Or our local office. For more information, please visit:
http://quectel.com/support/sales.htm
For technical support, or to report documentation errors, please visit:
http://quectel.com/support/technical.htm
Or email to: support@quectel.com
GENERAL NOTES
QUECTEL OFFERS THE INFORMATION AS A SERVICE TO ITS CUSTOMERS. THE INFORMATION
PROVIDED IS BASED UPON CUSTOMERS‟ REQUIREMENTS. QUECTEL MAKES EVERY EFFORT
TO ENSURE THE QUALITY OF THE INFORMATION IT MAKES AVAILABLE. QUECTEL DOES NOT
MAKE ANY WARRANTY AS TO THE INFORMATION CONTAINED HEREIN, AND DOES NOT ACCEPT
ANY LIABILITY FOR ANY INJURY, LOSS OR DAMAGE OF ANY KIND INCURRED BY USE OF OR
RELIANCE UPON THE INFORMATION. ALL INFORMATION SUPPLIED HEREIN IS SUBJECT TO
CHANGE WITHOUT PRIOR NOTICE.
COPYRIGHT
THE INFORMATION CONTAINED HERE IS PROPRIETARY TECHNICAL INFORMATION OF
QUECTEL WIRELESS SOLUTIONS CO., LTD. TRANSMITTING, REPRODUCTION, DISSEMINATION
AND EDITING OF THIS DOCUMENT AS WELL AS UTILIZATION OF THE CONTENT ARE
FORBIDDEN WITHOUT PERMISSION. OFFENDERS WILL BE HELD LIABLE FOR PAYMENT OF
DAMAGES. ALL RIGHTS ARE RESERVED IN THE EVENT OF A PATENT GRANT OR
REGISTRATION OF A UTILITY MODEL OR DESIGN.
Table Index ............................................................................................................................................... 8
TABLE 22: RELEASE CAUSE TEXT LIST OF AT+CEER .............................................................................. 225
EC25&EC21_AT_Commands_Manual 8 / 231
LTE Module Series
EC25&EC21 AT Commands Manual
1Introduction
1.1. Scope of the Document
This document presents the AT Commands Set for Quectel cellular engines EC25 & EC21.
1.2. AT Command Syntax
The “AT”or “at” prefix must be set at the beginning of each command line. To terminate a command line enter <CR>. Commands are usually followed by a response that includes
“<CR><LF><response><CR><LF>”. Throughout this document, only the responses are presented,
“<CR><LF>” are omitted intentionally.
The AT Commands Set implemented by EC25 & EC21 is a combination of 3GPP TS 27.007, 3GPP TS
27.005 and ITU-T recommendation V.25ter as well as the AT Commands developed by Quectel.
All these AT commands can be split into three categories syntactically: “basic”, “S parameter”, and
“extended”. They are listed as follows:
Basic syntax
These AT commands have the format of “AT<x><n>”, or “AT&<x><n>”, where “<x>” is the command, and
“<n>” is/are the argument(s) for that command. An example of this is “ATE<n>”, which tells the DCE
whether received characters should be echoed back to the DTE according to the value of “<n>”. “<n>” is
optional and a default will be used if it is missing.
S parameter syntax
These AT commands have the format of “ATS<n>=<m>”, where “<n>” is the index of the S register to set, and “<m>” is the value to assign to it.
Extended syntax
These commands can be operated in several modes, as following table:
EC25&EC21_AT_Commands_Manual 9 / 231
LTE Module Series
Test Command
AT+<x>=?
This command returns the list of parameters and value ranges
set by the corresponding Write Command or internal processes.
Read Command
AT+<x>?
This command returns the currently set value of the parameter
or parameters.
Write Command
AT+<x>=<…>
This command sets the user-definable parameter values.
Execution
Command
AT+<x>
This command reads non-variable parameters affected by
internal processes in the UE.
EC25&EC21 AT Commands Manual
Table 1: Types of AT Commands and Responses
1.3. Supported Character Sets
EC25 & EC21 AT command interface defaults to the GSM character set. EC25 & EC21 modules support
the following character sets:
GSM format
UCS2
IRA
The character set can be configured and interrogated by using the AT+CSCS command (3GPP TS
27.007) and it is defined in 3GPP TS 27.005. The character set affects transmission and reception of SMS
and SMS Cell Broadcast Messages, as well as the entry and display of phone book entries text field.
1.4. AT Command Interface
EC25 & EC21 AT command interface includes two USB ports (USB MODEM port and USB AT port) and
one main UART port. The main UART port and two USB ports support AT command communication and
data transfer.
1.5. Unsolicited Result Code
As an Unsolicited Result Code and a report message, URC is not issued as part of the response related
to an executed AT command. URC is issued by the EC25 & EC21 without being requested by the TE and
it is issued automatically when a certain event occurs. Typical events leading to URCs are incoming calls
(RING), received short messages, high/low voltage alarm, high/low temperature alarm, etc.
EC25&EC21_AT_Commands_Manual 10 / 231
LTE Module Series
EC25&EC21 AT Commands Manual
1.6. Turn off Procedure
It is recommended to execute AT+QPOWD command to turn off the module, as it is the safest and best
way. This procedure is realized by letting the module log off from the network and allowing the software to
enter into a secure and safe data state before disconnecting the power supply.
After sending AT+QPOWD, do not enter any other AT commands. The module outputs message,
POWERED DOWN and sets the STATUS pin as low to enter into the shutdown state. In order to avoid
data loss, it is suggested to wait for 1s to switch off the VBAT after the STATUS pin is set as low and the
URC POWERED DOWN is outputted. If POWERED DOWN has not been received after 65s, the VBAT
shall be switched off compulsorily.
EC25&EC21_AT_Commands_Manual 11 / 231
LTE Module Series
ATI Display Product Identification Information
Execution Command
ATI
Response
TA issues product information text.
Quectel
EC2x
Revision: <revision>
OK
Maximum Response Time
300ms
Reference
V.25ter
<revision> Identification text of product software version
EC25&EC21 AT Commands Manual
2General Commands
2.1. ATI Display Product Identification Information
The command delivers a product information text.
Parameter
Example
ATI
Quectel
EC25
Revision: EC25EFAR02A09M4G
OK
EC25&EC21_AT_Commands_Manual 12 / 231
LTE Module Series
AT+GMI Request Manufacturer Identification
Test Command
AT+GMI=?
Response
OK
Execution Command
AT+GMI
Response
TA reports one or more lines of information text which permit
the user to identify the manufacturer.
Quectel
OK
Maximum Response Time
300ms
Reference
V.25ter
AT+GMM Request TA Model Identification
Test Command
AT+GMM=?
Response
OK
Execution Command
AT+GMM
Response
TA returns a product model identification text.
EC2x
OK
Maximum Response Time
300ms
Reference
V.25ter
EC25&EC21 AT Commands Manual
2.2. AT+GMI Request Manufacturer Identification
The command returns a manufacturer identification text. See also AT+CGMI.
2.3. AT+GMM Request TA Model Identification
The command returns a product model identification text. It is identical with AT+CGMM.
EC25&EC21_AT_Commands_Manual 13 / 231
LTE Module Series
AT+GMR Request TA Revision Identification of Software Release
Test Command
AT+GMR=?
Response
OK
Execution Command
AT+GMR
Response
TA reports one or more lines of information text which permit
the user to identify the revision of software release.
<revision>
OK
Maximum Response Time
300ms
Reference
V.25ter
<revision> Identification text of product software version
AT+CGMI Request Manufacturer Identification
Test Command
AT+CGMI=?
Response
OK
Execution Command
AT+CGMI
Response
TA returns manufacturer identification text.
Quectel
EC25&EC21 AT Commands Manual
2.4. AT+GMR Request TA Revision Identification of Software Release
The command delivers a product firmware version identification text. It is identical with AT+CGMR.
Parameter
Example
AT+GMR
EC25EFAR02A09M4G
OK
2.5. AT+CGMI Request Manufacturer Identification
The command returns a manufacturer identification text. See also AT+GMI.
EC25&EC21_AT_Commands_Manual 14 / 231
LTE Module Series
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
AT+CGMM Request Model Identification
Test Command
AT+CGMM=?
Response
OK
Execution Command
AT+CGMM
Response
TA returns product model identification text.
EC2x
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
AT+CGMR Request TA Revision Identification of Software Release
Test Command
AT+CGMR=?
Response
OK
Execution Command
AT+CGMR
Response
TA returns identification text of product software version.
<revision>
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
EC25&EC21 AT Commands Manual
2.6. AT+CGMM Request Model Identification
The command returns a product model identification text. It is identical with AT+GMM.
2.7. AT+CGMR Request TA Revision Identification of Software Release
The command delivers a product firmware version identification text. It is identical with AT+GMR.
EC25&EC21_AT_Commands_Manual 15 / 231
LTE Module Series
The serial number (IMEI) varies with the individual ME device.
<revision> Identification text of product software version
AT+GSN Request International Mobile Equipment Identity (IMEI)
Test Command
AT+GSN=?
Response
OK
Execution Command
AT+GSN
Response
TA reports the IMEI (International Mobile Equipment Identity)
number in information text which permits the user to identify
the individual ME device.
<IMEI>
OK
Maximum Response Time
300ms
Reference
V.25ter
<IMEI> IMEI of the ME
NOTE
EC25&EC21 AT Commands Manual
Parameter
2.8. AT+GSN Request International Mobile Equipment Identity (IMEI)
The command returns the International Mobile Equipment Identity (IMEI) number of ME. It is identical with
AT+CGSN.
Parameter
EC25&EC21_AT_Commands_Manual 16 / 231
LTE Module Series
The serial number (IMEI) varies with the individual ME device.
AT+CGSN Request Product Serial Number Identification
Test Command
AT+CGSN=?
Response
OK
Execution Command
AT+CGSN
Response
<IMEI>
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<IMEI> IMEI of the ME
AT&F Set all Current Parameters to Manufacturer Defaults
Execution Command
AT&F[<value>]
Response
TA sets all current parameters to the manufacturer defined
profile. See Table 8.
OK
Maximum Response Time
300ms
Reference
V.25ter
NOTE
EC25&EC21 AT Commands Manual
2.9. AT+CGSN Request Product Serial Number Identification
The command returns International Mobile Equipment Identity (IMEI) number of ME. It is identical with
AT+GSN.
Parameter
2.10. AT&F Set all Current Parameters to Manufacturer Defaults
The command resets AT command settings to their factory default values.
EC25&EC21_AT_Commands_Manual 17 / 231
LTE Module Series
<value> 0 Set all TA parameters to manufacturer defaults
AT&V Display Current Configuration
Execution Command
AT&V
Response
TA returns the current parameter settings. See Table 2. OK
The command displays the current settings of several AT command parameters, including the single-letter
AT command parameters which are not readable otherwise.
Table 2: AT&V Response
EC25&EC21_AT_Commands_Manual 18 / 231
LTE Module Series
AT&W Store Current Parameters to User Defined Profile
Execution Command
AT&W[<n>]
Response
TA stores the current parameter settings in the user defined
profile. See Table 9.
OK
Maximum Response Time
300ms
Reference
V.25ter
<n> 0 Profile number to store current parameters
ATZ Set all Current Parameters to User Defined Profile
Execution Command
ATZ[<value>]
Response
TA sets all current parameters to the user defined profile. See
Table 10.
OK
Maximum Response Time
300ms
Reference
V.25ter
<value> 0 Reset to profile number 0
EC25&EC21 AT Commands Manual
2.12. AT&W Store Current Parameters to User Defined Profile
The command stores the current AT command settings to a user defined profile in non-volatile memory.
Parameter
2.13. ATZ Set all Current Parameters to User Defined Profile
The command restores the current AT command settings to the user defined profile in non-volatile
memory, if one was stored with AT&W before. Any additional AT command on the same command line
may be ignored.
Parameter
EC25&EC21_AT_Commands_Manual 19 / 231
LTE Module Series
ATQ Set Result Code Presentation Mode
Execution Command
ATQ<n>
Response
This parameter setting determines whether or not the TA
transmits any result code to the TE. Information text
transmitted in response is not affected by this setting.
If <n>=0:
OK
If <n>=1:
(none)
Maximum Response Time
300ms
Reference
V.25ter
<n>0 TA transmits result code 1 Result codes are suppressed and not transmitted
ATV TA Response Format
Execution Command
ATV<value>
Response
This parameter setting determines the contents of the header
and trailer transmitted with result codes and information
responses.
When <value>=0
0
When <value>=1
OK
EC25&EC21 AT Commands Manual
2.14. ATQ Set Result Code Presentation Mode
The command controls whether the result code is transmitted to the TE. Other information text transmitted
as response is not affected.
Parameter
2.15. ATV TA Response Format
The command determines the contents of header and trailer transmitted with AT command result codes
and information responses.
The result codes, their numeric equivalents and brief descriptions of the use of each are listed in the
following table.
EC25&EC21_AT_Commands_Manual 20 / 231
LTE Module Series
Maximum Response Time
300ms
Reference
V.25ter
<value> 0 Information response: <text><CR><LF>
Short result code format: <numeric code><CR>
1 Information response: <CR><LF><text><CR><LF>
Long result code format: <CR><LF><verbose code><CR><LF>
ATV1
ATV0
Description
OK 0 Acknowledges execution of a command
CONNECT
1
A connection has been established; the DCE is moving
from command mode to data mode
RING
2
The DCE has detected an incoming call signal from
network
NO CARRIER
3
The connection has been terminated or the attempt to
establish a connection failed
ERROR
4
Command not recognized, command line maximum length
exceeded, parameter value invalid, or other problem with
processing the command line
NO DIALTONE
6
No dial tone detected
EC25&EC21 AT Commands Manual
Parameter
Example
ATV1 //Set <value>=1
OK
AT+CSQ
+CSQ: 30,99
OK //When <value>=1, the result code is OK.
ATV0 //Set <value>=0
0
AT+CSQ
+CSQ: 30,99
0 //When <value>=0, the result code is 0.
Table 3: ATV0&ATV1 Result Codes Numeric Equivalents and Brief Description
EC25&EC21_AT_Commands_Manual 21 / 231
LTE Module Series
BUSY
7
Engaged (busy) signal detected
NO ANSWER
8
“@” (Wait for Quiet Answer) dial modifier was used, but
remote ringing followed by five seconds of silence was not
detected before expiration of the connection timer (S7)
ATE Set Command Echo Mode
Execution Command
ATE<value>
Response
This setting determines whether or not the TA echoes
characters received from TE during command state.
OK
Maximum Response Time
300ms
Reference
V.25ter
<value> 0 Echo mode OFF 1 Echo mode ON
A/ Repeat Previous Command Line
Execution Command
A/
Response
Repeat the previous command
Reference
V.25ter
EC25&EC21 AT Commands Manual
2.16. ATE Set Command Echo Mode
The command controls whether or not the module echoes characters received from TE during AT
command mode.
Parameter
2.17. A/ Repeat Previous Command Line
The command repeats previous AT command line, and “/” acts as the line terminating character.
EC25&EC21_AT_Commands_Manual 22 / 231
LTE Module Series
ATS3 Set Command Line Termination Character
Read Command
ATS3?
Response
<n>
OK
Write Command
ATS3=<n>
Response
This parameter setting determines the character recognized
by TA to terminate an incoming command line. The TA also
returns this character in output.
OK
Maximum Response Time
300ms
Reference
V.25ter
<n> 0-13-127 Command line termination character (Default 13=<CR>)
EC25&EC21 AT Commands Manual
Example
ATI
Quectel
EC25
Revision: EC25EFAR02A09M4G
OK
A///Repeat the previous command
Quectel
EC25
Revision: EC25EFAR02A09M4G
OK
2.18. ATS3 Set Command Line Termination Character
The command determines the character recognized by the module to terminate an incoming command
line. It is also generated for result codes and information text, along with character value set via ATS4.
Parameter
EC25&EC21_AT_Commands_Manual 23 / 231
LTE Module Series
ATS4 Set Response Formatting Character
Read Command
ATS4?
Response
<n>
OK
Write Command
ATS4=<n>
Response
This parameter setting determines the character generated
by the TA for result code and information text.
OK
Maximum Response Time
300ms
Reference
V.25ter
<n> 0-10-127 Response formatting character (Default 10=<LF>)
ATS5 Set Command Line Editing Character
Read Command
ATS5?
Response
<n>
OK
Write Command
ATS5=<n>
Response
This parameter setting determines the character recognized
by TA as a request to delete the immediately preceding
character from the command line.
OK
Maximum Response Time
300ms
EC25&EC21 AT Commands Manual
2.19. ATS4 Set Response Formatting Character
The command determines the character generated by the module for result code and information text,
along with the command line termination character set via ATS3.
Parameter
2.20. ATS5 Set Command Line Editing Character
The command determines the character value used by the module to delete the immediately preceding
character from the AT command line (i.e. equates to backspace key).
EC25&EC21_AT_Commands_Manual 24 / 231
LTE Module Series
Reference
V.25ter
<n> 0-8-127 Response editing character (Default 8=<Backspace>)
ATX Set CONNECT Result Code Format and Monitor Call Progress
Execution Command
ATX<value>
Response
This parameter setting determines whether or not the TA
detected the presence of dial tone and busy signal and
whether or not TA transmits particular result codes.
OK
Maximum Response Time
300ms
Reference
V.25ter
<value> 0 CONNECT result code only returned, dial tone and busy detection are both
disabled
1 CONNECT <text> result code only returned, dial tone and busy detection are
both disabled
2 CONNECT <text> result code returned, dial tone detection is enabled, busy
detection is disabled
3 CONNECT <text> result code returned, dial tone detection is disabled, busy
detection is enabled
4 CONNECT <text> result code returned, dial tone and busy detection are
both enabled
EC25&EC21 AT Commands Manual
Parameter
2.21. ATX Set CONNECT Result Code Format and Monitor Call Progress
The command determines whether or not the module transmits particular result codes to the TE. It also
controls whether or not the module verifies the presence of a dial tone when it begins dialing, and whether
or not engaged tone (busy signal) detection is enabled.
Parameter
EC25&EC21_AT_Commands_Manual 25 / 231
LTE Module Series
AT+CFUN Set Phone Functionality
Test Command
AT+CFUN=?
Response
+CFUN: (list of supported <fun>s),(list of supported <rst>s)
OK
Read Command
AT+CFUN?
Response
+CFUN: <fun>
OK
Write Command
AT+CFUN=<fun>[,<rst>]
Response
OK
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
15s, determined by network.
Reference
3GPP TS 27.007
<fun>0 Minimum functionality
1 Full functionality (Default)
4 Disable the ME from both transmitting and receiving RF signals
<rst>0 Do not reset the ME before setting it to <fun> functionality level.
This is the default setting when <rst> is not given.
1 Reset the ME. The device is fully functional after the reset. This value is available
only for <fun>=1
EC25&EC21 AT Commands Manual
2.22. AT+CFUN Set Phone Functionality
The command controls the functionality level. It can also be used to reset the UE.
Parameter
Example
AT+CFUN=0 //Switch phone to minimum functionality
OK
AT+COPS?
+COPS: 0 //No operator is registered
OK
AT+CPIN?
EC25&EC21_AT_Commands_Manual 26 / 231
LTE Module Series
AT+CMEE Error Message Format
Test Command
AT+CMEE=?
Response
+CMEE: (list of supported <n>s)
OK
Read Command
AT+CMEE?
Response
+CMEE: <n>
OK
Write Command
AT+CMEE=<n>
Response
TA disables or enables the use of result code +CME ERROR: <err> as an indication of an error related to the functionality of
the ME.
EC25&EC21 AT Commands Manual
+CME ERROR: 13 //(U)SIM failure
AT+CFUN=1 //Switch phone to full functionality
OK
+CPIN: SIM PIN
AT+CPIN=1234
OK
+CPIN: READY
+QUSIM: 1
+QIND: PB DONE
+QIND: SMS DONE
AT+CPIN?
+CPIN: READY
OK
AT+COPS?
+COPS: 0,0,"CHINA MOBILE",7 //Operator is registered
OK
2.23. AT+CMEE Error Message Format
The command controls the format of error result codes: ERROR, error numbers or verbose messages as
+CME ERROR: <err> and +CMS ERROR: <err>.
EC25&EC21_AT_Commands_Manual 27 / 231
LTE Module Series
<n> 0 Disable result code
1 Enable result code and use numeric values
2 Enable result code and use verbose values
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
AT+CSCS Select TE Character Set
Test Command
AT+CSCS=?
Response
+CSCS: (list of supported <chset>s)
OK
Read Command
AT+CSCS?
Response
+CSCS: <chset>
EC25&EC21 AT Commands Manual
Parameter
Example
AT+CMEE=0 //Disable result code
OK
AT+CPIN?
ERROR //Only ERROR will be displayed
AT+CMEE=1 //Enable error result code with numeric values
OK
AT+CPIN?
+CME ERROR: 10
AT+CMEE=2 //Enable error result code with verbose (string)
values
OK
AT+CPIN?
+CME ERROR: SIM not inserted
2.24. AT+CSCS Select TE Character Set
The Write Command informs the module which character set is used by the TE. This enables the UE to
convert character strings correctly between TE and UE character sets.
EC25&EC21_AT_Commands_Manual 28 / 231
LTE Module Series
OK
Write Command
AT+CSCS=<chset>
Response
Set character set <chset> which is used by the TE. The TA
can then convert character strings correctly between the TE
and ME character sets.
OK
If the configuration parameter <urcportvalue> is omitted,
return current configuration:
EC25&EC21 AT Commands Manual
Parameter
Example
AT+CSCS? //Query the current character set
+CSCS: “GSM”
OK
AT+CSCS=“UCS2”//Set the character set to “UCS2”
OK
AT+CSCS?
+CSCS: “UCS2”
OK
2.25. AT+QURCCFG Configure URC Indication Option
The command is used to configure the output port of URC.
EC25&EC21_AT_Commands_Manual 29 / 231
LTE Module Series
1. Configuration of URC output port will be saved to NV immediately by default.
2. After configuration of URC output port is set successfully, it will take effect immediately.
alue>]
+QURCCFG: "urcport",<urcportvalue>
OK
If the configuration parameter <urcportvalue> is not omitted,
response:
OK
ERROR
Maximum Response Time
300ms
<urcportvalue> Set URC output port
"usbat" USB AT port
"usbmodem" USB modem port
"uart1" Main UART
NOTES
EC25&EC21 AT Commands Manual
Parameter
Example
AT+QURCCFG=?
+QURCCFG: "urcport",("usbat","usbmodem","uart1")
OK
AT+QURCCFG="urcport"
+QURCCFG: "urcport","usbat"
OK
AT+QURCCFG="urcport","usbmodem"
OK
AT+QURCCFG="urcport"
+QURCCFG: "urcport","usbmodem"
OK
EC25&EC21_AT_Commands_Manual 30 / 231
LTE Module Series
AT&C Set DCD Function Mode
Execution Command
AT&C[<value>]
Response
This parameter determines how the state of circuit 109(DCD)
relates to the detection of received line signal from the distant
end.
OK
Maximum Response Time
300ms
Reference
V.25ter
<value>0 DCD line is always ON
1 DCD line is ON only in the presence of data carrier
AT&D Set DTR Function Mode
Execution Command
AT&D[<value>]
Response
This parameter determines how the TA responds when circuit
108/2 (DTR) is changed from low to high level during data
mode.
OK
Maximum Response Time
300ms
EC25&EC21 AT Commands Manual
3Serial Interface Control Commands
3.1. AT&C Set DCD Function Mode
The command controls the behavior of the UE‟s DCD (data carrier detection) line.
Parameter
3.2. AT&D Set DTR Function Mode
The command determines how the UE responds if DTR line is changed from low to high level during data
mode.
EC25&EC21_AT_Commands_Manual 31 / 231
LTE Module Series
Reference
V.25ter
<value>0 TA ignores status on DTR 1 LowHigh on DTR: Change to command mode while remaining the connected call.
2 LowHigh on DTR: Disconnect data call, and change to command mode. When DTR
is at high level, auto-answer function is disabled.
AT+IFC Set TE-TA Local Data Flow Control
Test Command
AT+IFC=?
Response
+IFC: (list of supported <dce_by_dte>s),(list of supported
<dte_by_dce>s)
OK
Read Command
AT+IFC?
Response
+IFC: <dce_by_dte>,<dte_by_dce>
OK
Write Command
AT+IFC=<dce_by_dte>,<dte_by_dce>
Response
This parameter setting determines the data flow control on
the serial interface for data mode.
OK
Maximum Response Time
300ms
Reference
V.25ter
<dce_by_dte> Specifies the method that will be used by TE when receiving data from TA
0 None
2 RTS flow control
<dte_by_dce> Specifies the method that will be used by TA when receiving data from TE
0 None
2 CTS flow control
EC25&EC21 AT Commands Manual
Parameter
3.3. AT+IFC Set TE-TA Local Data Flow Control
The command determines the flow control behavior of the serial port.
Parameter
EC25&EC21_AT_Commands_Manual 32 / 231
LTE Module Series
Flow control is only applicable for data mode.
AT+ICF Set TE-TA Control Character Framing
Test Command
AT+ICF=?
Response
+ICF: (list of supported <format>s),(list of supported
<parity>s)
OK
Read Command
AT+ICF?
Response
+ICF: <format>,<parity>
OK
Write Command
AT+ICF=[<format>,[<parity>]]
Response
This parameter setting determines the serial interface
character framing format and parity received by TA from TE.
OK
Maximum Response Time
300ms
Reference
V.25ter
<format> 3 8 data 0 parity 1 stop
<parity> 0 Odd
1 Even
NOTE
EC25&EC21 AT Commands Manual
Example
AT+IFC=2,2 //Open the hardware flow control
OK
AT+IFC?
+IFC: 2,2
OK
3.4. AT+ICF Set TE-TA Control Character Framing
The command determines the serial interface character framing format and parity received by TA from TE.
Parameter
EC25&EC21_AT_Commands_Manual 33 / 231
LTE Module Series
1. The command is applied for command state.
2. The <parity> field is ignored if the <format> field specifies no parity.
2 Mark (1)
3 Space (0)
AT+IPR Set TE-TA Fixed Local Rate
Test Command
AT+IPR=?
Response
+IPR: (list of supported auto detectable <rate>s),(list of
supported fixed-only <rate>s)
OK
Read Command
AT+IPR?
Response
+IPR: <rate>
OK
Write Command
AT+IPR=<rate>
Response
This parameter setting determines the data rate of the TA on
the serial interface. After the delivery of any result code
associated with the current command line, the rate of
command takes effect.
OK
Maximum Response Time
300ms
Reference
V.25ter
<rate>Baud rate per second
9600
19200
38400
57600
NOTES
EC25&EC21 AT Commands Manual
3.5. AT+IPR Set TE-TA Fixed Local Rate
The command is used to query and set the baud rate of the UART. The default baud rate value (<rate>) is
115200bps. The setting of <rate> will not be restored with AT&F.
Parameter
EC25&EC21_AT_Commands_Manual 34 / 231
LTE Module Series
1. If a fixed baud rate is set, make sure that both TE (DTE, usually external processor) and TA (DCE,
Quectel module) are configured to the same rate.
2. The value of AT+IPR cannot be restored with AT&F and ATZ; but it is still storable with AT&W.
3. In multiplex mode, the baud rate cannot be changed by the Write Command AT+IPR=<rate>; and
the setting is invalid and cannot be stored even if AT&W is executed after the Write Command.
4. A selected baud rate takes effect after the Write Commands are executed and acknowledged by OK.
115200
230400
460800
921600
2900000
3000000
AT+QRIR Restore RI Behavior to Inactive
Test Command
AT+QRIR=?
Response
OK
Execution Command
AT+QRIR
Response
OK
NOTES
EC25&EC21 AT Commands Manual
Example
AT+IPR=115200 //Set fixed baud rate to 115200bps
OK
AT&W//Store current setting, that is, the serial communication
speed is 115200bps after restarting module
OK
AT+IPR?
+IPR: 115200
OK
AT+IPR=115200;&W //Set fixed baud rate to 115200bps and store current setting
OK
3.6. AT+QRIR Restore RI Behavior to Inactive
If the RI (ring indicator) behavior is "always", it can be restored to inactive by the Execution Command.
The RI behavior is controlled by AT+QCFG. Please refer to AT+QCFG="urc/ri/ring",
AT+QCFG="urc/ri/smsincoming" and AT+QCFG="urc/ri/other" for more details.
EC25&EC21_AT_Commands_Manual 35 / 231
LTE Module Series
ERROR
Maximum Response Time
300ms
EC25&EC21 AT Commands Manual
EC25&EC21_AT_Commands_Manual 36 / 231
LTE Module Series
AT+CPAS Mobile Equipment Activity Status
Test Command
AT+CPAS=?
Response
+CPAS: (list of supported <pas>s)
OK
Execution Command
AT+CPAS
Response
TA returns the activity status of ME:
+CPAS: <pas>
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<pas>0 Ready 3 Ringing
4 Call in progress or call hold
EC25&EC21 AT Commands Manual
4Status Control Commands
4.1. AT+CPAS Mobile Equipment Activity Status
The Execution Command queries the module‟s activity status.
Parameter
Example
AT+CPAS
+CPAS: 0 //The module is idle
OK
EC25&EC21_AT_Commands_Manual 37 / 231
LTE Module Series
AT+CEER Extended Error Report
Test command
AT+CEER=?
Response
OK
Execution command
AT+CEER
Response
+CEER: <text>
OK
ERROR
If error is related to ME functionality:
EC25&EC21 AT Commands Manual
RING
AT+CLCC
+CLCC: 1,1,4,0,0,“15695519173”,161
OK
AT+CPAS
+CPAS: 3 //The module is ringing
OK
AT+CLCC
+CLCC: 1,0,0,0,0,“10010”,129
OK
AT+CPAS
+CPAS: 4 //Call in progress
OK
4.2. AT+CEER Extended Error Report
The command is used to query an extended error and report the cause of the last failed operation, such
as:
the failure to release a call
the failure to set up a call (both mobile originated or terminated)
the failure to modify a call by using supplementary services
the failure to activate, register, query, deactivate or deregister a supplementary service
the failure to attach GPRS or the failure to activate a PDP context
the failure to detach GPRS or the failure to deactivate a PDP context
The release cause <text> is a text to describe the cause information given by the network.
EC25&EC21_AT_Commands_Manual 38 / 231
LTE Module Series
<text> Release cause text. Reason for the last call failure to setup or release (listed in
Chapter 14.9). Both CS and PS domain call types are reported. Cause data is
captured from Call Manager events and cached locally for later use by this
command.
+CME ERROR: <err>
Maximum Response Time
300ms
AT+QCFG Extended Configuration Settings
Test Command
AT+QCFG=?
Response
+QCFG: “gprsattach”,
(list of supported <attachmode>s)
+QCFG: “nwscanmode”,
(list of supported <scanmode>s),
(list of supported <effect>s)
+QCFG: “nwscanseq”,
(list of supported <scanseq>s),
(list of supported <effect>s)
+QCFG: “roamservice”,
(list of supported <roammode>s),
(list of supported <effect>s)
+QCFG: “servicedomain”,
(list of supported <service>s),
(list of supported <effect>s)
+QCFG: “band”,
(list of supported <bandval>s),
(list of supported <ltebandval>s)
(list of supported <effect>s)
+QCFG: “hsdpacat”,
(list of supported <cat>s)
+QCFG: “hsupacat”,
(list of supported <cat>s)
+QCFG: “rrc”,
(list of supported <rrcr>s)
EC25&EC21 AT Commands Manual
Parameter
4.3. AT+QCFG Extended Configuration Settings
The command is used to query and configure various settings of UE.
EC25&EC21_AT_Commands_Manual 39 / 231
LTE Module Series
+QCFG: “sgsn”,
(list of supported <sgsnr>s)
+QCFG: “msc”,(list of supported <mscr>s)
+QCFG: "pdp/duplicatechk",(list of supported <enable>s)
+QCFG: "tdscsq",(list of supported <value>s)
+QCFG: "urc/ri/ring",(list of supported <typeri>s),
(list of supported <pulseduration>s),
(list of supported <activeduration>s),
(list of supported <inactiveduration>s),
(list of supported <ringnodisturbing>s)
+QCFG: "urc/ri/smsincoming",
(list of supported <typeri>s),
(list of supported <pulseduration>s)
+QCFG: "urc/ri/other",
(list of supported <typeri>s),
(list of supported <pulseduration>s)
+QCFG: "risignaltype",
(list of supported <risignatype>s)
+QCFG: "urc/cache",
(list of supported <value>s)
+QCFG: "tone/incoming"
(list of supported <value>s)
<ltebandval> A hexadecimal value that specifies the LTE frequency band. If it is set to 0 or
0x40000000, it means not to change LTE frequency band. (e.g.: 0x15=0x1(LTE
B1)+0x4(LTE B3)+0x10(LTE B5))
0x1 (CM_BAND_PREF_LTE_EUTRAN_BAND1) LTE B1
0x4 (CM_BAND_PREF_LTE_EUTRAN_BAND3) LTE B3
0x10 (CM_BAND_PREF_LTE_EUTRAN_BAND5) LTE B5
0x40 (CM_BAND_PREF_LTE_EUTRAN_BAND7) LTE B7
0x80 (CM_BAND_PREF_LTE_EUTRAN_BAND8) LTE B8
0x80000(CM_BAND_PREF_LTE_EUTRAN_BAND20) LTE B20
0x7FFFFFFFFFFFFFFF(CM_BAND_PREF_ANY)Any frequency band
<tdsbandval> A hexadecimal value that specifies the TD-SCDMA frequency band. If it is set to
0 or 0x40000000, it means not to change TD-SCDMA frequency band. (e.g.:
0x21=0x1(TDS BCA)+0x20(TDS BCF))
0x1 (CM_BAND_PREF_TDS_BANDA) TDS BCA 0x2 (CM_BAND_PREF_TDS_BANDB) TDS BCB 0x4 (CM_BAND_PREF_TDS_BANDC) TDS BCC 0x8 (CM_BAND_PREF_TDS_BANDD) TDS BCD 0x10 (CM_BAND_PREF_TDS_BANDE) TDS BCE 0x20 (CM_BAND_PREF_TDS_BANDF) TDS BCF
<effect> When to take effect
0 Take effect after UE reboots
EC25&EC21 AT Commands Manual
Parameter
EC25&EC21_AT_Commands_Manual 45 / 231
LTE Module Series
1 Take effect immediately
AT+QCFG="hsdpacat" HSDPA Category Configuration
Write Command
AT+QCFG=“hsdpacat”[,<cat>]
Response
If <cat> is omitted, return the current configuration:
+QCFG: "hsdpacat",<cat>
OK
If <cat> is not omitted, configure the HSDPA category:
OK
ERROR
If there is any error related to ME functionality:
If all configuration parameters are entered, set the RI
behavior when RING URC is presented:
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
<typeri> RI behavior when URCs are presented
"off" No change. Ring indicator keeps inactive.
"pulse" Pulse. Pulse width determined by <pulseduration>.
"always" Change to active. RI behavior can be restored to inactive by
AT+QRIR.
EC25&EC21 AT Commands Manual
Parameter
4.3.13. AT+QCFG="urc/ri/ring" RI Behavior When RING URC is Presented
AT+QCFG="urc/ri/ring", AT+QCFG="urc/ri/smsincoming" and AT+QCFG="urc/ri/other" control the
RI (ring indicator) behavior when a URC is reported. These configurations will be stored into NV
automatically. The ring indicator is active low. AT+QCFG="urc/ri/ring" specifies the RI behavior when
URC RING is presented to indicate an incoming call.
The sum of parameter <activeduration> and <inactiveduration> determines the interval time of “RING”
indications when a call is coming.
Parameter
EC25&EC21_AT_Commands_Manual 50 / 231
LTE Module Series
"auto" When “RING” is presented to indicate an incoming call, the
ring indicator changes to and keeps active. When ring of the
incoming call ends, either answering or hanging up the
incoming call, the ring indicator will change to inactive.
"wave" When RING is presented to indicate an incoming call. The ring
indicator outputs a square wave. Both <activeduration> and
<inactiveduration> are used to set parameters of the square
wave. When the ring of incoming call ends, either answering
or hanging up the incoming call, the ring indicator will change
to inactive.
<pulseduration> Set the width of pulse. The value ranges from 1 to 2000ms and the default is
120ms. This parameter is only meaningful when <typeri>is “pulse”. If this
parameter is not needed, it can be set as null.
<activeduration> The active duration of the square wave. The value ranges from 1 to 10000ms,
and the default is 1000ms. This parameter is only meaningful when <typeri>is “wave”.
<inactiveduration> Set the inactive duration of the square wave. The value ranges from 1 to
10000ms, and the default is 5000ms. This parameter is only meaningful when
<typeri>is “wave”.
<ringnodisturbing> Set whether the ring indicator behavior could be disturbed. This parameter is
only meaningful when <typeri> is configured to “auto” or “wave”. For
example, when <typeri>is configured to “wave”, if the square wave does not
need to be disturbed by other URCs (including SMS related URCs), then
<ringnodisturbing> should be set to "on".
behavior is caused by an incoming call ringing.
"on" RI behavior cannot be disturbed by other URCs when the
behavior is caused by an incoming call ringing.
<pulsecount> The count of pulse. This parameter is only meaningful when <typeri> is
“pulse”. The value ranges from 1 to 5 and the default is 1. The interval time
between two pulses is equal to <pulseduration>.
EC25&EC21 AT Commands Manual
EC25&EC21_AT_Commands_Manual 51 / 231
LTE Module Series
AT+QCFG="urc/ri/smsincoming" RI Behavior When Incoming SMS URCs are
Presented
If <typeri> and <pulseduration> are not omitted, set the RI
behavior when incoming SMS URCs are presented:
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
<typeri> RI behavior when URCs are presented
"off" No change. Ring indicator keeps inactive.
"pulse" Pulse. Pulse width determined by <pulseduration>.
"always" Change to active. RI behavior can be restored to inactive by
AT+QRIR.
<pulseduration> Set the width of pulse. Value ranges from 1 to 2000ms and the default is 120ms.
This parameter is only valid when <typeri> is “pulse”.
<pulsecount> The count of pulse. This parameter is only meaningful when <typeri> is “pulse”.
The value ranges from 1 to 5 and the default is 1. The interval time between two
pulses is equal to <pulseduration>.
EC25&EC21 AT Commands Manual
4.3.14. AT+QCFG="urc/ri/smsincoming" RI Behavior When Incoming SMS URCs are
Presented
The command specifies the RI (ring indicator) behavior when related incoming message URCs are
presented. Related incoming message URCs list: +CMTI, +CMT, +CDS and +CBM.
Parameter
EC25&EC21_AT_Commands_Manual 52 / 231
LTE Module Series
AT+QCFG="urc/ri/other" RI Behavior When Other URCs are Presented
If <typeri> and <pulseduration> are not omitted, set the RI
behavior when other URCs are presented:
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
<typeri> RI behavior when URCs are presented
"off" No change. Ring indicator keeps inactive.
"pulse" Pulse. Pulse width determined by <pulseduration>.
<pulseduration> Set the width of pulse. Value ranges from 1 to 2000ms and the default is 120ms.
This parameter is effect only when <typeri> is “pulse”.
<pulsecount> The count of pulse. This parameter is only meaningful when <typeri> is “pulse”.
The value ranges from 1 to 5 and the default is 1. The interval time between two
pulses is equal to <pulseduration>.
AT+QCFG="risignaltype" RI Signal Output Carrier
Write Command
AT+QCFG="risignaltype",[<risignatyp
e>]
Response
If <risignatype> is omitted, return the current configuration:
+QCFG: "risignaltype",<risignatype>
EC25&EC21 AT Commands Manual
4.3.15. AT+QCFG="urc/ri/other" RI Behavior When Other URCs are Presented
The command specifies the RI (ring indicator) behavior when other URCs are presented.
Parameter
4.3.16. AT+QCFG="risignaltype" RI Signal Output Carrier
The command specifies the RI (ring indicator) signal output carrier.
EC25&EC21_AT_Commands_Manual 53 / 231
LTE Module Series
OK
If <risignatype> is not omitted, configure the RI signal
output carrier:
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
<risignaltype> RI signal output carrier.
"respective" The ring indicator behaves on the port where URC is
presented.
For example, if a URC is presented on UART port, it is
physical ring indicator. If the URC is presented on USB port,
it is virtual ring indicator. If the URC is presented on USB AT
port, and the port does not support ring indicator, then there
will be no ring indicator. AT+QURCCFG=“urcport” can get
the port on which URC is presented.
"physical" No matter which port URC is presented on, URC only
causes the behavior of physical ring indicator.
AT+QCFG="urc/delay" Delay URC Indication
Write Command
AT+QCFG="urc/delay"[,<enable>]
Response
If <enable> is omitted, return the current configuration :
+QCFG: "urc/delay",<enable>
OK
If <enable> is not omitted, set when the URC indication will
be outputted:
OK
ERROR
If there is any error related to ME functionality:
EC25&EC21 AT Commands Manual
Parameter
4.3.17. AT+QCFG="urc/delay" Delay URC Indication
The command can delay the output of URC indication until ring indicator pulse ends.
EC25&EC21_AT_Commands_Manual 54 / 231
LTE Module Series
The settings of the command will take effect immediately and will not be saved after power off.
+CME ERROR: <err>
Maximum Response Time
300ms
<enable> 0 URC indication will be outputted when ring indicator pulse starts.
1 URC indication will be outputted when ring indicator pulse ends (only
effective when the type of ring indicator is “pulse”. Please refer to
AT+QCFG="urc/ri/ring", AT+QCFG="urc/ri/smsincoming" and
AT+QCFG="urc/ri/other" for more details).
AT+QCFG="urc/cache" URC Cache Function
Write Command
AT+QCFG="urc/cache",<enable>
Response
If <enable> is omitted, return the current configuration:
+QCFG: "urc/cache",<enable>
OK
If <enable> is not omitted, enable/disable URC cache
function:
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
<enable> 0 Disable URC cache
1 Enable URC cache
NOTE
EC25&EC21 AT Commands Manual
Parameter
4.3.18. AT+QCFG="urc/cache" URC Cache Function
Parameter
EC25&EC21_AT_Commands_Manual 55 / 231
LTE Module Series
AT+QCFG="tone/incoming" Ring Tone Function
Write Command
AT+QCFG="tone/incoming",<enable>
Response
If <enable> is omitted, return the current configuration:
+QCFG: "tone/incoming",<enable>
OK
If <enable> is not omitted, enable/disable ring tone function:
OK
ERROR
EC25&EC21 AT Commands Manual
Example
AT+QCFG="urc/cache"
+QCFG: "urc/cache",0 //URC cache function is disabled
OK
AT+QCFG="urc/cache",1 //Enable URC cache
OK
AT+QCFG="urc/cache"
+QCFG: "urc/cache",1
OK
//Make a call and send two messages to the module
AT+QCFG="urc/cache",0 //Disable URC cache
OK
RING //Output cached URC
NO CARRIER //Output cached URC
+CMTI: "ME",0 //Output cached URC
+CMTI: "ME",1 //Output cached URC
AT+QCFG="urc/cache"
+QCFG: "urc/cache",0 //URC cache function is disabled
OK
4.3.19. AT+QCFG="tone/incoming" Ring tone Function
EC25&EC21_AT_Commands_Manual 56 / 231
LTE Module Series
The settings of the command will take effect immediately, and will be saved after power off.
If there is any error related to ME functionality:
+QCFG: "tone/incoming",0 //Ring tone function is disabled
OK
AT+QCFG="tone/incoming",1 //Enable ring tone
OK
AT+QCFG="tone/incoming"
+QCFG: "tone/incoming",1
OK
4.4. AT+QINDCFG URC Indication Configuration
The command is used to control URC indication.
EC25&EC21_AT_Commands_Manual 57 / 231
LTE Module Series
<urctype> URC type
"all" Main switch of all URCs. Default is ON.
"csq" Indication of signal strength and channel bit error rate
change (similar to AT+CSQ). Default is OFF. If this
configuration is ON, present:
+QIND: “csq”,<rssi>,<ber>
"smsfull" SMS storage full indication. Default is OFF. If this
configuration is ON, present:
+QIND: “smsfull”,<storage>
"ring" “RING” indication. Default is ON.
"smsincoming" Incoming message indication. Default is ON.
Related URCs list:
+CMTI, +CMT, +CDS
"act" Indication of network access technology change.
Default is OFF. If this configuration is ON, present:
+QIND: "act",<actvalue> <actvalue> is string format. The values are as below:
“GSM”“EGPRS”“WCDMA”“HSDPA”“HSUPA”“HSDPA&HSUPA”
OK
Write command
AT+QINDCFG=<urctype>[,<enable>[,<
savetonvram>]]
Response
If <enable> and <savetonvram> are omitted, the current
configuration will be returned:
+QINDCFG: <urctype>,<enable>
OK
If <enable> and <savetonvram> are not omitted, set the
URC indication configurations:
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
EC25&EC21 AT Commands Manual
Parameter
EC25&EC21_AT_Commands_Manual 58 / 231
LTE Module Series
“LTE”
“TD-SCDMA”
“CDMA”
“HDR”
“EVDO”
“UNKNOWN”
The examples of URC are as below:
+QIND: "act","HSDPA&HSUPA"
+QIND: "act","UNKNOWN"
The description of “act” is as below:
1. If module does not register on network, the
<actvalue> would be “UNKNOWN”.
2. If this configuration is ON, the URC of "act" will be
reported immediately. Only when the network
access technology changes, a new URC will be
reported.
<enable> URC indication is ON or OFF
0 OFF
1 ON
<savetonvram> Whether to save configuration into NV. Not saved by default.
0 Not save
1 Save
EC25&EC21 AT Commands Manual
EC25&EC21_AT_Commands_Manual 59 / 231
LTE Module Series
AT+CIMI Request International Mobile Subscriber Identity (IMSI)
Test Command
AT+CIMI=?
Response
OK
Execution Command
AT+CIMI
Response
TA returns <IMSI> for identifying the individual (U)SIM which
is attached to ME.
<IMSI>
OK
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<IMSI> International Mobile Subscriber Identity (string without double quotes)
EC25&EC21 AT Commands Manual
5(U)SIM Related Commands
5.1. AT+CIMI Request International Mobile Subscriber Identity (IMSI)
The command requests the International Mobile Subscriber Identity (IMSI) which is intended to permit the
TE to identify the individual SIM card or active application in the UICC (GSM or USIM) that is attached to
MT.
Parameter
Example
AT+CIMI
460023210226023 //Query IMSI number of (U)SIM which is attached to ME
OK
EC25&EC21_AT_Commands_Manual 60 / 231
LTE Module Series
AT+CLCK Facility Lock
Test Command
AT+CLCK=?
Response
+CLCK: (list of supported <fac>s)
OK
Write Command
AT+CLCK=<fac>,<mode>[,<passwd>[
,<class>]]
Response
This command is used to lock, unlock or interrogate the ME or
network facility <fac>. Password is normally needed to do
such actions. When querying the status of network service
(<mode>=2) the response line for „not active‟ case
(<status>=0) should be returned only if service is not active
for any <class>.
If <mode> is not equal to 2 and the command is set
successfully:
OK
If <mode>=2 and command is set successfully:
+CLCK: <status>[,<class>]
[+CLCK: <status>[,<class>]]
[…]
OK
Maximum Response Time
5s
Reference
3GPP TS 27.007
<fac>“SC” (U)SIM (lock SIM/UICC card installed in the currently selected card slot)
(SIM/UICC asks password in MT power-up and when this lock command issued).
“AO” BAOC (Bar All Outgoing Calls) (refer to 3GPP TS 22.088 clause 1).
“OI” BOIC (Bar Outgoing International Calls) (refer to 3GPP TS 22.088 clause 1).
“OX”BOIC-exHC (Bar Outgoing International Calls except to Home Country) (refer to
3GPP TS 22.088 clause 1).
“AI”BAIC (Bar All Incoming Calls) (refer to 3GPP TS 22.088 clause 2).
EC25&EC21 AT Commands Manual
5.2. AT+CLCK Facility Lock
The command is used to lock, unlock or interrogate a MT or a network facility <fac>. It can be aborted
when network facilities are being set or interrogated. The factory default password of PF, PN, PU, PP and
PC lock is “12341234”.
Parameter
EC25&EC21_AT_Commands_Manual 61 / 231
LTE Module Series
“IR”BIC-Roam (Bar Incoming Calls when Roaming outside the home country) (refer
to 3GPP TS 22.088 clause 2).
“AB” All Barring services (refer to 3GPP TS 22.030) (applicable only for <mode>=0).
“AG” All outgoing barring services (refer to 3GPP TS 22.030) (applicable only for
<mode>=0).
“AC” All incoming barring services (refer to 3GPP TS 22.030) (applicable only for
<mode>=0).
“FD”SIM card or active application in the UICC (GSM or USIM) fixed dialing memory
feature (if PIN2 authentication has not been done during the current session,
PIN2 is required as <passwd>).
“PF”Lock Phone to the very first inserted SIM/UICC card (also referred in the present
document as PH-FSIM) (MT asks password when other SIM/UICC cards are
inserted).
“PN” Network Personalization (refer to 3GPP TS 22.022)
“PU” Network Subset Personalization (refer to 3GPP TS 22.022)
“PP” Service Provider Personalization (refer to 3GPP TS 22.022)
“PC” Corporate Personalization (refer to 3GPP TS 22.022)
<mode> 0 Unlock 1 Lock
2 Query status
<passwd> Password
<class> 1 Voice
2 Data
4 FAX
7 All telephony except SMS (Default)
8 Short message service
16 Data circuit synchronization
32 Data circuit asynchronization
<status> 0 Off
1 On
EC25&EC21 AT Commands Manual
Example
AT+CLCK="SC",2 //Query the status of (U)SIM card
+CLCK: 0 //The (U)SIM card is unlocked (OFF)
OK
AT+CLCK="SC",1,"1234" //Lock (U)SIM card, and the password is 1234
OK
AT+CLCK="SC",2 //Query the status of (U)SIM card
+CLCK: 1 //The (U)SIM card is locked (ON)
OK
AT+CLCK="SC",0,"1234" //Unlock (U)SIM card
EC25&EC21_AT_Commands_Manual 62 / 231
LTE Module Series
AT+CPIN Enter PIN
Test Command
AT+CPIN=?
Response
OK
Read Command
AT+CPIN?
Response
TA returns an alphanumeric string indicating whether or not
some password is required.
+CPIN: <code>
OK
Write Command
AT+CPIN=<pin>[,<new_pin>]
Response
TA stores a password, such as (U)SIM PIN, (U)SIM PUK, etc.,
which is necessary before it can be operated. If the PIN is to
be entered twice, the TA shall automatically repeat the PIN. If
no PIN request is pending, no action is taken and an error
message +CME ERROR is returned to TE.
If the PIN required is (U)SIM PUK or (U)SIM PUK2, the
second pin is required. This second pin <new_pin> is used to
replace the old pin in the (U)SIM.
OK
Maximum Response Time
5s
Reference
3GPP TS 27.007
<code> READY MT is not pending for any password
SIM PIN MT is waiting for SIM PIN to be given
SIM PUK MT is waiting for SIM PUK to be given
SIM PIN2 MT is waiting for SIM PIN2 to be given
SIM PUK2 MT is waiting for SIM PUK2 to be given
PH-NET PIN MT is waiting for network personalization password to be given
PH-NET PUK MT is waiting for network personalization unblocking password
EC25&EC21 AT Commands Manual
OK
5.3. AT+CPIN Enter PIN
The command is used to enter a password or query whether or not the module requires a password which
is necessary before it can be operated. The password may be (U)SIM PIN, (U)SIM PUK, PH-SIM PIN,
etc.
Parameter
EC25&EC21_AT_Commands_Manual 63 / 231
LTE Module Series
to be given
PH-NETSUB PIN MT is waiting for network subset personalization password to be
given
PH-NETSUB PUK MT is waiting for network subset personalization unblocking
password to be given
PH-SP PIN MT is waiting for service provider personalization password to
be given
PH-SP PUK MT is waiting for service provider personalization unblocking
password to be given
PH-CORP PIN MT is waiting for corporate personalization password to be
given
PH-CORP PUK MT is waiting for corporate personalization unblocking
password to be given
<pin> String type. Password. If the requested password was a PUK, such as (U)SIM PUK1,
PH-FSIM PUK or another passwords, then <pin> must be followed by <new_pin>.
<new_pin> String type. New password required if the requested code was a PUK.
EC25&EC21 AT Commands Manual
Example
//Enter PIN
AT+CPIN?
+CPIN: SIM PIN //Queried PIN code is locked
OK
AT+CPIN=1234 //Enter PIN
OK
+CPIN: READY
AT+CPIN? //PIN has already been entered
+CPIN: READY
OK
//Enter PUK and PIN
AT+CPIN?
+CPIN: SIM PUK //Queried PUK code is locked
OK
AT+CPIN="26601934","1234" //Enter PUK and new PIN password
OK
+CPIN: READY
AT+CPIN?
+CPIN: READY //PUK has already been entered
EC25&EC21_AT_Commands_Manual 64 / 231
LTE Module Series
AT+CPWD Change Password
Test Command
AT+CPWD=?
Response
TA returns a list of pairs which present the available facilities
and the maximum length of their password.
+CPWD: (list of supported <fac>s),(<pwdlength>s)
OK
Write Command
AT+CPWD=<fac>,<oldpwd>,<newpwd
>
Response
TA sets a new password for the facility lock function.
OK
Maximum Response Time
5s
Reference
3GPP TS 27.007
<fac>“SC” (U)SIM (lock SIM/UICC card) (SIM/UICC asks password in MT power-up and
when this lock command is issued)
“AO” BAOC (Bar All Outgoing Calls, refer to 3GPP TS 22.088 clause 1)
“OI” BOIC (Bar Outgoing International Calls, refer to 3GPP TS 22.088 clause 1)
“OX”BOIC-exHC (Bar Outgoing International Calls except to Home Country, refer to
3GPP TS 22.088 clause 1)
“AI” BAIC (Bar All Incoming Calls, refer to 3GPP TS 22.088 clause 2)
“IR” BIC-Roam (Bar Incoming Calls when Roaming outside the home country, refer
to 3GPP TS 22.088 clause 2)
“AB” All barring services (refer to 3GPP TS 22.030, applicable only for <mode>=0)
“AG” All outgoing barring services (refer to 3GPP TS 22.030, applicable only for
<mode>=0)
“AC All incoming barring services (refer to 3GPP TS 22.030, applicable only for
<mode>=0)
“P2” (U)SIM PIN2
<pwdlength> Integer type. Maximum length of password.
<oldpwd> Password specified for the facility from the user interface or with command.
EC25&EC21 AT Commands Manual
OK
5.4. AT+CPWD Change Password
The command sets a new password for the facility lock function defined by AT+CLCK.
Parameter
EC25&EC21_AT_Commands_Manual 65 / 231
LTE Module Series
<newpwd> New password
AT+CSIM Generic (U)SIM Access
Test Command
AT+CSIM=?
Response
OK
Write Command
AT+CSIM=<length>,<command>
Response
+CSIM: <length>,<response>
OK
ERROR
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
Reference
EC25&EC21 AT Commands Manual
Example
AT+CPIN?
+CPIN: READY
OK
AT+CPWD="SC","1234","4321" //Change (U)SIM card password to “4321”
OK
//Restart module or re-activate the SIM card
AT+CPIN? //Query PIN code is locked
+CPIN: SIM PIN
OK
AT+CPIN="4321" //PIN must be entered to define a new password “4321”
OK
+CPIN: READY
5.5. AT+CSIM Generic (U)SIM Access
The command allows a direct control of the (U)SIM that is installed in the currently selected card slot by a
distant application on the TE. The TE shall then keep the processing of (U)SIM information within the
frame specified by GSM/UMTS.
EC25&EC21_AT_Commands_Manual 66 / 231
LTE Module Series
3GPP TS 27.007
<length> Integer type. Length of <command> or <response> string.
<command> Command transferred by the MT to the (U)SIM in the format as described in
3GPP TS 51.011.
<response> Response to the command transferred by the (U)SIM to the MT in the format as
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<command>(U)SIM command number176 READ BINARY
178 READ RECORD
192 GET RESPONSE 214 UPDATE BINARY 220 UPDATE RECORD 242 STATUS
EC25&EC21 AT Commands Manual
Parameter
5.6. AT+CRSM Restricted (U)SIM Access
The command offers easy and limited access to the (U)SIM database. It transmits the (U)SIM command
number <command> and its required parameters to the MT.
Parameter
EC25&EC21_AT_Commands_Manual 67 / 231
LTE Module Series
<fileId> Integer type. Identifier for an elementary data file on (U)SIM, if used by
<command>.
<P1>, <P2>, <P3> Integer type. Parameters transferred by the MT to the (U)SIM. These
parameters are mandatory for every command, except GET RESPONSE and
STATUS. The values are described in 3GPP TS 51.011.
<data> Information which shall be written to the (U)SIM (hexadecimal character
format; refer to AT+CSCS).
<pathId> The directory path of an elementary file on a SIM/UICC in hexadecimal
format.
<sw1>, <sw2> Integer type. Information from the (U)SIM about the execution of the actual
command. These parameters are delivered to the TE in both cases, on
successful or failed execution of the command.
<response> Response of a successful completion of the command previously issued
(hexadecimal character format; refer to AT+CSCS). STATUS and GET
RESPONSE return data, which gives information about the current
elementary data field. The information includes the type of file and its size
(refer to 3GPP TS 51.011). After READ BINARY, READ RECORD or
RETRIEVE DATA command, the requested data will be returned.
<response> is not returned after a successful UPDATE BINARY, UPDATE
RECORD or SET DATA command.
AT+QCCID Show ICCID
Test Command
AT+QCCID=?
Response
OK
Execution Command
AT+QCCID
Response
+QCCID: <iccid>
OK
ERROR
Maximum Response Time
300ms
<iccid> ICCID (Integrated Circuit Card Identifier) number of the (U)SIM card
EC25&EC21 AT Commands Manual
5.7. AT+QCCID Show ICCID
The command returns the ICCID (Integrated Circuit Card Identifier) number of the (U)SIM card.
1 CPIN READY. Operation like lock/unlock PIN is allowed
2 SMS initialization completed
4 Phonebook initialization completed
AT+ QSIMDET (U)SIM Card Detection
Test Command
AT+QSIMDET=?
Response
+QSIMDET: (0,1),(0,1)
OK
Read Command
AT+QSIMDET?
Response
+QSIMDET: <enable>,<insertlevel>
OK
Write Command
Response
EC25&EC21 AT Commands Manual
5.9. AT+QINISTAT Query Initialization Status of (U)SIM Card
The command is used to query the initialization status of (U)SIM card.
Parameter
5.10. AT+QSIMDET (U)SIM Card Detection
The command enables (U)SIM card hot-swap function. (U)SIM card is detected by GPIO interrupt. The
level of (U)SIM card detection pin should also be set when the (U)SIM card is inserted.
EC25&EC21_AT_Commands_Manual 70 / 231
LTE Module Series
1. Hot-swap function is invalid if the configured value of <insertlevel> is inconsistent with hardware
design.
2. Hot-swap function takes effect after the module is restarted.
AT+QSIMDET=<enable>,<insertlevel>
OK
ERROR
Maximum Response Time
300ms
<enable> Enable or disable (U)SIM card detection
0 Disable
1 Enable
<insertlevel>The level of (U)SIM detection pin when a (U)SIM card is inserted
0 Low level
1 High level
AT+ QSIMSTAT (U)SIM Card Insertion Status Report
Test Command
AT+QSIMSTAT=?
Response
+QSIMSTAT: (0,1)
OK
NOTES
EC25&EC21 AT Commands Manual
Parameter
Example
AT+QSIMDET=1,0 //Set (U)SIM card detection pin level as low when (U)SIM card is inserted
OK
<Remove (U)SIM card>
+CPIN: NOT READY
<Insert (U)SIM card>
+CPIN: READY //If PIN1 of the (U)SIM card is unlocked
5.11. AT+QSIMSTAT (U)SIM Card Insertion Status Report
The command queries (U)SIM card insertion status or determines whether (U)SIM card insertion status
report is enabled. The configuration of this command can be saved by AT&W.
EC25&EC21_AT_Commands_Manual 71 / 231
LTE Module Series
Read Command
AT+QSIMSTAT?
Response
+QSIMSTAT: <enable>,<inserted_status>
OK
Write Command
AT+QSIMSTAT=<enable>
Response
OK
ERROR
Maximum Response Time
300ms
<enable>Enable or disable (U)SIM card insertion status report. If it is enabled, when (U)SIM
card is removed or inserted, the URC +QSIMSTAT: <enable>,<insertedstatus>
will be reported.
0 Disable
1 Enable
<insertedstatus> (U)SIM card is inserted or removed. This argument is not allowed to be set.
0 Removed
1 Inserted
2 Unknown, before (U)SIM initialization
EC25&EC21 AT Commands Manual
Parameter
Example
AT+QSIMSTAT? //Query (U)SIM card insertion status
+QSIMSTAT: 0,1
OK
AT+QSIMDET=1,0
OK
AT+QSIMSTAT=1 //Enable (U)SIM card insertion status report
OK
AT+QSIMSTAT?
+QSIMSTAT: 1,1
OK
<Remove (U)SIM card>
+QSIMSTAT : 1,0 //Report of (U)SIM card insertion status, removed
+CPIN: NOT READY
AT+QSIMSTAT?
+QSIMSTAT: 1,0
EC25&EC21_AT_Commands_Manual 72 / 231
LTE Module Series
EC25&EC21 AT Commands Manual
OK
<Insert (U)SIM card>
+QSIMSTAT: 1,1 //Report of (U)SIM card insertion status, inserted
+CPIN: READY
EC25&EC21_AT_Commands_Manual 73 / 231
LTE Module Series
AT+COPS Operator Selection
Test Command
AT+COPS=?
Response
TA returns a set of five parameters, each representing an
operator presenting in the network. Any of the formats may be
unavailable and should then be an empty field. The list of
operators shall be in the order of: home network, networks
referenced in (U)SIM and other networks.
+COPS: (list of supported <stat>,long alphanumeric <oper>,
short alphanumeric <oper>,numeric <oper>s)[,<Act>])s]
[,,(list of supported <mode>s),(list of supported <format>s)]
OK
If there is any error related to ME functionality:
+CME ERROR: <err>
Read Command
AT+COPS?
Response
TA returns the current mode and the currently selected
operator. If no operator is selected, <format>, <oper> and
<Act> are omitted.
+COPS: <mode>[,<format>[,<oper>][,<Act>]]
OK
If there is any error related to ME functionality:
+CME ERROR: <err>
Write Command
AT+COPS=<mode>[,<format>[,<oper
>[,<Act>]]]
Response
TA forces an attempt to select and register the GSM/UMTS
network operator. If the selected operator is not available, no
other operator shall be selected (except <mode>=4). The
format of selected operator name shall apply to further Read
EC25&EC21 AT Commands Manual
6Network Service Commands
6.1. AT+COPS Operator Selection
The command returns the current operators and their status, and allows setting automatic or manual
network selection.
EC25&EC21_AT_Commands_Manual 74 / 231
LTE Module Series
Command (AT+COPS?).
OK
If there is any error related to ME functionality:
+CME ERROR: <err>
Maximum Response Time
180s, determined by network.
Reference
3GPP TS 27.007
<stat>0 Unknown 1 Operator available
2 Current operator
3 Operator forbidden
<oper> Operator in format as per <mode>
<mode> 0 Automatic mode. <oper> field is ignored
1 Manual operator selection. <oper> field shall be present and <Act> optionally
2 Manually deregister from network
3 Set only <format> (for AT+COPS? Read Command), and do not attempt
registration/deregistration (<oper> and <Act> fields are ignored). This value is
invalid in the response of Read Command.
4 Manual/automatic selection. <oper> field shall be presented. If manual selection
fails, automatic mode (<mode>=0) is entered
<format> 0 Long format alphanumeric <oper> which can be up to 16 characters long
1 Short format alphanumeric <oper>2 Numeric <oper>. GSM location area identification number
<Act> Access technology selected. Values 3, 4, 5 and 6 occur only in the response of Read
Command while MS is in data service state and is not intended for the AT+COPS Write
Response
TA returns the status of result code presentation and an
integer <stat> which shows whether the network has
currently indicated the registration of the ME. Location
information elements <lac> and <ci> are returned only when
<n>=2 and ME is registered on the network.
+CREG: <n>,<stat>[,<lac>,<ci>[,<Act>]]
OK
If there is any error related to ME functionality:
+CME ERROR: <err>
Write Command
AT+CREG[=<n>]
Response
TA controls the presentation of an unsolicited result code
+CREG: <stat> when <n>=1 and there is a change in the ME
network registration status.
OK
AT+COPS? //Query the currently selected network operator
+COPS: 0,0,“CHN-UNICOM”,7
OK
6.2. AT+CREG Network Registration
The Read Command returns the network registration status. The write command sets whether or not to
present URC.
EC25&EC21_AT_Commands_Manual 76 / 231
LTE Module Series
Reference
3GPP TS 27.007
<n> 0 Disable network registration unsolicited result code
1 Enable network registration unsolicited result code: +CREG: <stat>
2 Enable network registration unsolicited result code with location information:
+CREG: <stat>[,<lac>,<ci>[,<Act>]]
<stat> 0 Not registered. ME is not currently searching a new operator to register to
1 Registered, home network
2 Not registered, but ME is currently searching a new operator to register to
3 Registration denied
4 Unknown
5 Registered, roaming
<lac> String type. Two bytes location area code in hexadecimal format
<ci> String type. 16-bit (GSM) or 28-bit (UMTS/LTE) cell ID in hexadecimal format
<Act> Access technology selected
+CREG: 1 //URC reports that ME has registered on network
AT+CREG=2 //Activate extended URC mode
OK
+CREG: 1,“D509”,”80D413D”,7 //URC reports that operator has found location area code
and cell ID
EC25&EC21_AT_Commands_Manual 77 / 231
LTE Module Series
AT+CSQ Signal Quality Report
Test Command
AT+CSQ=?
Response
The Test Command returns values supported by the TA.
+CSQ: (list of supported <rssi>s),(list of supported <ber>s)
OK
Execution Command
AT+CSQ
Response
The Execution Command returns received signal strength
indication <rssi> and channel bit error rate <ber> from the
ME.
+CSQ: <rssi>,<ber>
OK
+CME ERROR: <err>
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<rssi> 0 -113dBm or less
1 -111dBm
2...30 -109dBm... -53dBm
31 -51dBm or greater
99 Not known or not detectable
100 -116dBm or less
101 -115dBm
102...190 -114dBm...-26dBm
191 -25dBm or greater
199 Not known or not detectable
100~199 Extended to be used in TD-SCDMA indicating received signal code
power (RSCP)
<ber> Channel bit error rate (in percent)
0...7 As RXQUAL values in the table in 3GPP TS 45.008 subclause 8.2.4 99 Not known or not detectable
EC25&EC21 AT Commands Manual
6.3. AT+CSQ Signal Quality Report
The command indicates the received signal strength <rssi> and the channel bit error rate <ber>.
Parameter
EC25&EC21_AT_Commands_Manual 78 / 231
LTE Module Series
After using network related commands such as AT+CCWA and AT+CCFC, users are advised to wait for
3s before entering AT+CSQ. This is recommended to ensure that any network access required for the
preceding command has been finished.
AT+CPOL Preferred Operator List
Test Command
AT+CPOL=?
Response
+CPOL: (list of supported <index>s),(list of supported
<format>s)
+CSQ: 28,99 //The current signal strength indication is 28 and channel bit error rate is 99
OK
6.4. AT+CPOL Preferred Operator List
The command edits and queries the list of preferred operators.
EC25&EC21_AT_Commands_Manual 79 / 231
LTE Module Series
The access technology selection parameters <GSM>, <GSM_compact>, <UTRAN> and <E-UTRAN>
are required for SIM cards or UICC‟s containing PLMN selector with access technology.
If the <index> is given but the <operator> is left out, the
entry is deleted.
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<index> Integer type. The order number of operator in the (U)SIM preferred operator list
<format> 0 Long format alphanumeric <oper>
1 Short format alphanumeric <oper> 2 Numeric <oper>
<oper> String type. <format> indicates the format is alphanumeric or numeric (see
AT+COPS)
<GSM> GSM access technology
0 Access technology is not selected
1 Access technology is selected
<GSM_compact> GSM compact access technology
0 Access technology is not selected
1 Access technology is selected
<UTRAN> UTRAN access technology
0 Access technology is not selected
1 Access technology is selected
<E-UTRAN> E-UTRAN access technology
0 Access technology is not selected
1 Access technology is selected
<numericn> String type. Operator in numeric format (see AT+COPS)
<alphan> String type. Operator in long alphanumeric format (see AT+COPS)
AT+CTZU Automatic Time Zone Update
Test Command
AT+CTZU=?
Response
+CTZU: (0,1,3)
OK
Write Command
AT+CTZU=<onoff>
Response
OK
ERROR
Read Command
AT+CTZU?
Response
+CTZU: <onoff>
EC25&EC21 AT Commands Manual
6.5. AT+COPN Read Operator Names
The command returns the list of operator names from the ME. Each operator code <numericn> that has
an alphanumeric equivalent <alphan> in the ME memory is returned.
Parameter
6.6. AT+CTZU Automatic Time Zone Update
The Write Command enables and disables automatic time zone update via NITZ. The configuration is
stored to NV automatically.
EC25&EC21_AT_Commands_Manual 81 / 231
LTE Module Series
<onoff> Integer type. The mode of automatic time zone update.
0 Disable automatic time zone update via NITZ.
1 Enable automatic time zone update via NITZ
3 Enable automatic time zone update via NITZ and update LOCAL time to RTC
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
AT+CTZR Time Zone Reporting
Test Command
AT+CTZR=?
Response
+CTZR: (0-2)
OK
EC25&EC21 AT Commands Manual
Parameter
Example
AT+CTZU?
+CTZU: 0
OK
AT+CTZU=?
+CTZU: (0,1,3)
OK
AT+CTZU=1
OK
AT+CTZU?
+CTZU: 1
OK
6.7. AT+CTZR Time Zone Reporting
This command controls the time zone reporting of changed event. If reporting is enabled, the MT returns
the unsolicited result code +CTZV: <tz> or +CTZE: <tz>,<dst>,<time> whenever the time zone is
changed. The configuration is stored to NV automatically.
EC25&EC21_AT_Commands_Manual 82 / 231
LTE Module Series
Write Command
AT+CTZR=<reporting>
Response
OK
ERROR
Read Command
AT+CTZR?
Response
+CTZR: <reporting>
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<reporting> Integer type. The mode of time zone reporting
0 Disable time zone reporting of changed event
1 Enable time zone reporting of changed event by unsolicited result code:
+CTZV: <tz>
2 Enable extended time zone reporting by unsolicited result code:
+CTZE: <tz>,<dst>,<time>
<tz> String type. The sum of the local time zone (difference between the local time and GMT
is expressed in quarters of an hour) plus daylight saving time. The format is “±zz”,
expressed as a fixed width, two-digit integer with the range -48 ... +56. To maintain a
fixed width, numbers in the range -9 ... +9 are expressed with a leading zero, e.g. “-09”, “+00” and “+09”.
<dst> Integer type. Indicates whether <tz> includes daylight savings adjustment
0 <tz> includes no adjustment for daylight saving time
1 <tz> includes +1 hour (equals 4 quarters in <tz>) adjustment for daylight saving
time
2 <tz> includes +2 hours (equals 8 quarters in <tz>) adjustment for daylight saving
time
<time>String type. The local time. The format is “YYYY/MM/DD,hh:mm:ss”, expressed as
integers representing year (YYYY), month (MM), date (DD), hour (hh), minute (mm)
and second (ss). This parameter can be provided by the network when delivering time
zone information and will be presented in the unsolicited result code of extended time
zone reporting if provided by the network.
EC25&EC21 AT Commands Manual
Parameter
Example
AT+CTZR=2
OK
AT+CTZR?
+CTZR: 2
EC25&EC21_AT_Commands_Manual 83 / 231
LTE Module Series
AT+QLTS Obtain the Latest Time Synchronized Through Network
Test Command
AT+QLTS=?
Response
+QLTS: list of supported <mode>s
OK
Execution Command
AT+QLTS
Response
Execution Command returns the latest time that has been
synchronized through network:
+QLTS: <time>,<dst>
OK
Write Command
AT+QLTS=<mode>
Response
+QLTS: <time>,<dst>
OK
ERROR
If error is related to ME functionality
+CME ERROR: <err>
Maximum Response Time
300ms
<mode> Query network time mode
0 Query the latest time that has been synchronized through network
1 Query the current GMT time calculated from the latest time that has been
synchronized through network
2 Query the current LOCAL time calculated from the latest time that has been
synchronized through network
<time> String type value. Format is "yy/MM/dd,hh:mm:ss±zz", where characters indicate year (two
last digits), month, day, hour, minutes, seconds and time zone (indicates the difference,
expressed in quarters of an hour, between the local time and GMT; range -48...+48). E.g.
6th of May 2004, 22:10:00 GMT+2 hours equals to “04/05/06,22:10:00+08”
<dst> Daylight saving time.
EC25&EC21 AT Commands Manual
OK
+CTZE: “+32”,0,“2017/11/04,06:51:13”//<reporting> is 2
6.8. AT+QLTS Obtain the Latest Time Synchronized Through Network
The command is used to obtain the latest time synchronized through network.
Parameter
EC25&EC21_AT_Commands_Manual 84 / 231
LTE Module Series
If the time has not been synchronized through network, the command will return a null time string: +QLTS:
""
AT+QNWINFO Query Network Information
Test Command
AT+QNWINFO=?
Response
OK
Execution Command
AT+QNWINFO
Response
+QNWINFO: <Act>,<oper>,<band>,<channel>
NOTE
EC25&EC21 AT Commands Manual
Example
AT+QLTS=?//Query supported network time modes
+QLTS: (0-2)
OK
AT+QLTS //Query the latest time synchronized through network
+QLTS: "2017/10/13,03:40:48+32,0"
OK
AT+QLTS=0 //Query the latest time synchronized through network. It offers the same
function as Execution Command AT+QLTS.
+QLTS: "2017/10/13,03:40:48+32,0"
OK
AT+QLTS=1 //Query the current GMT time calculated from the latest time that has been
synchronized through network
+QLTS: "2017/10/13,03:41:22+32,0"
OK
AT+QLTS=2 //Query the current LOCAL time calculated from the latest time that has been
synchronized through network
+QLTS: "2017/01/13,11:41:23+32,0"
OK
6.9. AT+QNWINFO Query Network Information
The command indicates network information such as access technology selected, the operator and the
band selected.
EC25&EC21_AT_Commands_Manual 85 / 231
LTE Module Series
OK
Maximum Response Time
300ms
<Act>String type. The access technology selected “NONE”“CDMA1X”“CDMA1X AND HDR”“CDMA1X AND EHRPD”“HDR”“HDR-EHRPD”“GSM”“GPRS”“EDGE”“WCDMA”“HSDPA”“HSUPA”“HSPA+”“TDSCDMA”“TDD LTE”“FDD LTE”
<oper> String type. The operator in numeric format
<band> String type. The band selected
“WCDMA 850 JAPAN” “LTE BAND 1” –“LTE BAND 43” “TDSCDMA BAND A” “TDSCDMA BAND B”“TDSCDMA BAND C”“TDSCDMA BAND D”“TDSCDMA BAND E”“TDSCDMA BAND F”
<channel> Integer type. Channel ID
AT+QSPN Display the Name of Registered Network
Test Command
AT+QSPN=?
Response
OK
Execution Command
AT+QSPN
Response
+QSPN: <FNN>,<SNN>,<SPN>,<alphabet>,<RPLMN>
OK
Reference
<SPN> Service provider name
<alphabet> Alphabet of full network name and short network name
0 GSM 7-bit default alphabet
1 UCS2
<RPLMN> Registered PLMN
<FNN> Full network name
<SNN> Short network name
EC25&EC21 AT Commands Manual
Example
AT+QNWINFO=?
OK
AT+QNWINFO
+QNWINFO: "FDD LTE",46001,"LTE BAND 3",1650
OK
6.10. AT+QSPN Display the Name of Registered Network
Parameter
EC25&EC21_AT_Commands_Manual 87 / 231
LTE Module Series
1. If <alphabet> is 0, <FNN> and <SNN> will be shown in GSM 7 bit default alphabet string.
2. If <alphabet> is 1, <FNN> and <SNN> will be shown in UCS2 hexadecimal string.
NOTES
EC25&EC21 AT Commands Manual
Example
AT+QSPN //Query the EONS information of RPLMN
+QSPN: "CHN-UNICOM","UNICOM","",0,"46001"
OK
EC25&EC21_AT_Commands_Manual 88 / 231
LTE Module Series
1. Any additional commands on the same command line are ignored.
2. This command may be aborted generally by receiving a character during execution. The aborting is
not possible during some states of connection establishment such as handshaking.
3. See also ATX.
ATA Answer an Incoming Call
Execution Command
ATA
Response
TA sends off-hook to the remote station.
Response in case of data call, if successfully connected:
CONNECT <text>
And TA switches to data mode.
Note: <text> outputs only when <value> is greater than 0 in
ATX <value> parameter setting.
When TA returns to command mode after call release:
OK
Response in case of voice call, if successfully connected:
OK
Response if no connection:
NO CARRIER
Maximum Response Time
90s, determined by network.
Reference
V.25ter
NOTES
EC25&EC21 AT Commands Manual
7Call Related Commands
7.1. ATA Answer an Incoming Call
The command connects the module to an incoming voice or data call indicated by a RING URC.
Example
RING //A voice call is ringing
AT+CLCC
EC25&EC21_AT_Commands_Manual 89 / 231
LTE Module Series
ATD Mobile Originated Call to Dial a Number
Execution Command
ATD<n>[<mgsm>][;]
Response
This command can be used to set up outgoing voice, data or
fax calls. It also serves to control supplementary services.
If no dial tone and (parameter setting ATX2 or ATX4):
NO DIALTONE
If busy and (parameter setting ATX3 or ATX4):
BUSY
If a connection cannot be established:
NO CARRIER
If connection is successful and non-voice call.
CONNECT <text>
And TA switches to data mode.
Note: <text> outputs only when <value> is greater than 0 in
ATX<value> parameter setting.
When TA returns to command mode after call release:
The command can be used to set up outgoing voice and data calls. Supplementary services can also be
controlled with this command.
EC25&EC21_AT_Commands_Manual 90 / 231
LTE Module Series
1. This command may be aborted generally by receiving an ATH command or a character during
execution. The aborting is not possible during some states of connection establishment such as
handshaking.
2. Parameter “I” and “i” can be omitted only when there is no “*” or “#” code within the dial string.
3. See ATX command for setting result code and call monitoring parameters.
4. Responses returned after dialing with ATD
For voice call, two different responses mode can be determined. TA returns “OK” immediately either
after dialing was completed or after the call was established. The setting is controlled by AT+COLP.
Factory default is AT+COLP=0, which causes the TA to return “OK” immediately after dialing was
completed. Otherwise TA will return “OK”, “BUSY”, “NO DIAL TONE”, or “NO CARRIER”.
5. Using ATD during an active voice call:
When a user originates a second voice call while there is already an active voice call, the first
call will be automatically put on hold.
The current states of all calls can be easily checked at any time by using AT+CLCC command.
<n> String of dialing digits and optionally V.25ter modifiers
Dialing digits: 0-9, * , #, +, A, B, C
Following V.25ter modifiers are ignored: ,(comma), T, P, !, W, @
<mgsm> String of GSM modifiers:
IActives CLIR (Disable presentation of own number to called party)
iDeactivates CLIR (Enable presentation of own number to called party)
G Activates closed user group invocation for this call only
g Deactivates closed user group invocation for this call only
<;> Only required to set up voice call, return to command mode
NOTES
EC25&EC21 AT Commands Manual
Parameter
Example
ATD10086; //Dialing out the party‟s number
OK
EC25&EC21_AT_Commands_Manual 91 / 231
LTE Module Series
ATH Disconnect Existing Connection
Execution Command
ATH[n]
Response
Disconnect existing call by local TE from command line and
terminate the call.
OK
Maximum Response Time
90s, determined by network.
Reference
V.25ter
<n> 0 Disconnect existing call from command line and terminate the call
AT+CVHU Voice Hang up Control
Test Command
AT+CVHU=?
Response
+CVHU: (list of supported <mode>s)
OK
Read Command
AT+CVHU?
Response
+CVHU: <mode>
OK
Write Command
AT+CVHU=<mode>
Response
OK
ERROR
Maximum Response Time
300ms
Reference
3GPP TS 27.007
EC25&EC21 AT Commands Manual
7.3. ATH Disconnect Existing Connection
The command disconnects circuit switched data calls or voice calls. AT+CHUP is also used to disconnect
the voice call.
Parameter
7.4. AT+CVHU Voice Hang up Control
The command controls whether ATH can be used to disconnect the voice call.
EC25&EC21_AT_Commands_Manual 92 / 231
LTE Module Series
<mode> 0 ATH can be used to disconnect the voice call.
1 ATH is ignored but OK response is returned.
AT+CHUP Hang up Call
Test Command
AT+CHUP=?
Response
OK
Execution Command
AT+CHUP
Response
OK
ERROR
Maximum Response Time
90s, determined by network.
Reference
3GPP 27.007
+++ Switch from Data Mode to Command Mode
Execution Command
+++
Response
This command is only available when TA is in data mode. The
“+++” character sequence causes the TA to cancel the data
flow over the AT interface and switch to command mode. This
allows entering AT command while maintaining the data
connection with the remote server or, accordingly, the GPRS
EC25&EC21 AT Commands Manual
Parameter
7.5. AT+CHUP Hang up Call
The command cancels all voice calls in the state of Active, Waiting and Held. For data connections, use
ATH.
Example
RING //Incoming call
AT+CHUP //Hang up the call
OK
7.6. +++ Switch from Data Mode to Command Mode
The +++ character sequence causes the module to switch from data mode to command mode. It allows
inputting AT commands while maintaining the data connection with the remote device.
EC25&EC21_AT_Commands_Manual 93 / 231
LTE Module Series
1. To prevent the +++ escape sequence from being misinterpreted as data, the following sequence
should be followed:
Do not input any character within 1s before inputting +++.
Input +++ within 1s, and no other characters can be inputted during the time.
Do not input any character within 1s after +++ has been inputted.
Switch to command mode successfully; otherwise return to Step 1.
2. To return back to data mode from command mode, please enter ATO.
3. Another way to change to command mode is through DTR level change, and please refer to AT&D
command for details.
connection.
OK
Maximum Response Time
300ms
Reference
V.25ter
ATO Switch from Command Mode to Data Mode
Execution Command
ATO[n]
Response
TA resumes the connection and switches back to data mode
from command mode.
If connection is not successfully resumed:
NO CARRIER
If connection is successfully resumed, TA returns to data
mode from command mode
CONNECT <text>
Maximum Response Time
300ms
Reference
V.25ter
NOTES
EC25&EC21 AT Commands Manual
7.7. ATO Switch from Command Mode to Data Mode
The command resumes the connection and switches back from command mode to data mode.
EC25&EC21_AT_Commands_Manual 94 / 231
LTE Module Series
When TA returns to data mode from command mode successfully, CONNECT <text> is returned. Please
note that <text> outputs only when <value> is greater than 0 in ATX<value> parameter setting.
If <n> is set too high, the calling party may hang up before the call is answered automatically.
<n> 0 Switch from command mode to data mode
ATS0 Set Number of Rings before Automatically Answering Call
Read Command
ATS0?
Response
<n>
OK
Write Command
ATS0=<n>
Response
This parameter setting determines the number of rings before
auto-answer.
OK
Maximum Response Time
300ms
Reference
V.25ter
<n> 0 Automatic answering is disabled
1-255 Enable automatic answering on the ring number specified
NOTE
NOTE
EC25&EC21 AT Commands Manual
Parameter
7.8. ATS0 Set Number of Rings before Automatically Answering Call
The command controls automatic answering mode for the incoming calls.
Parameter
Example
ATS0=3//Set three rings before automatically answering a call
OK
EC25&EC21_AT_Commands_Manual 95 / 231
LTE Module Series
ATS6 Set Pause before Blind Dialing
Read Command
ATS6?
Response
<n>
OK
Write Command
ATS6=<n>
Response
OK
Maximum Response Time
300ms
Reference
V.25ter
<n> 0-2-10 Number of seconds to wait before blind dialing
ATS7 Set Time to Wait for Connection Completion
Read Command
ATS7?
Response
<n>
OK
EC25&EC21 AT Commands Manual
RING //A call is coming
RING
RING //Automatically answering the call after three rings
7.9. ATS6 Set Pause before Blind Dialing
The command is implemented for compatibility reasons only, and has no effect.
Parameter
7.10. ATS7 Set Time to Wait for Connection Completion
The command specifies the amount of time (unit: second) to wait for the connection completion in case of
answering or originating a call. If no connection is established during the time, the module disconnects
from the line.
EC25&EC21_AT_Commands_Manual 96 / 231
LTE Module Series
Write Command
ATS7=<n>
Response
This parameter setting determines the amount of time (unit:
second) to wait for the connection completion in case of
answering or originating a call.
OK
Maximum Response Time
300ms
Reference
V.25ter
<n>0 Disabled
1-255 Number of seconds to wait for connection completion. Unit: second.
ATS8 Set the Time to Wait for Comma Dial Modifier
Read Command
ATS8?
Response
<n>
OK
Write Command
ATS8=<n>
Response
OK
Maximum Response Time
300ms
Reference
V.25ter
<n> 0 No pause when comma encountered in dial string
1-2-255 Number of seconds to wait for comma dial modifier
EC25&EC21 AT Commands Manual
Parameter
7.11. ATS8 Set the Time to Wait for Comma Dial Modifier
The command is implemented for compatibility reasons only, and has no effect.
Parameter
EC25&EC21_AT_Commands_Manual 97 / 231
LTE Module Series
ATS10 Set Disconnection Delay after Indicating the Absence of Data Carrier
Read Command
ATS10?
Response
<n>
OK
Write Command
ATS10=<n>
Response
This parameter setting determines the amount of time (unit:
tenths of a second) during which the TA will remain connected
in absence of a data carrier. If the data carrier is once more
detected before disconnection, the TA remains connected.
OK
Maximum Response Time
300ms
Reference
V.25ter
<n> 1-15-254 Number of tenths of seconds to wait before disconnecting after UE has indicated
the absence of received line signal
AT+CBST Select Bearer Service Type
Test Command
AT+CBST=?
Response
+CBST: (list of supported <speed>s),(list of supported
<name>s),(list of supported <ce>s)
OK
Read Command
Response
EC25&EC21 AT Commands Manual
7.12. ATS10 Set Disconnection Delay after Indicating the Absence of
Data Carrier
The command determines the amount of time (unit: tenths of a second) during which the UE remains
connected in absence of a data carrier.
Parameter
7.13. AT+CBST Select Bearer Service Type
The Write Command selects the bearer service <name>, the data rate <speed> and the connection
element <ce> to be used when data calls are originated.
EC25&EC21_AT_Commands_Manual 98 / 231
LTE Module Series
AT+CBST?
+CBST: <speed>,<name>,<ce>
OK
Write Command
AT+CBST=[<speed>[,<name>[,<ce>]]]
Response
TA selects the bearer service <name> with data rate
<speed>, and the connection element <ce> to be used when
data calls are originated.
OK
Maximum Response Time
300ms
Reference
3GPP TS 27.007
<speed>0 Automatic speed selection
7 9600 bps (V.32)
12 9600 bps (V.34)
14 14400 bps (V.34)
16 28800 bps (V.34)
17 32000 bps (V.34)
39 9600 bps (V.120)
43 14400 bps (V.120)
48 28800 bps (V.120)
51 56000 bps (V.120)
71 9600 bps (V.110)
75 14400 bps (V.110)
80 28800 bps (V.110 or X.31 flag stuffing)
81 38400 bps (V.110 or X.31 flag stuffing)
83 56000 bps (V.110 or X.31 flag stuffing; this setting can be used in conjunction with
asynchronous non-transparent UDI or RDI service in order to get FTM)
84 64000 bps (X.31 flag stuffing; this setting can be used in conjunction with
asynchronous non-transparent UDI service in order to get FTM)
116 64000 bps (bit transparent)
134 64000 bps (multimedia)