shapeshifter.se

This is a list of AT commands, or actually Hayes commands. This is not a complete list of all commands, instead if focuses mostly on commands that are needed for GPRS/3G/UMTS/HSDPA and a few other more “exotic” commands that aren’t too well known. I wrote this mainly for myself, but I figure other might find it useful as well.

PIN

Command: AT+CPIN?
Response: +CPIN: <code>
Description: Check PIN status.

<code> can have several values, these are the more common ones

READY

Not waiting for PIN (no PIN or PIN already entered)

SIM PIN

Waiting for SIM PIN code.

SIM PUK

Waiting for SIM PUK code.

Command: AT+CPIN=<pin>[,<newpin>]
Response: OK | +CME ERROR: <error>
Description: Enter/change PIN.

Example

>AT+CPIN?
+CPIN: SIM PIN
OK

>AT+CPIN=”1234″
OK

>AT+CPIN?
+CPIN: READY
OK

Network registration

Command: AT+CREG?, AT+CREG=? , AT+CREG=<n>
Response: +CREG: <n>,<stat>,[,<lac>,<ci>[,<AcT>]] | +CME ERROR
Description: Get network registration status and controls unsolicited status callback, which when turned on will send a +CREG message with the new network status when something changes.

<n>

0. Disable unsolicited status callback.
1. Enable unsolicited status callback, +CREG: <stat>
2. Enable unsolicited status callback, +CREG: <stat>,[,<lac>,<ci>[,<AcT>]]

<stat>

0. Not registered, not searching
1. Registered to home network
2. Not registered, searching for network
3. Registration denied
5. Registered, roaming

<lac> Location area code
<ci> UTRAN/GERAN cell ID

<AcT> Network access type

0. GSM
1. Compact GSM
2. UTRAN
3. GSM with EGPRS
4. UTRAN with HSDPA
5. UTRAN with HSUPA
6. UTRAN with HSDPA and HSUPA

UTRAN is a short for UMTS Terrestrial Radio Access Network

The following example shows that full unsolicited status callback is enabled, that the device is registered to its home network followed by an location area code followed by the UTRAN cell ID. Unfortunately this device does not show access type with this command.

Example:

>AT+CREG=2
OK
>AT+CREG?
+CREG: 2,1,”048A”,”58B2″

Command: AT+COPS?,
Response: +COPS: (<mode>,[<format>,<oper>[,<AcT>]]),…, (<modeN>,[<formatN>,<operN>[,<AcTN>]])

Command: AT+COPS=?
Response: +COPS: <stat>, long <oper>, short <oper>, numeric <oper>, <AcT>

Response: +CME ERROR:
Command: AT+COPS=<mode>,[<format>,<oper>[,<AcT>]]
Response: OK | +CME ERROR

Description: Get/set current GSM/UMTS network operator, list available operators. This can be used to change for example access type and switch network.

<mode>

0. Automatic network selection (<oper> ignored)
1. Manual network selection, <oper> must be present, <AcT> is optional.
2. Deregister from network.
3. Set <format only, no registration/deregistration.
4. Manual selection with automatic fall back (enters automatic mode if manual selection fails).

<format>

0. Long alphanumeric string
1. Short alphanumeric string
2. Numeric ID

<oper>
String (based on <format>) that identifies the operator.

<stat>

0. Unknown
1. Available
2. Current
3. Forbidden

<AcT> Network access type

0. GSM
1. Compact GSM
2. UTRAN
3. GSM with EGPRS
4. UTRAN with HSDPA
5. UTRAN with HSUPA
6. UTRAN with HSDPA and HSUPA

The following example shows that the devices is connected to the operator called “3″ using UTRAN (which is UMTS, also called 3G). Listing available networks shows the current network, an additional UTMS network called Sweden3G that is forbidden and a GSM network called “3″ that is available.

Example:

>AT+COPS?
+COPS: 0,0,”3″,2

AT+COPS=?
+COPS: (2,”3″,”3″,”24004″,2),(1,”3″,”3″,”24008″,0),(3,”Sweden 3G”,”Sweden3G”,”2)

Command: AT+COPN
Response: +COPN: <numeric1>,<alpha1>, …, +COPN: <numericN>,<alphaN>
Description: Read operator names stored in device memory.

Example:

+COPN: “20408″,”NL KPN”
+COPN: “20412″,”NL Telfort”
+COPN: “20416″,”T-Mobile NL”
+COPN: “20420″,”Orange NL”
…
+COPN: “24002″,”3 SE”
+COPN: “24004″,”SWEDEN”
+COPN: “24005″,”Sweden 3G”
+COPN: “24008″,”Telenor SE”
+COPN: “24010″,”S COMVIQ”

Define PDP (Packet Data Protocol) context

Command: AT+CGDCONT=<cid> [,<pdptype> [,<apn>[,<pdpaddr> [,<dcomp>[,<hcomp]]]]]
Response: OK | ERROR

Command: AT+CGDCONT?
Response: +CGDCONT: <cid1>,<pdptype1>,<apn1>,<pdpaddr1><dcomp1>,<hcomp1>, …, <cidN>,<pdptypeN>,<apnN>,<pdpaddrN><dcompN>

Command: AT+CGDCONT=?
Response: +CGDCONT: (<cid_range>),<pdptype>,,,(<dcomp_range>),(<hcomp_range>)
Description: Allows configuration of one or several packet data protocol context which forms the base of a data connection.

<cid> PDP context ID, minimum value is 1, maximum value depends on device and can be found with the =? command.

<pdptype> String parameter identifying the protocol type
IP – Internet Protocol
IPV6 – Internet Protocol, version 6
PPP – Point to Point Protocol

<apn> String that identifies the Access Point Name in the packet data network.

<pdpaddr> Requested address, if null (0.0.0.0) an address is requested dynamically.

<dcomp> PDP data compression control, off by default.

<hcomp> PDP header compression control, off by default.

Example:

> AT+CGDCONT=1,”IP”,”bredband.tre.se”
OK

>AT+CGDCONT?
+CGDCONT: 1,”IP”,”bredband.tre.se”,”0.0.0.0″,0,0

>AT+CGDCONT=?
+CGDCONT: (1-16),”IP”,,,(0-2),(0-4)
+CGDCONT: (1-16),”PPP”,,,(0-2),(0-4)
+CGDCONT: (1-16),”IPV6″,,,(0-2),(0-4)

PDP Authentication

Command: AT$QCPDPP=<cid>,<auth_type>,<auth_name>,<auth_pwd>
Response: OK | ERROR
Description: A Qualcomm command, defines authentication parameters for the PDP context id <cid>.

<auth_type>

0. None
1. PAP
2. CHAP

<auth_name> and <auth_pwd> are strings with the authentication information.

Signal quality

Command: AT+CSQ
Response: +CSQ: <rssi>,<ber>
Description: Returns signal quality.

<rssi> Received Signal Strength Indicator

0

-113 dBm or less

1

-111 dBm

2 to 30

-109 to -53 dBm

31

-51 dBm or greater

99

not known or not detectable

<ber> Bit Error Rate, in percent 0..7.
99 not known or not detectable

A note on the RSSI (received signal strength), dBm is a decibel (logarithmic) scale with a reference of 1 milliwatt thus 0 dBm equals a received signal of 1 mW.
Signal strength is usually lower than 1 mW and therefore below 0, so the larger (closer to 0) the better signal strength.
You can convert the RSSI to dBM with

Example

>AT+CSQ=?
+CSQ: (0-31,99),(99)
OK

>AT+CSQ
+CSQ: 14,99

Manufacturer/model/revision identification

Command: AT+GMI
Response: Manufacturer Identification string

Command: AT+GMM
Response: Model Identification string

Command: AT+GMR
Response: Revision Identification string

Example:

>AT+GMI
Option N.V.
OK

>AT+GMM
GTM378
OK

>AT+GMR
2.4.6Hd (Date: Oct 04 2007, Time: 11:59:08)

Option N.V. proprietary AT-style commands

Command: AT_OWANCALL=<pdp context>,<enabled>[,<callback enabled>]
Response: OK
Description: Used to initiate UMTS/HSDPA connections.

<pdp context> – Existing, valid, PDP context that specifies the intended APN to connect to.
<enabled> – 1 = Enable connection, 0 = Disable connection (disconnect)
<callback enabled> – 1 = Asynchronous callback when connection is established, 0 = silent

Example:

>AT_OWANCALL=1,1,1
OK
_OWANCALL: 1, 1

>AT_OWANCALL=1,0
OK
_OWANCALL: 1, 0

Command: AT_OWANDATA=<pdp context>
Response: _OWANDATA: <pdp context>, <ip address>, <route?>, <nameserver 1>, <nameserver 2>, <unknown>, <unknown>, <speed>
Description: Retrieve IP configuration from an established connection previously created with AT_OWANCALL

Example:

>AT_OWANDATA=1
_OWANDATA: 1, 79.138.181.171, 0.0.0.0, 80.251.192.244, 80.251.192.245, 0.0.0.0, 0.0.0.0, 72000

References

3GPP TS 27.007 V8.3.0 (2008-03) – AT command set for User Equipment (UE)
Specification details at 3gpp.org

This entry was posted on Wednesday, April 30th, 2008 at 2:22 pm and is filed under General. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.