Network service

Network parameters definition

ParameterTypeDescriptionCommands
<MCC>
Number
Mobile Country Code. The range is 0-999 (3 digits).
<MNC>
Number
Mobile Network Code. The range is 0-999 (1 to 3 digits).
<LAC>
Number
Location Area Code, The range is 0x0-0xFFFF (2 octets)
<CI>
Number
Cell identity.
<RxLev>
Number
Received Signal Strength Indicator (RSSI) index as defined in 3GPP TS 45.008 [13]:
  • 0: less than -110 dBm
  • 1..62: from -110 to less than -48 dBm with 1 dBm steps
  • 63: -48 dBm or greater
<RAC>
Number
Routing Area Code, range 0x0-0xFF (1 octet); see the 3GPP TS 44.018 [14]
<t_adv>
Number
Timing Advance, it is valid during a connection and it will updated during the next connection; see the 3GPP TS 04.18 [15]. The special value -1 means not valid.
<ch_type>
Number
Channel type of the current connection (see the 3GPP TS 04.18 [15]):
  • 0: invalid channel type
  • 1: TCH/F
  • 2: TCH/H
  • 3: SDCCH/4
  • 4: SDCCH/8
  • other values are to be considered invalid / not available
<ch_mode>
Number
Channel mode of current connection (see the 3GPP TS 04.18 [15]):
  • 0: signalling only
  • 1: speech full rate
  • 2: speech half rate
  • 3: data full rate, 12.0 kb/s radio interface rate
  • 4: data full rate, 6.0 kb/s radio interface rate
  • 5: data half rate, 6.0 kb/s radio interface rate
  • 6: data full rate, 3.6 kb/s radio interface rate
  • 7: data half rate, 3.6 kb/s radio interface rate
  • 8: speech full rate version 2
  • 9: speech full rate version 3
  • 10: speech half rate version 2
  • 11: speech half rate version 3
  • other values are to be considered invalid / not available
<scrambling_code>
Number
Primary scrambling code (PSC).
<dl_frequency>
Number
Downlink frequency. The range is 0-16383.
<ul_frequency>
Number
Uplink frequency. The range is 0-16383.
<arfcn>
Number
Absolute Radio Frequency Channel Number (ARFCN).
<rscp_lev>
Number
Received Signal Code Power expressed in dBm levels:
  • 0: less than -115 dBm
  • 1..90: from -115 dBm to less than -25 dBm with 1 dBm steps
  • 91: -25 dBm
<ecn0_lev>
Number
Energy per Chip/Noise ratio expressed in dB levels:
  • 0: less than -24 dB
  • 1..48: from -24 dB to less than 0 dB with 0.5 dB steps
  • 49: 0 dB
<rrc_state>
String
Allowed values:
  • "CD": CELL_DCH (0)
  • "CF": CELL_FACH(1)
  • "CP": CELL_PCH(2)
  • "UP": URA_PCH(3)
  • "ID": IDLE(4)
  • "ST": START(5)
<EARFCN>
Number
E-UTRAN Absolute radio frequency channel number as defined in the 3GPP TS 36.101 [16]. As per 3GPP TS 36.101 [16] the allowed values depend on the module supported bands. See the corresponding module data sheet for the complete list of the bands supported by each module.
<PhysCellID>
Number
Physical cell ID. The range is 0-503.
<TAC>
Number
Tracking area code.
<LcellId>
Number
E-UTRAN CI (cell identifier) in hexadecimal format; the range is 0x0-0xFFFFFFF (28 bits), 0000000 if not known or not detectable.
<dl_EARFCN>
Number
Downlink E-UTRAN absolute radio frequency channel number in decimal format.
<ul_EARFCN>
Number
Uplink E-UTRAN absolute radio frequency channel number in decimal format.
<RSRP>
Number
Reference Signal Received Power (RSRP) as defined in 3GPP TS 36.133 [17]:
  • 0: less than -140 dBm
  • 1..96: from -140 dBm to less than -44 dBm with 1 dBm steps
  • 97: -44 dBm or greater
<RSRQ>
Number
  • Reference Signal Received Quality (RSRQ) as defined in 3GPP TS 36.133 [17]:
    • 0: less than -19.5 dB
    • 1..33: from -19.5 dB to less than -3 dB with 0.5 dB steps
    • 34: -3 dB or greater
<RSRP_value>
Number
Current Reference Signal Received Power (RSRP) expressed in dBm, the range goes from -140.00 dBm to -44.00 dBm.
<RSRQ_value>
Number
Current Reference Signal Received Quality (RSRQ) expressed in dB, the range goes from -20.00 dB to -3.00 dB.
<TA>
Number
Timing advance information:
  • In RRC_IDLE state, the value of timing advance (TA) is updated from the Random-Access-Response message; the range is 0-1282.
  • In RRC_CONNECTED state, the value of timing advance (TA) is updated from the MAC control element; the range is 0-63.
<BSIC>
Number
Base Station Identify Code (BSIC) in hexadecimal format, the range is 0x0-0x3F (6 bits).
<Lband>
Number
E-UTRAN band (see 3GPP TS 36.101 Table 5.5-1 [16]). Allowed values:
  • From 1 to 64, 255 if not known or not detectable
<Requested_eDRX_cycle>
String
Requested eDRX cycle value to be allocated to the UE. Half byte in a 4 bit format: the eDRX cycle value refers to bit 4 to 1 of octet 3 of the extended DRX parameters information element. For the coding and the value range, see the extended DRX parameters information element in 3GPP TS 24.008 table 10.5.5.32/3GPP TS 24.008 [12].
  • The factory-programmed value is 3 ("0011").
<Assigned_eDRX_cycle>
String
Assigned eDRX cycle value. Half byte in a 4 bit format: the eDRX cycle value refers to bit 4 to 1 of octet 3 of the extended DRX parameters information element. For the coding and the value range, see the extended DRX parameters information element in 3GPP TS 24.008 table 10.5.5.32/3GPP TS 24.008 [12].
<Requested_paging_time_window>
String
Requested paging time window value to be allocated to the UE. Half byte in a 4 bit format: the paging time window (PTW) refers to bit 8 to 5 of octet 3 of the extended DRX parameters information element. For the coding and the value range, see the extended DRX parameters information element in 3GPP TS 24.008 table 10.5.5.32/3GPP TS 24.008 [12].
  • The factory-programmed value is 1 ("0001").
<Assigned_paging_time_window>
String
Assigned paging time window value. Half byte in a 4 bit format: the paging time window (PTW) refers to bit 8 to 5 of octet 3 of the extended DRX parameters information element. For the coding and the value range, see the extended DRX parameters information element in 3GPP TS 24.008 table 10.5.5.32/3GPP TS 24.008 [12].
<LTE_rrc>
Number
LTE radio resource control (RRC) state:
  • 0: null
  • 1: IDLE
  • 2: ATTEMPT TO CONNECT
  • 3: CONNECTED
  • 4: LEAVING CONNECTED STATE
  • 5: ATTEMPT LEAVING E-UTRA
  • 6: ATTEMPT ENTERING E-UTRA
  • 7: CELL SEARCH
  • 255: not known or not detectable

Subscriber number +CNUM

+CNUM
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
Yes
No
No

Description

Returns the MSISDNs related to this subscriber. If the subscriber has different MSISDN for different services, each MSISDN is returned in a separate line.
MSISDN is read from the SIM.

Syntax

TypeSyntaxResponseExample
Action
AT+CNUM
+CNUM: [<alpha1>],<number1>,<type1>
[+CNUM: [<alpha2>],<number2>,<type2>
[…​]]
OK
or
OK
+CNUM: "Mario Rossi","+39320821708",145
+CNUM: "ABCD . AAA","123456789012",129
OK
Test
AT+CNUM=?
OK

Defined values

ParameterTypeDescription
<alphax>
String
Associated with <numberx>
<numberx>
String
Phone number of format specified by <typex>
<typex>
Number
Type of address, octet in Number format (145 when <numberx> string includes '+', otherwise 129)

Signal quality +CSQ

+CSQ
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No
-

Description

Returns the radio signal strength <signal_power> and <qual> from the MT.
In dedicated mode, during the radio channel reconfiguration (e.g. handover), invalid measurements may be returned for a short transitory because the MT must compute them on the newly assigned channel.

Syntax

TypeSyntaxResponseExample
Action
AT+CSQ
+CSQ: <signal_power>,<qual>
OK
+CSQ: 2,5
OK
Test
AT+CSQ=?
+CSQ: (list of supported <signal_power>s),(list of supported <qual>s)
OK
+CSQ: (0-31,99),(0-7,99)
OK

Defined values

ParameterTypeDescription
<signal_power>
Number
The allowed range is 0-31 and 99. Remapped indication of the following parameters:
  • the Received Signal Strength Indication (RSSI) in GSM and LTE RATs. For more details on the RSSI values mapping in LTE RAT, see Notes.
  • the Received Signal Code Power (RSCP) in UMTS RAT.
When the RF power level of the received signal is the highest possible, the value 31 is reported. When it is not known, not detectable or currently not available, 99 is returned.
<qual>
Number
The allowed range is 0-7 and 99. The information provided depends on the selected RAT:
  • In 2G RAT CS dedicated and GPRS packet transfer mode indicates the Bit Error Rate (BER) as specified in 3GPP TS 45.008 [18]
  • In 2G RAT EGPRS packet transfer mode indicates the Mean Bit Error Probability (BEP) of a radio block. 3GPP TS 45.008 [18] specifies the range 0-31 for the Mean BEP which is mapped to the range 0-7 of <qual>
  • In UMTS RAT indicates the Energy per Chip/Noise (ECN0) ratio in dB levels of the current cell. 3GPP TS 25.133 [19] specifies the range 0-49 for EcN0 which is mapped to the range 0-7 of <qual>
  • In LTE RAT indicates the Reference Signal Received Quality (RSRQ). TS 36.133 [17] specifies the range 0-34 for RSRQ which is mapped to the range 0-7 of <qual>
See Table 4 for the complete parameter mapping.

Notes

Table 4. <qual> parameter mapping for each supported RAT
<qual>2G RAT CS and GPRS2G RAT EGPRSUMTS RATLTE RAT
0
BER < 0.2%
28 <= MEAN_BEP <= 31
ECN0_LEV >= 44
RSRQ_LEV < 5
1
0.2% < BER < 0.4%
24 <= MEAN_BEP <= 27
38 <= ECNO_LEV < 44
5 <= RSRQ_LEV < 10
2
0.4% < BER < 0.8%
20 <= MEAN_BEP <= 23
32 <= ECNO_LEV < 38
10 <= RSRQ_LEV < 14
3
0.8% < BER < 1.6%
16 <= MEAN_BEP <= 19
26 <= ECNO_LEV < 32
14 <= RSRQ_LEV < 18
4
1.6% < BER < 3.2%
12 <= MEAN_BEP <= 15
20 <= ECNO_LEV < 26
18 <= RSRQ_LEV < 22
5
3.2% < BER < 6.4%
8 <= MEAN_BEP <= 11
14 <= ECNO_LEV < 20
22 <= RSRQ_LEV < 26
6
6.4% < BER < 12.8%
4 <= MEAN_BEP <= 7
8 <= ECNO_LEV < 14
26 <= RSRQ_LEV < 30
7
BER > 12.8%
0 <= MEAN_BEP <= 3
ECNO_LEV < 8
RSRQ _LEV >= 30
99
Not known or not detectable
  • Table 5 maps <signal_power> values reported from UE and the RSSI. RSSI includes the signal transmitted by the network plus noise.
    Table 5. Mapping between <signal_power> reported from UE and the RSSI
    <signal_power>RSSI
    0
    RSSI of the network <= -113 dBm
    1
    -111 dBm
    2…​30
    -109 dBm <= RSSI of the network <= -53 dBm
    31
    -51 dBm <= RSSI of the network
    99
    Not known or not detectable
  • Only LTE RAT is supported.
  • The command can be used with no need of SIM insertion, because the module always tries to camp on a suitable cell at boot.
  • When the module enters the out of service condition (e.g. in +COPS:2 with SIM inserted and PIN verified, or in out of coverage), all the parameters are reset to "not known or not detectable" values.

Extended signal quality +CESQ

+CESQ
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No
-

Description

Returns the received signal quality and level:
  • If the current serving cell is not a GERAN cell, the <rxlev> and <ber> parameters are set to value 99
  • If the current serving cell is not a UTRA FDD cell, the <rscp> and the <ecn0> parameters are set to 255
  • If the current serving cell is not an E-UTRA cell, the <rsrq> and <rsrp> parameters are set to 255.
The Reference Signal Received Power (RSRP) is a LTE specific measure that averages the power received on the subcarriers carrying the reference signal. The RSRP measurement bandwidth is equivalent to a single LTE subcarrier: its value is therefore much lower than the total received power usually referred to as RSSI. In LTE the RSSI depends on the currently allocated bandwidth, which is not pre-determined. Therefore the RSSI is not useful to describe the signal level in the cell.

Syntax

TypeSyntaxResponseExample
Action
AT+CESQ
+CESQ: <rxlev>,<ber>,<rscp>,<ecn0>,<rsrq>,<rsrp>
OK
+CESQ: 99,99,255,255,20,80
OK
Test
AT+CESQ=?
+CESQ: (list of supported <rxlev>s),(list of supported <ber>s),(list of supported <rscp>s),(list of supported <ecn0>s),(list of supported <rsrq>s),(list of supported <rsrp>s)
OK
+CESQ: (0-63,99),(0-7,99),(0-96,255),(0-49,255),(0-34,255),(0-97,255)
OK

Defined values

ParameterTypeDescription
<rxlev>
Number
Received Signal Strength Indication (RSSI).
<ber>
Number
Bit Error Rate (BER):
  • 0..7: as RXQUAL values in the table in 3GPP TS 45.008 [18], subclause 8.2.4
  • 99: not known or not detectable
<rscp>
Number
Received Signal Code Power (RSCP):
  • 0: less than -120 dBm
  • 1..95: from -120 dBm to -26 dBm with 1 dBm steps
  • 96: -25 dBm or greater
  • 255: not known or not detectable
<ecn0>
Number
Ratio of received energy per PN chip to the total received power spectral density (see 3GPP TS 25.133 [19] subclause):
  • 0: less than -24 dB
  • 1..48: from -24 dB to -0.5 dBm with 0.5 dB steps (i.e. 1: -24 dB ⇐ Ec/Io < -23.5 dB)
  • 49: 0 dB or greater
  • 255: not known or not detectable
<rsrq>
Number
Reference Signal Received Quality (RSRQ):
  • 0: less than -19.5 dB
  • 1..33: from -19.5 dB to -3.5 dB with 0.5 dB steps
  • 34: -3 dB or greater
  • 255: not known or not detectable
<rsrp>
Number
Reference Signal Received Power (RSRP):
  • 0: less than -140 dBm
  • 1..96: from -140 dBm to -45 dBm with 1 dBm steps
  • 97: -44 dBm or greater
  • 255: not known or not detectable

Notes

  • The command can be used with no need of the SIM insertion, because the module always tries to camp on a suitable cell at the module boot.
  • When the module enters the out of service condition (e.g. in +COPS:2 with SIM inserted and PIN verified, or in out of coverage), all the parameters are reset to "not known or not detectable" value.

Signal quality change event reporting control +UCESQS

+UCESQS
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
Full
No
No

Description

Controls the extended signal change quality event reporting.

Syntax

TypeSyntaxResponseExample
Set
AT+UCESQS=<rpt>[,<var>]
OK
AT+UCESQS=2,7
OK
Read
AT+UCESQS?
+UCESQS: <rpt>,<var>
OK
+UCESQS: 2,7
OK
Test
AT+UCESQS=?
+UCESQS: (list of supported <rpt>'s),(list of supported <var>'s)
OK
+UCESQS: (0-2),(1-7)
OK
URC
+CESQ: <rxlev>,<ber>,<rscp>,<ecno>,<rsrq>,<rsrp>
+CESQ: 99,99,255,255,1,7
URC
+UCESQ: RSRP,<rsrp>,RSRQ,<rsrq>,SNR,<snr>
+UCESQ: RSRP,-96,RSRQ,-11,SNR,12

Defined values

ParameterTypeDescription
<rpt>
Number
Signal quality change event reporting mode:
  • 0 (factory-programmed value): disable event reporting
  • 1: report signal quality change via the +CESQ URC
  • 2: report signal quality change via the +UCESQ URC
<var>
Number
Specifies the threshold for the signal quality change event reporting. If the variation in the RSRQ, RSRQ and SNR is greater than or equal to the specified threshold, the +CESQ or +UCESQ URC is reported, depending upon the <rpt> parameter. Higher the threshold, lesser the URC reporting. The range is 0-7. The default value is 1, the factory-programmed value is 0.
<rxlev>
Number
Received Signal Strength Indication (RSSI). Allowed value:
  • 99: not known or not detectable
<ber>
Number
Bit Error Rate (BER). Allowed value:
  • 99: not known or not detectable
<rscp>
Number
Received Signal Code Power (RSCP). Allowed value:
  • 255: not known or not detectable
<ecno>
Number
Ratio of received energy per PN chip to the total received power spectral density. Allowed value:
  • 255: not known or not detectable
<snr>
Number
Signal to noise ratio, reported in dB. The range goes from -20 dB to 40 dB
<rsrp>
Number
Reference Signal Received Quality (RSRQ).
  • The range goes from -156 dBm to -44 dBm for +UCESQ reporting
  • Allowed values for +CESQ URC reporting:
    • 0: less than -140 dBm
    • 1..96: from -140 dBm to -45 dBm with 1 dBm steps
    • 97: -44 dBm or greater
    • 255: not known or not detectable
<rsrq>
Number
Reference Signal Received Quality (RSRQ).
  • The range goes from -34 dB to 2.5 dB for +UCESQ reporting
  • Allowed values for +CESQ URC reporting:
    • 0: less than -19.5 dB
    • 1..33: from -19.5 dB to -3.5 dB with 0.5 dB steps
    • 34: -3 dB or greater
    • 255: not known or not detectable

Operator selection +COPS

+COPS
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
No
Yes

Description

The set command forces an attempt to select and register with the LTE network operator, which can be chosen in the list of network operators returned by the test command, which triggers a PLMN scan on all supported bands. Through the <mode> parameter the network selection can be automatically performed by the module or manually forced on a specified network operator.
By default, u-blox cellular modules support auto-registration, therefore AT+COPS=0 or AT+COPS=1 commands are not required at switch on: for more details, see Auto-registration.
The command is accessible also without an inserted SIM. The PIN insertion is required only for AT+COPS=2 command: if the PIN is not inserted, AT+COPS=2 returns the "+CME ERROR: SIM Failure" error result code. The <mode> parameter value is correctly returned by the read command only after the SIM initialization.
The set command handling depends on the <mode> parameter value (for more details on the <mode> parameter allowed values, see Defined values):
  • <mode>=0 and <mode>=1: the AT command setting can be stored in the NVM.
  • <mode>=4: the module starts a manual selection of the specified operator; if this operation is not successful, the module will start an automatic network selection and will remain in automatic mode. The current setting is stored in the NVM.
  • <mode>=2: this setting cannot be stored in the NVM. In addition, when in <mode>=2, a AT+CFUN=0/AT+CFUN=1 cycle restores the <mode> setting stored in the NVM.
The response time for the set and read command is immediate. The user shall not rely on the set command "OK" final result code as a confirmation that the network selection has been performed. To determine the current network registration status the following AT commands shall be used:
  • EPS network registration status +CEREG
  • Network registration status +CREG
Only numeric <format> is supported. Alphanumeric format can be selected but, given that +COPN is not supported, no PLMN name string will be returned by the test AT command; the read AT command returns the PLMN name in alphanumeric format only if it has been received via NITZ (Network Identity and Time Zone) Information during the registration.
User reselection (see 3GPP TS 23.122 [20]) can be triggered in +COPS: 0 with +UUSERSCAN AT command.
The AT+COPS=1,<format>,<oper> command forces the MT to select and register with the network even if the operator currently belongs to the list of the Forbidden Public Land Mobile Networks (FPLMNs).
PLMN manual mode exception (see 3GPP TS 23.122 [20] subclause 4.4.3.1) is supported: this feature allows manual selection of the HPLMN or an EHPLMNs when the selected PLMN is not available.
The test command cannot be aborted. In case the PLMN scan is interrupted e.g. by a deregistration procedure, the command will return the partial PLMN scan results.
The PLMN scan can be triggered in deregistered state (+COPS: 2) as well as in minimum functionality states (+CFUN: 0/+CFUN: 4/+CFUN: 19).
The PLMN scan can be triggered during a RRC connection, which is temporarily released by the module and re-established at the end of the the network search in case of pending data.
The user should not enter colliding requests (e.g. AT+COPS=0 and AT+COPS=2) on different communication ports, because this might cause interoperability issues if overlapping registration and deregistration requests are not handled by the network, and could result in an unpredictable registration state. Similarly, when notified of a mobile terminated detach event (e.g. via +CGEV URC), it is recommended to wait a few seconds before entering AT+COPS=2 in order to let the pending registration procedure (automatically triggered by the module in most cases) successfully end.

Syntax

TypeSyntaxResponseExample
Set
AT+COPS=<mode>[,<format>[,<oper>[,<AcT>]]]
OK
AT+COPS=0,0
OK
Read
AT+COPS?
+COPS: <mode>[,<format>,<oper>,<AcT>]
OK
+COPS: 0,0,"vodafone IT",7
OK
Test
AT+COPS=?
+COPS: [(<stat>,"","", numeric <oper>,<AcT>)],[(<stat>,"","", numeric <oper>,<AcT>)[,…​]],(list of supported <mode>s),(list of supported <format>s)
OK
+COPS: (2,"","","22210",7),(1,"","","29340",7),,(0-4),(0-2)
OK

Defined values

ParameterTypeDescription
<mode>
Number
Is used to chose whether the network selection is automatically done by the MT or is forced by this command to the operator <oper> given in numeric format:
  • 0 (factory-programmed value): automatic (<oper> field is ignored)
  • 1: manual
  • 2: deregister from network
  • 3: set only <format>
  • 4: manual/automatic
<format>
Number
  • 0: long alphanumeric <oper>
  • 1: short format alphanumeric <oper>
  • 2 (factory-programmed value): numeric <oper>
<oper>
String
The <oper> string returned by the +COPS read command response consists in the network alphanumeric name from NITZ information, where available. Given in format <format>, this field may be up to 16 characters long when <format> is set to long alphanumeric, and up to 8 characters when <format> is set to short alphanumeric. The used alphabet is not affected by +CSCS AT command. The factory-programmed value is an empty string.
<stat>
Number
  • 0: unknown
  • 1: available
  • 2: current
  • 3: forbidden
<AcT>
Number
Indicates the radio access technology:
  • 7: LTE

User PLMN reselection +UUSERSCAN

+UUSERSCAN
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No
-

Description

Executes the user PLMN reselection process, by triggering a search for higher priority PLMNs. If no higher priority PLMN is found, the module remains in the state it was before the search (see the 3GPP TS 23.122 [20] subclause 4.4.3.2).
If a PLMN scan is already in progress, the command will return an error result code.
This command is effective only if the PLMN selection mode is set to automatic mode, i.e. in +COPS: 0, the SIM is present and PIN is inserted (if enabled).

Syntax

TypeSyntaxResponseExample
Action
AT+UUSERSCAN
OK
AT+UUSERSCAN
OK
Test
AT+UUSERSCAN=?
OK

Full cell scan +UCFSCAN

+UCFSCAN
Modules
LEXI-R10401D-01B LEXI-R10801D-01B LEXI-R10801D-51B LEXI-R10001D LEXI-R10011D SARA-R10
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
Yes
No
Yes

Description

Performs an extended network search on the provided radio access technology (RAT). The network search is performed on all the supported bands or only on a subset specified by the <bitmask_1_64> and <bitmask_65_127> parameters. All the cells detected during the PLMN search are reported at the AT interface:
  • GSM/ GSM/GPRS with EDGE availability networks: all the cells found of any visible PLMNs are reported, including the serving cell and those belonging to the neighbor list of the serving cell.
  • WCDMA networks: all the cells found of any visible PLMNs are reported, including the serving cell and those belonging to the neighbor list of the serving cell.
  • LTE Cat 1/M1/NB-IoT networks: all the cells found are reported, including the serving cell and those belonging to the neighbor list of the serving cell.
If the requested <AcT> is not enabled by the +URAT AT command, the +UCFSCAN will return an error result code.
The set command cannot be aborted.
The cell search cannot be performed in RRC connected state when the RAT is 3G or LTE, hence no cell list will be returned at the end of the cell scan attempt.
The maximum number of cells that can be retrieved is 7 and the first reported cell is always the serving cell.

Syntax

TypeSyntaxResponseExample
Set
AT+UCFSCAN=<AcT>[,<bitmask_band1_64>[,<bitmask_band65_127>]]
If <AcT>=7 (LTE Cat 1 / LTE Cat M1) or 9 (NB-IoT)
+UCFSCAN: <AcT>,<EARFCN>,<dl_bandwitdh>,<PhysCellID>,<MCC>,<MNC>,<TAC>,<CI>,<cell_barred>,<RSRP_value>,<RSRQ_value>,<RSSI_value>
[…​]
[+UCFSCAN: <AcT>,<EARFCN>,<dl_bandwitdh>,<PhysCellID>,<MCC>,<MNC>,<TAC>,<CI>,<cell_barred>,<RSRP_value>,<RSRQ_value>,<RSSI_value>]
OK
AT+UCFSCAN=9
+UCFSCAN: 9,6152,101,353,222,88,584C,3761E87,0,"-81","-10","-70"
+UCFSCAN: 9,6290,101,388,222,01,9095,AB431A1,0,"-114","-24","0"
OK
If <AcT>=2 (UMTS)
+UCFSCAN: <AcT>,<uarfcn>,<band_class>,<scrambling_code>,<MCC>,<MNC>,<LAC>,<CI>,<RSSI_WCDMA>
[…​]
[+UCFSCAN: <AcT>,<uarfcn>,<band_class>,<scrambling_code>,<MCC>,<MNC>,<LAC>,<CI>,<RSSI_WCDMA>]
OK
AT+UCFSCAN=2
+UCFSCAN: 2,3063,64,4672,222,88,5FB5,25C1298,-89
+UCFSCAN: 2,10713,1024,1328,222,01,EF8D,52D36FA,-89
OK
If <AcT>=0 (GSM)
+UCFSCAN: <AcT>,<arfcn>,<arfcn_band>,<BSIC>,<MCC>,<MNC>,<LAC>,<CI>,<cell_barred>,<RxLev>,<grps_supported>
[…​]
[+UCFSCAN: <AcT>,<arfcn>,<arfcn_band>,<BSIC>,<MCC>,<MNC>,<LAC>,<CI>,<cell_barred>,<RxLev>,<grps_supported>]
OK
AT+UCFSCAN=0
+UCFSCAN: 0,50,0,53,222,10,4E54,209,0,50,1
+UCFSCAN: 0,49,0,49,222,10,4E54,E3D3,0,50,1
OK
If no cell is found on requested AcT
+UCFSCAN: <AcT>
OK
AT+UCFSCAN=7
+UCFSCAN: 7
OK
Test
AT+UCFSCAN=?
+UCFSCAN: (list of supported <AcT>s),18446744073709551615,18446744073709551615
OK
+UCFSCAN: (0,7,9),18446744073709551615,18446744073709551615
OK

Defined values

ParameterTypeDescription
<AcT>
Number
Indicates the radio access technology. Allowed values:
  • 0: GSM
  • 2: WCDMA
  • 7: LTE Cat 1 / LTE Cat M1
  • 9: NB-IoT
Allowed values:
  • : 7
<bitmask_1_64>
Number
Depending on the <AcT> parameter values, configures the bitmask for the LTE or GSM bands. When <AcT>=7 (LTE Cat 1 / LTE Cat M1) or <AcT>=9 (NB-IoT), it indicates the bandmask for LTE bands 1 through 64. Each bit enables/disables a band for the scan:
  • Bit 0: band 1
  • Bit 1: band 2
  • Bit 2: band 3
  • Bit 3: band 4
  • …​
  • Bit 63: band 64
    When <AcT>=0 (GSM), it indicates bandmask for GSM bands 800 / 900 / 1800 / 1900. The following bit enables/disables a band for the scan:
  • Bit 7: DCS 1800
  • Bit 8: ESGM 900
  • Bit 19: GSM 850
  • Bit 21: PCS 1900
    When <AcT>=2 (WCDMA), it indicates bandmask for WCDMA bands. The following bit enables/disables a band for the scan:
  • Bit 22: WCDMA I (2100 MHz)
  • Bit 23: WCDMA II (1900 MHz)
  • Bit 26: WCDMA V (850 MHz)
  • Bit 49: WCDMA VIII (900 MHz)
The special value 0 enables all the bands for the scan. The default value is 0.
The parameter is not supported.
<bitmask_65_127>
Number
When <AcT>=7 (LTE Cat 1 / LTE Cat M1) or <AcT>=9 (NB-IoT), it indicates the bandmask for LTE bands 65 through 128. Each bit enables/disables a band for the scan:
  • Bit 0: band 65
  • Bit 1: band 66
  • Bit 2: band 67
  • Bit 3: band 68
  • ..
  • Bit 63: band 128
The special value 0 enables all the bands for the scan. The default value is 0.
If <AcT>=0 (GSM) or <AcT>=2 (WCDMA) the parameter is not supported.
The parameter is not supported.
<EARFCN>
Number
See <EARFCN>.
<dl_bandwitdh>
Number
Downlink bandwidth. Allowed values:
  • 6: NB 6 (1.4 MHz)
  • 15: NB 15 (3 MHz)
  • 25: NB 25 (5 MHz)
  • 50: NB 50 (10 MHz)
  • 75: NB 75 (15 MHz)
  • 100: NB 100 (20 MHz)
  • 101: not known
<PhysCellID>
Number
<MCC>
Number
See <MCC>.
<MNC>
Number
See <MNC>.
<TAC>
Number
See <TAC>.
<CI>
Number
See <CI>.
<cell_barred>
Number
Allowed values:
  • 0: cell not barred
  • 1: cell barred
The parameter is not supported, is always reported as 255: "not known or not detectable".
<RSRP_value>
Number
<RSRQ_value>
Number
<RSSI_value>
Number
Cell received signal strength indication (RSSI) value in dBm. The range goes from -120.0 dBm to 0 dBm.
The parameter is not supported, is always reported as 255: "not known or not detectable".
<uarfcn>
Number
UTRAN Absolute Radio Frequency Channel Number (UARFCN).
<band_class>
Number
Band class allowed values:
  • 1024: band I, minimum UARFCN=10562, maximum UARFCN=10838 (IMT band)
  • 1: band II, minimum UARFCN=9661, maximum UARFCN=9938 (PCS band)
  • 32: band III, minimum UARFCN=1162, maximum UARFCN=1513 (WCDMA 1800 band)
  • 256: band IV, minimum UARFCN=1537, maximum UARFCN=1738 (additional frequencies 1887, 1912, 1937, 1962, 1987, 2012, 2037, 2062, 2087) (WCDMA 1700-2100 bands)
  • 16: band V, minimum UARFCN=4357, maximum UARFCN=4458 (additional frequencies 1007, 1012, 1032, 1037, 1062, 1087) (WCDMA 850 band)
  • 8: band VI (Japan), minimum UARFCN=4387, maximum UARFCN=4413 (additional frequencies 1037, 1062) (WCDMA 800 band)
  • 64: band VIII, minimum UARFCN=2937, maximum UARFCN=3088 (WCDMA 900 band)
  • 128: band IX, minimum UARFCN=9237, maximum UARFCN=9387 (WCDMA 1700 band)
  • 512: band XI, minimum UARFCN=3712, maximum UARFCN=3787 (WCDMA 1500 band)
  • 4: band XIX, minimum UARFCN=363, maximum UARFCN=712 (additional frequencies 787, 812, 837) (WCDMA BC19 band)
<scrambling_code>
Number
<RSSI_WCDMA>
Number
Cell received signal strength indication (RSSI) value in dBm. The range goes from -105 dBm to -60 dBm.
<arfcn>
Number
See <arfcn>.
<arfcn_band>
Number
Allowed values:
  • 0: EGSM 900
  • 1: PGSM 900
  • 2: PCS 1900
  • 3: DCS 1800
  • 4: 850
<BSIC>
Number
See <BSIC>.
<LAC>
Number
See <LAC>.
<RxLev>
Number
See <RxLev>.
<gprs_supported>
Number
Allowed values:
  • 0: PS not supported
  • 1: PS supported
  • 2: not known

Examples

CommandResponseDescription
AT+URAT?
+URAT: 7,8,9
OK
Check the radio access technologies module configuration. The module is configured in LTE, NB-IoT and GSM.
AT+UCFSCAN=9
+UCFSCAN: 9,6152,101,353,222,88,584C,3761E87,0,-81,-10,-70
+UCFSCAN: 9,6290,101,388,222,01,9095,AB431A1,0,-114,-24,0
OK
Perform a scan on any NB-IoT band.
AT+UCFSCAN=0
+UCFSCAN: 0,50,0,53,222,10,4E54,209,0,50,1
+UCFSCAN: 0,49,0,49,222,10,4E54,E3D3,0,50,1
+UCFSCAN: 0,20,0,22,222,01,D5BD,43A,0,26,1
+UCFSCAN: 0,107,0,58,222,88,5FC2,0,0,28,1
+UCFSCAN: 0,47,0,51,222,10,4E54,0,0,27,1
+UCFSCAN: 0,15,0,19,222,01,D5BD,43B,0,25,1
+UCFSCAN: 0,104,0,60,222,88,5FC2,FCED,0,22,1
+UCFSCAN: 0,5,0,16,222,01,D5BD,548D,0,23,1
OK
Perform a scan on any GSM band.
AT+UCFSCAN=7
+UCFSCAN: 7
Perform a scan on any LTE band. No result is found.
AT+UCFSCAN=9
Perform a scan on any NB-IoT band.
<input a character>
OK
The scan is aborted.
AT+URAT=8
OK
Allows the module to register only on NB-IoT network at next reboot.
AT+CFUN=15
OK
Reboot the module.
AT+URAT?
+URAT: 8
OK
The module is configured in NB-IoT only.
AT+UCFSCAN=0
+CME ERROR: operation not allowed
A scan on a disabled access technology (GSM) is triggered, therefore an error result code is returned.

MAC QoS inactivity timer +UMACQOSTMR

+UMACQOSTMR
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
No
No / OP
No

Description

Sets the MAC QoS inactivity timer for LTE RAT. This timer is a cellular platform proprietary guard timer that is restarted for any received or transmitted packet. If the timer expires, the RRC connection is locally released and re-established to perform a Tracking Area Update indicating no pending data, after which the network will immediately release the RRC connection.
The command setting is not stored in the NVM.
This timer shall be disabled when the module is connected to a network simulator that keeps the RRC connection active on purpose, e.g. during conformance and regulatory testing.

Syntax

TypeSyntaxResponseExample
Set
AT+UMACQOSTMR=<lte_tmr>
OK
AT+UMACQOSTMR=2
OK
Read
AT+UMACQOSTMR?
+UMACQOSTMR: <mode>,<lte_tmr>
OK
+UMACQOSTMR: 1,2
OK
Test
AT+UMACQOSTMR=?
+UMACQOSTMR: (list of supported <lte_tmr>s values)
OK
+UMACQOSTMR: "+UMACQOSTMR": (0-50)
OK

Defined values

ParameterTypeDescription
<mode>
Number
Indicates if the inactivity timer is enabled (0) or disabled (1).
<lte_tmr>
Number
Represents the inactivity timer for LTE. The range goes from 0 to 50 s, and 0 (factory-programmed value) indicates that the timer is disabled.

Connection Release +UCONNREL

+UCONNREL
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No

Description

Causes the UE to immediately release the RRC connection locally and then re-establish it, allowing the network to subsequently release it cleanly by sending an RRC Connection Release message to the module.

Syntax

TypeSyntaxResponseExample
Set
AT+UCONNREL
OK
AT+UCONNREL
OK

Preferred PLMN list selection +CPLS

+CPLS
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No
-

Description

Selects one PLMN selector with Access Technology list in the SIM card or active application in the UICC (GSM or USIM), that is used by +CPOL command.
The set command selects a list in the SIM/USIM. The read command returns the selected PLMN selector list from the SIM/USIM.
The test command returns the whole index range supported lists by the SIM/USIM.

Syntax

TypeSyntaxResponseExample
Set
AT+CPLS=<list>
OK
AT+CPLS=1
OK
Read
AT+CPLS?
+CPLS: <list>
OK
+CPLS: 1
OK
Test
AT+CPLS=?
+CPLS: (list of supported <list>s)
OK
+CPLS: (0-2)
OK

Defined values

ParameterTypeDescription
<list>
Number
  • 0 (default and factory-programmed value): user controlled PLMN selector with Access Technology EFPLMNwAcT, if not found in the SIM/UICC then PLMN preferred list EFPLMNsel (this file is only available in SIM card or GSM application selected in UICC); these files can be read and updated (see the 3GPP TS 31.102 [21]).
  • 1: operator controlled PLMN selector with Access Technology EFOPLMNwAcT; this file can be read only (see the 3GPP TS 31.102 [21]).
  • 2: HPLMN selector with Access Technology EFHPLMNwAcT; this file can be read only (see the 3GPP TS 31.102 [21]).

Notes

  • The set command can be issued also omitting the <list> parameter.

Network registration status +CREG

+CREG
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
Yes
No
-

Description

Configures the network registration URC related to CS (circuit-switched) domain. Depending on the <n> parameter value, a URC can be issued:
  • +CREG: <stat> if <n>=1 and there is a change in the MT’s circuit-switched mode network registration status in GERAN/UTRAN/E-UTRAN.
  • +CREG: <stat>[,[<lac>],[<ci>][,[<AcTStatus>]]] if <n>=2 and there is a change of the registration status (<stat>) or network cell in GERAN/UTRAN/E-UTRAN.
  • +CREG: <stat>[,[<lac>],[<ci>][,[<AcTStatus>][,<cause_type>,<reject_cause>]]] if <n>=3 and the MT registration status (<stat>) or the cell changes in GERAN/UTRAN/E-UTRAN. The <cause_type> and the <reject_cause> parameters are returned only if the MT is not registered, but it is currently searching a new operator to register to (<stat>=2) or if the registration is denied (<stat>=3).
The parameters <lac>, <ci>, <AcTStatus>, <cause_type> and <reject_cause> are provided only if available.
The read command provides the same information issued by the URC together with the current value of the <n> mode configuration parameter. It returns at least the mode configuration (<n>) and the network registration status (<stat>). The location information elements <lac>, <ci> and <AcTStatus>, if available, are returned only when <n>=2 or <n>=3 and the MT is registered with the network. The <cause_type> and <reject_cause> parameters, if available, are returned only if <n>=3 and the MT is not registered, but it is currently searching a new operator to register to (<stat>=2) or if the registration is denied (<stat>=3).
When <n>=2, in UMTS RAT, unsolicited location information can be received if the network sends the UTRAN INFORMATION MOBILITY message during dedicated connections; in the latter cases the reported <ci> might be not correct because the UE in DCH state cannot read broadcast system information before the change of serving cell. In contrast, in GSM RAT no unsolicited location information is received during a CS connection.
The DTE application should set a reasonable timer (10 s) when receiving the +CREG: 3 URC, since this might be due to the fact that the LTE registration was rejected (SIM not enabled for LTE RAT, wrong APN during the initial default bearer setup in the EPS attach procedure and other temporary reject causes).
If the MT also supports GPRS services and/or EPS services in E-UTRAN, the +CGREG / +CEREG set and read command result codes, where supported, apply to the registration status and location information for those services.

Syntax

TypeSyntaxResponseExample
Set
AT+CREG=[<n>]
OK
AT+CREG=1
OK
Read
AT+CREG?
+CREG: <n>,<stat>[,[<lac>],[<ci>][,[<AcTStatus>][,<cause_type>,<reject_cause>]]]
OK
+CREG: 0,0
OK
Test
AT+CREG=?
+CREG: (list of the supported <n>s)
OK
+CREG: (0-2)
OK
URC
+CREG: <stat>[,[<lac>],[<ci>][,[<AcTStatus>][,<cause_type>,<reject_cause>]]]
+CREG: 1,"4E54","44A5"

Defined values

ParameterTypeDescription
<n>
Number
Network registration URC configuration. Allowed values:
  • 0 (default value and factory-programmed value): network registration URC disabled
  • 1: network registration URC enabled
  • 2: network registration and location information URC enabled
  • 3: network registration, location information and reject cause URC enabled
Allowed values:
  • 0, 1, 2, 3
<stat>
Number
Network registration status. Allowed values:
  • 0: not registered, the MT is not currently searching a new operator to register to
  • 1: registered, home network
  • 2: not registered, but the MT is currently searching a new operator to register to
  • 3: registration denied
  • 4: unknown (e.g. out of GERAN/UTRAN/E-UTRAN coverage)
  • 5: registered, roaming
  • 6: registered for "SMS only", home network (applicable only when <AcTStatus> indicates E-UTRAN)
  • 7: registered for "SMS only", roaming (applicable only when <AcTStatus> indicates E-UTRAN)
  • 8: attached for emergency bearer services only (see 3GPP TS 24.008 [12] and 3GPP TS 24.301 [22] that specify the condition when the MS is considered as attached for emergency bearer services)
  • 9: registered for "CSFB not preferred", home network (applicable only when <AcTStatus> indicates E-UTRAN)
  • 10: registered for "CSFB not preferred", roaming (applicable only when <AcTStatus> indicates E-UTRAN)
Allowed values:
  • 0, 1, 2, 3, 4, 5, 6, 7
<lac>
String
Two bytes location area code or tracking area code (if <AcTStatus>=7) in hexadecimal format (e.g. "00C3"). The value FFFF means that the current <lac> value is invalid.
<ci>
String
From 2 to 4 bytes cell ID in hexadecimal format (e.g. "A13F" or "129080B"). The value FFFFFFFF means that the current <ci> value is invalid.
<AcTStatus>
Number
Indicates the radio access technology:
  • 0: GSM
  • 1: GSM COMPACT
  • 2: UTRAN
  • 3: GSM/GPRS with EDGE availability
  • 4: UTRAN with HSDPA availability
  • 5: UTRAN with HSUPA availability
  • 6: UTRAN with HSDPA and HSUPA availability
  • 7: E-UTRAN
  • 8: EC-GSM-IoT (A/Gb mode)
  • 9: E-UTRAN (NB-S1 mode)
  • 14: Satellite E-UTRAN (NB-S1 mode)
  • 255: the current <AcTStatus> value is invalid
Allowed values:
  • 7
<cause_type>
Number
<reject_cause> type. Allowed values:
  • 0: indicates that <reject_cause> contains an EMM cause value, see 3GPP TS 24.301 [22] Annex A
<reject_cause>
Number
Cause of the failed registration. The value is of type as defined by <cause_type>

Notes

The following is an overview of the values assumed by the <stat> parameter:
  • 0: a technical problem could have occurred, the user is requested to intervene. It is still possible to make emergency calls (if supported) if network coverage is available. Possible causes:
    • PIN not entered
    • Invalid HPLMN found on the SIM (SIM read error)
    • SIM card not present
    The registration is not started
  • 1: the MT is registered for /non EPS services on the HPLMN (or on one of the equivalent HPLMN’s, whose list is provided by the SIM)
  • 2: the module is searching a network to register on. Possible causes:
    • No network available
    • Available networks have insufficient Rx level
    • HPLMN or allowed PLMN are available but the registration is rejected, e.g. roaming is not allowed in this Location Area
    It is still possible to make emergency calls (if supported) if network coverage is available
  • 3: the registration failed for CS/non-EPS services after a Location Update Reject or an LTE Attach Request rejected, or accepted for EPS services only; possible causes are:
    • Illegal MS
    • Illegal ME
    • IMSI unknown at HLR
    • PLMN not allowed
    • Location area not allowed
    • Roaming not allowed in this location area
    • Network failure
    • Network congestion
    • CS domain not available (LTE specific)
    It is still possible to make emergency calls (if supported) if network coverage is available.
    If the registration type is manual, then no further attempt is made to search for a new PLMN or register with it. If the registration type is automatic, the MS may look for an allowed PLMN if the rejection cause was roaming restriction. In case of illegal MS/ME, there could be possible problems with either the SIM card or with the ME’s identity (IMEI): user intervention may be required.
  • 4: this value, usually transitory, is returned if the registration state does not belong to any of the following:
    • Normal
    • Limited
    • No service
    • Service detached
    • Service disabled
    It may be issued after the failure of a registration procedure, before starting a PLMN search, when <stat>=2.
  • 5: the MT is registered for CS/non EPS services on a VPLMN, in national or international roaming
  • 6: in LTE, the MT is registered only for the SMS circuit-switched service on the HPLMN (or on one of the equivalent HPLMN’s)
  • 7: in LTE, the MT is registered only for the SMS circuit-switched service on a VPLMN, in national or international roaming
  • 8: the MT is attached for emergency bearer services only.
  • 9: in LTE, the MT is registered only for the SMS circuit-switched service on the HPLMN (or on one of the equivalent HPLMN’s). CS fallback is not supported for voice services, therefore if the device is configured as "voice centric" (see +CEMODE) and does not support VoLTE, it will disable LTE and reselect 3G or 2G RAT if supported.
  • 10: in LTE, the MT is registered only for the SMS circuit-switched service on a VPLMN, in national or international roaming. CS fallback is not supported for voice services, therefore if the device is configured as "voice centric" (see +CEMODE) and does not support VoLTE, it will disable LTE and reselect 3G or 2G RAT if supported.
  • The PIN insertion is not mandatory before the command execution.
  • If LTE registration is successful, network registration status "registered" is indicated regardless of the availability of non EPS services (SMS services).

Preferred operator list +CPOL

+CPOL
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
Yes
No
No

Description

Edits the user preferred list of networks in the active application on the UICC (GSM or USIM) or preferred list of networks in the SIM card.
The set command can write an entry in the selected list or can delete it if the operator parameter is not provided.
If <oper> is given but <index> is left out, the <oper> is put in the next free location. The <GSM_AcT>, <GSM_Compact_AcT>, <UTRAN_AcT> and <E-UTRAN_AcT> parameters are required when writing user controlled PLMN selector with Access Technology (EFPLMNwAcT).
The read command returns all used entries from the SIM list of preferred PLMNs and the Access Technologies for each PLMN in the list where provided.
If a new PLMN is added in a different format than the one previously set, the <format> parameter always switches to the last used.

Syntax

TypeSyntaxResponseExample
Set
AT+CPOL=[<index>][,<format>[,<oper>[,<GSM_AcT>,<GSM_Compact_AcT>,<UTRAN_AcT>[,<E-UTRAN_AcT>]]]]
OK
AT+CPOL=2,0,"I WIND",1,0,1
OK
Read
AT+CPOL?
+CPOL: <index1>,<format>,<oper1>[,<GSM_AcT1>,<GSM_Compact_AcT1>,<UTRAN_AcT1>[,<E-UTRAN_AcT>]]
[+CPOL: <index2>,<format>,<oper2>[,<GSM_AcT2>,<GSM_Compact_AcT2>,<UTRAN_AcT2>[,<E-UTRAN_AcT>]]…​]
OK
+CPOL: 1,0,"F SFR",1,0,1
+CPOL: 2,0,"TIM I",1,0,1
OK
Test
AT+CPOL=?
+CPOL: (list of supported<index>s),(list of supported <format>s)
OK
+CPOL: (1-30),(0-2)
OK

Defined values

ParameterTypeDescription
<index> / <indexn>
Number
Represents the order number of operator in the SIM preferred operator list. The parameter range depends on the number of entries in SIM card (i.e. its size), but can be further limited by the capabilities of the module.
<format>
Number
See also +COPS command description:
  • 0: long format alphanumeric <oper>
  • 1: short format alphanumeric <oper>
  • 2 (default value): numeric <oper>
Allowed values:
  • 2 (default value)
<oper> / <opern>
String
See also +COPS command description
Format indicated by <format>
<GSM_AcT>
Number
GSM access technology. Allowed values:
  • 0: access technology not selected
  • 1: access technology selected
<GSM_Compact_AcT>
Number
GSM compact access technology. Allowed values:
  • 0: access technology not selected
  • 1: access technology selected
<UTRAN_AcT>
Number
UTRA access technology. Allowed values:
  • 0: access technology not selected
  • 1: access technology selected
<E-UTRAN_AcT>
Number
E-UTRAN access technology. Allowed values:
  • 0: access technology not selected
  • 1: access technology selected

Integrity check on test networks configuration +UDCONF=81

+UDCONF=81
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
No
No
-

Description

Configures the integrity check on 3G/4G test networks.
Integrity check on 3G/4G test networks shall be disabled only when the authentication and integrity are disabled on the 3G/4G test network on which the module will be registered.
LEXI-R10801D-00B
  • The command settings are restored to the factory-programmed values after any MNO profile change (see +UMNOPROF).

Syntax

TypeSyntaxResponseExample
Set
AT+UDCONF=81,<integrity_check_enabled>
OK
AT+UDCONF=81,0
OK
Read
AT+UDCONF=81
+UDCONF: 81,<integrity_check_enabled>
OK
AT+UDCONF=81
+UDCONF: 81,1
OK

Defined values

ParameterTypeDescription
<integrity_check_enabled>
Number
Integrity check on 3G/4G test networks configuration. Allowed values:
  • 0: integrity check on test networks disabled (MCC/MNC not available in +COPN set command’s response)
  • 1 (factory-programmed value): integrity check on test networks enabled (MCC/MNC not available in +COPN set command’s response)

Channel and network environment description +UCGED

+UCGED
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
No
No
No
-

Description

Enables the protocol stack and network environment information collection.
The information text response of the read command reports only the current RAT (if any) parameters, determined by the <rat> parameter value.
Table 6 lists the supported <mode> parameter values:
Table 6. <mode> parameter applicability
<mode>0234568
LEXI-R10 / SARA-R10
*
*
*

Syntax

TypeSyntaxResponseExample
Set
AT+UCGED=<mode>[,<urc_reporting>]
OK
AT+UCGED=2
OK
Read
AT+UCGED?
<mode>=0:
+UCGED: 0
OK
+UCGED: 0
OK
<mode>=2, <rat>=4:
+UCGED: 2
4,<svc>,<MCC>,<MNC>
<EARFCN>,<Lband>,<ul_BW>,<dl_BW>,<TAC>,<LcellId>,<P-CID>,<mTmsi>,<mmeGrId>,<mmeCode>,
<RSRP>,<RSRQ>,<Lsinr>,<LTE_rrc>,<RI>,<CQI>,<avg_rsrp>,<totalPuschPwr>,<avgPucchPwr>,<drx>,
<l2w>,<volte_mode>[,<ul_BLER>,<dl_BLER>]
[N1: <MCC>,<MNC>,<EARFCN>,<P-CID>,<RSRP>,<RSRQ>
[N2: <MCC>,<MNC>,<EARFCN>,<P-CID>,<RSRP>,<RSRQ>
[…​]]]
OK
+UCGED: 2
4,0,001,01
2525,5,25,50,2b67,69f6bc7,111,00000000,ffff,ff,67,19,4,1,255,255,255,255,255,0,255,0,0.21,0.21
N1: 001,01,2525,52,25,13
OK
<mode>=8:
+UCGED: 8,<urc_reporting>
[[<timer_name>,<timer_value>]
[<timer_name>,<timer_value>]
[…​]]
[PLMN back-off:
<timer_value>]
OK
+UCGED: 8,0
T3346,3600
PLMN back-off:
720
OK
Test
AT+UCGED=?
+UCGED: (list of supported <mode>s),(list of supported <urc_reporting>s)
OK
+UCGED: (0,2,8),(0,1)
OK
URC
<mode>=8:
+UCGED: <timer_name>,<timer_state>[,<timer_value>][,<MCC>,<MNC>][,<apn>]
+UCGED: T3346,0,3600,310,410

Defined values

ParameterTypeDescription
<mode>
Number
Allowed values:
  • 0: reporting disabled
  • 2: short form reporting enabled
  • 3: retrieve the short form text information report
  • 4: mobility management (MM) transition state reporting enabled
  • 5: RSRP and RSRQ reporting enabled
  • 6: short form reporting with mobility management (MM) transition state enabled
  • 8: active NAS backoff timers information reporting enabled
See Table 6 for the list of allowed values by series modules.
<rat>
Number
Current Radio Access Technology:
  • 2: 2G
  • 3: 3G
  • 4: 4G
  • 5: unknown. The parameter is set to a 5 until a network information update is not successfully performed through the AT+UCGED=2 command or when the MT is set to minimum functionality (+CFUN: 0, +CFUN: 4, +CFUN: 19).
  • 6: LTE Cat M1
  • 7: NB-IoT
<svc>
Number
Current radio service state:
  • 0: not known or not detectable
  • 1: radio off
  • 2: searching
  • 3: no service
  • 4: registered
The radio service state is updated at each change from a valid network service state (2G, 3G or 4G) to another valid network service state (2G, 3G or 4G). To retrieve the network registration status information refer to +CREG, +CGREG and +CEREG AT commands.
The parameter is not supported, is always reported as 0: "not known or not detectable".
<MCC>
Number
See <MCC>.
<MNC>
Number
See <MNC>.
<EARFCN>
Number
See <EARFCN>.
<Lband>
Number
See <Lband>.
<ul_BW>
Number
Number of Uplink Resource Blocks (see 3GPP TS 36.101 table 5.6-1 [16]), 255 if not known or not detectable.
<dl_BW>
Number
Number of Downlink Resource Blocks (see 3GPP TS 36.101 table 5.6-1 [16]), 255 if not known or not detectable.
<TAC>
Number
See <TAC>.
<LcellId>
Number
See <LcellId>.
<mTmsi>
Number
4 bytes MME Temporary Mobile Subscriber Identity in hexadecimal format; 00000000 if not known or not detectable.
The parameter is not supported, is always reported as 00000000: "not known or not detectable".
<mmeGrId>
Number
2 bytes MME Group Identifier in hexadecimal format; FFFF if not known or not detectable.
The parameter is not supported, is always reported as FFFF: "not known or not detectable".
<RSRP>
Number
See <RSRP>.
<RSRQ>
Number
See <RSRQ>.
<mmeCode>
Number
Current EMM (EPS Mobility Management) state and sub-state:
  • 0x00: NULL
  • 0x01: REGISTERED INITIATED
  • 0x02: DEREGISTERED INITIATED
  • 0x03: TRACKING AREA UPDATE INITIATED
  • 0x04: SERVICE REQUEST INITIATED
  • 0x05: DEREGISTERED NORMAL SERVICE
  • 0x06: DEREGISTERED LIMITED SERVICE
  • 0x07: DEREGISTERED ATTEMPTING TO ATTACH
  • 0x08: DEREGISTERED PLMN SEARCH
  • 0x09: DEREGISTERED NO IMSI
  • 0x0A: DEREGISTERED ATTACH NEEDED
  • 0x0B: DEREGISTERED LIMITED SERVICE
  • 0x0C: DEREGISTERED ECALL INACTIVE
  • 0x0D: REGISTERED NORMAL SERVICE
  • 0x0E: REGISTERED ATTEMPTING TO UPDATE
  • 0x0F: REGISTERED LIMITED SERVICE
  • 0x10: REGISTERED PLMN SEARCH
  • 0x11: REGISTERED UPDATE NEEDED
  • 0x12: REGISTERED NO CELL AVAILABLE
  • 0x13: REGISTERED ATTEMPTING TO UPDATE MM
  • 0x14: REGISTERED IMSI DETACH INITIATED
  • 0xFF: not known or detectable
<Lsinr>
Number
E-UTRAN Signal to Interference and Noise ratio in dB.
  • The range goes from -20 to 40; 255 if not known or not detectable.
<LTE_rrc>
Number
See <LTE_rrc>.
The only allowed values are IDLE(1), CONNECTED(3) and CELL SEARCH(7).
<RI>
Number
Rank Indicator value; 255 if not known or not detectable. It is updated every 480 ms with the value which has been most often reported to the network in the previous 480 ms period. See 3GPP TS 36.213 [23] section 7.2 and 3GPP TS 36.212 [24] section 5.2.2.6 for more details.
The parameter is not supported, is always reported as 255: "not known or not detectable".
<CQI>
Number
Channel Quality Indicator value; 255 if not known or not detectable. It is updated every 480 ms with the value which has been most often reported to the network in the previous 480 ms period. See 3GPP TS 36.213 [23] section 7.2 for more details.
The parameter is not supported, is always reported as 255: "not known or not detectable".
<avg_rsrp>
Number
Average value of last 10th Reference Signal Received Power (RSRP).
The parameter is not supported, is always reported as 255: "not known or not detectable".
<totalPuschPwr>
Number
Mobile output power for PUSCH transmission averaged over 480 ms in dBm.
The parameter is not supported, is always reported as 255: "not known or not detectable".
<avgPuschPwr>
Number
Mobile output power for PUSCH transmission averaged over 480 ms in dBm.
<avgPucchPwr>
Number
Mobile output power for PUCCH transmission averaged over 480 ms in dBm.
The parameter is not supported, is always reported as 255: "not known or not detectable".
<drx>
Number
Discontinuous Reception "drx-Inactivity-Timer" value in ms; 0 if not known or not detectable.
The parameter is not supported, always reported as 0. Use the +UDRX AT command to read its value.
<l2w>
Number
SIB3 LTE to WCDMA reselection criteria: (threshServingLow)x2 +(q-RxLevMin)x2; 255 if not known or not detectable.
The parameter is not supported, is always reported as 255: "not known or not detectable".
<volte_mode>
Number
Reserved for future use.
The parameter is not supported, is always reported as 255: "not known or not detectable".
<meas_gap>
Number
Measurement gap configuration:
  • 0: disabled
  • 40: 40 ms measurement gap repetition period corresponding to the measurement gap pattern ID 0 (see table 8.1.2.1-1 of 3GPP TS 36.133 [17])
  • 80: 80 ms measurement gap repetition period corresponding to the measurement gap pattern ID 1 (see table 8.1.2.1-1 of 3GPP TS 36.133 [17])
<as_rai_support>
Number
Indicates if the network has activated the release assistance indication (RAI) feature as specified in 3GPP TS 36.321 [25].
  • 0: AS RAI not supported
  • 1: AS RAI supported
The parameter is not supported.
<tti_bundling>
Number
TTi (Transmission Time interval) bundling status:
  • 0: off
  • 1: on
<NBMsinr>
Number
Logarithmic value of SINR values expressed in 1/5th of a dB. The range goes from 0 to 250 which translates to a range from -20 dB to 30 dB.
The parameter is not supported.
<esm_cause>
Number
ESM cause value as defined in 3GPP TS 24.301 [22].
The parameter is not supported.
<emm_state>
Number
EMM state value as defined in 3GPP TS 24.301 [22]. Allowed values:
  • 0: EMM-NULL
  • 1: EMM-DEREGISTERED
  • 2: EMM-REGISTERED-INITIATED
  • 3: EMM-REGISTERED
  • 4: EMM-TRACKING-AREA-UPDATING-INITIATED
  • 5: EMM-SERVICE-REQUEST-INITIATED
  • 6: EMM-DEREGISTERED-INITIATED
  • 7: undefined (or invalid)
The parameter is not supported.
<tx_pwr>
Number
TX power value in 1/10 dBm if device is in traffic, 255 otherwise.
The parameter is not supported.
<drx_cycle_len>
Number
Idle DRX cycle length in 10 ms radio-frame units
The parameter is not supported.
<tmsi>
String
TMSI in hexadecimal format, with most significant byte first.
The parameter is not supported.
<P-CID>
Number
E-UTRAN cell Physical Cell ID; the range is 0-503, 65535 if not known or not detectable.
<ul_BLER>
Number
Uplink Block Error Ratio (BLER); the range is 0-100.
<dl_BLER>
Number
Downlink Block Error Ratio (BLER); the range is 0-100.
<RSRP_value>
Number
<RSRQ_value>
Number
<MMtransition>
Number
Mobility management transition state. Allowed values:
  • 0: no change
  • 1: handover to UMTS
  • 2: handover to GSM
  • 3: handover to LTE
  • 4: reselection to UMTS
  • 5: reselection to GSM
  • 6: reselection to LTE
  • 7: cell change order to UMTS
  • 8: cell change order to GSM
  • 9: cell change order to LTE
  • 10: RAT change
  • 255: unknown
<UL_IPcounter>
Number
Counter of the uplink IP packets; it reports the aggregated value from all active PDP contexts. The counter is reset only with module reset. The range goes from 0 to 4294967295.
<DL_IPcounter>
Number
Counter of the downlink IP packets; it reports the aggregated value from all active PDP contexts. The counter is reset only with module reset. The range goes from 0 to 4294967295.
<timer_name>
String
Active NAS backoff timer.
  • Allowed values:
    • T3346
    • T3448
    • T3412
    • T3324
    • T3402
    • T3245
    • T3396
    • PLMN back-off
    • VZW throttling
<timer_value>
Number
NAS backoff timer’s remaining value in milliseconds. In case of PLMN back-off timers, the value 0 indicates that the PLMN is permanently back-off forbidden.
The timer value is reported in seconds.
<timer_state>
Number
Timer state:
  • 0: timer start
  • 1: timer stop
  • 2: timer expiry
<urc_reporting>
Number
Enable/disable URC reporting for timer start/stop/expiry. The default value is 0.

Notes

  • The command settings are not restored at exit from Sleep-2 and Hibernate deep-sleep modes (see +UPSV AT command).
  • The <urc_reporting> parameter can be configured only if <mode>=8.
  • The <apn> parameter is only supported if <timer_name>="T3396" and <timer_state>=0.
  • The <MCC> and <MNC> parameters are not supported if <timer_name>="VZW throttling".
LEXI-R10801D-00B
  • The <MCC> and <MNC> parameters are only supported if <timer_name>="PLMN back-off".
  • <timer_name>="VZW throttling" is not supported.
  • <timer_name>="T3396" is only supported in the URC.
  • The <apn> parameter is not supported.

Frequency/Cell Lock +UFREQLOCK

+UFREQLOCK
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
Full
No
No
-

Description

Allows to manage the list of the preferred EARFCNs and to lock the module on a specific cell or frequency.
The preferred EARFCN setting is effective only when cell power levels are similar; otherwise, it is ignored. For instance, if a higher-ranked cell on a different EARFCN is available, the module will prioritize the selection of that cell. The preferred EARFCN list is automatically updated by the module based on the LTE cells it has detected so far. The update of the EARFCN list is performed in FIFO mode, and at most 8 EARFCNs are stored to NVM at module detach or switch-off.
In cell lock mode, configuring the EARFCN and P-CID pair will result in the device locking onto the designated frequency and cell, regardless of power levels. During this state, handover and reselection features remain deactivated until the lock setting is disabled. If the specified EARFCN and P-CID are not available, the module enters an Out of Coverage state (OOC).
The setting can be changed only in deregistered state.

Syntax

TypeSyntaxResponseExample
Generic syntax
Set
AT+UFREQLOCK=<op_code>[,<param1>[,<param2>[,…​]]]
OK
AT+UFREQLOCK=0
OK
Read
AT+UFREQLOCK?
[+UFREQLOCK: 1,<earfcn1>[,<earfcn2>[,…​]]]
[+UFREQLOCK: 2,<earfcn>[,<phyCellId>]]
OK
AT+UFREQLOCK?
+UFREQLOCK: 1,1650,3400
+UFREQLOCK: 2,3400
OK
Cancel cell lock
Set
AT+UFREQLOCK=0
OK
AT+UFREQLOCK=0
OK
Set preferred EARFCN list
Set
AT+UFREQLOCK=1,<earfcn_1>[,<earfcn_2>…​]
OK
AT+UFREQLOCK=1,3738,3734
OK
Lock the module on a specified frequency or cell
Set
AT+UFREQLOCK=2,<earfcn>[,<phyCellId>]
OK
AT+UFREQLOCK=2,3738,143
OK
Clear preferred EARFCN list
Set
AT+UFREQLOCK=3
OK
AT+UFREQLOCK=3
OK
Test
AT+UFREQLOCK=?
+UFREQLOCK: (list of supported <op_code>s)
OK
+UFREQLOCK: (0,1,2,3)
OK

Defined values

ParameterTypeDescription
<op_code>
Number
Depending on <op_code> value <param1> and <param2> assume different meaning. Allowed values:
  • 0: cancel cell lock
  • 1: set preferred EARFCN list
  • 2: configure frequency or cell lock
  • 3: clear preferred EARFCN list
<EARFCN>
Number
See <EARFCN>.
<phyCellId>
Number
LEXI-R10801D-00B

Notes

  • The command settings are restored to the factory-programmed values after any MNO profile change (see +UMNOPROF).

Forbidden PLMN list delete +UFPLMNDEL

+UFPLMNDEL
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No

Description

Removes the FPLMN list from NVM or SIM or both depending on <mode> parameter. The FPLMN list in NVM has 16 entries, the FPLMN list in the SIM card has 4 entries.

Syntax

TypeSyntaxResponseExample
Set
AT+UFPLMNDEL=<mode>
OK
AT+UFPLMNDEL=0
OK
Test
AT+UFPLMNDEL=?
+UFPLMNDEL: (list of supported <mode>s)
OK
+UFPLMNDEL: (0,1,2)
OK

Defined values

ParameterTypeDescription
<mode>
Number
Allowed values:
  • 0: Remove FPLMN list from NVM and SIM card
  • 1: Remove FPLMN list from NVM
  • 2: Remove FPLMN list from SIM card

Cell Bar +UCELLBAR

+UCELLBAR
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
-
No
-

Description

Configure the module to bar a specific cell for the defined duration by adding the cell to the cell barred list.
Once this duration elapses, the system automatically removes the cell from the barred list, restoring normal access.

Syntax

TypeSyntaxResponseExample
Set
AT+UCELLBAR=<earfcn>,<phyCellId>,<cellBarTime>
OK
AT+UCELLBAR=5095,2,20
OK
Read
AT+UCELLBAR?
[+UCELLBAR: <earfcn>,<phyCellId>,<cellBarTime>,<remainBarTime>]
OK
+UCELLBAR: 5095,2,20,14
OK
Test
AT+UCELLBAR=?
+UCELLBAR: (list of the supported <earfcn>s),(list of the supported <phyCellId>s), (list of the supported <cellBarTime>s)
OK
+UCELLBAR: (1-262143),(0-503),(0-65535)
OK

Defined values

ParameterTypeDescription
<earfcn>
Number
See <EARFCN>, range 1 - 262143.
<phyCellId>
Number
See <PhysCellID>, range 0-503.
<cellBarTime>
Number
Time to bar the cell, range 0-65535 in seconds
<remainBarTime>
Number
Time remaining until the bar is lifted, range 0-65535 in seconds

Signalling connection status +CSCON

+CSCON
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
-

Description

Returns details of the current terminal’s radio connection status (i.e. to the base-station). The set command configures the +CSCON URC. When enabled, the URC is sent from the MT at each change of the MT connection mode (<n>=1, <n>=2 or <n>=3), state (<n>=2 or <n>=3) or access information (<n>=3).
The information text response of the read command returns the URC configuration (<n>) and the signaling connection status (<mode>). The state information (<state> parameter) is returned only when module is in connected state and <n>=2 or <n>=3. The radio access technology (<access> parameter) is returned only when module is in connected state and <n>=3.
The state is only updated when radio events, such as send and receive, take place. This means that the current state may be out of date. The terminal may think it is "Connected" yet cannot use the radio link due to a change in the radio channel quality.
AT&W saves the AT command setting to the personal profile.

Syntax

TypeSyntaxResponseExample
Set
AT+CSCON=<n>
OK
AT+CSCON=1
OK
Read
AT+CSCON?
+CSCON: <n>[,<mode>[,<state>[,<access>]]]
OK
+CSCON: 1,1
OK
Test
AT+CSCON=?
+CSCON: (list of supported <n>s)
OK
+CSCON: (0,1)
OK
URC
+CSCON: <mode>[,<state>[,<access>]]
+CSCON: 0

Defined values

ParameterTypeDescription
<n>
Number
URC configuration:
  • 0: +CSCON URC disabled
  • 1: URC +CSCON: <mode> enabled
  • 2: URC +CSCON: <mode>[,<state>] enabled
  • 3: URC +CSCON: <mode>[,<state>[,<access>]] enabled
Allowed values:
  • 0 (factory-programmed value), 1
<mode>
Number
Indicates the signaling connection status:
  • 0: idle
  • 1: connected
<state>
Number
Allowed values:
  • 0: UTRAN URA_PCH
  • 1: UTRAN Cell_PCH
  • 2: UTRAN Cell_FACH
  • 3: UTRAN Cell_DCH
  • 4: GERAN CS connected
  • 5: GERAN PS connected
  • 6: GERAN CS and PS connected
  • 7: E-UTRAN connected
  • 8: NG-RAN connected state
  • 9: NG-RAN inactive state
Allowed values:
  • the parameter is not supported
<access>
Number
Indicates the radio access technology:
  • 0: GERAN
  • 1: UTRAN TDD
  • 2: UTRAN FDD
  • 3: E-UTRAN TTD
  • 4: E-UTRAN FDD
  • 5: NR
Allowed values:
  • the parameter is not supported

Notes

  • The +CSCON URC is only sent on the AT interface where it has been activated.

Radio Policy Manager (RPM) configuration +URPMCONF

+URPMCONF
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
No
No
-

Description

Configures the Radio Policy Manager (RPM) related parameters.
The parameters are grouped in different sets:
  • PLMN SIM card based check configuration: it sets PLMNs in MCC.MNC format, for which the RPM functionality will be active.
    • at most 30 PLMNs are set
  • Current RPM configuration: the parameters can only be read
  • Default RPM parameter setting stored in the module: the parameters can only be read

Syntax

TypeSyntaxResponseExample
Generic syntax
Set
AT+URPMCONF=<op_code>,…​..
OK
LEXI-R10 / SARA-R10
Set
AT+URPMCONF=6,<PLMN>
OK
AT+URPMCONF=6,22288
OK
Set
AT+URPMCONF=7,<PLMN>
OK
AT+URPMCONF=7,22288
OK
LEXI-R10 / SARA-R10
Read
AT+URPMCONF?
+URPMCONF: 0,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>,<PLMN>
OK
+URPMCONF: 0,"222.88","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00","0.00",
OK
Test
AT+URPMCONF=?
+URPMCONF: (list of the supported <op_code>s)
OK
+URPMCONF: (0)
OK

Defined values

ParameterTypeDescription
<op_code>
Number
Type of operation:
  • 0: PLMN SIM card based check configuration
  • 1: current RPM configuration
  • 6: Set <PLMN> value in <op_code>=0 list.
  • 7: Delete <PLMN> value in <op_code>=0 list.
<PLMN>
String
PLMN in MCC.MNC format. "FFF.FF" indicates empty PLMN; the range goes from 0.0 to 999.999. The factory-programmed value is empty.
"0.00" indicates empty PLMN. The factory-programmed value is not empty.
<RPM_active>
Number
Indicates the action to perform:
  • 0: RPM feature is currently not active
  • 1: RPM feature is currently active
<SIM_RPM_setting>
Number
Indicates whether the inserted SIM card contains RPM parameter setting:
  • 0: the inserted SIM card does not contain the RPM parameter setting
  • 1: the inserted SIM card contains the RPM parameter setting
<N1>,<T1>,<F1>,<F2>,<F3>,<F4>,<LR1>,<LR2>,<LR3>
Number
See the Radio Policy Manager Requirements [26].
<RPM_enabled_flag_m>,<N1_m>,<T1_m>,<F1_m>,<F2_m>,<F3_m>,<F4_m>
Number
Default RPM parameter setting stored in the module. See the Radio Policy Manager Requirements [26].

Notes

  • <op_code>=0, 1, are not supported

Radio Policy Manager (RPM) parameters configuration +URPMPARAM

+URPMPARAM
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
-

Description

Activates or deactivates the Radio Policy Manager (RPM) feature and configures its related parameters.
Generally a UE aggressively retries the registration procedure until it is successful and behaves similarly if the PDP context activation procedure fails. This behavior may cause signaling overload and consequently a prolonged network outage. To avoid these scenarios and provide a more efficient access to the network, the RPM feature controls the number of network accesses per service type over a fixed amount of time. For more details on the RPM feature, see GSMA Connection Efficiency [26].
The set command overwrites the RPM parameters in the NVM. The read command displays all the current RPM parameters, counters and the leak rates.
Module reboot is required to apply the new configuration

Syntax

TypeSyntaxResponseExample
Set
AT+URPMPARAM=<rpmflag>[,<N1>[,<T1>[,<T1_ext>[,<F1>[,<F2>[,<F3>[,<F4>]]]]]]]
OK
AT+URPMPARAM=1,1,11
OK
Read
AT+URPMPARAM?
+URPMPARAM: <rpmflag>,<N1>,<T1>,<T1_ext>,<F1>,<F2>,<F3>,<F4>,<isOmParamsValid>, <CBR1>, <CR1>, <CPDP1>, <CPDP2>, <CPDP3>, <CPDP4>, <LR1>, <LR2>, <LR3>
OK
AT+URPMPARAM?
+URPMPARAM: 0,1,10,30,60,30,60,30,1,10,0,0,0,0,0,0,0,0
OK

Defined values

ParameterTypeDescription
<rpmflag>
Boolean
Indicates whether RPM functionality is to be enabled or disabled at power up:
  • 0: RPM feature is currently not active
  • 1: RPM feature is currently active
<N1>,<T1>,<T1_ext>,<F1>,<F2>,<F3>,<F4>
Number
RPM parameters, see the Radio Policy Manager Requirements topic 8.3.2 [26].
<isOmParamsValid>
Boolean
Indicates if the RPM parameters are present on the SIM card to enable the operation management (OM) functionality:
  • 0: operation management functionality is currently not active
  • 1: operation management functionality is currently active
<CBR1>, <CR1>, <CPDP1>, <CPDP2>, <CPDP3>, <CPDP4>
Number
Operation management counters, see the Radio Policy Manager Requirements topic 8.3.4 [26].
<LR1>, <LR2>, <LR3>
Number
Operation management leak rates, see the Radio Policy Manager Requirements topic 8.3.3 [26].

Radio Policy Manager (RPM) version +URPMVERSION

+URPMVERSION
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
No
-
No
-

Description

Reads the Radio Policy Manager (RPM) version. The read command displays the current RPM version.

Syntax

TypeSyntaxResponseExample
Read
AT+URPMVERSION?
+URPMVERSION: <rpmversion>
OK
AT+URPMVERSION?
+URPMVERSION: 2
OK

Defined values

ParameterTypeDescription
<rpmversion>
Number
Indicates the current RPM version

eDRX setting +CEDRXS

+CEDRXS
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
Yes
NVM / OP
No
-

Description

Configures the UEs extended discontinuous reception (eDRX) parameters. The command controls whether the UE wants to apply the eDRX or not, as well as the requested eDRX cycle and paging time window values for each specified type of radio access technology.
The set command also enables the +CEDRXP URC, issued on any change in the eDRX parameters provided by the network.
The set command with <mode>=3 will disable the use of eDRX and reset all parameters to factory-programmed values. Do not set <Requested_eDRX_cycle> and <Requested_paging_time_window> parameters in this form of command.
The read command returns the requested eDRX cycle and paging time window values. See the +CEDRXP URC and the +CEDRXRDP AT command to see if eDRX is used by the current selected cell and to retrieve the network assigned values, if any.
The set command can be applied also runtime; if the module is registered in 4G RAT and the parameters are changed with respect to the previously required values, a TAU is performed.
If the set command is issued and any of the optional parameters is omitted, the module applies the last set values.

Syntax

TypeSyntaxResponseExample
Set
AT+CEDRXS=<mode>,<AcT_type>[,<Requested_eDRX_cycle>[,<Requested_paging_time_window>]]
OK
AT+CEDRXS=1,4,"0101","0101"
OK
Read
AT+CEDRXS?
+CEDRXS: [<AcT_type>,<Requested_eDRX_cycle>,<Requested_paging_time_window>
[…​]
[+CEDRXS: <AcT_type>,<Requested_eDRX_cycle>,<Requested_paging_time_window>]]
OK
+CEDRXS: 4,"0101","0001"
OK
Test
AT+CEDRXS=?
+CEDRXS: (list of supported <mode>s),(list of supported <AcT_type>s),(list of supported <Requested_eDRX_cycle>s),(list of supported <Requested_paging_time_window>s)
OK
+CEDRXS: (0-3),(3,4,5),("0000"-"1111"),("0000"-"1111")
OK
URC
+CEDRXP: <AcT_type>[,<Requested_eDRX_cycle>[,<Assigned_eDRX_cycle>[,<Assigned_paging_time_window>]]]
+CEDRXP: 4,"1010","1001","1101"

Defined values

ParameterTypeDescription
<mode>
Number
Indication to disable or enable the use of eDRX in the UE. Allowed values:
  • 0 (default and factory-programmed value): use of eDRX disabled
  • 1: use of eDRX enabled
  • 2: enable the use of eDRX and enable the +CEDRXP URC
  • 3: disable the use of eDRX and reset all other parameters for eDRX to factory-programmed values
Allowed values:
  • 0, 1, 2, 3
<AcT_type>
Number
Indicates the type of access technology:
  • 0: use of eDRX disabled
  • 2: GPRS/eGPRS
  • 4: E-UTRAN (WB-S1 mode)
  • 5: E-UTRAN (NB-S1 mode)
  • 6: Satellite E-UTRAN (NB-S1 mode)
Allowed values:
  • 0, 4
<Requested_eDRX_cycle>
String
<Assigned_eDRX_cycle>
String
<Requested_paging_time_window>
String
<Assigned_paging_time_window>
String

Notes

  • The PIN insertion is not mandatory before the command execution.
  • The +CEDRXP URC enabling by AT+CEDRXS=2,<AcT_type> command is not stored in NVM. AT&W saves <mode>=2 setting to the profile.
  • <Requested_eDRX_cycle> and <Requested_paging_time_window> values can only be changed when <mode>=1 or <mode>=2.

eDRX read dynamic parameters +CEDRXRDP

+CEDRXRDP
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No
-

Description

If the eDRX is used by the current selected cell the command provides the requested eDRX cycle value (<Requested_eDRX_cycle>), the assigned eDRX cycle value (<Assigned_eDRX_cycle>) and the assigned paging time window value (<Assigned_paging_time_window>). Otherwise, if the eDRX is not used, the +CEDRXRDP: 0 information text response is returned.

Syntax

TypeSyntaxResponseExample
Action
AT+CEDRXRDP
+CEDRXRDP: <AcT_type>[,<Requested_eDRX_cycle>,<Assigned_eDRX_cycle_value>,<Assigned_paging_time_window>]
OK
+CEDRXRDP: 5,"0010","1110","0101"
OK
Test
AT+CEDRXRDP=?
OK

Defined values

ParameterTypeDescription
<AcT_type>
Number
Indicates the type of radio access technology:
  • 0: use of eDRX disabled
  • 2: GSM (A/Gb mode)
  • 4: E-UTRAN (WB-S1 mode)
  • 5: E-UTRAN (NB-S1 mode)
  • 6: Satellite E-UTRAN (NB-S1 mode)
Allowed values:
  • 0, 4
<Requested_eDRX_cycle>
String
<Assigned_eDRX_cycle>
String
<Assigned_paging_time_window>
String

Set MNO profile +UMNOPROF

+UMNOPROF
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
Yes
No
-

Description

Automatically configures the module to be compliant to the requirements of various Mobile Network Operators.
Follow this procedure to properly set up the configuration:
  • Deregister the module from the network (issue AT+CFUN=0 command)
  • Issue AT+UMNOPROF=<MNO>
  • To apply the new configuration reboot the module
After setting a new MNO profile, the module reconfigures the MNO specific settings, e.g. the PDP context settings (e.g. APN of the initial EPS bearer).
Changing the Mobile Network Operator (MNO) profile with the +UMNOPROF AT command overwrites some AT command settings and applies the default MNO profile values. For the list of AT commands affected by +UMNOPROF AT command, see Mobile Network Operator profiles. Some settings (i.e. the frequency bands) are effectively applied only after SIM initialization, see +UBANDCONF.
Follow this procedure to restore the profile factory-programmed configuration:
  • Set the <MNO> parameter to the currently selected profile and reboot the module ( AT+CFUN=16) to make the change effective
In Verizon profile (<MNO>=3), the LwM2M client is by default enabled. In all other <MNO> profiles, the LwM2M client is by default disabled.
u-blox cellular modules are certified according to all the capabilities and options stated in the Protocol Implementation Conformance Statement document (PICS) of the module. The PICS, according to 3GPP TS 51.010-2 [27], 3GPP TS 34.121-2 [28], 3GPP TS 36.521-2 [29] and 3GPP TS 36.523-2 [30], is a statement of the implemented and supported capabilities and options of a device. If the user changes the command settings during the certification process, the PICS of the application device integrating a u-blox cellular module must be changed accordingly.
The customer is allowed to set only the <MNO> profile of a certified MNO for each product variant. See the corresponding module data sheet for the list of certified MNOs for each product.

Syntax

TypeSyntaxResponseExample
Set
AT+UMNOPROF=<MNO>[,<reset>,<urc_notification_enabled>]
OK
AT+UMNOPROF=1,0,1
OK
Read
AT+UMNOPROF?
+UMNOPROF: <MNO>[,[<MNO_detected>],<reset>,<urc_notification_enabled>]
OK
+UMNOPROF: 3
OK
URC
+UMNOPROF: <MNO>,<MNO_detected>
+UMNOPROF: 1,2

Defined values

ParameterTypeDescription
<MNO>
Number
Mobile Network Operator (MNO) profile:
  • 0: undefined / regulatory. For more details, see Notes.
  • 1: SIM ICCID/IMSI select
  • 2: AT&T
  • 3: Verizon
  • 4: Telstra
  • 5: T-Mobile US
  • 6: China Telecom
  • 8: Sprint
  • 13: Telefonica
  • 19: Vodafone
  • 20: NTT DoCoMo
  • 21: Telus
  • 28: SoftBank
  • 31: Deutsche Telekom
  • 32: US Cellular
  • 33: VIVO
  • 38: LG U+
  • 39: SKT
  • 41: KDDI
  • 43: Rogers
  • 44: Claro Brasil
  • 45: TIM Brasil
  • 46: Orange France
  • 47: Bell
  • 48: KT
  • 90: global
  • 100: standard Europe
  • 101: standard Europe No-ePCO. The factory-programmed configuration of this profile is the same of the standard Europe profile (<MNO>=100), but the ePCO is disabled.
  • 102: standard JP (global)
  • 198: AT&T 2-4-12. The factory-programmed configuration of this profile is the same of the AT&T profile (<MNO>=2), but the LTE band 5 is disabled.
  • 199: Generic voice capable AT&T
  • 201: GCF-PTCRB. This profile is meant only for conformance testing.
  • 206: FirstNet
  • 207: VZW-Private
  • 208: Verizon Global
Allowed values depend on the module series:
  • LEXI-R10401D-00B - 2, 3, 90 (factory programmed value), 206
  • LEXI-R10801D-00B - 90 (factory-programmed value)
<MNO_detected>
Number
If <MNO>=1 (SIM ICCID/IMSI select) and the SIM is inserted, it specifies the <MNO> value that matches the SIM Issuer Identifier Number (IIN) or the <MNO> retrieved by the IMSI and that is actually applied.
<reset>
Number
Configure the automatic reset. Allowed values:
  • 0: the automatic reset is disabled; the user shall reboot the module by itself
  • 1: the automatic reset is enabled
It must be issued only if <MNO>=1.
<urc_notification_enabled>
Number
Configure the URC notification. Allowed values:
  • 0: URC is not issued if the <MNO_detected> value changes
  • 1: URC is issued any time the <MNO_detected> value changes
It must be issued only if <MNO>=1.

Notes

  • The standard Europe profile should be used as the basis for all other MNOs in Europe outside of Vodafone and Deutsche Telekom. However, there may be changes that need to be applied to the module for proper operation with any given European MNO such as attach type, RAT preference, band selection, etc. Please consult with the preferred network provider.
  • The <reset>, <urc_notification_enabled> parameters are not supported.

Band configuration +UBANDCONF

+UBANDCONF
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
Full
No
No
-

Description

Allows to configure the LTE preferred bands within the list of the supported bands: the sequence in which the bands are specified corresponds to their relative priority in the PLMN search procedure.
The band configuration can be changed runtime, also in registered state: in this case the module automatically peforms LTE detach and LTE attach with updated capabilities.
If a not supported band is selected, the module returns an error result code.
u-blox cellular modules are certified according to all the capabilities and options stated in the Protocol Implementation Conformance Statement document (PICS) of the module. The PICS, according to 3GPP TS 51.010-2 [27], 3GPP TS 34.121-2 [28], 3GPP TS 36.521-2 [29] and 3GPP TS 36.523-2 [30], is a statement of the implemented and supported capabilities and options of a device. If the user changes the command settings during the certification process, the PICS of the application device integrating a u-blox cellular module must be changed accordingly.

Syntax

TypeSyntaxResponseExample
Set
AT+UBANDCONF=<band_1>[,<band_2>[,…​]]
OK
AT+UBANDCONF=4,71,13,66,2,5
OK
Read
AT+UBANDCONF?
+UBANDCONF: <band_1>[,<band_2>[,…​]]
OK
+UBANDCONF: 4,71,13,66,2,5
OK
Test
AT+UBANDCONF=?
+UBANDCONF: (list of supported <bands>s)
OK
+UBANDCONF: (2,4,5,12,13,66,71)
OK

Defined values

ParameterTypeDescription
<band_x>
Integer
Band in decimal number. Allowed values are:
  • LEXI-R10401D-00B - 2, 4, 5, 12, 13, 66, 71
  • LEXI-R10801D-00B - 1, 3, 5, 7, 8, 20, 28
The factory-programmed values depend on the current MNO profile, see Mobile Network Operator profiles.

Notes

  • The configuration of the bands after a MNO profile change (see +UMNOPROF) will be actually applied after the reboot when the module is in full functionality and the SIM initialization has been completed (i.e. when +CPIN read command returns "READY").

NAS timers configuration +UNASTCFG

+UNASTCFG
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
-

Description

Configures the time period and number of attempts for the following NAS timers.
  • High Priority PLMN timer (HPPLMN): enables or disables the periodic search for higher priority PLMNs.
  • T3482 timer: allows the MT to control the retransmission of PDN connectivity requests.
  • T3492 timer: allows the MT to control the retransmission of PDN disconnect requests.
The set command overwrites the timer values and its maximum number of attempts by configuring <timer_value> and <try_count> parameters, leaving these parameters empty will reconfigure the timers to their factory-programmed values.
The read command will return empty values, if the user has not previously set the values for <timer_value> and <try_count>.

Syntax

TypeSyntaxResponseExample
Set
AT+UNASTCFG=<timer_id>[,<timer_value>[,<try_count>]]
OK
AT+UNASTCFG=0,360,1
OK
AT+UNASTCFG=0
OK
Read
AT+UNASTCFG?
+UNASTCFG: 0[,<timer_value>,<try_count>]
+UNASTCFG: 1[,<timer_value>,<try_count>]
+UNASTCFG: 2[,<timer_value>,<try_count>]
OK
+UNASTCFG: 0, 360, 1
+UNASTCFG: 1, 5, 3
+UNASTCFG: 2
OK
Test
AT+UNASTCFG=?
+UNASTCFG: (list of supported <timer_id>s),list of supported <timer_value>s),(list of supported <try_count>s
OK
+UNASTCFG: 0,(1-1048575),(0-255)
+UNASTCFG: 1,(1-32),(1-5)
+UNASTCFG: 2,(1-32),(1-5)
OK

Defined values

ParameterTypeDescription
<timer_id>
Number
Allowed values:
  • 0: High priority PLMN search timer
  • 1: ESM PDN connectivity request timer
  • 2: ESM PDN disconnect request timer
<timer_value>
Number
Specifies the periodic repeat interval in seconds used to overwrite the timer value.
  • For <timer_id>=0 the range goes from 1 to 1048575. The default value is 60 minutes if no value is specified in the SIM EFHPPLMN (see the 3GPP TS 23.122 [20] subclause 4.4.3.3).
  • For <timer_id>=1 the range goes from 1 to 32. The default value is 8 seconds (see the 3GPP TS 24.301 [22] subclause 10.3).
  • For <timer_id>=2 the range goes from 1 to 32. The default value is 6 seconds (see the 3GPP TS 24.301 [22] subclause 10.3).
<try_count>
Number
Specifies the maximum repeat times of the timer.
  • For <timer_id>=0 the range goes from 0 to 255. By default configuration no value is specified, either higher priority PLMN search attempts is in the range of 6 minutes to 8 hours in 6 minutes steps or no periodic attempts shall be made (see the 3GPP TS 23.122 [20] subclause 4.4.3.3).
  • For <timer_id>=1 the range goes from 1 to 5. The default value is 5 (see the 3GPP TS 24.301 [22] subclause 6.5.1.5).
  • For <timer_id>=2 the range goes from 1 to 5. The default value is 5 (see the 3GPP TS 24.301 [22] subclause 6.5.2.5)

Notes

  • For <timer_id>= 0, if <timer_value> is present then <try_count> must also be present.
LEXI-R10801D-00B
  • The command settings are restored to the factory-programmed values after any MNO profile change (see +UMNOPROF).

Protocol stack configuration +UPSCONFIG

+UPSCONFIG
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
-

Description

Allows reading and modifying parameter settings of the protocol stack and UE’s extended configuration.
The AT command parameters are automatically stored in NVM, and take in effect after the module reboot.

Syntax

.\topics/NETWORK
TypeSyntaxResponseExample
Set
AT+UPSCONFIG=<param>,<value>
OK
AT+UPSCONFIG="Rohc",0
OK
Read
AT+UPSCONFIG?
+UPSCONFIG: <param1>,<value1>
+UPSCONFIG: <param2>,<value2>
[…​]
OK
+UPSCONFIG: "PsSoftReset",1
+UPSCONFIG: "Rohc",1
+UPSCONFIG: "Ipv6RsForTestSim",0
+UPSCONFIG: "Ipv6RsDelay",5
+UPSCONFIG: "PlmnSearchPowerLevel",1
+UPSCONFIG: "Epco",0
+UPSCONFIG: "T3324MaxValueS",16777215
+UPSCONFIG: "BarValueS",20
+UPSCONFIG: "DataInactTimer",60
+UPSCONFIG: "RelaxMonitorDeltaP",0
+UPSCONFIG: "UeCategory",2
+UPSCONFIG: "RelVersion",14
+UPSCONFIG: "EnableEAB",0
+UPSCONFIG: "AttachEpsCid",1
+UPSCONFIG: "TcpTptOpt",1
+UPSCONFIG: "AttachWithIMSICtrl",1
+UPSCONFIG: "PowerAttachWoEia",1
+UPSCONFIG: "EnableDataCounter",0
+UPSCONFIG: "UpdateLociCtrl",0
+UPSCONFIG: "RoamService",2
+UPSCONFIG: "SavePlmnSelMode",1
+UPSCONFIG: "EmergencyCamp",0
+UPSCONFIG: "EnableAcl",0
+UPSCONFIG: "PdpReact",0
+UPSCONFIG: "EnableABCheck",1
+UPSCONFIG: "WeakCellOpt",1
+UPSCONFIG: "QRxLevMin",0
+UPSCONFIG: "ReselToWeakNcellOpt",0
+UPSCONFIG: "UpdateFreqCtrl",0
+UPSCONFIG: "QualityFirst",0
+UPSCONFIG: "StaticConfig",0
+UPSCONFIG: "DisableCDRX",0
+UPSCONFIG: "IgnoreEmmCause",0
+UPSCONFIG: "UserDrxCycle",0
+UPSCONFIG: "setClatState",0
+UPSCONFIG: "EnableLoggedMDT",0
+UPSCONFIG: "UeSpecificDrxCycle",0
OK
Test
AT+UPSCONFIG=?
+UPSCONFIG: (list of supported <param>s)
OK
("PsSoftReset","Rohc","Ipv6RsForTestSim","Ipv6RsDelay","PlmnSearchPowerLevel","Epco","T3324MaxValueS","BarValueS","DataInactTimer","RelaxMonitorDeltaP","UeCategory","RelVersion","EnableEAB","AttachEpsCid","TcpTptOpt","AttachWithIMSICtrl","PowerAttachWoEia","EnableDataCounter","UpdateLociCtrl","RoamService","SavePlmnSelMode","EmergencyCamp","EnableAcl","PdpReact","EnableABCheck","WeakCellOpt","QRxLevMin","ReselToWeakNcellOpt", "UpdateFreqCtrl","QualityFirst","StaticConfig","DisableCDRX","setClatState","IgnoreEmmCause","UserDrxCycle","UeSpecificDrxCycle")
OK

Defined values

ParameterTypeDescription
<PsSoftReset>
Number
Protocol stack soft reset configuration:
  • 0: disabled
  • 1 (factory-programmed value): enabled
<Rohc>
Number
Robust header compression (RoHC) configuration:
  • 0: disabled
  • 1 (factory-programmed value): enabled
Only profile 2 is supported (RoHC UDP).
<Ipv6RsForTestSim>
Number
Enables or disables the IPv6 NDS - Neighbor Discovery Protocol (RS - Router Solicitation) procedure which gets IPv6 prefix address when using test SIM. Allowed values:
  • 0: disabled
  • 1 (factory-programmed value): enabled
IPv6 NDP (RS) procedure is triggered by default if the inserted SIM card is not for testing.
<Ipv6RsDelay>
Number
Sets a delay in seconds before the device initiates the IPv6 Neighbor Discovery Protocol (Router Solicitation) procedure to acquire an IPv6 prefix address. The range goes from 0 to 65535 and the factory-programmed value is 15. IPv6 NDP (RS) procedure is triggered by default if the inserted SIM card is not for testing.
<PlmnSearchPowerLevel>
Number
Configures the time interval between PLMN search requests when the User Equipment (UE) goes Out of Service. Allowed values:
  • 0 (factory-programmed value if the SIM is a test SIM): OOS PLMN search interval: 5 seconds, 10 seconds, 20 seconds
  • 1 (factory-programmed value if the SIM is not a test SIM): OOS PLMN search interval: 15 seconds, 30 seconds, 1 minute
  • 2: OOS PLMN search interval: 5 minutes, 10 minutes, 15 minutes
  • 3: OOS PLMN search interval: 30 seconds, then stop PLMN search, and let AT+COPS=0 start PLMN search
  • 4: does not perform PLMN search when OOS, lets the user decide next action (whether to perform PLMN search or not)
<Epco>
Number
Allows the selection between Protocol Configuration Option (PCO) and Extended Protocol Configuration Option (EPCO). Allowed values:
  • 0 (factory-programmed value): PCO
  • 1: EPCO
<T3324MaxValueS>
Number
Configures "PSM without network coordination" feature by specifying a user-defined T3424 timer duration. If the feature is configured, the UE enters Power Saving Mode (PSM) <T3324MaxValueS> seconds after each RRC connection release (see +CSCON: 0 URC). The range of <T3324MaxValueS> parameter goes from 0 to 16777215 (factory-programmed value); setting a <T3324MaxValueS> value equal or higher than 65535 s disables the feature. Feature enabling is independent of +CPSMS settings: in case PSM has been requested and the <Assigned_Active_Time> value is shorter than <T3324MaxValueS> (see +CEREG AT command), the UE will be already in PSM at <T3324MaxValueS> timer expiry. PSM without network coordination can be used only if no mobile-terminated communication is expected after <T3324MaxValueS> timer expiry.
<BarValueS>
Number
Configures the User Equipment (UE) barring period in seconds due to SIB14. Once the timer expires, the UE is permitted to attempt access to the network again. The range goes from 1 to 600 and the factory-programmed value is 150.
<DataInactTimer>
Number
Sets the value of the "data inactivity timer" in seconds. If this timer is not configured by the network (in MAC-MainConfig), the specified setting value will be used. The data inactivity timer operates at the physical layer (PHY), and upon expiration, PHY signals the RRC to release the connection and transition to an idle state. The range goes from 15 to 255 and the special value 0 disables the feature; the factory-programmed value is 60. The parameter can only be configured when the device is in deregistered state or in airplane mode.
<RelaxMonitorDeltaP>
Number
Sets the value of "SearchDeltaP" in db for the Relaxed Monitoring feature. If this value is not configured by the network (in SIB3), the specified setting value will be used. The range goes from 0 to 15 and the factory-programmed value is 0. The parameter can only be configured when the device is in deregistered state or in airplane mode.
<UeCategory>
Number
Configures the value of the User Equipment (UE) category. Allowed values:
  • 1: LTE Cat 1
  • 2 (factory-programmed value): LTE Cat 1bis
The parameter can only be configured when the device is in deregistered state or in airplane mode.
<RelVersion>
Number
Configures the UE release version. The allowed values are 13 and 14, the factory-programmed value is 14. The parameter can only be configured when the device is in deregistered state or in airplane mode.
<EnableEAB>
Number
Enables or disables extended access barring:
  • 0: disabled
  • 1 (factory-programmed value): enabled
The parameter can only be configured when the device is in either a powered off state or in airplane mode.
<AttachEpsCid>
Number
Set the default EPS bearer context CID value. The range goes from 1 (factory-programmed value) to 15.
<TcpTptOpt>
Number
Configures the enabling or disabling of TCP throughput optimization, specifically influencing the TCP throughput for RNDIS/PPP TCP connections. The factory-programmed setting ensures maximum throughput. Allowed values:
  • 0: disabled
  • 1 (factory-programmed value): enabled
<AttachWithIMSICtrl>
Number
Controls attach with IMSI when the inserted SIM card is not for testing. Allowed values:
  • 0 (factory-programmed value): not control ATTACH with IMSI
  • 1: ATTACH with IMSI when power on
  • 2: ATTACH always with IMSI
The setting is not effective when using a test SIM card, i.e. the IMSI or GUTI is used in the ATTACH according to 3GPP guidelines.
<PowerAttachWoEia>
Number
Enables or disables power on ATTACH without integrity protected when the inserted SIM card is not for testing. Allowed values:
  • 0: disabled
  • 1 (factory-programmed value): enabled
The setting is not effective when using a test SIM card, i.e. the integrity protection is enabled according to 3GPP guidelines.
<EnableDataCounter>
Number
Enables or disables the PS data counter feature:
  • 0 (factory-programmed value): disabled
  • 1: enabled
<UpdateLociCtrl>
Number
Set the mode of updating EFEPSLOCI and EFLOCI to SIM. Allowed values:
  • 0 (factory-programmed value): update EFEPSLOCI and EFLOCI to SIM if the parameters are changed (EPS update status, TAI, GUTI for EFEPSLOCI; TMSI, LAI for EFLOCI)
  • 1: delay updating EFEPSLOCI and EFLOCI to SIM until do deregistration AT+CFUN=0. In this mode the EFs may not be updated to SIM if the SIM card is removed or the UE is powered off without sending AT+CFUN=0.
<RoamService>
Number
Enables or disables the roaming service.
AT+UPSCONFIG="RoamService"[,<roam_mode>[,<effect>]]
<roam_mode>
  • Allowed values:
    • 1: disable roaming service
    • 2 (factory-programmed value), 255: enable roaming service
<effect>
  • Allowed values:
    • 0: take effect after the UE reboots
    • 1 (default): take effect immediately
<SavePlmnSelMode>
Number
Enables or disables saving the PLMN select mode that is set through AT+COPS=0 to NVM. Allowed values:
  • 0: the PLMN select mode is not saved to NVM. It is reset to automatic PLMN selection after the reboot
  • 1 (factory-programmed value): the PLMN select mode is saved to NVM and is not changed after the reboot
<EmergencyCamp>
Number
Enables or disables the emergency camp feature, permitting power-on without a SIM card and initiating emergency camping on any available cell when allowed. Allowed values:
  • 0 (factory-programmed value): disabled
  • 1: enabled
<EnableAcl>
Number
Enables or disables UE ACL (APN control list):
  • 0 (factory-programmed value): disabled
  • 1: enabled
<PdpReact>
Number
Enables or disables the UE PDP Context reactivation if APN/IP type is changed e.b. via +CGDCONT:
  • 0 (factory-programmed value): disabled
  • 1: enabled
<EnableABCheck>
Number
Enables or disables the check on Access Barring (broadcast in SIB2 or SIB14):
  • 0: disabled
  • 1 (factory-programmed value): enabled
<WeakCellOpt>
Number
Enables or disables UE enhanced cell search when detecting a weak signal cell:
  • 0: disabled
  • 1 (factory-programmed value): enabled
The parameter can only be configured when the device is in deregistered state or in airplane mode.
<QRxLevMin>
Number
Controls the configuration of the q-RxlevMin * 2 value in dBm, which is used for S criteria checking in RRC. The range goes from -156 to -44 while the special value 0 (factory-programmed value) means the feature disabled. The parameter can only be configured when the device is in either a powered off state or in airplane mode.
<ReselToWeakNcellOpt>
Number
Controls the delta value. When enabled, it prevents the User Equipment (UE) from reselecting a neighbor cell where the Reference Signal Received Power (RSRP) is lower than the serving cell by at least the configured delta value in dBm. The range goes from 0 (factory-programmed value) to 100, where 0 means the feature disabled. The parameter can only be configured when the device is in deregistered state or in airplane mode.
<UpdateFreqCtrl>
Number
Sets the mode of updating FREQ list to NVM. Allowed values:
  • 0 (factory-programmed value): update NVM if FREQ list is changed
  • 1: update NVM on deregistration by AT+CFUN=0 command
<QualityFirst>
Number
Filter neighboring cells based on their signal quality as reported in the Measurement Indication (MeasInd) message. Allowed values:
  • 0 (factory-programmed value): disabled
  • 1: PHY will report a strongest neighbour cell’s SNR of each frequency in IDLE MeasInd
  • 2: PHY will report all neighbour cell’s SNR in IDLE MeasInd, it will increase power consumption
The parameter can only be configured when the device is in either a powered off state or in airplane mode
<StaticConfig>
Number
Enables/disables static configuration when UE is in IDLE state:
  • 0 (factory-programmed value): disabled
  • 1: enabled
The parameter can only be configured when the device is in either a powered off state or in airplane mode.
<DisableCDRX>
Number
Enables or disables the UE support CDRX capability:
  • 0 (factory-programmed value): disabled
  • 1: enabled
The parameter can only be configured when the device is in either a powered off state or in airplane mode.
<IgnoreEmmCause>
Number
Controls whether to ignore the EMM cause in ATTACH/TAU ACCEPT or only allow ATTACH/TAU ACCEPT if the EMM cause is present.
  • 0 (factory-programmed value): disabled
  • 1: enabled
<setClatState>
Number
Enables or disables the CLAT service for 464XLAT:
  • 0 (factory-programmed value): disabled
  • 1: enabled
<UserDrxCycle>
Number
Configures the idle mode DRX cycle used by the UE in a network un-coordinated way.
Monitoring fewer paging occasions than the network-configured ones can be used to lower power consumption when no MT data is expected or when in static conditions, if the network implements a paging retransimission strategy.
Allowed values:
  • 0 (factory-programmed value): feature disabled (the UE will use the network-configured <drx_cycle_len>, see +UDRX).
  • (1-7): the UE will monitor paging with <drx_cycle_len> * factor periodicity. If the calculated periodicity is lower than 320 ms or higher than 5120 ms, DRX cycle is set to 320 ms or 5120 ms respectively. List of factors follows:
    • 1: factor=1/8
    • 2: factor=1/4
    • 3: factor=1/2
    • 4: factor=2
    • 5: factor=4
    • 6: factor=8
    • 7: factor=16
  • (8-12): the UE will monitor paging with the specified <UserDrxCycle> periodicity if larger than the network configured <drx_cycle_len>. If this is not the case the UE will use the network-configured <drx_cycle_len>. List of values follows:
    • 8: 320 ms
    • 9: 640 ms
    • 10: 1280 ms
    • 11: 2560 ms
    • 12: 5120 ms
The parameter can only be configured when the device is either in a powered off state or in airplane mode.
<EnableLoggedMDT>
Number
Allows enabling or disabling the notification of the logMeasAvailable information element to the network in the response message after the reception of RRCConnectionSetup, RRCConnectionResume, RRCConnectionReconfiguration (handover), or RRCConnectionReestablishment. Allowed values:
  • 0 (factory-programmed value): logMeasAvailable notification is disabled.
  • 1: logMeasAvailable notification is enabled.
When disabled, the network will not send the Logged Measurement Configuration message to trigger measurement and logging on the UE for Minimization of Drive Test (see 3GPP TS 36.331 [31] subclause 5.6.6).
<UeSpecificDrxCycle>
Number
Allows to select an idle mode DRX cycle longer than the network default one in a network coordinated way to reduce average power consumption. Allowed values:
  • 0 (factory-programmed value): feature disabled (the UE will use the network-configured <drx_cycle_len>, see +UDRX).
  • (8-11): if the specified value is larger than the network configured <drx_cycle_len> value, during the registration procedure the UE notifies the network that it will monitor paging with the specified <UeSpecificDrxCycle> period. If this is not the case the UE will use the network-configured <drx_cycle_len>. List of supported values follows:
    • 8: 320 ms
    • 9: 640 ms
    • 10: 1280 ms
    • 11: 2560 ms
Runtime parameter changes are supported, and trigger a Tracking Area Update to notify the network.

Notes

LEXI-R10801D-00B
  • The command settings are restored to the factory-programmed values after any MNO profile change (see +UMNOPROF).

Discontinuous reception settings +UDRX

+UDRX
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
partial
No
No
No
-

Description

Reads idle (DRX) and connected mode (C-DRX) discontinuous reception network settings.
In connected mode C-DRX is optionally configured by the network (refer to 3GPP 3GPP TS 36.321 [25]). If C-DRX is not configured, all the parameters other than <mode>=2 are displayed with 0 values. When C-DRX is configured with long C-DRX cycles only, <shortDrxCycle> and <shortCycleTimer> parameters are displayed with 0 values.

Syntax

TypeSyntaxResponseExample
Generic syntax
Read
AT+UDRX?
+UDRX: <mode>[,<param1>[,<drxRetransmissionTimer>,<drxStartOffset>,<shortDrxCycle>,<shortCycleTimer>,<longdrxCycle>,<onDurationTimer>]]
OK
+UDRX: 1,320
OK
Module in idle mode
Read
AT+UDRX?
+UDRX: 1,<drx_cycle_len>
OK
+UDRX: 1,320
OK
Module in connected mode
Read
AT+UDRX?
+UDRX: 2,<drxInactivityTimer>,<drxRetransmissionTimer>,<drxStartOffset>,<shortDrxCycle>,<shortCycleTimer>,<longdrxCycle>,<onDurationTimer>
OK
+UDRX: 2,17,4,4,9,1,9,7
OK
Module not registered
Read
AT+UDRX?
+UDRX: 3
OK
+UDRX: 3
OK

Defined values

ParameterTypeDescription
<mode>
Number
Current mode. Allowed values:
  • 1: idle
  • 2: connected
  • 3: invalid
<drx_cycle_len>
Number
Network configured idle mode DRX cycle length in ms. Allowed values are 320, 640, 1280 and 2560 (see 3GPP TS 36.331 [31]).
<drxInactivityTimer>
Number
When C-DRX is configured, it specifies the number of consecutive PDCCH subframe(s) before C-DRX activation, after the subframe in which a PDCCH indicates a transmission. The range is 0-21: value 0 means psf1, which corresponds to 1 PDCCH sub-frame (see 3GPP TS 36.331 [31]).
<drxRetransmissionTimer>
Number
When C-DRX is configured, it specifies the maximum number of consecutive PDCCH subframe(s) the UE must remain active waiting for a possible retransmission. The range is 0-7 (see 3GPP TS 36.331 [31]).
<drxStartOffset>
Number
When C-DRX is configured, it specifies the subframe where the long DRX Cycle starts (see 3GPP TS 36.331 [31]).
<shortDrxCycle>
Number
When C-DRX is configured with both short and long cycles, it specifies the short DRX cycle length given by the <onDurationTimer> followed by a possible period of inactivity. The range is 0-15 (see 3GPP TS 36.331 [31]).
<shortCycleTimer>
Number
When C-DRX is configured with both short and long cycles, it specifies the multiple of <shortDrxCycle> to be completed after the <drxInactivityTimer> has expired, before starting with long C-DRX cycles. The range is 1-16 when C-DRX is configured with both short and long cycles (see 3GPP TS 36.331 [31]), otherwise it assumes a 0 value.
<longDrxCycle>
Number
When C-DRX is configured, it specifies the long DRX cycles length. In each cycle there is one RX active window given by the <onDurationTimer>. The range is 0-15: value 0 corresponds to sf10 (10 ms) and value 15 to sf2560 (2560 ms) (see 3GPP TS 36.331 [31]).
<onDurationTimer>
Number
Specifies the RX active window length. The range is 0-15: value 0 means psf1, which corresponds to 1 PDCCH sub-frame (see 3GPP TS 36.331 [31]).
<param1>
Number
Supported content depends on the related <mode> (details are given above).

Network band scan status +USCANSTAT

+USCANSTAT
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No
-

Description

Enables/disables the current band scan status, type and device radio technology reporting. To enable the URC reporting, set the <reporting> parameter to 1. Once enabled, the +USCANSTAT URC is issued to return the current band scan status and band scan type along with its radio technology information. Subsequently, if either the parameter <scan_state> or <scan_type> changes, a +USCANSTAT URC will be issued.

Syntax

TypeSyntaxResponseExample
Set
AT+USCANSTAT=<reporting>
OK
AT+USCANSTAT=1
OK
Read
AT+USCANSTAT?
+USCANSTAT: <reporting>,<scan_state>,<scan_type>,<scanned_act>[,<scanned_act>[,<scanned_act>[,<oosTimeStep>]]]
OK
+USCANSTAT: 1,0,7,3
OK
Test
AT+USCANSTAT=?
+USCANSTAT: (list of supported <reporting>s)
OK
+USCANSTAT: (0-1)
OK
URC
+USCANSTAT: <scan_state>,<scan_type>,<scanned_act>[,<scanned_act>[,<scanned_act>]]
+USCANSTAT: 0,7,3

Defined values

ParameterTypeDescription
<reporting>
Number
Configure the +USCANSTAT URC. Allowed values:
  • 0 (default value): disables the URC
  • 1: enables the URC
<scan_state>
Number
Current RRC band scan state:
  • LEXI-R10 / SARA-R10
    • 0: scan stopped (no PLMN search is ongoing)
    • 1: scan ongoing (PLMN search is ongoing)
    • 2: plmn selected (already selected a PLMN)
    • 3: oos (UE is in OOS and has started a PLMN search timer)
<scan_type>
Number
Current RRC band scan type:
  • LEXI-R10 / SARA-R10
    • 7: scan for PLMN selection
<scanned_act>
Number
Current access technology type:
  • 0: GSM / GPRS / eGPRS
  • 2: UMTS
  • 3: LTE
  • 7: LTE Cat M1
  • 8: NB-IoT
  • 9: GPRS / eGPRS
Allowed values:
  • 3
<oosTimeStep>
Number
Remaining time (in seconds) of out of service PLMN search timer.
The <oosTimeStep> is only present when <scan_state>=3.

Notes

  • The set command is not supported.
  • The test command returns only "OK" final result code.

EMM and RRC Events Counters +UPSSTAT

+UPSSTAT
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
No
-

Description

Enables/Disables and configures the reporting of protocol stack EMM and RRC counters and events.
The information text response of the read command reports the protocol stack information with a syntax determined by the <mode> parameter value.

Syntax

TypeSyntaxResponseExample
Set
AT+UPSSTAT=<mode>
OK
AT+UPSSTAT=1
OK
Read
AT+UPSSTAT?
<mode>=0:
+UPSSTAT: 0
OK
+UPSSTAT: 0
OK
<mode>=1:
+UPSSTAT: <mode>
RRC, ConEstSucc:<rrcConnEstSucc>, ConEstFail:<rrcConnEstFail>
EMM, AttachSucc:<AttachSucc>, AttachFail:<AttachFail>, TAUSucc:<TAUSucc>, TAUFail:<TAUFail>, SRSucc:<SRSucc>, SRFail:<SRFail>, AuthFail:<AuthFail>, DetachNum:<DetachNum>
PLMN, OOS:<OOScount>
OK
+UPSSTAT: 1
RRC, ConEstSucc:0, ConEstFail:0
EMM, AttachSucc:0, AttachFail:0, TAUSucc:0, TAUFail:0, SRSucc:0, SRFail:0, AuthFail:0, DetachNum:0
PLMN, OOS:0
OK
<mode>=2:
+UPSSTAT: <mode>,<rrcConnEstSucc>,<rrcConnEstFail>,<AttachSucc>,<AttachFail>,<TAUSucc>,<TAUFail>,<SRSucc>,<SRFail>,<AuthFail>,<DetachNum>,<OOScount>
OK
+UPSSTAT: 2,0,0,0,0,0,0,0,0,0,0,0
OK
Test
AT+UPSSTAT=?
+UPSSTAT: (list of supported <mode>s)
OK
+UPSSTAT: (0,1,2,3)
OK

Defined values

ParameterTypeDescription
<mode>
Number
Allowed values:
  • 0: reporting disabled
  • 2: reporting enabled
  • 2: short form reporting enabled
  • 3: reset of reported counters. Configured <mode> does not change.
<rrcConnEstSucc>
Number
Total amount of RRC connection successful procedures. The range goes from 0 to 65535.
<rrcConnEstFail>
Number
Total amount of RRC connection failed procedures. The range goes from 0 to 65535.
<AttachSucc>
Number
Total amount of Attach successful procedures. The range goes from 0 to 65535.
<AttachFail>
Number
Total amount of Attach failed procedures. The range goes from 0 to 65535.
<TAUSucc>
Number
Total amount of Tracking Area update successful procedures. The range goes from 0 to 65535.
<TAUFail>
Number
Total amount of Tracking Area update failed procedures. The range goes from 0 to 65535.
<SRSucc>
Number
Total amount of Service Request successful procedures. The range goes from 0 to 65535.
<SRFail>
Number
Total amount of Service Request update failed procedures. The range goes from 0 to 65535.
<AuthFail>
Number
Total amount of Authentication rejected procedures. The range goes from 0 to 65535.
<DetachNum>
Number
Total amount of MT-Detach and MO-Detach procedures. The range goes from 0 to 65535.
<OOScount>
Number
Total amount of PLMN Out-of-Service events. The range goes from 0 to 65535.

Notes

  • The command settings are not restored at exit from Sleep-2 and Hibernate deep-sleep modes (see +UPSV AT command).
LEXI-R10801D-00B
  • The command settings are restored to the factory-programmed values after any MNO profile change (see +UMNOPROF).

Network error code reporting +CNEC

+CNEC
Modules
All products
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
-

Description

Enables or disables URCs reporting of error result codes sent by the network. Depending on the radio access technology, the command can enable CS mobility management, GPRS mobility management, GPRS session management, EPS mobility management and EPS session management error code reporting. The same network error causes can be obtained by polling +CEER command.

Syntax

TypeSyntaxResponseExample
Set
AT+CNEC=<n>
OK
AT+CNEC=0
OK
Read
AT+CNEC?
+CNEC: <n>
OK
+CNEC: 0
OK
Test
AT+CNEC=?
+CNEC: (list of supported <n>s)
OK
+CNEC: (0,8,16,24)
OK
URC
+CNEC_EMM: <error_code>[,<cid>]
+CNEC_EMM: 2
URC
+CNEC_ESM: <error_code>[,<cid>]
+CNEC_ESM: 27

Defined values

ParameterTypeDescription
<n>
Number
Indicates a bitmask expressed in decimal format used to enable error code URCs for the following categories:
  • 0: reporting disabled
  • 8: reporting enabled for EMM error codes (<+CNEC_EMM>)
  • 16: reporting enabled for ESM error codes (<+CNEC_ESM>).
More categories can be enabled at the same time by summing up the category value, e.g., <n>=24 enables both EMM and ESM reporting.
<error_code>
Number
Code of the received error. More details on the error causes and their meaning can be found in Section A.3.
<cid>
Number
See <cid>.

Restriction of NA roaming for MVNO PLMN +UMVNOPLMN

+UMVNOPLMN
Modules
LEXI-R10401D-01B LEXI-R10801D-01B LEXI-R10001D
Attributes
Syntax
PIN required
Settings saved
Can be aborted
Response time
Error reference
full
No
No
-

Description

Configures the MVNO PLMN list to restrict roaming on North American operators when the HPLMN is an MVNO operator. The set command is used to add or remove PLMNs from the MVNO list. The read command displays the current MVNO PLMN list from the NVM.

Syntax

TypeSyntaxResponseExample
Set
AT+UMVNOPLMN=<op_code>,<plmn>
OK
AT+UMVNOPLMN=1,00101
OK
Read
AT+UMVNOPLMN?
+UMVNOPLMN: <number of plmn>,<plmn1>,<plmn2>, …​ ,<plmn10>
OK
+UMVNOPLMN: 2,00101,00202,00000,00000,00000,00000,00000,00000,00000,00000
OK

Defined values

ParameterTypeDescription
<op_code>
Number
Type of operation:
0: remove the MVNO PLMN entry from the table
1: add the MVNO PLMN entry to the table
<plmn>
Number
The MVNO PLMN to be added or deleted from the list.
<number of plmn>
Number
Total number of MVNO PLMNs present in the list.

Notes

  • The maximum number of entries in the MVNO PLMN list is 10.
Last updated: 13 January 2025
Need help?Contact Support
Questions?Contact us