M400-AT Command

AT Command Manual
F3507g
EC400
EC400g
MD400
MD400g
This AT Command Manual describes the
AT Commands that are supported in the
Himalaya-based PC Card product line.

The information contained in this document is the proprietary information of
Sony Ericsson Mobile Communications International. The contents are
confidential and any disclosure to persons other than the officers,
employees, agents or subcontractors of the owner or licensee of this
document, without the prior written consent of Sony Ericsson Mobile
Communications International, is strictly prohibited.
Further, no portion of this publication may be reproduced, stored in a

retrieval system, or transmitted in any form or by any means, electronic or
mechanical, including photocopying and recording, without the prior written
consent of Sony Ericsson Mobile Communications International, the
copyright holder.
First Edition (December 2007)
Sony Ericsson Mobile Communications International publishes this manual

without making any warranty as to the content contained herein. Further,
Sony Ericsson Mobile Communications International reserves the right to
make modifications, additions and deletions to this manual due to
typographical errors, inaccurate information, or improvements to programs
and/or equipment at any time and without notice. Such changes will,
nevertheless be incorporated into new editions of this manual.
All rights reserved.
© Sony Ericsson Mobile Communications International, 2008
Publication number: 1206-3629 Rev. 2
Printed in United States of America
Document Number 1206-3629, Rev. 2 2 of 308

1 Introduction to AT Commands .......................................................................... 10
1.1 Related Documentation ..................................................................................... 10
1.2 Overview ........................................................................................................... 10
1.3 History of Core Module AT Commands Manuals ................................................ 10
1.4 Syntax Description ............................................................................................ 10
1.4.1 Conventions...................................................................................................... 10
1.4.2 AT Command Syntax......................................................................................... 11
1.4.3 Other Terminology ............................................................................................ 12
1.4.4 AT Response Syntax .......................................................................................... 12
1.5 Examples on How to Use the AT Commands...................................................... 13
1.6 GPRS Communication ........................................................................................ 13
1.7 Abortability ....................................................................................................... 14
2 Call Control....................................................................................................... 15
2.1 ATA Answer Incoming Call ............................................................................... 15
2.2 ATD Dial .......................................................................................................... 15
2.3 ATD Extension (*99) - Request Packet Domain Service ...................................... 19
2.4 ATD Extension (*98) - Request Packet Domain IP Service ................................... 20
2.5 ATH Hang up ................................................................................................... 21
2.6 ATO Return to Online Data Mode...................................................................... 22
2.7 ATP Select Pulse dialing..................................................................................... 22
2.8 ATT Select Tone Dialing .................................................................................... 23
2.9 ATX Call Progress Monitoring Control............................................................... 23
2.10 AT+CHUP Hang up Call ..................................................................................... 24
2.11 AT+CLCC List Current Calls............................................................................... 24
3 Control and Status ............................................................................................ 27

3.1 ATS0 Automatic Answer Control........................................................................ 27
3.2 ATS2 Escape Sequence Character ..................................................................... 27
3.3 ATS3 Command Line Termination Character..................................................... 28
3.4 ATS4 Response Formatting Character ............................................................... 29
3.5 ATS5 Command Line Editing Character (BACKSPACE) ........................................ 29
3.6 ATS6 Blind Dial Delay Control........................................................................... 30
3.7 ATS7 Connection Completion Timeout ............................................................. 30
3.8 ATS8 Comma Dial Modifier Delay Control .......................................................... 31
3.9 ATS10 Automatic Disconnect Delay Control....................................................... 31
3.10 AT+CEER Extended Error Report........................................................................ 32
3.11 AT+CIND Indicator Control ............................................................................... 32
3.12 AT* List all Supported AT Commands ................................................................ 35
3.13 AT+CLAC List All Available AT Commands ........................................................ 36

3.14 AT+CMEE Mobile Equipment Error..................................................................... 36
3.15 +CME ERROR (Mobile Equipment Error Code)..................................................... 37
3.16 AT+CMER Mobile Equipment Event Reporting.................................................... 39
3.16.1 +CIEV Indicator Event Unsolicited reports......................................................... 41
3.17 +CMS ERROR (Message Service Failure Result Code) .......................................... 42
3.18 AT+CPAS Phone Activity Status ......................................................................... 43
3.19 AT+CPWD Change Password ............................................................................. 44
3.20 AT+CR Service Reporting Control ...................................................................... 46
3.20.1 +CR Service Reporting Unsolicited Response ................................................... 47
3.21 AT+CRC Cellular Result Code ............................................................................ 47
3.21.1 +CRING Incoming Call Type Notification............................................................ 48
3.22 AT+CSQ Signal Strength.................................................................................... 48
3.23 AT+CMEC Mobile Termination Control Mode..................................................... 49
3.24 AT+CKPD Keypad Control ................................................................................. 51
3.25 AT*ECAM Call Monitoring .................................................................................. 52
3.25.1 *ECAV Call Monitoring Unsolicited Result Code................................................. 53
3.26 AT*E2CHAN Channel Information ..................................................................... 56
3.26.1 *E2CHAN Channel Information Unsolicited Response......................................... 57
4 Operational Control and Status.......................................................................... 58

4.1 AT+CFUN Set Phone Functionality ..................................................................... 58
4.2 AT*E2CFUN SEMC Read Phone Functionality ...................................................... 59
4.2.1 *E2CFUN SEMC Set Phone Functionality Unsolicited Response ............................ 60
4.3 *EMRDY Module Ready Unsolicited Response..................................................... 60
4.4 AT*E2RESET Restart Module ............................................................................. 61
4.5 AT+CMAR Master Reset .................................................................................... 61
5 Profiles ............................................................................................................. 63
5.1 AT&F Set to Factory Defined Configuration Profile ............................................ 63
5.2 AT&W Store Configuration Profile ...................................................................... 68
5.3 ATZ Restore Configuration Profile .................................................................... 69
6 Time Commands ............................................................................................... 70

6.1 AT+CCLK Set Clock and Date ............................................................................ 70
7 Data - CSD........................................................................................................ 71
7.1 AT+CBST Select Bearer Service Type ................................................................. 71
7.2 AT+CRLP Radio Link Protocol ........................................................................... 72
8 Data - GPRS ...................................................................................................... 75

8.1 AT+CGACT PDP Context Activate or Deactivate ............................................... 75
8.2 AT+CGCMOD PDP Context Modify................................................................... 76

8.3 AT+CGATT GPRS Attach or Detach .................................................................. 76
8.4 AT+CGCLASS GPRS Mobile Station Class........................................................... 77
8.5 AT+CGDATA Enter Data State........................................................................... 78
8.6 AT+CGDCONT Define PDP Context................................................................... 79
8.7 AT+CGDSCONT Define Secondary PDP Context ................................................ 82
8.8 AT+CGEREP GPRS Event Reporting.................................................................... 84
8.8.1 +CGEV GPRS Event Reporting .......................................................................... 85
8.9 AT+CGPADDR Show PDP Address..................................................................... 86
8.10 AT+CGEQMIN 3G Quality of Service Profile (Minimum acceptable) .................... 87
8.11 AT+CGEQNEG 3G Quality of Service Profile (Negotiated) ................................... 93
8.12 AT+CGEQREQ 3G Quality of Service Profile (Requested) .................................... 98
8.13 AT+CGQMIN Quality of Service Profile (Minimum Acceptable) ........................ 104
8.14 AT+CGQREQ Quality of Service Profile (Requested) ......................................... 106
8.15 AT+CGREG GPRS Network Registration Status................................................ 107
8.15.1 +CGREG GPRS Network Unsolicited Response ................................................. 108
8.16 AT+CGTFT Traffic Flow Template .................................................................. 109
8.17 AT*ENAP USB Ethernet Interface Control ......................................................... 114
8.18 AT*EUPLINK Send Uplink Data ........................................................................ 115
9 Internet Accounts............................................................................................ 117

9.1 AT*EIAAUR - Internet Account Configuration, Read Authentication Parameters 117
9.2 AT*EIAAUW - Internet Account Configuration, Write Authentication Parameters118
9.3 AT*EIAC - Internet Account, Create ................................................................. 120
9.4 AT*EIACSR - Internet Account Configuration, Read CSD Bearer Capabilities ..... 122
9.5 AT*EIACSW - Internet Account Configuration, Write CSD Bearer Capabilities .... 124
9.6 AT*EIAD - Internet Account Configuration, Delete ........................................... 126
9.7 AT*EIALCPR - Internet Account Configuration, Read PPP Parameters - LCP ...... 127
9.8 AT*EIALCPW - Internet Account Configuration, Write PPP Parameters - LCP ..... 131
9.9 AT*EIALSR - Internet Account Configuration, Read Link Socket Parameters...... 135
9.10 AT*EIALSW - Internet Account Configuration, Write Link Socket Parameters..... 137
9.11 AT*EIAIPCPR - Internet Account Configuration, Read PPP Parameters - IPCP .... 138
9.12 AT*EIAIPCPW - Internet Account Configuration, Write PPP Parameters - IPCP ... 140
9.13 AT*EIAPSW - Internet Account Configuration, Write PS Bearer Parameters ........ 142
9.14 AT*EIAPSR - Internet Account Configuration, Read PS Bearer Parameters ......... 145
9.15 AT*EIAR - Internet Account Configuration, Read General Parameters ............... 148
9.16 AT*EIAW - Internet Account Configuration, Write General Parameters.............. 149
9.17 AT*EIARUTR - Internet Account Configuration, Read Routing Table Parameters150
9.18 AT*EIARUTW - Internet Account Configuration, Write Routing Table Parameters152
9.19 AT*EIARUTD - Internet Account Configuration, Delete Routing Table
Parameters...................................................................................................... 154

10 GPS Interoperability......................................................................................... 157
10.1 AT*E2GPSCTL GPS Positioning Control........................................................... 157
10.2 AT*E2GPSSTAT Set GPS Status unsolicited response....................................... 158
10.2.1 *E2GPSSTAT - GPS Status unsolicited response................................................ 160
10.3 AT*E2GPSEPH Set External Ephemeris ............................................................ 160
10.4 AT*E2GPSTIME Set GPS Reference Time ......................................................... 162
10.5 AT*E2GPSCLM Clear GPS Cache Memory ........................................................ 163
10.6 AT*E2GPSNPD GPS NMEA Port Discovery........................................................ 164
11 Identification................................................................................................... 165
11.1 AT Attention Command.................................................................................. 165
11.2 AT+CGMI Read MS Manufacturer Identification................................................ 165
11.3 AT+CGMM Read MS Model Identification ......................................................... 165
11.4 AT+CGMR Read Revision Identification............................................................ 166
11.5 AT+CGSN Read Product Serial Number Identification ....................................... 166
11.6 AT+GCAP Capabilities .................................................................................... 167
11.7 AT+GMI Request Manufacturer Identification.................................................. 167
11.8 AT+GMM Request Model Identification ........................................................... 168
11.9 AT+GMR Revision Identification ..................................................................... 168
11.10 ATI Identification Information......................................................................... 169
12 Serial Interface ................................................................................................ 172

12.1 AT&C Circuit 109 (DCD) Control ..................................................................... 172
12.2 AT&D Circuit 108 (DTR) Response .................................................................. 172
12.3 ATV DCE Response Format ............................................................................. 173
12.4 AT+ICF DTE-DCE Character Framing Format ................................................... 174
12.5 AT+IFC DTE-DCE Local Flow Control ............................................................... 176
12.6 AT+IPR Cable Interface Port baud rate............................................................. 176
12.7 ATE Command Echo ....................................................................................... 178
12.8 ATQ Result Code Suppression ........................................................................ 179
13 Network .......................................................................................................... 180

13.1 AT*E2EMM Engineering Monitoring Mode ..................................................... 180
13.2 AT*ERINFO Network Capability ....................................................................... 188
13.3 AT+CLCK Facility Lock ................................................................................... 189
13.4 AT+CNUM Subscriber Number ...................................................................... 191
13.5 AT+COPN Read Operator Names ................................................................... 194
13.6 AT+COPS Operator Selection.......................................................................... 195
13.7 AT+CPOL Preferred Operator List ................................................................... 197
13.8 AT+CREG Network Registration...................................................................... 199
13.8.1 +CREG - Network Registration Unsolicted Response........................................ 201

13.9 AT+PACSP AT&T Specific - PLMN Mode Query ............................................... 201
13.10 +PACSP AT&T Specific - PLMN Mode Report ................................................... 202
14 Phonebook...................................................................................................... 203
14.1 AT+CPBR Phonebook Read ............................................................................. 203
14.2 AT+CPBS Phonebook Storage Select .............................................................. 204
14.3 AT+CPBW Phonebook Write ............................................................................ 206
15 Short Message Services - Point to Point ........................................................... 209

15.1 AT+CGSMS Select Service for MO SMS Messages............................................ 209
15.2 AT+CMGF Message Format ............................................................................ 209
15.3 AT+CMGW Write Message to Memory ............................................................. 210
15.4 AT+CMGC Send Command............................................................................. 211
15.5 AT+CMGS Send Message................................................................................ 213
15.6 AT+CMSS Send From Storage ......................................................................... 215
15.7 AT+CMGD Delete Message............................................................................. 215
15.8 AT+CMGL List Message.................................................................................. 217
15.9 AT+CMGR Read Message ............................................................................... 218
15.10 AT +CMMS More Messages to Send ................................................................. 220
15.11 AT+CNMI New Message Indications to TE ....................................................... 221
15.11.1 +CMTI New Message Indication Unsolicited Response ............................ 224
15.11.2 +CMT Received Message Unsolicited Response ...................................... 224
15.11.3 +CBM Received Cell Broadcast Unsolicited Response .............................. 225
15.11.4 +CDS SMS Status Report Unsolicited Response ........................................ 226
15.12 AT+CPMS Preferred Message Storage ............................................................. 226
15.13 AT+CSCA Service Centre Address................................................................... 229
15.14 AT+CSCS Select Character Set ........................................................................ 230
15.15 AT+CSMP Set Text Mode Parameters .............................................................. 231
15.16 AT+CSMS Select Message Service ................................................................... 232
15.17 AT*E2CMGA Modify message attribute ........................................................... 234
15.18 AT+CRES Restore SMS Settings........................................................................ 234
15.19 AT+CSAS Save SMS Settings ............................................................................ 235
16 Short Message Services - Cell Broadcast .......................................................... 237

16.1 AT+CSCB Select Cell Broadcast Message Type ................................................ 237
16.2 AT*EMWI Message Waiting Indication............................................................... 238
17 SIM Commands ............................................................................................... 240

17.1 AT+CRSM Restricted SIM Access.................................................................... 240
17.2 AT*E2SDR SIM Detection Reporting .............................................................. 243
17.2.1 *E2SDR SIM Detection Unsolicited Response .................................................. 244
17.3 AT+CPIN PIN Control..................................................................................... 244

17.4 AT*EPEE Pin Event ......................................................................................... 246
17.4.1 *EPEV Pin Event Unsolicited report ................................................................. 247
17.5 AT*E2SSN SIM Serial Number ......................................................................... 247
17.6 AT+CIMI Subscriber Identification ................................................................. 248
17.7 AT*EPIN Additional PIN Information ............................................................... 248
17.8 AT+CEAP EAP Authentication ......................................................................... 250
17.9 AT+CERP EAP Retrieve Parameters.................................................................. 252
17.10 AT+CUAD UICC Application Discovery............................................................ 253
18 SIM Application Toolkit ................................................................................... 255

18.1 AT*ESTKMENU Menu Selection........................................................................ 255
18.2 AT*ESTKRES Terminal Response .................................................................... 255
18.3 SIM Toolkit Proactive Command Unsolicited Responses ................................... 258
18.3.1 *ESTKCALL Set Up Call................................................................................... 258
18.3.2 *ESTKCC Call Control Event From SIM/USIM Application Toolkit ..................... 260
18.3.3 *ESTKCLOSE Close Channel ........................................................................... 262
18.3.4 *ESTKDISP Display Text ................................................................................. 262
18.3.5 *ESTKGIN Get Input ....................................................................................... 263
18.3.6 *ESTKKEY Get Inkey....................................................................................... 265
18.3.7 *ESTKITEM Select Item.................................................................................... 266
18.3.8 *ESTKOPEN Open Channel .............................................................................. 268
18.3.9 *ESTKRCVD Receive Data................................................................................ 269
18.3.10 *ESTKRSH Refresh .......................................................................................... 269
18.3.11 *ESTKSMENU Set Up Menu .............................................................................. 270
18.3.12 *ESTKSNDD Send Data.................................................................................... 271
18.3.13 *ESTKSMS Send Short Message ...................................................................... 272
18.3.14 *ESTKSS Send SS............................................................................................ 273
18.3.15 *ESTKTONE Play Tone..................................................................................... 274
18.3.16 *ESTKUSSD Send USSD.................................................................................... 276
18.3.17 *ESTKSIMT Setup Idle Mode Text .................................................................... 277
18.3.18 *ESTKDTMF Send DTMF tone .......................................................................... 278
19 Supplementary Services................................................................................... 279

19.1 AT+COLP Connected Line Identification Presentation ...................................... 279
19.1.1 +COLP Connected Line Identification Presentation Unsolicited Response ......... 280
19.2 AT+CACM Accumulated Call Meter.................................................................. 280
19.3 AT+CAMM Accumulated Call Meter Maximum ................................................ 281
19.4 AT+CAOC Advice of Charge ............................................................................ 281
19.4.1 +CCCM Current Call Meter Unsolicited Response............................................ 282
19.5 AT+CPUC Price Per Unit and Currency Table.................................................... 283
19.6 AT+CCFC Call Forwarding number and Conditions .......................................... 284
19.7 AT+CCWA Call Waiting.................................................................................... 285
19.7.1 +CCWA Unsolicited Result Code: ..................................................................... 288

19.8 AT+CLIP Calling Line Identification.................................................................. 288
19.8.1 +CLIP Calling Line Identification Unsolicited Response ................................... 289
19.9 AT+CLIR Calling Line Identification Restriction ................................................ 291
19.10 AT+CSSN Supplementary Service Notification .................................................. 292
19.10.1 +CSSI Supplementary Services Notification ..................................................... 294
19.10.2 +CSSU Supplementary Services Notification..................................................... 295
19.11 AT+CUSD Unstructured Supplementary Service Data ....................................... 295
19.11.1 +CUSD Unstructured Supplementary Service Unsolicited Response .................. 298
20 Alternate Line Services .................................................................................... 300

20.1 AT*ECSP Customer Service Profile................................................................... 300
21 Environmental ................................................................................................. 301

21.1 AT*E2OTR Operational Temperature Reporting.............................................. 301
21.1.1 *E2OTR Operational Temperature Range Reporting ........................................ 303
22 Alphabetic Listing of AT Commands ................................................................ 304

1 Introduction to AT Commands
This manual lists detailed information on the function of the AT
Command set that can be used with the F3507g.
1.1 Related Documentation
1.2 Overview
AT commands, issued from a computer in your application are used
to control and implement the functions of the module.
Using AT commands, the following actions are possible:
•Control of DCE
•GPRS
•Call control
•Supplementary Service
•SIM application tool kit
•Control any embedded application in the device
The manual contains a large number of Sony Ericsson-specific
commands in addition to those implemented in accordance with the
3GPP and ITU-T recommendations. These commands are provided
to enhance the functions of the module. The Sony Ericsson-specific
commands are identified by the asterisk that precedes the command
(see the syntax description provided below).
Only commands that are listed in the AT Commands Manual are
supported unless otherwise stated. Other commands may be
supported by the module but these are only included for historical
or legacy reasons.
1.3 History of Core Module AT Commands Manuals

The following table describes the module software version documented in each AT
Command Manual version.
AT Manual Version Product Firmware Revision

PA1 R1A025
PA3 R1A039
1.4 Syntax Description

This section provides a brief description of the syntax used for the
F3507g AT command set. See the ITU-T recommendation V.25ter
for additional information.
1.4.1 Conventions
In this manual, the following conventions are used to explain the
AT commands.
<command> The name of the command that is to be entered.
<parameter> The parameter values that are defined for a certain
command.
<CR> The command line is terminated by the Carriage Return (or
Enter key) or ATS3 command.
<LF> Line feed character or ATS4 command.
< > The term enclosed in angle brackets is a syntactical element.
The brackets do not appear in the command line.
[] Square brackets are used to indicate that a certain item is
optional. For example, sub-parameters of a command or an
optional part of a response. The brackets do not appear in the
command line.
<Value> The default values of the supported parameters are
indicated by using bold text when presenting the value.
•Other characters, including ‘?', parenthesis, etc., appear in
commands and responses as written.
•The final result codes OK, ERROR, +CME ERROR: <err> and
CMS ERROR:<err> (see sections 1.3.3 AT Response Syntax and
1.4 Error Codes) are not listed under “Possible Responses” for
each AT command.
•OK and ERROR are listed if these are the only possible
responses.
1.4.2 AT Command Syntax

The AT standard is a line-oriented command language. Each
command is made up of the following three elements:
•the prefix;
•the body;
•the termination character.
The prefix consists of the letters “AT” or "at", or , to repeat the
execution of the previous command line, the characters "A/" or
"a/".
The body is made up of the command, the parameter, and if
applicable the associated values.
Commands may be combined in the same command line. Spaces
between the individual bodies are ignored.
Basic Syntax Command

The format of basic syntax commands is as follows:
AT<command>[=][<parameter>]<CR>
ATS0=0<CR> (sets the automatic answering)
Additional commands may follow a command on the same
command line without any character being required for separation.
For the command D parameters, see the description for the
command in question.
A version of the basic syntax is:
AT<command><parameter>
Extended Syntax Command

•AT+<command>= [<parameter>]
•AT*<command>=[<parameter>]
AT+CFUN=0<CR> (powers down the module)

If several values are included in the command, they are separated by
commas. It is also possible to enter commands with no values.
Additional commands may follow an extended syntax command on
the same command line if a semicolon (; IRA 3B) is inserted after
the preceding extended command as a separator.
Read Command Syntax

The read command is used to check the current values of
parameters. Type ‘?’, after the command line:
•AT+<command>?
•AT*<command>?
•AT<command>?
AT+CSCS?<CR> (show current character set)
<CR>“IRA”<CR> (information text response)
<CR>OK<CR>(final result code response)
Test Command Syntax
The test command is used to test whether the command has been
implemented or to give information about the type of subparameters
it contains. Type ‘?’, after the command line:
•AT+<command>=?
•AT*<command>=?
AT+CPAS=?<CR> (shows supported values for the response
parameters)
<CR>CPAS: (0, 3, 4, 129, 130, 131)<CR> (supported values)
<CR>OK<CR> (final result code)
If the indicated <parameter> is not recognized, the result code
ERROR is issued.
Possible responses are indicated both as <command>:(list of
supported<parameter>) and (in most cases) the actual range of the
parameter values.
1.4.3 Other Terminology

In this document, terms “alternating mode” and “alternating call”
refer to all GSM bearer and teleservices that incorporate more than
one basic service (voice, data, fax) within one call.
1.4.4 AT Response Syntax

The default mode response shown below is in text mode. For
information about the ATV DCE response, see ATV DCE Response
Format.
Possible formats for the result codes are:
•Basic format result code, such as OK. The Basic result code also
has a numerical equivalent.
•Extended format result code, prefixed with a plus sign (+) or an
asterisk (*):
•AT+<command>: <parameter >
•AT*<command>: <parameter>
where the <parameter> is the result code value, note that a single
space character separates the colon character from the

<parameter>. If several values are included in the result code, they
are separated by commas. It is also possible that a result code has no
value. The extended syntax result codes have no numerical
equivalent. They are always issued in alphabetical form.
•Information text response may contain multiple lines separated by
<CR>. The TE detects the end of informational text responses by
looking for a final result code response, such as OK.
There are two types of result code responses as outlined below:
Final Result Code
A final result code indicates to the TE that execution of the
command is completed and another command may be issued.
•If you type an implemented AT command, you should get the
result code OK.
•If you type an AT command that is not implemented, or which had
the wrong parameter or syntax, you will get an error result code. It
is ERROR or, for example, +<command> ERROR followed by an
error code.
Final result codes are:
Value General meaning
OK Command executed, no errors
ERROR Invalid command or command line too long
NO DIALTONE No dialing possible, wrong mode
BUSY Remote station busy
NO ANSWER Connection completion time-out
NO CARRIER Link not established or disconnected
Unsolicited Result Code

Unsolicited result codes indicate the occurrence of an event not
directly associated with a command being issued from the TE.
1.5 Examples on How to Use the AT Commands

For many of the more complicated commands, examples are
provided after the command’s description. Always refer to the
detailed description of the command in question to check valid
parameter values, AT command syntax and Response syntax.
1.6 GPRS Communication

To initiate a session with the network you need to set up a ‘data
account’ on the module using the AT+CGDCONT command. You
need to specify the correct Access Point Name (APN) which you
get from your service provider. The command below sets up the
data account to access an APN called "internet."
AT+CGDCONT=1,“IP”,“internet”
After this you need to use the ATD command to make a GPRS call.
The example below dials into the network using account number 1.
ATD*99***1#

If the module is able to connect to the APN it will return a
CONNECT. At this point PPP/IP packets should be sent by the
application, to negotiate an IP address. The easiest way of doing
this whole thing is to create a windows dial up networking session
with the dial string *99***1# after creating the data account on the
module.
It is not possible to initiate a GPRS session from the network at
present. The reason for this is that unless a PDP context has been
setup it has not been assigned an IP address by the GGSN/DHCP
server and as a result it cannot be addressed other than through its
ME number (defeating the object of using IP). This is specified in
GSM 7.60 or 3GPP 27.060.
For additional information about GPRS communication, refer to the
application note, which can be obtained from the extranet or from
customer support.
1.7 Abortability
Commands that are able to be stopped or terminated while
executing are said to be "abortable". These abortable commands
may be terminated by sending a character or control sequence. As
very few commands are abortable - all AT-Commands in this
manual should be considered "not abortable" unless otherwise
noted.
This command is abortable.
The following commands can be aborted:

AT&W Store Configuration Profile
AT*E2CMGL List Message without marking Read
AT+CCFC Call Forwarding number and Conditions
AT+CCWA Call Waiting
AT+CGACT PCP Context Activate
AT+CGATT GPRS Attach or Detach
AT+CLAC List AT Commands
AT+CLCK Facility Lock
AT+CLIP Calling Line Identification
AT+CLIR Calling Line Identification Restriction
AT+CMGC Send Command
AT+CMGS Send Message
AT+CMGW Write Message to Memory
AT+CMSS Send Storage
AT+CNUM Subscriber Number
AT+COLP Connected Line Presentation
AT+COPN Read Operator Names
AT+CPOL Preferred Operator List
ATA Answer Incoming Call
ATD Dial

2 Call Control
2.1 ATA Answer Incoming Call
Description Command Possible Responses

Answer an ATA CONNECT
incoming CONNECT <text>
call
NO CARRIER
ERROR
OK
Description:
The command instructs the MS to answer immediately if an incoming call is pending. The
behaviour is different depending on the type of incoming call as reflected in the table
below.
Note 1: If a test command (ATA=?) is issued, the response will be NO CARRIER as this
will be interpreted as ATA command.
Defined values:
<text> Description
4800 Connected with data bit rate of 4800 bits/s
xx (other values may appear due to functionality)
Example:
RING
RING
ATA
OK
2.2 ATD Dial

Command syntax:
The dial command includes a number of dial modifiers and parameters that influence both
the behaviour and the result codes. As a consequence of that the description table includes
a number of typical combinations for better understanding compared to writing the

command with all parameters and dial modifiers presented as one line as in most other
commands.

Originate a call and ATD<dial_string>[G CONNECT
dial the phone or g][I or i][;] CONNECT <text>
number specified in NO CARRIER
<dial_string>. NO DIALTONE
BUSY
No action commands ATD[;] OK (If semicolon
that returns result included)
codes immediately. NO CARRIER (If
semicolon not
included)
Dial the phone ATD>[<mem>]<n>[ CONNECT
number stored in G or g][I or i][;] CONNECT <text>
memory location NO CARRIER
<mem> with index NO DIAL TONE
<n>. If <mem> is BUSY
omitted, the memory
storage is defined by
the +CPBS command.
Dial the phone ATD><str>[G or g][I CONNECT
number that or i][;] CONNECT <text>
corresponds with NO CARRIER
alphanumeric field in NO DIAL TONE
<str> BUSY
Redial the latest ATDL[G or g][I or i][;] CONNECT
phone number CONNECT <text>
dialled. Note that in NO CARRIER
case of multiplexer, NO DIAL TONE
e.g. 27.010 this BUSY
command will send
the latest dialled
number on the same
channel as the ATDL
command. This in
contrast to the
ATD>LD command,
which will send the
latest dialled number
in total.
Description:
This command instructs the MS to originate a call, which may be data or voice. The phone
number used to establish the connection will consist of digits and modifiers included in

<dial_string> or a stored number specified by the <mem>, <n> or <str> parameters, or
dial modifier L.
This allows for dialling from phonebook locations based on index or an alphanumeric
field that identifies an entry in phonebook as well as from other <mem> storages such as
Last Dialled Numbers (LD).
Command Select Phonebook Memory Storage (+CPBS) is recommended to be used to
select memory storage. Note! Only ME and SM memory storage are supported by ATD.
If the dial string is followed by a semicolon this informs the phone that the number is a
voice call rather than a data number. Dial command terminated by semicolon shall always
give OK as terminating result code.
Note: Other commands added in the same string after the ATD command are ignored.
Aborting an ATD command is accomplished by the transmission from the DTE to the
DCE of any character. A single character shall be sufficient to abort the command in
progress; however, characters transmitted during the first 125 milliseconds after
transmission of the termination character are ignored. This is to allow the DTE to append
additional control characters such as line feed after the command line termination
character.
Defined values:
<dial_string> Description
“0 1 2 3 4 5 Valid characters for origination
6789*#
+ A B C”
D This character is a part of V.25ter, but is here
only included for compatibility reasons, no code
is transmitted for this character.
W The W modifier is ignored but is included for
compatibility reasons.
' The comma modifier is ignored but is included
for compatibility reasons.
T The T modifier is ignored but is included for
P The P modifier is ignored but is included for
! The ! modifier is ignored but is included for
@ The @ modifier is ignored but is included for
<text> Description
Final Result Codes

For the use of final result codes NO DIALTONE and BUSY see the X command.
Alphabetic Numeric
Description
(ATV1) (ATV0)
CONNECT 1 If connection is successfully established, and X0
is selected
CONNECT - If connection is successfully established and Xn
<text> is selected where "n" is any value other than 0.
The meaning of the <text> parameter is
explained below
NO 3 Unable to establish a connection or the
CARRIER connection attempt was aborted by the user
ERROR 4 An unexpected error occurred while trying to
establish the connection
NO 6 The ME is being used for a voice call or is not
DIALTONE within coverage of the network
BUSY 7 The ME number called is engaged, valid for data
and voice connections
OK 0 Only valid for voice connections
<str> Description
String type String type value, which should be equal to an
alphanumeric field in a phonebook entry in the
searched memories.
Note: The character specifying which number in
the contact entry that should be used must be
included in the string; e.g. "/H" for home
number, "/M" for mobile number and so on.
<n> Description
Integer type Memory location in the selected memory. This
value should be in the range of locations
available in the memory used.
<mem> Description
ME ME memory
SM SIM memory

<mem> Description
LD Last Dialled memory. This is available, and may
be used for dialling, but is not updated by the
platform. This must be handled by an
application.
Example:
ATD07747008670;
OK
2.3 ATD Extension (*99) - Request Packet Domain Service
Description Syntax Possible responses

Make a GPRS/Packet D*<GPRS/Packet CONNECT
Domain call. Domain_SC>[*[<calle NO CARRIER
d_address>]
[*[<L2P>][*[<cid>]]]]
#
Read the current Not applicable
setting
Test command to Not applicable
show if the command
is supported
Description:
The V.25ter 'D' (Dial) command causes the ME to enter the V.25ter
online data state and, with the TE, to start the specified layer 2
protocol. The ME will return CONNECT to confirm acceptance of
the command prior to entering the V.25ter online data state. No
further commands may follow on the AT command line.
When layer 2 protocol has terminated, either as a result of an
orderly shut down of the PDP or an error, the ME shall enter
V.25ter command state and return the NO CARRIER final result
code.
<L2P> and <cid> are the same as in the +CGDATA command. The
+CGDCONT, +CGQREQ, etc. commands may be used in the
modem initialisation AT command string to set values for for PDP
type, APN, QoS etc.
NOTE: The dial string conforms to the syntax specified in 3GPP
TS 22.030
Defined Values:

<GPRS/Packet_Domain
Description
SC>
Integer type (GPRS/Packet Domain Service Code) a
digit string (value 99) which identifies a
request to use the GPRS/Packet Domain
<called_address> Description
String type Value received in this parameter is
ignored by the platform.
<L2P> Description
1 PPP
<cid> Description
Integer type See +CGDCONT for definition of <cid>
2.4 ATD Extension (*98) - Request Packet Domain IP Service

Make a GPRS/Packet D*<GPRS/Packet CONNECT
Domain call. Domain_SC_IP>[*<cid NO CARRIER
>]#
setting
Test command to Not applicable
show if the command
is supported
Description:
This command causes the ME to perform whatever actions are
necessary to establish communication between the TE and the
external Packet Data Network.
The V.25ter 'D' (Dial) command causes the ME to enter the V.25ter
online data state and, with the TE, to start the specified layer 2
protocol. The ME shall return CONNECT to confirm acceptance of
the command prior to entering the V.25ter online data state. No
further commands may follow on the AT command line.
The detailed behaviour after the online data state has been entered is
dependent on the PDP type. It is described briefly in clause 9 (for
IP) of 3GPP TS 27.060. PS attachment and PDP context activation
procedures may take place prior to or during the PDP startup if they
have not already been performed using the +CGATT and +CGACT
commands.
When the layer 2 protocol has terminated, either as a result of an
orderly shut down of the PDP or an error, the ME enters V.25ter
command state and return the NO CARRIER final result code. The
usage of <cid> is the same as in the +CGDATA command. The
+CGDCONT, +CGQREQ, etc. commands may then be used in the
modem initialisation AT command string to set values for for PDP
type, APN, QoS etc..
If <cid> is omitted, the ME shall attempt to activate the context
using:
(a) any information provided by the TE during the PDP startup
procedure, e.g. the TE may provide a PDP type and/or PDP address
to the ME,
(b) a priori knowledge, e.g. the ME may implement only one PDP
type
(c) using the 'Empty PDP type' (3GPP TS 24.008). (No PDP address
or APN shall be sent in this case and only one PDP context
subscription record shall be present in the HLR for this subscriber.)
This command may be used in both normal and modem
compatibility modes.
NOTE: The dial string conforms to the syntax specified in 3GPP
TS 22.030
Defined Values:
<GPRS/Packet_Domain
Description
SC_IP>
Integer type (GPRS/Packet Domain Service Code) a
digit string (value 98) which identifies a
request to use the GPRS/Packet Domain
with IP (PDP types IP & PPP)
<cid> Description
2.5 ATH Hang up

Terminate the call ATH[<n>]
Test command to ATH=? H: (0)
show if the
command is
supported
Description:
This command signals the MS to terminate an active call.
Defined Values:

<n> Description
0 Terminate a connection, only <n> = 0
supported.
2.6 ATO Return to Online Data Mode

Return to on-line ATO[<value>] CONNECT
data mode CONNECT <text>
NO CARRIER
ERROR
Test command to ATO=? O: [0]
show if the
command is
supported
Description:
Switch to the on-line data mode from the on-line command mode
during an active call. Returns ERROR when not in on-line
command mode.
Defined values:
<value> Description
0 Return to on-line data state from on-line
command
2.7 ATP Select Pulse dialing

Select pulse dialing ATP OK
Test if the command ATP=? OK
is supported
Description:
Command is ignored, and is implemented for compatibility only.
It would normally cause the next D command to use pulses when
dialing the number.

2.8 ATT Select Tone Dialing

Select tone dialing ATT OK
Test if the command ATT=? OK
is supported
Description:
This command is ignored. It is implemented for compatibility only.
It would normally cause the next D command to use tones when
dialing the number.
2.9 ATX Call Progress Monitoring Control

Set call progress ATX[=][<n>] OK
monitoring control ERROR
Show the current ATX? X: <n>
setting
Test if the command ATX=? X: (list of supported
is supported <n>s)
Description:
This command is used to indicate whether dial-tone detection and
busy-tone detection are used during a call set-up. You can also use
this command to display the current dial-tone and busy-tone
detection settings.
Defined values:
<n> Description
0 No BUSY or NO DIALTONE result codes given. No
line speed reported together with CONNECT result
code.
1 Busy and dial tone detection off. Report line-
speed on connection
2 No BUSY result code is given. NO DIALTONE result
code returned if no network. Reports line speed
together with CONNECT result code.
3 BUSY result code given if called line is busy. No
NO DIALTONE result code is given. Reports line
speed together with CONNECT result code.

<n> Description
4 BUSY result code is given if called line is busy. NO
DIALTONE is given if no network. Report line
speed together with CONNECT result code.
Default value.
Note: If there is no network available the <n> parameter will decide
if “NO DIALTONE” or “NO CARRIER” will be returned. If the
call recipient is busy, the <n> parameter will decide if “BUSY” or
“NO CARRIER” will be returned.
2.10 AT+CHUP Hang up Call
Possible
Description Command
Responses
Request AT+CHUP OK
hang-up ERROR
Description:
This command causes the TA to hang up the current CS call of the
MT.
If no call is present, but an incoming call is notified, then the
incoming call is rejected.
The purpose of this command is not to replace the V.25ter

command "H", but to give an assured procedure to terminate an
alternating mode call.
2.11 AT+CLCC List Current Calls
Description Syntax Possible Responses

Get list of AT+CLCC [+CLCC:
current calls <id1>,<dir>,<stat>,<mode>,
from the MS <mpty>[,<number>,<type>[,
<alpha>[,<priority>]]]
[<CR><LF>
+CLCC:
<id2>,<dir>,<stat>,<mode>,
<mpty>[,<number>,<type>[,
<alpha>[,<priority>]]]
[...]]]
Test if the AT+CLCC=? OK
command is
supported
Description:

This command returns the list of current calls of MT. If command
succeeds but no calls are available, no information response is sent
to TE.
Defined values:
<idx> Description
integer Call identification number as described in 3GPP TS
22.030.
<dir> Description
0 Mobile originated (MO) call
1 Mobile terminated (MT) call
<stat> Description
0 Active
1 Held
2 Dialing (MO call)
3 Alerting (MO call)
4 Incoming (MT call)
5 Waiting (MT call)
<mode> Description
0 Voice
1 Data
9 Unknown
<mpty> Description
0 Call is not one of multiparty (conference) call parties
1 Call is one of multiparty (conference) call parties
<number> Description
String Phone number in format specified by <type>

<type> Description
Integer type Type of address octet, refer 3GPP 24.008
128 Unknown numbering plan, national /
international number unknown
129 ISDN / telephony numbering plan, national /
international unknown
145 ISDN / telephony numbering plan, international
number
161 ISDN / telephony numbering plan, national
number
128...155 Other values refer to 3GPP 24.008
<alpha> Description
String Alphanumeric representation of <number>
corresponding to the entry found in phonebook;
used character set should be the one selected
with command Select TE Character Set AT+CSCS
<priority> Description
Integer type optional digit type parameter indicating the
eMLPP priority level of the call, values specified
in 3GPP TS 22.067
0-4 Valid values

3 Control and Status
3.1 ATS0 Automatic Answer Control
Possible
Description Command
Responses
Automatic answer control ATS0=[<r OK
cnt>] ERROR
Read the current setting ATS0? <rcnt>
Test if the command is ATS0=? S0: (list of
supported supporte
d
<rcnt>s)
Description:
This command sets the number of call indications (rings) before
automatically answering the call; value equaling zero disables
automatic answering and is the default setting.
Defined values:
<rcnt> Description
0 Disable automatic answer. Default value
1-7 Answer after the specified number of rings
When <rcnt> is displayed using ATS0?, leading zeroes are added to
make the result 3 digits.
3.2 ATS2 Escape Sequence Character

Set escape sequence ATS2=[<esc>] OK
character ERROR
Show the current ATS2? <esc>
setting
Test if the command ATS2=? S2: (list of supported
is supported <esc>s)
Description:
Defines the character to be used as the escape sequence character
when switching from on-line data mode to on-line command
mode. The response to the command is modified to reflect the
change.

Defined values:
<esc> Description
128 Default value. Escape function
disabled by default.
0 to 127 Escape sequence character
128-255 Escape function not enabled
Note: If the <esc> parameter is set to a value in the range of 128-
255, the escape sequence detection is disabled.
3.3 ATS3 Command Line Termination Character

Set Command Line ATS3=[<value>] OK
Termination ERROR
Character
Show the current ATS3? <value>
setting
is supported <value>s)
Description:
This S-Register parameter represents the decimal IA5 value of the
character recognized by the DCE from the DTE to terminate an
incoming command line. It is also generated by the DCE as part of
the header, trailer, and terminator for result codes and information
text, along with the S4 parameter.
The previous value of S3 is used to determine the command line
termination character for entry of the command line containing the
S3 setting command. However, the result code issued uses the
value of S3 as set during the processing of the command line.
For example, if S3 was previously set to 13 and the command line
“ATS3=30” is issued, the command line is terminated with a
<CR> character (IA5 0/13), but the result code issued uses the
character with the ordinal value 30 (IA5 2/14) in place of the
<CR>.
Defined values:
<value> Description
013 Command line termination character <CR>,
Default value
0 to Command line termination character
127

3.4 ATS4 Response Formatting Character

Set Response ATS4=[<value>] OK
Formatting Character ERROR
setting
Description:
character generated by the DCE as part of the header, trailer, and
terminator for result codes and information text, along with the S3
parameter (see the description of the V command for usage).
If the value of S4 is changed in a command line, the result code
issued in response to that command line will use the new value of
S4.
Defined values:
<value> Description
010 Formatting character <LF>. Default value
0 to 127 Formatting character
3.5 ATS5 Command Line Editing Character (BACKSPACE)

Request Command ATS5=[<value>] OK
Line Editing ERROR
Character
setting
Description:
character that indicates, when recognized by the DCE , a request to
delete from the command line the immediately preceding
character.

Defined values:
<value> Description
008 Line editing character, <BS>. Default value
0 to 127 Line editing character
3.6 ATS6 Blind Dial Delay Control

Blind dial delay ATS6=[<dly>] OK
control
Show the current ATS6? <dly>
setting
is supported <dly>s)
Description:
This command is included for compatibility. No functionality
<dly> Description
2 Wait two seconds before blind dialing. Default value
2-10 Number of seconds to wait before blind dialing
3.7 ATS7 Connection Completion Timeout

Set connection ATS7=[<tmo>] OK
completion timeout ERROR
Show the current ATS7? <tmo>
setting
is supported <tmo>s)
Description:
Defines the maximum time allowed between completion of dialing
and the connection being established. If this time is exceeded then
the connection is aborted.
Defined values:
<tmo> Description
50 Timeout value in seconds. Default value

<tmo> Description
1-255 Timeout value in seconds
3.8 ATS8 Comma Dial Modifier Delay Control

Set Comma Dial ATS8=[<dly>] OK
Modifier Delay ERROR
Control
Show the current ATS8? <dly>
setting
is supported <dly>s)
Description:
This command sets the number of seconds to wait when a comma
dial modifier is encountered in the dial string of the D command.
The default is 2 seconds.
This command is included for compatibility only. No functionality
<dly> Description
2 The value of the dial modifier delay in seconds. Default
value
2-10 The value of the dial modifier delay in seconds
3.9 ATS10 Automatic Disconnect Delay Control

Set Automatic ATS10=[<val>] OK
Disconnect Delay ERROR
Control
Show the current ATS10? <val>
setting
Test if the command ATS10=? S10: (list of
is supported supported <val>s)
Description:
This command sets the number of tenths of seconds to wait before
disconnecting after TA has indicated the absence of received line
signal.
This command is included for compatibility. No functionality.

<val> Description
2 Remains connected for two tenths of a second. Default
value
1-254 Number of tenths of a second of delay
3.10 AT+CEER Extended Error Report

Request an Extended AT+CEER +CEER: <report>
Error Report OK
ERROR
Test if the command AT+CEER=? OK
is supported ERROR
Description:
This command causes the TA to return one or more lines of
information text, <report> , which offers the user of the TA an
extended report for the following events:
•Failure in the last unsuccessful call setup (originating or

answering) or in-call modification
•Last call release
•Last unsuccessful GPRS attach or unsuccessful PDP context
activation
•Last GPRS detach or PDP context deactivation
Typically, the text will consist of a single line containing the failure
information given by the network in text format.
Reported information may include SM Cause codes and GMM

Cause codes defined in 3GPP TS 24.008
Defined values:
<report> Description
Unquoted The total number of characters, including line
character terminators, in the information text shall not
string exceed 2041 characters.
Text shall not contain the sequence 0<CR> or
OK<CR>
3.11 AT+CIND Indicator Control

Set Indicator AT+CIND=[<ind ERROR
Control > [,<ind>[,…]]]
Show the current AT+CIND? +CIND:
setting <ind>,<ind>,…
+CME ERROR:
<err>
OK
ERROR
Test if the AT+CIND=? +CIND:
command is (<descr>,(list of
supported supported
<ind>s)),
(<descr>,(list of
supported
<ind>s)),…
+CME ERROR:
<err>
OK
ERROR
Description:
This command shows the values of ME indicators. <ind> value 0
means that the indicator is off (or in a state which can be identified
as “off” state), 1 means that indicator is on (or in a state which is
more substantial than “off” state), 2 is more substantial than 1, and
so on. If the indicator is a simple on/off style element, it has values
0 and 1. The list of <ind>s is returned as an ordered list of values
without identifiers - the position of each <ind> in the list must be
determined by using the test command.
The ME does not allow setting of indicators, ERROR is returned
from the set command.
Test command returns pairs, where string value <descr> is a
maximum 16 character description of the indicator and compound
value is the allowed values for the indicator. If ME is not currently
reachable, +CME ERROR: <err> is returned (refer to 3GPP
27.007).
Notes:
The indicator <descr>="signal" represents the relative signal level

(e.g. number of "bars") for both GSM and WCDMA signals. This is
the preferred method for obtaining signal level for both technology
types. Note that +CSQ is available to obtain GSM signal levels only
and an indicator mapping algorithm must be applied to the raw
RSSI values returned by +CSQ, whereas +CIND may be used to
obtain levels for both technology types. There is no method

available for the TE to obtain the raw WCDMA signal values from
the ME.
The range of values reported in "signal" may vary by
implementation. The default range is (0-5), however the test
command should be used to determine the currently reported range.
The maximum possible range of "signal" is (0-9).
Indicators which apply only to phones and not to Data Card devices
may appear in the test command results. Indicators listed below as
(not applicable) may have reported values but are meaningless for
a Data Card device.
An unsolicited response form of the indicator data in AT+CIND is

available by enabling the +CIEV unsolicited response. See +CIEV
and AT+CMER for more information.
Defined values:
order
<descr> Description
number
"battchg" Battery charge level (0-5) (not 1
applicable)
“signal” Signal quality 2
Default range: (0-5)
Maximum range: (0-9)
"batterywarning" Battery warning (0-1) (not 3
applicable)
"chargerconnecte Charger connected (0-1) (not 4
d" applicable)
“service” Network service availability (0-1) 5
“sounder” Sounder activity (0-1) (not 6
applicable)
“message” Message received (0-1) 7
“call” Call in progress (0-1) 8
“roam” Roaming indicator (0-1) (0=Home, 9
1=Roaming)
“sms full” A short message memory storage in the MT 10
has become full (1), or memory locations are
available (0); i.e. the range is (0-1). Applies
to SIM and ME memory.

order
<descr> Description
number
"callsetup" Bluetooth proprietary call set up status 11
indicator.
Possible values are as follows:
Not currently in call set up (0), incoming call
process ongoing (1), outgoing call set up is
ongoing (2), remote party being alerted in
an outgoing call (3); i.e the range is (0-3)
(not applicable)
"callheld" Bluetooth propritary call hold status 12
indicator.
Possible values are as follows:
No calls currently on hold (0), a call is
currently on hold.
(not applicable)
Note: order number in the above table is used only in +CIEV unsolicited response
<ind> Description
Integer Value shall be in range of corresponding
type <descr>
Example:
AT+CIND=?
+CIND: ("battchg",(0-5)),("signal",(0-5)),("batterywarning",(0-
1)),("chargerconnected",(0-1)),("service",(0-1)),("sounder",(0-
1)),("message",(0-1)),("call",(0-1)),("roam",(0-1)),("smsfull",(0-
1)),("callsetup",(0-3)),("callheld",(0-1))
OK
AT+CIND?
+CIND: 5,5,0,0,1,0,1,0,1,1,0,0
OK
3.12 AT* List all Supported AT Commands

List all implemented AT* <AT Command1>
AT commands [<CR><LF>
<AT Command2>
[…
[<CR><LF><ATCom
mandN>]]]
OK
+CME ERROR: <err>
Description:
Lists all the commands supported by the MS.
3.13 AT+CLAC List All Available AT Commands

List available AT AT+CLAC <AT Command1>
Commands [<CR><LF>
<AT Command2>
[…
[<CR><LF><ATCom
mandN>]]]
OK
+CME ERROR: <err>
Description:
This command returns the AT commands that are available to the
user.
3.14 AT+CMEE Mobile Equipment Error

Request Mobile AT+CMEE=[<n>] OK
Equipment Error ERROR
Show the current AT+CMEE? +CMEE: <n>
setting OK
ERROR
Test if the command AT+CMEE=? +CMEE: (list of
is supported supported <n>s)
OK
ERROR

Description:
Disables or enables the use of result code +CME ERROR: <err> as
an indication of an error relating to the functionality of the ME.
When enabled, ME related errors cause +CME ERROR: <err> final
result code instead of the regular ERROR final result code. ERROR
is returned normally when error is related to syntax, invalid
parameters, or TA functionality. For more information, refer to
“+CME ERROR (Mobile Equipment Error Code)”.
Defined values:
<n> Description
0 Disable +CME ERROR: <err> result code and
use ERROR instead. Default value
1 Enable +CME ERROR: <err> result code and use
numeric <err> values.
2 Enable +CME ERROR: <err> result code and use
verbose <err> values.
3.15 +CME ERROR (Mobile Equipment Error Code)

Description:
This final result code is similar to the regular ERROR result code. If
+CME ERROR: <err> is the result code for any of the commands in
a command line, none of the commands in the same command line
will be executed (neither ERROR nor OK result code shall be
returned as a result of a completed command line execution). The
format of <err> can be either numerical or alphabetical, and is set
with the +CMEE command.
The V.25ter command V does not affect the format of this result
code.
The following table provides the numerical values for the parameter
<err>.
<err> Description (General Errors)

0 Module failure
1 No connection to phone
3 Operation not allowed
4 Operation not supported
5 PH-SIM PIN required
6 PH-FSIM PIN Required
7 PH-FSIM PUK Required
10 SIM not inserted
11 SIM PIN required
12 SIM PUK required
13 SIM failure

14 SIM busy
15 SIM wrong
16 Incorrect password
17 SIM PIN2 required
18 SIM PUK2 required
20 Memory or List full
21 Invalid index within the list
22 Item not available or list empty
23 Memory failure
24 Text string or parameter too long
25 Invalid characters in text string
26 Dial string too long
27 Invalid characters in dial string
30 No network service
31 Network time-out
32 Network not allowed - emergency
calls only
40 Network personalization PIN required
41 Network personalization PUK
required
42 Network subset personalization PIN
required
43 Network subset personalization PUK
required
44 Service provider personalization PIN
required
45 Service provider personalization PUK
required
46 Corporate personalization PIN
required
47 Corporate personalization PUK
required
51 - 99 Reserved
100 Unknown
103 Illegal MS
106 Illegal ME

107 GPRS Service not allowed
111 PLMN not allowed
112 Location area not allowed
113 Roaming not allowed in this location
area
132 Service option not supported
133 Requested service option not
subscribed
134 Service option temporarily out of
order
148 Unspecified GPRS error
149 PDP authentication failure
150 Invalid Mobile class
151- 256 Reserved
257 Syntax Error
258 Invalid Parameter
259 Length ERROR
260 SIM Authentication Failure
261 SIM File Error (either wrong ID or
content corrupted)
262 File System Failure (GDFS error)
263 Service Unavailable
264 Phonebook Not Ready
265 Phonebook Not Supported
266 Command Line Too Long
267 Parameter out of range
268 Band not allowed
269 Supplementary Service failure
270 Command aborted
271 Action already in progress
272 WAN Disabled on Host
273 GPS Disabled due to temperature
274 - Reserved
3.16 AT+CMER Mobile Equipment Event Reporting

Set ME activity AT+CMER=[<mode +CME ERROR: <err>
status >[,<keyp>[,<disp> OK
[,<ind>[,<bfr>]]]]]
ERROR
Read the AT+CMER? +CMER:
current <mode>,<keyp>,<disp
setting >,<ind>,<bfr>
OK
ERROR
Test if the AT+CMER=? +CMER: (list of
command is supported
supported <mode>s),(list of
supported
<keyp>s),(list of
supported
<disp>s),(list of
supported <ind>s), (list
of supported <bfr>s)
OK
ERROR
Description:
The command enables or disables the sending of unsolicited result codes from the ME to
the TE in the case of key pressings, display changes, and indicator state changes. <mode>
controls the processing of unsolicited result codes specified within this command. <bfr>
controls the effect on buffered codes when <mode> 1, 2 or 3 is entered.
Test command returns the modes supported by the TA as compound values.
Defined values:
<mode> Description
0 Buffer unsolicited result codes in the TA; if TA
result code buffer is full, codes can be buffered
in some other place or the oldest ones can be
discarded. (Default)
3 Forward unsolicited result codes directly to the
TE; There is no inband technique used to
embed result codes and data when TA is in on-
line data mode
<keyp> Description
0 No keypad event reporting

<disp> Description
0 No display event reporting
<ind> Description
0 No indicator event reporting
1 Indicator event reporting using result code
+CIEV: <ind>,<value>. <ind> indicates the
indicator order number (as specified for +CIND)
and <value> is the new value of indicator.
<bfr> Description
0 TA buffer of unsolicited result codes defined
within this command is cleared when <mode>
1...3 is entered
Unsolicited Result Codes:
+CIEV: <ind>,<value>
3.16.1 +CIEV Indicator Event Unsolicited reports

Description:
This unsolicited result code is enabled with the AT+CMER
command and indicates changes in indicator levels. <ind> in the
table below indicates the indicator order number (as specified for
AT+CIND). The +CIEV result code has the following syntax:
+CIEV: <ind>,<value>
Defined values:
<ind> <value> Description

2 0-x Signal quality
(x varies - see indicator
+CIND)
5 0-1 Service
indicator
7 0-1 Message
Received (SMS)
8 0-1 Call in
progress
indicator
9 0-1 roam indicator
10 0-1 SMS memory
full
Note: See +CIND for details on <value> definitions.

3.17 +CMS ERROR (Message Service Failure Result Code)
Description:
This final result code indicates an error related to mobile equipment
or to the network. The operation is similar to the ERROR result
code. None of the following commands in the same command line
will be executed. Neither ERROR nor OK result code will be
returned. ERROR is returned normally when an error is related to
syntax or invalid parameters. Nevertheless, it always appears when
a command fails.
The syntax is as follows:
+CMS ERROR: <err>
Values for the <err> parameter are described in the following table.
<err> Description
0 - 127 GSM 04.11 Annex E-2
values
128 - 255 GSM 03.40 subclause
9.2.3.22 values
300 ME failure
301 SMS service of ME
reserved
303 Operation not
supported
304 Invalid PDU mode
parameter
305 Invalid text mode
parameter
310 SIM not inserted
311 SIM PIN required
312 PH-SIM PIN required
313 SIM failure
314 SIM busy
315 SIM wrong
316 SIM PUK required
317 SIM PIN2 required
318 SIM PUK2 required
320 Memory failure
321 Invalid memory index
322 Memory full

<err> Description
330 SMSC address
unknown
332 Network time-out
340 No +CNMA
acknowledgment
expected
500 Unknown error
999 OK
3.18 AT+CPAS Phone Activity Status

Execute ME Activity AT+CPAS[=<mode>] +CPAS: <pas>
Status +CME ERROR <err>
OK
ERROR
Test if the command AT+CPAS=? +CPAS:
is supported (list of supported
<pas>s)
+CME ERROR <err>
OK
ERROR
Description:
This command returns the activity status <pas> of the ME. It can be
used to interrogate the ME before requesting action from the ME.
When the command is executed without the <mode> argument, the
command returns <pas> values from 0 to 128 (for supported values
see table below). When, on the other hand, the command is
executed with the <mode> argument set to 1, the command may
return Sony Ericsson specific <pas> values from 129 to 255 (for
supported values see the table below).
Test command returns values supported by the ME as a compound
value: refer to 3GPP 27.007.
Defined values:
<pas> Description
0 Ready (MT allows commands from TA/TE)
1 Unavailable (MT does not allow commands from
TA/TE)

<pas> Description
2 Unknown (MT is not guaranteed to respond to
instructions)
3 Ringing (MT is ready for commands from
TA/TE, but the ringer is active)
4 Call in progress (MT is ready for commands
from TA/TE, but a call is in progress)
5 asleep (MT is unable to process commands
from TA/TE because it is in a low functionality
state)
129 Not in call
130 Mobile originated call in progress. This is a
sub-state to ‘call in progress’
131 Mobile terminated call in progress. This is a
sub-state to ‘call in progress’
<mode> Description
0 Restricts the CPAS to return only standard
<pas>values
1 Allows the CPAS to return Sony Ericsson specific
<pas> values, such as 129, 130 and 131
Example:
AT+CPAS=?
+CPAS: (0-5,129-131)
OK
AT+CPAS
+CPAS: 0
OK
3.19 AT+CPWD Change Password

Request facility AT+CPWD=<fac +CME ERROR
lock >, <err>
<oldpwd>, OK
<newpwd>
ERROR

Test if the AT+CPWD=? +CPWD:
command is (<fac1>,<pwdle
supported ngth1>),
(<fac2>,<pwdle
ngth2>),…
+CME ERROR
<err>
OK
ERROR
Description:
This command sets a new password for the facility lock function
defined by command Facility Lock +CLCK.
Test command returns a list of pairs which present the available
facilities and the maximum length of their password.
Defined values:
<fac> Description
"PS" PH-SIM (lock PHone to SIM card) (ME asks
password when other than current SIM card
inserted)
“SC” SIM (lock SIM card) (SIM asks password in ME
power-up and when this lock command issued)
“AO” BAOC (Barr All Outgoing Calls) (refer GSM 02.88
clause 1)
“OI” BOIC (Barr Outgoing International Calls) (refer
GSM 02.88 clause 1)
“AI” BAIC (Barr All Incoming Calls) (refer GSM 02.88
clause 2)
“IR” BIC-Roam (Bar Incoming Calls when Roaming
outside the home country) (refer GSM 02.88
clause 2)
“OX” BOIC-exHC (Barr Outgoing International Calls
except to Home Country) (refer GSM 02.88
clause 1)
“AB” All Barring services (refer GSM 02.30)
“AG” All outGoing barring services (refer GSM 02.30)
“AC” All inComing barring services (refer GSM 02.30)
"P2" SIM PIN2

<oldpwd> Description
string type <oldpwd> shall be the same as password
specified for the facility from the ME user
interface or with the change password
command, +CPWD
<newpwd> Description
string type <newpwd> is the new password, maximum
length of password can be determined with
<pwdlength>
<pwdlength> Description
Integer type Maximum length of the password for the facility
<err> See Listing of CME ERROR values

Example:
AT+CPWD=“SC”,“0000”,“0001”
OK
3.20 AT+CR Service Reporting Control

Set Service Reporting AT+CR=<mode> OK
Control ERROR
Read current setting AT+CR? +CR: <mode>
OK
ERROR
Test if the command AT+CR=? +CR: (list of
is supported supported <mode>s)
OK
ERROR
Description:
This command controls whether intermediate bearer capability
result code +CR: <serv> is returned from the TA to the TE. If
service reporting is enabled, the intermediate result code is
transmitted at the point during connect negotiation at which the TA
has determined the speed and quality of service that will be used,
before any error control or data compression reports are transmitted,
and before the intermediate result code CONNECT is transmitted.

Note: This command replaces old V.25ter command Modulation
Reporting Control +MR, which is not appropriate for use in the
GSM network.
Possible error control (other than radio link protocol) and data
compression reporting can be enabled with V.25ter commands
Error Control Reporting +ER and Data Compression Reporting
+DR.
Defined values:
<mode> Description
0 Disable reporting. Default value
1 Enable reporting
3.20.1 +CR Service Reporting Unsolicited Response

Description:
The +CR unsolicited messages are enabled and disabled by the
AT+CR command. Format:
+CR: <serv>
<serv> Description
ASYNC Asynchronous transparent
SYNC Synchronous transparent
REL ASYNC Asynchronous non-transparent
REL SYNC Synchronous non-transparent
GPRS GPRS
[<L2P>] The optional <L2P> proposes a layer 2 protocol
to use between the MT and the TE. It is defined
in the Enter GPRS Data Mode (+CGDATA)
command.
3.21 AT+CRC Cellular Result Code

Set Cellular Result AT+CRC=[<mode>] OK
Code option ERROR
Show the current AT+CRC? +CRC: <mode>
setting OK
ERROR

Test if the command AT+CRC=? +CRC: (list of
OK
ERROR
Description:
This command controls whether the extended format of incoming
call indication or GPRS network request for PDP context activation
or notification for VBS/VGCS calls is used.
When enabled, an incoming call is indicated to the TE with
unsolicited result code +CRING: <type> instead of the normal
RING
Note: Similar command may be found in TIA IS-99 and TIA IS-135.
Defined values:
<mode> Description
0 Disables extended format. Default.
1 Enables extended format
3.21.1 +CRING Incoming Call Type Notification

Description:
The +CRING unsolicited message replaces the normal RING
message when it is enabled by the AT+CRC command. The
following message format is used:
+CRING: <type>
Additional Information
In order to not confuse the UR code with a command response, the UR code is withheld if
it occurs in the time between a command termination character is received and a final
result code is sent.
<type> Description
ASYNC Asynchronous transparent
SYNC Synchronous transparent
REL ASYNC Asynchronous non-transparent
REL SYNC Synchronous non-transparent
FAX Facsimile
VOICE Normal voice call
GPRS GPRS network request for PDP context activiation
3.22 AT+CSQ Signal Strength

Request Signal AT+CSQ +CSQ: <rssi>,<ber>
Strength +CME ERROR <err>
OK
ERROR
Test if the command AT+CSQ=? +CSQ: (list of
is supported supported
<rssi>s),(list of
supported <ber>s)
+CME ERROR <err>
OK
ERROR
Description:
Returns the received signal strength indication <rssi> and channel
bit error rate <ber> from the ME.
Test command returns values supported as compound values.
Additional Information:
For WCDMA the returned values are +CSQ: 99,99 It is
recommended to use the +CIND command.
Defined values:
<rssi> Description
0 -113dBm or less
1 -111dBm
2..30 -109… -53dBm
31 -51dBm or greater
99 Not known or not detectable
<ber> Description (BER = Bit Error Rate)

99 Not known or not detectable
3.23 AT+CMEC Mobile Termination Control Mode

Set control mode AT+CMEC=[<keyp>[ OK
,<disp>[,<ind>]]] +CME ERROR
<err>ERROR

Read the current AT+CMEC? +CMEC:
mode <keyp>,<disp>,<in
d>
Test if the command AT+CMEC=? +CMEC: (list of
<keyp>s),(list of
supported
<disp>s),(list of
supported <ind>s)
+CME ERROR <err>
OK
ERROR
Description:
Set command selects the equipment, which operates MT keypad,
writes to MT display and sets MT indicators. If operation mode is
not allowed by the MT, +CME ERROR: <err> is returned.
Test command returns values supported as compound values.
Defined values:
<keyp> Description
0 MT can be operated only through its keypad
(execute command of +CKPD cannot be used)
1 MT can be operated only from TE (with command
+CKPD)
Not Supported
2 MT can be operated from both MT keypad and
TE
<disp> Description
0 Only ME can write to its display (command
AT+CDIS can only be used to read the display)
Not Applicable
1 Not Supported
2 Not Supported
<ind> Description
0 Only ME can set the status of its indicators
(command AT+CIND can only be used to read
the indicators)

<ind> Description
1 Not Supported
2 Not Supported
3.24 AT+CKPD Keypad Control

Execute Key Press AT+CKPD=<keys>[, OK
<time>[,<pause>]] +CME ERROR <err>
ERROR
Read command AT+CKPD? Not supported
Test if the command AT+CKPD=? OK
is supported ERROR
Description:
Execution command emulates MT keypad by giving each keystroke
as a character in a string <keys>. <time>*0.1 seconds is the time to
stroke each key and <pause>*0.1 seconds is the length of pause
between two strokes. If emulating fails in an MT error, +CME
ERROR: <err> is returned. Refer subclause 9.2 for <err> values.
This command should be accepted (OK returned) before actually
starting to press the keys. Thus unsolicited result codes of key
pressings and display events can be returned (refer subclause
"Mobile Termination event reporting +CMER").
For WCDMA the returned values are +CSQ: 99,99 It is
recommended to use the +CIND command.
Defined values:
<keys>: string of characters representing keys as listed in the
following table (based on PCCA STD-101 Annex table I 3). Colon
character (IRA 58) followed by one character can be used to
indicate a manufacturer specific key not listed here. All characters
from a semicolon character (IRA 59) to the next single semicolon
character are treated as alpha entries and are not converted to key
equivalents. All semicolon characters inside alpha entries should be
duplicated in the TE and stripped to one before entering to the MT.
Pause character (IRA 87 or 119) can be used to pause between key
pressings for a time specified by <pause>. All IRA values not listed
here are reserved.
<key> Description
See 3GPP TS 27.007 for the complete list of
supported key codes.

<time> Description
0... 255 Key press time in increments of 0.1 seconds.
(May be omitted)
<pause> Description
0... 255 Pause between key presses in increments of 0.1
seconds (May be omitted)
3.25 AT*ECAM Call Monitoring

Set Call Monitoring AT*ECAM=<onoff> +CME ERROR: <err>
on or off OK
ERROR
Show the current AT*ECAM? *ECAM: <on/off>
setting +CME ERROR: <err>
OK
ERROR
Test if the command AT*ECAM=? *ECAM: list of
<on/off>s
+CME ERROR: <err>
OK
ERROR
Description:
This command activates or deactivates the call monitoring function
in the ME. When this log function is activated in the ME, the ME
informs about call events, such as incoming call, connected, hang
up etc.
It is preferable that the current status shall always be sent with
result code *ECAV when activating the log function. The purpose
of this is two fold:
•to gather relevant information for the call log in a TE;
•to make it possible for the TE to display call state information for
an ongoing call.
Defined values:
<onoff> Description
0 The call log function is disabled (off). Default
value

<onoff> Description
1 The call log function is enabled (on)
3.25.1 *ECAV Call Monitoring Unsolicited Result Code

Description:
The *ECAV result code is issued every time there is a change in the
progress of a call. The *ECAV result code has the following
syntax.
*ECAV:
<ccid>,<ccstatus>,<calltype>[,<processid>][,exitcause][,<number>,
<type>]
<ccid>: This is an integer value identifying the call for which the
progress has changed. Unless more than one call is in progress, this
value will be 1. The maximum number of call control processes is
7 (5 multiparty members, 1 call on hold, 1 call waiting).
Defined values:
<ccid> Description
0-7 Id of the call for which progress change is
reported.
<ccstatus>: This is an integer value showing the status of the call.
<ccstatus> Description
0 IDLE.
1 CALLING. Mobile Originated (outgoing) call
started.
2 CONNECTING. Mobile Originated (outgoing) call
in the process of establishing a connection.
3 ACTIVE. Connection established between A and
B.
4 HOLD. Connection put on hold.
5 WAITING. Mobile Terminated (incoming).
6 ALERTING. Mobile Terminated (incoming) call
ringing or Mobile Originated (outgoing) ringback
(remote end ringing) detected.
7 BUSY.
<calltype>: This is an integer identifying what type of call is in
progress.
<calltype> Description
1 Voice.
2 Data
4 FAX. Not supported

<calltype> Description
128 Voice 2.
<processid>: This is an integer identifying the process that the
module returns to after returning to the IDLE state.
<processid> Description
08 CC. Call Control
68 MM. Mobile Management.
69 MS. Mobile Station.
122 RR. Radio Resources.
<exitcause>: This is an integer value showing why the call ended.
Only reported when returning to the IDLE state (<ccstatus>=0).
<exitcause> Description
1 Unassigned (unallocated) number.
3 No route to destination.
6 Channel unacceptable.
8 Operator determined barring.
16 Normal call clearing.
17 User busy.
18 No user responding.
19 User alerting, no answer.
21 Call rejected.
22 Number changed.
25 Pre-emption.
26 Non selected user clearing.
27 Destination out of order.
28 Invalid number format (incomplete number).
29 Facility rejected.
30 Response to STATUS ENQUIRY.
31 Normal, unspecified.
34 No circuit/channel available.
38 Network out of order.
41 Temporary failure.
42 Switching equipment congestion.
43 Access information discarded.
44 requested circuit/channel not available.

<exitcause> Description
47 Resources unavailable, unspecified.
49 Quality of service unavailable.
50 Requested facility not subscribed.
55 Incoming calls barred within the CUG.
57 Bearer capability not authorized.
58 Bearer capability not presently available.
63 Service or option not available, unspecified.
65 Bearer service not implemented.
68 ACM equal to or greater than ACMmax.
69 Requested Facility not yet implemented.
70 Only Restricted Digital information bearer
capability is available.
79 Service or option not implemented, unspecified.
81 Invalid Transaction Identifier value.
87 User not member of CUG.
88 Incompatible Destination.
91 Invalid transit network selection.
95 Semantically incorrect message.
96 Invalid mandatory information.
97 Message type non-existent or not implemented.
98 Message type not compatible with protocol state.
99 Information element non-existent or not
implemented
100 Conditional IE Error
101 Message not compatible with protocol state
102 Recovery on timer expiry
111 Protocol error, unspecified
127 Inter-working unspecified
150 Radio Path Not Available
255 Empty
<number>: A string containing the phone number of the party
calling the module (Mobile Terminated) or the party called from the
module (Mobile Originated). The <number> is only shown for state
CALLING (1) and ALERTING (6) for MT calls.

String String of valid dial characters (‘0’-‘9’, ‘+’, ‘#’, ‘*’,
‘A’, ‘B’, and ‘C’)
<type>: This is an integer identifying the type of number displayed
in <number>.
<type> Description
Integer Type of address octet in integer format (refer
GSM 04.08 subclause 10.5.4.7). ; default 145
when dialing string includes international access
code character “+”, otherwise 129.
3.26 AT*E2CHAN Channel Information

Set reporting mode AT*E2CHAN=<mode OK
>,<format> +CME ERROR: <err>
Read the current AT*E2CHAN? *E2CHAN: <mode>,
setting <format=0>, <chan>
*E2CHAN: <mode>,
<format=1>, <freq>
OK
+CME ERROR: <err>
Test command to AT*E2CHAN=? *E2CHAN: (list of
show if the command supported <mode>s),
is supported (list of supported
<format>s)
OK
+CME ERROR: <err>
Description:
This command is used to read the current forward channel number
during normal UMTS operation, or to control an unsolicted
response to provide the same information whenever it changes. This
function will operate during both idle mode and connected mode.
2G channel changes will not be reported, except that a transition
from 3G to 2G will trigger an unsolicited response to indicate the
change.
The setting of <mode> and <format> will be stored within NVM
profile by AT&W in the data modem, and thus shall be applied after
power cycles until changed with the set command.
Defined values:

<mode> Description
0 Disable unsolicited
response
1 Enable unsolicited
response
<format> Description
0 Downlink channel in
UARFCN
Default value
1 Downlink channel
center frequency in
MHz
<chan> Description
Quoted string UARFCN per 3GPP TS-
25.101.
GSM ARFCNs will be
reported as “0”.
<freq> Description
Quoted string MHZ per 3GPP TS-
25.101.
GSM MHZ will be
reported as “0”.
3.26.1 *E2CHAN Channel Information Unsolicited Response

Description:
*E2CHAN: <format>,<chan> when <format>=0
*E2CHAN: <format>,<freq> when <format>=1

4 Operational Control and Status
4.1 AT+CFUN Set Phone Functionality

Set MS functionality AT+CFUN=<fun>[, +CME ERROR:
<reset>] <err>
OK
Show the current AT+CFUN? +CFUN: <fun>
setting +CME ERROR:
<err>
Test if the AT+CFUN=? +CFUN: (list of
command is supported <fun>s)
supported +CME ERROR:
<err>
Description:
This command selects the level of functionality <fun> in the MS.
Level “full functionality” results in the highest level of power
drawn. “Minimum functionality” results in the minimum power
drawn. This command may also be used to restrict the supported
Radio Access Technology (RAT) of the ME between GSM only or
WCDMA only.
Test command returns values supported by the ME.
For PCI Express mini card products, note that the W_Disable_N
input signal will also have an effect on the CFUN state, and the
allowed CFUN values. When this signal prevents turning on the
radio with <fun>=1, 5, or 6, a specific CME ERROR (WAN
Disabled on Host) will be returned to indicate this failure cause.
The optional <reset> parameter will cause the ME to perform a
complete reset before entering the new mode. This reset function is
available for all values of <mode>.
Defined values:
<fun> Description
0 Power down.
1 Full functionality
2 Not supported
3 Not supported

<fun> Description
4 Disable transmit and receive RF circuits. SIM still
enabled. This is often referred to as "flight
mode."
Default value
5 GSM only (WCDMA radio is off)
6 WCDMA only (GSM radio is off)
<reset> Description
0 Do not reset
1 Reset device before mode change
4.2 AT*E2CFUN SEMC Read Phone Functionality

Set MS functionality AT*E2CFUN=<mod +CME ERROR:
e> <err>
OK
Show the current AT*E2CFUN? *E2CFUN:
setting <mode>,<fun>,<
w_disable>
+CME ERROR:
<err>
Test if the AT*E2CFUN=? *E2CFUN: (list of
supported <mode>s)
+CME ERROR:
<err>
Description:
This command reads the level of functionality <fun> in the MS, and
also the status of the W_Disable_N signal pin for products which
implement the PCI Express Mini Card form factor. See the +CFUN
command for an explanation of the <fun> values.
The command also controls an unsolicted response that will be sent
any time either parameter changes. The response will also be sent
once upon system initialization.
The w_disable status indicates the state of the HW signal
w_disable_n on the Mini Card bus, which is controlled by the radio
control switch or "FAA switch" on the host notebook computer.
Note that the bus signal is negative logic, and the switch "enabled"
or "asserted" position typically means radio disabled. To avoid

confusion in meaning, note that the parameter description below
indicates simply radio allowed.
Notes:
This command only provides status of the current <fun> state. In
order to set a new <fun> state the +CFUN command must be used.
Defined values:
<mode> Description
0 Disable unsolicited response. Default value.
1 Enable unsolicited response.
<fun> Description
0 Power down.
1 Full functionality
2 Not supported
3 Not supported
4 Disable transmit and receive RF circuits. SIM still
enabled. This is often referred to as "flight
mode."
Default value
5 GSM only (WCDMA radio is off)
6 WCDMA only (GSM radio is off)
<w_disable> Description
0 Radio allowed
1 Radio not allowed
2 w_disable not supported
4.2.1 *E2CFUN SEMC Set Phone Functionality Unsolicited

Response
Description:
This unsolicited response will be sent from the device whenever any
change has taken place for either the <fun> or <w_disable>
reported parameters.
*E2CFUN: <mode>,<fun>,<w_disable>
4.3 *EMRDY Module Ready Unsolicited Response

Description:

The *EMRDY unsolicited response can be used to determine when
the device has completed its initialization and is ready to accept AT
commands.
*EMRDY: <state>
Note that this unsolicted response is enabled by default and cannot

be disabled.
Defined Values:
<state> Description
1 Full functionality. The radio and SIM are both turned
on, and the module can accept AT commands.
Note: The *EMRDY <state> 3 indicates that AT commands will be accepted. Successful
execution of the commands depends on whether the target process for the command has
had sufficient time to initialize.
4.4 AT*E2RESET Restart Module
Possible
Description Command
Responses
Perform a AT*E2RESET OK
restart of ERROR
the device
firmware
Test if the AT*E2RESET OK
command is =? ERROR
supported
Description:
This command is used to cause the module to reset and restart. The
software internally will allow a watch dog timeout to occur which
will reset the microcontroller’s internal registers and restart the
software at the beginning of operation. Most blocks internal to the
module will be reset and reinitialized. All settings and levels set by
previous AT commands that are not stored in non-volatile memory
will have to be reissued. The general result of this command is to
return as much of the system back to normal power on conditions.
The power state will be returned to CFUN=4 after the reset.
This command is available without SIM access.
Note: The proper radio access operations as defined by 3GPP will
be performed prior to the reset. e.g. if the device is GPRS attached
and registered then a detach and power-down registration will be
performed.
4.5 AT+CMAR Master Reset

Perform a master AT+CMAR=<ME_loc +CME ERROR: <err>
reset in the MS k_code> OK
ERROR
Test if the command AT+CMAR=? +CME ERROR: <err>
is supported OK
ERROR
Description:
This command requests the MS to reset user data. The user data in
the MS will be reset to the default values. This command also
unlocks the MS.
<ME_lock_code> Description
String Security code (ME_lock_code) must be
verified before performing the master reset,
see also AT+CLCK

5 Profiles
5.1 AT&F Set to Factory Defined Configuration Profile

Execute AT&F[=][<profile>] OK
ERROR
Test if the command AT&F=? &F: (list of supported
is supported factory profiles)
Description:
This command instructs the DCE to set all parameters in the current
profile to default values specified by the manufacturer, which may
take in consideration hardware configuration and other
manufacturer defined criteria.
This command modifies parameters in volatile memory. In order to
commit these changes to non-volatile memory, AT&W must be
executed after AT&F has returned OK. If AT&W is not executed,
the AT&F effect will not survive a reset.
Defined values:
<profile> Description
0 Factory profile to restore (only profile 0 is
supported)
Configuration Profile Settings and Default Values

The commands AT&F, ATZ, and AT&W allow the user to restore, and store the current
profile parameter values outlined in the table below.
Factory Defined
Parameter Description AT Command Range
Values
Result Code ATQ (0-1) 0 - Quiet
Suppression Mode is off
DCE Response ATV (0-1) 1 - Verbose is
Format on
Call Progress ATX (0-1) 0 - Don't
Monitoring Control Show Speed
Calling Line ID AT+CLIR (0-2) 0 - Don't use
Restricted Network
Setting
Extended Error AT+CMEE (0-2) 0 - CMEE is off
Reporting

Factory Defined
Values
Command Echo ATE (0-1) 1 - Echo is on
Handshake Mode AT\Q (0-2) 1 - HW
handshake
Circuit 108 Response AT&D (0-2) 0 - DTR
(Data Terminal Ignore
Ready)
Circuit 107 Response AT&S (0-1) 0 - DSR On
(Data Set Ready)
Circuit 109 Control AT&C (0-2) 1 - DCD
(Carrier Detect) Passage
DTE-DCE Local Flow AT+IFC (0-3) DCE_DTE, 2 - HW,
Control (0-2) DTE_DCE 2 - HW
Select bearer service AT+CBST (0-134) Speed, 7 - 9600bps,
type (0-7) Name, 0 - Data Ckt
(0-3) Async,
Connection 1 - Non-
Element transparent
Calling Line AT+CLIP (0-1) 0 - Off
Identification
Presentation
Connected Line AT+COLP (0-1) 0 - Off
Identification
Presentation
Operator Selection AT+COPS (0-2) 0 - Long
Format Alphanumeric
Service Reporting AT+CR (0-1) 0 - Off
Control
Cellular Result Code AT+CRC (0-1) 0 - Off
(extended)
Network Registration AT+CREG (0-2) 0 - Off
Radio Link Protocol AT+CRLP (1-61) IWS, 61,
(1-61) MS, 61,
(48-255)T1, 48,
(1-255) N2 6
Cable Interface Local AT+ILRR (0-1) 0 - Off
Rate Reporting
Select Character Set AT+CSCS (0-7) 0 - PCCP437

Factory Defined
Values
Advice of Charge AT+CAOC (0-2) 0 - Query
mode
Call Meter Maximum AT+CCWE (0-1) 0 - Off
Event
Phonebook Storage AT+CPBS (FD,LD,ME,MT,S SM - SIM
Select M,DC,RC,MC,E Phonebook
N,ON
Call Waiting AT+CCWA (0-1) 0 - Off,
Capability, 0 - Off,
(0-2) Mode, 1 - Voice
(0-128) Bearer
Interface Port AT+IPR (0,1200,2400,4 0 - Auto
Command 800,9600,1920
0,38400,57600
,115200,23040
0,460800,9216
00)
Single Numbering AT+CSNS 0 Voice, 4 Data 0 - Voice
Scheme
Message Waiting AT*EMWI (0-2) 0 - Off
Indication
Network Info AT*ERINFO (0-1) 0 - Off
DRX Reporting Mode AT*EDRX (0-1) 0 - Off
SIM Detection AT*E2SDR (0-1) 0 - Off
Reporting
Cell Description AT*E2CD (0-1) 0 - Off
Operational AT*E2OTR (0-1) 0 - Off
Temperature
Reporting
IP Setup Parameters: AT*E2IPS (1-10), 2,
Initial Timeout, (3-8) , 8,
Retransmit Count, (1-10), 2,
Send Block Size (255-1460), 1020,
Send Interval Wait, (0,1), 0,
Lock Escape (0-120) 64
Sequence,
OpenTimeout

Factory Defined
Values
Escape Sequence AT*E2ESC (0-10) 0 - No Guard
Guard Time (GPRS) Time
Unstructured AT+CUSD (0-2) 0 - Off
Supplementary
Service Data
Call Monitoring AT*ECAM (0-1) 0 - Off
Mobile Equipment AT+CMER (0-3) 0 - Off/Buffer,
Event Reporting Reporting, 0 - Off
(0-1) Capability
Supplementary AT+CSSN (0-1) MO 0 - Off,
Service Notification unsol, 0 - Off
(0-1) MT unsol
Expanded Indicator AT*ECIND (0-1) for each 0 - Off (for all)

Control indicator
Pin Event AT*EPEE (0-1) 0 - Off
Module State Check AT*EMRDY (0-1) 0 - Off
and Report in State
Change
Restart Message AT*ESRB (0-1) 1 - On
DTMF Duration in AT+VTD (1-1000) 1
sec
SMS
Cell Broadcast AT+CSCB (0-1) Mode, 0 - Accept,
Message Type N/A Msg Id, "" - Empty,
N/A, CBM DCS "" - Empty
Set Text Mode AT+CSMP (0-255) First 17,
Parameters Oct, 167,
(0-255) Valid 0,
Pd,
0
(0-255) Prot Id,
(0-255) DCS
Show Text Mode AT+CSDH (0-1) 0 - Don't show
Parameters

Factory Defined
Values
New Message AT+CNMI (0-1) Unsol 1 - Discard,
Indication Msg, 0 - None,
(0-3) Rcv Msg, 0 - None,
(0-3) Cell 0 - None,
Bcast,
0 - Flush
(0-2) Status
Rept,
0 Buffered
Result
GPRS
Controls unsol AT+CGREG (0-2) 0 - Disable
output when change
in network
GPRS: Packet domain AT+CGEREP (0-2) Mode, 1 - Discard,
event reporting (0-1) Buffer 1 - Flush
Effect
PDP Context AT+CGDCON (1-20) Ctxt id, Empty (No
T ("IP", "IPV4", PDPcontexts
"IPV6") PDP defined).
Type,
N/A PDP Addr,
(0-2) data
comp,
(0-4) hdr comp
Minimum QoS profile AT+CGEQMI See Empty (No QoS
for PDP Context N AT+CGEQMIN profiles for
any PDP
contexts).
Requested QoS AT+CGEQRE See Empty (No QoS
profile for PDP Q AT+CGEQREQ profiles for
Context any PDP
contexts).
Internet Account AT*ENAD See AT*ENAD Empty (No
Settings internet
accounts for
any PDP
contexts).
Global Settings

Factory Defined
Values
Input/Output AT*E2IO N/A 0
Read/Write
SIM Selection AT*ESSE (0-1) 0 - Internal
Ring indicator for AT*E2SMSRI (0-1150) 0 (ms)
SMS (duration of ring
pulse in steps of
50ms)
Daylight Saving Time AT*EDST (0-2) 0 - STD
(adjustment)
Automatic Time AT+CTZU (0-1) 0
Zone update
(capability)
Operator Selection AT+COPS (0-1,3) 0 - Automatic
Mode
Operator Selection AT+COPS Only used "" (empty
(operator name) when mode is string)
set to manual
SMS Bearer Mode AT+CGSMS (0-3) 3 - CSD
preferred
GPRS AutoAttach AT*E2GAA (0-2) 0 - Never
Attach
Service Center AT+CSCA N/A Address, "" - Empty,
Address 129 Type 129 - National
Example:
AT&F
OK
5.2 AT&W Store Configuration Profile

Stores the current AT&W[=][<profile>] OK
user profile to non ERROR
volatile memory
Test if the command AT&W=? &W: (list of
is supported supported profile
ids)
Description:

This command stores the current profile in non-volatile memory.
The profile in non-volatile memory is mapped to the <profile>
parameter.
If a profile exists in non-volatile memory for <profile>, it is
overwritten with the current profile.
See the AT&F description for a list of all parameter settings stored
in the configuration profile.
Defined values:
< profile> Description

0 Stores current profile to location <profile>. (Only
profile 0 is supported)
5.3 ATZ Restore Configuration Profile

Execute ATZ[=][<profile>] OK
ERROR
Show if supported ATZ=? Z: (list of supported
and list available profile ids)
parameter range
Description:
This command instructs the DCE to restore the configuration profile
from non-volatile memory that corresponds to <profile> . Consider
hardware configuration switches or non-volatile parameter storage
(if implemented) when using this command. The current profile is
replaced with the configuration profile from non-volatile memory.
Commands included on the same command line as the Z command

will be ignored. See AT&F for a list of parameters available in a
configuration profile.
Defined values:
0 Select the profile to restore. (Only
profile 0 is supported)

6 Time Commands
6.1 AT+CCLK Set Clock and Date

Set the real time AT+CCLK=<time> +CME ERROR: <err>
clock of the ME OK
ERROR
Show the current AT+CCLK? +CCLK: <time>
OK
ERROR
Test if the command AT+CCLK=? OK
is supported ERROR
Description:
Sets the real time clock of the ME. If setting fails in an ME, error
+CME ERROR: <err> is returned. Read command returns the
current setting of the clock.
Defined values:
<time> Description
string Format is “yyyy/MM/dd,hh:mm:ss±zz”, where
characters indicate year (four digits), month,
day, hour, minutes, seconds and time zone
(indicates the difference, expressed in quarters
of an hour, between the local time and GMT;
range -47...+48), e.g. 6th of May 1994,
22:10:00 GMT+2 hours reads
“94/05/06,22:10:00+08”
Example:
AT+CCLK?
+CCLK: “00/01/01,22:54:48+00”
OK
AT+CCLK=“19/11/02,09:30:00+00”
OK

7 Data - CSD
7.1 AT+CBST Select Bearer Service Type

Select bearer AT+CBST=[<spee OK
service type d>, ERROR
[<name>,[<ce>]]]
Show the current AT+CBST? +CBST:
setting <speed>,<name
>,
<ce>
OK
ERROR
Test if the AT+CBST=? +CBST: (list of
supported <speed>s,list of
supported
<name>s, list of
supported <ce>s)
OK
ERROR
Description:
Selects the bearer service <name> with data rate <speed>, and the
connection element <ce> to be used when data calls are originated.
Values may also be used during mobile terminated data call setup,
especially in the case of single numbering scheme calls.
Test command returns values supported by the TA as compound
values.
Defined values:
<speed> Description
0 Auto selection of speed. Only possible in case
of 3.1 kHz modem and non-transparent
service.
Default value
7 9600 bps V.32
12 9600 bps V.34
14 14400 bps V.34
15 19200 bps V.34

<speed> Description
16 28800 bps V.34
17 33600 bps V.34
39 9600 bps (V.120)
43 14400 bps (V.120)
47 19200 bps (V.120)
48 28800 bps (V.120)
49 38400 bps (V.120)
50 48000 bps (V.120)
51 56000 bps (V.120)
71 9600 bps V.110 (ISDN)
75 14400 bps V.110 (ISDN)
79 19200 bps V.110 (ISDN)
80 28800 bps V.110 (ISDN)
81 38400 bps V.110 (ISDN)
82 48000 bps V.110 (ISDN)
83 56000 bps V.110 (ISDN)
84 64000 bps (X.31 flag stuffing)
<name> Description
0 Asynchronous connection (UDI or 3.1 KHz
modem). Default value.
4 Data circuit asynchronous (RDI)
<ce> Description
0 Transparent
1 Non transparent. Default value.
7.2 AT+CRLP Radio Link Protocol

Set radio link AT+CRLP=[< OK
protocol iws> ERROR
[,<mws>[,<T
1>
[,<N2>[,<ver
>[,<T4>]]]]]
Show the AT+CRLP? +CRLP:
current <iws>,<mws>,<T1>,<N2>,<ve
setting r1>[,<T4>]
<CR><LF>
+CRLP:
<iws>,<mws>,<T1>,<N2>,<ve
r2>[,<T4>]
[...]]
OK
ERROR
Test if the AT+CRLP=? +CRLP: (list of supported
command is <iws>s), (list of supported
supported <mws>s),
(list of supported <T1>s),
(list of
supported<N2>s),<ver1>[,(list
of supported <T4>s]
[<CR><LF>+CRLP: (list of
supported <iws>s), (list of
supported <mws>s), (list of
supported <T1>s), (list of
supported <N2>s),<ver2>[,(list
of supported <T4>s][...]]
OK
ERROR
Description:
Radio link protocol (RLP) parameters used when non-transparent
data calls are originated may be altered with this command.
Available command subparameters depend on the RLP versions
implemented by the device.
Read command returns current settings for each supported RLP
version <verx>. Only RLP parameters applicable to the
corresponding <verx> are returned.
Test command returns values supported by the TA as a compound
value.
Defined values:

<iws> Description
Supported IWF to MS window size. Default value is 61.
values 1 to
61
<mws> Description
Supported MS to IWF window size. Default value is 61.
values 1 to
61
<T1> Description
Supported Acknowledgment timer T1 (*10ms). Default
values 38 value is 59.
to 100
<N2> Description
Supported Re-transmission attempts N2. Default value is
values 0 to 6.
255
<T4> Description
3 - 255 Re-sequencing period T4 (*10ms). Default
value is 5. Only applicable to V2
<ver> Description
Integer RLP version.
0, 1, 2 Note: versions 0 and 1 share the same
parameter set.

8 Data - GPRS
8.1 AT+CGACT PDP Context Activate or Deactivate

Activate or AT+CGACT=<s +CME ERROR:
deactivate the tate> <err>
specified PDP [,<cid>[,<cid>] OK
context(s) ]]
ERROR
Read the AT+CGACT? +CGACT:
command <cid>,
<state>[<CR>
<LF>
+CGACT:
<cid>,
<state>[…]]
OK
ERROR
Test if the AT+CGACT=? +CGACT: (list
command is of supported
supported <state>s)
OK
ERROR
Description:
Used to activate or deactivate the specified PDP context(s). Before
a context may be activated it must be defined by the command
AT+CGDCONT.
If a context is not already attached to the GPRS network then this
command will automatically attach before attempting the activation.
After the command has completed, the MS remains in V.250
command state. If the MS is already in the requested state, the
command is ignored and OK is returned. If the requested state
cannot be achieved, ERROR or +CME ERROR is returned. If the
MS is not attached to the GPRS service when the activation form of
the command is executed, the MS first performs a GPRS attach and
then attempts to activate the specific contexts.
If no <cid>s are specified, then the activation form of the command
activates all defined contexts and the deactivation form of the
command deactivates all active contexts.
Defined values:

<state> Description
0 PDP context activation deactivated
1 PDP context activation activated
<cid> Description
Intege Reference to a PDP context identifier
r previously defined with AT+CGDCONT
8.2 AT+CGCMOD PDP Context Modify

Activate or AT+CGCMOD=
deactivate the [<cid> OK
specified PDP [,<cid>[,[,…]]]
ERROR
context(s)
Test if the AT+CGCMOD= +CGCMOD: (list
command is ? of <cid>s
supported associated with
active contexts)
Description:
The execution command is used to modify the specified PDP
context(s) with respect to QoS profiles and TFTs. After the
command has completed, the MT returns to V.25ter online data
state. If the requested modification for any specified context cannot
be achieved, an ERROR or +CME ERROR response is returned.
Extended error responses are enabled by the +CMEE command.
If no <cid>s are specified, the activation form of the command
modifies all active contexts.
The test command returns a list of <cid>s associated with active
contexts.
Defined values:
<cid> Description
Intege See AT+CGDCONT command for range
r type
8.3 AT+CGATT GPRS Attach or Detach

Attach or detach MS AT+CGATT=[<state +CME ERROR: <err>
to the GPRS/packet >] OK
domain/packet
ERROR
domain service
Show the current AT+CGATT? +CGATT: <state>
setting OK
ERROR
Test if the command AT+CGATT=? +CGATT: (list of
is supported supported <state>s)
OK
ERROR
Description:
Used to attach the MS to, or detach the MS from, the GPRS/packet
domain service. After the command has completed, the MS remains
in V.250 command state. If the MS is already in the requested state,
the command is ignored and the OK response is returned. If the
requested state cannot be achieved, an ERROR or +CME ERROR
response is returned. Extended error responses (enabled by the
+CMEE command) are listed under “+CME ERROR (Mobile
Equipment Error Code)”.
Any active PDP contexts will be automatically deactivated when
the attachment state changes to detached.
Note: The unit software is automatically hard coded to attach to a
GPRS network therefore entering this command as part of the
initialization sequence is not required.
Note: This command has the characteristics of both the V.250
action and parameter commands. Hence it has the read form in
addition to the execution/set and test forms.
Defined values:
<state> Description
0 Detached
1 Attached
8.4 AT+CGCLASS GPRS Mobile Station Class

Set class AT+CGCLASS= OK
<class> ERROR
Read current AT+CGCLASS? +CGCLASS:
class <class>
ERROR

Test if the AT+CGCLASS= +CGCLASS: (list
command is ? of supported
supported <class>s)
Description:
The set command is used to set the specified GPRS/Packet Domain
mobile class. If the requested class is not supported, an ERROR or
+CME ERROR response is returned.
The read command returns the current mode of operation set by the
TE, independent of serving cell capability and serving cell Access
Technology. If no value has been set by the TE previously, the
return value shall be the highest mode of operation that can be
supported.
The test command returns the supported <class>s.
Defined values:
<class> Description
A Class A (GPRS) or PS/CS mode (UMTS)
B Class B (value does not apply to UMTS)
CG Class C packet only (GPRS) or PS mode (UMTS)
CC Class C CS only (GPRS) or CS mode (UMTS)
8.5 AT+CGDATA Enter Data State

Establish AT+CGDATA=[<L2p CONNECT
GPRS/packet domain >,[cid[,cid>[,…]]]] ERROR
connection
OK
ERROR
Test if the command AT+CGDATA=? +CGDATA: (list of
is supported supported <L2P>s)
OK
ERROR
Description:
The execution command causes the ME to perform whatever
actions are necessary to establish communication between the TE
and the network using one or more GPRS/Packet Domain PDP
types. This may include performing a GPRS/Packet Domain attach
and one or more PDP context activations. If the <L2P> parameter
value is unacceptable to the ME, the ME returns an ERROR or
+CME ERROR response. Otherwise, the ME issues the
intermediate result code CONNECT and enters V.25ter online data
state.

Commands following +CGDATA command in the AT command
line are not processed by the ME.
During each PDP startup procedure the ME may have access to
some or all of the following information -
· The command may have provided an <L2P> parameter value.
· The TE may provide a PDP type and/or PDP address to the ME
during in the PDP startup procedure.
If any of this information is in conflict, the command will fail.
Any PDP type and/or PDP address present in the above information
are compared with the PDP type and/or PDP address in any context
definitions specified in the command in the order in which their
<cid>s appear.
For a context definition to match -
· The PDP type must match exactly.
· The PDP addresses are considered to match if they are identical or
if either or both addresses are unspecified. For example, a PPP NCP
request specifying PDP type = IP and no PDP address would cause
the ME to search through the specified context definitions for one
with PDP type = IP and any PDP address.
The context shall be activated using the matched value for PDP type
and a static PDP address if available, together with the other
information found in the PDP context definition. If a static PDP
address is not available then a dynamic address is requested.
If no <cid> is given or if there is no matching context definition, the
ME shall attempt to activate the context with whatever information
is available to the ME. The other context parameters shall be set to
their default values.
If the activation is successful, data transfer may proceed.
After data transfer is complete, and the layer 2 protocol termination
procedure has completed successfully, the V.25ter command state is
re-entered and the ME returns the final result code OK.
In the event of an erroneous termination or a failure to start up, the
V.25ter command state is re-entered and the ME returns the final
result code NO CARRIER or, if enabled, +CME ERROR. Attach,
activate and other errors may be reported.
Defined values:
<L2P> Description
PPP Point-to-point protocol for a PDP such as IP
<cid> Description
8.6 AT+CGDCONT Define PDP Context

Select PDP AT+CGDCONT=[<cid +CME ERROR: <err>
context > OK
parameters [,<PDP_type>[,<APN
ERROR
> [,<PDP_addr>
[,<d_comp>
[,<h_comp> [,<pd1>
[,...[,pdN]]]]]]]]]
Read the AT+CGDCONT? +CGDCONT: <cid>,
command <PDP_type>,<APN>,
<PDP_addr>,<d_comp>,
<h_comp>[,<pd1>[,...[,pdN>]]]
[<CR><LF>+CGDCONT: <cid>,
<PDP_type>,<APN>,
<PDP_addr>,<d_comp>,
<h_comp>[,<pd1>[,...[,pdN>]]]
[…]]
OK
ERROR
Test if the AT+CGDCONT=? +CGDCONT: (range of supported
command <cid>s), <PDP_type>,,,(list of supported
is <d_comp>s),
supported (list of supported <h_comp>s)
[,(list of supported <pd1>s)
[,…[,(list of supported <pdN>s)]]]
[<CR><LF>+CGDCONT: (range of
supported <cid>s), <PDP_type>,,, (list
of supported <d_comp>s), (list of
supported <h_comp>s) […]]
OK
ERROR
Description:
Specifies PDP context parameter values for a PDP context
identified by the (local) context identification parameter, <cid>. If
the parameter list is empty, the table will be cleared. If just the
<cid> is specified then that entry will be cleared but the rest of the
table will stay intact. PDP context table entries may only be cleared
if the context is not activated.
When the PDP context is activated a dynamic IP address will be

filled into the table entry by the network. If the network supports it,
then a static IP address may be filled in and will be used when
activating the context. When the context is deactivated the IP
address will be removed from the table if it is a dynamic IP but a
static IP will remain.

Defined values:
<cid> Description
Integer type (PDP Context Identifier) a numeric parameter
which specifies a particular PDP context
definition. The parameter is local to the TE-MS
interface and is used in other PDP context-
related commands. The range of permitted
values (minimum value = 1) is returned by the
test form of the command
1-10 Supported values
<PDP_type> Description
IP Internet Protocol, version 4 (IETF STD 5) (Default)
IPV6 Internet Protocol, version 6 (IETF RFC 2460)
<APN> Description
String type (Access Point Name) a string parameter which is
a logical name that is used to select the GGSN or
the external packet data network. If the value is
null or omitted, then the subscription value will
be requested
<PDP_addr> Description
String type A string parameter that identifies the MS in the
address space applicable to the PDP. If the value
is null or omitted, then a value may be provided
by the TE during the PDP startup procedure or,
failing that, a dynamic address will be requested
<d_comp> Description
0 PDP data compression OFF (Default)
1 PDP data compression ON
2 V.42bis
<h_comp> Description
0 PDP header compression OFF (Default)

1 PDP header compression ON
2...255 Reserved
<PdN> Description
String type Zero to N string parameters whose meanings are
specific to the <PDP_type> Not supported
8.7 AT+CGDSCONT Define Secondary PDP Context

Select AT+CGDSCONT=[<ci OK
secondary d>,<p_cid> ERROR
PDP context [,<PDP_type>
parameters [,<d_comp>
[,<h_comp>]]]]
Read the AT+CGDSCONT? +CGDSCONT: <cid>,
command <p_cid>,<d_comp>,
<h_comp>
[<CR><LF>+CGDSCONT:
<cid>, <p_cid>,<d_comp>,
<h_comp>
[…]]
OK
ERROR
Test if the AT+CGDSCONT=? +CGDSCONT: (range of
command supported <cid>s), (list of
is <cid>s for active primary
supported contexts),(list of supported
<PDP_type>s), (list of
supported <d_comp>s),
(list of supported
<h_comp>s)
OK
ERROR
Description:
The set command specifies PDP context parameter values for a
Secondary PDP context identified by the (local) context
identification parameter, <cid>. The number of PDP contexts that
may be in a defined state at the same time is given by the range
returned by the test command.

A special form of the set command, +CGDSCONT= <cid> causes
the values for context number <cid> to become undefined.
The read command returns the current settings for each defined
context.
Note: If <cid> states an already existing, primary context, this will
be converted to a secondary one, provided of course, that stated
<p_cid> is a different and existing primary account defined with
+CGDCONT. Note that any secondary contexts attached to the
converted context disappears.
Defined values:
<cid> Description
Integer type (PDP Context Identifier) a numeric parameter
which specifies a particular PDP context
definition. The parameter is local to the TE-MS
interface and is used in other PDP context-
related commands. The range of permitted
values (minimum value = 1) is returned by the
test form of the command
1-20 Supported values
<p_cid> Description
Integer type (Primary PDP Context Identifier) a numeric
parameter which specifies a particular PDP
context definition which has been specified by
use of the +CGDCONT command. The parameter
is local to the TE-ME interface.
"IP" Internet Protocol (IP Version 4)
"IPV6" Internet Protocol (IP Version 6)
<d_comp> Description
0 PDP data compression OFF (Default)
1 PDP data compression ON
2 V.42bis

0 PDP header compression OFF (Default)
1 PDP header compression ON
2...255 Reserved
8.8 AT+CGEREP GPRS Event Reporting

Set command AT+CGEREP=[< +CME ERROR:
mode> <err>
[,<bfr>]] OK
ERROR
Read the AT+CGEREP? +CGEREP:
command <mode>,<bfr>
OK
ERROR
Test if the AT+CGEREP=? +CGEREP: (list
supported <mode>s), (list
of supported
<bfr>s)
OK
ERROR
Description:
Enables or disables GPRS event reporting via unsolicted result
codes. <mode> controls the processing of unsolicited result codes
specified within this command. <bfr> controls the effect on
buffered codes when <mode> 1 or 2 is entered. See +CGEV for a
description of the unsolicited response format.
Defined values:
<mode> Description
0 Buffer unsolicited result codes in the MT. No codes are
forwarded to the TE. If MT result code buffer is full, the oldest
ones can be discarded.
1 Discard unsolicited result codes when MT-TE link is reserved
(e.g. in onlne data mode); otherwise forward them directly to
the TE. (online data mode indication is currently not available,
therefore link is assuemed to be not reserved)

<bfr> Description
0 MT buffer of unsolicited result codes defined within this
command is cleared when <mode> 1 or 2 is entered
8.8.1 +CGEV GPRS Event Reporting

Description:
The +CGEV unsolicited messages are enabled or disabled by the
AT+CGEREP command. The format of the unsolicited report is:
+CGEV: <XXX>
Defined values:
<XXX> Description
+CGEV: NW DEACT The network has forced a
<PDP_type>, context deactivation. The
<PDP_addr>[,<cid>] <cid> that was used to
activate the context is
provided if known.
+CGEV: ME DEACT The mobile equipment has
<PDP_type>, forced a context
<PDP_addr>[,<cid>] deactivation. The <cid> that
was used to activate the
context is provided if
known.
+CGEV: NW DETACH The network has forced a
GPRS/Packet Domain detach.
This implies that all active
contexts have been
deactivated. These are not
reported separately
+CGEV: ME DETACH The mobile equipment has
forced a GPRS/Packet
Domain detach. This implies
that all active contexts have
been deactivated. These are
not reported separately

<PDP_addr> Description
String type A string parameter that identifies the
module in the address space applicable to
the PDP. If the value is null or omitted,
then a value may be provided by the TE
during the PDP startup procedure or,
failing that, a dynamic address will be
requested
IP Internet Protocol (IETF STD 5)
<cid> Description
Integer type See AT+CGDCONT command for range
8.9 AT+CGPADDR Show PDP Address

Show PDP addresses AT+CGPADDR=[<cid +CGPADDR:
for specified CIDs > [,<cid> [,…]]] <cid>,<PDP_addr>
[<CR><LF>+CGPAD
DR:
<cid>,<PDP_addr>
[...]]
OK
ERROR
Test if the command AT+CGPADDR=? +CGPADDR: (list of
is supported defined <cid>s)
OK
ERROR
Description:
Returns a list of PDP addresses for the specified context identifiers.
The test command returns a list of defined <cid>s. An IP address is
only assigned to a PDP context if the context is activated (see
+CGACT) or if the IP address has been staticly assigned by the user
via +CGDCONT.
Defined values:

<cid> Description
Integer type Parameter which specifies a particular PDP context
definition (see +CGDCONT command). If no
<cid> is specified, the addresses for all defined
contexts are returned
<PDP_address> Description
String type A string that identifies the MS in the address
space applicable to the PDP. The address may be
static or dynamic. For a static address, it will be
the one set by the +CGDCONT and +CGDSCONT
commands when the context was defined. For a
dynamic address it will be the one assigned
during the last PDP context activation that used
the context definition referred to by <cid>.
<PDP_address> is omitted if none is available
8.10 AT+CGEQMIN 3G Quality of Service Profile (Minimum

acceptable)
Description Command Possible Response(s)

set a profile for the AT+CGEQMIN=[<cid> OK
context identified by the [,<Traffic class> ERROR
(local) context [,<Maximum bitrate UL>
identification parameter [,<Maximum bitrate DL>
[,<Guaranteed bitrate
UL> [,<Guaranteed
bitrate DL> [,<Delivery
order> [,<Maximum SDU
size> [,<SDU error ratio>
[,<Residual bit error
ratio> [,<Delivery of
erroneous SDUs>
[,<Transfer delay>
[,<Traffic handling
priority>]]]]]]]]]]]]]

Read the current setting AT+CGEQMIN? +CGEQMIN: <cid>,
<Traffic class>
,<Maximum bitrate UL>,
<Maximum bitrate DL>
,<Guaranteed bitrate UL>
,<Guaranteed bitrate
DL>, <Delivery order>
,<Maximum SDU size>
,<SDU error ratio>
,<Residual bit error
ratio> ,<Delivery of
erroneous SDUs>
,<Transfer delay>
,<Traffic handling
priority>
[<CR><LF>
+CGEQMIN: <cid>,
<Traffic class>
,<Maximum bitrate UL>
,<Maximum bitrate DL>
DL>, <Delivery order>
,<Maximum SDU size>
,<SDU error ratio>
erroneous SDUs>
,<Transfer delay>
,<Traffic handling
priority>
[…]]

Test if the command is AT+CGEQMIN=? +CGEQMIN: <PDP_type>,
supported (list of supported
<Traffic class>s) ,(list of
supported <Maximum
bitrate UL>s) ,(list of
supported <Maximum
bitrate DL>s), (list of
supported <Guaranteed
bitrate UL>s), (list of
bitrate DL>s) ,(list of
supported <Delivery
order>s) ,(list of
supported <Maximum
SDU size>s) ,(list of
supported <SDU error
ratio>s) ,(list of
supported <Residual bit
error ratio>s) ,(list of
supported <Delivery of
erroneous SDUs>s) ,(list
of supported <Transfer
delay>s) ,(list of
supported <Traffic
handling priority>s)
[<CR><LF>
+CGEQMIN: <PDP_type>,
(list of supported
<Traffic class>s) ,(list of
supported <Maximum
bitrate UL>s), (list of
supported <Maximum
bitrate DL>s) ,(list of
bitrate UL >s), (list of
bitrate DL >s) ,(list of
supported <Delivery
order>s) ,(list of
supported <Maximum
ratio>s) ,(list of
supported <Residual bit
error ratio>s) ,(list of
Document Number 1206-3629, Rev. 2 supported
89 of<Delivery
308 of
erroneous SDUs>s) ,(list
of supported <Transfer
Description
This command allows the TE to specify a minimum acceptable
profile, which is checked by the MT against the negotiated profile
returned in the Activate/Modify PDP Context Accept message.
The set command specifies a profile for the context identified by the
(local) context identification parameter, <cid>. The specified profile
will be stored in the MT and checked against the negotiated profile
only at activation or MS-initiated modification of the related
context. Since this is the same parameter that is used in the
+CGDCONT and +GGDSCONT commands, the +CGEQMIN
command is effectively an extension to these commands. The QoS
profile consists of a number of parameters, each of which may be
set to a separate value.
context.
The test command returns values supported as a compound value.
The parameter value ranges for each PDP type are returned on a
separate line.
The PDP context, identified by the <cid>, does not have to be
previously defined (using the +CGDCONT command).
27.007 states that:

"A special form of the set command, +CGEQMIN= <cid> causes
the requested profile for context number <cid> to become
undefined."
This is not so in this implementation, instead the default-values of
parameters not stated on the command line will be assigned. In this
case no check is made against the negotiated profile.
Letting values for context number <cid> become undefined, means

that the values of the <cid> are given the default values.
Note! To delete all the values please refer to the command *EIAD.
Defined values
<cid> Description
See AT+CGDCONT for range of <cid>.
NOTE: is is not necessary to define a <cid> value
using +CGDCONT before setting the QoS values
using this command.
The following parameters are defined in 3GPP TS 23.107 -

<Traffic class> Description
Integer format A numeric parameter
that indicates the
type of application for
which the UMTS
bearer service is
optimised.
0 Conversational
1 Streaming
2 Interactive
3 Background (Default)
<Maximum bitrate UL> Description

Integer Maximum number of kbit/s delivered to UMTS.
Ericsson Specific note: With reference to 3GPP TS
24.008 subclause 10.5.6.5, not all the integer
values are valid. Thus upon setting this
parameter, the value is rounded down to the
nearest valid value. It then follows that reading
back this parameter may produce a different value
than that used upon setting.
0...2048 Default 0 (Subscribed value will be requested)
<Maximum bitrate DL> Description

Integer Maximum number of kbit/s delivered by UMTS.
See note under <Maximum bitrate UL>
<Guaranteed bitrate UL> Description

Integer A numeric parameter that indicates the
guaranteed number of kbits/s delivered to UMTS
(up-link traffic) at a SAP (provided that there is
data to deliver).

<Guaranteed bitrate DL> Description
(down-link traffic) at a SAP (provided that there is
data to deliver).
<Delivery order> Description

Integer Type A numeric parameter that indicates whether the
UMTS bearer shall provide in-sequence SDU
delivery or not.
0 No
1 Yes
<Maximum SDU size> Description

Integer Indicates the maximum allowed SDU size in octets
Note: With reference to 3GPP TS 24.008 subclause
10.5.6.5, not all the integer values are valid. The
general rule is then that the integer will be
rounded down to the nearest valid value.
It is therefore possible to read out a value other
than that given.
<SDU error ratio> Description

String Indicates the target value for the fraction of SDUs
lost or detected as erroneous. SDU error ratio is
defined only for conforming traffic. The value is
specified as 'mEe'. As an example a target SDU
error ratio of 510-3 would be specified as '5E3'
(e.g. AT+CGEQMIN=…,”5E3”,…).

<Residual bit error ratio> Description
String Indicates the target value for the undetected bit
error ratio in the delivered SDUs. If no error
detection is requested, Residual bit error ratio
indicates the bit error ratio in the delivered SDUs.
The value is specified as 'mEe'. As an example a
target residual bit error ratio of 5•10-3 would be
specified as '5E3' (e.g. AT+CGEQMIN=…,”5E3”,…)
<Delivery of erroneous
Description
SDUs>
Integer Type A numeric parameter that indicates whether SDUs
detected as erroneous shall be delivered or not.
0 No
1 Yes
2 No detection or erroneous SDUs (Default)
<Transfer delay> Description

Integer The targeted time between request to transfer an
SDU at one SAP to its delivery at the other SAP, in
milliseconds.
<Traffic handling
Description
priority>
Integer Specifies the relative importance for handling of
all SDUs belonging to the UMTS bearer compared
to the SDUs of other bearers.
String See +CGDCONT command
If a value is omitted for a particular class then the value is considered to be unspecified.
8.11 AT+CGEQNEG 3G Quality of Service Profile (Negotiated)

Retrieves the negotiated +CGEQNEG +CGEQNEG: <cid>,
QoS profiles =[<cid>[,<cid>[,…]]] <Traffic class>
UL>, <Guaranteed
bitrate DL> ,<Delivery
order> ,<Maximum SDU
size> ,<SDU error ratio>
erroneous SDUs>
,<Transfer delay>
,<Traffic handling
priority>
[<CR><LF>
+CGEQNEG: <cid>,
<Traffic class>
UL>, <Guaranteed
bitrate DL> ,<Delivery
order> ,<Maximum SDU
size> ,<SDU error ratio>
erroneous SDUs>
,<Transfer delay>
,<Traffic handling
priority>
[…]]
Test if the command is +CGEQNEG=? +CGEQNEG: (list of
supported <cid>s associated with
active contexts)
Description
This command allows the TE to retrieve the negotiated QoS profiles
returned in the Activate PDP Context Accept message.
The execution command returns the negotiated QoS profile for the
specified context identifiers, <cid>s. The QoS profile consists of a
number of parameters, each of which may have a separate value.
The test command returns a list of <cid>s associated with active
contexts.
Defined values

<cid>: a numeric parameter which specifies a particular PDP context definition (see
+CGDCONT command).
The following parameters are defined in 3GPP TS 23.107 [46] -

that indicates the
which the UMTS
bearer service is
optimised.
0 Conversational
1 Streaming
2 Interactive
3 Background
Other values are
reserved.

Integer Type A numeric parameter that
indicates the maximum
number of kbits/s delivered to
UMTS (up-link traffic) at a SAP.
As an example a bitrate of
32kbit/s would be specified as
'32' (e.g. +CGEQNEG:…,32, …).

indicates the maximum
number of kbits/s delivered by
UMTS (down-link traffic) at a
SAP As an example a bitrate of
32kbit/s would be specified as
'32' (e.g. +CGEQNEG:…,32, …).

Integer Type Anumeric parameter that
indicates the guaranteed
number of kbits/s delivered to
UMTS (up-link traffic) at a SAP
(provided that there is data to
deliver). As an example a
bitrate of 32kbit/s would be
specified as '32' (e.g.
+CGEQNEG:…,32, …).

Integer Type Anumeric parameter that
indicates the guaranteed
number of kbits/s delivered by
UMTS (down-link traffic) at a
SAP (provided that there is data
to deliver). As an example a
bitrate of 32kbit/s would be
specified as '32' (e.g.
+CGEQNEG:…,32, …).

Integer Type A numeric parameter
that indicates whether
the UMTS bearer shall
provide in-sequence
SDU delivery or not.
0 No
1 Yes
Other values are
reserved.

0...1502 indicates the maximum
allowed SDU size in octets.

String Type A string parameter that
indicates the target value for
the fraction of SDUs lost or
detected as erroneous. SDU
error ratio is defined only for
conforming traffic. The value is
specified as 'mEe'. As an
example a target SDU error
ratio of 5•10-3 would be
specified as '5E3' (e.g.
+CGEQNEG:…,”5E3”,…).

String Type A string parameter that
indicates the target value for
the undetected bit error ratio
in the delivered SDUs. If no
error detection is requested,
Residual bit error ratio
indicates the bit error ratio in
the delivered SDUs. The value
is specified as 'mEe'. As an
example a target residual bit
error ratio of 5•10-3 would be
specified as '5E3' (e.g.
+CGEQNEG:…,”5E3”,…).
Description
SDUs>
Integer Type A numeric parameter
that indicates whether
SDUs detected as
erroneous shall be
delivered or not.
0 No
1 Yes
2 No detection of
erroneous SDUs
Other values are
reserved.

Integer Type A numeric parameter (0,1,2,…)
that indicates the targeted time
between request to transfer an
SDU at one SAP to its delivery
at the other SAP, in
milliseconds.
<Traffic handling
Description
priority>
Integer Type a numeric parameter (1,2,3,…)
that specifies the relative
importance for handling of all
SDUs belonging to the UMTS
bearer compared to the SDUs
of other bearers.
If a value is omitted for a particular class then the value is considered to be unspecified.
8.12 AT+CGEQREQ 3G Quality of Service Profile (Requested)

Specify a UMTS Quality of +CGEQREQ=[<cid> OK
Service Profile [,<Traffic class> ERROR
[,<Maximum bitrate UL>
[,<Maximum bitrate DL>
[,<Guaranteed bitrate UL>
[,<Guaranteed bitrate DL>
[,<Delivery order>
[,<Maximum SDU size>
[,<SDU error ratio>
[,<Residual bit error
ratio> [,<Delivery of
erroneous SDUs>
[,<Transfer delay>
[,<Traffic handling
priority> ]]]]]]]]]]]]]

Read the current setting +CGEQREQ? +CGEQREQ: <cid>,
<Traffic class>
,<Guaranteed bitrate DL>
,<Delivery order>
,<Maximum SDU size>
,<SDU error ratio>
,<Residual bit error ratio>
,<Delivery of erroneous
SDUs> ,<Transfer delay>
,<Traffic handling
priority>
[<CR><LF>
+CGEQREQ: <cid>,
<Traffic class>
,<Guaranteed bitrate DL>
,<Delivery order>
,<Maximum SDU size>
,<SDU error ratio>
,<Residual bit error ratio>
,<Delivery of erroneous
SDUs> ,<Transfer delay>
,<Traffic handling
priority>
[…]]

Test if the command is +CGEQREQ=? +CGEQREQ: <PDP_type>,
supported (list of supported <Traffic
class>s) ,(list of supported
<Maximum bitrate UL>s),
(list of supported
<Maximum bitrate DL>s),
(list of supported
<Guaranteed bitrate
UL>s), (list of supported
<Guaranteed bitrate
DL>s),(list of supported
<Delivery order>s) ,(list of
supported <Maximum
ratio>s) ,(list of supported
<Residual bit error
SDUs>s) ,(list of
supported <Transfer
delay>s) ,(list of
supported <Traffic
handling priority>s)
[<CR><LF>
+CGEQREQ: <PDP_type>,
(list of supported <Traffic
class>s) ,(list of supported
<Maximum bitrate UL>s),
(list of supported
<Maximum bitrate DL>s),
(list of supported
<Guaranteed bitrate
UL>s), (list of supported
<Guaranteed bitrate
DL>s),(list of supported
<Delivery order>s) ,(list of
supported <Maximum
<Residual bit error
SDUs>s) ,(list of
Document Number 1206-3629, Rev. 2 supported <Transfer
100 of 308
delay>s) ,(list of
supported <Traffic
Description
This command allows the TE to specify a UMTS Quality of Service
Profile that is used when the MT sends an Activate PDP Context
Request message to the network.
The set command specifies a profile for the context identified by the
(local) context identification parameter, <cid>. The specified profile
will be stored in the MT and sent to the network only at activation
or MS-initiated modification of the related context. Since this is the
same parameter that is used in the +CGDCONT command, the
+CGEQREQ command is effectively an extension to this command.
The QoS profile consists of a number of parameters, each of which
may be set to a separate value.
A special form of the set command, +CGEQREQ= <cid> causes the
requested profile for context number <cid> to reset to the default
QoS values..
context.
The test command returns values supported as a compound value. If
the MT supports several PDP types, the parameter value ranges for
each PDP type are returned on a separate line.
The PDP context, identified by the <cid>, does not have to be
previously defined (using the +CGDCONT command).
27.007 states that:

"A special form of the set command, +CGEQMIN= <cid> causes
the requested profile for context number <cid> to become
undefined."
This is not so in this implementation, instead the default-values of
parameters not stated on the command line will be assigned. In this
case no check is made against the negotiated profile.
Letting values for context number <cid> become undefined, means

that the values of the <cid> are given the default values.
Note! To delete all the values please refer to the command *EIAD.
Defined values
<cid> Description
See AT+CGDCONT for range of <cid>.
NOTE: is is not necessary to define a <cid> value
using +CGDCONT before setting the QoS values
using this command.

that indicates the
which the UMTS
bearer service is
optimised.
0 Conversational
1 Streaming
2 Interactive
3 Background (Default)

Integer Maximum number of kbit/s delivered to UMTS.
Ericsson Specific note: With reference to 3GPP TS
24.008 subclause 10.5.6.5, not all the integer
values are valid. Thus upon setting this
parameter, the value is rounded down to the
nearest valid value. It then follows that reading
back this parameter may produce a different value
than that used upon setting.

Integer Maximum number of kbit/s delivered by UMTS.

(up-link traffic) at a SAP (provided that there is
data to deliver).

(down-link traffic) at a SAP (provided that there is
data to deliver).

Integer Type A numeric parameter that indicates whether the
UMTS bearer shall provide in-sequence SDU
delivery or not.
0 No
1 Yes
2 Subscribed value (default value)

Integer Indicates the maximum allowed SDU size in octets
Note: With reference to 3GPP TS 24.008 subclause
10.5.6.5, not all the integer values are valid. The
general rule is then that the integer will be
rounded down to the nearest valid value.
It is therefore possible to read out a value other
than that given.

String Indicates the target value for the fraction of SDUs
lost or detected as erroneous. SDU error ratio is
defined only for conforming traffic. The value is
specified as 'mEe'. As an example a target SDU
error ratio of 510-3 would be specified as '5E3'
(e.g. AT+CGEQMIN=…,”5E3”,…).

String Indicates the target value for the undetected bit
error ratio in the delivered SDUs. If no error
detection is requested, Residual bit error ratio
indicates the bit error ratio in the delivered SDUs.
The value is specified as 'mEe'. As an example a
target residual bit error ratio of 5•10-3 would be
specified as '5E3' (e.g. AT+CGEQMIN=…,”5E3”,…)
Description
SDUs>
Integer Type A numeric parameter that indicates whether SDUs
detected as erroneous shall be delivered or not.
0 No
1 Yes
2 No detection or erroneous SDUs (Default)
3 Subscribed value (default value)

Integer The targeted time between request to transfer an
SDU at one SAP to its delivery at the other SAP, in
milliseconds.
<Traffic handling
Description
priority>
Integer Specifies the relative importance for handling of
all SDUs belonging to the UMTS bearer compared
to the SDUs of other bearers.
String See +CGDCONT command
8.13 AT+CGQMIN Quality of Service Profile (Minimum

Acceptable)

Set AT+CGQM +CME ERROR: <err>
minimum IN=[<cid> OK
acceptable [,<precede
ERROR
profile nce>
[,<delay>
[,<reliabili
ty>
[,<peak>
[,<mean>]
]]]]]
Show the AT+CGQM +CGQMIN: <cid>,
current IN? <precedence>, <delay>,
setting <reliability>, <peak>,
<mean>[<CR><LF>+CGQ
MIN: <cid>,
<precedence>, <delay>,
<reliability>, <peak>,
<mean>[…]]
OK
ERROR
Test if the AT+CGQM +CGQMIN: <PDP_type>,
command IN=? (list of supported
is <precedence>s), (list of
supported supported <delay>s), (list
of supported <reliability>s)
, (list of supported
<peak>s), (list of
supported
<mean>s)[<CR><LF>+CG
QMIN: <PDP_type>, (list of
supported <precedence>s),
(list of supported
<delay>s), (list of
supported <reliability>s) ,
(list of supported
<peak>s), (list of
supported <mean>s)[…]]
OK
ERROR
Description:
Note that this command is present for compatibility only. This
command is a dummy only and the +CGEQMIN command
must be used instead.

8.14 AT+CGQREQ Quality of Service Profile (Requested)

Set AT+CGQREQ +CME ERROR: <err>
quality of =[<cid> OK
service [,<preceden
ERROR
profile ce>
[,<delay>
[,<reliability
> [,<peak>
[,<mean>]]]]
]]
Show the AT+CGQREQ +CGQREQ: <cid>,
current ? <precedence>, <delay>,
setting <reliability>, <peak>,
<mean>[<CR><LF>+CGQREQ
: <cid>, <precedence>,
<delay>, <reliability>,
<peak>, <mean>[…]]
OK
ERROR
Test if AT+CGQREQ +CGQREQ: <PDP_type>,
the =? (list of supported
command <precedence>s),
is (list of supported <delay>s),
supporte (list of supported
d <reliability>s),
(list of supported <peak>s),
(list of supported <mean>s)
[<CR><LF>+CGQREQ:
<PDP_type>, (list of supported
<precedence>s), (list of
supported <delay>s),
(list of supported
<reliability>s),
(list of supported <peak>s),
(list of supported
<mean>s)[…]]
OK
ERROR
Description:

Note that this command is present for compatibility only. This
command is a dummy only and the +CGEQREQ command
must be used.
8.15 AT+CGREG GPRS Network Registration Status

Set command AT+CGREG=[<n>] +CME ERROR: <err>
OK
ERROR
Show the current AT+CGREG? +CGREG:
setting <n>,<stat>[,<lac>,
<ci>]
+CME ERROR: <err>
OK
ERROR
Test if the command AT+CGREG=? +CGREG: (list of
is supported. supported <n>s)
OK
ERROR
Unsolicited response +CGREG: <stat>

if reporting is +CGREG:
enabled <stat>[,<lac>,<ci>]
Description:
Controls the presentation of an unsolicited result code +CGREG:
<stat> when <n>=1 and there is a change in the GPRS/packet
domain network registration status of the MS, or code +CGREG:
<stat>[,<lac>,<ci>] when <n>=2 and there is a change of the
network cell.
The read command returns the status of result code presentation and
an integer <stat> which shows whether the network has currently
indicated the registration of the ME. Location information elements
<lac> and <ci> are returned only when <n>=2 and ME is registered
in the network.
Note: If the GPRS/Packet Domain MS also supports circuit mode
services, the +CGREG command and +CGREG: result code apply
to the registration status and location information for circuit
switched services.
Defined values:

<n> Description
0 Disable network registration unsolicited result
code. Default value.
1 Enable network registration unsolicited result
code
2 Enable network registration and location
information unsolicited result code
<stat> Description
0 Not registered, MS is not searching for a new
operator to register with
1 Registered, home network
2 Not registered, but MS is searching for a new
3 Registration denied
4 Unknown
5 Registered, roaming
<lac> Description
String type Two byte location area code in hexadecimal
format
<ci> Description
String type Four byte cell ID in hexadecimal format. For
GSM cells, the first two bytes will be zeros.
Example:
AT+CGREG=1
OK
AT+CGREG?
+CGREG: 0,2
OK
AT+CGATT=1
OK
+CGREG=1
8.15.1 +CGREG GPRS Network Unsolicited Response

Description:

The ouput format is +CGREG: <stat> when <n>=1. The unsolicited
response is output when there is a change in the GPRS/packet
domain network registration status of the MS. This can happen
when the user manually attaches or detaches to/from the GPRS
network (using +CGATT or +CGACT). The module is considered
registered to the network when the device is attached and it is not
registered when the module is detached from the GPRS network.
The code +CGREG: <stat>[,<lac>,<ci>] will be output when

<n>=2. This event happens when there is a change of the network
cell.
<stat> Description
0 Not registered, MS is not searching for a new
2 Not registered, but MS is searching for a new
4 Unknown
<lac> Description
String type Two byte location area code in hexadecimal
format
<ci> Description
String type Four byte cell ID in hexadecimal format. For
GSM cells, the first two bytes will be zeros.
8.16 AT+CGTFT Traffic Flow Template

Allows the TE to AT+CGTFT=[<cid>, OK
specify a Packet [<packet filter ERROR
Filter for a Traffic identifier>,
Flow Template - TFT <evaluation
that is used in the precedence index>
GGSN for routing of [,<source address
down-link packets and subnet mask>
onto different QoS [,<protocol number
flows towards the TE (ipv4) / next header
(ipv6)>
[,<destination port
range> [,<source
port range> [,<ipsec
security parameter
index (spi)> [,<type
of service (tos) (ipv4)
and mask / traffic
class (ipv6) and
mask> [,<flow label
(ipv6)> ]]]]]]]]]

Query template AT+CGTFT? +CGTFT: <cid>,
parameters <packet filter
identifier>,
<evaluation
precedence index>,
<source address and
subnet mask>,
<protocol number
(ipv4) / next header
(ipv6)>, <destination
port range>,
<source port
range>, <ipsec
security parameter
index (spi)>, <type
and mask / traffic
class (ipv6) and
mask>, <flow label
(ipv6)>
[<CR><LF>+CGTFT:
<cid>, <packet filter
identifier>,
<evaluation
precedence index>,
<source address and
subnet mask>,
<protocol number
(ipv4) / next header
(ipv6)>, <destination
port range>,
<source port
range>, <ipsec
security parameter
index (spi)>, <type
and mask / traffic
class (ipv6) and
mask>, <flow label
(ipv6)>
[…]]

Test if the command AT+CGTFT=? +CGTFT:
is supported <PDP_type>, (list of
supported <packet
filter identifier>s),
(list of supported
<evaluation
precedence
index>s), (list of
supported <source
address and subnet
mask>s), (list of
supported <protocol
number (ipv4) / next
header (ipv6)>s), (list
of supported
<destination port
range>s), (list of
supported <source
port range>s), (list of
supported <ipsec
security parameter
index (spi)>s), (list of
supported <type of
service (tos) (ipv4)
and mask / traffic
class (ipv6) and
mask>s), (list of
supported <flow
label (ipv6)>s)
[<CR><LF>+CGTFT:
<PDP_type>, (list of
supported <packet
filter identifier>s),
(list of supported
<evaluation
precedence
index>s), (list of
supported <source
address and subnet
mask>s), (list of
supported <protocol
number (ipv4) / next
header (ipv6)>s), (list
of supported
<destination port
Document Number 1206-3629, Rev. 2 range>s), (list112
of of 308
supported <source
port range>s), (list of
supported <ipsec
Description:
This command allows the TE to specify a Packet Filter - PF for a Traffic Flow Template -
TFT that is used in the GGSN for routing of down-link packets onto different QoS flows
towards the TE. The concept is further described in the 3GPP TS 23.060. A TFT consists
of from one and up to eight Packet Filters, each identified by a unique <packet filter
identifier>. A Packet Filter also has an <evaluation precedence index> that is unique
within all TFTs associated with all PDP contexts that are associated with the same PDP
address.
The set command specifies a Packet Filter that is to be added to the TFT stored in the MT
and used for the context identified by the (local) context identification parameter, <cid>.
The specified TFT will be stored in the GGSN only at activation or MS-initiated
modification of the related context. Since this is the same parameter that is used in the
+CGDCONT and +CGDSCONT commands, the +CGTFT command is effectively an
extension to these commands. The Packet Filters consist of a number of parameters, each
of which may be set to a separate value.
A special form of the set command, +CGTFT= <cid> causes all of the Packet Filters in the
TFT for context number <cid> to become undefined. At any time there may exist only one
PDP context with no associated TFT amongst all PDP contexts associated to one PDP
address. At an attempt to delete a TFT, which would violate this rule, an ERROR or
+CME ERROR response is returned. Extended error responses are enabled by the +CMEE
command.
The read command returns the current settings for all Packet Filters for each defined
context. In case no filter is defined the read command will return "OK" only.
The test command returns values supported as a compound value. If the MT supports
several PDP types, the parameter value ranges for each PDP type are returned on a
separate line. TFTs shall be used for PDP-type IP and PPP only. For PDP-type PPP a TFT
is applicable only when IP traffic is carried over PPP. If PPP carries header-compressed IP
packets, then a TFT cannot be used.
Defined values:
<cid>: a numeric parameter which specifies a particular PDP context definition (see the
+CGDCONT and +CGDSCONT commands).
<packet filter identifier>: Numeric parameter, value range from 1 to 8.
<source address and subnet mask>: Consists of dot-separated numeric (0-255)
parameters on the form 'a1.a2.a3.a4.m1.m2.m3.m4', for IPv4 and
'a1.a2.a3.a4.a5.a6.a7.a8.a9.a10.a11.a12.a13.a14.a15.a16.
m1.m2.m3.m4.m5.m6.m7.m8.m9.m10.m11.m12.m13.m14.m15.m16', for IPv6.
<protocol number (ipv4) / next header (ipv6)>: Numeric parameter, value range from 0
to 255.
<destination port range>: String consisting of dot-separated numeric (0-65535)
parameters on the form 'f.t'.
<source port range>:String consisting of dot-separated numeric (0-65535) parameters
on the form 'f.t'.
<ipsec security parameter index (spi)>: Hexadecimal parameter,
value range from 00000000 to FFFFFFFF.
<type of service (tos) (ipv4) and mask / traffic class (ipv6) and mask>:
Dot-separated numeric (0-255) parameters on the form 't.m'.
<flow label (ipv6)>: Hexadecimal parameter, value range from 00000 to FFFFF. Valid
for IPv6 only.
<evaluation precedence index>: Numeric parameter, value range from 0 to 255.

Some of the above listed attributes may coexist in a Packet Filter while others mutually
exclude each other, the possible combinations are shown in 3GPP TS 23.060.
8.17 AT*ENAP USB Ethernet Interface Control

Control the USB AT*ENAP=<state>,<i OK
Ethernet connection ndex> ERROR
state
+CME ERROR: <err>
Read the current AT*ENAP? *ENAP: <status>
setting
Test command to AT*ENAP=? *ENAP: (range of valid
show if the command <state>s),(range of
is supported valid <index>es)
OK
+CME ERROR: <err>
Description:
This command is used to enable or disable the USB Ethernet
Emulation communication interface, and to associate a particular
PDP Context with the interface. A PDP context is referenced which
must have been previously defined via the *EIAC command or the
+CGDCONT command. Also, an internet account must have been
previously created and defined via the *EIAC command.
A response of OK does not mean that a connection has been
established or disconnected. This simply means that the command
has been processed without any errors. To check the status of the
connection, use the check connection status command.
(AT*ENAP?)
When executing the command to create a USB Ethernet connection,

the response will be ERROR if a connection already exists.
When executing the command to disconnect a USB Ethernet

connection, the response will be ERROR if no connection exists.
Defined values:
<state> Description
0 Disconnect
1 Connect

<index> Description
Integer type Equivalent to
1-99 <index> in *EIAC
command and also
<cid> in +CGDCONT
<status> Description
0 Not connected
1 Connected
2 Connection setup in
progress
8.18 AT*EUPLINK Send Uplink Data

Send bytes of data on AT*EUPLINK=<cid> List of xxx:
an activated PDP [,<size>] *xxx: <parm1>,
context <parm2>, <parm3>
[:]
+CME ERROR: <err>
Read the current Not applicable Not supported
setting
Test command to Not applicable Not supported
show if the command
is supported
Description:
The command send <size> number of bytes uplink on an activated
PDP context defined by <cid>.
This command is intended for test purpose only.
Defined values:

<cid> Description
Integer type (PDP Context
Identifier) a numeric
parameter which
specifies a particular
PDP context
definition.
The parameter is local
to the TE-MT
interface and is used
in other PDP context-
related commands.
1....10 Supported values
<size> Description
Integer type Number of bytes sent
Range 0 - 65535 uplink on an activated
PDP context.
Default 512

9 Internet Accounts
9.1 AT*EIAAUR - Internet Account Configuration, Read

Authentication Parameters

Read the current AT*EIAAUR=[<index> List of existing IA(s)
authentication ,<bearer_type>] authentication
parameter settings params
*EIAAUR: <index>,
<bearer_type>,
<userid>,<password
>,,<auth_prot>,
<ask4pwd>
[:]
setting
Test command to AT*EIAAUR=? Range of parameters:
show if the command *EIAAUR: (0-255),(0-
is supported 4)
Description:
This command reads the authentication parameters of one (or all)
existing Internet Account(s).
Defined values:
<index> Description
0 Read Authentication
parameters of ALL
existing Internet
Accounts.
1....255 Write parameters of
<bearer_type>
Internet Account with
index as specified.
For range and more
details on <index>,
see under command
AT*EIAC
Note: When <bearer_type>=0 it is necessary that <index>=0 and vice versa.

<bearer_type> Description
0 All bearers.
1....4 Specific bearer. For
more information on
bearer types see
<bearer_type>
pararemer definitions
under command
AT*EIAC
<password> Description
String type Password for access
to the IP network.
Max 30 8-bit
characters.
<auth_prot> Description
Bit 0 None
Bit 1 PAP
Bit 2 CHAP
Bit 3 MS-CHAP
Bit 4 MS-CHAPv2
The authentication method is organised as 5 bit long field in which each bit indicates a
specific authentication method. The bitmask set, represents the Authentication methods
supported by the Internet Account in question (<index>, <bearer>). Default value = 00111
Note: By None it is meant that it doesn't matter what authentication method is supported
by the peer
9.2 AT*EIAAUW - Internet Account Configuration, Write

Authentication Parameters

Define authentication AT*EIAAUW=<index>
parameters ,<bearer_type>[,[<us
erid>][,[<password>]
[,[<auth_prot>][,[<as
k4pwd>]]]]]
setting

Test command to AT*EIAAUW=? Range of
show if the command Authentication
is supported parameters:
*EIAAUW: (1-255),(1-
4),(""),(""),
(00001-11111),(0-1)
Description:
This command specifies the authentication parameters of one (or all)
existing Internet Account(s).
Authentication parameters are used under any PPP negotiation as well as
under PS network connection establishment (context activation).
Note!
If the user do not specify both the parameters <Index> and
<bearer_type>, the command results in an error response.
Defined values:
<index> Description
1....255 Write of
<bearer_type>
index as specified.
For range and more
details on <index>,
see under command
AT*EIAC
1 PS bearer i.e. PS
connection over
UMTS/GPRS network.
2 CS bearer, NTCSD
connection over
UMTS/GSM network
<user_id> Description
String type Password for access
to the IP network.
Max 30 8-bit
characters.

<auth_prot> Description
Bit 0 None
Bit 1 PAP
Bit 2 CHAP
Bit 3 MS-CHAP
Bit 4 MS-CHAPv2
The authentication method is organised as 5 bit long field in which each bit indicates a
specific authentication method. The bitmask set, represents the Authentication methods
supported by the Internet Account in question (<index>, <bearer>). Default value =
00111As an example, 00111, i.e. bit2,bit1 and bit0 is set to 1. Indicating the support for
CHAP, PAP and None.
By None is meant that it doesn't matter what authentication method is supported by the
peer.
The value 0 (all the bits set to 0) is not allowed. At least one bit has to be set to 1
Note: Leading 0's does not need to be stated. E.g. 111 is the same as 00111.
9.3 AT*EIAC - Internet Account, Create

Create account/define AT*EIAC=<bearer_typ *EIAC:
general parameters e>[,[<name>]] <index>,<name>
Read the current AT*EIAC? List of created IA's:
setting *EIAC: <index>,
<bearer_type>,
<name>
:
Test command to AT*EIAC=? Range of general
show if the command parameters:
is supported *EIAC: (1-4),("")
Description:
This command is used to define the general parameters of an Internet
Account (IA).
When a new account is defined it is assigned an index which is
subsequently returned as an informational text response together with
bearer type and name of account. When using the IA configuration
command, one can not force the value of the index.
The other Internet Account commands can not be used to create an account.
The other AT commands have to indicate the index value of an existing
Account in combination with what kind of bearer the parameters are set for.
The exception is the Internet Account configuration commands where it is
implicit what the bearer type is (e.g. AT*EIAPSW - write PS bearer
parameters), then only index value is necessary.
Note!
When a PDP Context is defined via an AT command, an Internet Account
is automatically created with Packet Domain Service as the bearer and it

get's an index value with a one-to-one mapping to the specified <cid>
parameter value of the GPRS command. If the IA with that mapping to CId
value is already existing, the specific parameters of that IA is overwritten
(also when IA parameters are originally specified for another bearer than
PS). In the same way a PDP Context with the default values set is defined
when an IA is created with Packet Domain Service as the bearer, using the
AT*EIAC command. The <cid> of the PDP context will have a one-to-one
mapping with the PS bearer IA's index.
Note! If user does not specify any bearer type, the command results in an
error response.
Note! If user does not specify a name of the account, an autogenerated
name will be added to the account.
Note! The temporary or locked type of accounts are reserved for internal
applications use and not listed in the read command, nor possible to create
using this command.
Defined values:
1 PS Bearer, i.e. PS
connection over
UMTS/GPRS network.
2 CS Bearer, i.e. NTCSD
connection over
UMTS/GSM network
<name> Description
String type Each Internet Account
has a ”friendly” name.
Used mostly by MMI
application of phone.
Max 20 characters

<index> Description
1....255 Index of an account
within the specific
bearer type.
There might be
several accounts that
has the same index
value, but only one
account within a
given bearer type. So
it is the combination
of bearer type and
index that forms the
unique reference to
one specific Internet
Account.
9.4 AT*EIACSR - Internet Account Configuration, Read CSD

Bearer Capabilities

Read CSD parameters AT*EIACSR=[<index> List of IA's with CSD
of Internet Account ] parameters:
*EIACS: <index>,
<dialout_nbr>,
<dial_type>,
<data_rate>,
<data_compr>
[:]
setting
Test command to AT*EIACSR=? Range of parameters:
show if the command *EIACSR: (0-255)
is supported
Description:
This command is used to read the CS bearer parameters of one (or
all) CS bearer Internet Account(s).
Defined values:

<index> Description
0 Read CSD bearer
parameters of ALL
CSD bearer Internet
Accounts.
If no CS bearer IA's
exists, only OK is
submitted.
1....255 Read CSD bearer
parameters of the
specified Internet
Account.
For range and more
details on <index>,
see under *EIAC
command.
<dialout_nbr> Description
String type ISP phone number for
internal dial out
application to call
<dial_type> Description
0 Analogue modem.
1 ISDN modem.
<data_rate> Description
1 9600 kbps, GSM: 1
time slot * 9600
2 14400 kbps, GSM: 1
time slot * 14400
3 19200 kbps, GSM: 2
time slots * 9600
4 28800 kbps, GSM: 2
time slots * 14400 (or
3 TS*9600)
5 38400 kbps, GSM: 4
time slots * 9600

6 43200 kbps, GSM: 3
time slots * 14400
7 57600 kbps, GSM: 4
time slots * 14400
<data_compr> Description
0 V42bis data
compression off.
1 V42bis data
compression on.
Using default V42 bis
parameters for
dictionary size.
Negotiates
compression in both
directions, Rx and Tx.
9.5 AT*EIACSW - Internet Account Configuration, Write CSD

Bearer Capabilities

Define CSD AT*EIACSW=<index>[ ...
parameters of ,[<dialout_nbr>][,[<di
Internet Account al_type>][,[<data_rate
>][,[<data_compr>]]]]
]
setting
Test command to AT*EIACSW=? Range of CS
is supported *EIACSW: (1-
255),(""),(0,1),(1-
7),(0-1)
Description:
This command is used to define the CS bearer parameters of one (or all) CS
bearer Internet Account(s).
Note!
CS bearer IA's can only be used for internal applications only, to dial out to
an ISP providing IP network access (e.g. for WAP over CS). Normal CS
"modem style" dial-up networking and plain CS modem connections are
done by TE issuing the "legacy" AT commands as specified by . The

parameters for such calls (RLP parameters, V42bis parameters, HSCSD
parameters, etc.) are only stored in volatile memory, if not stored by using
&W command.
Note! If the user do not specify the parameters <Index>, the command
results in an error response.
Defined values:
<index> Description
1....255 Write CSD bearer
parameters of the
specified Internet
Account.
For range and more
details on <index>,
see under *EIAC
command.
<dialout_nbr> Description
String type ISP phone number for
internal dial out
application to call
<dial_type> Description
0 Analogue modem.
1 ISDN modem.
1 9600 kbps, GSM: 1
time slot * 9600
2 14400 kbps, GSM: 1
time slot * 14400
3 19200 kbps, GSM: 2
time slots * 9600
4 28800 kbps, GSM: 2
time slots * 14400 (or
3 TS*9600)
5 38400 kbps, GSM: 4
time slots * 9600
6 43200 kbps, GSM: 3
time slots * 14400

7 57600 kbps, GSM: 4
time slots * 14400
0 V42bis data
compression off.
1 V42bis data
compression on.
parameters for
dictionary size.
Negotiates
compression in both
9.6 AT*EIAD - Internet Account Configuration, Delete

Delete account AT*EIAD=<index>,<
bearer_type>
setting
Test command to AT*EIAD=? Range of parameters:
show if the command *EIAD: (0-255),(0-4)
is supported
Description:
Action command used to delete one specific (or all) existing Internet
Account(s). The other Internet Account commands (or GPRS AT
commands) can not be used to delete an account.
Note!
If the user do not specify both the parameters <Index> and
Defined values:
<index> Description
0 Delete ALL existing
<bearer_type>
Internet Accounts

<index> Description
1....255 Delete Internet
Account with index as
specified, and bearer
type as specified.
For ranges and more
details on <index>
see under *EIAC
command.
Note: When <index>=0 it is necessary that <bearer_type>=0 and vice versa.
0 All bearers
1....4 Specific bearer. see
definition of
<bearer_type> under
command *EIAC.
9.7 AT*EIALCPR - Internet Account Configuration, Read PPP

Parameters - LCP

Read LCP parameters AT*EIALCPR=[<index List of IA's with their
of Internet Account >,<bearer_type>] LCP parameters:
*EIALCPR: <index>,
<bearer_type>,
<accm>,<mru>,<pfc
>,<acfc>,<keep_alive
>,
<allowed_ncp>
[:]
setting
Test command to AT*EIALCPR=? Range of LCP
is supported *EIALCPR: (0-255),(0-
4)
Description:
This command is used to read the PPP LCP parameters of one
(or all) Internet Account(s).
Defined values:

<index> Description
0 Read LCP parameters
of ALL <bearer_type>
Internet Accounts.
1....255 Read LCP parameters
of <bearer_type>
index as specified.
For range and more
details on index, see
under command
*EIAC
0 All bearers
Used together with
Index=0, reading all
Internet Accounts of
all bearer types.
1....255 Specific bearers.
See definitions on
<bearers> under
command *EIAC
<accm> Description
0-FFFFFFFF Asynchronous Control
Character Map value,
as a hexadecimal
value.
Default is: 0
<mru> Description
1-1500 Max Receive Unit.
The value specified is
the recommended,
but any MRU between
this specified value
and 1500 will be
accepted.

<pfc> Description
0 00
Protocol Field
Compression
negotiation might not
be suggested.
Protocol Field
Compression
be accepted.
1 01
Protocol Field
Compression
negotiation might be
suggested.
Protocol Field
Compression
be accepted.
2 10
Protocol Field
Compression
be suggested.
Protocol Field
Compression
accepted.
3 11
Protocol Field
Compression
suggested.
Protocol Field
Compression
accepted.

<acfc> Description
0 00
Address Control Field
Compression
be suggested.
Compression
be accepted.
1 01
Compression
suggested.
Compression
be accepted.
2 10
Compression
be suggested.
Compression
accepted.
3 11
Compression
suggested.
Compression
accepted.
Default value
<keep_alive> Description
0 LCP keepalive
messages should not
be sent

1 LCP keepalive
messages should be
sent
<allowed_ncp> Description
0 Not supported
1 Network Control
Protocol IPCP allowed.
(bit0)
2 Network Control
Protocol IPv6CP
allowed (bit 1)
3 Both network control
protocols allowed (bit
0, bit 1)
9.8 AT*EIALCPW - Internet Account Configuration, Write PPP

Parameters - LCP

Define LCP AT*EIALCPW=<index ...
parameters of >,<bearer_type>[,[<a
Internet Account ccm>][,[<mru>][,[<pf
c>][,[<acfc>][,[<keep
_alive>][,[<allowed_n
cp>]]]]]]]
setting
Test command to AT*EIALCPW=? Range of LCP
is supported *EIALCPW: (1-
255),(1-4),(0-ffffffff),
(0-1500),(0-16),(0-
16),
(0-1),(0-3)
Description:
Action command used to define the PPP LCP parameters of an Internet
Account (IA).
This Internet Account command can not be used to create an account.
Note! If the user do not specify both the parameters <Index> and
Defined values:
<index> Description
1....255 Write LCP parameters
of <bearer_type>
index as specified.
For range and more
details on index, see
under command
*EIAC
connection over
UMTS/GPRS network.
connection over
UMTS/GSM network
3 Bluetooth Bearer, i.e.
to connect with
remote Bluetooth LAN
device
4 External Interface.
Test value, for "dial-
in" use
<accm> Description
0-FFFFFFFF Asynchronous Control
Character Map value,
as a hexadecimal
value.
Default is: 0

<mru> Description
1-1500 Max Receive Unit.
The value specified is
the recommended,
but any MRU between
this specified value
and 1500 will be
accepted.
<pfc> Description
0 00
Protocol Field
Compression
be suggested.
Protocol Field
Compression
be accepted.
1 01
Protocol Field
Compression
suggested.
Protocol Field
Compression
be accepted.
2 10
Protocol Field
Compression
be suggested.
Protocol Field
Compression
accepted.

<pfc> Description
3 11
Protocol Field
Compression
suggested.
Protocol Field
Compression
accepted.
<acfc> Description
0 00
Compression
be suggested.
Compression
be accepted.
1 01
Compression
suggested.
Compression
be accepted.
2 10
Compression
be suggested.
Compression
accepted.

<acfc> Description
3 11
Compression
suggested.
Compression
accepted.
0 LCP keepalive
messages should not
be sent
1 LCP keepalive
messages should be
sent
<allowed_ncp> Description
0 Not
supported
1 Network Control
Protocol IPCP allowed.
(bit0)
2 Network Control
Protocol IPv6CP
allowed (bit 1)
3 Both network control
protocols allowed (bit
0, bit 1)
9.9 AT*EIALSR - Internet Account Configuration, Read Link

Socket Parameters

Read link-socket AT*EIALSR=[<index>, List of existing IA(s)
parameters <bearer_type>] link-socket params
*EIALSR: <index>,
<bearer_type>,
<link_socket>
[:]
setting
Test command to AT*EIALSR=? Range of parameters:
show if the command *EIALSR: (1-255),(1-
is supported 4),(0-1)
Description:
Action command that reads the status of the link socket parameter
of one (or all) existing Internet Account(s).
Defined values:
<index> Description
0 Read status of the
<link_ socket>
parameter of ALL
<bearer_type>
Internet Accounts.
1....255 Read general
parameters of
<bearer_type>
index as specified.
For range and more
details on <index>
see under command
*EIAC
connection over
UMTS/GPRS network.
connection over
UMTS/GSM network

<link_socket> Description
0 Disable link socket.
1 Enable link socket.
9.10 AT*EIALSW - Internet Account Configuration, Write Link

Socket Parameters

Enable/disable link AT*EIALSW=<index>, ...
socket. <bearer_type>[,[<lin
k_socket>]]
setting
Test command to AT*EIALSW=? Range of parameters:
show if the command *EIALSW: (1-255),(1-
Description:
Action command that enables or disables the link socket.
Defined values:
<index> Description
1....255 Write general
parameters of
<bearer_type>
index as specified.
For range and more
details on <index>
see under command
*EIAC
connection over
UMTS/GPRS network.
connection over
UMTS/GSM network

<link_socket> Description
0 Disable link socket.
1 Enable link socket.
9.11 AT*EIAIPCPR - Internet Account Configuration, Read PPP

Parameters - IPCP

Read IPCP parameters AT*EIAIPCPR=[<index List of IA's with PPP
of Internet Account >,<bearer_type>] IPCP parameters:
*EIAIPCPR: <index>,
<bearer_type>,
<own_IP_addr>,
<prim_DNS_addr>,
<sec_dns_addr>,
<header_compr>
[:]
setting
Test command to AT*EIAIPCPR=? Range of parameters:
show if the command *EIAIPCPR: (0-
Description:
This command reads out the IPCP parameters of one (or all)
Internet Accounts
Defined values:
<index> Description
0 Read IPCP parameters
of ALL <bearer_type>
Internet Accounts.
1....255 Read IPCP parameters
of <bearer_type>
index as specified.
For range and more
details on <index>
see under command
*EIAC

0 All bearers.
Used together with
all bearer types.
1....4
<ip_addr> Description
String of format IPv4 host address
"a.b.c.d" ME's own IP address.
Default set to 0.0.0.0,
which means request
for dynamic IP
address to be
allocated by network
upon connection.
<prim_dns_addr> Description
String of format IPv4 primary DNS
"a.b.c.d" server address
Default set to
0.0.0.0.0, which
means request for
dynamic IP address to
be allocated by
network upon
connection.
<sec_dns_addr> Description
String of format IPv4 secondary DNS
which means request
for dynamic IP
address to be
upon connection.

<header_compr> Description
0? Header compression
off Default value
Or various protocol
numbers for different
types of header
compression?
on
9.12 AT*EIAIPCPW - Internet Account Configuration, Write PPP

Parameters - IPCP

Define IPCP AT*EIAIPCPW=<index ...
parameters of >,<bearer_type>[,[<
Internet Account ip_addr>][,[<prim_dn
s_addr>][,[<sec_dns_
addr>][,[<header_co
mpr>]]]]]
setting
Test command to AT*EIAIPCPW=? Range of PPP IPCP
is supported *EIAIPCPW: (1-
255)(1-4),(""),(""),
(""),(0-1)
Description:
Action command that specifies the PPP IPCP parameters of one (or all)
Internet Accounts.
The command is used to specify the IP addresses to be used, both under
PPP negotiations as well as under PS network connection establishment
(context activation). If "0" values are given necessary parameters are
requested to be genereated dynamically by the network one attaches to. If
specific values are set, it means requesting for static IP addresses to be
used.
Note!
Values stored here are not the ones used when doing PS dial-up connection
from external application (TE), since TE in this case has it's own IP
addresses to negotiate with the network (what TE sends is forwarded by
ME's PPP proxy to network).
Note! PPP parameters are relevant for all bearer types, but mostly for
internal calls.

Defined values:
<index> Description
1....255 Write IPCP parameters
of <bearer_type>
index as specified.
For range and more
details on <index>
see under command
*EIAC
connection over
UMTS/GPRS network.
connection over
UMTS/GSM network
<ip_addr> Description
String of format IPv4 host address
"a.b.c.d" ME's own IP address.
which means request
for dynamic IP
address to be
upon connection.
<prim_dns_addr> Description
String of format IPv4 primary DNS
Default set to
0.0.0.0.0, which
means request for
dynamic IP address to
be allocated by
network upon
connection.

<sec_dns_addr> Description
String of format IPv4 secondary DNS
which means request
for dynamic IP
address to be
upon connection.
off Default value
Or various protocol
numbers for different
types of header
compression?
on
9.13 AT*EIAPSW - Internet Account Configuration, Write PS

Bearer Parameters

Write PSD parameters AT*EIAPSW=<index>[ ...
of Internet Account ,[<pref_serv>][,[<apn
>]
[,[<traffic_class>][,[<
header_compr>][,[<d
ata_compr>]]]]]]
setting
Test command to AT*EIAPSW=? Range of PS
is supported *EIAPSW: (1-255),(0-
1),(""),(0-4),
(0-1),(0-1)
Description:
Action command used to specify PS specific parameters of one (or all) PS
bearer Internet Account.
This command is used to define the most relevant Packet Switched (PS)

data connection parameters. Note that all PS parameters of this command
except <pref_serv> can also be configured using the normal R'99 GPRS
commands, see [7] (plus a lot more PS parameters).
Note! For PS bearers, the <index> maps to the <ContextId> used in the
GPRS commands.
Note! If the user do not specify the parameter <Index>, the command
results in an error response.
Defined values:
<index> Description
1....255 Write packet switched
bearer parameters of
index as specified.
For range and more
details on <index>
see under command
*EIAC
<pref_serv> Description
0 Preferred service -
Packet Switched only
Means that an
incoming call will be
denied when running
PS connection(s), if
there are not system
resources to serve
both.
Automatic
Means that an
incoming call will put
GPRS or UMTS packet
switched
connection(s) on hold
if there are not
system resources to
serve both.
<apn> Description
String type APN

<traffic_class> Description
0 Conversational. Gives
best effort
1 Streaming
For e.g. Voice over IP
and other QoS (delay)
critical applications
2 Interactive
For e.g. Video/Audio
over IP and other QoS
(delay+data volume)
critical applications.
3 Background
For e.g. Chat and
applications with
some time
requirements and
low-medium data
volume.
4 Subscribed value
For non-time critical
applications
0 Header compression
off. Default value
on.
RFC 1144 (Van
Jacobson) or RFC
2507 depending on
UMTS or GSM
network.
0 Data compression off.

1 Data compression on.
parameters for
dictionary size.
Negotiates
compression in both
9.14 AT*EIAPSR - Internet Account Configuration, Read PS

Bearer Parameters

Read PS parameters AT*EIAPSR=[<index>] List of IA's with PS
of Internet Account parameters:
*EIAPSR: <index>,
<pref_serv>,<apn>,
<traffic_class>,
<header_compr>,
<data_compr>
[:]
setting
Test command to AT*EIAPSR=? Range of PS
is supported *EIAPSR: (0-255)
Description:
Action command that reads the wanted Packet Switched (PS)
parameters from one (or all) primary PS bearer Internet Account(s).
Defined values:
<index> Description
0 Read packet switched
ALL existing PS bearer
Internet Accounts.
If no PS bearer IA's
exists, only OK is
submitted.

<index> Description
1....255 Read packet switched
Index as specified.
For range and more
details on <index>
see under command
*EIAC
<pref_serv> Description
Packet Switched only
Means that an
incoming call will be
denied when running
PS connection(s), if
there are not system
resources to serve
both.
Automatic
Means that an
incoming call will put
GPRS or UMTS packet
switched
connection(s) on hold
if there are not
system resources to
serve both.
<apn> Description
String type APN
0 Conversational. Gives
best effort

1 Streaming
For e.g. Voice over IP
and other QoS (delay)
critical applications
2 Interactive
For e.g. Video/Audio
over IP and other QoS
(delay+data volume)
critical applications.
3 Background
For e.g. Chat and
applications with
some time
requirements and
low-medium data
volume.
4 Subscribed value
For non-time critical
applications
off. Default value
on.
RFC 1144 (Van
Jacobson) or RFC
2507 depending on
UMTS or GSM
network.
0 Data compression off.
1 Data compression on.
parameters for
dictionary size.
Negotiates
compression in both

9.15 AT*EIAR - Internet Account Configuration, Read General
Parameters

Read the current AT*EIAR=[<index>][,[ List of existing IA(s)
authentication <bearer_type>]] authentication
parameter settings params
*EIAR: <index>,
<bearer_type>,
<name>
[:]
setting
Test command to AT*EIAR=? Range of general
is supported *EIAR: (0-255),(0-4)
Description:
This command reads out the general parameters of one or several Internet
Accounts.
Note: When <index>=0 it is necessary that <bearer_type>=0 and vice
versa.
Defined values:
<index> Description
0 Read general
parameters of ALL
existing
<bearer_type>
Internet Accounts.
1....255 Read general
parameters of
<bearer_type>
given index.
0 All bearers
Used together with
all bearer types.

1....4 Specific bearer. See
definitions on
<bearer_type> under
command *EIAC
<name> Description
Used mostly by MMI
Max 20 characters
9.16 AT*EIAW - Internet Account Configuration, Write General

Parameters

Define authentication AT*EIAW=<index>,< ...
parameters bearer_type>[,[<nam
e>]]
setting
Test command to AT*EIAW=? Range of parameters:
show if the command *EIAW: (1-255),(1-
is supported 4),("")
Description:
Action comamnd that specifies the general parameters of the Internet
Account.
Defined values:
<index> Description
1....255 Write general
parameters of
<bearer_type>
index as specified.

connection over
UMTS/GPRS network.
connection over
UMTS/GSM network
<name> Description
Used mostly by MMI
Max 20 characters
9.17 AT*EIARUTR - Internet Account Configuration, Read

Routing Table Parameters

Read Routing table AT*EIARUTR= List of IA's with their
parameters of [<index>,<bearer_ty Routing table
Internet Account pe>] parameters:
*EIARUTR: <index>,
<bearer_type>,
<IP-version>,
<prefix>,
<destination_address
>,<nexthop_address
>
[:]
setting
Test command to AT*EIARUTR=? Range of Routing
show if the command table parameters:
is supported *EIARUTR:
(1-255),(0-4),(""),
(0-32/0-128),(""),("")
Description:
This command reads the Routing table parameters of one Internet
Account.
Defined values:

<index> Description
0 Read Routing table
parameters of ALL
<bearer_type>
Internet Accounts.
1....255 Read Routing table
parameters of
<bearer_type>
index as specified.
0 All bearers
Used together with
all bearer types.
1....4 Specific bearer. See
bearer definitions
under the *EIAC
command
<prefix> Description
(0....32) IPv4:
Value used to create a
IPv4 subnet mask.
Indicates how many
bits that should be
set to 1 in the mask.
0 indicates default
route.
A value of 24 will
result in the following
subnet mask:
255.255.255.0.
<IP_version> Description
String format "IP" Internet Protocol (IETF
STD 5)

<destination_address> Description
String of format IPv4 address of the
"a.b.c.d" destination host.
An entry with a value
of 0.0.0.0 is
considered as a
default route.
<nexthop_address> Description
"a1.a2.a3.a4" adjacent host or
router to which the
packet should be sent
next.
Not utilized for point-
to-point connections
9.18 AT*EIARUTW - Internet Account Configuration, Write


Set Routing table AT*EIARUTW= ...
parameters of <index>,<bearer_typ
Internet Account e>,<IP-
version>,<prefix>,<d
estination_address>,
<nexthop_address>
setting
Test command to AT*EIARUTW=? Range of Routing
is supported *EIARUTW: (1-
255),(1-4),(""),(0-1),
(0-32 / 0-128),(""),("")
Description:
This command specifies one row of parameters in the Routing table of one
Internet Account. All parameters <IP-
version>,<prefix>,<destination_address>,<nexthop_address> must be
given regardless if only one parameter is to be set.
Note! For IPv6 addresses, the notation :: can be used, but only once. e.g.
Dest addr. FFFF:FFFF:0:0:0:0:0:0:0:0:0:0:0:0:0:1 can be written like
FFFF:FFFF::1

Note! If the user do not specify all parameters, the command results in an
error response
Defined values:
<index> Description
1....255 Write Routing table
parameters of
<bearer_type>
index as specified.
connection over
UMTS/GPRS network.
connection over
UMTS/GSM network
(0....32) IPv4:
IPv4 subnet mask.
Indicates how many
bits that should be
0 indicates default
route.
A value of 24 will
subnet mask:
255.255.255.0.
STD 5)

of 0.0.0.0 is
considered as a
default route.
router to which the
next.
9.19 AT*EIARUTD - Internet Account Configuration, Delete


Delete Routing table AT*EIARUTD= ...
parameters of <index>,<bearer_typ
Internet Account e>[,<IP-
version>,<prefix>,<d
estination_address>,
<nexthop_address>]
setting
Test command to AT*EIARUTD=? Range of Routing
is supported *EIARUTW: (1-
255),(1-4),(""),(0-1),
(0-32 / 0-128),(""),("")
Description:
This command deletes the Routing table parameters of one Internet
Account. All parameters <IP-
version>,<prefix>,<destination_address>,<nexthop_address> must be
given to delete one row in the specified routing table.
Note! For IPv6 addresses, the notation :: can be used, but only once. e.g.
Dest addr. FFFF:FFFF:0:0:0:0:0:0:0:0:0:0:0:0:0:1 can be written like
FFFF:FFFF::1
Note! If the user specify <index> and <bearer_type> parameters only, all
defined IPv4 and IPv6 routes will be removed.
Defined values:
<index> Description
1....255 Delete parameters of
<bearer_type>
index as specified.
connection over
UMTS/GPRS network.
connection over
UMTS/GSM network
(0....32) IPv4:
IPv4 subnet mask.
Indicates how many
bits that should be
0 indicates default
route.
A value of 24 will
subnet mask:
255.255.255.0.
STD 5)

of 0.0.0.0 is
considered as a
default route.
router to which the
next.

10 GPS Interoperability
10.1 AT*E2GPSCTL GPS Positioning Control

Enable & Disable the AT*E2GPSCTL=<mod OK
GPS positioning e>[,<fix_interval>[,< +CME ERROR: <err>
function debug>]]]
Read the current AT*E2GPSCTL? *E2GPSCTL:
setting and receiver <mode>,<fix_interval
status >,
<debug>
Test command to AT*E2GPSCTL=? *E2GPSCTL: (list of
show if the command supported<modes>s)
is supported , (list of suppported
<fix_interval>s),(list
of suppported
<debug>s)
OK
+CME ERROR: <err>
Description:
This command is used to turn the GPS receiver function on and off,
and to optionally configure the resulting NMEA data stream. When
<mode>=0, all ongoing GPS operations will be stopped, and
receiver will be powered down. For <mode>=1, GPS operation will
begin immediately, whereas for <mode>=2 the GPS operation will
be enabled but will not begin until one or more blocks of assistance
ephemeris data has been transferred using AT*E2GPSEPH. Also,
for <mode>=2 a reference time must also be transferred using
AT*E2GPSTIME - note that time must be sent prior to sending any
ephemeris data.
For <fix_interval>=0, a single position request will be generated.
The NMEA data stream will include only a single instance of fix
data and then stop. The GPS will then return to <mode>=0 until the
next position request is received.
Note that for third party applications (i.e. mapping and navigation
apps), the action of opening the NMEA virtual COM port will cause
the GPS receiver to be automatically enabled, thus sending this
command with <mode>=1 is not necessary to simply enable the
GPS for these applications.
Defined values:

<mode> Description
0 Disable GPS
positioning
1 Enable GPS
positioning in
standalone mode
Default value
2 Enable GPS
positioning in
external assistance
mode
3 ME-Based A-GPS
mode
Not Supported
4 ME-Assist A-GPS
mode
Not Supported
5 Test Mode (single
satellite simulator
mode)
<fix_interval> Description
1 - 60 Periodic interval (in
seconds) for the
NMEA sentence
output
1 is default value
<debug> Description
0 Disable the
proprietary NMEA
debug parameters
Default value
1 Enable the proprietary
NMEA debug
parameters
10.2 AT*E2GPSSTAT Set GPS Status unsolicited response

Set control for AT*E2GPSSTAT=<mo OK
*E2GPSSTAT de> +CME ERROR: <err>
unsolicited response
Read the current AT*E2GPSSTAT? *E2GPSSTAT:
setting and status <mode>,<status>,<
T_status>
Test command to AT*E2GPSSTAT=? OK
show if the command +CME ERROR: <err>
is supported
Description:
This command is used to enable or disable the *E2GPSSTAT
unsolicited response. When enabled, this response will be generated
by the wireless modem whenever a change in the GPS receiver
status occurs.
Note that the GPS receiver will stay in "Searching" status
indefinitely when satellite signal levels are too weak to obtain a
position fix. The searching mode of the GPS receiver consumes the
largest amount of power. Therefore, it is recommended that any
GPS control application using this AT interface should maintain a
search timer whenever the GPS has been enabled using
AT*E2GPSCTL. The application should then monitor the <status>
of the receiver and return the mode to Disabled after a reasonable
amount of time. 300 seconds is recommended for this timer value.
The <T_status> parameter indicates the temperature status of the
system. Under certain conditions the module will force the <status>
of the GPS receiver to Off. When the application detects that the
GPS status has autonomously changed to Off without a
corresponding <mode> change request using AT*E2GPSCTL, then
the <T_status> value can be used to determine the cause.
<T_status>=2 indicates a critical condition where GPS must be
forced Off regardless of <status> in order to prevent possible
thermal damage to the module due to excessive heat inside the host
computer. Further GPS operation will be prevented until the
<T_status> value drops below 2.
<T_status>=1 indicates an intermediate condition where GPS

searching time will be limited automatically by the module in order
to avoid uneccessary power consumption. When this condition is
entered the <status> value will switch from Searching to Off after a
specific amount of time. The application is free to initiate a new
search using AT*E2GPSCTL at any time during this condition. The
GPS receiver will remain in <status>=2 indefinitely during this
condition, but when the signal conditions result in a temporary loss
of fix, the timer will be started and the behavior described above
will then apply.

Note that when the GPS has been disabled due to these thermal
conditions, once the condition has passed the module will
autonomously return the GPS receiver to the last <mode> requested
by the application in AT*E2GPSCTL. Therefore, an application can
choose to ignore this <T_status> value, and to take no action when
<status> temporarily changes to Off.
Defined values:
<mode> Description
0 Disable the
unsolicited response
1 Enable the unsolicited
response
0 GPS receiver Off
1 GPS receiver
Searching
2 GPS receiver Locked
and Tracking
<T_status> Description
0 Temperature Normal
1 GPS Searching time
limited.
2 Module over
temperature and GPS
disabled.
10.2.1 *E2GPSSTAT - GPS Status unsolicited response

*E2GPSSTAT: <mode>,<status>,<T_status>
10.3 AT*E2GPSEPH Set External Ephemeris

Write external AT*E2GPSEPH=<form >
ephemeris assistance at_version>,<more>, OK
data for one SV <length><CR><epdu
+CME ERROR: <err>
><Ctl-Z>

setting
Test command to AT*E2GPSEPH=? *E2GPSEPH: (list of
show if the command supported<format_ve
is supported rsion>s), (list of
suppported
<mode>s)
OK
+CME ERROR: <err>
Description:
This command is used to transfer GPS assistance data for a single
satellite (SV) after starting the receiver in external assistance mode
using AT*E2GPSCTL. This command is used repeatedly until
assistance data for all available SVs has been transferred. Sending
the last block of data is indicated with the <more> parameter, which
causes the GPS receiver to begin operation. Note that reference time
must be provided with the command AT*E2GPSTIME prior to
using this command.
The ephemeris data is transferred in a single block of hexadecimal
information referred to as an EPDU, similar in intent to the TPDU
transfer used for SMS messages. While the data members of
ephemeris are well defined in ICD-GPS-200, Rev C and in 3GPP
TS 44.031 v.5.13.0 table A.19, the specific bit-packing and byte-
alignment of this data is not standardized. Thus, the EPDU format is
defined below.
The TA shall send a four character sequence
<CR><LF><greater_than><space> (IRA 13, 10, 62, 32) after the
command line is terminated with <CR>; after that the EPDU can be
transferred from the host to the ME/TA.
Defined values:
<format_version> Description
Integer Version identifier for
the format of the
EPDU
1 Initial format
Default value
2....255 reserved values

<more> Description
0 This is the final
ephemeris block to be
sent
1 There are more
ephemeris blocks to
follow this one
<length> Description
Integer Value indicating the
length of the actual
EPDU data unit in
octets
<epdu> Description
Unquoted A block of
hexadecimal String uncompressed
ephemeris assistance
data for a single SV
represented as 2
ASCII hexadecimal
characters for each
data octet.
<mode> Description
0 External ephemeris
not supported
1 Generic ephemeris
2 LTO ephemeris
10.3.1.1 EPDU Format 1 definition
10.4 AT*E2GPSTIME Set GPS Reference Time

Provide the current AT*E2GPSTIME=<tow OK
time and date for GPS >,<week> +CME ERROR: <err>
assistance

setting
Test command to AT*E2GPSTIME=? OK
is supported
Description:
This command is used to to provide a current reference time to the
GPS receiver when it is operating in assisted mode. Format is in
GPS time as defined in ICD200.
Note that this command must be sent prior to the command
AT*E2GPSEPH.
Defined values:
<tow> Description
Integer GPS time of week
0 - 403,199 (tow)
<week> Description
Integer GPS week
0 - 1023
10.5 AT*E2GPSCLM Clear GPS Cache Memory

Clear the GPS cache AT*E2GPSCLM OK
memory +CME ERROR: <err>
setting
Test command to ATE2GPSCLM=? OK
is supported
Description:
This command is used to clear the NVM memory used for the GPS
cache. This data includes both almanac and SV ephemeris data
acquired either via assisted-mode or standalone operation.
This command is intended to be used to facilitate cold start
performance testing. Use of this command during normal operation
is not expected. Note that there is no facility to restore factory-
default almanac data after the use of this command. The almanac

must be acquired via normal operation either over the air or
assistance data sources.
This command should not be sent while the GPS system is running.
Only use this command during *E2GPSCTL <mode>=0.
10.6 AT*E2GPSNPD GPS NMEA Port Discovery

Determine the correct AT*E2GPSNPD OK
USB interface used for +CME ERROR: <err>
NMEA data
setting
Test command to ATE2GPSNPD=? OK
is supported
Description:
This command is used to trigger the device to activate a USB virtual
com port as the NMEA output port. There are no parameters or
return values to be managed with this command - it must be sent
simply to facilitate a port discovery mechanism internal to the GPS-
capable data card.
This command must be sent prior to any other GPS-related
commands. Note that this command must be sent on the correct
USB virtual COM port - that is, this command is sent on the same
port that will be used for output of the NMEA data. All other GPS-
related commands must be sent on the primary device management
channel.
The effect of this command is to convert the associated COM to an

NMEA-only port. After execution of the command the port will no
longer accept data transmitted from the host, including further AT
commands, and it will also suppress all AT unsolicted responses
that would otherwise be expected to appear on the port.

11 Identification
11.1 AT Attention Command
Possible
Description Command
Responses
Checks the communication AT OK
between the MS and +CME
application ERROR
<err>
Description:
This command is used to determine the presence of an MS. If the
MS supports AT commands, it returns an OK final result code.
11.2 AT+CGMI Read MS Manufacturer Identification

Request AT+CGMI <manufacturer>
manufacturer +CME ERROR: <err>
identification
Test if the command AT+CGMI=? OK
is supported ERROR
Description:
Causes the MS to return one or more lines of information text
<manufacturer>.
Defined values:
<manufacturer> Description
Sony Ericsson This company’s name is displayed.
Example:
AT+CGMI
Sony Ericsson
OK
11.3 AT+CGMM Read MS Model Identification

Request the model AT+CGMM <model>
identification +CME ERROR: <err>

Test if the command AT+CGMM=? OK
is supported ERROR
Description:
Causes the MS to return one or more lines of information text
<model>, determined by the MS manufacturer.
Defined values:
<model> Description
String type Model name for the transceiver unit
Example:
AT+CGMM
PC300
OK
11.4 AT+CGMR Read Revision Identification

Request revision AT+CGMR <revision>
identification string +CME ERROR:
<err>
Test if the command is AT+CGMR OK
supported =? ERROR
Description:
This command causes the module to return a string containing
information about the software revision.
Also implemented as AT+GMR.
Defined values:
<revision> Description
String An ASCII string containing the software revision
type
Example:
AT+CGMR
R1A017
OK
11.5 AT+CGSN Read Product Serial Number Identification

Request product serial AT+CGSN <sn>
number +CME ERROR:
<err>
Test if the command is AT+CGSN OK
supported =? ERROR
Description:
This command causes the module to return the IMEI (International
Mobile station Equipment Identity), which identifies the individual
ME.
Example:
AT+CGSN
004601013266310
OK
11.6 AT+GCAP Capabilities

Request complete AT+GCAP +GCAP: +CGSM, +DS
capability list OK
Description:
This command returns the module’s capabilities.
Defined values:
Capabilities Description
+CGSM Support for GSM commands
+DS Support for V.42bis compression
Example:
AT+GCAP
+GCAP: +CGSM, +DS
OK
11.7 AT+GMI Request Manufacturer Identification

Read manufacturer’s AT+GMI <manufacturer>
name OK
Description:
This command returns the name of the manufacturer.
Equivalent to +CGMI
Defined values:

Parameters Description
<manufacturer>
Sony Ericsson The name of the manufacturer.
Example:
AT+GMI
Sony Ericsson
OK
11.8 AT+GMM Request Model Identification

Read the model AT+GMM <model>
identification OK
Description:
This command returns the identification of the specific module
model.
Equivalent to +CGMM
Defined values:
Parameter Description
<model>
String type Model name for the transceiver unit
Example:
AT+GMM
PC300
OK
11.9 AT+GMR Revision Identification

Read software AT+GMR <revision>
revision identification. OK
Description:
This command returns the software revision.
Equivalent to +CGMR
Defined values:
Parameters Description
<revision>
String 6 characters
Example:
AT+GMR

R1A001
OK
11.10 ATI Identification Information

Read identification ATI[<value>] <information>
information
Test if the command ATI=? I: (0,1,3,5,7,9)
is supported and
which optional
information types
Description:
This command causes the DCE to transmit one or more lines of
text, followed by a final result code. As an option, <value> can be
used to select from among multiple types of identifying information
as shown in the table below.
Defined values:
<value> Description
0 Model identification. Equivalent to +GMM
1 Software revision. Equivalent to +GMR
3 Modem manufacturer name
5 Listing of active settings
7 Modem Configuration Profile, i.e. brief listing of
the modem functionality: Bluetooth, IrDA,
modem type etc.
9 PnP (Plug n Play) identification
Examples:
ATI0
PC300
OK
ATI1
R1A001
OK
ATI3
Sony Ericsson
OK
ATI=5
Configuration Settings on Channel 1
&C: 1
&D: 2

*EIAC: 1,1,"PS Account 1"
*ELIN: 1
+CBST: 0,0,1
+CDIP: 0,0
+CGACT: 1,0
+CGATT: 1
+CGDCONT: 1,"IP","isp.internet","0.0.0.0",0,0
+CGEQMIN: 1,3,0,0,0,0,0,0,"0E0","0E0",2,0,0
+CGEQREQ: 1,4,0,0,0,0,2,0,"1E4","1E5",0,0,0
+CGEREP: 0,0
+CGQMIN: 1,0,0,0,0,0
+CGQREQ: 1,0,0,3,0,0
+CHSN: 0,1,0,4
+CHSR: 0
+CHSU: 0
+CMEE: 1
+CMUX: 0,0,1,31,10,3,30,10,2
+CR: 0
+CRC: 0
+CRLP: 61,61,48,6,0
+CRLP: 120,120,48,6,2,3
+CSCS: "GSM"
+CV120: 1,1,1,0,0,0
+CVHU: 0
+DR: 0
+DS: 3,0,1024,32
+ICF: 3,3
+IFC: 2,2
+ILRR: 0
+IPR: 115200
E: 1
M: 0
Q: 0
S0: 000
S10: 002
S2: 128
S3: 013
S4: 010
S5: 008
S6: 002
S7: 050
S8: 002
V: 1
X: 4
OK
ATI7
PC Card Configuration Profile
Product Type Type II PC Card
Interfaces USB
Options RLP, V42bis
OK
ATI9
(0136SE101D\\MODEM\\PC30091)
OK

12 Serial Interface
12.1 AT&C Circuit 109 (DCD) Control

Set behavior of AT&C[<value>] OK
carrier detect ERROR
Show the current AT&C? &C: <value>
setting OK
Test if the command AT&C=? &C: (list of supported
OK
Description:
Determines how ITU-T V.24 circuit 109 (Data Carrier Detect)
relates to the detection of a received line signal from the remote
end.
Defined values:
<value> Description
0 DCD always on
1 DCD follows the connection. Default value
Note: If in online command mode, while running a TCP/IP session
through AT Commands, DCD will only be updated when returning
to online data mode using ATO.
12.2 AT&D Circuit 108 (DTR) Response

Control actions from AT&D[=][<value>] OK
DTE ERROR
Show the current AT&D? &D: <value>
setting OK
Test if the command AT&D=? &D: (list of supported
OK
Description:
Controls all actions initiated by data terminal ready from DTE.
This command controls the behavior of online data state when the
Data Terminal Ready (DTR - circuit 108.2) line is deasserted by
the DTE.

Defined values:
<value> Description
0 Ignore.
1 When in on-line data mode, deassert DTR
switches to on-line command mode.
2 When in on-line data mode, deassert DTR
closes the current connection and switch to
off-line command mode. (Default value)
12.3 ATV DCE Response Format

Set DCE response ATV[=]<value> OK
format ERROR
Show the current ATV? V: <value>
setting
Test if the command ATV=? V: (list of supported
Description:
Select either descriptive or numeric response codes. The ATV
command sets the verbose numeric response codes and strips off the
<S3><S4> additions to the command response.
It shall be noted that in the case where a final result code is pending,
this will delay any unsolicited result codes to not be returned until
after the final result code has been sent.
Defined values:
<value> Description
0 Display numeric result codes
1 Display verbose result codes. Default value
List of result codes
ATV1/ATV=1 ATV0/ATV=0 Description

OK 0 Acknowledges execution of a
command
Final

ATV1/ATV=1 ATV0/ATV=0 Description
CONNECT 1 A connection has been
established; the DCE is
moving from command state
to online data state
Intermediate
RING 2 The DCE has detected an
incoming call signal from the
network
Unsolicited
NO 3 The connection has been
CARRIER terminated or the attempt to
establish a connection failed
Intermediate
ERROR 4 Command not recognized,
command line maximum
length exceeded, parameter
value invalid, or other
problem with processing the
command line
Final
NO 6 No dial tone detected
DIALTONE
Final
BUSY 7 Engaged (busy) signal
detected
Final
CONNECT None Same as CONNECT, but
<TEXT> includes manufacturer-
specific text that may specify
DTE speed, line speed, error
control, data compression, or
other status
Intermediate
12.4 AT+ICF DTE-DCE Character Framing Format

Possible
Description Command
Responses
Defines DTE- AT+ICF=[for OK
DCE character mat [,parity]] ERROR
framing
Read the AT+ICF? +ICF:
current <format>[,<p
setting arity>]
OK
ERROR
Test if the AT+ICF=? +ICF: (list of
supported <format>s),
(list of
supported
<parity>s)
OK
ERROR
Description:
This extended-format compound parameter is used to determine the
local serial port start-stop (asynchronous) character framing used by
the DCE to accept DTE commands, and while transmitting
information text and result code, if this is not automatically
determined;
AT+IPR=0 forces AT+ICF=0 (see AT+IPR).
Only applicable to RS-232. This command is provided for
compatibility only and has no effect on PC Card functionality over
USB.
Defined values:
1 8 Data 2 Stop
2 8 Data 1 Parity 1 Stop
3 8 Data 1 Stop. (Default value)
4 7 Data 2 Stop
5 7 Data 1 Parity 1 Stop
6 7 Data 1 Stop
<parity> Description
0 Odd

<parity> Description
1 Even
2 Mark
3 Space (Default value)
12.5 AT+IFC DTE-DCE Local Flow Control

Defines DTE-DCE AT+IFC=[<by_te>, OK
local flow control [<by_ta>]] ERROR
Show the current AT+IFC? +IFC:
setting <by_te>,<by_ta>
Test if the command AT+IFC=? +IFC: (list of
<by_te>s,<by_ta>s)
Description:
Defines the flow control between the modem and the computer
when in on-line data mode.
No flow control is enabled when in any of the command modes.
Defined values:
<by_te> Description
0 No flow control on DTE
1 Xon/Xoff flow control from DTE to DCE. Control
characters are removed by the DCE interface
2 RTS flow control from DTE. (Default value)
3 Xon/Xoff flow control from DTE to DCE.
Contorl characters are passed to the remote
DCE/DTE.
<by_ta> Description
0 No flow control on DCE
1 Xon/Xoff flow control from DCE to DTE
2 CTS flow control from DCE. Default value
12.6 AT+IPR Cable Interface Port baud rate

Defines fixed DTE AT+IPR=[rate] OK
rate ERROR
Show the current AT+IPR? +IPR:<rate>
setting OK
ERROR
Test if the command AT+IPR=? +IPR: (List of
autodetectable
<rate>s), (list of
fixed-only <rate>s)]
OK
ERROR
Description:
Specifies the data rate at which the DCE will accept commands, in
addition to 1200 bits/s or 9600 bits/s (as required in v25ter,
subclause 4.3).
Only applicable to RS-232. This command is provided for
compatibility only and has no effect on PC Card functionality over
USB.
Defined values:

<rate> Description
Discrete The <rate> value specified shall be the rate in
integer bits per second at which the DTE-DCE interface
value should operate, e.g. “19200” or “115200”. The
rates supported by a particular DCE are
manufacturer specific.
The following rates, are supported;
0 = autobaud. Default value.
300 bps
0
600 bps
300
1200 bps
600
2400 bps
1200
3600 bps
2400
4800 bps
3600
7200 bps
4800
9600 bps
7200
14400 bps
9600
19200 bps
14400
28800 bps
19200
38400 bps
28800
57600 bps
38400
115200 bps
57600
230400 bps
115200
460800 bps
230400
460800
12.7 ATE Command Echo

Request Command ATE[<value>] OK
Echo ERROR
Show the current ATE? <value>
setting
Test if the command ATE=? E: (list of supported
Description:

The setting of this parameter determines whether or not the DCE
echoes characters received from the DTE during command state
and online command state.
Defined values:
<value> Description
0 DCE does not echo characters during command state and
online command state
1 DCE echoes characters during command state and online
command state. Default value
12.8 ATQ Result Code Suppression

Set Result Code ATQ<value> OK
Suppression ERROR
Read the current ATQ? Q: <value>
setting
Test if the command ATQ=? Q: (list of supported
Description:
This command determines whether the DCE transmits result codes
to the DTE. When result codes are being suppressed, no portion of
any intermediate, final, or unsolicited result code - header, result
text, line terminator, or trailer - is transmitted.
Defined values:
<value> Description
0 DCE transmits result codes. Default value
1 Result codes are suppressed and not transmitted

13 Network
13.1 AT*E2EMM Engineering Monitoring Mode

Set operation AT*E2EM *E2EMM
during M= GSM Idle
<n>[,<
GSM Idle mode Serving Cell
m>]
MCC, MNC, LAC, CellId, BSIC, Ch, RxL, C1, C2
<mcc>,<mnc>,<lac>,<ci>,<bsic>,<ch>,<rxl>,<c1
>,<c2>
Neighbor Cells
>,<c2>
…
>,<c2>
OK
ERROR
CME ERROR

during M= GSM Dedicated
<n>[,<
GSM Dedicated Serving Cell
m>]
mode MCC, MNC, LAC, CellId, BSIC, Ch, RxL, RxLF, RxLS,
RxQF, RxQS, TA, TN
<mcc>,<mnc>,<lac>,<ci>,<bsic>,<ch>,<rxlfull>,<
rxlsub>,<rxqfull>,<rxqsub>,<ta>,<tn>
Neighbor Cells
>,<c2>
…
>,<c2>
OK
ERROR
CME ERROR

during M=
<n>[,<
WCDMA mode WCDMA - Serving Cell <RRCState>
m>]
MCC, MNC, LAC, Ch, SC, RSCP, EcN0, RSSI, ServL,
ServQ, Hs, Rs
<mcc>,<mnc>,<lac>,<ch>,<sc>,<rscp>,<EcNo>,<
rssi><ServLvl>,<ServQual>,<Hs>,<Rs>
Monitored Intra-Frequency Cells

Ch, SC, PTxPwr, ULTxPwr, ServL, ServQ, Hn, Rn
<ch>,<sc>,<PtxPwr>,<ULTxPwr>,<ServLvl>,<ServQ
ual>,<Hn>,<Rn>
…
ual>,<Hn>,<Rn>
Monitored Inter-Frequency Cells

ual>,<Hn>,<Rn>
…
ual>,<Hn>,<Rn>
Monitored Inter-RAT Cells

Ch, BSIC, CIO, RSSI, RxLevMin
<ch>,<bsic>,<cio>,<rssi>,<rxlevmin>
…
<ch>,<bsic>,<cio>,<rssi>,<rxlevmin>
Detected Cells
ual>,<Hn>,<Rn>
…
ual>,<Hn>,<Rn>
OK
Document Number 1206-3629, Rev. 2 ERROR 182 of 308
CME ERROR
Read AT*E2EM Not Supported
M?
Test if the AT*E2EM *E2EMM: (list of supported <n>s),(list of supported
command is M=? <m>s)
supported ERROR
Description:
There is only one presentation format mode (Display)) and one
response type (one shot response).
The purpose of the Display presentation format mode is to display
the data in a readable form, including headers and line breaks
(<CR><LF>).
The response types give the user the choice of one-shot
information or an unsolicited response with <m> seconds between
each response. Responses occur when the module is camped on a
network.
Note:
The periodic unsolicited response is not supported in this version
of *E2EMM
Examples:
AT*E2EMM=9
*E2EMM
WCDMA - Serving Cell ( Idle )
MCC, MNC, LAC, Ch, SC, RSCP, EcNo, RSSI, ServL, ServQ,
Hs, Rs
310, 410, 32c5, 9766, 267, -33, - 3, 0, 1, 11, ,
Monitored Intra-Frequency Cells
9766, 275, 4, 24, 1, 11, ,
Monitored Inter-Frequency Cells
Monitored Inter-RAT Cells
Ch, BSIC, CIO, RSSI, RxLevMin
674, 3, 0, 255, 0
673, 29, 0, 255, 0
670, b, 0, 255, 0
681, 32, 0, 255, 0
677, 2, 0, 255, 0
676, 7, 0, 255, 0
684, 23, 0, 255, 0
683, 16, 0, 255, 0
Detected Cells
OK
Defined values:

<n> Description
9 Presentation of the network location information. Display
mode with headers and <CR><LF> line separators
<m> Description
0-255 Integer type giving time (in seconds) between unsolicited
responses. <m>=0 means immediately send out ONE
response only.
Default and only supported value: 0
<RRCState> Description
String Idle, Dedicated
type
<mcc> Description
Integer Three digits in decimal format. The Mobile Country Code
type identifies the PLMN serving cell country according to ITU
<mnc> Description
Integer Two digits in decimal format. The Mobile Network Code
type identifies the PLMN operator in the serving cell
<lac> Description
Integer Two byte location area code in hexadecimal format
type
<ci> Description
Integer Two byte cell ID in hexadecimal format
type
<bsic> Description
Integer One byte Base Stations Identification code in
type hexadecimal format

<ch> Description
(0-1023) It represents the ARFCN that shows the Absolute RF
Channel, which identifies the BCCH carrier
<rxl> Description
Integer Received Signal Strength level in dBm measured on idle
type mode.
-110 to -
40
<rxlfull> Description
Integer Received Signal Strength level in dBm. The Rx Level is
type taken in non-DTX mode during a SACCH multiframe
-110 to -
40
<rxlsub> Description
Integer Received Signal Strength level in dBm. The Rx Level is
type taken from the DownLink signal in DTX mode and the
-110 to - average is applied to subset of SACCH frames
40
Description
<rxqfull>
Received Signal Quality (non-DTX mode)
0 BER < 0.2%
1 BER < 0.4%
2 BER < 0.8%
3 BER < 1.6%
4 BER < 3.2%
5 BER < 6.4%
6 BER < 12.8%
Description
<rxqsub>
Received Signal Quality (DTX mode)
0 BER < 0.2%

Description
<rxqsub>
Received Signal Quality (DTX mode)
1 BER < 0.4%
2 BER < 0.8%
3 BER < 1.6%
4 BER < 3.2%
5 BER < 6.4%
6 BER < 12.8%
<c1> Description
Integer Path Loss criterion parameter for neighbour
cells. The MS calculates this parameter, in idle
mode, to decide if the cell is suitable to camp
on. After the calculation the criterion is C1 > 0.
See GSM 05.08
<c2> Description
Integer Cell reselection parameter for neighbour cells.
This parameter shall optimise the selected cell
reselection
<ta> Description
0-63 According to GSM 04.18 V8.6.0, the coding of
the timing advance value is the binary
representation of the timing advance in bit
periods; 1 bit period = 48/13uS. <ta> is the
integer representation of the timing advance in
binary format
64-255 Reserved
<tn> Description
0-7 Its value indicates the time slot number in a
traffic channel

<rscp> Description
-120 to - Receive Signal Code Power
25
<EcNo> Description
0 to 49 Carrier to Noise Ratio
<ServLvl> Description
1 to 11 Cell selection/reselection quality measure of
serving cell
<ServQual> Description
-110 to - Cell selection quality of the serving cell
40
<Hs> Description
0x00 - Quality level threshold criterion H of serving cell
0xFFFF
<Rs> Description
0x00 - Cell ranking criterion R of serving cell
0xFFFF
<Hn> Description
0x00 - Quality level threshold criterion H of the
0xFFFF strongest neighbor cell
<Rn> Description
0x00 - Cell ranking criterion R of the strongest
0xFF neighbor cell
<ULTxPwr> Description
-110 to - Max allowed uplink Tx power
40

<PtxPwr> Description
10 to 50 Primary CPICH Tx Power
<cio> Description
-128 to Cell Individual Offset
127
<rssi> Description
0 to 255 Received Signal Strength Indication
13.2 AT*ERINFO Network Capability

Active the response AT*ERINFO=<mode> OK
mode +CME ERROR: <err>
Query the current AT*ERINFO? *ERINFO:

radio access <mode>,<gsm_rinfo
information >,<umts_rinfo>
+CME ERROR: <err>
Test if the command AT*ERINFO=? *ERINFO: (list of
+CME ERROR <err>
Unsolicited report if *ERINFO:

*ERINFO reports are <gsm_rinfo>,<umts
enabled _info>
Description:
This command is used to provide an unsolicited result code
indicating the current technology of the current cell, or to query the
current cell information.
Defined values:
<mode> Description
0 Disable unsolicited information. Default value.
1 Enable unsolicited information

<gsm_rinfo> Description
0 No GPRS or EGPRS available
1 GPRS service is available
2 EGPRS service is available
<umts_rinfo> Description
0 No UMTS or HSDPA service available
1 UMTS service available
2 HSDPA service available
Examples:
AT*ERINFO=0
OK
AT*ERINFO?
*ERINFO: 0,2,2
OK
13.3 AT+CLCK Facility Lock

Request facility AT+CLCK=<fac>, when <mode>=2
lock <mode>[,<passwd and command
> [,<class>]] successful: +CLCK:
<status>[,<class1
>
[<CR><LF>+CLCK
:
<status>,<class2>
[...]]
+CME ERROR
<err>
OK
ERROR

Test if the AT+CLCK=? +CLCK: (list of
command is supported <fac>s)
supported +CME ERROR
<err>
OK
Description:
The command is used to lock, unlock or interrogate an ME or a
network facility <fac>. A password is normally needed to carry out
such actions.
When querying the status of a network service (<mode>=2), the
response line for 'not active' case (<status>=0) should be returned
only if service is not active for any <class>.
Call barring facilities are based on GSM/UMTS supplementary
services (refer to 3GPP 02.88). The interaction of these, with other
commands based on other GSM/UMTS supplementary services, is
described in the GSM/UMTS standard.
Additional information:
Note: "PS" and <mode>=1 correspond to Auto Lock
Defined values:
<fac> Description
“PS” PH-SIM (lock PHone to SIM card) (ME asks
password when other than current SIM card
inserted)
“SC” SIM (lock SIM card) (SIM asks password in ME
power-up and when this lock command issued)
"CS" CNTRL (lock control surface)
“AO” BAOC (bar all outgoing calls)
“OI” BOIC (bar outgoing international calls)
“AI” BAIC (bar all incoming calls)
“IR” BIC-Roam (bar incoming calls when roaming
outside the home country)
“OX” BOIC-exHC (bar outgoing international calls
except to home country)
“AB” All barring services
“AG” All out going barring services
“AC” All in coming barring services
“FD” SIM fixed dialing feature. PIN2 is required as a
password
“PN” Network personalization
“PU” Network subset personalization

<fac> Description
“PP” Service provider personalization
“PC” Corporate personalization
<mode> Description
0 Unlock
1 Lock
2 Query status
10 Full lock (only valid for <fac>=“PS”, after power
on always ask for ME_lock_code)
0 Not active
1 Active
2 Not available
<passw> Description
string type Is the same as password specified for the
facility from the ME user interface or with
change password command, +CPWD
<classx> Description
1 Voice L1
2 Data
4 Fax (Not supported)
8 Short message service
16 Data circuit sync
32 Data circuit async
64 Dedicated packet access
128 Dedicated PAD Access
13.4 AT+CNUM Subscriber Number

Request AT+CNUM +CNUM:
subscriber [<alpha1>],<number1>,<t
number ype1>
[,<speed>,<service>[,<itc
>]][<CR> <LF>
+CNUM:
[<alpha2>],<number2>,<t
ype2>
[,<speed>,<service>
[,<itc>]][…]]
+CME ERROR: <err>
OK
ERROR
Test if the AT+CNUM +CME ERROR: <err>
command =? OK
is
ERROR
supported
Description:
This command returns the MSISDNs related to the subscriber (this
information can be stored in the SIM or in the ME). If subscriber
has different MSISDN for different services, each MSISDN is
returned in a separate line.
The implementation of this command is made according to
Bluetooth HFP 1.5, which deviates somewhat from the 3GPP, and
the parameters <alpha> and <itc> are not supported but included to
show the full command as specified in 3GPP TS 27.005.
Defined values:
<alphax> Description
Alphanumer Associated with <numberx>; Not supported
ic string
<numberx> Description
String type Phone number of format specified by <typex>
<typex> Description
Integer type Type of address, (refer to 3GPP 24.008)

<speed> Description
data rate Always displays 8. +CNUM is a standard
command (27.007). This field makes no sense
for voice numbers and fax numbers, and the
module has no knowledge what speed the user
(SIM) has subscribed to.
<service> Description
0 Asynchronous modem
4 Voice
5 Fax
<itc> Description Not supported

0 3.1kHz
1 UDI
The typex field is defined in 3GPP 24.008 as an integer which
combines the Number Type parameter and the Numbering Plan
parameter. The parameters may be extracted as follows:
Subtract 128 from the displayed value
Divide the result by 16.
The quotient is the Number Type parameter.
The remainder is the Numbering Plan parameter.
For example, given a displayed typex value of 161:
161 - 128 = 33
33 / 16 = 2 with a remainder of 1
Therefore Number Type = 2, Numbering Plan = 1
The definitions are given in the next two tables.
Number Type Description

0 Unknown
1 International number
2 National number
3 Network specific number
4 Dedicated address, short code
5 Reserved
6 Reserved
7 Reserved for extension

Numbering Plan Description
0 unknown
1 ISDN/telephony numbering plan (Rec.
E.164/E.163)
2 reserved
3 data numbering plan (Recommendation X.121)
4 telex numbering plan (Recommendation F.69)
5-7 reserved
8 national numbering plan
9 private numbering plan
10 reserved
11 reserved for CTS (see 3GPP TS 44.056)
12-14 reserved
15 reserved for extension
13.5 AT+COPN Read Operator Names

Request operator AT+COPN +COPN:
selection <numeric1>,<alp
ha1>
[<CR><LF>
+COPN:
<numeric2>,<alp
ha2>
[...]]
+CME ERROR:
<err>
OK
ERROR
Test if the AT+COPN=? OK
command is
supported
Description:
Command returns the list of operator names from the ME. Each
operator code <numericn> that has an alphanumeric equivalent
<alphan> in the ME memory shall be returned. This command can
return several hundred names and can execute for up to 90 seconds..
Defined values:

<numericn>: string type; operator in numeric format. (See
AT+COPS)
<alphan>: string type; operator in long alphanumeric format. (See
AT+COPS)
13.6 AT+COPS Operator Selection

Request operator AT+COPS=[<mod +CME ERROR
selection e> [,<format> <err>
[,<oper>[,<AcT> OK
]]]]
ERROR
Show the current AT+COPS? +COPS:
setting <mode>[,<forma
t>,
<oper>,<AcT>]
+CME ERROR
<err>
OK
ERROR
Test if the AT+COPS=? +COPS: [list of
supported; (<stat>,long
Perform operator alphanumeric
search <oper>, short
alphanumeric
<oper>,numeric
<oper>,<AcT>)s]
+CME ERROR
<err>
OK
ERROR
Description:
The set command performs operator selection. <mode>=0 or 1
forces an attempt to select and register the GSM/UMTS network
operator. The value of <mode> determines whether the selection
is done automatically by the ME or is forced to operator <oper>,
specified in format <format>. If the selected operator is not
available, no other operator will be selected (except for
<mode>=4). The selected operator name format applies to futher
read commands (+COPS?).

The read part of the command returns the current mode and current
operator. If there is no current operator, only the mode is returned.
The test part of this command returns a list of quintuplets, each

representing an operator present in the network. Quintuplet
consists of an integer indicating the availability of the operator
<stat>, long and short alphanumeric format of the name of the
operator, numeric format representation of the operator, and the
access technology <AcT>. Any of the formats may be unavailable
and should then be an empty field. The list of operators shall be in
order: home network, networks referenced in the SIM/UICC, and
other networks.
Defined values:
<mode> Description
0 Automatic (<oper> field is ignored). Default
value.
1 Manual (<oper> field shall be present and
<AcT> is optional)
3 Set only <format> (for read command +COPS?),
do not attempt registration/de-registration
(<oper> and <AcT> fields are ignored); this
value is not applicable in read command
response
4 Manual/automatic (<oper> field shall be
present); if manual selection fails, automatic
mode (<mode>=0) is entered
Note: When using <mode> = 1, only <format> = 2 is allowed.
0 long format alphanumeric <oper>. Default
value.
1 short format alphanumeric <oper>
2 Numeric <oper>. A text string representation
of the PLMN code consisting of the 3-digit MCC
and 2 or 3-digit MNC.
<oper> Description
string type Format determined by the <format> setting.
Default is empty string.

<stat> Description
0 Unknown
1 Available
2 Current
3 Forbidden
<AcT> Description
0 GSM Access Technology
2 UTRAN Access Technology
Example:
AT+COPS=?
+COPS: (2,“UK VODAFONE”,,“23415”,0)
+COPS: (3,“UK Orange PCS Ltd”,,“23433”,0)
+COPS: (3,“T-Mobile UK”,,“23430”,0)
+COPS: (3,“O2 - UK”,,“23410”,0)
OK
An invalid home network, eg. no SIM inserted, will display as null

string as follows:
AT+COPS=?
+COPS: (0,“”,,“”,0)
+COPS: (2,“UK VODAFONE”,,“23415”,0)
OK
13.7 AT+CPOL Preferred Operator List

Request operator AT+CPOL=[<index>] +CME ERROR: <err>
selection [, OK
<format>[,<oper>[,G
ERROR
SM_AcT,<GSM_Comp
act_AcT>,<UTRAN_A
cT>]]]

Shows the current AT+CPOL? +CPOL:
setting <index1>,<format>,<oper1>[,<GSM_A
cT1>,<GSM_Compact_AcT1>,<UTRAN_
AcT1>]
[<CR><LF>+CPOL:
<index2>,<format>,<oper2>[,<GSM_A
cT2>,<GSM_Compact_AcT2>,<UTRAN_
AcT2>]
[...]]
+CME ERROR: <err>
Test if the AT+CPOL=? +CPOL: (list of supported
command is <index>s),(list of supported
supported <format>s)
+CME ERROR: <err>
OK
ERROR
Description:
This command is used to edit the PLMN selector with Access
Technology lists in the SIM card or active application in the
UICC(GSM or USIM).
Execute command writes an entry in the SIM/USIM list of preferred
PLMNs, which could previously have been selected by the
command +CPLS, however, as this command is not supported, the
User controlled PLMN selector with Access Technology,
EFPLMNwAcT, is the one accessed by default. If <index> is given but
<oper> is left out, entry is deleted. If <oper> is given but <index> is
left out, <oper> is put in the next free location. If only <format> is
given, the format of the <oper> in the read command is changed.
The Access Technology selection parameters, <GSM_AcT>,
<GSM_Compact_AcT> and <UTRAN_AcT>, are required when
writing User controlled PLMN selector with Access Technology,
EF EFPLMNwAcT,
If <index> is given but <oper> is left out, entry is deleted. If <oper>
is given but <index> is left out, <oper> is put in the next free
location. If only <format> is given, the format of the <oper> in the
read command is changed
Note: ME may also update this list automatically when new
networks are selected.
Note: AcT parameters are optional for the set command, but if one
of the parameters is issued then all should be issued.If the
parameters are not issued at all or only indicated by commas then
the respective default values 1,0,1 are used.
Read command returns all used entries from the SIM list of
preferred operators.
Test command returns the whole index range supported by the SIM.
Note: While the +CPLS command is not supported, this +CPOL
command will behave as though +CPLS is set to value 0. Thus, per
TS27.007, this behavior is "User controlled PLMN selector with
Access Technology EFPLMNwAcT, if not found in the SIM/UICC then
PLMN preferred list EFPLMNsel (this file is only available in SIM
card or GSM application selected in UICC)"
Defined values:
<index> Description
Integer type The order number of operator in the SIM
preferred operator list (value range returned by
test command)
0 long format alphanumeric <oper>
1 short format alphanumeric <oper>
2 numeric <oper> Default value
<oper> Description
string type Format determined by the <format> setting
<GSM_AcT> Description
0 Access technology not selected
1 Access technology selected
<GSM_Compact
Description
_AcT>
<UTRAN_AcT> Description
13.8 AT+CREG Network Registration

Request network AT+CREG=[<n>] +CME ERROR <err>
registration OK
ERROR
Show the current AT+CREG? +CREG:
setting <n>,<stat>[,<lac>,
<ci>]
+CME ERROR <err>
OK
ERROR
Test if the command AT+CREG=? +CREG: (list of
+CME ERROR <err>
OK
ERROR
Description:
Set command controls the presentation of an unsolicited result
code +CREG: <stat> when <n>=1 and there is a change in the ME
network registration status, or code +CREG: <stat>[,<lac>,<ci>]
when <n>=2 and there is a change of the network cell.
Read command returns the status of result code presentation and
an integer <stat>, which shows whether the network has currently
indicated the registration of the ME. Location information
elements <lac> and <ci> are returned only when <n>=2 and ME is
registered in the network.
Controls the presentation of the unsolicited result code +CREG.
Defined values:
<n> Description
0 Disable network registration unsolicited result
code. Default value
1 Enable network registration unsolicited result
code +CREG: <stat>
2 Enable network registration and location
information unsolicited result code +CREG:
<stat>[,<lac>,<ci>]
<stat> Description
0 Not registered, ME is not currently searching for
a new operator to register with

<stat> Description
2 Not registered, but ME is currently searching for
a new operator to register with
4 Unknown
<lac> Description
string type two byte location area code in hexadecimal
format (e.g. "00C3" equals 195 in decimal)
<ci> Description
string type Four byte cell ID in hexadecimal format. Four
bytes are required for UMTS, whereas only two
bytes are applicable for GSM, and the two first
bytes are then zeros e.g. 00001A02
Example:
AT+CREG?
+CREG: 0,1
OK
13.8.1 +CREG - Network Registration Unsolicted Response

+CREG: <stat>[,<lac>,<ci>]
13.9 AT+PACSP AT&T Specific - PLMN Mode Query

Set command AT+PACSP Not supported
AT+PACSP=
Read command AT+PACSP? +PACSP0
+PACSP1
+CME ERROR
<err>
Test if the AT+PACSP=? OK
command is
supported
Description:

Command causes the +PACSP unsolicted response to be
immediately returned to indicate the current PACSP0 or PACSP1
status.
13.10 +PACSP AT&T Specific - PLMN Mode Report

Mode bit is set to “0” +PACSP0
Mode bit is set to “1” +PACSP1
Description:
This response shall report the status of the USIM EF-CSP
(Customer Service Profile) file with regard to the PLMN Mode bit.
EF-CSP is a CPHS file with an id of 6F15. For the ENS feature, the
PLMN Mode is used to enable and disable the network selection
menu. The PLMN Mode is indicated by bit 8 in the Value Added
Services Group (group code C0).
The file is to be read after power-up to get the initial PLMN Mode
value. If the PLMN Mode is 0, then a +PACSP0 unsolicited
message shall be sent by the UE. Otherwise, a +PACSP1 message
is reported.
When this file is changed, the firmware is notified by a REFRESH
STK command. Then the new PLMN Mode shall be read from the
file and the +PACSP0 or +PACSP1 unsolicited message shall be
generated.
Note:
The default behavior when no EFcsp file is present is for the system
to send +PACSP0 at power up and when queried. Therefore, the
appearance of a +PACSP resonse should not be used to indicate an
AT&T-specific SIM is present. The AT*ECSP command may be
used to determine if the EFcsp file is present or absent on the SIM.

14 Phonebook
14.1 AT+CPBR Phonebook Read

Notes:
* - SIM is required for SIM based phonebooks.

Read phone AT+CPBR=<ind +CPBR:<index1>,<number>,
book entries ex1> <type>,<text>[[,<text_datetime>]<C
[,<index2>] R><LF>
+CPBR: <index2>,<number>,<type>,
<text>[,<text_datetime>]]
+CME ERROR <err>
OK
ERROR
Test if the AT+CPBR=? +CPBR: (list of supported
command is <index>s),<nlength>,<tlength>
supported +CME ERROR <err>
OK
ERROR
Description:
Returns phonebook entries in location number range <index1>...
<index2> from the current phonebook memory storage selected
with +CPBS. If <index2> is left out, only location <index1> is
returned. Entry fields returned are location number <indexn>,
phone number stored there <number> (of format <type>) and text
<text> associated with the number.
When the “Received Calls List”, the “Missed Calls List” or the
“Dialed Calls List” is selected, the two additional fields <text_date>
and <text_time> containing date and time will be returned. In this
case the <text> field containing text associated with the number has
to be extracted from one of the phonebooks (SIM, ME or TA).
If listing fails in ME, +CME ERROR: <err> is returned.
Defined values:
<indexn> Description
integer type Values in the range of location
numbers of phone book memory
string type Phone number of format <type>

<type> Description
Integer type Type of address octet, refer 3GPP
24.008
129 ISDN/telephony numbering plan,
national/international unknown
Default if no "+" in <number>
international number
Default if "+" in <number>
national number
128 - 255 Other values refer to 3GPP 24.008
<text> Description
string type Field of maximum length <tlength>;
character set as specified by the
Select TE Character Set command,
+CSCS.
<nlength> Description
integer type Value indicating the maximum length
of field <number>
<tlength> Description
of field <text>
<text_datetime> Description
string Date and time in the format:
yy/mm/dd,hh:mm
Example:
AT+CPBR=1,99
+CPBR: 1,“44123456789”,145,“Test Number”
+CPBR: 2,“440987654321”,145,“Test number 2”
+CPBR: 3,“449876543210”,129,“Test Number 3”
OK
14.2 AT+CPBS Phonebook Storage Select

Notes:


Set phone book storage AT+CPBS=<storage> +CME ERROR <err>
[,<password>] OK
ERROR
Read the current setting AT+CPBS? +CPBS:
<storage>,<used>,<tot
al>
+CME ERROR <err>
OK
ERROR
Test if the command is AT+CPBS=? +CPBS: (list of
supported supported <storage>s)
+CME ERROR <err>
OK
ERROR
Description:
Selects phonebook memory storage <storage>, which is used by
other phonebook commands. Read command returns currently
selected memory, number of used locations and total number of
locations in the memory.
Defined values:
<storage> Description
“FD” SIM/USIM fix-dialing-phonebook. If a SIM card is
present or if a UICC with an active GSM
application is present, the information in EFFDN
under DFTelecom is selected. If a UICC with an active
USIM application is present, the information in
EFFDN under ADFUSIM is selected.
“EN” Emergency numbers (read only)
“SM” SIM phone book. Default value.
"LD" SIM/USIM last number dialed list. Not Supported
“DC” ME dialled calls list (read only) Not Supported
“RC” ME received calls list (read only) Not Supported
“MC” ME missed calls list (read only) Not Supported

<storage> Description
"ON" SIM (or ME) own numbers (MSISDNs) list (reading
of this storage may be available through +CNUM
also). When storing information in the SIM/UICC,
if a SIM card is present or if a UICC with an active
GSM application is present, the information in
EFMSISDN under DFTelecom is selected. If a UICC with
an active USIM application is present, the
information in EFMSISDN under ADFUSIM is selected.
<passwd> Description
String type Represents the password required when selecting
password protected <storage>s, for example
PIN2 for storage “FD”
<used> Description
Integer type Number of locations used in the selected memory
(<storage>)
<total> Description
Integer type Total number of locations in the selected memory
(<storage>)
14.3 AT+CPBW Phonebook Write

Notes:

Request phone AT+CPBW=<index +CME ERROR <err>
book write > OK
[, ERROR
<number>[,<type>
[,<text>]]]

Test if the AT+CPBW=? +CPBW: (list of
supported <index>s),<nlengt
h> ,(list of
supported
<type>s),<tlength
>
+CME ERROR <err>
OK
ERROR
Description:
Writes phonebook entry in location number <index> in the current
phonebook memory storage area, selected with AT+CPBS. If the
<number> and <text> parameters are omitted, the entry is deleted.
If <index> is omitted but <number> is included, the entry is written
to the first free location in the phonebook. If writing fails in ME,
+CME ERROR: <err> is returned.
Test command returns location range supported by the current
storage as a compound value, the maximum length of <number>
field, supported number formats of the storage, and the maximum
length of <text> field. If ME is not currently reachable, +CME
ERROR: <err> is returned. If storage does not offer format
information, the format list is empty parenthesis.
Defined values:
<index> Description
integer type Values in the range of location
numbers of phone book memory
string type Phone number of format <type>
<type> Description
integer format Type of address octet, default 145
when dialing string includes
international access code character
“+”, otherwise 129. (refer to 3GPP
24.008)
Default if no "+" in <number>.

<type> Description
international number
Default if "+" in <number>.
128-255 Other values refer GSM 04.08 section
10.5.4.7
<text> Description
string type Field of maximum length <tlength>;
character set as specified by the
select TE character set command,
+CSCS
See description at end of this section
<nlength> Description
of field <number>
<tlength> Description
of field <text>
Notes:
When using +CPBW to add entries to SIM/USIM phonebook, it is likely that not all
entries will be accepted for numbers longer than 20 digits. There is a dependency on the
size of the extension file EFext1. If the space allocated to the extension file is used up,
then new phonebook write attempts of numbers with more than 20 digits will not be
accepted.
Entries stored in memories DC, RC, and MC, will not be deleted using +CPBW.

15 Short Message Services - Point to Point
15.1 AT+CGSMS Select Service for MO SMS Messages

Set service or AT+CGSMS=[< OK
service service>] ERROR
preference
Read the AT+CGSMS? +CGSMS: <service>
command OK
ERROR
Test if the AT+CGSMS=? +CGSMS: (list of
command is available <service>s)
supported OK
ERROR
Description:
The set command is used to specify the service or service
preference that the MT will use to send MO SMS messages. The
read command returns the currently selected service or service
preference.
Defined values:
0 GPRS/Packet Domain
1 Circuit switched
2 GPRS/packet domain preferred (use circuit
switched if GPRS/packet domain not available)
3 Circuit switched preferred (use GPRS/packet
domain if circuit switched not available). Default
value.
15.2 AT+CMGF Message Format

Common for both PDU and Text Modes

Set message format AT+CMGF=<mode> OK
ERROR

Show the current AT+CMGF? +CMGF: <mode>
setting OK
ERROR
Test if the command AT+CMGF=? +CMGF: (list of
OK
ERROR
Description:
This command tells the TA, which input and output format to use
for messages. The <mode> parameter indicates the format of
messages used with send, list, read and write commands, and
unsolicited result codes resulting from received messages. Mode
can be either PDU mode (entire TP data units used) or text mode
(headers and body of the messages given as separate parameters).
Test command returns supported modes as a compound value.
Defined values:
<mode> Description
0 PDU mode. Default value
1 Text mode. Not Supported.
15.3 AT+CMGW Write Message to Memory

PDU Mode

Write message to AT+CMGW=<length +CMGW: <index>
memory > [,<stat>]<CR> +CMS ERROR: <err>
<pdu><ctrl- OK
Z/ESC>
ERROR
Test if the command AT+CMGW=? OK
is supported ERROR
Description:
Stores a message to memory storage <mem2>. Memory location
<index> of the stored message is returned. By default message
status will be set to ‘stored unsent’, but parameter <stat> allows
other status values to be given. Entering PDU is the same as
specified by the send message command, +CMGS. If writing fails,
final result code +CMS ERROR: <err> is returned. See AT+CPMS
Preferred Message Storage.
This command is abortable by sending <ESC> character (IRA 27)
This character must be be sent before the terminating <ctrl-Z> (IRA
26) is sent in order to have any effect.
Defined values:
<stat> Description
2 Stored unsent message (only applicable to SMs)
<index> Description
Integer type Value in the range of location numbers
supported by the associated memory
Integer type Value indicating in PDU mode (+CMGF=0), the
length of the actual TP data unit in octets (i.e.
the RP layer SMSC address octets are not
counted in the length)
<pdu> Description
Unquoted In the case of SMS: 3GPP 24.011 SC address
string followed by 3GPP 23.040 TPDU in hexadecimal
format: ME/TA converts each octet of TP data
unit into two IRA character long hexadecimal
number (e.g. octet with integer value 42 is
presented to TE as two characters 2A (IRA 50
and 65))
In the case of CBS: 3GPP 23.041 TPDU in
hexadecimal format
15.4 AT+CMGC Send Command

PDU Mode

Send command AT+CMGC=<len if PDU mode
message gth><CR> (+CMGF=0) and
<pdu><ctrl- sending
Z/ESC> successful:
+CMGC:
<mr>[,<ackpdu
>]
if sending fails:
+CMS ERROR:
<err>
OK
ERROR
Test if the AT+CMGC=? OK
command is ERROR
supported
Description:
Sends a command message from a TE to the network (SMS-
COMMAND). The entering of PDU is as specified in the send
message command, +CMGS. Message reference value <mr> is
returned to the TE on successful message delivery. Optionally
(when +CSMS <service> value is 1 and network supports)
<ackpdu> is returned. Values can be used to identify message upon
unsolicited delivery status report result code. If sending fails in a
network or an ME error, final result code +CMS ERROR: <err> is
returned.
Defined values:

<pdu> Description
String followed by 3GPP 23.040 TPDU in hexadecimal
and 65))
hexadecimal format
<mr> Description
Integer type 3GPP 23.040 TP-Message-Reference in integer
format
<ackpdu> Description
String GSM 03.40 RP-User-Data element of RP-ACK
PDU; format is same as for <pdu> in case of
SMS, but without GSM 04.11 SC address field
and parameter shall be bounded by double
quote characters like a normal string type
parameter
Not supported
15.5 AT+CMGS Send Message

PDU Mode

Send message AT+CMGS=<length> >
<CR><pdu><ctrl- +CMGS:
Z/ESC> <mr>[,<ackpdu>]
+CMS ERROR: <err>
OK
ERROR
Test if the command AT+CMGS=? OK
is supported ERROR
Description:
Sends a message from a TE to the network (SMS-SUBMIT).
Message reference value <mr> is returned to the TE on successful
message delivery. Optionally, when AT+CSMS <service> value is
1 and there is network support, <ackpdu> is returned. Values can

be used to identify message upon unsolicited delivery status report
result code. If sending fails in a network or an ME error, final
result code +CMS ERROR: <err> is returned.
•<length> must indicate the number of octets coded in the TP layer
data unit to be given (i.e. SMSC address octets are excluded).
•The TA shall send a four character sequence
<CR><LF><greater_than><space> (IRA 13, 10, 62, 32) after
command line is terminated with <CR>; after that PDU can be
given from TE to ME/TA.
•The PDU shall be hexadecimal format (similarly as specified for
<pdu>) and given in one line; ME converts this coding into the
actual octets of PDU.
•When the length octet of the SMSC address (given in the <pdu>)
equals zero, the SMSC address set with command Service Centre
Address +CSCA is used.
•<ctrl-Z> (IRA 26) must be used to indicate the ending of PDU
•Sending can be aborted by giving <ESC> character (IRA 27).
This character must be sent before the terminating <ctrl-Z> (IRA
26) is sent in order to have any effect.
Defined values:
<mr> Description
Integer type 3GPP 23.040 TP-Message-Reference in integer
format
counted in the length).
<pdu> Description
and 65))
hexadecimal format

<ackpdu> Description
... 3GPP 23.040 RP-User-Data element of RP-ACK
PDU; format is same as for <pdu> in case of
SMS, but without GSM 04.11 SC address field
and parameter shall be bounded by double
quote characters like a normal string type
parameter
Not supported
15.6 AT+CMSS Send From Storage

PDU mode

Send from storage AT+CMSS=<index>[ +CMSS: <mr>
,<da>[,<toda>]] +CMS ERROR: <err>
OK
ERROR
Test if the command AT+CMSS=? OK
is supported ERROR
Description:
Sends message with location value <index> from message storage
<mem2> to the network (SMS-SUBMIT or SMS-COMMAND).
Reference value <mr> is returned to the TE on successful message
delivery. If sending fails in a network or an ME error, final result
code +CMS ERROR: <err> is returned. See AT+CPMS Preferred
Message Storage for definition and setting of <mem2>
Note: Parameters <da> and <toda> will be accepted without error

but ignored (they will not override the values stored in the message
<pdu>).
Defined values:
<index> Description
<mr> Description
Integer type GSM 03.40 TP-Message-Reference in integer
format
15.7 AT+CMGD Delete Message

Common for both PDU and Text modes
Delete message AT+CMGD=<index> +CMS ERROR: <err>
[, <delflag>] OK
ERROR
Test if the command AT+CMGD=? +CMGD: (list of
<index>s[,list of
supported
<delflag>s]
OK
ERROR
Description:
Deletes message from preferred message storage <mem1> location
<index>. If <delflag> is present and not set to 0, the ME ignores
<index> and acts according to the definition of <delflag> in the
table shown below. If <delflag> is omitted, only the entry in
<index> will be deleted.
If deleting fails, final result code +CMS ERROR: <err> is
returned. Test command shows the valid memory locations.
Defined values:
<index> Description
<delflag> Description
0 Delete the message specified in <index>. Default.
1 Delete all read messages from preferred
messages storage, leaving unread messages and
stored mobile originated messages (whether sent
or not) untouched.
2 Delete all read messages from preferred message
storage and sent mobile originated messages,
leaving unread messages and unsent mobile
originated messages untouched.
3 Delete all read messages from preferred message
storage and unsent mobile originated messages
leaving unread messages untouched.
4 Delete all messages from preferred message
storage including unread messages.

15.8 AT+CMGL List Message
PDU Mode

List AT+CMGL=[ +CMGL:
message <stat>] <index>,<stat>,[<alpha>]
,<length>
<CR><LF><pdu>[<CR><
LF>
+CMGL:
<index>,<stat>,[<alpha>]
,<length>
<CR><LF><pdu>[…]]
+CMS ERROR: <err>
Test if the AT+CMGL=? +CMGL: (list of supported
command <stat>s)
is
supported
Description:
Note: Returns messages with status value <stat> from preferred
message storage <mem1> to the TE. Entire data units <pdu> are
returned. If status of the message is ‘received unread’, status in the
storage changes to ‘received read’. If listing fails, final result code
+CMS ERROR: <err> is returned.
See +CPMS for definition of <mem1>
Defined values:
<stat> Description
Integer type Indicates status of message in memory.
0 Received unread message (i.e. new message)
1 Received read message
3 Stored sent message (only applicable to SMs)
4 All messages (only applicable to +CMGL
command)
Default value
<index> Description

<alpha> Description
String type Will be left empty but not omitted
<pdu> Description
and 65))
hexadecimal format
Example:
AT+CMGF=1
+CMGL: 1,1,,91
07919107739613F2000A81000000000032007040709074348A536
176594E07B4DFE234BBEC62A7ED65D7F8DD0651CB6E777A0
E7296EF731D485A9F97C9F3751A242FD3D3F2F21C6496BFDB
207AD9ED4ECF416133BD2C0711C3F6F41C34ACC341F7B41B
+CMGL: 2,1,,85
07919107739613F2000A81000000000032007040705170428A4C6
176594E07B4DFE234BBEC62A7ED65D7F8DD0651CB6E777A0
E7296EF731D4828CF87DD20FA3DED9E83E0753AA8EA9ABA
406937FD0D2286EDE93968588783E6E5767A0E
OK
AT+CMGL=?
+CMGL: (0-4)
OK
15.9 AT+CMGR Read Message

PDU Mode

Read AT+CMGR +CMGR:
message = <index> <stat>,[<alpha>],<length>]
<CR><LF><pdu>
+CMS ERROR: <err>
OK
ERROR
Test if the AT+CMGR OK
command =? ERROR
is
supported
Description:
Returns message with location value <index> from preferred
message storage <mem1> to the TE. Status of the message and
entire message data unit <pdu> is returned. If status of the message
is ‘received unread’, status in the storage changes to ‘received read’.
If reading fails, final result code +CMS ERROR: <err> is returned.
See +CPMS for definition of <mem1>
Defined values:
<stat> Description
Integer type Indicates the status of message in memory.
0 Received unread message (i.e. new message)
1 Received read message
3 Stored sent message (only applicable to SMs)
<index> Description
<alpha> Description
String type Will be left empty but not omitted

<pdu> Description
Unquoted In the case of SMS: 3GPP 24.011 SC address followed by 3GPP
string 23.040 TPDU in hexadecimal format: ME/TA converts each
octet of TP data unit into two IRA character long hexadecimal
number (e.g. octet with integer value 42 is presented to TE as
two characters 2A (IRA 50 and 65))
In the case of CBS: 3GPP 23.041 TPDU in hexadecimal format
15.10 AT +CMMS More Messages to Send

Parameter Command Syntax
Description Command Possible response(s)

Set mode of SMS +CMMS=[<n>]
relay protocol link
Read the current +CMMS? +CMMS: <n>
setting
Test command to +CMMS=? +CMMS: (list of
show if the supported <n>s)
command is
supported
Description
Set command controls the continuity of SMS relay protocol link. When feature is enabled
(and supported by network) multiple messages can be sent much faster as link is kept
open.
Test command returns supported values as a compound value.
Defined Values
<n> Description
0 Disable
1 Keep enabled until the time between the
response of the latest message send command
(+CMGS, +CMSS, etc.) and the next send
command exceeds 1-5 seconds, then ME shall
close the link and switch <n> automatically
back to 0
2 Enable (if the time between the response of the
latest message send command and the next
send command exceeds 1-5 seconds, ME shall
close the link but TA shall not switch
automatically back to <n>=0)

15.11 AT+CNMI New Message Indications to TE
PDU Mode

Set new AT+CNMI=[< +CMS ERROR: <err>
message mode> OK
indication to [,<mt>[,<bm
ERROR
TE >[,<ds>[,<bf
r>]]]]]
Show the AT+CNMI? +CNMI:
current <mode>,<mt>,<bm>,<ds>,<
setting bfr>
OK
ERROR
Show if the AT+CNMI=? +CNMI:
command is (list of supported <mode>s),
supported (list of supported <mt>s),
(list of supported <bm>s),
(list of supported <ds>s),
(list of supported <bfr>s
OK
ERROR
Description:
Selects the procedure for the way in which new messages received
from the network, are indicated to the TE when it is active, e.g.
DTR signal is ON. If the TE is inactive (DTR signal is OFF),
message receiving is carried out as specified in GSM 03.38 (3G TS
23.038).
If the command fails and the error is related to mobile equipment
or network, the final result code CMS ERROR: <err> is returned.
Defined values:
<mode> Description
0 Indication mode to buffer in TA Not supported
1 Indication mode to discard Not supported
2 Indication mode to buffer in TA while TA-TE
link is reserved (e.g. in online data mode) and
flush to TE when the link is unreserved.
Otherwise, forward them directly to the TE.
Default & only supported value

<mt> Description
0 No SMS-DELIVER indications are routed to the
TE.
Use <mem3> as preferred storage.
Default value
1 SMS-DELIVER is stored into ME/TA and the
indication of the memory location is routed to
the TE using unsolicited result code:
+CMTI: <mem>,<index>
2 Class 0, class 1, and class 3 SMS-DELIVERs are
routed directly to the TE using the unsolicited
result code but not stored in ME/TA:
+CMT:[<alpha >], <length><CR><LF><pdu>
(PDU mode)
Class 2 messages are handled as if <mt>=1
3 Class 3 SMS-DELIVERs are routed directly to TE
using unsolicited result codes +CMT:
<length><CR><LF><pdu>. Class 3 SMS-
DELIVER is not stored in ME/TA. Messages of
other data coding schemes result in indication
as defined in <mt>=1
Note: See below for a table showing the indication and message destination dependency
on SMS Class.
<bm> Description
0 Store message to “BM” (or some manufacturer
specific memory). No CBM indications are
routed to the TE
Default value
2 New CBMs are routed directly to the TE using
unsolicited result code:
+CBM: <length><CR><LF><pdu> (PDU
mode). New CBMs are not stored in CBM
memory
<ds> Description
0 No SMS-STATUS-REPORTs are routed to the TE.
SMS-STATUS-REPORT is not stored in ME/TA
Default value

<ds> Description
1 SMS-STATUS-REPORTs are routed to the TE
using unsolicited result code: +CDS: <
length>< CR>< LF>< pdu> (PDU mode). SMS-
STATUS-REPORT is not stored in ME/TA
2 SMS-STATUS-REPORTs are routed to the TE
using unsolicited result code: +CDSI: <
mem><index> (PDU mode enabled). SMS-
STATUS-REPORT is stored in ME/TA
Not supported
<bfr> Description
within this command is flushed to the TE when
<mode> 1..3 is entered (OK response shall be
given before flushing the codes).
within this command is cleared when <mode>
1..3 is entered
Not supported
Unsolicited Result codes:
+CMT: <length><CR><LF><pdu>
+CBM: <length><CR><LF><pdu>
+CDS: <length><CR><LF><pdu>
Indication and destination of message routing vs. SMS class and <mt> setting.
Destination Destination
SMS Class <mt> Indication CPMS CPMS<mem3>="
<mem3>="ME" SM"
none 0 none ME SM
none 1 +CMTI... ME SM
none 2 +CMT... TE TE
none 3 +CMTI... ME SM
0 0 none ME SM
0 1 +CMTI... ME SM
0 2 +CMT... TE TE
0 3 +CMTI... ME SM

Destination Destination
SMS Class <mt> Indication CPMS CPMS<mem3>="
<mem3>="ME" SM"
1 0 none ME SM
1 1 +CMTI... ME SM
1 2 +CMT... TE TE
1 3 +CMTI... ME SM
2 0 none SM SM
2 1 +CMTI... SM SM
2 2 +CMTI... SM SM
2 3 +CMTI... SM SM
3 0 none ME SM
3 1 +CMTI ME SM
3 2 +CMT... TE TE
3 3 +CMT... TE TE
15.11.1 +CMTI New Message Indication Unsolicited

Response
Description:
An Unsolicited Response indicating that a message is received.
AT+CNMI is used to control the format of the message received
indication.
Defined values:
<mem> Description
“ME” ME message storage
“SM” SIM message storage
<index> Description
15.11.2 +CMT Received Message Unsolicited Response

Description:

An Unsolicited Response indicating a Short Message is received
and routed directly to TE. AT+CNMI is used to control the format
of the message received indication.
+CMT: <length><CR><LF><pdu>
Defined values:
integer type Value indicating in PDU mode (+CMGF=0), the
<pdu> Description
Unquoted In the case of SMS: GSM 04.11 SC address
string followed by GSM 03.40 TPDU in hexadecimal
and 65))
In the case of CBS: GSM 03.41 TPDU in
hexadecimal format
15.11.3 +CBM Received Cell Broadcast Unsolicited

Response
Description:
An Unsolicited Response indicating a Cell Broadcast Message is
received and routed directly to TE. AT+CNMI is used to control
the format of the message received indication.
+CBM: <length><CR><LF><pdu>
Defined values:

<pdu> Description
and 65))
hexadecimal format
15.11.4 +CDS SMS Status Report Unsolicited Response

Description:
An Unsolicited Response indicating sent message status.
+CDS: <length><CR><LF><pdu>
Defined values:
<pdu> Description
and 65))
hexadecimal format
15.12 AT+CPMS Preferred Message Storage

Set preferred AT+CPMS=<m +CPMS:
message em1> <used1>,<total1>,<
storage [,<mem2>] used2>,<total2>,<us
[,<mem3>] ed3>,<total3>
+CMS ERROR: <err>
OK
ERROR
Show the AT+CPMS? +CPMS:
current setting <mem1>,<used1>,<
total1,
<mem2>,<used2>,<
total2,
<mem3>,<used3>,<
total3>
+CMS ERROR: <err>
OK
ERROR
Test if the AT+CPMS=? +CPMS: (list of
supported <mem1>s),(list of
supported
<mem2>s),(list of
supported <mem3>s)
OK
ERROR
Description:
Selects memory storage <mem1>, <mem2> and <mem3> to be
used for reading, writing, etc. If chosen storage is not appropriate
for the ME, final result code +CMS ERROR: <err> is returned.
Test command returns lists of memory storage supported by the
TA.
The setting made by AT+CPMS=.... is valid for all channels.
The current setting applied via AT+CPMS will not be maintained
over a power cycle.
Defined values:
<mem1> Description
string type Memory from which messages are read and
deleted (commands List Messages +CMGL,
Read Message +CMGR and Delete Message
+CMGD)

<mem1> Description
“SM” SIM message storage. Default value
<mem2> Description
string type Memory to which writing and sending
operations are made (commands Send Message
from Storage +CMSS and Write Message to
Memory +CMGW)
<mem3> Description
string type Memory to which received SMSs are preferred to
be stored (unless forwarded directly to TE).
<used1>,<used2>,<used3
Description
>
integer type Total number of
messages currently in
<mem1>, <mem2> and
<mem3> respectively
<total1>,<total2>
Description
,<total3>
integer type Total number of
message locations in
<mem1>, <mem2> and
<mem3> respectively
Examples:
AT+CPMS=?
+CPMS: (“ME”,“SM”),(“ME”,“SM”),("ME",“SM”)
OK
AT+CPMS?
+CPMS: “ME”,0,100,“SM”,0,13,“SM”,0,13

OK
AT+CPMS=“me”,“me”,“sm”
+CPMS: 0,100,0,100,0,13
OK
15.13 AT+CSCA Service Centre Address


Set service centre AT+CSCA=<sca> OK
address [,<tosca>] ERROR
Show the current AT+CSCA? +CSCA:
setting <sca>,<tosca>
OK
ERROR
Test if the command AT+CSCA=? OK
is supported ERROR
Description:
Updates the SMSC address, through which mobile originated SMs
are transmitted. In text mode, the setting is used by send (+CMGS)
and write (+CMGW) commands. In PDU mode, the setting is used
by the same commands, but only when the length of the SMSC
address coded into <pdu> parameter equals zero. Note that a “+” in
front of the number in <sca> has precedence over the <tosca>
parameter, so that a number starting with “+” will always be treated
as an international number.
Defined values:
<sca> Description
string type 3GPP TS 24.011 RP SC address Address-Value
field in string format; BCD numbers (or GSM
default alphabet characters) are converted to
characters of the currently selected TE
character set
<tosca> Description
integer type 3GPP TS 24.011 RP SC address type-of-address
octet in integer format
Default if no "+" in sca.

<tosca> Description
145 ISDN/telephony numbering plan, international
number
Default if "+" in sca.
161 ISDN/telephony numbering plan, national
number
128-255 Other values refer 3GPP 24.008
Example:
AT+CSCA?
+CSCA: “44385016005”,145
OK
15.14 AT+CSCS Select Character Set

Set command AT+CSCS=<chset> OK
informs TA which ERROR
character set is used
by the TE
Show the current AT+CSCS? +CSCS: <chset>
setting OK
ERROR
Test if the command AT+CSCS=? +CSCS: (list of
is supported supported <chset>s)
OK
ERROR
Description:
This command informs the TA which character set <chset> is used
by the TE. The TA is then able to convert character strings correctly
between TE and ME character sets.
When TA-TE interface is set to 8-bit operation and the used TE
alphabet is 7-bit, the highest bit shall be set to zero.
Read command shows current setting and test command display
conversion schemes implemented in the TA.
Defined values:
<chset> Description
“UCS2” Unicode, 16-bit Universal Multiple Octet Coded
Character Set 2 (ISO/IEC 10646)

<chset> Description
“GSM” GSM default alphabet (3GPP 23.038). Note this
setting causes software flow control (Xon/Xoff)
problems. Default value
“IRA” International reference alphabet (ITU-T T.50).
Note this is the recommended default setting
by 3GPP 27.007
“8859-n” ISO 8859 graphic character sets, where n is an
integer (1-6,C,A,G,H) that indicates the specific
character set. Only the 8859-1 Latin1 character
set is supported.
"UTF-8" Universal text format, 8 bit
Example:
AT+CSCS?
+CSCS: “GSM”
OK
15.15 AT+CSMP Set Text Mode Parameters

Only Applicable to Text Mode

Set the text AT+CSMP=[ +CME ERROR: <err>
mode <fo> OK
parameters [,<vp>[,<pid
ERROR
> [,<dcs>]]]]
Show the AT+CSMP? +CSMP:
current <fo>,<vp>,<pid>,<dcs>
Test if the AT+CSMP=? OK
command is
supported
Description:
Used to select values for additional parameters needed when SM is
sent to the network or placed in a storage when text format
message mode is selected. It is possible to set the validity period
starting from when the SM is received by the SMSC (<vp> is in
range 0… 255). The <pid> parameter identifies the higher protocol
being used or indicates interworking with a certain type of
telematic service and <dcs> determines the way the information is
encoded as in GSM 03.38.
Defined values:

<fo> Description
0-255 Depending on the command or result code: first
octet of GSM 03.40 SMS-DELIVER, SMS-SUBMIT
(default value 17),SMS-STATUS-REPORT, or
SMS-COMMAND (Default value 2) in integer
format
<vp> Description
0-143 (TP-VP+1) x 5 minutes (i.e 5 minutes intervals
up to 12 hours)
144-167 12 hours + ((TP_VP-143) x 30 minutes) Default
value is 167.
168-196 (TP-VP-166) x 1 day
197-255 (TP-VP-192) x 1 week
<pid> Description
0-255 Protocol Identifier in integer format. Default
value is 0, according to 07.05 section 9.2.3.9
<dcs> Description
0-255 Data coding scheme. See GSM 03.38. UCS2 and
compressed text not supported. Default value is
0.
15.16 AT+CSMS Select Message Service


Select message AT+CSMS=<servic +CSMS:
service e> <mt>,<mo>,<bm
>
+CMS ERROR:
<err>
OK
ERROR

Show the current AT+CSMS? +CSMS:
setting <service>,<mt>,<
mo>,
<bm>
OK
ERROR
Test if the AT+CSMS=? +CSMS: (list of
supported <service>s)
OK
ERROR
Description:
Selects messaging service <service>. It returns the types of
messages supported by the ME: <mt> for mobile terminated
messages, <mo> for mobile originated messages and <bm> for
broadcast type messages. If the chosen service is not supported by
the ME (but is supported by the TA), final result code +CMS
ERROR: <err> is returned.
Defined values:
0 3GPP 23.040 and 23.041. The syntax of SMS AT
commands is compatible with 3GPP 27.005
Phase 2 version 4.7.0; Phase 2+ features which
do not require new command syntax may be
supported (e.g. correct routing of messages
with new Phase 2+ data coding schemes)
2..127 Reserved
<mt> Description
0 Mobile terminated messages not supported
1 Mobile terminated messages supported Default
<mo> Description
0 Mobile originated messages not supported
1 Mobile originated messages supported Default

<bm> Description
0 Broadcast messages not supported
1 Broadcast messages supported Default
15.17 AT*E2CMGA Modify message attribute

Set message AT*E2CMGA *E2CMGA: <attr> (for read
attribute =<op>,<ind operation)
ex>[,<attr>] OK
ERROR
Test if the AT*E2CMGA *E2CMGA: (list of supported
command is =? <op>s),(list of supported
supported <index>es,(list of supported
<attr>s)
Description:
This command reads or modifies (selected by <op>) the attributes
for a specific message selected by <index>.
Defined values:
<op> Description
0 Read attribute
1 Write attribute
<index> Description
Integer type Index number of message to be modified
(1-65535)
<attr> Description
0 Received-unread
1 Received-read
2 Stored unsent (only for <op>=0, read
attribute)
3 Stored sent (only for <op>=0, read attribute)
15.18 AT+CRES Restore SMS Settings

Restore settings AT+CRES[=<profile> +CMS ERROR: <err>
] OK
ERROR
Test if the command AT+CRES=? +CRES: (list of
<profile>s)
+CMS ERROR: <err>
OK
ERROR
Description:
This command restores message service settings saved by +CSAS
from non-volatile SIM memory to active memory. A SIM can
contain several profiles of settings. Only the settings controlled by
AT+CSCA are stored with this command.
Defined values:
0..1 Profile number where settings are to be stored.
Default value is 0
Note: The ATZ command is used to restore all other parameters
settings. AT+CRES only restores parameters set by AT+CSCA.
15.19 AT+CSAS Save SMS Settings

Save Settings AT+CSAS[=<pr +CMS ERROR:
ofile>] <err>
OK
ERROR
Test if the AT+CSAS=? +CSAS: (list of
supported <profile>s)
+CMS ERROR:
<err>
OK
ERROR
Description:
This command saves active message service settings to SIM
memory. A TA can contain several settings profiles. Only the
settings specified in the Service Centre Address command, +CSCA,
are saved.
Test command displays the supported profile numbers for reading
and writing of settings.
Defined values:
0..1 Manufacturer specific profile number where
settings are to be stored. Default value is 0
Note: The AT&W command is used to save all other parameters
settings. AT+CSAS only stores parameters set by AT+CSCA.

16 Short Message Services - Cell Broadcast
16.1 AT+CSCB Select Cell Broadcast Message Type

Common for both PDU and text modes

Select cell broadcast +CSCB=[<mode>[,< +CMS ERROR: <err>
message type mids>[,<dcss>]]] OK
ERROR
Show the current AT+CSCB? +CSCB:
setting <mode>,<mids>,<d
css>
OK
ERROR
Test if the command AT+CSCB=? +CSCB: (list of
OK
ERROR
Description:
Selects which types of CBMs are to be received by the ME.
Note that for mode 0, a value for <dcss> should be entered to
specify which <dcss> should be accepted.
Defined values:
<mode> Description
0 Message types in <mids> and <dcss> are
accepted. Default value.
1 Message types in <mids> and <dcss> are not
accepted
Not supported
<mids> Description
string type 3GPP 23.041 CBM Message Identifier in integer
format. All different possible combinations of
CBM message identifiers (refer <mid>) (default
is empty string);
e.g. “0,1,5-7”

<dcss> Description
string type 3GPP 23.038 CBM Data Coding Scheme in
integer format. All different possible
combinations of CBM data coding schemes
(refer <dcs>) (default is empty string); e.g. "0-
3,5"
Example:
AT+CSCB?
+CSCB: 0,“50”,"1"
OK
16.2 AT*EMWI Message Waiting Indication

Notes:
* - SIM is required for query.
** - Query will not operate in CFUN mode 4.

Set message AT*EMWI OK
waiting =<mode> +CME ERROR:
indication <err>
Shows the AT*EMWI? *EMWI:
current setting <mode>+CME
ERROR: <err>
Show if the AT*EMWI=? *EMWI: (list of
supported <mode>s)
+CME ERROR:
<err>
Response *EMWI:
<unsolicited>,
<status>,
(<count>)
Description:
This command interrogates voice mail status. This AT command
shall provide an indication of waiting messages and message count
if available. An unsolicited result code shall be enabled/disabled to
inform the host of a new message waiting. The host can read at
power up. USIM file contents shall have priority over CPHS
contents.
Defined values:
<mode> Description
0 Disable unsolicited voice mail indication.

<mode> Description
1 Enable unsolicited voice mail indication.
Default value.
2 Query voice mail indication for all lines.
<unsolicited> Description
0 This is a solicited response.
1 This is an unsolicited response.
0 The specific line has no voice mail waiting.
1 The specific line has voice mail waiting.
<count> Description
0-255 Integer type. Count of messages waiting, if
available.
Example:
Query command
AT*EMWI=2
*EMWI: 0,1,1
OK

17 SIM Commands
17.1 AT+CRSM Restricted SIM Access

Transmit AT+CRSM=<co +CRSM:
command mmand>[,<filei <sw1>,<sw2>[
d>[, ,<response>]
<P1>,<P2>,<P +CME ERROR:
3>[,<data>[,< <err>
pathid>]]]]
Test if the AT+CRSM=? OK
command is
supported
Description:
By using this command instead of Generic SIM Access +CSIM TE
application has easier but more limited access to the SIM database.
This command transmits to the MT the SIM <command> and its
required parameters. MT handles internally all SIM-MT interface
locking and file selection routines. As response to the command,
MT sends the actual SIM information parameters and response data.
MT error result code +CME ERROR may be returned when the
command cannot be passed to the SIM, but failure in the execution
of the command in the SIM is reported in <sw1> and <sw2>
parameters.
The TE should be aware of the precedence of the GSM/UMTS
application commands internal to the MT over the commands
issued by the TE.
When accessing a SIM/USIM some <fileid> values are common
between the different directory paths. In order to unambiguously
specify which common <fileid> is intended the command *ECDF
must first be used to select the active directory path to be used by
+CRSM.
Note that the *ECDF command effectively sets the active directory
for all subsequent +CRSM use.
Even if an EF can be uniquely identified by its <fileid> alone, if the
correct directory has not been selected by *ECDF then the file will
not be accessible.
Defined values:
<command> Description (SIM commands defined in 3GPP 51.011)

176 READ BINARY
178 READ RECORD

<command> Description (SIM commands defined in 3GPP 51.011)
192 GET RESPONSE
214 UPDATE BINARY
220 UPDATE RECORD
Other Reserved
values
NOTE 1: The MT internally executes all commands necessary for selecting
the desired file, before performing the actual command.
<fileid> Description
decimal Identifier of a elementary datafile on SIM.
integer Mandatory for every command except GET
RESPONSE
The values are defined in 3GPP 51.011.
NOTE 2: The range of valid file identifiers depends on the actual SIM and is
defined in 3GPP 51.011. Optional files may not be present at all.
<p1>,<p2>,<p
Description
3>
integer Parameters passed on by the MT to the SIM.
These parameters are mandatory for every
command, except GET RESPONSE.
The values are defined in 3GPP 51.011
<data> Description
hexadecima Information which shall be written to the SIM
l character
data (refer
to +CSCS)
<pathid> Description
hexadecima The path of an elementary file on the SIM/UICC
l string type in hexadecimal format as defined in ETSI TS 102
221

<sw1>,<sw2> Description
integer Information from the SIM about the execution of
the actual command. These parameters are
delivered to the TE in both cases, on successful
or failed execution of the command
<response> Description
hexadecima Response of a successful completion of the
l command previously issued
The GET RESPONSE command return data which
gives information about the current elementary
datafield. This information includes the type of
file and its size (refer to 3GPP 51.011)
After the READ BINARY or READ RECORD
command, the requested data will be returned
A <response> is not returned after a successful
UPDATE BINARY or UPDATE RECORD command
Command Help
The AT+CRSM description in the 27.007 spec only shows the general syntax, and refers
the reader to other specs for specific SIM/USIM commands. Here are a few specific
examples.
READ BINARY:
AT+CRSM=176,<fileid>,<OffsetHi>,<OffsetLo>,<Len>
UPDATE BINARY:
AT+CRSM=214,<fileid>,<OffsetHi>,<OffsetLo>,<Len>,"<data>"
READ RECORD:
AT+CRSM=178,<fileid>,<RecNum>,<mode>,<RecLen>
UPDATE RECORD:
AT+CRSM=220,<fileid>,<RecNum>,<mode>,<RecLen>,"<data>"
Parameters:
<fileid> Must be entered in decimal
<RecNum> Record number, starting at record 1.
<mode> 2=Next record. <RecNum> must be 0.
3=Previous. <RecNum> must be 0.
4=Absolute. If <RecNum> = 0, then Current record.
<Len> Length of file, in bytes.
<RecLen> Length of record, in bytes.
<data> Hex data, two hex digits per byte.
Examples:
Read record 1 of linear fixed file 0x6F47 (28487). It has 30 bytes/record.
AT+CRSM=178,28487,1,4,30

+CRSM:
144,0,"00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
"
Read the next record.

AT+CRSM=178,28487,0,2,30
+CRSM:
144,0,"00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
"
Update record 1.
AT+CRSM=220,28487,1,4,30,"1111111111111111111111111111111111111111111111
11111111111111"
+CRSM: 144,0
Read binary file 6F7E (28542). It has 11 bytes.

AT+CRSM=176,28542,0,0,11
+CRSM: 144,0,"FFFFFFFF130130012D0001"
Update binary file 6F7E.

AT+CRSM=214,28542,0,0,11,"0123456789ABCDEF012345"
+CRSM: 144,0
17.2 AT*E2SDR SIM Detection Reporting

Enable/disabl AT*E2SDR=< +CME ERROR <err>
e SIM n> OK
detection
ERROR
reporting
Read current AT*E2SDR? *E2SDR: <n>,<stat>
setting OK
ERROR
Test if the AT*E2SDR=? *E2SDR: (list of supported
command is <n>s)
supported OK
ERROR
Description:
The AT*E2SDR command enables or disables SIM detection
unsolicited reports. When reporting is enabled, the unsolicited
response *E2SDR is sent every time a SIM card is removed from
the external or internal SIM card slot. The unsolicited response
reports the current SIM card presence status as defined in the table
below.

If the reporting is enabled, a report will always be sent at start-up,
even if there has not been a change.
The report setting is persistent if the AT&W command is used to
save the current profile.
Note that the platform currently does not support SIM hot
swapping. Therefore this unsolicited response will only indicate the
removal of a SIM. An insertion of a new SIM will not be detected
until a complete restart of the system (note that a transition into
CFUN=4 is not sufficient - the system must be reset).
Note that due to a platform constraint, for the system start-up event
this unsolicited response will only be sent for the case where a
(U)SIM is present. If there is no (U)SIM present at start-up then the
response will not be automatically sent.
Defined values:
<n> Description
0 SIM detection reporting disabled. Default
value.
1 SIM detection reporting enabled
The SIM detection reporting setting is stored in the user profile.
17.2.1 *E2SDR SIM Detection Unsolicited Response

*E2SDR reports changes in SIM presence status. If enabled by
the
AT*E2SDR command, a report is generated every time a SIM
card is
removed from the internal or external SIM card holder.
Format:
*E2SDR: <n>,<stat>
<stat> Description
0 No (U)SIM present
1 GSM SIM is present
2 3G USIM is present
17.3 AT+CPIN PIN Control

Request PIN Control AT+CPIN=<pin>[,<n +CME ERROR:
ewpin>] <err>
OK
ERROR

Show the current AT+CPIN? +CPIN: <code>
setting +CME ERROR:
<err>
OK
ERROR
Test if the command AT+CPIN=? +CME ERROR:
is supported <err>
OK
ERROR
Description:
Sends the password to the ME, which is necessary to make the ME
operational (SIM PIN or SIM PUK). If the PIN is to be entered
twice, the TA autonomously repeats the PIN. If no PIN request is
pending, no action is taken towards the ME and an error message
(+CME ERROR <err>) is returned to the TE.
If the PIN required is PUK, the second pin is required. This second
PIN, <newpin>, is used to replace the old PIN in the SIM in the
active application in the UICC (GSM or USIM) or SIM card.
Note:
Commands which interact with MT that are accepted when MT is
pending SIM PIN or SIM PUK are: +CGMI, +CGMM, +CGMR,
+CGSN, D112; (emergency call), +CPAS, +CFUN, +CPIN and
+CIND (read and test command only).
Defined values:
<pin>,<newpin> Description
string The range for the SIM PIN is 4 - 8 digits. The SIM
PUK consists of 8 digits.
PH-NET PIN, PH-NETSUB PIN, PH-SP PIN, PH-CORP
PIN, PH-ESL PIN and PH-SIMLOCK PIN are 8-16
digits.
<code> Description
READY MT is not pending for any password
SIM PIN ME is waiting for UICC/SIM PIN to be given
SIM PUK ME is waiting for UICC/SIM PUK to be given
PH-SIM PIN ME is waiting for ME_lock_code password to be
given (PCK in 3GPP 22.022).

<code> Description
SIM PIN2 ME is waiting active application in the UICC (GSM
or USIM) or SIM card PIN2 to be given (this
<code> is to be returned only when the last
executed command resulted in PIN2
authentication failure (i.e. +CME ERROR: 17); if
PIN2 is not entered right after the failure, the ME
does not block its operation)
SIM PUK2 ME is waiting active application in the UICC (GSM
or USIM) or SIM card PUK2 to be given (this
<code> is to be returned only when the last
executed command resulted in PUK2
authentication failure (i.e. +CME ERROR: 18); if
PUK2 and new PIN2 are not entered right after the
failure, the ME does not block its operation)
PH-NET PIN ME is waiting network personalization password
to be given (NCK in 3GPP 22.022).
PH-NETSUB ME is waiting network subset personalization
PIN password to be given (NSCK in 3GPP 22.022).
PH-SP PIN ME is waiting service provider personalization
password to be given (SPCK in 3GPP 22.022).
PH-CORP PIN ME is waiting corporate personalization password
to be given (CCK in 3GPP 22.022).
PH-ESL-PIN Extended SIM-Lock. Ericsson specific
BLOCKED The SIM card is blocked for the user.
Example:
AT+CPIN=“0000”
OK
17.4 AT*EPEE Pin Event

Enable/disable PIN1 AT*EPEE=<onoff> +CME ERROR: <err>
code events OK
ERROR
Read the current AT*EPEE? *EPEE: <onoff>
status for PIN1 Code +CME ERROR: <err>
Request
OK
ERROR

Test if the command AT*EPEE=? *EPEE: (list of
is supported supported <onoff>s)
+CME ERROR: <err>
OK
ERROR
Description:
The command requests the module to report when the PIN1 code
has been entered and accepted.
<onoff> Description
0 Request for report on correctly entered PIN1
code is not activated (off). Default value
1 Request for report on correctly inserted PIN1
code is activated (on)
17.4.1 *EPEV Pin Event Unsolicited report

The *EPEV PIN Event code unsolicited response is issued when a
pin code has been entered and accepted. The unsolicited reports are
enabled using the AT*EPEE command (see above).
The *EPEV unsolicited response has the following syntax (no
parameters): *EPEV
17.5 AT*E2SSN SIM Serial Number

Request SIM Serial AT*E2SSN <SSN>
number
Shows if the AT*E2SSN=? OK
command is ERROR
supported
Description:
This command requests the SIM serial number held in the ICCid
field (address 2FE2) on the SIM and returns all valid characters to
the TE. This field is detailed in GSM 11.11 section 10.1.1.
Defined values:
<SSN> Description
String SIM serial number
without
double
quotes
Examples:
AT*E2SSN
8944110063503224707
OK
where the raw data contained in the ICCid field on the SIM is
984411003605234207F7.
Test command:
AT*E2SSN=?
OK
17.6 AT+CIMI Subscriber Identification

Read IMSI AT+CIMI <IMSI>
+CME ERROR <err>
OK
ERROR
Test if the command AT+CIMI=? OK
is supported ERROR
Description:
Causes the TA to return <IMSI>, identifying the individual SIM
attached to the ME.
Defined values:
<IMSI> Description
string International Mobile Subscriber Identity
without
double
quotes
Examples:
AT+CIMI
234157411545420
OK
17.7 AT*EPIN Additional PIN Information

Request PIN AT*EPIN *EPIN:<chv1>,<unbl_c
information ? hv1>,<chv2>,<unbl_c
hv2>,<NCK>,<NSCK>
,<SPCK>,<CCK>
OK
ERROR
+CME ERROR <err>
Test if the command is AT*EPIN OK
supported =? ERROR
Description:
This command returns the number of remaining attempts of
entering the correct PIN code for the SIM card in use. The
command returns the number of remaining attempts for PIN1
(CHV1), PIN2 (CHV2), PUK1 (unblock CHV1) and PUK2
(unblock CHV2).
The command also returns the number of remaining attempts for
entry of the ME Personalization (SIM Lock) unlock keys for
Network Lock (NCK), Network Subset Lock (NSCK), Service
Provider Lock (SPCK), and Corporate Lock (CCK).
This command is available without SIM access.
The setting is persistent through a power cycle.
Defined values:
<chv1>,<cvh2
Description
>
0 No more attempts remain
1..3 Number of remaining attempts
<unbl_chv1>,<unbl_cvh
Description
2>
0 No more attempts
remain
1..10 Number of remaining
attempts
<NCK>, <NSCK>,
Description
<SPCK>, <CCK>
0 No more attempts
remain

<NCK>, <NSCK>,
Description
<SPCK>, <CCK>
1..15 Number of remaining
attempts
17.8 AT+CEAP EAP Authentication

Exchange EAP packets AT+CEAP=<dfname> +CEAP:
, <EAPMethod>, <EAPsessionid>,
<EAP_packet_data>[, <EAP_packet_resp>
<DFeap>] +CME ERROR: <err>
setting
Test command to AT+CEAP=? OK
is supported
Description:
This command allows a TE to exchange EAP packets with the
UICC or the ME.
Prior to the execution of this command, the TE shall retrieve the
available AIDs using the +CUAD command. The TE shall select
one appropriate AID to be addressed. Selection may include asking
the user, and considering EAP methods supported by the AIDs. The
TE shall set the <dfname> value using the selected AID and shall
set the <EAPMethod> value to the requested EAP method. The TE
may set the <DFeap> value to the directory file identifier that is
applicable to the <EAPMethod>; which is derived from the
discretionary data returned by +CUAD. The parameter is mandatory
for EAP terminated in UICC.
If the targeted application on the UICC does support the requested
EAP method, the MT shall use the value provided in <DFeap>, and
it shall transmit the <EAP_packet_data> to the UICC application
using the Authenticate APDU command as defined in ETSI TS 102
310. The appropriate DFEAP in the ADF must be selected prior to
the submission of an EAP Authenticate command with the <EAP
packet data>. Then the EAP Response data sent by the UICC
application in its response to the Authenticate command shall be
provided to the TE in <EAP_packet_resp>.
If the targeted application on the UICC does not support the
requested EAP method and if the MT does support this method then
the <EAP packet data> shall be handled by the MT. During the
handling of the EAP method, the MT shall run the authentication
algorithm on the SIM or USIM, respectively.
Also the MT has to allocate an <EAPsessionid> in order to identify
an EAP session and its corresponding keys and parameters.

If neither the MT nor the appropriate UICC application support the
requested EAP method, the MT shall respond with CME ERROR:
49, (EAP method not supported).
Note that this implementation supports only UICC handling of EAP
methods.
Defined values:
<dfname> Description
Hexadecimal String all selectable
type applications
represented in the
UICC by an AID are
referenced by a DF
name coded on 1 to
16 bytes.
<EAPMethod> Description
Hexadecimal String this is the EAP
type Method Type as
defined in RFC 3748
in 1 byte format or in
8 byte expanded
format.
<EAP_packet_data> Description
Hexadecimal String as defined in ETSI TS
type 102 310
<DFeap> Description
Hexadecimal String Contains the DF(EAP)
type associated with the
specified
<EAPMethod> on the
SIM/UICC as defined
in ETSI TS 102 310

<EAPsessionid> Description
Integer type this is the identifier of
the EAP session to be
used in order to
retrieve the EAP
parameters with the
+CERP command.
Value range is from 1
to 4294967295
<EAP_packet_resp> Description
Hexadecimal String as defined in ETSI TS
type 102 310
17.9 AT+CERP EAP Retrieve Parameters

Retreive EAP +CERP=<EAPsessioni +CERP:<EAP_paramet
parameters d>,<EAPparameter> er_response>
+CME ERROR: <err>
setting
Test command to AT+CERP=? OK
is supported
Description:
This command allows a TE to retrieve EAP session parameters /
derived keys after a run of the +CEAP command. If the EAP
session is handled by the UICC then the MT shall return the content
of the elementary file corresponding to the indicated
<EAPparameter>. Those EFs are defined in ETSI TS 102 310.
If the MT handles the EAP session then the MT shall return the
corresponding parameter encoded as defined for EAP files, see
ETSI TS 102 310.
For example, the keys shall be retrieved in the TLV format
described in ETSI TS 102 310.
If neither the MT nor the appropriate UICC application can provide
the requested information (e.g. because the requested EAP session
ID does not exist), the MT will respond with CME ERROR: 50,
(Incorrect parameters).
Note that this implementation supports only UICC handling of EAP
methods.

Defined values:
<EAPparameter> Description
01 Keys
02 Status
03 Identity
04 Pseudonym
<EAPsessionid> Description
Integer type this is the identifier of
the EAP session to be
used in order to
retrieve the EAP
parameters
corresponding to an
active EAP session
with EAP Retreive
Parameters +CERP
command.
<EAP_parameter_respons
Description
e>
Hexadecimal string depends on the value
of <EAPparameter>;
format of the
parameter response is
as defined in ETSI TS
102 310
17.10 AT+CUAD UICC Application Discovery

Read the available +CUAD +CUAD: <response>
UICC applications +CME ERROR: <err>
setting
Test command to AT+CUAD=? OK
is supported
Description:

This command asks the MT to discover what applications are
available for selection on the UICC. According to TS 102.221, the
ME shall access and read the EFDIR file in the UICC and return the
values that are stored in its records. Each record contains the AID
and optionally application parameters of one of the applications
available on the UICC.
Defined values:
<response> Description
Hexedecimal string the response is the
content of the EFDIR

18 SIM Application Toolkit
18.1 AT*ESTKMENU Menu Selection
Description Command Possible responses

Do the menu AT*ESTKMENU=<item +CME ERROR <err>
selection > OK
ERROR
Read the SIM AT*ESTKMENU? *ESTKSMENU:<alphaid>,<code
Toolkit Menu type>,<itemcount><CR><LF>
<id1>,<text1>[,<CR><LF><i
d2>,<text2><CR><LF>,…<id
n>,<textn>
+CME ERROR <err>
OK
ERROR
Test if the AT*ESTKMENU=? +CME ERROR <err>
command is OK
supported
ERROR
Description:
User has selected a menu item set up by the SET UP MENU
proactive command from the SIM/USIM.
The Read form AT*ESTKMENU? queries the device and
causes the *ESTKSMENU unsolicted repsonse to to be sent.
Defined values:
<item> Description
Integer type The identifier is a single byte between 1 and
255. It identifies the selected menu item
corresponding to SET-UP MENU command.
18.2 AT*ESTKRES Terminal Response

Send the AT*ESTKRES=< OK
TERMINAL command>,<re +CME ERROR:
RESPONSE sult>,[<result2 <err>
>],[<text>],[<i
d>]

Test if the AT*ESTKRES=? OK
command is ERROR
supported
Description:
This AT command provides the method for responding to the
SIM/USIM Toolkit commands. The host will provide as much
information that it knows. In some instances, the wireless
modem device will have more detailed information and is
expected to provide this in the TERMINAL RESPONSE sent to
the SIM/USIM.
Defined values:
<command> Description
0 DISPLAY TEXT
1 GET INKEY
2 GET INPUT
3 PLAY TONE
4 SELECT ITEM
5 SEND SS
6 SEND USSD
7 SET UP CALL
8 SET UP MENU
9 BLANK
10 REFRESH
11 SEND SHORT MESSAGE
12 OPEN CHANNEL
13 CLOSE CHANNEL
14 RECEIVE DATA
15 SEND DATA
<result> Description
decimal value for <result> must be entered as a decimal
integer integer as listed.
0 Command performed successfully
1 Command performed with partial comprehension
2 Command performed with missing information
3 REFRESH performed with additional EFs read

4 Command performed successfully but requested
icon could not be displayed
5 Command performed but modified by call
control by SIM
6 Command performed successfully, limited
service
7 Command performed with modification
10 Open Channel Proactive SIM/USIM session
terminated by the user
16 Proactive SIM/USIM session terminated
successfully
17 Backward move in proactive SIM/USIM session
requested
18 No response from user
19 Help information required by user
not supported
20 USSD transaction terminated by the user
21 Open channel request rejected by user
32 Host currently unable to process command
33 Network currently unable to process command
34 User did not accept call set up request
35 User cleared down call before connection or
network release
36 Action in contradiction with the current timer
state
not supported
37 Interaction with call control by SIM, temporary
problem
38 Launch browser generic error
not supported
48 Command beyond host’s capabilities
49 Command type not understood by host
50 Command data not understood by host
51 Command number not known by host
52 SS Return Error (error cause handled by wireless
modem device
53 SMS RPERROR

54 Error, required values are missing
55 USSD Return Error (error cause provide by
wireless modem device
56 Multiple card command error
not supported
57 Interaction with call control by SIM or MO SM
control by SIM, permanent problem
58 Bearer independent Protocol error
59 Access technology unable to process command.
<result2> Description
0 No specific cause can be given
1 Screen is busy
2 Host currently busy on call
3 Host currently busy on SS transaction
7 Not in speech call
8 Host currently busy on USSD transaction
<text> Description
String type 0-9,*,#,+
GSM 3.38 SMS default alphabet (unpacked)
YES/NO
<id> Description
1-255 Identifier of menu item for the SELECT ITEM
command
Note: For <command>=7 (SET UP CALL), the <text> parameter is required as the
number to call.
Note: A call that is originated from a SIM proactive command has to be hung up using the
command
AT*estkres=7,16
18.3 SIM Toolkit Proactive Command Unsolicited Responses
18.3.1 *ESTKCALL Set Up Call

Command Possible responses
*ESTKCALL=<mode>,[<alphaid>],<cod
etype>,<dest>,[<duration>,<capability
config>,<CallSetupAlphaId>
Description:
The host will handle the initiation of new calls by the
SIM/USIM Toolkit.
Defined values:
<mode> Description
0 Set up call, but only if not currently busy on
another call
1 Set up call, but only if not currently busy on
another call, with redial
2 Set up call, putting all other calls (if any) on hold
3 Set up call, putting all other calls (if any) on hold,
with redial
4 Set up call, disconnecting all other calls (if any)
5 Set up call, disconnecting all other calls (if any),
with redial
<alphaid> Description
String type Corresponds to Alpha Identifier specified in
51.014 and 31.111
For <codetype>=0, this is a displayable text
string.
For <codetype>=1, this is an ASCII hexadecimal
string representation of the UCS2 2-octet
characters.
<codetype> Description
0 SMS default alphabet
1 UCS2 alphabet
<dest> Description
Destination address (called party number)

<duration> Description
integer type redial duration (milliseconds)
Response
The response to SET UP CALL is TERMINAL RESPONSE as
follows
AT*ETSTKRES=7,<result>,<dialstring>,<result2>
successfully
requested
(require <result2>)
34 User did not accept call set-up request
35 User cleared down call before connection or
network release
48 Command beyond Host capabilities
52 SS Return Error (Firmware to provide the error
cause to SIM/USIM)
<dialstring> Description
string type 0-9,*,#,+
3 Host currently busy on SS Transaction
18.3.2 *ESTKCC Call Control Event From SIM/USIM Application

Toolkit
Command Possible Responses

*ESTKCC: <resultMode>[,<errCode>,
<oldType>[,<newType>]],<”alpha”>

When Call Control by SIM/USIM is activated in SIM/USIM
Profile, the result of the STK Call Control will return as this
unsolicited event.
<resultMode> Description
1 Allowed, no modification.
2 Allowed, modified (type or dial string).
3 Not allowed.
4 Call control failed.
<errCode> Description
0 Call not allowed.
1 SIM/USIM toolkit is busy, cannot setup call.
2 SIM/USIM error causes setup fail.
3 There is other ongoing call setup.
4 Beyond ME capabilities.
5 Call control by SIM/USIM, modified.
6 Call control by SIM/USIM, not allowed,
temporary.
7 Call control by SIM/USIM, not allowed,
permanent.
<oldType>,
Description
<newType>
1 Voice Call.
2 SS.
3 USSD.
4 SMS.
<”alpha”> Description
String type Alphanumeric representation of the alpha ID text
that is displayed along with the STK CC result.
Note:
When <resultMode> is not “Call Control failed”, the <errCode>
field will not be present.
*ESTKCC: <resultMode>,<oldType>,<newType>,<”alpha”>
When <resultMode> is “Call Control failed”, the <errCode> field
will always be present and the <newType> field will not be present.
*ESTKCC: <resultMode>,<errCode >,< oldType >,<”alpha”>
18.3.3 *ESTKCLOSE Close Channel

*ESTKCLOSE: <alphaid>,<codetype>
Provides an indication that the channel is being closed. No
terminal response is required.
Defined values:
string type Corresponds to Alpha Identifier specified
in 51.014 and 31.111
For <codetype>=0, this is a displayable
text string.
For <codetype>=1, this is an ASCII
hexadecimal string representation of the
UCS2 2-octet characters.
1 UCS2 alphabet
Response:
All responses are invalid and will be ignored.
18.3.4 *ESTKDISP Display Text

Displays text of *ESTKDISP:
unsolicited result <priority>,<clear>,<codetype><CR><LF
code ><data>
Description:
The ME passes the parameters within DISPLAY TEXT command
to the external application by means of the unsolicited result code
*ESTKDISP.
Command AT*ESTKDISP allows the external application to send
the appropriate answer after receiving the unsolicited result code,
and before the timeout expires.
If Answer command is sent once the timeout expires, an ERROR
response is generated.
Test command returns the list of supported <answer>. Values
follow GSM 11.14 standard
Defined values:

<priority> Description
0 Display normal priority text
1 Display high priority text
<clear> Description
0 Clear message after a delay (60s)
1 Wait for user to clear message
1 UCS2 alphabet
<data> Description
string Text of message to be displayed. 240 characters
maximum
string.
characters.
Response
AT*ESTKRES=0,<result>,[<result2>]
16 Hang up call
requested
(require <result2>)
1 Screen busy
18.3.5 *ESTKGIN Get Input

*ESTKGIN:
<input>,<codetype>,<echo>,<minl>,<m
axl><CR><LF><data>
Description:
The host will display this request for input from the SIM/USIM
Toolkit application. Data entered by the user shall be returned
to the wireless modem device.
Defined values:
<input> Description
1 0-9, *, #, + only
2 Alphabet set
1 UCS2 alphabet
<echo> Description
1 Echo user input on
display
0 Hide user input
<minl> Description
0 No minimum length
1-255 Minimum length
<maxl> Description
255 No maximum length
0-254 Maximum length

<data> Description
String type Text to be displayed
For <codetype>=0,
this is a displayable
text string.
For <codetype>=1,
this is an ASCII
hexadecimal string
representation of the
UCS2 2-octet
characters.
Response:
AT*ESTKRES=2,<result>,,<text>
successfully
requested
<text> Description
String type Single digit within this range: 0-9,*,#
or +
GSM 3.38 SMS default alphabet,
unpacked
18.3.6 *ESTKKEY Get Inkey

*ESTKKEY:<input>,<codetype><CR><LF><da
ta>
Description:
The host will display the text message provided in *ESTKKEY.
The single character or digit shall be returned to the wireless
modem device.
Defined values:

<input> Description
0 YES/NO
1 0-9,*,#,+ only
2 Alphabet set
1 UCS2 alphabet
<data> Description
For <codetype>=0, this is a
displayable text string.
hexadecimal string representation of
the UCS2 2-octet characters.
Response
AT*ESTKRES=1,<result>,,<text>
successfully
(require <result2>)
<text> Description
String type Single digit within this range: 0-9,*,#
or +
A single character from GSM 3.38
SMS default alphabet, unpacked
18.3.7 *ESTKITEM Select Item

*ESTKITEM:<title>,<codetype>,<numitems
><CR><LF><id1>,<text1>[<CR><LF><id
2>,<text2><CR><LF>…<idn><texto>]
Description:
The host will display a list of items and return the selected item
to wireless modem device.
Defined values:
<title> Description
String type Text describing menu
For <codetype>=0, this is a displayable text string.
For <codetype>=1, this is an ASCII hexadecimal string
representation of the UCS2 2-octet characters.
1 UCS2 alphabet
<numitems> Description
1-255 The number of menu items to display
<id> Description
1-255 The identifier of menu item
<text> Description
String type Text of menu item
For <codetype>=0, this is a displayable text string.
For <codetype>=1, this is an ASCII hexadecimal string
representation of the UCS2 2-octet characters.
Response
AT*ESTKRES=4,<result>,,,<id>
successfully

requested
<id> Description
1-255 Identifier of menu item
18.3.8 *ESTKOPEN Open Channel

*ESTKOPEN: <alphaid>,<codetype>,<bearer>
Description:
Provides an indication of a data channel open request.
Defined values:
in 51.014 and 31.111
text string.
1 UCS2 alphabet
<bearer> Description
1 GPRS bearer
Response:
AT*ESTKRES=12,<result>
0 Open channel request accepted by user
21 Open channel request rejected by user

20 User indicates that ME is busy
10 Proactive open channel request terminated
by user
18.3.9 *ESTKRCVD Receive Data

*ESTKRCVD: <alphaid>,<codetype>
Description:
Provides an indication that data is being received on the open
channel. No terminal response is required.
Defined values:
in 51.014 and 31.111
text string.
1 UCS2 alphabet
Response:
18.3.10 *ESTKRSH Refresh

*ESTKRSH: <refreshType>[<CR><LF><EF
list>]
Description:
The REFRESH command contains the refresh type and the list
of EF files (separated by comma), if any.
In the case the refresh type is not SIM/USIM RESET, EF list
will be given and cached data in the firmware will be updated.
The host will need to update any cached data and respond with

Terminal Response to inform the SIM/USIM if the command is
carried out successfully. If the response is not result=0 or 3, the
same command will be send again.
In the case the refresh type is SIM/USIM RESET, the host will
need to response if the reset can be carried out (result=0) or
currently unable to process the reset (result=20). If the
response is result=0, the firmware will be reset, and the host
will need to turn radio back on again. To save unsaved data, the
host shall perform such task before responding back to the
firmware using Terminal Response. If the response result=20,
the firmware will resend the command again at a later time.
Defined values:
<refresh type> Description

0 Initialization with full file change
1 File change
2 Initialization with file change
3 SIM/USIM Initialization
4 SIM/USIM Reset
<EF list> Description

List of EF files that have changed corresponding
to file definitions given in the standard.
0xFF No files have changed
Response
The response to REFRESH is TERMINAL RESPONSE
described as follows:
AT*ESTKRES=10 ,<result>, [<result2>]
3 Refresh performed with additional EF files read
(require <result2>)
1 Screen busy
18.3.11 *ESTKSMENU Set Up Menu

*ESTKSMENU:<alphaid>,<codetype>,<itemcou
nt><CR><LF><id1>,<text1>[,<CR><LF><id
2>,<text2><CR><LF>,…<idn>,<textn>
Description:
The SET UP MENU command is used to add SIM/USIM
applications for selection to the host application menu system.
The SET UP MENU command is also used to remove
SIM/USIM applications from the menu system.
Defined values:
String type Text description of menu
“NULL” Indicates that the alphaid is not available
1 UCS2 alphabet
<itemcount> Description
integer type number of items
<id> Description
1-255 Item number of menu item
<text> Description
String type Text for menu item
Response:
48 Command beyond host capabilities
18.3.12 *ESTKSNDD Send Data

*ESTKSNDD: <alphaid>,<codetype>
Description:
Provides an indication that data is being sent on the open
channel. No terminal response is required.
Defined values:
in 51.014 and 31.111
text string.
1 UCS2 alphabet
Response:
18.3.13 *ESTKSMS Send Short Message

*ESTKSMS:
[<alphaid>],<alphabet>,<result>
Description:
The wireless modem device will be responsible for sending the
SIM/USIM Toolkit application SMS message. The result of
sending the message shall be reported to the host. The host will
display an info. Box indicating that an SMS message was sent.
However, this will be received “after the fact”. If <alphaid> is
not sent with the AT command, then the host will inform the
user that an SMS had been sent with a generic display message.
If the Alpha id is valid then it will be displayed. If the SEND
SHORT MESSAGE command from the SIM/USIM contains an
empty/NULL Alpha Identifier, then this AT command shall not
be sent to the host.
Defined values:

Corresponds to Alpha Identifier specified
in 51.014 and 31.111
<alphabet> Description
1 UCS2 alphabet
0 SMS sent successfully
1 SMS operation failed
Response
AT*ESTKRES=11,0
18.3.14 *ESTKSS Send SS

*ESTKSS:<alphaid>,<codetype>,<SSstring>
Description:
The host is responsible for parsing the SSstring and initiating
the SS procedures. When the alpha id is sent by the SIM/USIM
toolkit application, it will be displayed while the host is
processing the Supplementary Service procedure. If the alpha
id indicates that it is empty, then no indication is given to the
user that a supplementary service procedure is being processed.
If no alpha id is provided, then the normal procedures for
processing a supplementary service procedure shall be
followed. The SS procedure will not be included in the Last
Number Dialed list.
Defined values:
<alpha_id> Description
String type Text message to be displayed while processing
Supplementary Service string
string.
characters.
“NULL” Empty alpha identifier

1 UCS2 alphabet
<SS_string> Description
String type a supplementary service control procedure,
coded as for EF_ADN
Response:
AT*ESTKRES=5,<result>,<result2>
successfully
requested
(require <result2>)
48 Command beyond Host capabilities
52 SS Return Error (firmware must provide the error
cause
3 Host currently busy on SS transaction
18.3.15 *ESTKTONE Play Tone

*ESTKTONE:
[<alphaid>],[<codetype>],<tone>,[<unit>,<d
uration>]
Description:
AT*ESTKTONE is sent to the host to play a tone.
Defined values:

String type Text message to be displayed during tone
string.
characters.
“NULL” Indicates an empty alphaid
1 UCS2 alphabet
<tone> Description
8 Ringing tone
10 General Beep
11 Positive acknowledgement
12 Negative acknowledgement
Maybe others
<unit> Description
0 Minutes
1 Seconds
2 Tenths of seconds
<duration> Description
1-255 Value in <units>
Response:
successfully
requested

18.3.16 *ESTKUSSD Send USSD

*ESTKUSSD:
[<alpha_id>],<codetype>,<USSDstring>
Description:
The host is responsible for parsing the USSD string and
initiating the USSD procedures. When the alpha id is sent by
the SIM/USIM toolkit application, it will be displayed while the
host is processing the initial USSD procedure. If the alpha id
indicates that it is empty, then no indication is given to the user
that a USSD procedure is being processed. If no alpha_id is
provided, then the normal procedures for processing a USSD
procedure shall be followed. The USSD procedure will not be
included in the Last Number Dialed list.
Defined values:
String type Text message to be displayed
1 UCS2 alphabet
<USSDstring> Description
String type USSD string, coded as for EF_ADN
Response:
AT*ESTKRES=6,<result>,<result2>
successfully
requested

20 USSD transaction terminated by the user
(require <result2>)
52 SS Return Error (wireless modem device must
provide the error cause)
55 USSD Return Error (wireless modem device must
provide the error cause
3 Currently busy on SS transaction
8 Currently busy on USSD transaction
18.3.17 *ESTKSIMT Setup Idle Mode Text

*ESTKSIMT: <text>, <codetype>
Description:
Displays a text string to be used by the ME as standby mode
text.
Defined values:
<text> Description
“NULL” Indicates empty Idle Mode Text string
1 UCS2 alphabet
Response:
The AT*ESTKRES terminal response for this command
requires you to enter the code type
that was sent in the unsolicited message as a parameter in the
reply.
AT*ESTKRES=16,<result>,<codetype>

successfully
(require <result2>)
18.3.18 *ESTKDTMF Send DTMF tone

*ESTKDTMF [<alphaid>], [<DTMFstring>],
[<codetype>]
Description:
The DTMF Tones will be played in the earpiece. The host will
display the text passed in the proactive command to the screen
if present.
There is no AT*ESTKRES reply message required for this

command. The Terminal Response will be sent automatically
when all the tones have been played.
Defined values:
String type Text message to be displayed during tone
<DTMFstring> Description
String type String representative of DTMF sequence to be
played
1 UCS2 alphabet
Response:

19 Supplementary Services
19.1 AT+COLP Connected Line Identification Presentation

Request connected AT+COLP=[<n>] OK
line identification ERROR
presentation
Show the current AT+COLP? +COLP: <n>,<m>
setting OK
ERROR
Test if the command AT+COLP=? +COLP: (list of
OK
ERROR
Description:
This command refers to the GSM/UMTS supplementary service
COLP (Connected Line Identification Presentation) that enables a
calling subscriber to get the connected line identity (COL) of the
called party after setting up a mobile originated call. The command
enables or disables the presentation of the COLP at the TE. It has
no effect on the execution of the supplementary service COLR in
the network.
Read command gives the status of <n>, and also triggers an
interrogation of the provision status of the COLP service according
3GPP TS 22.081 (given in <m>).
value.
Defined values:
<n> Description
0 Enable. Default value.
1 Disable
<m> Description
0 COLP not provisioned
1 COLP provisioned
2 unknown (e.g. no network, etc.)

19.1.1 +COLP Connected Line Identification Presentation
Unsolicited Response
Description:
When enabled (and allowed by the called subscriber), COLP
intermediate result code is returned from the TA to the TE before
any +CR or V.25ter responses in the following format:
+COLP: <number>,<type>[,<subaddr>,<satype> [,<alpha>]]
19.2 AT+CACM Accumulated Call Meter

Reset the ACM AT+CACM=[<passw +CME ERROR: <err>
(Accumulated Call d>] OK
Meter) value on the
ERROR
SIM
Show the current AT+CACM? +CACM: <acm>
value +CME ERROR: <err>
OK
ERROR
Tests if the AT+CACM=? +CME ERROR: <err>
command is OK
supported
ERROR
Description:
Resets the Advice of Charge related accumulated call meter value in
SIM file EFACM. ACM contains the total number of home units for
both the current and preceding calls. SIM PIN2 is usually required
to reset the value. If setting fails an ME error, +CME ERROR:
<err> is returned. See “ +CME ERROR (Mobile Equipment Error
Code)”.
Note: This command is only valid for line 1 irrespective of the
*ELIN command settings.
Read command returns the current value of ACM.
Defined values:
String type SIM-PIN2
<acm> Description
String type Accumulated call meter value similarly coded as
<ccm> under +CAOC

19.3 AT+CAMM Accumulated Call Meter Maximum

Set command AT+CAMM=[<ac +CME ERROR:
sets the Advice of mmax> <err>
Charge related [,<passwd>]] OK
accumulated call
ERROR
meter maximum
value in SIM file
EFACMmax
Read the current AT+CAMM? +CAMM:
value <acmmax>
+CME ERROR:
<err>
OK
ERROR
Test if the AT+CAMM=? +CME ERROR:
command if <err>
supported OK
ERROR
Description:
Sets the Advice of Charge related accumulated call meter maximum
value in SIM file EFACMmax. ACMmax contains the maximum
number of home units allowed to be consumed by the subscriber.
When ACM (refer +CACM) reaches ACMmax calls are prohibited
(see also 3GPP 22.024). SIM PIN2 is usually required to set the
value. If setting fails an ME error, +CME ERROR: <err> is
returned.
Read command returns the current value of ACMmax.
Defined values:
<acmmax> Description
String type Accumulated call meter maximum value similarly
coded as <ccm> under +CAOC; value zero
disables ACMmax feature
String type SIM PIN2
19.4 AT+CAOC Advice of Charge

Execute command AT+CAOC[=<mode> [+CAOC: <ccm>]
] +CME ERROR: <err>
OK
ERROR
Show the current AT+CAOC? +CAOC: <mode>
setting OK
ERROR
Test if the command AT+CAOC=? [+CAOC: (list of
is supported supported <mode>s]
OK
ERROR
Description:
Use of Advice of Charge supplementary service command enables
the subscriber to get information about the cost of calls. With
<mode>=0, the execute command returns the current call meter
value from the ME. The command also includes the possibility to
enable an unsolicited event reporting of the CCM information. The
unsolicited result code +CCCM: <ccm> is sent when the CCM
value changes, but no more than every 10 seconds. Deactivation of
the unsolicited event reporting is made with the same command.
Read command indicates whether the unsolicited reporting is
activated or not. Read command is available when the unsolicited
result code is supported.
Defined Values:
<mode> Description
0 Query CCM value
(default)
1 Deactivate the
unsolicited reporting
of CCM value
2 Activate the
unsolicited reporting
of CCM value
19.4.1 +CCCM Current Call Meter Unsolicited

Response
Description:
An Unsolicited Response indicating the accumulated charge as computed by the MS,
expressed in terms of Home units. AT+CAOC is used to activate or deactivate the
reporting of CCM.
+CCCM: <ccm>
Defined values:
<ccm> Description
string type Three bytes of the current call meter value in
hexadecimal format (e.g. “00001E” indicates
decimal value 30); value is in home units and
bytes are similarly coded as ACMmax value in
the SIM.
19.5 AT+CPUC Price Per Unit and Currency Table

Set command sets AT+CPUC=<currenc +CME ERROR: <err>
the parameters of y>, OK
Advice of Charge <ppu>[,<passwd>]
ERROR
related price per unit
and currency table in
SIM file EFPUCT
Shows the current AT+CPUC? +CPUC:
values <currency>,<ppu>
+CME ERROR: <err>
OK
ERROR
Shows if the AT+CPUC=? OK
command is ERROR
supported
Description:
Sets the parameters of Advice of Charge related price per unit and
currency table in SIM file EFPUCT. PUCT information can be used
to convert the home units (as used in +CAOC, +CACM and
+CAMM) into currency units. SIM SIM PIN2 is required to set the
parameters. If setting fails in an ME error, +CME ERROR: <err> is
returned.
Read command returns the current parameters of PUCT.
For information on the character set see AT+CSCS in the Short
Message Services section.
Defined values:
<currency> Description
String Alpha-identifier of the currency code (3
characters, e.g. SEK)

<ppu> Description
String type price per unit; dot is used as a decimal separator
(e.g. “2.66”)
String type SIM PIN2
19.6 AT+CCFC Call Forwarding number and Conditions

Request AT+CCFC= +CME ERROR <err>
Calling <reason> when <mode>=2 and
forwarding ,<mode>[,< command successful:
number and number +CCFC:
conditions >[,<type>[, <status>,<class1>[,<number
<class> >,
[,<subaddr <type>[,<subaddr>[,<satype
>[,<satype >[,<time>]]]][<CR><LF>
>[,<time>]]] +CCFC:
]]] <status>,<class2>[,<number
>,
<type>[,subaddr>[,<satype>
[,<timer>]]]]
[…]]
OK
ERROR
Test if the AT+CCFC=? + CCFC: (list of supported
command is <reason>s)
supported +CME ERROR <err>
OK
ERROR
Description:
This command allows control of the call forwarding supplementary
service. Registration, erasure, activation, deactivation, and status
query are supported. When querying the status of a network service
(<mode>=2) the response line for 'not active' case (<status>=0) is
returned only if service is not active for any <class>.
Defined Values:
<reason> Description
0 Unconditional

<reason> Description
1 Mobile busy
2 No reply
3 Not reachable
4 All call forwarding (refer to 3GPP TS 22.030)
5 All conditional call forwarding (refer to 3GPP TS
22.030)
<mode> Description
0 Disable
1 Enable
2 Query status
3 Registration
4 Erasure
String type String type phone number of forwarding address
in format specified by <type>
<type> Description
129 ISDN / telephony numbering plan, national /
international unknown
Default setting if ‘+’ is not in <sca>
145 ISDN / telephony numbering plan, international
number
Default setting if '+' is in <sca>
161 ISDN / telephony numbering plan, national
number
128-255 Other values refer GSM 04.08 section 10.5.4.7
0 Not active
1 Active
19.7 AT+CCWA Call Waiting

Notes:

* - Query operation requires SIM (<mode> = 2).
** - Mode and Class are not parameter settings (value <n> only).
*** - Query operation is not available in CFUN mode 4 (<mode> =
2).
Possible
Description Command
Responses
Request call AT+CCWA=[ when<mode
waiting <n> >=2 and
[,<mode> command
[,<class>]]] successful:
+CCWA:<stat
us>,<class1
>[<CR><LF>
+CCWA:
<status>,<cl
ass2>[…]]
+CME ERROR
<err>
OK
ERROR
Show the AT+CCWA? +CCWA: <n>
current +CME ERROR
setting <err>
OK
ERROR
Test if the AT+CCWA=? +CCWA: (list
supported <n>s)
+CME ERROR
<err>
OK
ERROR
Description:
This command allows control of the call waiting supplementary
service according to 3GPP TS 22.083. Activation, deactivation and
status query are supported. When querying the status of a network
service (<mode>=2) the response line for ‘not active’ case
(<status>=0) should be returned only if service is not active for
any <class>. Parameter <n> is used to disable or enable the
presentation of an unsolicited result code +CCWA:
<number>,<type>,<class>,[<alpha>][,<CLI validity>] to the TE
when call waiting service is enabled. The command is abortable
when the network is interrogated.

The interaction of this command with other commands based on
other GSM/UMTS supplementary services is described in the
GSM/UMTS standards.
Defined values:
<n> Description
0 Disable. Default value.
1 Enable
<mode> Description
0 Disable
1 Enable
2 Query status
<classx> Description
integer Sum of integers each representing a class of
information. Default value = 7 (1+2+4)
1 Voice L1
2 Data
4 Fax
8 Short message service
16 Data circuit sync
32 Data circuit async
64 Dedicated packet access
128 Dedicated PAD access
0 Not active
1 Active
String type String type ME number of forwarding address in
format specified by <type>

<type> Description
Integer Type of address octet in integer format (GSM
format 04.08 10.5.4.7)
<err> Description
0 ME failure
4 Operation not supported
21 Invalid index
31 Network timeout
100 Unknown
Example:
AT+CCWA=?
+CCWA: (0-1)
OK
AT+CCWA?
+CCWA: 0
OK
19.7.1 +CCWA Unsolicited Result Code:

+CCWA: <number>, <type>, <class>
19.8 AT+CLIP Calling Line Identification

Notes:
* - Query (AT+CLIP?) does not operate in CFUN mode 4.

Set calling line AT+CLI +CME ERROR: <err>
identification P=<n> OK
ERROR
Shows the current AT+CLI +CLIP: <n>,<m>
setting P? +CME ERROR: <err>
OK
ERROR

Test if the command is AT+CLI +CLIP: (list of
supported P=? supported <n>s)
+CME ERROR: <err>
OK
ERROR
Description:
This command refers to the GSM supplementary service CLIP
(Calling Line Identification Presentation) that enables a called
subscriber to get the calling line identity (CLI) of the calling party
when receiving a mobile terminated call. Set command enables or
disables the presentation of the CLI at the TE. It has no effect on
the execution of the supplementary service CLIP in the network.
When the presentation of the CLI at the TE is enabled (and calling
subscriber allows), the unsolicited response, +CLIP, is sent for
every incoming call.
Read command gives the status of <n> and also triggers an
interrogation of the provision status of the CLIP service according
to GSM 02.81 (given in <m>).
Defined values:
<n> Description
0 Disable. Default value.
1 Enable
<m> Description
0 CLIP not provisioned
1 CLIP provisioned
2 Unknown (e.g. no network)
The data affected by this command is contained in the User Profile.
19.8.1 +CLIP Calling Line Identification Unsolicited

Response
The unsolicited response, enabled/disabled by AT+CLIP, reports
the caller ID of any incoming call. Format:
+CLIP: <number>,<type>[,<subaddr>,<satype>[,[<alpha>]
[,<CLI_validity>]]]
When CLI is not available ( <CLI validity>=2), <number> shall be
an empty string ("") and <type> value will not be significant.
When CLI has been withheld by the originator, (<CLI validity>=1)
and the CLIP is provisioned with the "override category" option
(refer 3GPP TS 22.081 and 3GPP TS 23.081), <number> and

<type> is provided. Otherwise, the module will return the same
setting for <number> and <type> as if the CLI was not available.
String type String type phone number of format specified by
<type>
<type> Description
Integer Type of address octet in integer (refer to GSM
format 04.08 sub-clause 10.5.4.7)
<subaddr> Description
String type String type subaddress of format specified by
<satype>
<satype> Description
Integer Type of subaddress octet in integer format (refer
format TS 4.08 subclause 10.5.4.8)
<alpha> Description
String type String type alphanumeric representation of
<number> corresponding to the entry found in
phonebook; used character set should be the
one selected with command Select TE Character
Set AT+CSCS
<CLI_validity> Description
0 CLI is valid
1 CLI has been withheld by originator
2 CLI is not available due to interworking problems
or limitations of originating network
Example:
AT+CLIP=1
OK
RING
+CLIP: “07747008670”,129,,,“Matt L”,0

19.9 AT+CLIR Calling Line Identification Restriction
Notes:
* - Query (AT+CLIR?) does not operate in CFUN mode 4.
Possible
Description Command
Responses
Request calling line AT+CLIR= +CME
identification restriction [<n>] ERROR:
<err>
OK
ERROR
Read the current setting AT+CLIR? +CLIR:
<n>,<m>
+CME
ERROR:
<err>
OK
ERROR
Test if the command is AT+CLIR= +CLIR:
supported ? (list of
supported
<n>s)
+CME
ERROR:
<err>
OK
ERROR
Description:
This command refers to CLIR-service according to 3GPP TS
22.081 that allows a calling subscriber to enable or disable the
presentation of the CLI to the called party when originating a call.
Set command overrides the CLIR subscription (default is restricted
or allowed) when temporary mode is provisioned as a default
adjustment for all following outgoing calls. Using the opposite
command can revoke this adjustment. If this command is used by a
subscriber without provision of CLIR in permanent mode the
network will act according 3GPP TS 22.081.
The setting shall be per logical channel.
Set command directly writes to non-volatile memory so that the
setting is preserved also after turning off/on the MS. The &F
command will not affect the setting.
Read command gives the default adjustment for all outgoing calls
(given in <n>), and also triggers an interrogation of the provision
status of the CLIR service (given in <m>).
value.
This command is not abortable.
Defined values:
<n> Description
0 Presentation indicator is used according to the
subscription of the CLIR service. Default value.
1 CLIR invocation
2 CLIR suppression
<m> Description
0 CLIR not provisioned
1 CLIR provisioned in permanent mode
2 Unknown (e.g. no network)
3 CLIR temporary mode presentation restricted
4 CLIR temporary mode presentation allowed
19.10 AT+CSSN Supplementary Service Notification

Presentation of AT+CSSN=[<n>[ +CME ERROR:
notification ,<m>]] <err>
result codes OK
from TA to TE
ERROR
Read the current AT+CSSN? +CSSN:
setting <n>,<m>
+CME ERROR:
<err>
OK
ERROR

Test if the AT+CSSN=? +CSSN: (list of
supported <n>s), (list of
supported
<m>s)
+CME ERROR:
<err>
OK
ERROR
Description:
This command refers to supplementary service related network
initiated notifications. The set command enables or disables the
presentation of notification result codes from TA to TE.
When <n>=1 and a supplementary service notification is received
after a mobile originated call setup, unsolicited result code +CSSI:
<code1> [,<index>] is sent to TE before any other MO call setup
result codes presented in this manual or in V.25ter. When several
different <code1>s are received from the network, each of them
shall have its own +CSSI result code.
When <m>=1 and a supplementary service notification is received
during a mobile terminated call setup or during a call, or when a
forward check supplementary service notification is received,
unsolicited result code +CSSU: <code2>[,<index>] is sent to TE.
In case of MT call setup, result code is sent after every +CLIP result
code (refer command “Calling line identification presentation
+CLIP”) and when several different <code2>s are received from the
network, each of them shall have its own +CSSU result code.
Defined values:
<n> Description
0 Disable the +CSSI result code presentation status in the
TA. Default value.
1 Enable the +CSSI result code presentation status in the TA
<m> Description
0 Disable the +CSSU result code presentation status in the
TA. Default value.
1 Enable the +CSSU result code presentation status in the
TA
<code1> Description
0 Unconditional call forwarding is active

<code1> Description
1 Some of the conditional call forwarding are active
2 Call has been forwarded
3 Call is waiting
5 Outgoing calls are barred
6 Incoming calls are barred
7 CLIR suppression rejected
8 Call has been deflected
<code2> Description
0 This is a forwarded call (MT call setup)
2 Call has been put on hold (during a voice call)
3 Call has been retrieved (during a voice call)
4 Multiparty call entered (during a voice call)
5 Call on hold has been released (this is not a SS
notification) (during a voice call)
6 Forward check SS message received (can be received
whenever)
7 Call is being connected (alerting) with the remote party in
alerting state in explicit call transfer operation (during a
voice call)
8 Call has been connected with the other remote party in
explicit call transfer operation (also number and
subaddress parameters may be present) (during a voice
call or MT call setup)
9 This is a deflected call (MT call setup)
19.10.1 +CSSI Supplementary Services Notification

Description:
The +CSSI unsolicited message is enabled or disabled by the
AT+CSSN command. Unsolicited response format:
+CSSI: <code>[,<index>]
Defined values:
<code> Description
0 Unconditional Call Forwarding is active
1 Some of the conditional call forwardings are
active
2 A call has been forwarded

<code> Description
3 A call is waiting
5 Outgoing calls are barred
6 Incoming calls are barred
7 CLIR suppression is rejected
16 This is a CUG call (CUG index indicated in
<cindex>)
<cindex> Description
0...32767 CUG index
19.10.2 +CSSU Supplementary Services Notification

Description:
The +CSSU unsolicited message is enabled or disabled by the
AT+CSSN command. When enabled, the message is of the
following form:
+CSSU: <code>[,<cindex>]
Defined values:
<code> Description
0 This is a forwarded call
2 A call has been put on hold (during voice call)
3 A call has been retrieved (during voice call)
4 A multi-party call has been entered (during voice
call)
5 The call on hold has been released (during voice
call) (this is not a SS notification)
6 Forward check SS messages
16 This is a CUG call (index specified by <cindex>)
(MT call setup)
<cindex> Description
0...32767 CUG index
19.11 AT+CUSD Unstructured Supplementary Service Data

Notes:
* - Only the <n> parameter. <str> is not a parameter setting.
** - Mobile initiated USSD will not operate in CFUN mode 4.

Request unstructured AT+CUSD=[<n>[,<st +CME ERROR: <err>
supplementary r>[,<dcs>]]] OK
service data
Show the current AT+CUSD? +CUSD: <n>
setting OK
ERROR
Test if the command AT+CUSD=? +CUSD: (list of
OK
ERROR
Description:
This command allows control of the Unstructured Supplementary
Service Data (USSD) according to 3GPP TS 22.090. Both network
and mobile initiated operations are supported. Parameter <n> is
used to disable/enable the presentation of an unsolicited result code
(USSD response from the network, or network initiated operation)
+CUSD: <m>[,<str>,<dcs>] to the TE. In addition, value <n>=2 is
used to cancel an ongoing USSD session. If <n> is not given then
the default value 0 is taken.
When <str> is given, a mobile initiated USSD string or a response
USSD string to a network initiated operation is sent to the network.
The response USSD string from the network is returned in a
subsequent unsolicited +CUSD: result code.
The interaction of this command with other commands based on
other GSM supplementary services is described in the GSM
standard.
value.
Some different scenarios are shown below:
1. An incoming network initiated USSD-Notify should be
presented to the external application as an unsolicited result code
+CUSD: if the external application has enabled result code
presentation.
2. An incoming USSD-request asking for a reply should sent to the
external application as an unsolicited result code +CUSD: if the
external application has enabled result code.
3. If the external application answers to the request with the
command AT+CUSD then the ME sends the answer to the
network.
3b. A USSD-request sent with the command AT+CUSD from the
external application.
The different alternatives are shown below.

Network Mobile Equipment External application
1 Signal Sends Result code
unsolicited presentation enabled,
result code presented
+CUSD
2 Signal Sends Result code
askin unsolicited presentation enabled,
g for result code presented
reply +CUSD
3 Answer AT+CUSD
3b Sends AT+CUSD
Defined values:
<n> Description
0 Disable result code presentation in the TA. Default value.
1 Enable result code presentation in the TA
2 Terminate (abort) USSD dialogue. This value is not applicable to
the read command response (not supported)
<str> Description
string type String type USSD (when <str> parameter is not given, network is
not interrogated)
- if <dcs> - if TE character set other than "HEX" (refer command Select TE
indicates Character Set +CSCS): ME/TA converts GSM alphabet into current
that 3GPP TS TE character set according to rules of 3GPP TS 27.005 Annex A.
23.038 7 bit - if TE character set is "HEX": ME/TA converts each 7-bit
default character of GSM alphabet into two IRA character long
alphabet is hexadecimal number (e.g. character P (GSM 23) is presented as
used: 17 (IRA 49 and 55))
- if <dcs> ME/TA converts each 8-bit octet into two IRA character long
indicates hexadecimal number (e.g. octet with integer value 42 is
that 8-bit presented to TE as two characters 2A (IRA 50 and 65))
data coding
scheme is
used:
<dcs> Description
Integer type 3GPP TS 23.038 [25] Cell Broadcast Data Coding Scheme in
integer format (default 0)
Example:

AT+CUSD=1,“*34#”
OK
+CUSD:1,"id code"
AT+CUSD=0,"7465338"
OK
Example:
+CUSD:0,“Expensive incoming call”
Example:
AT+CUSD=1,“*55*0700#”
OK
+CUSD:0,“ALARM”
Example:
AT+CUSD=1,“*#100#”
OK
+CUSD: 0,“07787154042”
19.11.1 +CUSD Unstructured Supplementary Service Unsolicited

Response
Description:
Unsolicited response reporting changes in USSD status. Format:
+CUSD: <m>[,<str>,<dcs>]
See AT+CUSD, for more details.
Defined values:
<m> Description
0 no further user action required (network initiated USSD-Notify,
or no further information needed after mobile initiated
operation)
1 further user action required (network initiated USSD-Request, or
further information needed after mobile initiated operation)
2 USSD dialogue terminated (due to network supplementary
service release request). This result code is not generated if the
dialogue terminates with a result code where <m> is equal to
zero (0).
3 Other I/O client has responded. This parameter value is not
applicable to GM 12. This result code is received if the network
initiates a USSD dialogue and some other I/O client responds.
The client that responds first receives the dialogue. Clients that
try to respond after this notification has been generated, will get
a result code ERROR.
4 operation not supported
5 network time out

<str> Description
String type String type USSD-string (when <str> parameter is not given,
network is not interrogated)
If <dcs> Further user action required (network initiated USSD-Request, or
indicates further information needed after mobile initiated operation)
that 3GPP TS
23.038 7 bit
default
alphabet is
used:
If <dcs> ME/TA converts each 8-bit octet into two IRA character long
indicates hexadecimal number (e.g. octet with integer value 42 is
that 8-bit presented to TE as two characters 2A (IRA 50 and 65))
data coding
scheme is
used:
<dcs> Description
Integer type 3GPP TS 23.038 [25] Cell Broadcast Data Coding Scheme in
integer format (default 0)

20 Alternate Line Services
20.1 AT*ECSP Customer Service Profile

Read the customer AT*ECSP=<service *ECSP: <service
service profile from group> group>,<services>
the SIM +CME ERROR: <err>
OK
ERROR
Test if the command AT*ECSP=? +CME ERROR: <err>
is supported OK
ERROR
Description:
This command is used to read the customer service profile (CSP)
from the SIM. CSP is a list on the SIM, which indicates the services
that are user accessible. Each of the services has a related bit within
the CSP. The services are grouped into service groups, with a
maximum of 8 services in a group. For each service group, a bit
mask tells which services are available (bit=1). Unused bits are set
to 0.
Refer to the CPHS specification for more details.
Note:
If the EFcsp file does not exist on the SIM, then this command will
return +CME ERROR: 261
Defined values:
<service
Description
group>
Integer type The service group code of the service group to
1-9, 192- read
255
<services> Description
Integer type Decimal representation of a Bit mask (8 bits),
0-255 indicating the services within the service group
Bit=0: unused or unavailable service
Bit=1: available service

21 Environmental
21.1 AT*E2OTR Operational Temperature Reporting

Enable/disable AT*E2OTR=<mode>[ +CME ERROR <err>
Temperature ,<threshold1>[,<thr ERROR
Reporting eshold2>[,<threshol
OK
d3>]]]
Read current setting AT*E2OTR? E2OTR:
<mode>,<threshold
1>,<threshold2>,<t
hreshold3>,<stat>,
<temp>
OK
ERROR
Test if the command AT*E2OTR=? E2OTR: (list of
<mode>s),(list of
supported<threshold
1>),(list of
supported<threshold
2>),(list of
supported<threshold
3>)
OK
ERROR
Unsolicited response E2OTR:
<stat>,<temp>
Description:
The AT*E2OTR command enables or disables Operational
Temperature unsolicited reports. When reporting is enabled, the
unsolicited response *E2OTR is sent every time the module gets in
and out of operational temperature range.
If the reporting is enabled, a report will always be sent at start-up,
even if there has not been a change.
A transition from -20C to -21C will cause an unsolicited report
with a low temperature indication.
A transition from +75C to +76C will cause an unsolicited report
with a high range bin 1 indication (for threshold1 default value).
A transition from -20C to -19C or from +75 to +74C will cause an
unsolicited report with the associated in range indication, if the
module was out of range.
A transition to/from the bin ranges established by the threshold
points will cause an unsolicited report with the updated range
indication.
Threshold points can be modified by using the optional parameters
in the set command. The default threshold points shall be 75 for
range bin 1, 80 for range bin 2, and 85 for range bin 3. The
threshold point associated with the low temperature range cannot
be altered.
The setting of <mode>, <threshold1>, <threshold2>, and
<threshold3> will be stored in a profile by AT&W in the data
modem, and thus shall be applied after power cycles until changed
with the set command.
Defined values:
<mode> Description
0 Disable Operational Temperature Reporting.
Default value.
1 Enable Operational Temperature Reporting
<threshold1> Description
valid range: Integer Temperature in degrees Celcius
(50 to Default value: 75
threshold2)
(threshold1 to Default value: 80
threshold3)
(threshold2 to Default value: 85
100)
<stat> Description
0 Low Temperature
1 In Normal range
2 In High range bin 1

<stat> Description
<temp> Description
(~ -50 to 105) Integer Temperature in degrees Celcius
21.1.1 *E2OTR Operational Temperature Range Reporting

Description:
The *E2OTR unsolicited messages are enabled or disabled by the
AT*E2OTR command. The unsolicited response reports the
current operational temperature status (in or out of range) as defined
in the AT command definition. The format of the unsolicited
report is:
*E2OTR: <stat>,<temp>

22 Alphabetic Listing of AT Commands
Provided below is an alphabetic list of all AT Commands by section and page number.
Command or Unsolicited Response Section Page

*E2CFUN SEMC Set Phone Functionality Unsolicited Response 4.2.1 60
*E2CHAN Channel Information Unsolicited Response 3.26.1 57
*E2GPSSTAT - GPS Status unsolicited response 10.2.1 160
*E2OTR Operational Temperature Range Reporting 21.1.1 303
*E2SDR SIM Detection Unsolicited Response 17.2.1 244
*ECAV Call Monitoring Unsolicited Result Code 3.25.1 53
*EMRDY Module Ready Unsolicited Response 4.3 60
*EPEV Pin Event Unsolicited report 17.4.1 247
*ESTKCALL Set Up Call 18.3.1 258
*ESTKCC Call Control Event From SIM/USIM Application Toolkit 18.3.2 260
*ESTKCLOSE Close Channel 18.3.3 262
*ESTKDISP Display Text 18.3.4 262
*ESTKDTMF Send DTMF tone 18.3.18 278
*ESTKGIN Get Input 18.3.5 263
*ESTKITEM Select Item 18.3.7 266
*ESTKKEY Get Inkey 18.3.6 265
*ESTKOPEN Open Channel 18.3.8 268
*ESTKRCVD Receive Data 18.3.9 269
*ESTKRSH Refresh 18.3.10 269
*ESTKSIMT Setup Idle Mode Text 18.3.17 277
*ESTKSMENU Set Up Menu 18.3.11 270
*ESTKSMS Send Short Message 18.3.13 272
*ESTKSNDD Send Data 18.3.12 271
*ESTKSS Send SS 18.3.14 273
*ESTKTONE Play Tone 18.3.15 274
*ESTKUSSD Send USSD 18.3.16 276
+CBM Received Cell Broadcast Unsolicited Response 15.11.3 225
+CCCM Current Call Meter Unsolicited Response 19.4.1 282
+CCWA Unsolicited Result Code: 19.7.1 288
+CDS SMS Status Report Unsolicited Response 15.11.4 226
+CGEV GPRS Event Reporting 8.8.1 85
+CGREG GPRS Network Unsolicited Response 8.15.1 108
+CIEV Indicator Event Unsolicited reports 3.16.1 41
+CLIP Calling Line Identification Unsolicited Response 19.8.1 289
+CME ERROR (Mobile Equipment Error Code) 3.15 37
+CMS ERROR (Message Service Failure Result Code) 3.17 42
+CMT Received Message Unsolicited Response 15.11.2 224
+CMTI New Message Indication Unsolicited Response 15.11.1 224
+COLP Connected Line Identification Presentation Unsolicited 19.1.1 280
Response
+CR Service Reporting Unsolicited Response 3.20.1 47
+CREG - Network Registration Unsolicted Response 13.8.1 201
+CRING Incoming Call Type Notification 3.21.1 48
+CSSI Supplementary Services Notification 19.10.1 294
+CSSU Supplementary Services Notification 19.10.2 295
+CUSD Unstructured Supplementary Service Unsolicited Response 19.11.1 298
+PACSP AT&T Specific - PLMN Mode Report 13.10 202
AT Attention Command 11.1 165
AT +CMMS More Messages to Send 15.10 220

AT&C Circuit 109 (DCD) Control 12.1 172
AT&D Circuit 108 (DTR) Response 12.2 172
AT&F Set to Factory Defined Configuration Profile 5.1 63
AT&W Store Configuration Profile 5.2 68
AT* List all Supported AT Commands 3.12 35
AT*E2CFUN SEMC Read Phone Functionality 4.2 59
AT*E2CHAN Channel Information 3.26 56
AT*E2CMGA Modify message attribute 15.17 234
AT*E2EMM Engineering Monitoring Mode 13.1 180
AT*E2GPSCLM Clear GPS Cache Memory 10.5 163
AT*E2GPSCTL GPS Positioning Control 10.1 157
AT*E2GPSEPH Set External Ephemeris 10.3 160
AT*E2GPSNPD GPS NMEA Port Discovery 10.6 164
AT*E2GPSSTAT Set GPS Status unsolicited response 10.2 158
AT*E2GPSTIME Set GPS Reference Time 10.4 162
AT*E2OTR Operational Temperature Reporting 21.1 301
AT*E2RESET Restart Module 4.4 61
AT*E2SDR SIM Detection Reporting 17.2 243
AT*E2SSN SIM Serial Number 17.5 247
AT*ECAM Call Monitoring 3.25 52
AT*ECSP Customer Service Profile 20.1 300
AT*EIAAUR - Internet Account Configuration, Read Authentication 9.1 117
Parameters
AT*EIAAUW - Internet Account Configuration, Write Authentication 9.2 118
Parameters
AT*EIAC - Internet Account, Create 9.3 120
AT*EIACSR - Internet Account Configuration, Read CSD Bearer 9.4 122
Capabilities
AT*EIACSW - Internet Account Configuration, Write CSD Bearer 9.5 124
Capabilities
AT*EIAD - Internet Account Configuration, Delete 9.6 126
AT*EIAIPCPR - Internet Account Configuration, Read PPP Parameters - 9.11 138
IPCP
AT*EIAIPCPW - Internet Account Configuration, Write PPP Parameters 9.12 140
- IPCP
AT*EIALCPR - Internet Account Configuration, Read PPP Parameters - 9.7 127
LCP
AT*EIALCPW - Internet Account Configuration, Write PPP Parameters - 9.8 131
LCP
AT*EIALSR - Internet Account Configuration, Read Link Socket 9.9 135
Parameters
AT*EIALSW - Internet Account Configuration, Write Link Socket 9.10 137
Parameters
AT*EIAPSR - Internet Account Configuration, Read PS Bearer 9.14 145
Parameters
AT*EIAPSW - Internet Account Configuration, Write PS Bearer 9.13 142
Parameters
AT*EIAR - Internet Account Configuration, Read General Parameters 9.15 148
AT*EIARUTD - Internet Account Configuration, Delete Routing Table 9.19 154
Parameters
AT*EIARUTR - Internet Account Configuration, Read Routing Table 9.17 150
Parameters
AT*EIARUTW - Internet Account Configuration, Write Routing Table 9.18 152
Parameters
AT*EIAW - Internet Account Configuration, Write General Parameters 9.16 149
AT*EMWI Message Waiting Indication 16.2 238
AT*ENAP USB Ethernet Interface Control 8.17 114

AT*EPEE Pin Event 17.4 246
AT*EPIN Additional PIN Information 17.7 248
AT*ERINFO Network Capability 13.2 188
AT*ESTKMENU Menu Selection 18.1 255
AT*ESTKRES Terminal Response 18.2 255
AT*EUPLINK Send Uplink Data 8.18 115
AT+CACM Accumulated Call Meter 19.2 280
AT+CAMM Accumulated Call Meter Maximum 19.3 281
AT+CAOC Advice of Charge 19.4 281
AT+CBST Select Bearer Service Type 7.1 71
AT+CCFC Call Forwarding number and Conditions 19.6 284
AT+CCLK Set Clock and Date 6.1 70
AT+CCWA Call Waiting 19.7 285
AT+CEAP EAP Authentication 17.8 250
AT+CEER Extended Error Report 3.1 32
AT+CERP EAP Retrieve Parameters 17.9 252
AT+CFUN Set Phone Functionality 4.1 58
AT+CGACT PDP Context Activate or Deactivate 8.1 75
AT+CGATT GPRS Attach or Detach 8.3 76
AT+CGCLASS GPRS Mobile Station Class 8.4 77
AT+CGCMOD PDP Context Modify 8.2 76
AT+CGDATA Enter Data State 8.5 78
AT+CGDCONT Define PDP Context 8.6 79
AT+CGDSCONT Define Secondary PDP Context 8.7 82
AT+CGEQMIN 3G Quality of Service Profile (Minimum acceptable) 8.10 87
AT+CGEQNEG 3G Quality of Service Profile (Negotiated) 8.11 93
AT+CGEQREQ 3G Quality of Service Profile (Requested) 8.12 98
AT+CGEREP GPRS Event Reporting 8.8 84
AT+CGMI Read MS Manufacturer Identification 11.2 165
AT+CGMM Read MS Model Identification 11.3 165
AT+CGMR Read Revision Identification 11.4 166
AT+CGPADDR Show PDP Address 8.9 86
AT+CGQMIN Quality of Service Profile (Minimum Acceptable) 8.13 104
AT+CGQREQ Quality of Service Profile (Requested) 8.14 106
AT+CGREG GPRS Network Registration Status 8.15 107
AT+CGSMS Select Service for MO SMS Messages 15.1 209
AT+CGSN Read Product Serial Number Identification 11.5 166
AT+CGTFT Traffic Flow Template 8.16 109
AT+CHUP Hang up Call 2.1 24
AT+CIMI Subscriber Identification 17.6 248
AT+CIND Indicator Control 3.11 32
AT+CKPD Keypad Control 3.24 51
AT+CLAC List All Available AT Commands 3.13 36
AT+CLCC List Current Calls 2.11 24
AT+CLCK Facility Lock 13.3 189
AT+CLIP Calling Line Identification 19.8 288
AT+CLIR Calling Line Identification Restriction 19.9 291
AT+CMAR Master Reset 4.5 61
AT+CMEC Mobile Termination Control Mode 3.23 49
AT+CMEE Mobile Equipment Error 3.14 36
AT+CMER Mobile Equipment Event Reporting 3.16 39
AT+CMGC Send Command 15.4 211
AT+CMGD Delete Message 15.7 215
AT+CMGF Message Format 15.2 209

AT+CMGL List Message 15.8 217
AT+CMGR Read Message 15.9 218
AT+CMGS Send Message 15.5 213
AT+CMGW Write Message to Memory 15.3 210
AT+CMSS Send From Storage 15.6 215
AT+CNMI New Message Indications to TE 15.11 221
AT+CNUM Subscriber Number 13.4 191
AT+COLP Connected Line Identification Presentation 19.1 279
AT+COPN Read Operator Names 13.5 194
AT+COPS Operator Selection 13.6 195
AT+CPAS Phone Activity Status 3.18 43
AT+CPBR Phonebook Read 14.1 203
AT+CPBS Phonebook Storage Select 14.2 204
AT+CPBW Phonebook Write 14.3 206
AT+CPIN PIN Control 17.3 244
AT+CPMS Preferred Message Storage 15.12 226
AT+CPOL Preferred Operator List 13.7 197
AT+CPUC Price Per Unit and Currency Table 19.5 283
AT+CPWD Change Password 3.19 44
AT+CR Service Reporting Control 3.20 46
AT+CRC Cellular Result Code 3.21 47
AT+CREG Network Registration 13.8 199
AT+CRES Restore SMS Settings 15.18 234
AT+CRLP Radio Link Protocol 7.2 72
AT+CRSM Restricted SIM Access 17.1 240
AT+CSAS Save SMS Settings 15.19 235
AT+CSCA Service Centre Address 15.13 229
AT+CSCB Select Cell Broadcast Message Type 16.1 237
AT+CSCS Select Character Set 15.14 230
AT+CSMP Set Text Mode Parameters 15.15 231
AT+CSMS Select Message Service 15.16 232
AT+CSQ Signal Strength 3.22 48
AT+CSSN Supplementary Service Notification 19.10 292
AT+CUAD UICC Application Discovery 17.10 253
AT+CUSD Unstructured Supplementary Service Data 19.11 295
AT+GCAP Capabilities 11.6 167
AT+GMI Request Manufacturer Identification 11.7 167
AT+GMM Request Model Identification 11.8 168
AT+GMR Revision Identification 11.9 168
AT+ICF DTE-DCE Character Framing Format 12.4 174
AT+IFC DTE-DCE Local Flow Control 12.5 176
AT+IPR Cable Interface Port baud rate 12.6 176
AT+PACSP AT&T Specific - PLMN Mode Query 13.9 201
ATA Answer Incoming Call 2.1 15
ATD Dial 2.2 15
ATD Extension (*98) - Request Packet Domain IP Service 2.4 20
ATD Extension (*99) - Request Packet Domain Service 2.3 19
ATE Command Echo 12.7 178
ATH Hang up 2.5 21
ATI Identification Information 11.10 169
ATO Return to Online Data Mode 2.6 22
ATP Select Pulse dialing 2.7 22
ATQ Result Code Suppression 12.8 179
ATS0 Automatic Answer Control 3.1 27

ATS10 Automatic Disconnect Delay Control 3.9 31
ATS2 Escape Sequence Character 3.2 27
ATS3 Command Line Termination Character 3.3 28
ATS4 Response Formatting Character 3.4 29
ATS5 Command Line Editing Character (BACKSPACE) 3.5 29
ATS6 Blind Dial Delay Control 3.6 30
ATS7 Connection Completion Timeout 3.7 30
ATS8 Comma Dial Modifier Delay Control 3.8 31
ATT Select Tone Dialing 2.8 23
ATV DCE Response Format 12.3 173
ATX Call Progress Monitoring Control 2.9 23
ATZ Restore Configuration Profile 5.3 69

M400-AT Command

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

M400-AT Command

Uploaded by

Copyright:

Available Formats

AT Command Manual

This AT Command Manual describes the

AT Commands that are supported in the

Himalaya-based PC Card product line.

Further, no portion of this publication may be reproduced, stored in a

First Edition (December 2007)

Sony Ericsson Mobile Communications International publishes this manual

All rights reserved.

© Sony Ericsson Mobile Communications International, 2008

Publication number: 1206-3629 Rev. 2

Printed in United States of America

Document Number 1206-3629, Rev. 2 2 of 308

3 Control and Status ............................................................................................ 27

Document Number 1206-3629, Rev. 2 3 of 308

4 Operational Control and Status.......................................................................... 58

6 Time Commands ............................................................................................... 70

8 Data - GPRS ...................................................................................................... 75

Document Number 1206-3629, Rev. 2 4 of 308

9 Internet Accounts............................................................................................ 117

Document Number 1206-3629, Rev. 2 5 of 308

12 Serial Interface ................................................................................................ 172

13 Network .......................................................................................................... 180

Document Number 1206-3629, Rev. 2 6 of 308

15 Short Message Services - Point to Point ........................................................... 209

16 Short Message Services - Cell Broadcast .......................................................... 237

17 SIM Commands ............................................................................................... 240

Document Number 1206-3629, Rev. 2 7 of 308

18 SIM Application Toolkit ................................................................................... 255

19 Supplementary Services................................................................................... 279

Document Number 1206-3629, Rev. 2 8 of 308

20 Alternate Line Services .................................................................................... 300

21 Environmental ................................................................................................. 301

22 Alphabetic Listing of AT Commands ................................................................ 304

Document Number 1206-3629, Rev. 2 9 of 308

1.1 Related Documentation

1.3 History of Core Module AT Commands Manuals

AT Manual Version Product Firmware Revision

1.4 Syntax Description

1.4.2 AT Command Syntax

Basic Syntax Command

Extended Syntax Command

Document Number 1206-3629, Rev. 2 11 of 308

Read Command Syntax

1.4.3 Other Terminology

1.4.4 AT Response Syntax

Document Number 1206-3629, Rev. 2 12 of 308

Unsolicited Result Code

1.5 Examples on How to Use the AT Commands

1.6 GPRS Communication

Document Number 1206-3629, Rev. 2 13 of 308

The following commands can be aborted:

Document Number 1206-3629, Rev. 2 14 of 308

2.1 ATA Answer Incoming Call

Description Command Possible Responses

This command is abortable.

2.2 ATD Dial

Document Number 1206-3629, Rev. 2 15 of 308

Description Command Possible Responses

Document Number 1206-3629, Rev. 2 16 of 308

Document Number 1206-3629, Rev. 2 17 of 308

Document Number 1206-3629, Rev. 2 18 of 308

2.3 ATD Extension (*99) - Request Packet Domain Service

Description Syntax Possible responses