Due to the nature of wireless communications, transmission and reception of data
can never be guaranteed. Data may be delayed, corrupted (i.e., have errors) or be
totally lost. Although significant delays or losses of data are rare when wireless
devices such as the NETGEAR modem are used in a normal manner with a wellconstructed network, the NETGEAR modem should not be used in situations
where failure to transmit or receive data could result in damage of any kind to the
user or any other party, including but not limited to personal injury, death, or loss
of property. NETGEAR accepts no responsibility for damages of any kind
resulting from delays or errors in data transmitted or received using the
NETGEAR modem, or for failure of the NETGEAR modem to transmit or receive
such data.
Do not operate the NETGEAR modem in areas where blasting is in progress,
where explosive atmospheres may be present, near medical equipment, near life
support equipment, or any equipment which may be susceptible to any form of
radio interference. In such areas, the NETGEAR modem MUST BE POWERED OFF. The NETGEAR modem can transmit signals that could interfere with this
equipment.
Do not operate the NETGEAR modem in any aircraft, whether the aircraft is on
the ground or in flight. In aircraft, the NETGEAR modem MUST BE POWERED OFF. When operating, the NETGEAR modem can transmit signals that could
interfere with various onboard systems.
Limitation of
Liability
Note: Some airlines may permit the use of cellular phones while the aircraft is on the
ground and the door is open. NETGEAR modems may be used at this time.
The driver or operator of any vehicle should not operate the NETGEAR modem
while in control of a vehicle. Doing so will detract from the driver or operator's
control and operation of that vehicle. In some states and provinces, operating
such communications devices while in control of a vehicle is an offence.
The information in this manual is subject to change without notice and does not
represent a commitment on the part of NETGEAR. NETGEAR AND ITS
AFFILIATES SPECIFICALLY DISCLAIM LIABILITY FOR ANY AND ALL DIRECT,
INDIRECT, SPECIAL, GENERAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE
OR EXEMPLARY DAMAGES INCLUDING, BUT NOT LIMITED TO, LOSS OF
PROFITS OR REVENUE OR ANTICIPATED PROFITS OR REVENUE ARISING
OUT OF THE USE OR INABILITY TO USE ANY NETGEAR PRODUCT, EVEN IF
NETGEAR AND/OR ITS AFFILIATES HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES OR THEY ARE FORESEEABLE OR FOR
CLAIMS BY ANY THIRD PARTY.
Notwithstanding the foregoing, in no event shall NETGEAR and/or its affiliates
aggregate liability arising under or in connection with the NETGEAR product,
regardless of the number of events, occurrences, or claims giving rise to liability,
be in excess of the price paid by the purchaser for the NETGEAR product.
Rev. 1 Sep.13Proprietary and Confidential3
Page 4
AirCard 77Xs/34xU AT Command Reference
PatentsThis product may contain technology developed by or for NETGEAR Inc. This
product includes technology licensed from QUALCOMM
manufactured or sold by NETGEAR Inc. or its affiliates under one or more patents
licensed from InterDigital Group and MMP Portfolio Licensing.
This document describes supported standard and proprietary AT
commands available for NETGEAR AirCard™ devices, and provides
details where commands vary from the standards. These commands
are intended for use by OEMs, and are supplemental to the standard
AT commands for GSM devices defined by the 3GPP (3rd Generation
Partnership Project) in TS 27.007 AT command set for User
Equipment (UE) and TS 27.005 Use of Data Terminal Equipment—
Data Circuit terminating Equipment (DTE-DCE) interface for Short
Message Service (SMS) and Cell Broadcast Service (BSE).
1
Note: When designing applications that use these AT commands, use
NETGEAR Watcher
templates to ensure proper use of command groups. For questions or
concerns relating to command implementation, please contact your
NETGEAR account representative.
®
or other NETGEAR applications as functionality
Command access
Most commands in this reference are password-protected. To use
these commands, you must enter the correct password using
AT !ENTERCND on page 14. Once the password is entered, all
commands are available and remain available until the modem is
reset or powered off and on.
Command timing
Interval timing
Some commands require time to process before additional
commands are entered. For example, the modem returns OK when it
receives
this, the modem returns an error.
AT!DAFTMACT. If AT!DASBAND is received too soon after
When building automated test scripts, ensure that sufficient delays
are embedded, where necessary, to avoid these errors.
Escape sequence guard time
The AT escape sequence “+++” requires a guard time of 1.0 seconds
before and after it is used.
Rev. 1 Sep.13Proprietary and Confidential7
Page 8
AirCard 77Xs/34xU AT Command Reference
Result codes
Result codes are not shown in the command tables unless special conditions
apply. Generally the result code OK is returned when the command has been
executed. ERROR may be returned if parameters are out of range, and is
returned if the command is not recognized or is not permitted in the current state
or condition of the modem.
References
This guide covers the command sets used by OEMs, designers and testers of
NETGEAR AirCard devices, plus general operational use commands.
You may also want to consult the other documents available on our website at
www.netgear.com.
Terminology and acronyms
This document makes wide use of acronyms that are in common use in data
communications and cellular technology.
Current firmware versions
Version
To determine your firmware revision, enter the identification command AT+GMR.
Upgrading
If your modem firmware is an earlier version, you can acquire updated firmware
by visiting support.netgear.com and searching by your product model number.
Document structure
This document describes the proprietary commands listed in the tables below—
each table corresponds to a specific chapter.
AT Password Commands—Commands used to enable access to password-
protected AT commands and to set the AT command password.
Table 1-1: AT password commands
CommandDescriptionPage
!ENTERCNDEnable access to password-protected commands14
!SETCNDSet AT command password14
8Proprietary and Confidential4114487
Page 9
About This Guide
Modem Status, Customization, and Reset Commands— Commands used to
determine modem status, adjust customization settings, and reset the modem.
Table 1-2: Modem status commands
CommandDescriptionPage
!BANDSelect/return frequency band set16
!BOOTHOLDReset modem and wait in bootloader for firmware download17
$ERIReturn current Enhanced Roaming Indicator (ERI)18
!GETBANDReturn the current active band18
!GETRATReturn the current active radio access technology (RAT)18
!GSTATUSReturn operational status19
$MDNSet/report Mobile Directory Number (MDN)19
$MSIDSet/report Mobile Station ID (MSID)20
!PACKAGEReturn package version string20
!PCTEMPReturn current temperature information21
$PRLReturn device’s CDMA PRL version21
$QCRMCALLMake/disconnect data connection21
$RESET
!RESET
$ROAMSet/report network roaming mode22
$RTNReset device to factory default settings22
Reset (power cycle) modem22
Mobile IP Commands—Commands used to configure and display Mobile IP
options.
Table 1-3: Mobile IP configuration commands
CommandDescriptionPage
$MIPERRReturn last MIP error code24
$QCMIPSet/return Mobile IP state24
$QCMIPEPEnable/disable active profile24
$QCMIPGETPIdentify active profile, or display specific profile’s configuration
information
$QCMIPHASet/return active profile’s Home Agent address25
$QCMIPMASPISet/return active profile’s AAA SPI26
25
$QCMIPMASSSet/return active profile’s AAA ‘shared secret’ (ASCII)26
$QCMIPMASSXSet/return active profile’s AAA ‘shared secret’ (Hexadecimal)27
$QCMIPMHSPISet/return active profile’s Home Agent SPI27
Rev. 1 Sep.13Proprietary and Confidential9
Page 10
AirCard 77Xs/34xU AT Command Reference
Table 1-3: Mobile IP configuration commands (Continued)
CommandDescriptionPage
$QCMIPMHSSSet/return active profile’s Home Agent ‘shared secret’ (ASCII)28
$QCMIPMHSSXSet/return active profile’s Home Agent ‘shared secret’
(Hexadecimal)
$QCMIPNAISet/return active profile’s NAI29
$QCMIPPSet/return the active profile29
$QCMIPPHASet/return active profile’s primary Home Agent address30
$QCMIPSHASet/return active profile’s secondary Home Agent address30
$QCMIPRTEnable/disable reverse tunneling31
$QCMIPTDisplay RFC 2002bis authentication state31
28
SIM Commands— Commands used to communicate with an installed (U)SIM.
Table 1-4: SIM commands
CommandDescriptionPage
!ICCIDReturn (U)SIM card’s ICCID34
OMA-DM Commands—Commands used to configure DM (Device Management)
accounts, sessions, and host–device–server interactions.
Table 1-5: OMA-DM commands
CommandDescriptionPage
!IDSTESTStart DM session (Sprint OMA activation)36
Conventions
The following format conventions are used in this reference:
Character codes or keystrokes that are described with words or standard
abbreviations are shown within angle brackets using a different font, such as
<CR> for Carriage Return and <space> for a blank space character.
Numeric values are decimal unless prefixed as noted below.
Hexadecimal values are shown with a prefix of 0x, i.e. in the form 0x3D.
Binary values are shown with a prefix of 0b, i.e. in the form 0b00111101.
Command and register syntax is noted using an alternate font:
The leading “
AT” characters are not shown but must be included before all
commands except as noted in the reference tables.
10Proprietary and Confidential4114487
!CHAN=<c>[,b].
Page 11
About This Guide
Characters that are required are shown in uppercase; parameters are noted in
lowercase. Required parameters are enclosed in angle brackets (
optional parameters are enclosed within square brackets (
[x]). The brackets are
<n>) while
not to be included in the command string.
Commands are presented in table format. Each chapter covers the commands
related to that subject and presents a summary table to help you locate a needed
command. Commands are in ASCII alphabetical order in the body of each
chapter.
Any default settings are noted in the command tables. Note that these are the
factory default settings and not the default parameter value assumed if no
parameter is specified.
Result Code This is a numeric or text code that is returned after all commands
(except resets)—text codes are returned if verbose responses are enabled. Only
one result code is returned for a command line regardless of the number of
individual commands contained on the line.
Response This term indicates a response from the modem that is issued prior to
a result code. Reading registers or issuing commands that report information will
provide a response followed by a result code unless the command generates an
error.
Responses and result codes from the modem, or host system software prompts,
are shown in this font:
CONNECT 14400
Rev. 1 Sep.13Proprietary and Confidential11
Page 12
AirCard 77Xs/34xU AT Command Reference
12Proprietary and Confidential4114487
Page 13
2: AT Password Commands
Introduction
AT commands described in this document are password-protected.
This chapter describes how to enter and change the password.
Command summary
Ta bl e 2 - 1 on page 13 lists the commands described in this chapter.
Table 2-1: AT password commands
CommandDescriptionPage
!ENTERCNDEnabl e access to password-protected commands14
!SETCNDSet AT command password14
2
Rev. 1 Sep.13Proprietary and Confidential13
Page 14
AirCard 77Xs/34xU AT Command Reference
Command reference
Table 2-2: AT command password details
CommandDescription
!ENTERCND
!SETCND
Enable access to password-protected commands
Before you can use any password-protected AT commands, you must enter the password
correctly using this command. The initial password (“A710”) is configured onto the modem
during manufacture. Yo u can change the password using !SETCND.
Once the password has been entered correctly, the password-protected AT commands are
available until the modem is reset or powered off and on.
• Characters may be entered in ASCII format, or in Hex format. (For example:
“myPass3” or “ABCDEF01234”.)
Set AT command password
Change the password used for the !ENTERCND command. (Before you can change the
password using !SETCND, you must enable access to this command using !ENTERCND.)
Password required: Yes
Usage:
• Execution:AT!SETCND=<“key”>
Response:
Purpose:Sets <“Key”> as the new password for accessing protected commands.
Parameters:
<“key”> (New password)
• Password must be entered with quotation marks (for example,
• Characters may be entered in ASCII format, or in Hex format. (For example:
“myPass3” or “ABCDEF01234”.)
OK
Warning: Do NOT enter a null password (that is, the <“Key”> cannot be ““) — you will NOT
be able to use password-protected commands, and will have to contact NETGEAR for help to
reset the password.
14Proprietary and Confidential4114487
Page 15
3: Modem Status, Customization, and Reset
Commands
Introduction
This chapter describes commands used to reset the modem, adjust
customization settings, retrieve the hardware version, and monitor
the temperature, voltage, and modem status.
Command summary
Ta bl e 3 - 1 lists the commands described in this chapter.
Table 3-1: Modem status commands
CommandDescriptionPage
!BANDSelect/return frequency band set16
!BOOTHOLDReset modem and wait in bootloader for firmware download17
$ERIReturn current Enhanced Roaming Indicator (ERI)18
!GETBANDReturn the current active band18
!GETRATReturn the current active radio access technology (RAT)18
!GSTATUSReturn operational status19
3
$MDNSet/report Mobile Directory Number (MDN)19
$MSIDSet/report Mobile Station ID (MSID)20
!PACKAGEReturn package version string20
!PCTEMPReturn current temperature information21
$PRLReturn device’s CDMA PRL version21
$QCRMCALLMake/disconnect data connection21
$RESET
Reset modem and wait in bootloader for firmware download
Prepare for a firmware download by resetting the modem and waiting in ‘boot and hold’
mode.
Password required: No
Usage:
• Execution:AT!BOOTHOLD
Response:
Purpose:Force the modem to backup user NV options, reset, and then wait in
OK
boot and hold mode for a firmware download.
Rev. 1 Sep.13Proprietary and Confidential17
Page 18
AirCard 77Xs/34xU AT Command Reference
Table 3-2: Modem status, customization, and reset commands (Continued)
CommandDescription
$ERI
!GETBAND
Return current Enhanced Roaming Indicator (ERI)
(For Sprint devices only)
Return the current ERI.
Password required: No.
Usage:
• Query:AT$ERI?
Response:R eturns <ERI>
Purpose:Display the modem’s current mode.
Parameters:
<ERI> (Enhanced Roaming Indicator)
• Decimal value as defined in Section 5.3.3 of Sprint Core Features User Inter-
action Requirements (version 1.0).
Return the current active band
Return the active band currently being used by the modem.
Password required: No
Usage:
• Query:AT!GETBAND?
Response:
Purpose:Return a description of the current active band, or return an error
!GETBAND: <active band description>
OK
orUnknown
OK
orNo Service
OK
message.
!GETRAT
Note: Due to stack implementation requirements,
W800 and W850.
Return the current active radio access technology (RAT)
Return the RAT currently being used by the modem.
Password required: No
Usage:
!GETBAND
reports W800 for both
• Query:AT!GETRAT?
Response:
!GETRAT: <active RAT description>
OK
orUnknown
OK
orNo Service
OK
Purpose:Return a description of the current RAT, or return an error message.
18Proprietary and Confidential4114487
Page 19
Modem Status, Customization, and Reset Commands
Table 3-2: Modem status, customization, and reset commands (Continued)
CommandDescription
!GSTAT US
$MDN
Return operational status
Return specific details about the current operational status of the modem. The response
details vary depending on the current RAT. Contact NETGEAR for further details if
required.
Password required: No
Usage:
• Query:AT!GSTATUS?
Response (Example shown is for LTE, actual fields may vary)
!GSTATUS:
Current Time:<ctime>Temperature: <temp>
Bootup Time:<btime>Mode:<mode>
System mode:<smode>PS state:<PSstate>
LTE band:<lband>LTE bw:<lbw>
LTE Rx chan:<lrchan>LTE Tx chan: <ltchan>
GMM (PS) state:<gmmstate> <gmmsubstate>
MM (CS) state:<mmstate> <mmsubstate>
This chapter describes commands used to configure and display
Mobile IP options.
Command summary
Ta bl e 4 - 1 lists the commands described in this chapter.
Table 4-1: Mobile IP commands
CommandDescriptionPage
$MIPERRReturn last MIP error code24
$QCMIPSet/return Mobile IP state24
$QCMIPEPEnable/disable active profile24
4
$QCMIPGETPIdentify active profile, or display specific profile’s configuration
information
$QCMIPHASet/return active profile’s Home Agent address25
$QCMIPMASPISet/return active profile’s AAA SPI26
$QCMIPMASSSet/return active profile’s AAA ‘shared secret’ (ASCII)26
$QCMIPMASSXSet/return active profile’s AAA ‘shared secret’ (Hexadecimal)27
$QCMIPMHSPISet/return active profile’s Home Agent SPI27
$QCMIPMHSSSet/return active profile’s Home Agent ‘shared secret’ (ASCII)28
$QCMIPMHSSXSet/return active profile’s Home Agent ‘shared secret’
(Hexadecimal)
$QCMIPNAISet/return active profile’s NAI29
$QCMIPPSet/return the active profile29
$QCMIPPHASet/return active profile’s primary Home Agent address30
$QCMIPSHASet/return active profile’s secondary Home Agent address30
$QCMIPRTEnable/disable reverse tunneling31
$QCMIPTDisplay RFC 2002bis authentication state31
25
28
Rev. 1 Sep.13Proprietary and Confidential23
Page 24
AirCard 77Xs/34xU AT Command Reference
Command reference
Table 4-2: Mobile IP commands
CommandDescription
$MIPERR
$QCMIP
Return last MIP error code
(Sprint devices only)
Return the last MIP error code that was received by the device.
Password required: No
Usage:
• Execution:AT$MIPERR?
Purpose:Return the last MIP error code.
Set/return Mobile IP state
Enable or disable Mobile IP (MIP) network authentication, or report the current state of
MIP.
Password required: No
Usage:
• Execution:AT$QCMIP=<mipValue>
Purpose:Set network authentication method to MIP or SIP.
• Query:AT$QCMIP?
Response:Returns <mipValue>
Purpose:Display the current network authentication method.
Parameters:
<mipValue> (Current mobile network authentication method)
• 0=IP disabled, Simple IP (SIP) only
• 1=MIP preferred, with SIP fallback
• 2=MIP only
$QCMIPEP
Enable/disable active profile
Enable or disable the active profile.
Note: A profile can be used only if it is active and enabled.
Password required: No
Usage:
• Execution:AT$QCMIPEP=<profileState>
Purpose:Enable or disable the curren t ly active profile.
• Query:AT$QCMIPEP?
Response:Returns <profileState>
Purpose:Display the state of the currently active profile.
Parameters:
<profileState> (State of the currently active profile)
• 0=Disable
• 1=Enable
24Proprietary and Confidential4114487
Page 25
Table 4-2: Mobile IP commands (Continued)
CommandDescription
Mobile IP Commands
$QCMIPGETP
$QCMIPHA
Identify active profile, or display specific profile’s configuration
information
Return the ID of the active profile, or display configuration information for a specific
profile. Displayed information includes profile state (enabled, disabled), Home Address,
Primary and Secondary Home Agent, etc.
Password required: No
Usage:
• Execution:AT$QCMIPGETP=<mipID>
Response:List of configuration parameters.
Purpose:Display configuration information for the specified Mobile IP profile.
• Query list:AT!QCMIPGETP=?
Response:Returns active profile’s <mipID>
Purpose:Identify the active profile.
Parameters:
<mipID> (Mobile IP profile ID)
• Valid range: 0–5
Set/return active profile’s Home Agent address
Set or return the active profile’s Home Agent (HA) IP address.
Password required: No
Usage:
• Execution:AT$QCMIPHA=”<mipHA>”,<NVCommitState>
Purpose:Set the HA address and indicate if it is to be committed to NV.
• Query:AT$QCMIPHA?
Response:
Purpose:Display the active profile’s HA IP address and indicate if it is
Parameters:
<mipHA> (Home Agent IP Address)
• For execution formation, must be enclosed by double quotes.
• IPv4 address format (e.g. “[0..255].[0..255].[0..255].[0..255]”)
<NVCommitState> (Current <mipHA> value committed to NV?)
• 0=Do not commit to NV.
Note: If <mipHA> is not committed to NV, the value is deleted at the end of the
next MIP session or when AT$QCMIPP is called.
• 1=Commit to NV.
Returns <mipHA> and <NVCommitState>
committed to NV.
Rev. 1 Sep.13Proprietary and Confidential25
Page 26
AirCard 77Xs/34xU AT Command Reference
Table 4-2: Mobile IP commands (Continued)
CommandDescription
$QCMIPMASPI
$QCMIPMASS
Set/return active profile’s AAA SPI
Set or return the active profile’s Mobile Node AAA Security Parameter Index (SPI)
Purpose:Start a session of a specified type for a specific account.
• Query List:AT!IDSTEST=?
Purpose:Display the execution command format and allowed parameter
Parameters:
<AccountIndex> (DM account number)
• Valid value: 1
Note: No other values are supported
<sessionType> (Type of DM session to start)
• 0=Run a client-initiated OMA-DM session only (for CIDC transaction onl y)
• 1=(Sprint-only command) Run a client-initiated FUMO server status update (for
CIFUMO transaction only). (Note: For Sprint, this updates their server with your
device status, but it does not upgrade the firmware.)
• 4=(Sprint-only command) Run a client-initiated PRL check and download only
(for CIPRL transaction only)
• 5=Run OMA activation (Note: For Sprint, this is called ‘Hands Free Activation
(HFA). This performs a CIDC transaction, then a CIPRL transaction, and then a
CIFUMO status update.)
OK
orERROR
values.
36Proprietary and Confidential4114487
Page 37
7: Supported GSM/WCDMA AT Commands
This chapter identifies standard AT commands that are supported by
most NETGEAR AirCard devices. These commands:
•Control serial communications over an asynchronous interface
(ITU-T Serial Asynchronous Dialling and Control (Recommen-dation V.250), available on the International Telecommunication
Union web site, www.itu.int).
See Ta bl e 7 - 1 below.
•Control SMS functions for devices on GSM/WCDMA networks
(3GPP TS 27.005, available on the 3GPP web site,
www.3gpp.org)
See Ta bl e 7 - 2 on page 39.
•Control devices operating on GSM/ WCDMA networks (3GPP TS
27.007, available on the 3GPP web site, www.3gpp.org)
See Ta bl e 7 - 3 on page 40.
The tables below identify whether each command is supported on
NETGEAR UMTS devices. An “N/A” in the Supported column of the
table indicates that the command is related to a feature (such as
voice) that is not available on the modems.
Commands that are partially supported include descriptions
identifying any limitations on command usage. Also, some
commands are described in more detail in later chapters—the
descriptions for these commands link to those detailed entries (for
example,
&V in Ta bl e 7 - 1 on page 37).
7
Table 7-1: Supported ITU-T Recommendation V.250 AT commands
CommandDescriptionSupported
=Yes; =No
&CSet Data Carrier Detected (Received line signal detector) function
mode
&DSet Data Terminal Ready function mode
&FSet all current parameters to manufacturer’s defaults
&SSet DSR signal
&TAuto tests
&VReturn operating mode AT configuration parameters
&WStore current parameter to user-defined profile
+CSSServing System Identification
Return serving system band and SID in the format
“<channel>,<band>,<SID>”.
+CTAMT-terminated asynchronous data calls
Returns packet data inactivity timer.
Rev 1 Sep.13Proprietary and Confidential37
Page 38
AirCard 77Xs/34xU AT Command Reference
Table 7-1: Supported ITU-T Recommendation V.250 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
+DRV42bis data compression report
+DSV42bis data compression
+GCAPRequest complete TA capabilities list
+GMIRequest manufacturer identification
+GMMRequest TA model identification
+GMRRequest TA revision identification
+GOIRequest global object identification
+GSNRequest TA serial number identification
Note: Returns 15-digit IMEI. To convert to the 14-digit MEID, drop
the last digit.
+ICFSet TE-TA control character framing
+IFCSet TE-TA local data flow control
+ILRRSet TE-TA local rate reporting mode
+IPRSet fixed local rate
AAnswer incoming call
A/Re-issues last AT command given
DDial
D><MEM><N>Originate call to phone number in memory <MEM>
D><N>Originate call to phone number in current memory
D><STR>Originate call to phone number in memory which corresponds to
alphanumeric field <STR>
DLRedial last telephone number used
ESet command echo mode
(Default = E1—Echo on)
HDisconnect existing connections
IDisplay product identification information
LSet monitor speaker loudness
MSet monitor speaker mode
OSwitch from command mode to data mode
PSelect pulse dialing
QSet Result code presentation mode
(Default = Q1—Return codes on)
38Proprietary and Confidential4114487
Page 39
Table 7-1: Supported ITU-T Recommendation V.250 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
S0Set number of rings before automatically answering the call
S10Set disconnect delay after indicating the absence of data carrier
S3Set command line termination character
S4Set response formatting character
S5Set command line editing character
S6Set pause before blind dialing
S7Set number of seconds to wait for connection completion
S8Set number of seconds to wait when comma dial modifier used
TSelect tone dialing
VSet result code format mode
(Default = V1—Use numeric return codes)
XSet connect result code format and call monitoring
ZSet all current parameters to user-defined profile
(Note: Z0 resets parameters to default )
Table 7-2: Supported 27.005 AT commands
CommandDescriptionSupported
=Yes; =No
+CBMCell broadcast message dire ctly displayed
+CBMICell broadcast message stored in memory at specified <index>
location
+CDSSMS status report after sending a SMS
+CDSIIncoming SMS status report
+CMGCSend command
+CMGDDelete message
+CMGFMessage format
+CMGLList messages
+CMGRRead message
+CMGSSend message
+CMGWWrite message to memory
+CMMSMore messages to send
+CMNANew message acknowledgement to ME/TA
Rev 1 Sep.13Proprietary and Confidential39
Page 40
AirCard 77Xs/34xU AT Command Reference
Table 7-2: Supported 27.005 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
+CMS ERROR:
<err>
+CMSSSe nd message from storage
+CMTIncoming message directly displayed
+CMTIIncoming message stored in <mem> (“SM” - (U)SIM message
+CNMANew message acknowledgement to mobile equipment
+CNMINew message indications to TE
+CPMSPre ferred message storage
+CRESRestore settings
+CSASSave settings
+CSCAService center address
+CSCBSelect cell broadcast message types
+CSDHShow text mode parameters
+CSMPSet text mode parameters
+CSMSSelect message service
SMS error (mobile or network error)
storage) at location <index>
Table 7-3: Supported 27.007 AT commands
CommandDescriptionSupported
=Yes; =No
CITU T V.2 4 circuit 109 carrier detect signa l behavior command
Format
Partial
•C<value>
Limitations
•Default <value> = 2
•<value> = 2 causes th e AT/Data carrier detect pin to ‘wink’
(briefly switch off and on) when data calls end.
•<value> = 0 or 1 performs as defined in the standard
+CACMAccumulated call meter
+CACSPVoice Group or Voice Broadcast Call State Attribute PresentationN/A
+CAEMLPPeMLPP Priority Registration and Interrogation
+CAHLDLeave an ongoing Voice Group or Voice Broadcast Call N/A
+CAJOINAccept an incoming Voice Group or Voice Broadcast Call N/A
+CALAAlarm N/A
+CALCCList current Voice Group and Voice Broadcast CallsN/A
40Proprietary and Confidential4114487
Page 41
Table 7-3: Supported 27.007 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
+CALDDelete alarm N/A
+CALMAlert sound mode
+CAMMAccumulated call meter maximum
+CANCHEVNCH Support Indication
+CAOCAdvice of Charge
+CAPDPostpone or dismiss an alarm N/A
+CAPTTTalker Access for Voice Group Call N/A
+CAREJReject an incoming Voice Group or Voice Broadcast Call N/A
+CAULEVVoice Group Call Uplink Status Presentation N/A
+CBSTSelect bearer service type
+CCCMCurrent call meter value
+CCLKClock N/A
+CCUGClosed user group
+CCWECall Meter maximum event
+CDIPCalled line identification presentation
+CDISDisplay control
+CEERExtended error report
+CFUNSet phone functionality
Format
Partial
•+CFUN = [ <fun> [, <rst>] ]
Limitations
•Valid <fun> values:
· 0 (minimum functionality, low power draw)
· 1 (full functionality, high power draw)
· 4 (disable (turn off) both MT transmit and receive RF
circuits)
· 5 (Factory Test Mode)
· 6 (reset)
· 7 (offline)
+CGACTPDP context activate or deactivate
+CGANSManual response to a network request for PDP context activation
+CGATTPS attach or detach
+CGAUTOAutomatic response to a network request for PDP context
activation
Rev 1 Sep.13Proprietary and Confidential41
Page 42
AirCard 77Xs/34xU AT Command Reference
Table 7-3: Supported 27.007 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
+CGCLASSGPRS mobile station class
+CGCLOSPConfigure local octet stream PAD parameters
+CGCMODPDP Context Modify
+CGDATAEnter data state
+CGDCONTDefine PDP Context
+CGDSCONTDefine Secondary PDP Context
+CGEQMIN3G Quality of Service Profile (Minimum acceptable)
+CGEQNEG3G Quality of Service Profile (Negotiated)
+CGEQREQ3G Quality of Service Profile (Requested)
+CGEREPPacket Domain event reporting
+CGEVGPRS network event indication
+CGMIRequest manufacturer identification
+CGMMRequest model identification
+CGMRRequest revision identification
+CGPADDRShow PDP address
+CGQMINQuality of Service Profile (Minimum acceptable)
+CGQREQQuality of Service Profile (Requested)
+CGREGGPRS network registration status
+CGSMSSelect service for MO SMS messages
+CGSNRequest product serial number identification
+CGTFTTraffic Flow Template
+CHLDCall related suppl ementary services
+CHSAHSCSD non-transparent asymmetry configuration N/A
+CHSCHSCSD current call parameters N/A
+CHSDHSCSD device parameters N/A
+CHSRHSCSD parameters report N/A
+CHSTHSCSD transparent call configuration N/A
+CHSUHSCSD automatic user initiated upgrading N/A
+CHUPHangup call
+CIEVIndicator event
42Proprietary and Confidential4114487
Page 43
Table 7-3: Supported 27.007 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
+CIMIRequest international mobile subscriber identity
+CINDIndicator control
+CKEVKey press or release event
+CKPDKeypad control
+CLACList all available AT commands
+CLAELanguage Event
+CLANSet Language
+CLCCList current calls
+CLCKFacility lock
+CLIPCalling line identification presentation
+CLIRCalling lin e identification restriction
+CLVLSet/return internal loudspeaker volume
+CMARMaster Reset
+CME ERROR:
+CNUMSubscriber number
+COLPConnected line identification presentation
+COPNRead operator names
+COPSOperator selection
+CPASPhone activity status
Mobile Termination error result code
(When MUX
mode configured
on USB
interface.)
Limitations
Command is processed when ME is in ‘limited service’ state
<pas> values supported:
(Partial)
• 0—Ready
• 3—Ringing
• 4—Call in Progress
Rev 1 Sep.13Proprietary and Confidential43
Page 44
AirCard 77Xs/34xU AT Command Reference
Table 7-3: Supported 27.007 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
+CPBFFind phonebook entries
+CPBRRead phonebook entries
+CPBSSelect phonebook memory storage
+CPBWWrite phonebook entry
+CPINEnter PIN
+CPLSPreferred PLMN list selection
+CPOLPreferred operator list
+CPROTEnter protocol mode
+CPUCPrice per unit and currency table
+CPWCPower class
+CPWDChange password
+CRService reporting control
+CRCCellular result codes
+CREGNetwork registration
+CRINGIncoming call type
+CRLPRadio link protocol
+CRMPRing Melody Playback N/A
+CRSLRinger sound levelN/A
+CRSMRestricted SIM access
+CSCCSecure control command
+CSCSSelect TE character set
+CSDFSettings date formatN/A
+CSGTSet Greeting Text N/A
+CSILSilence Command N/A
+CSIMGeneric SIM access
+CSNSSingle numbering scheme
+CSQSignal quality
+CSSNSupplementary service notifications
+CSTASelect type of address
+CSTFSettings time format
44Proprietary and Confidential4114487
Page 45
Table 7-3: Supported 27.007 AT commands (Continued)
CommandDescriptionSupported
=Yes; =No
+CSVMSet Voice Mail Number
+CTFRCall deflection
+CTZRTime Zone Reporting N/A
+CTZUAutomatic Time Zone Update
+CUSDUnstructured supplementary service data
+CV120V.120 rate adaptation protocol
+CVHUVoice Hangup Control
+CVIBVibrator mode N/A
DITU T V.25ter [14] dial comma nd
D*99#Sets up a packet data call (PDP context) based on profile ID #1
D*99***<n>#Set s up a packet data call (PDP context) based on profile ID #<n>
(<n> is the <cid> in the +CGDCONT command)
+VTDTone duration
+VTSDTMF and arbitrary tone generation
+WS46PCCA STD 101 [17] select wireless network
Rev 1 Sep.13Proprietary and Confidential45
Page 46
AirCard 77Xs/34xU AT Command Reference
46Proprietary and Confidential4114487
Page 47
8: HSDPA/ HSUPA Categories
The following tables describe standard HSDPA and HSUPA
categories.
A, answer incoming call, 38
A/, re-issue last AT command, 38
B
!BAND, set/query frequency bands, 16
!BOOTHOLD, reset modem and wait for f/w download,
17
C
&C, set data carrier detected, 37
C, ITU T v.24 circuit 109 carrier detect signal behavior
command, 40
+CACM, accumulated call meter, 40
+CACSP, voice group or voice broadcast call state attribute presentation, 40
+CAEMLPP, eMLPP priority registration and interrogation, 40
+CAHLD, leave an ongoing voice group or voice broadcast call, 40
+CAJOIN, accept incoming voice group or voice broadcast call, 40
+CALA, alarm, 40
+CALCC, list current voice group and voice broadcast
call, 40
+CALD, delete alarm, 41
+CALM, alert sound mode, 41
+CAMM, accumulated call meter maximum, 41
+CANCHEV, NCH support indication, 41
+CAOC, advice of charge, 41
+CAPD, postpone or dismiss an alarm, 41
+CAPTT, talker access for voice group call, 41
+CAREJ, reject incoming voice group or voice broadcast
call, 41
+CAULEV, voice group call uplink status presentation,
41
+CBM, cell broadcast message directly displayed, 39
+CBMI, cell broadcast message stored in memory at
specified location, 39
+CBST, select bearer service type, 41
+CCCM, current call meter value, 41
+CCLK, clock, 41
+CCUG, closed user group, 41
+CCWE, call meter maximum event, 41
+CDIP, called line identification presentation, 41
+CDIS, display control, 41
+CDS, SMS status report after sending a SMS, 39
+CDSI, incoming SMS status report, 39
+CEER, extended error report, 41
+CFUN, set phone functionality, 41
+CGACT, PDP context activate or deactivate, 41
+CGANS, manual response to network request for PDP
context activation, 41
+CGATT, PS attach or detach, 41
+CGAUTO, automatic response to network request for
PDP context activation, 41
+CGCLASS, GPRS mobile station class, 42
+CGCLOSP, configure local octet stream PAD parameters, 42
+CGCMOD, PDP context modify, 42
+CGDATA, enter data state, 42
+CGDCONT, define PDP context, 42
+CGDSCONT, define secondary PDP context, 42
+CGEQMIN, 3G QoS profile (minimum acceptable), 42
+CGEQNEG, 3G QoS profile (negotiated), 42
+CGEQREQ, 3G QoS profile (requested), 42
+CGEREP, packet domain event reporting, 42
+CGEV, GPRS network event indication, 42
+CGIEV, indicator event, 42
+CGMI, request manufacturer identification, 42
+CGMM, request model identification, 42
+CGMR, request revision identification, 42
+CGPADDR, show PDP address, 42
+CGQMIN, QoS profile (minimum acceptable), 42
+CGQREQ, QoS profile (requested), 42
+CGREG, GPRS network registration status, 42
+CGSMS, select service for MO SMS messages, 42
+CGSN, request product serial number identification, 42
+CGTFT, traffic flow template, 42
+CHLD, call-related supplementary services, 42
+CHSA, HSCSD non-transparent asymmetry configuration, 42
+CHSC, HSCSD current call parameters, 42
+CHSD, HSCSD device parameters, 42
+CHSR, HSCSD parameters report, 42
+CHST, HSCSD transparent call configuration, 42
+CHSU, HSCSD automatic user initiated upgrading, 42
+CHUP, hangup call, 42
+CIMI, request international mobile subscriber identity,
43
+CIND, indicator control, 43
+CKEV, key press or release event, 43
+CKPD, keypad control, 43
+CLAC, list all available AT commands, 43
+CLAE, language event, 43
+CLAN, set language, 43
+CLCC, list current calls, 43
+CLCK, facility lock, 43
+CLIP, calling line identification presentation, 43
+CLIR, calling line identification restriction, 43
+CLVL, sets/returns internal loudspeaker volume, 43
+CMAR, master reset, 43
+CME ERROR, mobile termination error result code, 43
+CMEC, mobile termination control mode, 43
+CMEE, report mobile termination error, 43
+CMER, mobile termination event reporting, 43
+CMGC, send command, 39
+CMGD, delete message, 39
+CMGF, message format, 39
+CMGL, list messages, 39
Rev. 1 Sep.13Proprietary and Confidential53
Page 54
AirCard 77Xs/34xU AT Command Reference
+CMGR, read message, 39
+CMGS, send message, 39
+CMGW, write message to memory, 39
+CMMS, more messages to send, 39
+CMNA, new message acknowledgement to ME/TA, 39
+CMOD, call mode, 43
+CMS ERROR, SMS error (mobile or network error), 40
+CMSS, send message from storage, 40
+CMT, incoming message directly displayed, 40
+CMTI, incoming message stored at specific memory location,
40
+CMUX, multiplexing mode, 43
+CNMA, new message acknowledgement to ME, 40
+CNMI, new message indications to TE, 40
+CNUM, subscriber number, 43
+COLP, connected line identification presentation, 43
+COPN, read operator names, 43
+COPS, operator selection, 43
+CPAS, phone activity status, 43
+CPBR, read phonebook entries, 44
+CPBS, select phonebook memory storage, 44
+CPBW, write phonebook entry, 44
+CPFB, find phonebook entries, 44
+CPIN, enter PIN, 44
+CPLS, Preferred PLMN list selection, 44
+CPMS, preferred message storage, 40
+CPOL, preferred operator list, 44
+CPROT, enter protocol mode, 44
+CPUC, price per unit and currency table, 44
+CPWC, power class, 44
+CPWD, change password, 44
+CR, service reporting control, 44
+CRC, cellular result code, 44
+CREG, network registration, 44
+CRES, restore settings, 40
+CRING, incoming call type, 44
+CRLP, radio link protocol, 44
+CRMP, ring melody playback, 44
+CRSL, ringer sound level, 44
+CRSM, restricted SIM access, 44
+CSAS, save settings, 40
+CSCA, service center address, 40
+CSCB, select cell broadcast message type, 40
+CSCC, secure control command, 44
+CSCS, select TE character set, 44
+CSDF, settings date format, 44
+CSDH, show text mode parameters, 40
+CSGT, set greeting text, 44
+CSIL, silence command, 44
+CSIM, generic SIM access, 44
+CSMP, set text mode parameters, 40
+CSMS, select message service, 40
+CSNS, single numbering scheme, 44
+CSQ, signal quality, 44
+CSS, Serving System Identification, 37
+CSSN, supplementary service notifications, 44
+CSTA, select type of address, 44
+CSTF, settings time format, 44
+CSVM, set voice mail number, 45
+CTA, MT-Terminated Async. Data Calls, 37
+CTFR, call deflection, 45
+CTZR, time zone reporting, 45
+CTZU, automatic time zone update, 45
+CUSD, unstructured supplementary service data, 45
+CV120, v.120 rate adaption protocol, 45
+CVHU, voice hangup control, 45
+CVIB, vibrator mode, 45
D
&D, set DTR function mode, 37
D, dial, 38
D, ITU T V.25ter dial command, 45
D’99’’’<n>#, set up packet data call based on profile ID #<n>, 45
D’99#, set up packet call based on profile ID #1, 45
D><MEM><N>, originate call to phone number in memory, 38
D><N>, originate call to phone number in current memory, 38
D><STR>, originate call to phone number corresponding to a/n
field, 38
!DAFTMACT, put modem into FTM mode, 7
!DASBAND, set frequency band, 7
DL, redial last phone number used, 38
+DR, V42bis compression report, 38
+DS, V42bis data compress, 38
E
E, set command echo mode, 38
!ENTERCND, enable protected command access, 14
$ERI, Return Enhanced Roaming Indicator, 18
F
&F, set current parameters to defaults, 37
G
+GCAP, Request complete TA capabilities list, 38
!GETBAND, return current active band, 18
!GETRAT, return current active RAT, 18
+GMI, request manufacturer identification, 38
+GMM, request TA model identification, 38
+GMR, request TA revision identification, 8, 38
+GOI, request global object identification, 38
+GSN, request TA serial number identification, 38
!GSTATUS, return operational status, 19
+ICF, set TE-TA control character framing, 38
!IDSTEST, start DM session, 36
+IFC, set TE-TA local data flow control, 38
+ILRR, set TE-TA local rate reporting mode, 38
+IPR, set fixed local rate, 38
L
L, set monitor speaker loudness, 38
M
M, set monitor speaker mode, 38
$MDN, Set/return Mobile Directory Number, 19
$MIPERR, Return last MIP error code, 24
$MSID, Set/ return MSID, 20
O
O, switch from command mode to data mode, 38
P
P, select pulse dialing, 38
!PACKAGE, return package version string, 20
!PCTEMP, return current temperature information, 21
$PRL, Return CDMA PRL version, 21
!RESET, reset the modem, 22
$RESET, Reset (power cycle) the device, 22
$ROAM, Set/ return roaming mode, 22
$RT, Reset device to factory defaults, 22
S
&S, set DSR signal, 37
S0, set number of rings before auto-answer, 39
S10, set disconnect delay after indicating absence of data carrier, 39
S3, set command line termination character, 39
S4, set response formatting character, 39
S5, set command line editing character, 39
S6, set pause before blind dialing, 39
S7, set number of seconds to wait for connection completion,
39
S8, set number of seconds to wait when comma dial modifier
used, 39
!SETCND, set AT command password, 14
T
&T, auto tests, 37
T, select tone dialing, 39
Q, set result code presentation mode, 38
$QCMIP, Set/ return Mobile IP state, 24
$QCMIPEP, Enable/disable active profile, 24
$QCMIPGETP, Return information about specified profile, 25
$QCMIPHA, Set/ return active profile’s home IP address, 25
$QCMIPMASPI, Set/ return active profile’s MN-AAA SPI, 26
$QCMIPMASS, Set/ return active profile’s MN-AAA shared
secret (ASCII), 26
$QCMIPMASSX, Set/ return active profile’s MN-AAA shared
secret (Hex), 27
$QCMIPMHSPI, Set/ return active profile’s HA SPI, 27
$QCMIPMHSS, Set/ return active profile’s MN-HA shared secret (ASCII), 28
$QCMIPMHSSX, Set/ return active profile’s MN-HA shared
secret (Hex), 28
$QCMIPNAI, Set/ return active profile’s NAI, 29
$QCMIPP, Set/ return active profile, 29
$QCMIPPHA, Set/ return active profile’s primary home agent
IP address, 30
$QCMIPRT, Enable/disable reverse tunneling, 31
$QCMIPSHA, Set/ return active profile’s secondary home
agent IP address, 30
V
&V, return AT configuration parameters, 37
V, set result code format mode, 39
+VTD, tone duration, 45
+VTS, DTMF and arbitrary tone generation, 45
W
&W, Store parameter to user-defined profile, 37
+WS46, PCCA STD 101 select wireless network, 45
X
X, set connect result code format and call monitoring, 39
Z
Z, set all current parameters to user-defined profile, 39