message ................................................................................................. 80
8.6. AT+CMGL List Messages ..................................................................................................... 81
8.7. AT+CMGR Read Message ................................................................................................... 85
8.8. AT+CMGS Send Message ................................................................................................... 88
8.9. AT+CMMS Send More Messages ........................................................................................ 90
8.10. AT+CMGW Write Message to Memory ................................................................................ 91
LTE-A Module Series
8.11. AT+CMSS Send Message from Storage .............................................................................. 93

8.12. AT+CSCB Select Cell Broadcast Message Types ............................................................... 95
8.13. AT+CSDH Show SMS Text Mode Parameters .................................................................... 96
8.14. AT+CSMP Set SMS Text Mode Parameters........................................................................ 97
9 Packet Domain Commands .............................................................................................................. 99

9.1. AT+CGATT Attachment or Detachment of PS ..................................................................... 99
9.2. AT+CGDCONT Define PDP Context.................................................................................. 100
9.3. AT+CGACT Activate or Deactivate PDP Context .............................................................. 102
9.4. AT+CGPADDR Show PDP Address .................................................................................. 103
9.5. AT+CGCLASS GPRS Mobile Station Class....................................................................... 105
9.6. AT+CGREG GPRS Network Registration Status ............................................................... 106
9.7. AT+CGEREP Packet Domain Event Reporting ................................................................. 107
9.8. AT+CGSMS Select Service for MO SMS Messages ......................................................... 109
9.9. AT+CEREG EPS Network Registration Status .................................................................. 110
9.10. AT+QGDCNT Packet Data Counter ................................................................................... 111
9.11. AT+QAUGDCNT Auto Save Packet Data Counter ............................................................ 113
9.12. AT+AUTOAPN Auto-configure APN ................................................................................... 114
9.13. AT+ZGDCONT Define PDP Context .................................................................................. 115
9.14. AT+ZGACT Activate or Deactivate PDP Context ............................................................... 116
9.15. AT+ZGPADDR Show PDP Address ................................................................................... 118
9.16. AT+QICSGP Define PDP Context ...................................................................................... 119
9.17. AT+QNETDEVCTL Activate or Deactivate PDP Context................................................... 120
9.18. AT+QNETDEVSTATUS Show PDP Relevant Information ................................................ 122
10 Audio Commands ............................................................................................................................ 124

10.1. AT+CLVL Loudspeaker Volume Level Selection ............................................................... 124
10.2. AT+QLDTMF Play Local DTMF .......................................................................................... 124
10.3. AT+QAUDLOOP Enable/Disable Audio Loop Test ............................................................ 126
10.4. AT+QDAI Digital Audio Interface Configuration ................................................................. 126
10.5. AT+QSIDET Set Side Tone Gain in Current Mode ............................................................ 128
10.6. AT+QSLIC Enable/Disable SLIC ........................................................................................ 129
10.7. AT+QAUDMOD Set Audio Mode ........................................................................................ 130
10.8. AT+QMIC Set Uplink Gains of Microphone ........................................................................ 130
10.9. AT+QRXGAIN Set Downlink Gains of RX .......................................................................... 131
10.10. AT+VTS DTMF and Tone Generation ................................................................................ 132
11 Hardware Related Commands ........................................................................................................ 134

11.1. AT+CCLK Clock .................................................................................................................. 134
11.2. AT+QSCLK Enable/Disable Low Power Mode ................................................................... 135
11.3. AT+QPOWD Power off ....................................................................................................... 135
11.4. AT+QADC Read ADC Value ................................................................................................. 136
12 Appendix A References................................................................................................................... 138

12.1. References ............................................................................................................................ 138
12.2. Summary of CME ERROR Codes......................................................................................... 143
LTE-A Module Series
12.3. Summary of CMS ERROR Codes......................................................................................... 145

12.4. Summary of URC................................................................................................................... 147
12.5. SMS Character Sets Conversions......................................................................................... 148
12.6. Release Cause Text List of AT+CEER ................................................................................. 154
LTE-A Module Series
Table Index
Table 1: Types of AT Commands .............................................................................................................. 10

Table 2: ATV0&ATV1 Result Codes Equivalence and Brief Description .................................................. 20
Table 3: Related Documents.................................................................................................................... 138
Table 4: Terms and Abbreviations ........................................................................................................... 138
Table 5: Different Coding Schemes of +CME ERROR: <err> ................................................................. 144
Table 6: Different Coding Schemes of +CMS ERROR: <err> ................................................................. 146
Table 7: Summary of URC ....................................................................................................................... 147
Table 8: The Way of SMS Text Input or Output....................................................................................... 148
Table 9: The Input Conversions Table (DCS=GSM 7-bit and AT+CSCS="GSM") ................................. 149
Table 10: The Output Conversions Table (DCS=GSM 7-bit and AT+CSCS="GSM") ............................ 150
Table 11: GSM Extended Characters ...................................................................................................... 150
Table 12: The Input Conversions Table (DCS=GSM 7-bit and AT+CSCS="IRA") ................................. 151
Table 13: IRA Extended Characters ........................................................................................................ 152
Table 14: The Output Conversions Table (DCS=GSM 7-bit and AT+CSCS="IRA") .............................. 153
Table 15: GSM Extended Characters ...................................................................................................... 153
Table 16: Release Cause Text List of AT+CEER .................................................................................... 154
LTE-A Module Series
1 Introduction
This document presents the AT Command Set applicable to the Quectel LTE-A module EG060V-EA.
1.1. AT Command Syntax
1.1.1. Definitions
⚫ <CR> Carriage return character.

⚫ <LF> Line feed character.
⚫ <...> Parameter name. Angle brackets do not appear on the command line.
⚫ [...] Optional parameter of a command or an optional part of TA information response.
Square brackets do not appear on the command line. When an optional parameter is
not given in a command, the new value equals to its previous value or the default
settings, unless otherwise specified.
⚫ Underline Default setting of a parameter.
1.1.2. AT Command Syntax
All command lines must start with AT or at and end with <CR>. Information responses and result codes
always start and end with a carriage return character and a line feed character:
<CR><LF><response><CR><LF>. Throughout this document, only the commands and responses are
presented, while carriage return and line feed characters are deliberately omitted.
The AT Command Set applicable to EG060V-EA consists of AT commands defined in 3GPP TS 27.007,
3GPP TS 27.005 and ITU-T recommendation V.25ter and the AT Commands developed by Quectel.
These AT commands fall into three categories syntactically: basic, S parameter, and extended.
⚫ Basic Syntax
These AT commands have the format of AT<x><n>, or AT&<x><n>, where <x> is the command, and
<n> is/are the argument(s) for that command. An example of this is ATE<value>, which tells the DCE
whether received characters should be echoed back to the DTE according to the value of <value>. <n> is
optional and a default will be used if it is omitted.
⚫ S Parameter Syntax
These AT commands have the format of ATS<n>=<m>, where <n> is the index of the S register to set,
LTE-A Module Series
and <m> is the value to assign to the S register.
⚫ Extended Syntax
These AT commands have four types as explained in the following table:
Table 1: Types of AT Commands
Command Type Syntax Description
Test the existence of corresponding Write

Test Command AT+<cmd>=? Command and to give information about
the type, value, or range of its parameter.
Check the current parameter value of a
Read Command AT+<cmd>?
corresponding Write Command.
Write Command AT+<cmd>=<p1>[,<p2>[,<p3>[...]]] Set user-definable parameter value.
Return a specific information parameter or

Execution Command AT+<cmd>
perform a specific action.
Multiple AT commands can be placed in a single line using a semi-colon (;) between commands. In such
cases, only the first command should have the AT prefix. Commands can be in upper or lower cases.
Spaces should be ignored when you enter AT commands, except in the following cases:
⚫ Within quoted strings, where spaces are preserved;

⚫ Within an unquoted string or numeric parameter;
⚫ Within an IP address;
⚫ Within the AT command name up to and including a =, ? or =?.
On input, at least a carriage return is required. A newline character is ignored so it is permissible to use
carriage return/line feed pairs on the input.
If no command is entered after the AT token, OK will be returned. If an invalid command is entered,
ERROR will be returned.
Optional parameters, unless explicitly stated, need to be provided up to the last parameter being entered.
NOTE
Every AT command must be inputted separately. Execute a new AT command only if the former one is
finished.
LTE-A Module Series
1.2. AT Command Responses
When the AT command processor has finished processing a line, it will output OK, ERROR or
+CME/+CMS ERROR: <err> to indicate that it is ready to accept a new command. Solicited information
responses are sent before the final OK, ERROR or +CME/+CMS ERROR: <err>.
Responses will be in the format of:
<CR><LF>+CMD1:<parameters><CR><LF>
<CR><LF>OK<CR><LF>
Or
<CR><LF><parameters><CR><LF>
<CR><LF>OK<CR><LF>
1.3. Supported Character Sets
EG060V-EA AT command interface defaults to the GSM character set. EG060V-EA supports the
following character sets:
⚫ GSM format
⚫ UCS2
⚫ IRA
The character set can be configured and interrogated by using the AT+CSCS (3GPP TS 27.007) and it is
defined in 3GPP TS 27.005. The character set affects transmission and reception of SMS and SMS Cell
Broadcast Messages, as well as the entry and display of phone book entries text field.
1.4. AT Command Interface
The AT command interface includes two USB ports (USB MODEM port and USB AT port) and one main
UART port, all of which support AT command communication and data transfer.
1.5. Unsolicited Result Code
As an Unsolicited Result Code and a report message, the URC is not issued as part of the response
LTE-A Module Series
related to an executed AT command. A URC is issued by EG060V-EA without being requested by the TE
and it is issued automatically when a certain event occurs. Typical events leading to URCs are incoming
calls (RING), received short messages, high/low voltage alarm, high/low temperature alarm, etc.
1.6. Declaration of AT Command Examples
The AT command examples in this document are provided to help you familiarize with AT commands and
learn how to use them. The examples, however, should not be taken as Quectel’s recommendation or
suggestions about how you should design a program flow or what status you should set the module into.
Sometimes multiple examples may be provided for one AT command. However, this does not mean that
there exists a correlation among these examples and that they should be executed in a given sequence.
LTE-A Module Series
2 General Commands
2.1. ATI Display Product Identification Information
This Execution Command returns product identification information including the identifier of device type
and the firmware version of the product.
ATI Display Product Identification Information

Execution Command Response
ATI Quectel
<objectID>
Revision: <revision>
OK
Maximum Response Time 300 ms
Characteristics /
Reference
V.25ter
Parameter
<objectID> String type. Identifier of device type.

<revision> String type. Product firmware version.
Example
ATI
Quectel
EG060V-EAAA
Revision: EG060VEAAAR01A02M1G
OK
LTE-A Module Series
2.2. AT+GMI Request Manufacturer Identification
This command returns the manufacturer identification text. It is identical with AT+CGMI.
AT+GMI Request Manufacturer Identification

Test Command Response
AT+GMI=? OK
AT+GMI Quectel
OK
Characteristics /
Reference
V.25ter
2.3. AT+GMM Request Model Identification
This command returns the product model identification text. It is identical with AT+CGMM.
AT+GMM Request Model Identification

AT+GMM=? OK
AT+GMM <objectID>
OK
Characteristics /
Reference
V.25ter
Parameter
LTE-A Module Series
2.4. AT+GMR Request Revision Identification of Software Release
This command returns the product firmware version identification text. It is identical with AT+CGMR.
AT+GMR Request Revision Identification of Software Release

AT+GMR=? OK
AT+GMR <revision>
OK
Characteristics /
Reference
V.25ter
Parameter
<revision> String type. Identification text of product software version.
Example
AT+GMR
EG060VEAAAR01A06M1G
OK
2.5. AT+CGMI Request Manufacturer Identification
This command returns the manufacturer identification text. It is identical with AT+GMI.
AT+CGMI Request Manufacturer Identification

AT+CGMI=? OK
AT+CGMI Quectel
OK
LTE-A Module Series
Characteristics /
Reference
3GPP TS 27.007
2.6. AT+CGMM Request Model Identification
This command returns a product model identification text. It is identical with AT+GMM.
AT+CGMM Request Model Identification

AT+CGMM=? OK
AT+CGMM <objectID>
OK
Characteristics /
Reference
3GPP TS 27.007
Parameter
2.7. AT+CGMR Request Revision Identification of Software Release
This command returns identification text of the product firmware revision. It is identical with AT+GMR.
AT+CGMR Request Revision Identification of Software Release

AT+CGMR=? OK
AT+CGMR <revision>
LTE-A Module Series
OK
Characteristics /
Reference
3GPP TS 27.007
Parameter
<revision> String type. Identification text of product firmware revision.
2.8. AT+GSN Request International Mobile Equipment Identity (IMEI)
This command requests the International Mobile Equipment Identity (IMEI) number of ME. With this
command, you are able to identify an individual ME device. It is identical with AT+CGSN.
AT+GSN Request International Mobile Equipment Identity (IMEI)

AT+GSN=? OK
AT+GSN <IMEI>
OK
Characteristics /
Reference
V.25ter
Parameter
<IMEI> String type. IMEI number of the ME.
NOTE
The serial number (IMEI) varies with the individual ME device.
LTE-A Module Series
2.9. AT+CGSN Request International Mobile Equipment Identity (IMEI)
This command requests the International Mobile Equipment Identity (IMEI) number of ME. It is identical
with AT+GSN.
AT+CGSN Request International Mobile Equipment Identity (IMEI)

AT+CGSN=? OK
AT+CGSN <IMEI>
OK
Characteristics /
Reference
3GPP TS 27.007
Parameter
<IMEI> String type. IMEI number of the ME.
NOTE
The serial number (IMEI) varies with the individual ME device.
2.10. ATQ Set Result Code Presentation Mode
This command controls whether the result code is transmitted to the TE. Other information text
transmitted as response is not affected.
ATQ Set Result Code Presentation Mode

ATQ<n> If <n>=0:
OK
If <n>=1:
(none)
LTE-A Module Series
Characteristics /
Reference
V.25ter
Parameter
<n> Integer type.

0 TA transmits result code
1 Result codes are suppressed and not transmitted
2.11. ATV TA Response Format
This command determines the contents of header and trailer transmitted with AT command result codes
and information responses.
ATV TA Response Format

ATV<value> When <value>=0
0
When <value>=1
OK
Characteristics /
Reference
V.25ter
Parameter
<value> Integer type.

0 Information response: <text><CR><LF>
Short result code format: <numeric code><CR>
1 Information response: <CR><LF><text><CR><LF>
Long result code format: <CR><LF><verbose code><CR><LF>
LTE-A Module Series
Example
ATV1 //Set <value>=1.
OK
AT+CSQ //Query the current signal strength.
+CSQ: 30,99
OK //When <value>=1, the result code is OK.

ATV0 //Set <value>=0.
0
AT+CSQ
+CSQ: 30,99
0 //When <value>=0, the result code is 0.
The equivalence between ATV0 and ATV1 result codes as well as the brief description of such codes are
listed in the following table.
Table 2: ATV0&ATV1 Result Codes Equivalence and Brief Description
ATV1 ATV0 Description
OK 0 Acknowledges execution of a command
Command not recognized, command line maximum length

ERROR 4 exceeded, parameter value invalid, or other problem with
processing the command line
2.12. ATE Set Command Echo Mode
This command controls whether or not the module echoes characters received from TE in AT command
mode.
ATE Set Command Echo Mode

ATE<value> OK
Characteristics /
Reference
V.25ter
LTE-A Module Series
Parameter
<value> Integer type.

0 Echo mode OFF
1 Echo mode ON
2.13. AT+CFUN Set UE Functionality
This command controls the functionality level. It can also be used to reset the UE.
AT+CFUN Set UE Functionality

AT+CFUN=? +CFUN: (list of supported <fun>s),(list of supported <rst>s)
OK
Read Command Response
AT+CFUN? +CFUN: <fun>
OK
Write Command Response
AT+CFUN=<fun>[,<rst>] OK
If there is any error:

+CME ERROR: <err>
Or
ERROR
Maximum Response Time 15 s, determined by network.
Characteristics /
Reference
3GPP TS 27.007
Parameter
<fun> Integer type.

0 Minimum functionality
1 Full functionality
3 Disable the UE from receiving RF signals
4 Disable the UE from both transmitting and receiving RF signals
5 Disable (U)SIM
LTE-A Module Series
6 Second RX off
<rst> Integer type.
0 Do not reset the UE before setting it to a <fun> functionality level.
1 Reset the UE. The device is fully functional after the reset. This value is applicable
only when <fun>=1.
<err> Error codes. For more details, refer to Chapter 12.2.
Example
AT+CFUN=0 //Switch UE to minimum functionality.
OK
AT+CPIN?
+CME ERROR: 13 //(U)SIM failure.
AT+CFUN=1 //Switch UE to full functionality.
OK
AT+CPIN?
+CPIN: READY
OK
AT+COPS?
+COPS: 0,2,"46000",7 //Operator is registered.
OK
2.14. AT+CMEE Configure Error Message Format
This command configures whether to display the error result code +CME ERROR: <err>, and in which
format the <err> code is displayed, numeric value or verbose message.
AT+CMEE Configure Error Message Format

AT+CMEE=? +CMEE: (range of supported <n>s)
OK
AT+CMEE? +CMEE: <n>
OK
AT+CMEE=<n> TA disables or enables the use of the result code +CME
ERROR: <err> as an indication of an error related to the
functionality of the ME.
LTE-A Module Series
OK
Characteristics /
Reference
3GPP TS 27.007
Parameter
<n> Integer or String type.

0 Disable result code, and use ERROR instead
1 Enable result code and display <err> in numeric format
2 Enable result code and display <err> in verbose format
Example
AT+CMEE=0 //Disable result code.
OK
AT+CPIN?
ERROR //Only ERROR is displayed.
AT+CMEE=1 //Enable error result code in numeric format.
OK
AT+CPIN?
+CME ERROR: 10
AT+CMEE=2 //Enable error result code in verbose format.
OK
AT+CPIN?
+CME ERROR: SIM not inserted
2.15. AT+CSCS Select TE Character Set
This Write Command informs the module which character set is used by the TE. This enables the UE to
convert character strings correctly between TE and UE character sets.
AT+CSCS Select TE Character Set

AT+CSCS=? +CSCS: (list of supported <chset>s)
OK
LTE-A Module Series

AT+CSCS? +CSCS: <chset>
OK
AT+CSCS=<chset> OK
Characteristics /
Reference
3GPP TS 27.007
Parameter
<chset> String type.

“GSM” GSM default alphabet
“IRA” International reference alphabet
“UCS2” UCS2 alphabet
Example
AT+CSCS? //Query the current character set of the module.
+CSCS: "GSM"
OK
AT+CSCS="UCS2" //Set the character set to “UCS2”.
OK
AT+CSCS?
+CSCS: "UCS2"
OK
2.16. AT+QURCCFG Configure URC Output Port
This command configures the output port of URC.
AT+QURCCFG Configure URC Output Port

AT+QURCCFG=? +QURCCFG: "urcport",(list of supported <URC_port_val
ue>s)
LTE-A Module Series
OK

AT+QURCCFG="urcport"[,<urcportv If the optional parameter is omitted, query the current
alue>] configuration:
+QURCCFG: "urcport",<urcportvalue>
OK
If the optional parameter is specified, configure the output

port of URC:
OK
Or
ERROR

The command takes effect immediately.
Characteristics
The configuration will be saved automatically.
Parameter
<urcportvalue> String type. Set URC output port.

"usbat" USB AT port
"usbmodem" USB modem port
"uart1" Main UART
Example
AT+QURCCFG=?
+QURCCFG: "urcport",("usbat","usbmodem","uart1")
OK
AT+QURCCFG="urcport"
+QURCCFG: "urcport","usbat"
OK
AT+QURCCFG="urcport","usbmodem"
OK
AT+QURCCFG="urcport"
+QURCCFG: "urcport","usbmodem"
OK
LTE-A Module Series
3 Status Control Commands

3.1. AT+CPAS Mobile Equipment Activity Status
This command queries the activity status of the module.
AT+CPAS Mobile Equipment Activity Status

AT+CPAS=? +CPAS: (list of supported <pas>s)
OK
AT+CPAS TA returns the activity status of ME:
+CPAS: <pas>
OK

+CME ERROR: <err>
Or
ERROR
Characteristics /
Reference
3GPP TS 27.007
Parameter
<pas> Integer type. ME activity status.

0 Ready
1 Unavailable
2 Unknown
3 Ringing
4 Call in progress or call on hold
5 Asleep
6 Call active
LTE-A Module Series
Example
AT+CPAS
+CPAS: 0 //The module is ready.
OK
RING
AT+CLCC //The module is having an incoming call.
+CLCC: 1,1,4,0,0,"15695519173",129,"",,0
OK
AT+CPAS
+CPAS: 3 //The module is ringing.
OK
AT+CLCC //The module is making an outgoing call.
+CLCC: 1,0,0,0,0,"10010",129,"",, 0
OK
AT+CPAS
+CPAS: 6 //Call active.
OK
3.2. AT+CEER Report Extended Error
This command queries an extended error and report the cause of the last operation that failed, such as:
⚫ The failure to release a call

⚫ The failure to set up a call (both mobile originated or terminated)
⚫ The failure to modify a call by using supplementary services
⚫ The failure to activate, register, query, deactivate or deregister a supplementary service
⚫ The failure to attach to a GPRS network or the failure to activate a PDP context
⚫ The failure to detach from a GPRS network or the failure to deactivate a PDP context
AT+CEER Report Extended Error

Test command Response
AT+CEER=? OK
LTE-A Module Series
Execution command Response

AT+CEER +CEER: <text>
OK

+CME ERROR: <err>
Or
ERROR
Characteristics /
Parameter
<text> String type. Cause of the last failure in setting up or releasing a CS or PS domain
call. Possible causes are listed in Chapter 12.6. Cause data is captured from Call
Manager events and cached locally for later use by this command.
3.3. AT+QCFG Extended Configuration Settings
This command queries and configures various UE settings.
AT+QCFG Extended Configuration Settings

AT+QCFG=? +QCFG: "usbnet",(list of supported <usbnet_type>s)
+QCFG: "devmode",(list of supported <mode>s)
+QCFG: "IMS",(list of supported <enable>s)
+QCFG: "nwscanmode",(range of supported <scan_mode>s)
+QCFG: "band",(list of supported <bandval>s),(list of supported
<LTE_bandval>s)
+QCFG: "servicedomain",(range of supported <service>s)
+QCFG: "tone/incoming",(list of supported <enable>s)
OK
LTE-A Module Series
3.3.1. AT+QCFG=" usbnet" USB Network Card Configuration
This command specifies a protocol for the USB network card.
AT+QCFG= " usbnet" USB Network Card configuration

AT+QCFG="usbnet"[,<usbnet_type>] If the optional parameter is omitted, query the current
configuration:
+QCFG: "usbnet",<usbnet_type>
OK
If the optional parameter is specified, configure the network

card mode:
OK

+CME ERROR: <err>
Or
ERROR
The command takes effect after rebooting.

Characteristics
Parameter
<usbnet_type> Integer type. Protocol type specified for the USB network card.
1 ECM
3 RNDIS
4 NCM
3.3.2. AT+QCFG="devmode" Device Mode Configuration
This command configures the device mode. And the configuration will take effect after module reset.
AT+QCFG="devmode" Device Mode Configuration

AT+QCFG="devmode"[,<mode>] If the optional parameter is omitted, query the current
configuration:
+QCFG: "devmode",<mode>
LTE-A Module Series
OK
If the optional parameter is specified, configure the device

mode of UE:
OK

+CME ERROR: <err>
Or
ERROR

Characteristics
Reference
3GPP TS 27.007
Parameter
<mode> Integer type. The mode of device.

0 Bridge mode
1 Router mode
3.3.3. AT+QCFG="IMS" IMS Service Configuration
This command specifies IMS service configuration.
AT+QCFG="IMS" IMS Service Configuration

AT+QCFG="IMS"[,<enable>] If the optional parameter is omitted, query the current
configuration:
+QCFG: "IMS",<enable>
OK
If the optional parameter is specified, enable/disable VoLTE

function:
OK

+CME ERROR: <err>
Or
LTE-A Module Series
ERROR

Characteristics
Reference
3GPP TS 27.007
Parameter
<enable> Integer type.

0 Disable IMS service
1 Enable IMS service
3.3.4. AT+QCFG="nwscanmode" Configure Network Search Mode
This command specifies the network search mode.
AT+QCFG="nwscanmode" Configure Network Search Mode

AT+QCFG="nwscanmode"[,<scan_mo If the optional parameter is omitted, query the current
de>] configuration:
+QCFG: "nwscanmode",<scan_mode>
OK
If the optional parameter is specified, configure a network

mode to search for:
OK

+CME ERROR: <err>
Or
ERROR

Characteristics
LTE-A Module Series
Parameter
<scan_mode> Integer type. Network search mode.

0 AUTO
1 GSM only
2 WCDMA only
3 LTE only
Example
AT+QCFG="nwscanmode",0 //Configure to AUTO mode.
OK
AT+QCFG="nwscanmode" //Query the current network search mode.
+QCFG: "nwscanmode",0
OK
3.3.5. AT+QCFG="band" Band Configuration
This command specifies the preferred frequency bands to search for.
AT+QCFG="band" Band Configuration

AT+QCFG="band"[,<bandval>,<LTE_b If the optional parameter is omitted, query the current
andval>] configuration:
+QCFG: "band",<bandval>,<LTE_bandval>
OK
If the optional parameter is specified, configure the preferred

frequency bands to search for:
OK

+CME ERROR: <err>
Or
ERROR

Characteristics
LTE-A Module Series
Parameter
<bandval> String type. A hexadecimal value that specifies the preferred GSM and WCDMA
frequency bands. Here is an example:
00000013=00000001(GSM900)+00000002(GSM1800)+00000010(WCDMA2100).
If it is set to 0, it means there is no change to the preferred GSM and WCDMA
frequency bands specified previously.
00000000 No change
00000001 GSM 900 B8
00000002 GSM 1800 B3
00000004 GSM 850 B5
00000010 WCDMA 2100 B1
00000040 WCDMA 850 B5
00000080 WCDMA 900 B8
0000FFFF Any frequency band
<LTE_bandval> String type. A hexadecimal value that specifies the preferred LTE frequency bands.
If it is set to 0 or 0x40000000, it means there is no change to the preferred LTE
frequency bands specified previously, e.g., 0x15=0x1(LTE B1)+0x4(LTE
B3)+0x10(LTE B5).
0x1 (CM_BAND_PREF_LTE_EUTRAN_BAND1) LTE B1
0x80000(CM_BAND_PREF_LTE_EUTRAN_BAND20) LTE B20
0x7FFFFFFFFFFFFFFF(CM_BAND_PREF_ANY) Any frequency band
3.3.6. AT+QCFG="servicedomain" Configure Service Domain
This command configures the service domain of UE.
AT+QCFG="servicedomain" Configure Service Domain

AT+QCFG="servicedomain"[,<service If the optional parameter is omitted, query the current
>] configuration:
+QCFG: "servicedomain",<service>
OK
LTE-A Module Series
If the optional parameter is specified, configure the service

domain of UE:
OK

+CME ERROR: <err>
Or
ERROR

Characteristics
Parameter
<service> Integer type. Service domain of UE.

0 CS only
1 PS only
2 CS&PS
Example
AT+QCFG="servicedomain",2 //Configure service domain as CS&PS.
OK
AT+ QCFG="servicedomain" //Query service domain.
+QCFG: "servicedomain",2
OK
3.3.7. AT+QCFG="tone/incoming" Enable/Disable Ringing Tone
This command enables or disables the ringing tone function. And the configuration will take effect
immediately.
AT+ QCFG="tone/incoming" Enable/Disable Ringing Tone

AT+QCFG="tone/incoming"[,<enable> If the optional parameter is omitted, query the current
] configuration:
+QCFG: "tone/incoming",<enable>
OK
LTE-A Module Series
If the optional parameter is specified, enable/disable the

ringing tone function:
OK

+CME ERROR: <err>
Or
ERROR

Characteristics
Parameter
<enable> Integer type.

0 Disable ring tone
1 Enable ring tone
LTE-A Module Series
4 (U)SIM Related Commands
4.1. AT+CIMI Request International Mobile Subscriber Identity (IMSI)
This command requests the International Mobile Subscriber Identity (IMSI) which is intended to permit the
TE to identify the individual SIM card or the active application that is attached to MT.
AT+CIMI Request International Mobile Subscriber Identity (IMSI)

AT+CIMI=? OK
AT+CIMI TA returns <IMSI> for identifying the (U)SIM attached to ME.
<IMSI>
OK

+CME ERROR: <err>
Or
ERROR
Characteristic /
Reference
3GPP TS 27.007
Parameter
<IMSI> International Mobile Subscriber Identity (string without double quotes).

<err> Error codes. For more details, refer to Chapter 12.2
Example
AT+CIMI //Query IMSI number of the (U)SIM attached to ME.
460023210226023
LTE-A Module Series
OK
4.2. AT+CLCK Facility Lock
This command locks, unlocks or queries an MT or a network facility <fac>. It can be aborted when
network facilities are being set or queried. Password is normally needed to do such operations. The
factory default password of PF, PN, PU, PP and PC lock is “12341234”. When querying the status of a
network service (<mode>=2), the response line for ‘not active’ case (<status>=0) should be returned
only if the service is not active for any <class>.
AT+CLCK Facility Lock

AT+CLCK=? +CLCK: (list of supported <fac>s)
OK
AT+CLCK=<fac>,<mode>[,<passwd>[ If <mode> is 0 or 1 and the command is set successfully:
,<class>]] OK
If <mode>=2 and command is set successfully:

+CLCK: <status>[,<class>]
[…]
OK
Maximum Response Time 5s

Characteristic
Reference
3GPP TS 27.007
Parameter
<fac> String type.

“SC” (U)SIM (lock SIM/UICC card installed in the currently selected card slot)
(SIM/UICC asks password in MT power-up and when this command is issued).
“CS” CNTRL (lock CoNTRoL surface (e.g. phone keyboard))
“PS” PH-SIM (lock PHone to SIM card) (ME asks password when other than current
SIM card inserted; ME may remember certain amount of previously used cards
thus not requiring password when they are inserted)
“PF” Lock Phone to the very First inserted SIM card (also referred as PH-FSIM) (ME
asks for password when a SIM card other than the first inserted one is inserted)
LTE-A Module Series
“AO” BAOC (Bar All Outgoing Calls) (refer to 3GPP TS 22.088 clause 1)
“OI” BOIC (Bar Outgoing International Calls) (refer to 3GPP TS 22.088 clause 1)
“OX” BOIC-exHC (Bar Outgoing International Calls except to Home Country) (refer to
3GPP TS 22.088 clause 1)
“AI” BAIC (Bar All Incoming Calls) (refer to 3GPP TS 22.088 clause 2)
“IR” BIC-Roam (Bar Incoming Calls when Roaming outside the home country) (refer
to 3GPP TS 22.088 clause 2)
“NT" Bar incoming calls from numbers Not stored to TA memory
“NM” Bar incoming calls from numbers Not stored to ME memory
"NS” Bar incoming calls from numbers Not stored to SIM memory
“NA” Bar incoming calls from numbers Not stored in Any memory
“AB” All Barring services (refer to 3GPP TS 22.030) (applicable only for <mode>=0)
“AG” All outgoing barring services (refer to 3GPP TS 22.030) (applicable only for
<mode>=0)
“AC” All incoming barring services (refer to 3GPP TS 22.030) (applicable only for
<mode>=0)
“FD” SIM card or active application in the UICC (GSM or USIM) fixed dialing memory
feature (if PIN2 authentication has not been done during the current session,
PIN2 is required as <passwd>)
“PN” Network Personalization (refer to 3GPP TS 22.022)
“PU” Network Subset Personalization (refer to 3GPP TS 22.022)
“PP” Service Provider Personalization (refer to 3GPP TS 22.022)
“PC” Corporate Personalization (refer to 3GPP TS 22.022)
<mode> Integer type.
0 Unlock
1 Lock
2 Query status
<passwd> String type. Password.
<class> Integer type.
1 Voice
2 Data
4 FAX
7 All telephony except SMS (Default)
8 Short message service
16 Data circuit synchronization
32 Data circuit asynchronization
<status> Integer type. Facility status.
0 Off
1 On
Example
AT+CLCK="SC",2 //Query the status of (U)SIM card.
+CLCK: 0 //The (U)SIM card is unlocked (OFF).
LTE-A Module Series
OK
AT+CLCK="SC",1,"1234" //Lock (U)SIM card, and the password is 1234.
OK
AT+CLCK="SC",2 //Query the status of (U)SIM card.
+CLCK: 1 //The (U)SIM card is locked (ON).
OK
AT+CLCK="SC",0,"1234" //Unlock (U)SIM card.
OK
4.3. AT+CPIN Enter PIN
This command enters a password or queries whether or not the module requires a password so that it can
be operated. The password may be (U)SIM PIN, (U)SIM PUK, PH-SIM PIN, etc.
This Read Command returns an alphanumeric string indicating whether or not some password is
required.
TA stores a password, such as (U)SIM PIN, (U)SIM PUK, etc., which is necessary for it to be operated.
TA shall automatically repeat a PIN that is entered for a second time. If no PIN request is pending, no
action is taken and an error message +CME ERROR is returned to TE.
If the PIN required is (U)SIM PUK or (U)SIM PUK2, the second pin is required. This second pin <newpin>
is used to replace the old pin in the (U)SIM.
AT+CPIN Enter PIN

AT+CPIN=? OK
AT+CPIN? +CPIN: <code>
OK
AT+CPIN=<pin>[,<newpin>] OK
Characteristic
Reference
3GPP TS 27.007
LTE-A Module Series
Parameter
<code> String without double quotes. Type of the password MT requires.

READY MT is not pending for any password
SIM PIN MT is waiting for (U)SIM PIN to be given
SIM PUK MT is waiting for (U)SIM PUK to be given
SIM PIN2 MT is waiting for (U)SIM PIN2 to be given
SIM PUK2 MT is waiting for SIM PUK2 to be given
PH-NET PIN MT is waiting for network personalization password to be given
PH-NET PUK MT is waiting for network personalization unblocking password
to be given
PH-NETSUB PIN MT is waiting for network subset personalization password to be
given
PH-NETSUB PUK MT is waiting for network subset personalization unblocking
password to be given
PH-SP PIN MT is waiting for service provider personalization password to
be given
PH-SP PUK MT is waiting for service provider personalization unblocking
PH-CORP PIN MT is waiting for corporate personalization password to be
given
PH-CORP PUK MT is waiting for corporate personalization unblocking
<pin> String type. Password. If the requested password is a PUK, such as (U)SIM PUK, then
<pin> must be followed by <newpin>.
<newpin> String type. New password required when the requested code is a PUK.
Example
//Enter PIN.
AT+CPIN?
+CPIN: SIM PIN //A PIN code is required.
OK
AT+CPIN=1234 //Enter PIN.
OK
+CPIN: READY
AT+CPIN?
+CPIN: READY //PIN has already been entered.
OK
//Enter PUK and PIN.
AT+CPIN?
LTE-A Module Series
+CPIN: SIM PUK //A PUK code is required.
OK
AT+CPIN="26601934","1234" //Enter PUK and a new PIN password.
OK
+CPIN: READY
AT+CPIN?
+CPIN: READY //PUK has already been entered.
OK
4.4. AT+CPWD Change Password
This command sets a new password for the facility lock function defined by AT+CLCK.
This Test Command returns a list of pairs which present the available facilities and the maximum length of
their password.
AT+CPWD Change Password

AT+CPWD=? +CPWD: (list of supported <fac>s),(<pwdlength>s)
OK
AT+CPWD=<fac>,<oldpwd>,<newpw OK
d>
Characteristic
Reference
3GPP TS 27.007
Parameter
<fac> String type. Facility values.

“SC” (U)SIM (lock SIM/UICC card) (SIM/UICC asks password in MT power-up and
when this lock command is issued)
“AO” BAOC (Bar All Outgoing Calls, refer to 3GPP TS 22.088 clause 1)
“OI” BOIC (Bar Outgoing International Calls, refer to 3GPP TS 22.088 clause 1)
“OX” BOIC-exHC (Bar Outgoing International Calls except to Home Country, refer to
LTE-A Module Series

“AI” BAIC (Bar All Incoming Calls, refer to 3GPP TS 22.088 clause 2)
“IR” BIC-Roam (Bar Incoming Calls when Roaming outside the home country, refer to
“AB” All barring services (refer to 3GPP TS 22.030, applicable only for <mode>=0)
“AG” All outgoing barring services (refer to 3GPP TS 22.030, applicable only for
<mode>=0)
“AC” All incoming barring services (refer to 3GPP TS 22.030, applicable only for
<mode>=0)
“P2” (U)SIM PIN2
<pwdlength> Integer type. Maximum length of password.
<oldpwd> String type. Old password specified for the facility from the user interface or with
command.
<newpwd> String type. New password.
Example
AT+CPIN?
+CPIN: READY
OK
AT+CPWD="SC","1234","4321" //Change (U)SIM card password from “1234” to “4321”.
OK
//Restart module or re-activate the SIM card.
AT+CPIN? //Query the type of PIN code required.
+CPIN: SIM PIN
OK
AT+CPIN="4321" //Enter the new PIN to re-activate the SIM card.
OK
+CPIN: READY
4.5. AT+CSIM Generic (U)SIM Access
This command allows a direct control of the (U)SIM that is installed in the currently selected card slot by a
distant application on the TE. The TE shall then keep the processing of (U)SIM information within the
frame specified by GSM/UMTS.
AT+CSIM Generic (U)SIM Access

AT+CSIM=? OK
LTE-A Module Series

AT+CSIM=<length>,<command> +CSIM: <length>,<response>
OK

+CME ERROR: <err>
Or
ERROR
Characteristic
Reference
3GPP TS 27.007
Parameter
<length> Integer type. Length of <command> or <response> string.

<command> Command transferred by MT to (U)SIM in the format described in 3GPP TS 51.011.
<response> Response to the command transferred by the (U)SIM to the MT in the format as
described in 3GPP TS 51.011.
4.6. AT+CRSM Restricted (U)SIM Access
This command offers easy but limited access to the (U)SIM database. It transmits the (U)SIM command
number <command> and its required parameters to the MT.
AT+CRSM Restricted (U)SIM Access

AT+CRSM=? OK
AT+CRSM=<command>[,<fileld>[,<P1 +CRSM: <sw1>,<sw2>[,<response>]
>,<P2>,<P3>[,<data>][,<pathld>]]]
OK

+CME ERROR: <err>
Or
ERROR
LTE-A Module Series

Characteristic
Reference
3GPP TS 27.007
Parameter
<command> (U)SIM command number.

176 READ BINARY
178 READ RECORD
192 GET RESPONSE
214 UPDATE BINARY
220 UPDATE RECORD
242 STATUS
<fileId> Integer type. Identifier for an elementary data file on (U)SIM, if used by
<command>.
<P1>, <P2>, <P3> Integer type. Parameters transferred by the MT to the (U)SIM. These parameters
are mandatory for every command, except GET RESPONSE and STATUS. The
values are described in 3GPP TS 51.011.
<data> Information which shall be written to the (U)SIM (hexadecimal character format;
refer to AT+CSCS).
<pathId> The directory path of an elementary file on a UICC in hexadecimal format.
<sw1>, <sw2> Integer type. Information from the (U)SIM about the execution of the actual
command. These parameters are delivered to the TE in both cases, on
successful or failed execution of the command.
<response> Response of a successful completion of the command previously issued
(hexadecimal character format; refer to AT+CSCS). STATUS and GET
RESPONSE return data, which gives information about the current elementary
data field. The information includes the type of file and its size (refer to
3GPP TS 51.011). After READ BINARY, READ RECORD or RETRIEVE DATA
command, the requested data will be returned. <response> is not returned after a
successful UPDATE BINARY, UPDATE RECORD or SET DATA command.
4.7. AT+QCCID Show ICCID
This command returns the ICCID (Integrated Circuit Card Identifier) number of (U)SIM card.
AT+QCCID Show ICCID

AT+QCCID=? OK
LTE-A Module Series

AT+QCCID +QCCID: <ICCID>
OK
Or
ERROR
Characteristic /
Parameter
<ICCID> String without double quotes. ICCID (Integrated Circuit Card Identifier) number of the
(U)SIM card.
Example
AT+QCCID //Query ICCID of the (U)SIM card.
+QCCID: 89860025128306012474
OK
4.8. AT+QSIMDET (U)SIM Card Detection
This command enables (U)SIM card hot-swap function. (U)SIM card is detected by GPIO interrupt. The
level of (U)SIM card detection pin when the (U)SIM card is inserted should also be set.
AT+ QSIMDET (U)SIM Card Detection

AT+QSIMDET=? +QSIMDET: (list of supported <enable>s),(list of supported
<insert_level>s)
OK
AT+QSIMDET? +QSIMDET: <enable>,<insert_level>
OK
AT+QSIMDET=<enable>,<insert_level OK
> Or
ERROR
LTE-A Module Series

Characteristic
Parameter
<enable> Integer type. Integer type. Enable or disable (U)SIM card detection.
0 Disable
1 Enable
<insert_level> Integer type. The level of (U)SIM detection pin when a (U)SIM card is inserted.
0 Low level
1 High level
⚫NOTES
Hot-swap function is invalid if the value of <insert_level> is inconsistent with your hardware design.
4.9. AT+QSIMSTAT (U)SIM Insertion Status Report
This command queries (U)SIM card insertion status or determines whether to report (U)SIM card insertion
status.
AT+QSIMSTAT (U)SIM Insertion Status Report

AT+QSIMSTAT=? +QSIMSTAT: (list of supported <enable>s)
OK
AT+QSIMSTAT? +QSIMSTAT: <enable>,<inserted_status>
OK
AT+QSIMSTAT=<enable> OK
Or
ERROR
Characteristic /
LTE-A Module Series
Parameter
<enable> Integer type. Enable or disable (U)SIM inserted status report. If it is enabled, when
(U)SIM card is removed or inserted, the URC below will be reported:
+QSIMSTAT: <enable>,<inserted_status>.
0 Disable
1 Enable
<inserted_status> Integer type. (U)SIM card status. This argument is not allowed to be set.
0 Removed
1 Inserted
2 Unknown, before (U)SIM initialization
Example
AT+QSIMSTAT? //Query (U)SIM card insertion status.
+QSIMSTAT: 0,1
OK
AT+QSIMDET=1,0
OK
AT+QSIMSTAT=1 //Enable (U)SIM card insertion status report.
OK
AT+QSIMSTAT?
+QSIMSTAT: 1,1
OK
//Remove the (U)SIM card.
+QSIMSTAT: 1,0 //Report (U)SIM card insertion status: removed.
+CPIN: NOT READY

AT+QSIMSTAT?
+QSIMSTAT: 1,0
OK
//Insert a (U)SIM card.
+QSIMSTAT: 1,1 //Report (U)SIM card insertion status: inserted.
+CPIN: READY
LTE-A Module Series
5 Network Service Commands

5.1. AT+COPS Operator Selection
This command returns the current operators and their status, and allows setting automatic or manual
network selection.
This Test Command returns a set of five parameters, each representing an operator presenting in the
network. Any of the formats may be unavailable and should then be an empty field. The list of operators
shall be in the order of: home network, networks referenced in (U)SIM and other networks.
This Read Command returns the current mode and the currently selected operator. If no operator is
selected, <format>, <oper> and <AcT> are omitted.
This Write Command forces an attempt to select and register the GSM/UMTS network operator. If the
selected operator is not available, no other operator shall be selected (except <mode>=4). The format of
selected operator name shall apply to further Read Command (AT+COPS?).
AT+COPS Operator Selection

AT+COPS=? +COPS: [(list of supported <stat>,long alphanumeric <o
per>,short alphanumeric <oper>,numeric <oper>s[,<Ac
T>])s][,,(range of supported <mode>s),(range of support
ed <format>s)]
OK

+CME ERROR: <err>
Or
ERROR
AT+COPS? +COPS: <mode>[,<format>[,<oper>][,<AcT>]]
OK
LTE-A Module Series
+CME ERROR: <err>

Or
ERROR
AT+COPS=<mode>[,<format>[,<oper>[ OK
,<AcT>]]]
+CME ERROR: <err>
Or
ERROR
Characteristic /
Reference
3GPP TS 27.007
Parameter
<stat> Integer type. Operator status.

0 Unknown
1 Operator available
2 Current operator
3 Operator forbidden
<oper> Strig type. Operator in format as per <mode>.
0 Automatic mode. <oper> field is ignored
1 Manual operator selection. <oper> field shall be present and <AcT> optionally
2 Manually deregister from network
3 Set only <format> (for AT+COPS? Read Command), and do not attempt
registration/deregistration (<oper> and <AcT> fields are ignored). This value is
invalid in the response of Read Command
4 Manual/automatic selection. <oper> field shall be presented. If manual selection
fails, automatic mode (<mode>=0) is entered
<format> Integer type.
0 Long format alphanumeric <oper> which can be up to 16 characters long
1 Short format alphanumeric <oper>
2 Numeric <oper>. GSM location area identification number
<AcT> Integer type. Access technology selected. Values 3, 4, 5 and 6 occur only in the response
of Read Command while MS is in data service state and are not intended for the
AT+COPS Write Command.
0 GSM
2 UTRAN
3 GSM W/EGPRS
LTE-A Module Series
4 UTRAN W/HSDPA
5 UTRAN W/HSUPA
6 UTRAN W/HSDPA and HSUPA
7 E-UTRAN
8 UTRAN HSPA+
Example
AT+COPS=? //List all the current network operators.
+COPS:
(1,"CHN-UNICOM","UNICOM","46001",2),(1,"CHN-UNICOM","UNICOM","46001",0),(2,"CHN-UNICO
M","UNICOM","46001",7),(1, "CHN-CT", "CT","46011",7),(3,"CHINA
MOBILE","CMCC","46000",0),,(0-4),(0-2)
OK
AT+COPS? //Query the currently selected network operator.
+COPS: 0,0,"46000",7
OK
5.2. AT+CREG Network Registration Status
The Read Command returns the status of result code presentation and an integer <stat> which shows
whether the network has currently indicated the registration of the ME. Location information elements
<lac> and <ci> are returned only when <n>=2 and ME is registered on the network.
The Write Command controls the presentation of an unsolicited result code +CREG: <stat> when <n>=1
and there is a change in the ME network registration status.
AT+CREG Network Registration Status

AT+CREG=? +CREG: (list of supported <n>s)
OK
AT+CREG? +CREG: <n>,<stat>[,<lac>,<ci>[,<AcT>]]
OK
If there is any error related to ME functionality:

+CME ERROR: <err>
LTE-A Module Series
Or
ERROR
AT+CREG=[<n>] OK
Characteristic /
Reference
3GPP TS 27.007
Parameter
<n> Integer type. Whether to enable network registration URC.

0 Disable network registration unsolicited result code
1 Enable network registration unsolicited result code: +CREG: <stat>
2 Enable network registration unsolicited result code with location information:
+CREG: <stat>[,<lac>,<ci>[,<AcT>]]
<stat> Integer type. Registration status.
0 Not registered. ME is not currently searching a new operator to register to
1 Registered, home network
2 Not registered, but ME is currently searching a new operator to register to
3 Registration denied
4 Unknown
5 Registered, roaming
<lac> String type. Two bytes location area code in hexadecimal format.
<ci> String type. 16-bit (GSM) or 28-bit (UMTS/LTE) cell ID in hexadecimal format.
<AcT> Integer type. Access technology selected.
0 GSM
2 UTRAN
3 GSM W/EGPRS
4 UTRAN W/HSDPA
5 UTRAN W/HSUPA
7 E-UTRAN
8 UTRAN HSPA+
Example
AT+CREG=2 //Activate extended URC mode.
OK
AT+CREG?
+CREG: 2,1,"550c","5a29c0b",7 //URC reporting MT has registered on an E-UTRAN network.
LTE-A Module Series
OK
5.3. AT+CSQ Signal Quality Report
This command indicates the received signal strength <rssi> and the channel bit error rate <ber>. This
Test Command returns values supported by the TA. This Execution Command returns received signal
strength indication <rssi> and channel bit error rate <ber> from the ME.
AT+CSQ Signal Quality Report

AT+CSQ=? +CSQ: (list of supported <rssi>s),(list of supported <ber>s)
OK
AT+CSQ +CSQ: <rssi>,<ber>
OK

+CME ERROR: <err>
Or
ERROR
Characteristic /
Reference
3GPP TS 27.007
Parameter
<rssi> Integer type. Received signal strength indicator.

0 -113dBm or less
1 -111dBm
2...30 -109dBm... -53dBm
31 -51dBm or greater
99 Not known or not detectable
<ber> Integer type. Channel bit error rate (in percent).
0...7 As RXQUAL values in the table in 3GPP TS 45.008 subclause 8.2.4
99 Not known or not detectable
LTE-A Module Series
Example
AT+CSQ=?
+CSQ: (0-31,99),(0-7,99)
OK
AT+CSQ
+CSQ: 28,99 //The received signal strength indicator is 28 and the channel bit error rate is 99.
OK
5.4. AT+CPOL Preferred Operator List
This command edits and queries the list of preferred operators.
AT+CPOL Preferred Operator List

AT+CPOL=? +CPOL: (list of supported <index>s),(list of supported
<format>s)
OK
AT+CPOL? Query the list of preferred operators:
+CPOL: <index>,<format>,<oper>[,<GSM>,<GSM_compa
ct>,<UTRAN>,<E-UTRAN>]
<index>,<format>,<oper>[,<GSM>,<GSM_compact>,<UT
RAN>,<E-UTRAN>]
[…]
OK
AT+CPOL=<index>[,<format>[,<oper Edit the list of preferred operators:
>[<GSM>,<GSM_compact>,<UTRAN> OK
,<E-UTRAN>]]]
+CME ERROR: <err>
Or
ERROR
If <index> is given but <oper> is left out, the entry is deleted.

Characteristic /
LTE-A Module Series
Reference
3GPP TS 27.007
Parameter
<index> Integer type. The order number of operators in (U)SIM preferred operator list.
<format> 0 Long format alphanumeric <oper>
1 Short format alphanumeric <oper>
2 Numeric <oper>
<oper> String type. <format> indicates the format is alphanumeric or numeric (see
AT+COPS).
<GSM> Integer type. GSM access technology.
0 Access technology is not selected
1 Access technology is selected
<GSM_compact> Integer type. GSM compact access technology.
<UTRAN> Integer type. UTRAN access technology.
<E-UTRAN> Integer type. E-UTRAN access technology.
NOTE
The access technology selection parameters <GSM>, <GSM_compact>, <UTRAN> and <E-UTRAN>
are required when UE selects the PLMN selector and access technology for its (U)SIM card.
5.5. AT+COPN Read Operator Names
This command returns the list of operator names from the ME. Each operator code <numericn> that has
an alphanumeric equivalent <alphan> in the ME memory is returned.
AT+COPN Read Operator Names

AT+COPN=? OK
AT+COPN +COPN: <numeric1>,<alpha1>
LTE-A Module Series
[+COPN: <numeric2>,<alpha2>]
[…]
OK
If there is error related to MT functionality:

+CME ERROR: <err>
Maximum Response Time Depends on the number of operator names.
Characteristic /
Reference
3GPP TS 27.007
Parameter
<numericn> String type. Operator in numeric format (see AT+COPS).

<alphan> String type. Operator in long alphanumeric format (see AT+COPS).
5.6. AT+CTZU Automatic Time Zone Update
This Write Command enables and disables automatic time zone update via NITZ.
AT+CTZU Automatic Time Zone Update

AT+CTZU=? +CTZU: (list of supported <onoff>s)
OK
AT+CTZU=<onoff> OK
Or
ERROR
AT+CTZU? +CTZU: <onoff>
OK
Characteristic /
Reference
3GPP TS 27.007
LTE-A Module Series
Parameter
<onoff> Integer type. The mode of automatic time zone update.

0 Disable automatic time zone update via NITZ
1 Enable automatic time zone update via NITZ and update GMT time to URC
Example
AT+CTZU?
+CTZU: 1
OK
AT+CTZU=?
+CTZU: (0,1)
OK
AT+CTZU=0
OK
AT+CTZU?
+CTZU: 0
OK
5.7. AT+CTZR Time Zone Reporting
This command controls the time zone reporting when event changes. If reporting is enabled, the MT
returns the unsolicited result code +CTZV: <tz> or +CTZE: <tz>,<dst>,<time> whenever the time zone is
changed. The configuration is stored to flash automatically.
AT+CTZR Time Zone Reporting

AT+CTZR=? +CTZR: (list of supported <reporting>s)
OK
AT+CTZR=<reporting> OK
Or
ERROR
AT+CTZR? +CTZR: <reporting>
OK
LTE-A Module Series
Maximum Response Time 300ms
Characteristic /
Reference
3GPP TS 27.007
Parameter
<reporting> Integer type. The mode of time zone reporting.

0 Disable time zone reporting of changed event
1 Enable time zone reporting of changed event by unsolicited result code:
+CTZV: <tz>
2 Enable extended time zone reporting by unsolicited result code:
+CTZE: <tz>,<dst>,<time>
<tz> String type. Sum of the local time zone (difference between the local time and GMT is
expressed in quarters of an hour) plus daylight saving time. The format is “±zz”,
expressed as a fixed-width, two-digit integer from -48 to +56. To maintain a fixed width,
numbers from -9 to +9 are expressed with a leading zero, e.g. “-09”, “+00” and “+09”.
<dst> Integer type. Indicates whether <tz> includes daylight savings adjustment.
0 <tz> includes no adjustment for daylight saving time
1 <tz> includes +1 hour (i.e. 4 quarters in <tz>) adjustment for daylight saving
time
2 <tz> includes +2 hours (i.e. 8 quarters in <tz>) adjustment for daylight saving
time
<time> String type. The local time. The format is “YYYY/MM/DD,hh:mm:ss”, expressed as
integers representing year (YYYY), month (MM), date (DD), hour (hh), minute (mm)
and second (ss). This parameter can be provided by the network when delivering time
zone information and be presented in the URC of extended time zone reporting.
5.8. AT+QSPN Query the Service Provider Name
This command queries the service provider name.
AT+QSPN Query the Service Provider Name

AT+QSPN=? OK
AT+QSPN +QSPN: <FNN>,<SNN>,<SPN>,<alphabet>,<RPLMN>
OK
LTE-A Module Series
Characteristic /
Parameter
<FNN> String type. Full name of network.

<SNN> String type. Shortened name of network.
<SPN> String type. Service provider name.
<alphabet> Integer type. Alphabet of full and shortened network name.
0 GSM 7-bit default alphabet
1 UCS2
<RPLMN> String type. Registered PLMN.
NOTES
1. If <alphabet> is 0, <FNN> and <SNN> will be shown in GSM 7-bit default alphabet string.
2. If <alphabet> is 1, <FNN> and <SNN> will be shown in UCS2 hexadecimal string.
Example
AT+QSPN //Query the service provider name.
+QSPN: "CHN-UNICOM","UNICOM","",0,"46001"
OK
5.9. AT+QNWINFO Query Network Information
This command indicates network information such as the access technology, the operator and the band
selected.
AT+QNWINFO Query Network Information
AT+QNWINFO=? OK
AT+QNWINFO +QNWINFO: <AcT>,<oper>,<band>,<channel>
OK
Characteristic /
LTE-A Module Series
Parameter
<AcT> String type. The access technology selected.
“NONE”
“HDR”
“HDR-EHRPD”
“GSM”
“GPRS”
“EDGE”
“WCDMA”
“HSDPA”
“HSUPA”
“HSPA+”
“TDD LTE”
“FDD LTE”
<oper> String type. The operator in numeric format.
<band> String type. The band selected.
“GSM 850”
“GSM 900”
“GSM 1800”
“WCDMA 2100”
“WCDMA 850”
“WCDMA 900”
“LTE BAND 1” – “LTE BAND 41”
<channel> Integer type. Channel ID.
5.10. AT+QNWLOCK="common/lte" Network Locking Configuration
This command locks the module to a specified frequency or cell.
AT+QNWLOCK="common/lte" Network Locking Configuration

AT+QNWLOCK=? +QNWLOCK: "common/lte",(range of supported <action>s),<
EARFCN>,<PCI>,(list of supported <status>s)
OK
AT+QNWLOCK="common/lte"[,< If the optional parameters are omitted, query the current setting:
action>[,<EARFCN>,<PCI>]] +QNWLOCK: "common/lte",<action>,<EARFCN>,<PCI>,<stat
us>
OK
LTE-A Module Series
If the optional parameters are specified, lock the module to a

specified frequency or cell:
OK
Or
ERROR

Characteristics
The configurations will not be saved.
Parameter
<action> Integer type.
0 Unlock the cell
1 Lock LTE cell through appointed EARFCN
2 Lock LTE cell through appointed EARFCN and PSC
<EARFCN> Integer type. Default value: 0. The appointed EARFCN of the cell to be locked.
<PCI> Integer type. Default value: 0. The appointed PCI of the cell to be locked.
<status> Integer type. Default value: 0.
0 Cell locking or unlocking finished
1 Cell locking or unlocking failed
NOTES
1. The module can be unlocked from a cell after you set <action> to 0 and reboot it.
2. The module needs to be fixed to LTE-only with AT+QCFG="NWSCANMODE",3 before it can be
locked to an LTE cell with AT+QNWLOCK .
5.11. AT+QENG Query Primary Serving Cell and Neighbour Cell
Information
This command obtains the primary serving cell and neighbour cell information.
AT+QENG Query Primary Serving Cell and Neighbour Cell Information

AT+QENG=? +QENG: (list of supported <cell_type>s)
OK
Query the information of serving cell Response
AT+QENG="servingcell" In GSM mode:
LTE-A Module Series
+QENG: "servingcell",<state>,"GSM",<MCC>,<MNC>,<L
AC>,<cellID>,<bsic>,<arfcn>,<band>,<rxlev>,<rla>,<txp>,
<drx>,<c1>,<c2>,<GPRS>,<tch>,<ts>,<ta>,<maio>,<hsn>,
<rxlevsub>,<rxlevfull>,<rxqualsub>,<rxqualfull>,<voicec
odec>
In LTE mode:
+QENG: "servingcell",<state>,"LTE",<is_tdd>,<MCC>,<
MNC>,<cellID>,<PCID>,<earfcn>,<freq_band_ind>,<UL_b
andwidth>,<DL_bandwidth>,<TAC>,<RSRP>,<RSRQ>,<R
SSI>,<SINR>,<srxlev>
In WCDMA mode:
+QENG: "servingcell",<state>,"WCDMA",<MCC>,<MN
C>,<LAC>,<cellID>,<uarfcn>,<PSC>,<RAC>,<RSCP>,<eci
o>,<phych>,<SF>,<slot>,<speech_code>,<comMod>
OK
Query the information of neighbor cells Response
AT+QENG="neighbourcell" In GSM mode:
[+QENG: "neighbourcell","GSM",<MCC>,<MNC>,<LAC>,
<cellID>,<bsic>,<arfcn>,<rxlev>,<c1>,<c2>,<c31>,<c32>
…]
In LTE mode:
[+QENG: "neighbourcell intra","LTE",<earfcn>,<PCID>,<
RSRQ>,<RSRP>,<RSSI>,<SINR>,<srxlev>,<cell_resel_pri
ority>,<s_non_intra_search>,<thresh_serving_low>,<s_i
ntra_search>
…]
[+QENG: "neighbourcell inter","LTE",<earfcn>,<PCID>,<
RSRQ>,<RSRP>,<RSSI>,<SINR>,<srxlev>,<cell_resel_pri
ority>,<threshX_low>,<threshX_high>
…]
[+QENG: "neighbourcell","WCDMA",<uarfcn>,<cell_rese
l_priority>,<thresh_Xhigh>,<thresh_Xlow>,<PSC>,<RSC
P><ecno>,<srxlev>
…]
In WCDMA mode:
[+QENG: "neighbourcell","WCDMA",<uarfcn>,<srxqual>,
<PSC>,<RSCP>,<ecno>,<set>,<rank>,<srxlev>
…]
[+QENG: "neighbourcell","LTE",<earfcn>,<cellID>,<RSR
LTE-A Module Series
P>,<RSRQ>,<s_rxlev>
…]
OK
Characteristics /
Parameter
<cell_type> String format. The information of different cells.
"servingcell" The information of 3G/4G serving cells
"neighbourcell" The information of 3G/4G neighbour cells
<state> String format. UE state.
"SEARCH" UE is searching but has not found a suitable 3G/4G cell.
"LIMSRV" UE is camping on a cell but has not registered on the
network.
"NOCONN" UE has camped on a cell and registered on the network,
and it is in idle mode.
"CONNECT" UE has camped on a cell and registered on the network,
and a call is in progress.
<is_tdd> LTE TDD or FDD mode.
<MCC> Integer type. Mobile Country Code (first part of the PLMN code).
"-" Invalid
<MNC> Integer type. Mobile Network Code (second part of the PLMN code).
"-" Invalid
<LAC> Hexadecimal format. Location Area Code. The parameter determines the
two bytes location area code in hexadecimal format (e.g. 00C1 equals 193
in decimal) of the cell that was scanned. Range: 0-65535.
<cellID > Hexadecimal format. Cell ID. The parameter determines the 16-bit (GSM)
or 28-bit (UMTS) cell ID. Range: 0–0xFFFFFFF.
"-" Invalid
<bsic> Integer type. Base Station Identification Code. Range: 0-63.
<arfcn> Integer type. The parameter determines the ARFCN of the cell that was
scanned. Range: 0–1023.
<PCID> Physical cell ID.
<band> Integer type. Indicate the current band is PCS1900 or DCS1800.
0 DCS_1800
1 PCS_1900
"-" Other band
<rac> Integer type. Routing Area Code. Range 0–255.
<pfreq> Primary frequency.
<rxlev> Integer type. RX level value for base station selection in dB (see 3GPP
25.304). RX level range: 0–63, subtract 111 to dBm value.
LTE-A Module Series
<txp> Integer type. MS maximum TX power in CCH.

<rla> Integer type. Minimum access RX level.
<drx> Integer type. Discontinuous reception cycle length.
<c1> Integer type. Cell selection criterion.
<c2> Integer type. Cell reselection criterion.
<uarfcn> Integer type. The parameter determines the UTRA-ARFCN of the cell that
was scanned.
<GPRS> Integer type. Whether current cell supports GPRS or not.
0 Not support GPRS
1 Support GPRS
<tch> Integer type. In hopping, displays „h‟, otherwise displays the current
ARFCN in voice call.
<ts> Integer type. Timeslot number.
<ta> Integer type. Timing advance for the base station. Range: 0–63.
<maio> Integer type. Mobile Allocation Index Offset.
<hsn> Integer type. Hopping Sequence Number.
<rxqualsub> Integer type. RX quality (sub), range: 0–7.
<rxqualfull> Integer type. RX quality (full), range: 0–7.
<rxlevsub> Integer type. RX level (sub), range: 0–63.
<rxlevfull> Integer type. RX level (full), range: 0–63.
<voicecodec> String type. Channel mode during voice call.
"HR" Half rate
"FR" Full rate
"EFR" Enhanced full rate
"AMR" Adaptive Multi-Rate
"AMRHR" AMR half rate
"AMRFR" AMR full rate
"AMRWB" AMR wide band
"-" Invalid
<earfcn> Integer type. The parameter determines the E-UTRA-ARFCN of the cell
that was scanned.
<freq_band_ind> E-UTRA frequency band (see 3GPP 36.101).
<UL_bandwidth> Integer type. UL bandwidth.
0 1.4MHz
1 3MHz
2 5MHz
3 10MHz
4 15MHz
5 20MHz
<DL_bandwidth> Integer type. DL bandwidth.
0 1.4MHz
1 3MHz
2 5MHz
3 10MHz
LTE-A Module Series
4 15MHz
5 20MHz
<TAC> Tracking Area Code (see 3GPP 23.003 Section 19.4.2.3).
<PSC> Integer type. The parameter determines the primary scrambling code of the
cell that was scanned.
<RAC> Integer type. Routing Area Code. Range 0–255.
<RSCP> Integer type. The parameter determines the Received Signal Code Power
level of the cell that was scanned.
<ecio> Integer type. Carrier to noise ratio in dB=measured Ec/Io value in dB.
<RSRP> Reference Signal Received Power (see 3GPP 36.214 Section 5.1.1).
<RSRQ> Reference Signal Received Quality (see 3GPP 36.214 Section 5.1.2).
<RSSI> Integer type. The parameter shows the Received Signal Strength
Indication.
<SINR> Integer type. Logarithmic value of SINR, Values are in 1/5th of a dB.
Range:0-250 which translates to -20dB - +30dB.
<phych> Physical channel
0 DPCH
1 FDPCH
<SF> Integer type. Spreading factor.
0 SF_4
1 SF_8
2 SF_16
3 SF_32
4 SF_64
5 SF_128
6 SF_256
7 SF_512
8 UNKNOWN
<slot> Integer type. (0–16): slot format for DPCH. (0–9): slot format for FDPCH.
<speech_code> Destination number on which call is to be deflected.
<comMod> Integer type. Compress mode.
0 Not support compress mode
1 Support compress mode
<c31> Integer type. GPRS cell selection criterion.
<c32> Integer type. GPRS cell reselection criterion.
<srxqual> Receiver automatic gain control on the camped frequency.
<ecno> Integer type. Carrier to noise ratio in dB = measured Ec/Io value in dB.
<set> Integer type. 3G neighbour cell set.
1 Active set
2 Synchronous neighbour set
3 Asynchronous neighbour set
<rank> Rank of this cell as neighbour for inter-RAT cell reselection.
<threshX_low> To be considered for reselection. The suitable receive level value of an
evaluated lower priority cell must be greater than this value.
LTE-A Module Series
<threshX_high> To be considered for reselection. The suitable receive level value of an

evaluated higher priority cell must be greater than this value.
<thresh_Xhigh> Reselection threshold for high priority layers.
<thresh_Xlow> Reselection threshold for low priority layers.
<srxlev> Integer type. Select receive level value for base station in dB (see 3GPP
25.304).
<cell_resel_priority> Cell reselection priority. Range: 0–7.
<s_non_intra_search> Threshold to control non-intra frequency searches.
<thresh_serving_low> Specifies the suitable receive level threshold (in dB) used by the UE on the
serving cell when reselecting towards a lower priority RAT/frequency.
<s_intra_search> Cell selection parameter for the intra frequency cell.
5.12. AT+QCAINFO Query Carrier Aggregation Parameters
This command queries carrier aggregation parameters.
AT+QCAINFO Query Carrier Aggregation Parameters

AT+QCAINFO=? OK
AT+QCAINFO +QCAINFO: "pss",<freq>,<bandwidth>,<band>,<pcell_st
ate>,<PCID>,<RSRP>,<RSRQ>,<RSSI>,<SINR>
"sss",<freq>,<bandwidth>,<band>,<scell_state>,<PCI>,
<RSRP>,<RSRQ>,<RSSI>,<SINR>
OK
If no secondary cell was active:

OK
Characteristics /
Parameter
<pss> Primary server cell.

<sss> Secondary server cell.
<freq> EARFCN.
<bandwidth> Integer type. Bandwidth.
6 1.4 MHZ
15 3 MHZ
LTE-A Module Series
25 5 MHZ
50 10 MHZ
75 15 MHZ
100 20 MHZ
<band> String type. Band information.
<pcell_state> Integer type. Primary Carrier Component State.
0 No serving
1 Registered
<scell_state> Integer type. Secondary Carrier Component State.
0 Deconfigured
1 Configured deactivated
2 Configured activated
<PCI> Integer type. Physical Cell ID.
<RSRP> Integer type. Reference Signal Received Power (see 3GPP 36.214 Section 5.1.1).
<RSRQ> Integer type. Reference Signal Received Quality (see 3GPP 36.214 Section
5.1.2).
<RSSI> Integer type. Integer type. The parameter shows the Received Signal Strength
Indication.
<SINR> Integer type. Integer type. Logarithmic value of SINR. Values are in 1/5th of a dB.
Range: 0-250, which translates to -20 dB to +30 dB.
LTE-A Module Series
6 Call Related Commands

6.1. AT+QECCNUM Configure Emergency Call Numbers
This command queries, adds and deletes ECC (emergency call) numbers. There are two kinds of ECC
numbers: ECC numbers without (U)SIM and ECC numbers with (U)SIM. The default ECC numbers
without (U)SIM is 911, 112, 00, 08, 110, 999, 118 and 119. The default ECC number with (U)SIM is 911
and 112. 911 and 112 will always be supported as ECC numbers, and cannot be deleted. ECC numbers
can be saved into flash. If the (U)SIM card contains a ECC file, the numbers in the ECC file can also be
regarded as ECC numbers.
AT+QECCNUM Configure Emergency Call Numbers

AT+QECCNUM=? +QECCNUM: (range of supported <mode>s)
OK
AT+QECCNUM=<mode>,<type>[,<ecc If <mode> is equal to 0, query the ECC numbers. In this
num1>[,<eccnum2>,…[,<eccnumN>]] case, <eccnumN> should be omitted, and the response is:
] +QECCNUM: <type>[,<eccnum1>,<eccnum2>…]
OK
If <mode> is not equal to 0: <mode>=1 is used to add the

ECC number; <mode>=2 is used to delete the ECC number.
In this case, at least one ECC number <eccnumN> should be
inputted, and the response is:
OK
Or
ERROR
AT+QECCNUM? +QECCNUM: 0,[<eccnum1>,<eccnum2>…]
+QECCNUM: 1,[<eccnum1>,<eccnum2>[…]
OK
Characteristics
LTE-A Module Series
Reference
3GPP TS 27.007
Parameter
<mode> Integer type. ECC number operation mode.

0 Query ECC numbers
1 Add ECC numbers
2 Delete ECC numbers
<type> Integer type. ECC number type.
0 ECC numbers without (U)SIM
1 ECC numbers with (U)SIM
<eccnumN> String type; ECC numbers (e.g.110, 119).
Example
AT+QECCNUM=? //Query the supported operation mode for ECC number.
+QECCNUM: (0-2)
OK
AT+QECCNUM? //Query the ECC numbers with or without (U)SIM.
+QECCNUM: 0,"911","112","00","08","110","999","118","119","000"
+QECCNUM: 1,"911","112","000"
OK
AT+QECCNUM=0,1 //Query the ECC numbers with (U)SIM.
+QECCNUM: 1,"911","112","000"
OK
AT+QECCNUM=1,1,"110","234" //Add "110" and "234" into the type of ECC numbers with (U)SIM.
OK
+QECCNUM: 1,"911","112","000","110","234"
OK
AT+QECCNUM=2,1,"110" //Delete "110" from the type of ECC numbers with (U)SIM.
OK
+QECCNUM: 1,"911","112","000","234"
OK
LTE-A Module Series
7 Phonebook Commands
7.1. AT+CNUM Subscriber Number
This command gets the subscribers' own number(s) from the (U)SIM.
AT+CNUM Subscriber Number

AT+CNUM=? OK
AT+CNUM [+CNUM: [<alpha>],<number>,<type>]
[+CNUM: [<alpha>],<number>,<type>]
OK

+CME ERROR: <err>
Or
ERROR
Characteristics /
Reference
3GPP 27.007
Parameter
<alpha> Optional alphanumeric string associated with <number>. The used character set
should be the one selected with AT+CSCS command.
<number> String type phone number in the format specified by <type>.
<type> Type of address of octet in integer format (See 3GPP TS 24.008). Usually, it has three
kinds of values:
129 Unknown type
145 International type (contains the character “+”)
161 National type
LTE-A Module Series
7.2. AT+CPBS Select Phonebook Memory Storage
This command selects phonebook memory storage, which is used by other phonebook commands. The
Read Command returns the current selected memory, the number of used locations and the total number
of locations in the memory supported by manufacturer. The Test Command returns supported storages
as compound values.
AT+CPBS Select Phonebook Memory Storage

AT+CPBS=? +CPBS: (list of supported <storage>s)
OK

+CME ERROR: <err>
Or
ERROR
AT+CPBS? +CPBS: <storage>,<used>,<total>
OK

+CME ERROR: <err>
Or
ERROR
AT+CPBS=<storage> OK

+CME ERROR: <err>
Or
ERROR
Characteristics /
Reference
3GPP 27.007
Parameter
<storage> String type.
LTE-A Module Series
"SM" (U)SIM phonebook

"FD" (U)SIM fixed dialing phonebook (AT+CPBW operation needs the authority of
PIN2)
“ON” (U)SIM’s own numbers (MSISDNs) list
“AP” Selected application phonebook. If a UICC with an active USIM application is
present, the application phonebook, DFPHONEBOOK under ADFUSIM, is
selected.
"SDN" Service Dialing Number
<used> Integer type. Indicate the total number of used locations in the selected memory.
<total> Integer type. Indicate the total number of locations in the selected memory.
7.3. AT+CPBF Find Phonebook Entries
This command searches the phonebook entries starting with the given <findtext> string from the current
phonebook memory storage selected with AT+CPBS, and return all found entries sorted in alphanumeric
order.
AT+CPBF Find Phonebook Entries

AT+CPBF=? +CPBF: <nlength>,<tlength>
OK
AT+CPBF=<findtext> [+CPBF: <index>,<number>,<type>,<text>]
[…]
OK

+CME ERROR: <err>
Or
ERROR
Maximum Response Time Depends on the storage of phonebook entries.
Characteristics /
Reference
3GPP 27.007
LTE-A Module Series
Parameter
<nlength> Integer type. Indicate the maximum length of field <number>.

<tlength> Integer type. Indicate the maximum length of field <text>.
<findtext> String type. The field of maximum length <tlength> in current TE character set
specified by AT+CSCS.
<index> Integer type. In the range of location numbers of phone book memory.
kinds of values:
129 Unknown type
161 National type
<text> String type field of maximum length <tlength> in current TE character set specified by
AT+CSCS.
7.4. AT+CPBR Read Phonebook Entries
This command reads phonebook entries in location number range <index1>... <index2> from the current
phonebook memory storage selected with AT+CPBS. If <index2> is left out, only location <index1> will
be returned.
AT+CPBR Read Phonebook Entries

AT+CPBR=? +CPBR: (list of supported <index>s),<nlength>,<tlength>
OK
AT+CPBR=<index1>[,<index2>] +CPBR: <index1>,<number>,<type>,<text>
[…]
OK

+CME ERROR: <err>
Or
ERROR
Maximum Response Time Depends on the storage of phonebook entries.
Characteristics /
Reference
3GPP 27.007
LTE-A Module Series
Parameter
<index> Integer type. Location numbers of phone book memory.

<nlength> Integer type. Indicate the maximum length of the field <number>.
<tlength> Integer type. Indicate the maximum length of the field <text>.
<index1> Integer type. The first phone book record to read.
<index2> Integer type. The last phonebook record to read.
kinds of values:
129 Unknown type
161 National type
<text> String type. The field of maximum length <tlength> in current TE character set
specified by AT+CSCS.
7.5. AT+CPBW Write Phonebook Entry
This command writes phonebook entry of the location number <index> in the current phonebook memory
storage selected with AT+CPBS. It can also delete a phonebook entry of the location number <index>.
AT+CPBW Write Phonebook Entry

AT+CPBW=? +CPBW: (range of supported <index>s),<nlength>,(list of
supported <type>s),<tlength>
OK

+CME ERROR: <err>
Or
ERROR
AT+CPBW=[<index>][,<number>[,<ty OK
pe>[,<text>]]]
+CME ERROR: <err>
Or
ERROR
Characteristics /
LTE-A Module Series
Reference
3GPP 27.007
Parameter
<index> Integer type. The range of location numbers of phonebook entry. If <index> is not
given, the first free entry will be used. If <index> is given as the only parameter, the
phonebook entry specified by <index> is deleted.
<nlength> Integer type. Indicate the maximum length of field <number>.
<tlength> Integer type. Indicate the maximum length of field <text>.
<type> Type of address of octet in integer format (See 3GPP TS 24.008). Usually, it has two
kinds of values:
129 Unknown type
145 International type (contains the character "+")
<text> String type field of maximum length <tlength> in current TE character set specified by
AT+CSCS.
Example
AT+CSCS="GSM"
OK
AT+CPBW=10,"15021012496",129,"QUECTEL" //Make a new phonebook entry at location 10.
OK
AT+CPBW=10 //Delete the entry at location 10.
OK
LTE-A Module Series
8 Short Message Service Commands

8.1. AT+CSMS Select Message Service
This command selects messaging service <service> and returns the types of messages supported by the
ME.
AT+CSMS Select Message Service

AT+CSMS=? +CSMS: (list of supported <service>s)
OK
AT+CSMS? +CSMS: <service>,<mt>,<mo>,<bm>
OK
AT+CSMS=<service> +CSMS: <mt>,<mo>,<bm>
OK

+CMS ERROR: <err>
Or
ERROR
Characteristics
The configurations will be saved automatically.
Reference
3GPP TS 27.005
Parameter
<service> Integer type. Type of message service.

0 3GPP TS 23.040 and 3GPP TS 23.041 (the syntax of SMS AT commands is
compatible with 3GPP TS 27.005 Phase 2 version 4.7.0; Phase 2+ features which
LTE-A Module Series
do not require new command syntax may be supported, e.g., correct routing of
messages with new Phase 2+ data coding schemes).
1 3GPP TS 23.040 and 3GPP TS 23.041 (the syntax of SMS AT commands is
compatible with 3GPP TS 27.005 Phase 2+ version; the requirement of <service>
setting 1 is mentioned under corresponding command descriptions).
<mt> Integer type. Mobile terminated messages.
0 Type not supported
1 Type supported
<mo> Integer type. Mobile originated messages.
1 Type supported
<bm> Integer type. Broadcast type messages.
1 Type supported
Example
AT+CSMS=? //Query the supported service types.
+CSMS: (0,1)
OK
AT+CSMS=1 //Set the type of message service to 1.
+CSMS: 1,1,1
OK
AT+CSMS? //Read the current setting.
+CSMS: 1,1,1,1
OK
8.2. AT+CMGF Message Format
This command specifies the input and output format of the short messages. <mode> indicates the format
of messages used with Test, Read, Write and Execution Commands and unsolicited result codes
resulting from received messages.
The format of messages can be either PDU mode (entire TP data units used) or text mode (headers and
body of the messages given as separate parameters). Text mode uses the value of parameter <chset>
specified by AT+CSCS command to inform the character set to be used in the message body in the
TA-TE interface.
LTE-A Module Series
AT+CMGF Message Format

AT+CMGF=? +CMGF: (list of supported <mode>s)
OK
AT+CMGF? +CMGF: <mode>
OK
AT+CMGF=<mode> This command tells TA which input and output format of
messages to use.
OK
Characteristics
Reference
3GPP TS 27.005
Parameter

0 PDU mode
1 Text mode
8.3. AT+CSCA Service Center Address
This Write Command updates the SMSC address when mobile originated SMS are transmitted. In text
mode, setting is used by Write Command. In PDU mode, setting is used by same command, but only
when the length of the SMSC address coded into <pdu> parameter equals zero.
AT+CSCA Service Center Address

AT+CSCA=? OK
AT+CSCA? +CSCA: <sca>,<tosca>
OK
LTE-A Module Series
AT+CSCA=<sca>[,<tosca>] OK

+CME ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.005
Parameter
<sca> Service center address. 3GPP TS 24.011 RP SC address Address-Value field in

string format; BCD numbers (or GSM 7-bit default alphabet characters) are converted
to characters of the currently selected TE character set (see AT+CSCS command in
3GPP TS 27.007). The type of address is given by <tosca>.
<tosca> Type of service center address. 3GPP TS 24.011 RP SC address Type-of-Address
octet in integer format (see <toda>).
Example
AT+CSCA="+8613800210500",145 //Set SMS service center address.
OK
AT+CSCA? //Query SMS service center address.
+CSCA: "+8613800210500",145
OK
8.4. AT+CPMS Preferred Message Storage
This command selects the memory storages <mem1>, <mem2> and <mem3> to be used for reading,
writing, etc.
AT+CPMS Preferred Message Storage

AT+CPMS=? +CPMS: (list of supported <mem1>s),(list of supported
<mem2>s),(list of supported <mem3>s)
LTE-A Module Series
OK
AT+CPMS? +CPMS: <mem1>,<used1>,<total1>,<mem2>,<used2>,<t
otal2>,<mem3>,<used3>,<total3>
OK
AT+CPMS=<mem1>[,<mem2>[,<mem +CPMS: <used1>,<total1>,<used2>,<total2>,<used3>,<to
3>]] tal3>
OK

+CMS ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.005
Parameter
<mem1> Messages will be read and deleted from this memory storage.
"SM" (U)SIM message storage
"ME" Mobile equipment message storage
<mem2> Messages will be written and sent to this memory storage.
<mem3> The received messages will be placed in this memory storage if routing to PC is not
set.
<usedx> Integer type. Number of current messages in <memx>.
<totalx> Integer type. Total number of messages which can be stored in <memx>.
Example
AT+CPMS="SM","SM","SM" //Set SMS message storage as "SM".
+CPMS: 0,50,0,50,0,50
LTE-A Module Series
OK
AT+CPMS? //Query the current SMS message storage.
+CPMS: "SM",18,50,"SM",18,50,"SM",18,50
OK
8.5. AT+CMGD Delete Message
This command deletes short messages from the preferred message storage <mem1> location <index>.
If <delflag> is presented and not set to 0, then the ME shall ignore <index> and follow the rules of
<delflag> shown as below.
AT+CMGD Delete Message

AT+CMGD=? +CMGD: (range of supported <index>s),(list of supported
<delflag>s)
OK
AT+CMGD=<index>[,<delflag>] TA deletes message from preferred message storage
<mem1> location <index>.
OK

+CMS ERROR: <err>
Or
ERROR
300 ms.
Maximum Response Time Note: Operation of <delflag> depends on the storage of
deleted messages.
Characteristics
Reference
3GPP TS 27.005
Parameter
<index> Integer type value in the range of location numbers supported by the associated memory.
<delflag> 0 Delete the message specified in <index>
1 Delete all read messages from <mem1> storage
LTE-A Module Series
2 Delete all read messages from <mem1> storage and sent mobile originated
messages
3 Delete all read messages, sent and unsent mobile originated messages from
<mem1> storage
4 Delete all messages from <mem1> storage
<mem1> Messages to be read and deleted from this memory storage.
Example
AT+CMGD=1 //Delete the message specified with <index>=1.
OK
AT+CMGD=1,4 //Delete all messages from <mem1> storage.
OK
8.6. AT+CMGL List Messages
This Read Command returns messages with status value <stat> from preferred message storage
<mem1> to the TE. If the status of the message is "REC UNREAD", the status in the storage changes to
"REC READ". When executing command AT+CMGL without status value <stat>, it will report the list of
SMS with "REC UNREAD" status.
AT+CMGL List Messages

AT+CMGL=? +CMGL: (list of supported <stat>s)
OK
AT+CMGL[=<stat>] If in text mode (AT+CMGF=1) and the command is executed
successfully:
For SMS-SUBMITs and/or SMS-DELIVERs:
+CMGL: <index>,<stat>,<oa/da>,[<alpha>],[<scts>][,<too
a/toda>,<length>]<CR><LF><data>
[...]
OK
For SMS-STATUS-REPORTs:
+CMGL: <index>,<stat>,<fo>,<mr>,[<ra>],[<tora>],<sct
LTE-A Module Series
s>,<dt>,<st>
[...]
OK
For SMS-COMMANDs:
+CMGL: <index>,<stat>,<fo>,<ct>
[...]
OK
For CBM storage:

+CMGL: <index>,<stat>,<sn>,<mid>,<page>,<pages><C
R><LF><data>
[...]
OK
If in PDU mode (AT+CMGF=0) and the command is executed

successfully:
+CMGL: <index>,<stat>,[<alpha>],<length><CR><LF><p
du>
[...]
OK

+CMS ERROR: <err>
Or
ERROR
AT+CMGL List all messages with "REC UNREAD" status from message
storage <mem1>, and then the status in the storage changes
to "REC READ".
300ms.
Maximum Response Time Note: Operation of <stat> depends on the storage of listed
messages.
Characteristics
Reference
3GPP TS 27.005
LTE-A Module Series
Parameter
<stat> In text mode:

"REC UNREAD" Received unread messages
"REC READ" Received read messages
"STO UNSENT" Stored unsent messages
"STO SENT" Stored sent messages
"ALL" All messages
In PDU mode:
0 Received unread messages
1 Received read messages
2 Stored unsent messages
3 Stored sent messages
4 All messages
<index> Integer type. In the range of location numbers supported by the associated memory.
<da> Destination Address. 3GPP TS 23.040 TP-Destination-Address Address-Value field in
string format. BCD numbers (or GSM 7-bit default alphabet characters) are
converted to characters of the currently selected TE character set (see AT+CSCS
command in 3GPP TS 27.007). The type of address is given by <toda>.
<oa> Originating address. 3GPP TS 23.040 TP-Originating-Address Address-Value field in
string format. BCD numbers (or GSM 7-bit default alphabet characters) are converted
TS 27.007). The type of address is given by <tooa>.
<alpha> String type alphanumeric representation of <da> or <oa> corresponding to the entry
found in MT phonebook. Implementation of this feature is manufacturer specified. The
used character set should be the one selected with AT+CSCS command (see
definition of this command in 3GPP TS 27.007).
<scts> Service center time stamp. 3GPP TS 23.040 TP-Service-Centre-Time-Stamp in
time-string format (see <dt>).
<toda> Type of recipient address. 3GPP TS 24.011 TP-Recipient-Address Type-of-Address
octet in integer format.
<tooa> Type of originating address. 3GPP TS 24.011 TP-Originating-Address
Type-of-Address octet in integer format (see <toda> by default).
<length> Message length. Integer type. Indicate the length of the message body <data> (or
<cdata>) in characters in the text mode (AT+CMGF=1), or the length of the actual TP
data unit in octets in PDU mode (AT+CMGF=0) (i.e. the RP layer SMSC address
octets are not counted in the length).
<data> In the case of SMS: 3GPP TS 23.040 TP-User-Data in text mode responses; format:
- If <dcs>, indicates that 3GPP TS 23.038 GSM 7-bit default alphabet is used and
<fo> indicates that 3GPP TS 23.040 TP-User-Data-Header-Indication is not set.
- If TE character set is other than "HEX" (refer to AT+CSCS command in 3GPP TS
27.007): ME/TA converts GSM alphabet into current TE character set according to
rules of Annex A in 3GPP TS 27.007.
- If TE character set is "HEX": ME/TA converts each 7-bit character of GSM 7-bit
LTE-A Module Series
default alphabet into two IRA character long hexadecimal number (e.g. character 
(GSM 7-bit default alphabet 23) is presented as 17 (IRA 49 and 55)).
- If <dcs>, indicates that 8-bit or UCS2 data coding scheme is used, or <fo>
indicates that 3GPP TS 23.040 TP-User-Data-Header-Indication is set: ME/TA
converts each 8-bit octet into two IRA character long hexadecimal number (e.g.
octet with integer value 42 is presented to TE as two characters 2A (IRA 50 and
65)).
In the case of CBS: 3GPP TS 23.041 CBM Content of Message in text mode
responses; format:
- If <dcs>, indicates that 3GPP TS 23.038 GSM 7-bit default alphabet is used.
- If TE character set is other than "HEX" (see AT+CSCS in 3GPP TS27.007): ME/TA
converts GSM alphabet into current TE character set according to rules of Annex A
in 3GPP TS 27.007.
- If TE character set is “HEX”: ME/TA converts each 7-bit character of the GSM 7-bit
default alphabet into two IRA character long hexadecimal number.
- If <dcs>, indicates that 8-bit or UCS2 data coding scheme is used: ME/TA converts
each 8-bit octet into two IRA character long hexadecimal number.
<pdu> In the case of SMS: 3GPP TS 24.011 SC address followed by 3GPP TS 23.040 TPDU
in hexadecimal format: ME/TA converts each octet of TP data unit into two IRA
character long hexadecimal number (e.g. octet with integer value 42 is presented to
TE as two characters 2A (IRA 50 and 65)) 3GPP TS 27.007.
<fo> Depends on the command or result code: first octet of 3GPP TS 23.040
SMS-DELIVER, SMS-SUBMIT (default 17), SMS-STATUS-REPORT, or
SMS-COMMAND (default 2) in integer format.
<mr> 3GPP TS 23.040 TP-Message-Reference in integer format
<ra> 3GPP TS 23.040 TP-Recipient-Address Address-Value field in string format; BCD
numbers (or GSM 7-bit default alphabet characters) are converted to characters of the
currently selected TE character set (see +CSCS in 3GPP TS 27.007); type of
address given by <tora>.
<tora> 3GPP TS 24.011 TP-Recipient-Address Type-of-Address octet in integer format (see
<toda> by default).
<scts> 3GPP TS 23.040 TP-Service-Centre-Time-Stamp in time-string format (see
<dt>).
<dt> 3GPP TS 23.040 TP-Discharge-Time in time-string format:
"yy/MM/dd,hh:mm:ss±zz", where characters indicate year (two last digits), month,
day, hour, minutes, seconds and time zone. E.g. 6th of May 1994, 22:10:00 GMT+2
hours equals to "94/05/06,22:10:00+08".
<st> 3GPP TS 23.040 TP-Status in integer format.
<ct> 3GPP TS 23.040 TP-Command-Type in integer format (default 0).
<sn> 3GPP TS 23.041 CBM Serial Number in integer format.
<mid> 3GPP TS 23.041 CBM Message Identifier in integer format.
<page> 3GPP TS 23.041 CBM Page Parameter bits 4-7 in integer format.
<pages> 3GPP TS 23.041 CBM Page Parameter bits 0-3 in integer format.
LTE-A Module Series

Example
AT+CMGF=1 //Set SMS message format as text mode.
OK
AT+CMGL="ALL" //List all messages from message storage.
+CMGL: 1,"STO UNSENT","13156569236"
<This is a test from Quectel>
+CMGL: 2,"STO UNSENT","13156569236"
OK
8.7. AT+CMGR Read Message
This Read Command returns SMS message with location value <index> from message storage <mem1>
to the TE. If status of the message is “REC UNREAD”, status in the storage changes to “REC READ”.
AT+CMGR Read Message

AT+CMGR=? OK
AT+CMGR=<index> If in text mode (AT+CMGF=1) and the command is executed
successfully:
For SMS-DELIVER:
+CMGR: <stat>,<oa>,[<alpha>],<scts>[,<tooa>,<fo>,<pi
d>,<dcs>,<sca>,<tosca>,<length>]<CR><LF><data>
OK
For SMS-SUBMIT:
+CMGR: <stat>,<da>,[<alpha>][,<toda>,<fo>,<pid>,<dc
s>,[<vp>],<sca>,<tosca>,<length>]<CR><LF><data>
OK
For SMS-STATUS-REPORTs:
+CMGR:
<stat>,<fo>,<mr>,[<ra>],[<tora>],<scts>,<dt>,<st>
LTE-A Module Series
OK
For SMS-COMMANDs:
+CMGR: <stat>,<fo>,<ct>[,<pid>,[<mn>],[<da>],[<toda>],
<length><CR><LF><cdata>]
OK
For CBM storage:

+CMGR: <stat>,<sn>,<mid>,<dcs>,<page>,<pages><CR>
<LF><data>
OK
If in PDU mode (AT+CMGF=0) and command is executed

successfully:
+CMGR: <stat>,[<alpha>],<length><CR><LF><pdu>
OK

+CMS ERROR: <err>
Or
ERROR
Maximum Response Time Depends on the length of message content.
Characteristics
Reference
3GPP TS 27.005
Parameter
<index> Integer type. The location numbers supported by the associated memory.
<stat> In text mode
"REC UNREAD" Received unread messages
"REC READ" Received read messages
"STO UNSENT" Stored unsent messages
"STO SENT" Stored sent messages
"ALL" All messages
In PDU mode
0 Received unread messages
1 Received read messages
LTE-A Module Series
2 Stored unsent messages

3 Stored sent messages
4 All messages
<alpha> String type alphanumeric representation of <da> or <oa> corresponding to the entry
found in MT phonebook. Implementation of this feature is manufacturer specified. The
used character set should be the one selected with AT+CSCS command (see
definition of this command in 3GPP TS 27.007).
<da> Destination address. 3GPP TS 23.040 TP-Destination-Address Address-Value field in
3GPP TS 27.007). The type of address is given by <toda>.
3GPP TS 27.007). The type of address is given by <tooa>.
<fo> First octet. Depending on the command or result code: First octet of 3GPP TS 23.040
SMS-DELIVER, SMS-SUBMIT (default 17), SMS-STATUS-REPORT, or
SMS-COMMAND in integer format. If a valid value has been entered once, the
parameter can be omitted.
<pid> Protocol identifier. 3GPP TS 23.040 TP-Protocol-Identifier in integer format. Default:
0.
<dcs> Data coding scheme. Depending on the command or result code: 3GPP TS 23.038
SMS Data Coding Scheme (default 0), or Cell Broadcast Data Coding Scheme in
integer format.
<vp> Validity period. Depending on SMS-SUBMIT <fo> setting: 3GPP TS 23.040
TP-Validity-Period either in integer format or in time-string format (see <dt>).
<mn> Message number. 3GPP TS 23.040 TP-Message-Number in integer format.
<mr> Message reference. 3GPP TS 23.040 TP-Message-Reference in integer format.
<ra> Recipient address. 3GPP TS 23.040 TP-Recipient-Address Address-Value field in
string format. BCD numbers (or GSM default alphabet characters) are converted to
characters of the currently selected TE character set (see AT+CSCS). The type of
address is given by <tora>.
<tora> Type of recipient address. 3GPP TS 24.011 TP-Recipient-Address Type-of-Address
octet in integer format (see <toda> by default).
<tooa> Type of originating address.3GPP TS 24.011 TP-Originating-Address
Type-of-Address octet in integer format (see <toda> by default).
<sca> Service center address. 3GPP TS 24.011 RP SC address Address-Value field in string
format. BCD numbers (or GSM 7-bit default alphabet characters) are converted to
characters of the currently selected TE character set (see AT+CSCS in 3GPP TS
27.007). The type of address is given by <tosca>.
LTE-A Module Series
<tosca> Type of service center address. 3GPP TS 24.011 RP SC address Type-of-Address

<length> Message length. Integer type. Indicate in the text mode (AT+CMGF=1) the length of the
message body <data> (or <cdata>) in characters, or in PDU mode (AT+CMGF=0) the
length of the actual TP data unit in octets (i.e. the RP layer SMSC address octets are
not counted in the length).
<data> The text of short message.
<pdu> In the case of SMS: 3GPP TS 24.011 SC address followed by 3GPP TS 23.040 TPDU
in hexadecimal format: ME/TA converts each octet of TP data unit into two IRA
character long hexadecimal number (e.g. octet with integer value 42 is presented to TE
as two characters 2A (IRA 50 and 65)).
<dt> 3GPP TS 23.040 TP-Discharge-Time in time-string format: "yy/MM/dd,hh:mm:ss±zz",
during which characters indicate year (two last digits), month, day, hour, minutes,
seconds and time zone. E.g. 6th of May 1994, 22:10:00 GMT+2 hours equals to
"94/05/06,22:10:00+08".
<st> 3GPP TS 23.040 TP-Status in integer format.
<ct> 3GPP TS 23.040 TP-Command-Type in integer format (default 0).
<sn> 3GPP TS 23.041 CBM Serial Number in integer format.
<page> 3GPP TS 23.041 CBM Page Parameter bits 4-7 in integer format.
<pages> 3GPP TS 23.041 CBM Page Parameter bits 0-3 in integer format.
<err> Error codes. For more details, please refer to Chapter 12.3.
Example
+CMTI: "SM",3 //Indicates that new message has been received and saved
to <index>=3 of "SM".
AT+CSDH=1 //Show SMS text mode parameters.
OK
AT+CMGR=3 //Read message.
+CMGR: "REC UNREAD","+8615021012496",,"18/12/15,15:06:37+32",145,4,0,0,"+861380021050
0",145,27
OK
8.8. AT+CMGS Send Message
This Write Command sends a short message from TE to network (SMS-SUBMIT). After invoking the
LTE-A Module Series
Write Command, wait for the prompt > and then start to write the message. After that, enter <CTRL+Z> to
indicate the ending of PDU and begin to send the message. Sending can be cancelled by giving <ESC>
character. Abortion is acknowledged with OK, though the message will not be sent. The message
reference <mr> is returned to the TE on successful message delivery. Optionally (when AT+CSMS
<service> value is 1 and network supports) <scts> is returned. The value can be used to identify
message upon unsolicited delivery status report result code.
AT+CMGS Send Message

AT+CMGS=? OK
1) If text mode (AT+CMGF=1): If in text mode (AT+CMGF=1) and sent successfully:
AT+CMGS=<da>[,<toda>]<CR> +CMGS: <mr>
text is entered
<Ctrl+Z/ESC> OK
<ESC> means quits without sending
If in PDU mode (AT+CMGF=0) and sent successfully:
2) If PDU mode (AT+CMGF=0): +CMGS: <mr>
AT+CMGS=<length><CR>
PDU is given <Ctrl+Z/ESC> OK

+CMS ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.005
Parameter

converted to characters of the currently selected TE character set (refer to
AT+CSCS command in 3GPP TS 27.007). The type of address is given by <toda>.
<toda> Integer type. Type of recipient address. 3GPP TS 24.011 TP-Recipient-Address
Type-of-Address octet in integer format.
<length> Message length. Integer type. Indicating in the text mode (AT+CMGF=1) the length of
the message body <data> (or <cdata>) in characters, or in PDU mode
(AT+CMGF=0), the length of the actual TP data unit in octets (i.e. the RP layer SMSC
address octets are not counted in the length).
LTE-A Module Series

Example
OK
AT+CSCS="GSM" //Set character set as GSM which is used by the TE.
OK
AT+CMGS="15021012496"
> <This is a test from Quectel> //Enter in text. Use <CTRL+Z> to send message, or
<ESC> to quit without sending.
+CMGS: 247
OK
8.9. AT+CMMS Send More Messages
This command controls the continuity of the SMS relay protocol link. If the feature is enabled (and
supported by the currently used network) multiple messages can be sent faster as the link is kept open.
AT+CMMS Send More Messages

AT+CMMS=? +CMMS: (range of supported <n>s)
OK
AT+CMMS? +CMMS: <n>
OK
AT+CMMS=<n> OK

+CMS ERROR: <err>
Or
ERROR
Characteristics
LTE-A Module Series
Reference
3GPP TS 27.005
Parameter
<n> Integer type.

0 Feature disabled
1 Keep enabled until the time between the response of the latest message send
command (AT+CMGS, AT+CMSS, etc.) and the next send command exceeds 1-5
seconds (the exact value is up to ME implementation), and then ME shall close the link
and TA switches <n> back to 0 automatically.
2 Feature enabled (If the time between the response of the latest message send
command and the next send command exceeds 1-5 seconds (the exact value is up to
ME implementation), ME shall close the link but TA will not switch <n> back to 0
automatically).
NOTE
After the execution of Read Command, it is required to wait for 5-10 seconds before issuing the Write
Command. Otherwise +CMS ERROR: 500 may appear.
8.10. AT+CMGW Write Message to Memory
This Write and Execution Commands store short messages (either SMS-DELIVER or SMS-SUBMIT)
from TE to memory storage <mem2>, and then the memory location <index> of the stored message is
returned. Message status will be set to "stored unsent" by default, but parameter <stat> also allows other
status values to be given.
The syntax of input text is the same as the one specified in AT+CMGS Write Command.
AT+CMGW Write Message to Memory

AT+CMGW=? OK
1) If text mode (AT+CMGF=1): If message writing is successful:
AT+CMGW=<oa/da>[,<tooa/toda>[,<s +CMGW: <index>
tat>]]<CR>
text is entered OK
<Ctrl+Z/ESC>
<ESC> quits without sending If there is any error:
LTE-A Module Series
+CMS ERROR: <err>

2) If PDU mode (AT+CMGF=0): Or
AT+CMGW=<length>[,<stat>]<CR> ERROR
PDU is given <Ctrl+Z/ESC>
Characteristics
Reference
3GPP TS 27.005
Parameter

string format. BCD numbers (or GSM 7-bit default alphabet characters) are converted to
characters of the currently selected TE character set (see AT+CSCS command in
3GPP TS 27.007). The type of address is given by <toda>.
string format. BCD numbers (or GSM 7-bit default alphabet characters) are converted to
characters of the currently selected TE character set (see AT+CSCS command in
3GPP TS 27.007). The type of address given by <tooa>.
<tooa> Type of originating address. 3GPP TS 24.011 TP-Originating-Address Type-of-Address
<stat> PDU mode Text mode Explanation
0 "REC UNREAD" Received unread messages
1 "REC READ" Received read messages
2 "STO UNSENT" Stored unsent messages
3 "STO SENT" Stored sent messages
4 "ALL" All messages
<length> Message length. Indicate the length of the message body <data> (or <cdata>) in
characters in the text mode (AT+CMGF=1), or in PDU mode (AT+CMGF=0), the length
of the actual TP data unit in octets (i.e. the RP layer SMSC address octets are not
counted in the length).
<pdu> In the case of SMS: 3GPP TS 24.011 SC address followed by 3GPP TS 23.04 TPDU in
hexadecimal format: ME/TA converts each octet of TP data unit into two IRA character
long hexadecimal number (e.g. octet with integer value 42 is presented to TE as two
characters 2A (IRA 50 and 65)).
<index> Index of message in selected storage <mem2>.
LTE-A Module Series
Example
OK
OK
AT+CMGW="15021012496"
> <This is a test from Quectel> //Enter in text. Use <CTRL+Z> to write message or
+CMGW: 4
OK
AT+CMGF=0 //Set SMS message format as PDU mode.
OK
AT+CMGW=18
> 0051FF00000008000A0500030002016D4B8BD5
+CMGW: 5
OK
8.11. AT+CMSS Send Message from Storage
This Write Command sends messages with location value <index> from message storage <mem2> to
the network (SMS-SUBMIT). If a new recipient address <da> is given for SMS-SUBMIT, it shall be used
instead of the one stored with the message. Reference value <mr> is returned to the TE on successful
message delivery. Values can be used to identify message upon unsolicited delivery status report result
code.
AT+CMSS Send Message from Storage

AT+CMSS=? OK
AT+CMSS=<index>[,<da>[,<toda>]] If in text mode (AT+CMGF=1) and sent successfully:
+CMSS: <mr>[,<scts>]
OK
If in PDU mode (AT+CMGF=0) and sent successfully:

+CMSS: <mr> [,<ackpdu>]
OK
LTE-A Module Series

+CMS ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.005
Parameter
<index> Integer type value in the range of location numbers supported by the associated
memory.
<da> Destination Address. 3GPP TS 23.040 TP-Destination-Address Address-Value field in
converted to characters of the currently selected TE character set (see AT+CSCS
command in 3GPP TS 27.007). The type of address is given by <toda>.
<ackpdu> The format is the same as <pdu> in case of SMS, but without 3GPP TS 24.011 SC
address field and the parameter shall be bounded by double quote characters like a
normal string type parameter.
Example
OK
OK
AT+CMGW="15021012496"
> Hello //Enter in text. Use <CTRL+Z> to send message or
+CMGW: 4
OK
LTE-A Module Series
AT+CMSS=4,"18158848480" //Send the message of index 4 from memory storage.

+CMSS: 54
OK
8.12. AT+CSCB Select Cell Broadcast Message Types
This Write Command selects which types of CBMs are to be received by the ME.
AT+CSCB Select Cell Broadcast Message Types

AT+CSCB=? +CSCB: (list of supported <mode>s)
OK
AT+CSCB? +CSCB: <mode>,<mids>,<dcss>
OK
AT+CSCB=<mode>,<mids>[,<dcss>] TA selects which types of CBMs are to be received by the
ME.
OK

+CMS ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.005
Parameter

0 Message types specified in <mids> and <dcss> are accepted
1 Message types specified in <mids> and <dcss> are not accepted
<mids> String type. All different possible combinations of CBM message identifiers (refer to
<mid>), e.g. "0,1,5,320-478,922".
LTE-A Module Series
<dcss> String type. All different possible combinations of CBM data coding schemes (refer to
<dcs>) (default is empty string), e.g. "0-3,5“.
8.13. AT+CSDH Show SMS Text Mode Parameters
This Write Command controls whether detailed header information is shown in text mode result codes.
AT+CSDH Show SMS Text Mode Parameters

AT+CSDH=? +CSDH: (list of supported <show>s)
OK
AT+CSDH? +CSDH: <show>
OK
AT+CSDH=[<show>] OK
Or
ERROR
Characteristics
The configuration will not be saved.
Reference
3GPP TS 27.005
Parameter
<show> Integer type.

0 Do not show header values defined in commands +CSCA, +CSMP (<sca>,
<tosca>, <fo>, <vp>, <pid>, <dcs>) and <length>, <toda> or <tooa> in +CMT,
+CMGL, +CMGR result codes for SMS-DELIVERs and SMS-SUBMITs in text
mode
1 Show the values in result codes
Example
AT+CSDH=0
OK
LTE-A Module Series
AT+CMGR=2
+CMGR: "STO UNSENT","13156569236"
OK
AT+CSDH=1
OK
AT+CMGR=2
+CMGR: "STO UNSENT","13156569236",,128,17,0,0,143,"+8613800551500",145,18
OK
8.14. AT+CSMP Set SMS Text Mode Parameters
This command sets values for additional parameters needed when a short message is sent to the
network or placed in a storage in text mode (AT+CMGF=1). It is possible to set the validity period starting
from when the SM is received by the SMSC (<vp> ranges from 0 to 255) or define the absolute time of the
validity period termination (<vp> is a string).
AT+CSMP Set SMS Text Mode Parameters

AT+CSMP=? OK
AT+CSMP? +CSMP: <fo>,<vp>,<pid>,<dcs>
OK
AT+CSMP=<fo>[,<vp>[,<pid>[,<dcs>] OK
]]

Characteristics
Reference
3GPP TS 27.005
Parameter
<fo> First octet. Depending on the command or result code: First octet of 3GPP TS 23.040
SMS-DELIVER, SMS-SUBMIT (default 17), SMS-STATUS-REPORT,
LTE-A Module Series
SMS-COMMAND in integer format. If a valid value has been entered once, this
parameter can be omitted.
<vp> Validity period. Depending on SMS-SUBMIT <fo> setting: 3GPP TS 23.040
TP-Validity-Period either in integer format or in time-string format (see <dt>).
<pid> Integer type. Protocol identifier. 3GPP TS 23.040 TP-Protocol-Identifier in integer
format. Default: 167.
<dcs> Data coding scheme. Depending on the command or result code: 3GPP TS 23.038
SMS Data Coding Scheme (default 0), or Cell Broadcast Data Coding Scheme in
integer format.
LTE-A Module Series
9 Packet Domain Commands
9.1. AT+CGATT Attachment or Detachment of PS
The command attaches MT to, or detaches MT from, the Packet Domain service. After the command has
been completed, the MT remains in V.25ter command state. If MT is already in the requested state, the
command will be ignored and the OK response will be returned. If the requested state cannot be achieved,
an ERROR or +CME ERROR response will be returned.
AT+CGATT Attachment or Detachment of PS

AT+CGATT=? +CGATT: (list of supported <state>s)
OK
AT+CGATT? +CGATT: <state>
OK
AT+CGATT=<state> OK

+CME ERROR: <err>
Or
ERROR
Whether the command takes effect is determined by network.
Characteristics
Reference
3GPP TS 27.007
Parameter
<state> Integer type. Indicates the state of PS attachment.

0 Detached
1 Attached
LTE-A Module Series
Other values are reserved and will result in an ERROR response to the Write Command.
Example
AT+CGATT=1 //Attach to PS service.
OK
AT+CGATT=0 //Detach from PS service.
OK
AT+CGATT? //Query the current PS service state.
+CGATT: 0
OK
9.2. AT+CGDCONT Define PDP Context
This command specifies PDP context parameters for a specific context <cid>. A special form of the Write
Command (AT+CGDCONT=<cid>) causes the values for context <cid> to become undefined. It is not
allowed to change the definition of an already activated context.
This Read Command returns the current settings for each defined PDP context.
AT+CGDCONT Define PDP Context

AT+CGDCONT=? +CGDCONT: (range of supported <cid>s),<PDP_type>, <
APN>,<PDP_addr>,(range of supported <data_comp>s),(r
ange of supported <head_comp>s),(list of supported <IPv
4AddrAlloc>s),(list of supported <request_type>s),(range
of supported <P-CSCF_discovery>s),(list of supported <I
M_CN_Signalling_Flag_Ind>s)
OK
AT+CGDCONT? +CGDCONT: <cid>,<PDP_type>,<APN>,<PDP_addr>,<da
ta_comp>,<head_comp>,<IPv4AddrAlloc>,<request_typ
e>,<P-CSCF_discovery>,<IM_CN_Signalling_Flag_Ind>
[…]
OK
AT+CGDCONT=<cid>[,<PDP_type>[, OK
<APN>[,<PDP_addr>[,<data_comp>[, Or

LTE-A Module Series
<head_comp>[,<IPv4AddrAlloc>[,<re ERROR
quest_type>[,<P-CSCF_discovery>[,
<IM_CN_Signalling_Flag_Ind>]]]]]]]]]
Characteristics
Reference
3GPP TS 27.007
Parameter
<cid> Integer type. PDP context identifier. A numeric parameter which specifies a particular
PDP context definition. The parameter is local to the TE-MT interface and is used in
other PDP context-related commands. The range of permitted values (minimum
value=1) is returned by the test form of the command. Range: 0–15.
<PDP_type> String type. Packet data protocol type, a string parameter which specifies the type of
packet data protocol. Only "IP", "IPv6" and "IPv4v6" are supported for EPS services.
"IP" Internet Protocol (IETF STD 5)
"PPP" Point to Point Protocol (IETF STD 51)
"IPV6" Internet Protocol, version 6
"IPV4V6" Virtual <PDP_type> introduced to handle dual IP stack UE capability
<APN> String type. Access point name, a string parameter that is a logical name used to
select the GGSN or the external packet data network. If the value is null or omitted,
then the subscription value will be requested.
<PDP_addr> String type. Identifies the MT in the address space applicable to the PDP. If the value
is null or omitted, then a value may be provided by the TE during the PDP startup
procedure or, failing that, a dynamic address will be requested. The allocated address
may be read using the AT+CGPADDR command.
<data_comp> Integer type. Controls PDP data compression (applicable for SNDCP only) (see 3GPP
TS 44.065).
0 Off (Default if value is omitted)
1 On (Manufacturer preferred compression)
2 V.42bis
3 V.44 (Not supported currently)
<head_comp> Integer type. Controls PDP header compression (see 3GPP TS 44.065 and 3GPP TS
25.323).
0 Off
1 On
2 RFC1144
3 RFC2507
4 RFC3095
<IPv4AddrAlloc> Integer type. Controls how the MT/TA requests to get the IPv4 address information.
0 IPv4 address allocated through NAS signalling

LTE-A Module Series
1 IPv4 address allocated through DHCP

<request_type> Integer type. Indicates the type of PDP context activation request for the PDP context.
Please refer to 3GPP TS 24.301 (subclause 6.5.1.2) and 3GPP TS 24.008 (subclause
10.5.6.17). If the initial PDP context is supported (subclause 10.1.0), it is not allowed to
assign <cid>=0 for emergency bearer services. According to 3GPP TS 24.008
(subclause 4.2.4.2.2 and 4.2.5.1.4) and 3GPP TS 24.301 (subclause 5.2.2.3.3 and
5.2.3.2.2), a separate PDP context must be established for emergency bearer
services.
<P-CSCF_discovery> Integer type. Influences how the MT/TA requests to get the P-CSCF address,
(see 3GPP TS 24.229 annex B and L).
0 Preference of P-CSCF address discovery not influenced by
AT+CGDCONT
1 Preference of P-CSCF address discovery through NAS signaling
2 Preference of P-CSCF address discovery through DHCP
<IM_CN_Signalling_Flag_Ind> Integer type. Indicates to the network whether the PDP context is for
IM CN subsystem-related signaling only or not.
0 UE indicates that the PDP context is not for IM CN
subsystem-related signaling only
1 UE indicates that the PDP context is for IM CN
subsystem-related signaling only
9.3. AT+CGACT Activate or Deactivate PDP Context
This Write Command activates or deactivates the specified PDP context(s) defined by CGDCONT. After
the command has completed, the MT remains in V.250 command state. If any PDP context is already in
the requested state, the state for that context remains unchanged. If the MT is not PS attached when the
activation form of the command is executed, the MT first performs a PS attach and then attempts to
activate the specified contexts. If no <cid>s specify the activation/deactivation form of the command, it
will activate or deactivate all defined contexts.
AT+CGACT Activate or Deactivate PDP Context

AT+CGACT=? +CGACT: (list of supported <state>s)
OK
AT+CGACT? +CGACT: <cid>,<state>
[…]
OK
AT+CGACT=<state>,<cid> OK

LTE-A Module Series
Or
NO CARRIER

+CME ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<state> Integer type. Indicates the state of PDP context activation.

0 Deactivated
1 Activated
<cid> Integer type. Specifies a particular PDP context definition (see AT+CGDCONT).
Example
AT+CGDCONT=2,"IP","UNINET" //Define PDP context.
OK
AT+CGACT=1,2 //Activate PDP.
OK
AT+CGACT? //Query the current PDP context state.
+CGACT: 1,1
+CGACT: 2,1
OK
AT+CGACT=0,2 //Deactivate the PDP.
OK
9.4. AT+CGPADDR Show PDP Address
This Write Command returns a list of PDP addresses for the specified context identifiers. If no <cid> is
specified, the addresses for all defined contexts are returned.

LTE-A Module Series
AT+CGPADDR Show PDP Address

AT+CGPADDR=? +CGPADDR: (list of defined <cid>s)
OK
Execution/Write Command Response
AT+CGPADDR[=<cid>[,<cid>[,…]]] +CGPADDR: <cid>,<PDP_addr>
[…]
OK
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<cid> Integer type. Specifies a particular PDP context definition (see AT+CGDCONT).
<PDP_addr> String type. Identifies the MT in the address space applicable to the PDP. The address
may be static or dynamic. For a static address, it will be the one set by AT+CGDCONT
when the context is defined. For a dynamic address it will be the one assigned
during the last PDP context activation that used the context definition referred to by
<cid>. <PDP_address> is omitted if none is available.
Example
AT+CGDCONT=1,"IP","UNINET" //Define PDP context.
OK
AT+CGACT=1,1 //Activate PDP.
OK
AT+CGPADDR=1 //Show PDP address.
+CGPADDR: 1,"10.76.51.180"
OK

LTE-A Module Series
9.5. AT+CGCLASS GPRS Mobile Station Class
This command sets the MT to operate according to the specified mode of operation. For details, see
3GPP TS 23.060.
AT+CGCLASS GPRS Mobile Station Class

AT+CGCLASS=? +CGCLASS: (list of supported <class>s)
OK
AT+CGCLASS? +CGCLASS: <class>
OK
AT+CGCLASS=<class> OK

+CME ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<class> String type. Indicates the GPRS mobile class (Functionality in descending order).
A Class-A mode of operation (A/Gb mode), or CS/PS mode of operation (highest mode
of operation)
B Class-B mode of operation (A/Gb mode), or CS/PS mode of operation
CG Class-C mode of operation in PS only mode (A/Gb mode), or PS mode of operation
CC Class-C mode of operation in CS only mode (A/Gb mode), or CS (lowest mode of
operation)

LTE-A Module Series
9.6. AT+CGREG GPRS Network Registration Status
This command queries the network registration status and controls the presentation of an unsolicited
result code +CGREG: <stat> when <n>=1 and there is a change in the MT’s GPRS network registration
status in GERAN/UTRAN, or unsolicited result code +CGREG: <stat>[,[<lac>],[<ci>],[<AcT>],[<rac>]]
when <n>=2 and there is a change of the network cell in GERAN/UTRAN. The configuration will take
effect immediately.
AT+CGREG Network Registration Status

AT+CGREG=? +CGREG: (list of supported <n>s)
OK
AT+CGREG? +CGREG: <n>,<stat>[,<lac>,<ci>[,<AcT>]]
OK
AT+CGREG=<n> OK
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<n> Integer type.

1 Enable network registration unsolicited result code +CGREG: <stat>
2 Enable network registration and location information unsolicited result code
+CGREG: <stat>[,<lac>,<ci>[,<AcT>]]
<stat> Integer type. Indicates the GPRS registration status.
0 Not registered. MT is not currently searching an operator to register to. The UE is
in GMM state GMM-NULL or GMM-DEREGISTERED-INITIATED. The GPRS
service is disabled, but the UE is allowed to attach for GPRS if requested by the
user.
1 Registered, home network. The UE is in GMM state GMM-REGISTERED or
GMM-ROUTING-AREA-UPDATING-INITIATED INITIATED on the home PLMN.
2 Not registered, but MT is trying to attach or searching an operator to register to.

LTE-A Module Series
UE is in GMM state GMM-DEREGISTERED or GMM-REGISTERED-INITIATED.

The GPRS service is enabled, but an allowable PLMN is currently not available.
The UE will start a GPRS attach as soon as an allowable PLMN is available.
3 Registration denied. The UE is in GMM state GMM-NULL. The GPRS service is
disabled, and the UE is not allowed to attach for GPRS if requested by the user.
4 Unknown
<lac> String type. Two-byte location area code in hexadecimal format (e.g. "00C3" equals 195 in
decimal).
<ci> String type. 16-bit (GSM) or 28-bit (UMTS/LTE) cell ID in hexadecimal format.
<AcT> Access technology selected.
0 GSM
2 UTRAN
3 GSM W/EGPRS
4 UTRAN W/HSDPA
5 UTRAN W/HSUPA
7 E-UTRAN
8 UTRAN HSPA+
<rac> String type. Routing Area Code.
9.7. AT+CGEREP Packet Domain Event Reporting
This Write Command enables or disables sending of unsolicited result codes +CGEV: XXX from MT to TE
in the case of certain events occurring in the Packet Domain MT or the network. <mode> controls the
processing of unsolicited result codes specified within this command. <bfr> controls the effect on buffered
codes when <mode> 1 or 2 is specified.
AT+CGEREP Packet Domain Event Reporting

AT+CGEREP=? +CGEREP: (range of supported <mode>s),(list of supported
<bfr>s)
OK
AT+CGEREP? +CGEREP: <mode>,<bfr>
OK
AT+CGEREP[=mode[,<bfr>]] OK
Or
ERROR

LTE-A Module Series

Characteristics
Reference
3GPP TS 27.007
Parameter

0 Buffer unsolicited result codes in the MT; if MT result code buffer is full, the oldest
ones can be discarded. No codes are forwarded to the TE.
1 Discard unsolicited result codes when MT-TE link is reserved (e.g. in on-line data
mode), otherwise forward them directly to the TE.
2 Buffer unsolicited result codes in the MT when MT-TE link is reserved (e.g. in
on-line data mode) and flush them to the TE when MT-TE link becomes available.
Otherwise forward them directly to the TE.
<bfr> Integer type.
0 MT buffer of unsolicited result codes defined within this command is cleared when
<mode> 1 or 2 is specified.
1 MT buffer of unsolicited result codes defined within this command is flushed to the
TE when <mode> 1 or 2 is specified (OK response shall be given before flushing
the codes).
NOTES
The unsolicited result codes and the corresponding events are defined as follows:
1. +CGEV: REJECT <PDP_type>,<PDP_addr>: A network request for PDP context activation
occurred when the MT was unable to report it to the TE with a +CRING unsolicited result code and
was automatically rejected.
Note: This event is not applicable for EPS.
2. +CGEV: NW REACT <PDP_type>,<PDP_addr>,[<cid>]: The network has requested a context
reactivation. The <cid> used to reactivate the context is provided if known to the MT.
Note: This event is not applicable for EPS.
3. +CGEV: NW DEACT <PDP_type>,<PDP_addr>,[<cid>]: The network has forced a context
deactivation. The <cid> used to activate the context is provided if known to the MT.
4. +CGEV: ME DEACT <PDP_type>,<PDP_addr>,[<cid>]: The mobile equipment has forced a
context deactivation. The <cid> used to activate the context is provided if known to the MT.
5. +CGEV: NW DETACH: The network has forced a Packet Domain detach. This implies that all active
contexts have been deactivated. These are not reported separately.
6. +CGEV: ME DETACH: The mobile equipment has forced a Packet Domain detach. This implies that
all active contexts have been deactivated. These are not reported separately.
7. +CGEV: NW CLASS <class>: The network has forced a change of MS class. The highest available

LTE-A Module Series
class is reported (see AT+CGCLASS).

8. +CGEV: ME CLASS <class>: The mobile equipment has forced a change of MS class. The highest
available class is reported (see AT+CGCLASS).
9. +CGEV: PDN ACT <cid>: Activated a context. The context represents a PDN connection in LTE or a
Primary PDP context in GSM/UMTS.
10. +CGEV: PDN DEACT <cid>: Deactivated a context. The context represents a PDN connection in
LTE or a Primary PDP context in GSM/UMTS.
Parameter
<PDP_type> Srting type. Packet data protocol type. A string parameter which specifies the type of
packet data protocol.
"IP" IPv4
"PPP" PPP
"IPV6" IPv6
"IPV4V6" IPv4v6
is null or omitted, then a value may be provided by the TE during the PDP.
value=1) is returned by the test form of AT+CGDCONT.
<class> String type. Indicates the GPRS mobile class.
A Class A (highest)
9.8. AT+CGSMS Select Service for MO SMS Messages
This command specifies the service or service preference that the MT will use to send MO (mobile
originated) SMS messages.
AT+CGSMS Select Service for MO SMS Messages

AT+CGSMS=? +CGSMS: (range of currently available <service>s)
OK
AT+CGSMS? +CGSMS: <service>
OK
AT+CGSMS=<service> OK

LTE-A Module Series

+CME ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<service> Integer type. Indicates the service or service preference to be used.

0 GPRS
1 Circuit switch
2 Packet domain preferred (use circuit switched if GPRS not available)
3 Circuit switch preferred (use GPRS if circuit switched not available)
9.9. AT+CEREG EPS Network Registration Status
This command queries the network registration status and controls the presentation of an unsolicited
result code +CEREG: <stat> when <n>=1 and there is a change in the MT’s EPS network registration
status in E-UTRAN, or unsolicited result code +CEREG: <stat>[,[<tac>],[<ci>],[<AcT>]] when <n>=2
and there is a change of the network cell in E-UTRAN.
AT+CEREG EPS Network Registration Status

AT+CEREG=? +CEREG: (range of supported <n>s)
OK
AT+CEREG? +CEREG: <n>,<stat>[,<tac>,<ci>[,<AcT>]]
OK
AT+CEREG=<n> OK
Or
ERROR

LTE-A Module Series

Characteristics
Reference
3GPP TS 27.007
Parameter
<n> Integer type.

1 Enable network registration unsolicited result code +CEREG: <stat>
2 Enable network registration and location information unsolicited result code
+CEREG: <stat>[,<tac>,<ci>[,<AcT>]]
<stat> Integer type. Indicate the EPS registration status.
0 Not registered. ME is not currently searching a new operator to register to
1 Registered, home network
2 Not registered, but ME is currently searching a new operator to register to
3 Registration denied
4 Unknown
<tac> String type. Two-byte tracking area code in hexadecimal format.
<ci> String type. 28-bit E-UTRAN cell ID in hexadecimal format.
<AcT> Integer type. Access technology selected.
0 GSM
2 UTRAN
3 GSM W/EGPRS
4 UTRAN W/HSDPA
5 UTRAN W/HSUPA
7 E-UTRAN
8 UTRAN HSPA+
9.10. AT+QGDCNT Packet Data Counter
This command allows the application to check how much bytes are sent by or received by MT.
AT+QGDCNT Packet Data Counter

AT+QGDCNT=? +QGDCNT: (list of supported <op>s)

LTE-A Module Series
OK

AT+QGDCNT? +QGDCNT: <bytes_sent>,<bytes_recv>
OK
AT+QGDCNT=<op> OK

+CME ERROR: <err>
Or
ERROR
Characteristics
Reference
Quectel
Parameter
<op> Integer type. The operation about data counter.

0 Reset the data counter
1 Save the results of data counter to NVM
<bytes_sent> Integer type. The amount of sent bytes.
<bytes_recv> String type. Two-byte tracking area code in hexadecimal format. The amount of
received bytes.
NOTE
When MT is powered on, <bytes_sent> and <bytes_recv> are loaded from results of data counter in
NVM. The default result in NVM is 0.
Example
AT+QGDCNT=? //Test command.
+QGDCNT: (0,1)
OK
AT+QGDCNT? //Query the current bytes sent and received.
+QGDCNT: 3832,4618

LTE-A Module Series
OK
AT+QGDCNT=1 //Save the results to NVM.
OK
AT+QGDCNT=0 //Reset the data counter.
OK
9.11. AT+QAUGDCNT Auto Save Packet Data Counter
This command allows AT+QGDCNT to save results to NVM automatically.
AT+QGDCNT Auto Save Packet Data Counter

AT+QAUGDCNT=? +QAUGDCNT: (list of supported <value>s)
OK
AT+QAUGDCNT? +QAUGDCNT: <value>
OK
AT+QAUGDCNT=<value> OK

+CME ERROR: <err>
Or
ERROR

Characteristics
Reference
Parameter
<value> Integer type. The parameter is the time-interval for AT+QGDCNT to save results to
NVM automatically. If it is set to 0, auto-save feature is disabled. Range: 0, 30–65535.
Default: 0. Unit: second.

LTE-A Module Series
Example
AT+QAUGDCNT=? //Test command.
+QAUGDCNT: (0,30-65535)
OK
AT+QAUGDCNT=35 //Set <value> to 35.
OK
AT+QAUGDCNT? //Query the interval of auto-save.
+QAUGDCNT: 35
OK
9.12. AT+AUTOAPN Auto-configure APN
This command configures the APN used when the module starts.
AT+AUTOAPN Auto-configure APN

AT+AUTOAPN=? +AUTOAPN: (list of supported <mode>s),(list of supported
<PDP_type>s),<APN>,(range of supported <auth_type>s),<
user_name>,<password>
OK
AT+AUTOAPN? +AUTOAPN: <mode>
OK
AT+AUTOAPN=<mode>[,<PDP_typ OK
e>,<APN>[,<auth_type>[,<usernam Or
e>,<password>]]] ERROR

Characteristics
Parameter
<mode> Integer type. Specifies the APN.

0 Non-automatic APN. You need to manually configure APN-related
parameters and save to system. After reboot, you can dial up to internet with

LTE-A Module Series
the APN.
1 Automatic APN. The module dials up to internet with internal automatic APN
configuration
<PDP_type> String type. Packet data protocol type.
"IP" Get IPv4 address from Internet
"IPV6" Get IPv6 address from Internet
"IPV4V6" Get IPv4 and IPv6 address from Internet
The following parameters are only valid when <mode> is 0:
<APN> String type. Access point name.
<auth_type> Authentication way.
0 None
1 PAP
2 CHAP
<username> String type. Username used to dial up the Internet.
<password> String type. Password to dial up the Internet.
Example
AT+AUTOAPN? //Query the mode of APN configuration.
+AUTOAPN: 1
OK
AT+AUTOAPN=1,"IP" //Get IPv4 address from Internet.
OK
AT+AUTOAPN=? //Test command.
+AUTOAPN: (0,1),("IP","IPV6","IPV4V6"),<APN>,(0-2),<user_name>,<password>
OK
9.13. AT+ZGDCONT Define PDP Context
Command (AT+ZGDCONT=<cid>) causes the values for context <cid> to become undefined.
This Read Command returns the current settings for each defined PDP context.
AT+ZGDCONT Define PDP Context

AT+ZGDCONT=? +ZGDCONT: (range of supported <cid>s),<PDP_type>,
<APN>,<PDP_addr>

LTE-A Module Series
OK

AT+ZGDCONT? +ZGDCONT: <cid>,<PDP_type>,<APN>,<PDP_addr>
OK
AT+ZGDCONT=<cid>[,<PDP_type>[,< OK
APN>]] Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
value=1) is returned by the test form of the command. Range: 0–15.
<PDP_type> String type. Packet data protocol type, a string parameter which specifies the type of
packet data protocol. Only "IP", "IPv6" and "IPv4v6" are supported for EPS services.
"IP" Internet Protocol (IETF STD 5)
"IPV6" Internet Protocol, version 6
"IPV4V6" Virtual <PDP_type> introduced to handle dual IP stack UE capability
<APN> String type. Access point name, a string parameter that is a logical name used to
select the GGSN or the external packet data network. If the value is null or omitted,
then the subscription value will be requested.
may be read using AT+ZGPADDR.
9.14. AT+ZGACT Activate or Deactivate PDP Context
This Write Command activates or deactivates the specified PDP context(s) defined by AT+ZGDCONT.
After the command has completed, the MT remains in V.250 command state. If any PDP context is
already in the requested state, the state for that context remains unchanged. If the MT is not PS attached
when the activation form of the command is executed, the MT first performs a PS attach and then

LTE-A Module Series
attempts to activate the specified contexts.
AT+ZGACT Activate or Deactivate PDP Context

AT+ZGACT=? +ZGACT: (list of supported <state>s)
OK
AT+ZGACT? +ZGACT: <cid>,<state>
[…]
OK
AT+ZGACT=<state>,<cid> OK

+CME ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<state> Integer type. Indicates the state of PDP context activation.

0 Deactivated
1 Activated
<cid> Integer type. Specifies a particular PDP context definition (see AT+ZGDCONT).
Example
AT+ZGDCONT=2,"IP","UNINET" //Define PDP context.
OK
AT+ZGACT=1,2 //Activate PDP.
OK
AT+ZGACT? //Query the current PDP context state.
+ZGACT: 1,1
+ZGACT: 2,1

LTE-A Module Series
+ZGACT: 8,1
OK
AT+ZGACT=0,2 //Deactivate the PDP.
OK
9.15. AT+ZGPADDR Show PDP Address
This Write Command returns a list of PDP addresses for the specified context identifiers defined by
AT+ZGDCONT. If no <cid> is specified, the addresses for all defined contexts are returned.
AT+ZGPADDR Show PDP Address

AT+ZGPADDR=? +ZGPADDR: (list of defined <cid>s)
OK
AT+ZGPADDR[=<cid>[,<cid>[,…]]] +ZGPADDR: <cid>,<PDP_addr>
[…]
OK
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<cid> Integer type. Specifies a particular PDP context definition (see AT+ZGDCONT).
may be read using the AT+ZGPADDR command.
Example
AT+ZGDCONT=1,"IP","UNINET" //Define PDP context.
OK

LTE-A Module Series
AT+ZGACT=1,1 //Activate the PDP.

OK
AT+ZGPADDR=1 //Show PDP address.
+ZGPADDR: 1,"10.76.51.180"
OK
9.16. AT+QICSGP Define PDP Context
Command (AT+QICSGP=<cid>) causes the values for context <cid> to become undefined.
AT+QICSGP Define PDP Context

AT+QICSGP=? +QICSGP: (range of supported <cid>s),(range of suppor
ted <context_type>s),<APN>,<username>,<password>,
(range of supported <authentication>s)
OK
AT+QICSGP? +QICSGP: <cid>,<context_type>,<APN>,<PDP_addr>,<
username>,<password>
OK
AT+QICSGP=<cid>,[<context_type>,< If the optional parameters are omitted, query the
APN>[,<username>,<password>,[<aut configuration of a specified context:
hentication>]]] +QICSGP: <context_type>,<APN>,<username>,<passw
ord>,<authentication>
OK
If the optional parameters are specified, configure the

parameters of the specified PDP context:
OK
Or
ERROR
Characteristics

LTE-A Module Series
Parameter
<cid> Integer type. The context ID. Range: 1–15.

<context_type> Integer type. The protocol type.
1 IPv4
2 IPv6
3 IPv4v6
<APN> String type. The access point name.
<username> String type. The username. The maximum length is 50 bytes.
<password> String type. The password. The maximum length is 50 bytes.
<authentication> Integer type. The authentication methods.
0 None
1 PAP
2 CHAP
Example
AT+QICSGP=1 //Query the configurations of context 1.
+QICSGP: 1,"","","",0
OK
AT+QICSGP=1,1,"UNINET",,,1 //Configure context 1. APN "UNINET" stands for China Unicom.
OK
9.17. AT+QNETDEVCTL Activate or Deactivate PDP Context
This Write Command activates or deactivates the specified PDP context(s) defined by AT+QICSGP, and,
if TA is disconnected from the network, indicate TA to reconnect to the network and automatically start the
data call. After the command has completed, the MT remains in V.250 command state. If the PDP context
specified is already in the requested state, its state remains unchanged after the execution of this
command. If the MT is not PS-attached when the activation form of the command is executed, the MT first
performs a PS attach and then attempts to activate the specified context(s).
AT+QNETDEVCTL Activate or Deactivate PDP Context

AT+QNETDEVCTL=? +QNETDEVCTL: (range of supported <op>s),(range of
supported <cid>s),(list of supported <enable>s)
OK
AT+QNETDEVCTL? +QNETDEVCTL: <op>,<cid>,<enable>,<state>

LTE-A Module Series
OK
AT+QNETDEVCTL=<op>,<cid>[,<ena OK
ble>]
+CME ERROR: <err>
Or
ERROR
Characteristics
Parameter
<op> Integer type. Whether to activate the specified PDP context.

0 Deactivate the specified PDP context
1 Activate the specified PDP context only once. It will not reconnect the network
once disconnecting from the network.
2 Activate the specified PDP context. It will reconnect the network after
disconnecting from the network.
3 Activate PDP Context and automatically start the data call after rebooting the
module. It will reconnect the network after disconnecting from the network.
<cid> Integer type. PDP context ID. Range: 1–15.
<enable> Integer type. Whether to enable URC report function.
0 Disable
1 Enable
<state> Integer type. Activation state.
0 Deactivated
1 Activated
Example
AT+QNETDEVCTL=1,2,1 //Activate the PDP.
OK
AT+QNETDEVCTL? //Query the current PDP context state.
+QNETDEVCTL: 1,2,1,1
OK
AT+QNETDEVCTL=0,2 //Deactivate the PDP.
OK

LTE-A Module Series
9.18. AT+QNETDEVSTATUS Show PDP Relevant Information
This Write Command returns the relevant information <address_netmask>, <gate>, <DHCP>, <pDNS>
and <sDNS> of an active non-secondary PDP context with the context identifier <cid>. If the MT has dual
stack capabilities, two lines of information are returned per <cid>. The first line presents IPv4 parameters
while the second line IPv6 parameters. If <cid> is omitted, the relevant information for all active
non-secondary PDP contexts is returned.
AT+ QNETDEVSTATUS Show PDP Relevant Information

AT+QNETDEVSTATUS=? +QNETDEVSTATUS: (list of <cid>s of active contexts)
OK
AT+QNETDEVSTATUS[=<cid>] +QNETDEVSTATUS: <cid>,<address_netmask>,<gate>,<
DHCP>,<pDNS>,<sDNS>
[…]
OK
Or
ERROR
Characteristics /
Parameter
<cid> Integer type. Specifies a particular PDP context (see AT+QICSGP for the
definition of this context). Range: 1–15.
<address_netmask> String type. Shows the IP address and subnet mask of the MT.
<gate> String type. Shows the gateway address of the MT.
<DHCP> String type. Shows the DHCP address.
<pDNS> String type. Shows the IP address of the primary DNS server.
<sDNS> String type. Shows the IP address of the secondary DNS server.
Example
AT+QICSGP?
+QICSGP: 1,1,"cmnet","","",0
OK
AT+QNETDEVSTATUS=?

LTE-A Module Series
+QNETDEVSTATUS: (1)
OK
AT+QNETDEVSTATUS
+QNETDEVSTATUS: 1,"10.253.107.97","","","218.104.78.2","220.206.143.2"
OK
AT+QNETDEVSTATUS=1
+QNETDEVSTATUS: 1,"10.253.107.97","","","218.104.78.2","220.206.143.2"
OK

LTE-A Module Series
10 Audio Commands
10.1. AT+CLVL Loudspeaker Volume Level Selection
This command selects the volume of the internal loudspeaker of MT.
AT+CLVL Loudspeaker Volume Level Selection

AT+CLVL=? +CLVL: (list of supported<level>s)
OK
AT+CLVL? +CLVL: <level>
OK
AT+CLVL=<level> OK
Or
ERROR
Characteristics
The configuration(s) will not be saved.
Reference
Reference 3GPP TS 27.007
Parameter
<level> Integer type. Volume level with manufacturer specific range (Smallest value represents the
lowest sound level). Range: 0–5; Default: 3.
10.2. AT+QLDTMF Play Local DTMF
This command plays a local DTMF string. It can be used to stop playing the DTMF string.

LTE-A Module Series
AT+QLDTMF Play Local DTMF

AT+QLDTMF=? +QLDTMF: (range of supported <n>s),(list of supported
<DTMF_string>s)
OK
AT+QLDTMF=<n>,<DTMF_string> OK
[,<y>]
If there is error related to ME functionality:
+CME ERROR: <err>
After the DTMF string is completely played:

+QLDTMF: 5
AT+QLDTMF OK
Characteristics
Reference
Quectel
Parameter
<n> Integer type. Indicates every DTMF’s play time and mute time. Range: 1–1000.
<DTMF_string> String type. Maximum length: 20 characters, separated by comma. DTMF format:
0–9, *, #, A–D.
Example
AT+QLDTMF=? //Query the range.
+QLDTMF: (1-1000),(0-9,*,#,A-D)
OK
AT+QLDTMF=100,"1,2,A,B,#" //Play “1,2,A,B,#” play time & mute time is 1 second.
OK
AT+QLDTMF //Stop playing.
OK

LTE-A Module Series
10.3. AT+QAUDLOOP Enable/Disable Audio Loop Test
This command enables/disables audio loop test.
AT+QAUDLOOP Enable/Disable Audio Loop Test

AT+QAUDLOOP=? +QAUDLOOP: (list of supported <enable>s)
OK
AT+QAUDLOOP? +QAUDLOOP: <enable>
OK
AT+QAUDLOOP=<enable> OK
Or
ERROR
Characteristics
Reference
Quectel
Parameter
<enable> Integer type. Enables or disables audio loop test.

0 Disable audio loop test
1 Enable audio loop test
10.4. AT+QDAI Digital Audio Interface Configuration
This command configures the digital audio interface. When there is no codec on board, you can define the
PCM formats by themselves. In the following conditions, the MT can be used directly with default settings
(master mode, short-synchronization, 2048 kHz clock frequency, 16-bit liner data format, 8 kHz sampling
rate).
AT+QDAI Digital Audio Interface Configuration

AT+QDAI=? +QDAI: (list of supported <io>s),(list of supported

LTE-A Module Series
<mode>s),(list of supported <fsync> s),(range of supported

<clock>s),(list of supported <format>s),(list of supported
<sample>s),(list of supported <num_slots>s),(range of
supported <slot_mapping>s)
OK
AT+QDAI? +QDAI: <io>[,<mode>,<fsync>,<clock>,<format>,<sampl
e>,<num_slots>,<slot_mapping>]
OK
AT+QDAI=<io>[,<mode>,<fsync>,<clo OK
ck>[,<format>[,<sample>[,<num_slot Or
s>,<slot_mapping>]]]] ERROR
Characteristics
Reference
Quectel
Parameter
<io> x Unused (1-3,5 can be set automatically).

<mode> Integer type. Enable master or slave mode.
0 Master mode
1 Slave mode
<fsync> Integer type. Enable primary or auxiliary mode.
0 Primary mode (short-synchronization)
1 Auxiliary mode (long-synchronization)
<clock> Integer type. Clock frequency.
0 128 kHz
1 256 kHz
2 512 kHz
3 1024 kHz
4 2048 kHz
5 4096 kHz
<format> Integer type. Data format.
0 16-bit linear
<sample> Integer type. Choose a sampling rate.
0 8 kHz
1 16 kHz
<num_slots> Integer type.

LTE-A Module Series
1 Number of slot
<slot_mapping> Integer type. Slot mapping value. Range: 1–16.
NOTES
1. 4096 kHz clock frequency is only applicable for 16 kHz sampling rate.
2. 128 kHz clock frequency is not supported.
3. Bit per frame = <clock>/<sample>. For example, if <clock> is 2048 kHz and <sample> is 8 kHz,
then bit per frame is 256. Bit per frame should be greater than 16.
4. When slave mode is selected, master and synchronization clock should be provided for the MT.
When a recommended codec is selected and 16 kHz sampling rate is required, input <sample>.
Currently only ALC5616 supports 16 kHz (AT+QDAI=3,0,0,4,0,0,1,1).
10.5. AT+QSIDET Set Side Tone Gain in Current Mode
This command sets the side tone gain value in current mode. It will take effect at next sound activity.
AT+QSIDET Set Side Tone Gain in Current Mode

AT+QSIDET=? +QSIDET: (list of supported <st_gain>s)
OK
AT+ QSIDET? +QSIDET: <st_gain>
OK
AT+QSIDET=<st_gain> OK
Or
ERROR
Characteristics
Reference
Quectel
Parameter
<st_gain> Integer type. Indicates the configured side tone gain in current mode. Range: 0–65535.
Default value might be different in different audio modes.

LTE-A Module Series
NOTE
This command will be valid only after audio loop test is enabled by AT+QAUDLOOP=1.
10.6. AT+QSLIC Enable/Disable SLIC
This command enables/disables the SLIC.
AT+QSLIC Enable/Disable SLIC

AT+QSLIC=? +QSLIC: (list of supported <enable>s),(list of supported
<type>s)
OK
AT+ QSLIC? +QSIDET: <enable>,<type>
OK
AT+QSLIC=<enable>,<type> OK
Or
ERROR
Characteristics
Reference
Quectel
Parameter
<enable> Integer type. Enables or disables SLIC.

0 Disable
1 Enable
<type> Integer type. Type of SLIC.
1 LE9643
2 SI32185

LTE-A Module Series
10.7. AT+QAUDMOD Set Audio Mode
This command sets the audio mode required for the connected device. It will take effect at next sound
activity.
AT+QAUDMOD Set Audio Mode

AT+QAUDMOD=? +QAUDMOD: (range of supported <mode>s)
OK
AT+QAUDMOD? +QAUDMOD: <mode>
OK
AT+ QAUDMOD=<mode> OK
Or
ERROR
Characteristics
Reference
Quectel
Parameter
<mode> Integer type. Indicates the current configured audio mode.

0 Echo canceller, noise suppressor, digital gain and calibration parameter for handset
1 Echo canceller, noise suppressor, digital gain and calibration parameter for headset
2 Echo canceller, noise suppressor, digital gain and calibration parameter for speaker
10.8. AT+QMIC Set Uplink Gains of Microphone
This command sets the uplink gains of microphone.
AT+QMIC Set Uplink Gains of Microphone

AT+QMIC=? +QMIC: (range of supported <txdgain>s)

LTE-A Module Series
OK
AT+QMIC? +QMIC: <txdgain>
OK
AT+QMIC=<txdgain> OK
Or
ERROR
Characteristics
Reference
Quectel
Parameter
<txdgain> Integer type. Uplink digital gain. Range: 0–65535. The default value may be different in
different audio modes.
10.9. AT+QRXGAIN Set Downlink Gains of RX
This command sets RX digital gains to change the downlink volume.
AT+QRXAGIN Set Downlink Gains of RX

AT+QRXGAIN=? +QRXGAIN: (range of supported <rxgain>s)
OK
AT+QRXGAIN? +QRXGAIN: <rxgain>
OK
AT+QRXGAIN =<rxgain> OK
Or
ERROR
Characteristics The command takes effect immediately.

LTE-A Module Series
Reference
Quectel
Parameter
<rxgain> Integer type. Downlink digital gains. Range: 0–65535. The default value might be different
in different audio modes.
10.10. AT+VTS DTMF and Tone Generation
This command sends ASCII characters which cause MSC to transmit DTMF tones to a remote subscriber.
This command can only be operated in a voice call.
AT+VTS DTMF and Tone Generation

AT+VTS=? +VTS: (list of supported <DTMF_string>s),(range of
supported <duration>s)
OK
AT+VTS=<dtmf_string>[,<duration>] OK
Or
ERROR
Maximum Response Time Depends on the length of <DTMF_string> and <duration>.
Characteristics
Reference
Quectel
Parameter
<DTMF_string> String type. ASCII characters in the set 0...9,#,*, A, B, C, D. The string should be
enclosed in quotation marks ("...").
When sending multiple tones at a time, the time interval of two tones <interval>
can be specified by AT+VTD. The maximal length of the string is 31 bytes.
<duration> The duration of each tone in 10 ms with tolerance. Range: 300–600. Default: 300.
If the duration is less than the minimum time specified by the network, the actual
duration will be the network specified time.
If this parameter is omitted, <duration> can be specified by AT+VTS.

LTE-A Module Series
Example
ATD12345678900; //Dial.
OK
//Call connected.
AT+VTS="1" //The remote caller can hear the DTMF tone.
OK
AT+VTS="1234567890A" //Send multiple tones at a time.
OK

LTE-A Module Series
11 Hardware Related Commands

11.1. AT+CCLK Clock
This command sets and queries the real time clock (RTC) of the module. The current setting is retained
until the module is totally disconnected from power.
AT+CCLK Clock
AT+CCLK=? OK
AT+CCLK? +CCLK: <time>
OK
AT+CCLK=<time> OK

+CME ERROR: <err>
Or
ERROR
Characteristics
Reference
3GPP TS 27.007
Parameter
<time> String type. The format is "yy/MM/dd,hh:mm:ss±zz", indicating year (two last digits), month,
day, hour, minutes, seconds and time zone (indicates the difference, expressed in quarters
of an hour, between the local time and GMT; range: -48 to +56). E.g., May 6th, 1994,
22:10:00 GMT+2 hours equals to "94/05/06,22:10:00+08".

LTE-A Module Series
Example
AT+CCLK? //Query the local time.
+CCLK: "20/09/29,15:39:31+32"
OK
11.2. AT+QSCLK Enable/Disable Low Power Mode
This command controls whether to enable low power mode. When the low power mode is enabled, the
module can directly enter low power mode.
AT+QSCLK Enable/Disable Low Power Mode

AT+QSCLK=? +QSCLK: (list of support <n>s)
OK
AT+QSCLK? +QSCLK: <n>
OK
AT+QSCLK=<n> OK

Characteristics
Reference
Quectel
Parameter
<n> Integer type. Low power mode.

0 Disable
1 Enable. It is controlled by DTR
11.3. AT+QPOWD Power off
This command shuts down the module. The UE returns OK immediately when the command is executed.

LTE-A Module Series
Then the UE deactivates the network. After the deactivation is completed, the UE outputs POWERED
DOWN and enters the shutdown state. The maximum time for unregistering network is 60 seconds. The
UE is not allowed to turn off the power before the module STATUS pin is driven low or the URC
POWERED DOWN is output to avoid data loss.
AT+QPOWD Power off

AT+QPOWD=? +QPOWD: (list of supported <n>s)
OK
AT+QPOWD[=<n>] OK
Characteristics /
Parameter
<n> Integer type. Power-off mode.

0 Immediate power down
1 Normal power down
11.4. AT+QADC Read ADC Value
This command reads the voltage value of ADC channel.
AT+QADC Read ADC Value

AT+QADC=? +QADC: (list of supported <port>s)
OK
AT+QADC=<port> +QADC: <status>,<value>
OK
Characteristics /

LTE-A Module Series
Parameter
<port> Integer type. Channel number of the ADC.

0 ADC Channel 0
1 ADC Channel 1
<status> Integer type. Whether the ADC value is read successfully.
0 Fail
1 Success
<value> Integer type. The voltage of specified ADC channel. Unit: mV.

LTE-A Module Series
12 Appendix A References
12.1. References
Table 3: Related Documents
SN Document Name Remark
[1] V.25ter Serial asynchronous automatic dialing and control
Digital cellular telecommunications (Phase 2+); Universal Mobile

[2] 3GPP TS 27.007 Telecommunications System (UMTS); LTE; AT command set for
User Equipment (UE)
Digital cellular telecommunications (Phase 2+); Universal Mobile
Telecommunications System (UMTS); LTE; Use of Data Terminal
[3] 3GPP TS 27.005 Equipment – Data Circuit terminating Equipment (DTE-DCE)
interface for Short Message Service (SMS) and Cell Broadcast
Service (CBS)
Table 4: Terms and Abbreviations
Abbreviation Description
3GPP 3rd Generation Partnership Project
ADC Analog-to-Digital Converter
AMR Adaptive Multi-Rate
APN Access Point Name
ARFCN Absolute Radio-Frequency Channel Number
ASCII American Standard Code for Information Interchange
BAIC Bar All Incoming Calls

LTE-A Module Series
BAOC Bar All Outgoing Calls
BCD Binary-Coded Decimal
BOIC Bar Outgoing International Calls
BOIC-exHC Bar Outgoing International Calls except to Home Country
CBM Cell Broadcast Message
CCH Control Channel
CHAP Challenge-Handshake Authentication Protocol
CS Circuit Switching
CSD Circuit Switch Data
CUG Closed User Group
DCD Data Carrier Detection
DCE Data Communication Equipment
DCS Data Coding Scheme
DHCP Dynamic Host Configuration Protocol
DPCH Dedicated Physical Channel
DTE Data Terminal Equipment
DTMF Dual-Tone Multifrequency
DTR Data Terminal Ready
EARFCN E-UTRA Absolute Radio Frequency Channel Number
ECC Emergency Call
ECM Ethernet Networking Control Model
ECT Explicit Call Transfer supplementary service
EDGE Enhanced Data Rates for GSM Evolution
EGPRS Enhanced General Packet Radio Service
eHRPD evolved High Rate Packet Data

LTE-A Module Series
EPS Evolved Packet System
E-UTRAN Evolved Universal Terrestrial Radio Access Network
FDD Frequency Division Duplex
FDPCH Fraction-Dedicated Physical Channel
GGSN Gateway GPRS Support Node
GMM GPRS Mobility Management
GMT Greenwich Mean Time
GPIO General-Purpose Input/Output
GPRS General Packet Radio Service
GSM Global System for Mobile Communications
HDR High Data Rate
HLR Home Location Register
HSDPA High Speed Downlink Packet Access
HSPA+ High Speed Packet Access
HSUPA High Speed Uplink Packet Access
ICCID Integrated Circuit Card Identifier
IE Information Element
IIC Inter-Integrated Circuit
IMEI International Mobile Equipment Identity
IMS IP Multimedia Subsystem IMS
IMSI International Mobile Subscriber Identity
IPv4 Internet Protocol version 4
IPv6 Internet Protocol version 6
IRA International Reference Alphabet
LLC Logical Link Control

LTE-A Module Series
LTE-A Long Term Evolution Advanced
MAC Medium Access Control
ME Mobile Equipment
MiFi Mobile Wi-Fi
MO Mobile Originated
MS Mobile Station
MSC Mobile Switching Center
MSISDN Mobile Subscriber International ISDN/PSTN number
MT Mobile Terminal
NAS Non-Access Stratum
NCM Network Control Model
NITZ Network Identity and Time Zone/Network Informed Time Zone
NSAPI Network Service Access Point Identifier
NVM Non-volatile-Memory
PAP Password Authentication Protocol
PCI Physical Cell Identity
PCM Pulse Code Modulation
P-CSCF Proxy-Call Session Control Function
PDP Packet Data Protocol
PDU Packet Data Unit
PIN Personal Identification Number
PLMN Public Land Mobile Network
PPP Point-to-Point Protocol
PS Packet Switching
PSC Primary Synchronization Code

LTE-A Module Series
PUK PIN Unlock Key
QoS Quality of Service
RAB Radio Access Bearer
RAT Radio Access Technology
RDI Remote Defect Indication
RF Radio Frequency
RNDIS Remote Network Driver Interface Specification
RP Relay Protocol
RP SC Relay Protocol Service Center
RR Radio Resource
RRC Radio Resource Control
RTC Real-Time Clock
RTS/CTS Request To Send/Clear To Send
RX Receive
RxQual Receive Quality
SAP Service Access Point
SDU Service Data Unit
SINR Signal-to-interference-plus-noise Ratio
SM Session Management
SMS Short Message Service
SMSC Short Message Service Center
SNDCP SubNetwork Dependent Convergence Protocol
TA Terminal Adapter
TCP Transmission Control Protocol
TDD Time Division Duplex

LTE-A Module Series
TE Terminal Equipment
TFT Traffic Flow Template
TPDU Transport Protocol Data Unit
UART Universal Asynchronous Receiver/Transmitter
UDP User Datagram Protocol
UE User Equipment
UICC Universal Integrated Circuit Card
UIM User Identity Model
UMTS Universal Mobile Telecommunications System
URC Unsolicited Result Code
USB Universal Serial Bus
USC-2 Universal Character Set (UCS-2) Format
(U)SIM (Universal) Subscriber Identity Module
U-TRA Universal Terrestrial Radio Access Network
VLR Visiting Location Register
WCDMA Wideband Code Division Multiple Access
12.2. Summary of CME ERROR Codes
Final result code +CME ERROR: <err> indicates an error related to mobile equipment or network. The
operation is similar to ERROR result code.
<err> values are mostly used by common message commands. The following table lists most of the
general and GRPS related ERROR codes. For some GSM protocol failure causes described in GSM
specifications, the corresponding ERROR codes are not included here.

LTE-A Module Series
Table 5: Different Coding Schemes of +CME ERROR: <err>
Code of <err> Meaning
0 Phone failure
1 No connection to phone
2 Phone-adaptor link reserved
3 Operation not allowed
4 Operation not supported
5 PH-SIM PIN required
6 PH-FSIM PIN required
7 PH-FSIM PUK required
10 SIM not inserted
11 SIM PIN required
12 SIM PUK required
13 SIM failure
14 SIM busy
15 SIM wrong
16 Incorrect password
17 SIM PIN2 required
18 SIM PUK2 required
20 Memory full
21 Invalid index
22 Not found
23 Memory failure
24 Text string too long
25 Invalid characters in text string

LTE-A Module Series
26 Dial string too long
27 Invalid characters in dial string
30 No network service
31 Network timeout
32 Network not allowed - emergency calls only
40 Network personalization PIN required
41 Network personalization PUK required
42 Network subset personalization PIN required
43 Network subset personalization PUK required
44 Service provider personalization PIN required
45 Service provider personalization PUK required
46 Corporate personalization PIN required
47 Corporate personalization PUK required
901 Audio unknown error
902 Audio invalid parameters
903 Audio operation not supported
904 Audio device busy
12.3. Summary of CMS ERROR Codes
Final result code +CMS ERROR: <err> indicates an error related to mobile equipment or network. The
operation is similar to ERROR result code.
<err> values are mostly used by common message commands.

LTE-A Module Series
Table 6: Different Coding Schemes of +CMS ERROR: <err>
Code of <err> Meaning
300 ME failure
301 SMS ME reserved
302 Operation not allowed
303 Operation not supported
304 Invalid PDU mode
305 Invalid text mode
310 SIM not inserted
311 SIM pin necessary
312 PH SIM pin necessary
313 SIM failure
314 SIM busy
315 SIM wrong
316 SIM PUK required
317 SIM PIN2 required
318 SIM PUK2 required
320 Memory failure
321 Invalid memory index
322 Memory full
330 SMSC address unknown
331 No network
332 Network timeout
500 Unknown
512 SIM not ready

LTE-A Module Series
513 Message length exceeds
514 Invalid request parameters
515 ME storage failure
517 Invalid service mode
528 More message to send state error
529 MO SMS is not allowed
530 GPRS is suspended
531 ME storage full
12.4. Summary of URC
Table 7: Summary of URC
Index URC Display Meaning Condition
1 +CREG: <stat> Indicate registration status of the ME AT+CREG=1
After cell neighborhood changing

+CREG: <stat>[,<lac>,<ci>[, shows whether the network has
2 AT+CREG=2
<AcT>]] currently indicated the registration of
the ME, with location area code
Indicate network registration status of
3 +CGREG: <stat> AT+CGREG=1
the ME
+CGREG: <stat>[,<lac>,<ci> Indicate network registration and
4 AT+CGREG=2
[,<AcT>]] location information of the ME
5 +CTZV: <tz> Time zone reporting AT+CTZR=1
6 +CTZE: <tz>,<dst>,<time> Extended time zone reporting AT+CTZR=2
+COLP: <number>,<type>,[< The presentation of the COL

17 subaddr>],[<satype>],[<alph (connected line) at the TE for a AT+COLP=1
a>] mobile originated call
24 RDY ME initialization is successful N/A
25 +CFUN: 1 All function of the ME is available N/A

LTE-A Module Series
26 +CPIN: <state> SIM card pin state N/A
27 +QIND: SMS DONE SMS initialization finished N/A
28 +QIND: PB DONE Phonebook initialization finished N/A
29 POWERED DOWN Module power down AT+QPOWD
+CGEV: REJECT <PDP_typ A network request for PDP activation,

30 AT+CGEREP=2,1
e>,<PDP_addr> and was automatically rejected.
+CGEV: NW REACT <PDP_ The network request PDP
31 AT+CGEREP=2,1
type>,<PDP_addr>,[<cid>] reactivation
+CGEV: NW DEACT <PDP_ The network has forced a context
32 AT+CGEREP=2,1
type>,<PDP_addr>,[<cid>] deactivation
+CGEV: ME DEACT <PDP_t The ME has forced a context
33 AT+CGEREP=2,1
ype>,<PDP_addr>,[<cid>] deactivation.
The network has forced a Packet
34 +CGEV: NW DETACH AT+CGEREP=2,1
Domain detach.
The mobile equipment has forced a
35 +CGEV: ME DETACH AT+CGEREP=2,1
Packet Domain detach.
The network has forced a change of
36 +CGEV: NW CLASS <class> AT+CGEREP=2,1
MS class.
The mobile equipment has forced a
37 +CGEV: ME CLASS <class> AT+CGEREP=2,1
change of MS class.
12.5. SMS Character Sets Conversions
In 3GPP TS 23.038 DCS (Data Coding Scheme) defined three kinds of alphabets in SMS, GSM 7-bit
default alphabet, 8-bit data and UCS2 (16-bit). AT+CSMP can set the DCS in text mode (AT+CMGF=1).
In text mode, DCS (Data Coding Scheme) and AT+CSCS determine the way of SMS text input or output.
Table 8: The Way of SMS Text Input or Output
DCS AT+CSCS The Way of SMS Text Input or Output
GSM 7-bit GSM Input or output GSM character sets.
Input or output IRA character sets.

GSM 7-bit IRA Input: UE will convert IRA characters to GSM characters.
Output: UE will convert GSM characters to IRA characters.
GSM 7-bit UCS2 Input or output a hex string similar to PDU mode. So only support

LTE-A Module Series
characters ‘0’-‘9’ and ‘A’-‘F’.

Input: UE will convert the UCS2 hex string to GSM characters.
Output: UE will convert the GSM characters to UCS2 hex string.
Ignore the value of AT+CSCS, input or output a hex string similar to
UCS2 -
PDU mode. So only support characters ‘0’-‘9’ and ‘A’-‘F’.
Ignore the value of AT+CSCS, input or output a hex string similar to
8-bit -
PDU mode. So only support characters ‘0’-‘9’ and ‘A’-‘F’.
When DCS=GSM 7-bit, the input or output needs conversion. The detailed conversion tables are shown
below.
Table 9: The Input Conversions Table (DCS=GSM 7-bit and AT+CSCS="GSM")
0 1 2 3 4 5 6 7
0 00 10 20 30 40 50 60 70
1 01 11 21 31 41 51 61 71
2 02 12 22 32 42 52 62 72
3 03 13 23 33 43 53 63 73
4 04 14 24 34 44 54 64 74
5 05 15 25 35 45 55 65 75
6 06 16 26 36 46 56 66 76
7 07 17 27 37 47 57 67 77
8 08 18 28 38 48 58 68 78
9 09 19 29 39 49 59 69 79
A 0A Submit 2A 3A 4A 5A 6A 7A
B 0B Cancel 2B 3B 4B 5B 6B 7B
C 0C 1C 2C 3C 4C 5C 6C 7C
D 0D 1A 2D 3D 4D 5D 6D 7D
E 0E 1E 2E 3E 4E 5E 6E 7E
F 0F 1F 2F 3F 4F 5F 6F 7F

LTE-A Module Series
Table 10: The Output Conversions Table (DCS=GSM 7-bit and AT+CSCS="GSM")
0 1 2 3 4 5 6 7
0 00 10 20 30 40 50 60 70
1 01 11 21 31 41 51 61 71
2 02 12 22 32 42 52 62 72
3 03 13 23 33 43 53 63 73
4 04 14 24 34 44 54 64 74
5 05 15 25 35 45 55 65 75
6 06 16 26 36 46 56 66 76
7 07 17 27 37 47 57 67 77
8 08 18 28 38 48 58 68 78
9 09 19 29 39 49 59 69 79
A 0D0A 2A 3A 4A 5A 6A 7A
B 0B 2B 3B 4B 5B 6B 7B
C 0C 1C 2C 3C 4C 5C 6C 7C
D 0D 1A 2D 3D 4D 5D 6D 7D
E 0E 1E 2E 3E 4E 5E 6E 7E
F 0F 1F 2F 3F 4F 5F 6F 7F
Table 11: GSM Extended Characters
0 1 2 3 4 5 6 7
0 1B40
4 1B14

LTE-A Module Series
8 1B28
9 1B29
C 1B3C
D 1B3D
E 1B3E
F 1B2F
Table 12: The Input Conversions Table (DCS=GSM 7-bit and AT+CSCS="IRA")
0 1 2 3 4 5 6 7
0 20 20 30 00 50 20 70
1 20 20 21 31 41 51 61 71
2 20 20 22 32 42 52 62 72
3 20 20 23 33 43 53 63 73
4 20 20 02 34 44 54 64 74
5 20 20 25 35 45 55 65 75
6 20 20 26 36 46 56 66 76
7 20 20 27 37 47 57 67 77
8 backspace 20 28 38 48 58 68 78
9 20 20 29 39 49 59 69 79
A 0A Submit 2A 3A 4A 5A 6A 7A
B 20 Cancel 2B 3B 4B 1B3C 6B 1B28

LTE-A Module Series
C 20 20 2C 3C 4C 1B2F 6C 1B40
D 0D 20 2D 3D 4D 1B3E 6D 1B29
E 20 20 2E 3E 4E 1B14 6E 1B3D
F 20 20 2F 3F 4F 11 6F 20
Table 13: IRA Extended Characters
A B C D E F
0 20 20 20 20 7F 20
1 40 20 20 5D 20 7D
2 20 20 20 20 20 08
3 01 20 20 20 20 20
4 24 20 5B 20 7B 20
5 03 20 0E 20 0F 20
6 20 20 1C 5C 1D 7C
7 5F 20 09 20 20 20
8 20 20 20 0B 04 0C
9 20 20 1F 20 05 06
A 20 20 20 20 20 20
B 20 20 20 20 20 20
C 20 20 20 5E 07 7E
D 20 20 20 20 20 20
E 20 20 20 20 20 20
F 20 60 20 1E 20 20

LTE-A Module Series
Table 14: The Output Conversions Table (DCS=GSM 7-bit and AT+CSCS="IRA")
0 1 2 3 4 5 6 7
0 40 20 20 30 A1 50 BF 70
1 A3 5F 21 31 41 51 61 71
2 24 20 22 32 42 52 62 72
3 A5 20 23 33 43 53 63 73
4 E8 20 A4 34 44 54 64 74
5 E9 20 25 35 45 55 65 75
6 F9 20 26 36 46 56 66 76
7 EC 20 27 37 47 57 67 77
8 F2 20 28 38 48 58 68 78
9 C7 20 29 39 49 59 69 79
A 0D0A 2A 3A 4A 5A 6A 7A
B D8 2B 3B 4B C4 6B E4
C F8 C6 2C 3C 4C D6 6C F6
D 0D E6 2D 3D 4D D1 6D F1
E C5 DF 2E 3E 4E DC 6E FC
F E5 C9 2F 3F 4F A7 6F E0
Table 15: GSM Extended Characters
0 1 2 3 4 5 6 7
0 7C
4 5E

LTE-A Module Series
8 7B
9 7D
C 5B
D 7E
E 5D
F 5C
Because the low 8 bits of UCS2 character is the same as the IRA character:
The conversion table of DCS=GSM 7-bit and AT+CSCS=“UCS2” is similar to AT+CSCS=“IRA”.

The conversion table of fmt=GSM 7-bit and AT+CSCS=“GSM” is similar to AT+CSCS=“GSM”.
The conversion table of fmt= GSM 7-bit and AT+CSCS=“IRA” is similar to AT+CSCS=“IRA”.
The conversion table of fmt=GSM 7-bit and AT+CSCS=“UCS2” is similar to AT+CSCS=“IRA”.
The difference is the way of SMS text input or output. See Table 8 for more details.
12.6. Release Cause Text List of AT+CEER
Table 16: Release Cause Text List of AT+CEER
CS Internal Cause
No cause information available (default)
Phone is offline
No service available
Network release, no reason given

LTE-A Module Series
Received incoming call
Client ended call
UIM not present
Access attempt already in progress
Access failure, unknown source
Concur service not supported by network
No response received from network
GPS call ended for user call
SMS call ended for user call
Data call ended for emergency call
Rejected during redirect or handoff
Lower-layer ended call
Call origination request failed
Client rejected incoming call
Client rejected setup indication
Network ended call
No funds available
No service available
Full service not available
Maximum packet calls exceeded
Video connection lost
Video protocol closed after setup
Video protocol setup failure
Internal error
CS Network Cause
Unassigned/unallocated number

LTE-A Module Series
No route to destination
Channel unacceptable
Operator determined barring
Normal call clearing
User busy
No user responding
User alerting, no answer
Call rejected
Number changed
Non selected user clearing
Destination out of order
Invalid/incomplete number
Facility rejected
Response to status enquiry
Normal, unspecified
No circuit/channel available
Network out of order
Temporary failure
Switching equipment congestion
Access information discarded
Requested circuit/channel not available
Resources unavailable, unspecified
Quality of service unavailable
Requested facility not subscribed
Incoming calls barred within the CUG
Bearer capability not authorized

LTE-A Module Series
Bearer capability not available
Service/option not available
Bearer service not implemented
ACM >= ACM max
Requested facility not implemented
Only RDI bearer is available
Service/option not implemented
Invalid transaction identifier value
User not member of CUG
Incompatible destination
Invalid transit network selection
Semantically incorrect message
Invalid mandatory information
Message non-existent/not implemented
Message type not compatible with state
IE non-existent/not implemented
Conditional IE error
Message not compatible with state
Recovery on timer expiry
Protocol error, unspecified
Interworking, unspecified
CS Network Reject
IMSI unknown in HLR
Illegal MS
IMSI unknown in VLR
IMEI not accepted

LTE-A Module Series
Illegal ME
GPRS services not allowed
GPRS and non GPRS services not allowed
MS identity cannot be derived
Implicitly detached
PLMN not allowed
Location area not allowed
Roaming not allowed
GPRS services not allowed in PLMN
No suitable cells in location area
MSC temporary not reachable
Network failure
MAC failure
Synch failure
Congestion
GSM authentication unacceptable
Service option not supported
Requested service option not subscribed
Service option temporary out of order
Call cannot be identified
No PDP context activated
Message type non-existent
Information element non-existent

LTE-A Module Series
RR release indication
RR random access failure
RRC release indication
RRC close session indication
RRC open session failure
Low level failure
Low level failure no redial allowed
Invalid SIM
No service
Timer T3230 expired
No cell available
Wrong state
Access class blocked
Abort message received
Other causes
Timer T303 expired
No resources
Release pending
Invalid user data
PS Internal Cause
Invalid connection identifier
Invalid NSAPI
Invalid primary NSAPI
PDP establish timeout
Invalid field

LTE-A Module Series
SNDCP failure
RAB setup failure
No GPRS context
PDP activate timeout
PDP modify timeout
PDP inactive max timeout
PDP lower layer error
PDP duplicate
Access technology change
PDP unknown reason
CS PS Network Cause
LLC or SNDCP failure
Insufficient resources
Missing or unknown APN
Unknown PDP address or PDP type
User authentication failed
Activation rejected by GGSN
Activation rejected, unspecified
Service option not supported
Requested service option not subscribed
Service option temporary out of order
NSAPI already used (not sent)
Regular deactivation
QoS not accepted
Network failure
Reactivation required

LTE-A Module Series
Feature not supported
Semantic error in the TFT operation
Syntactical error in the TFT operation
Unknown PDP context
PDP context without TFT already activated
Semantic errors in packet filter
Syntactical errors in packet filter
Invalid transaction identifier
Message non-existent/not implemented
IE non-existent/not implemented
Conditional IE error
Protocol error, unspecified

Quectel EG060V-EA AT Commands Manual V1.0

Uploaded by

Copyright:

Available Formats

Quectel EG060V-EA AT Commands Manual V1.0

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Quectel EG060V-EA AT Commands Manual V1.0

Uploaded by

Copyright:

Available Formats

EG060V-EA

LTE-A Module Series

Quectel Wireless Solutions Co., Ltd.

Or our local office. For more information, please visit:

For technical support, or to report documentation errors, please visit:

About the Document

Paddy LI/Igni LI/

About the Document ................................................................................................................................... 3

2 General Commands ........................................................................................................................... 13

3 Status Control Commands ............................................................................................................... 26

4 (U)SIM Related Commands ............................................................................................................... 36

5 Network Service Commands ............................................................................................................ 48

6 Call Related Commands .................................................................................................................... 67

7 Phonebook Commands ..................................................................................................................... 69

8 Short Message Service Commands ................................................................................................. 75

8.11. AT+CMSS Send Message from Storage .............................................................................. 93

9 Packet Domain Commands .............................................................................................................. 99

10 Audio Commands ............................................................................................................................ 124

11 Hardware Related Commands ........................................................................................................ 134

12 Appendix A References................................................................................................................... 138

12.3. Summary of CMS ERROR Codes......................................................................................... 145

Table 1: Types of AT Commands .............................................................................................................. 10

1.1. AT Command Syntax

⚫ <CR> Carriage return character.

1.1.2. AT Command Syntax

and <m> is the value to assign to the S register.

These AT commands have four types as explained in the following table:

Table 1: Types of AT Commands

Command Type Syntax Description

Test the existence of corresponding Write

Write Command AT+<cmd>=<p1>[,<p2>[,<p3>[...]]] Set user-definable parameter value.

Return a specific information parameter or

⚫ Within quoted strings, where spaces are preserved;

1.2. AT Command Responses

Responses will be in the format of:

1.3. Supported Character Sets

1.4. AT Command Interface

1.5. Unsolicited Result Code

1.6. Declaration of AT Command Examples

ATI Display Product Identification Information

<objectID> String type. Identifier of device type.

2.2. AT+GMI Request Manufacturer Identification

AT+GMI Request Manufacturer Identification

2.3. AT+GMM Request Model Identification

AT+GMM Request Model Identification

<objectID> String type. Identifier of device type.

2.4. AT+GMR Request Revision Identification of Software Release

AT+GMR Request Revision Identification of Software Release

<revision> String type. Identification text of product software version.

2.5. AT+CGMI Request Manufacturer Identification

AT+CGMI Request Manufacturer Identification

Maximum Response Time 300 ms

2.6. AT+CGMM Request Model Identification

AT+CGMM Request Model Identification

<objectID> String type. Identifier of device type.

2.7. AT+CGMR Request Revision Identification of Software Release

AT+CGMR Request Revision Identification of Software Release

<revision> String type. Identification text of product firmware revision.

2.8. AT+GSN Request International Mobile Equipment Identity (IMEI)