PC300 MD300 GSG AT Command R2a EN

PC300
MD300
AT Command Manual
The AT Command Manual describes the
AT Commands that are supported in the
PC300 PC Card and MD300 Broadband USB Modem.

The information contained in this document is the proprietary information of
Sony Ericsson Mobile Communications International. The contents are
confidential and any disclosure to persons other than the officers,
employees, agents or subcontractors of the owner or licensee of this
document, without the prior written consent of Sony Ericsson Mobile
Communications International, is strictly prohibited.
Further, no portion of this publication may be reproduced, stored in a

retrieval system, or transmitted in any form or by any means, electronic or
mechanical, including photocopying and recording, without the prior written
consent of Sony Ericsson Mobile Communications International, the
copyright holder.
First Edition (July 2007)
Sony Ericsson Mobile Communications International publishes this manual

without making any warranty as to the content contained herein. Further,
Sony Ericsson Mobile Communications International reserves the right to
make modifications, additions and deletions to this manual due to
typographical errors, inaccurate information, or improvements to programs
and/or equipment at any time and without notice. Such changes will,
nevertheless be incorporated into new editions of this manual.
All rights reserved.
© Sony Ericsson Mobile Communications International, 2008
Publication number: 1202-6404 Rev. 2
Printed in United States of America
PC300 AT Command Manual Page 2 of 272

4/159 35-5/FCP 101 4577 Uen Rev B
Table of Contents
1 Introduction to AT Commands ............................................................................ 9
1.1 Related Documentation ....................................................................................... 9
1.2 Overview ............................................................................................................. 9
1.3 History of Core Module AT Commands Manuals .................................................. 9
1.4 Syntax Description .............................................................................................. 9
1.5 Examples on How to Use the AT Commands...................................................... 12
1.6 GPRS Communication ........................................................................................ 12
1.7 Abortability ....................................................................................................... 13
2 Call Control....................................................................................................... 15
2.1 ATA Answer Incoming Call ............................................................................... 15
2.2 ATD Dial .......................................................................................................... 15
2.3 ATD Extension (*99) - Request Packet Domain Service ...................................... 19
2.4 ATD Extension (*98) - Request Packet Domain IP Service ................................... 20
2.5 ATH Hang up ................................................................................................... 22
2.6 ATO Return to Online Data Mode...................................................................... 22
2.7 ATP Select Pulse dialing..................................................................................... 23
2.8 ATT Select Tone Dialing .................................................................................... 23
2.9 ATX Call Progress Monitoring Control............................................................... 23
2.10 AT+CHUP Hang up Call ..................................................................................... 24
2.11 AT+CLCC List Current Calls............................................................................... 24
3 Control and Status ............................................................................................ 27

3.1 ATS0 Automatic Answer Control........................................................................ 27
3.2 ATS2 Escape Sequence Character ..................................................................... 27
3.3 ATS3 Command Line Termination Character..................................................... 28
3.4 ATS4 Response Formatting Character ............................................................... 28
3.5 ATS5 Command Line Editing Character (BACKSPACE) ........................................ 29
3.6 ATS6 Blind Dial Delay Control........................................................................... 30
3.7 ATS7 Connection Completion Timeout ............................................................. 30
3.8 ATS8 Comma Dial Modifier Delay Control .......................................................... 31
3.9 ATS10 Automatic Disconnect Delay Control....................................................... 31
3.10 AT+CEER Extended Error Report........................................................................ 32
3.11 AT+CIND Indicator Control ............................................................................... 32
3.12 AT* List all Supported AT Commands ................................................................ 35
3.13 AT+CLAC List All Available AT Commands ........................................................ 35
3.14 AT+CMEE Mobile Equipment Error..................................................................... 36
3.15 +CME ERROR (Mobile Equipment Error Code)..................................................... 36
4/159 35-5/FCP 101 4577 Uen Rev B
3.16 AT+CMER Mobile Equipment Event Reporting.................................................... 39
3.17 +CMS ERROR (Message Service Failure Result Code) .......................................... 41
3.18 AT+CPAS Phone Activity Status ......................................................................... 42
3.19 AT+CPWD Change Password ............................................................................. 43
3.20 AT+CR Service Reporting Control ...................................................................... 44
3.21 AT+CRC Cellular Result Code ............................................................................ 46
3.22 AT+CSQ Signal Strength.................................................................................... 47
3.23 AT*ECAM Call Monitoring .................................................................................. 48
4 Operational Control and Status.......................................................................... 53

4.1 AT+CFUN Set Phone Functionality ..................................................................... 53
4.2 AT*E2RESET Restart Module ............................................................................. 54
4.3 AT+CMAR Master Reset .................................................................................... 54
5 Profiles ............................................................................................................. 56
5.1 AT&F Set to Factory Defined Configuration Profile ............................................ 56
5.2 AT&W Store Configuration Profile ...................................................................... 63
5.3 ATZ Restore Configuration Profile .................................................................... 63
6 Time Commands ............................................................................................... 65

6.1 AT+CCLK Set Clock and Date ............................................................................ 65
7 Data - CSD........................................................................................................ 66
7.1 AT+CBST Select Bearer Service Type ................................................................. 66
7.2 AT+CRLP Radio Link Protocol ........................................................................... 67
8 Data - GPRS ...................................................................................................... 70

8.1 AT+CGACT PDP Context Activate or Deactivate ............................................... 70
8.2 AT+CGCMOD PDP Context Modify................................................................... 71
8.3 AT+CGATT GPRS Attach or Detach .................................................................. 71
8.4 AT+CGCLASS GPRS Mobile Station Class........................................................... 72
8.5 AT+CGDATA Enter Data State........................................................................... 73
8.6 AT+CGDCONT Define PDP Context................................................................... 74
8.7 AT+CGDSCONT Define Secondary PDP Context ................................................ 77
8.8 AT+CGEREP GPRS Event Reporting.................................................................... 79
8.9 AT+CGPADDR Show PDP Address..................................................................... 81
8.10 AT+CGEQMIN 3G Quality of Service Profile (Minimum acceptable) .................... 82
8.11 AT+CGEQNEG 3G Quality of Service Profile (Negotiated) ................................... 90
8.12 AT+CGEQREQ 3G Quality of Service Profile (Requested) .................................... 94
8.13 AT+CGQMIN Quality of Service Profile (Minimum Acceptable) .......................... 99
8.14 AT+CGQREQ Quality of Service Profile (Requested) ......................................... 100

4/159 35-5/FCP 101 4577 Uen Rev B
8.15 AT+CGREG GPRS Network Registration Status................................................ 101
8.16 AT+CGTFT Traffic Flow Template .................................................................. 104
8.17 AT*ENAP USB Ethernet Interface Control ......................................................... 108
8.18 AT*EUPLINK Send Uplink Data ........................................................................ 109
9 Internet Accounts............................................................................................ 111

9.1 AT*EIAAUR - Internet Account Configuration, Read Authentication Parameters 111
9.2 AT*EIAAUW - Internet Account Configuration, Write Authentication Parameters112
9.3 AT*EIAC - Internet Account, Create ................................................................. 114
9.4 AT*EIACSR - Internet Account Configuration, Read CSD Bearer Capabilities ..... 115
9.5 AT*EIACSW - Internet Account Configuration, Write CSD Bearer Capabilities .... 117
9.6 AT*EIAD - Internet Account Configuration, Delete ........................................... 118
9.7 AT*EIALCPR - Internet Account Configuration, Read PPP Parameters - LCP ...... 119
9.8 AT*EIALCPW - Internet Account Configuration, Write PPP Parameters - LCP ..... 122
9.9 AT*EIALSR - Internet Account Configuration, Read Link Socket Parameters...... 125
9.10 AT*EIALSW - Internet Account Configuration, Write Link Socket Parameters..... 126
9.11 AT*EIAIPCPR - Internet Account Configuration, Read PPP Parameters - IPCP .... 127
9.12 AT*EIAIPCPW - Internet Account Configuration, Write PPP Parameters - IPCP ... 129
9.13 AT*EIAPSW - Internet Account Configuration, Write PS Bearer Parameters ........ 131
9.14 AT*EIAPSR - Internet Account Configuration, Read PS Bearer Parameters ......... 133
9.15 AT*EIAR - Internet Account Configuration, Read General Parameters ............... 135
9.16 AT*EIAW - Internet Account Configuration, Write General Parameters.............. 136
9.17 AT*EIARUTR - Internet Account Configuration, Read Routing Table Parameters137
9.18 AT*EIARUTW - Internet Account Configuration, Write Routing Table Parameters139
9.19 AT*EIARUTD - Internet Account Configuration, Delete Routing Table
Parameters...................................................................................................... 140
10 Identification................................................................................................... 143
10.1 AT Attention Command.................................................................................. 143
10.2 AT+CGMI Read MS Manufacturer Identification................................................ 143
10.3 AT+CGMM Read MS Model Identification ......................................................... 143
10.4 AT+CGMR Read Revision Identification............................................................ 144
10.5 AT+CGSN Read Product Serial Number Identification ....................................... 144
10.6 AT+GCAP Capabilities .................................................................................... 145
10.7 AT+GMI Request Manufacturer Identification.................................................. 145
10.8 AT+GMM Request Model Identification ........................................................... 146
10.9 AT+GMR Revision Identification ..................................................................... 146
10.10 ATI Identification Information......................................................................... 147
11 Serial Interface ................................................................................................ 150

4/159 35-5/FCP 101 4577 Uen Rev B
11.1 AT&C Circuit 109 (DCD) Control ..................................................................... 150
11.2 AT&D Circuit 108 (DTR) Response .................................................................. 150
11.3 ATV DCE Response Format ............................................................................. 151
11.4 AT+ICF DTE-DCE Character Framing Format ................................................... 152
11.5 AT+IFC DTE-DCE Local Flow Control ............................................................... 153
11.6 AT+IPR Cable Interface Port baud rate............................................................. 154
11.7 ATE Command Echo ....................................................................................... 155
11.8 ATQ Result Code Suppression ........................................................................ 156
12 Network .......................................................................................................... 157

12.1 AT*E2EMM Engineering Monitoring Mode ..................................................... 157
12.2 AT*ERINFO Network Capability ....................................................................... 164
12.3 AT+CLCK Facility Lock ................................................................................... 165
12.4 AT+CNUM Subscriber Number ...................................................................... 168
12.5 AT+COPN Read Operator Names ................................................................... 170
12.6 AT+COPS Operator Selection.......................................................................... 171
12.7 AT+CPOL Preferred Operator List ................................................................... 173
12.8 AT+CREG Network Registration...................................................................... 175
13 Phonebook...................................................................................................... 178
13.1 AT+CPBR Phonebook Read ............................................................................. 178
13.2 AT+CPBS Phonebook Storage Select .............................................................. 180
13.3 AT+CPBW Phonebook Write ............................................................................ 181
14 Short Message Services - Point to Point ........................................................... 184

14.1 AT+CGSMS Select Service for MO SMS Messages............................................ 184
14.2 AT+CMGF Message Format ............................................................................ 184
14.3 AT+CMGW Write Message to Memory ............................................................. 185
14.4 AT+CMGC Send Command............................................................................. 186
14.5 AT+CMGS Send Message................................................................................ 188
14.6 AT+CMSS Send From Storage ......................................................................... 189
14.7 AT+CMGD Delete Message............................................................................. 190
14.8 AT+CMGL List Message.................................................................................. 191
14.9 AT+CMGR Read Message ............................................................................... 193
14.10 AT +CMMS More Messages to Send ................................................................. 195
14.11 AT+CNMI New Message Indications to TE ....................................................... 195
14.12 AT+CPMS Preferred Message Storage ............................................................. 201
14.13 AT+CSCA Service Centre Address................................................................... 203
14.14 AT+CSCS Select Character Set ........................................................................ 204
14.15 AT+CSMP Set Text Mode Parameters .............................................................. 205
4/159 35-5/FCP 101 4577 Uen Rev B
14.16 AT+CSMS Select Message Service ................................................................... 206
14.17 AT*E2CMGA Modify message attribute ........................................................... 207
14.18 AT+CRES Restore SMS Settings........................................................................ 208
14.19 AT+CSAS Save SMS Settings ............................................................................ 209
15 Short Message Services - Cell Broadcast .......................................................... 210

15.1 AT+CSCB Select Cell Broadcast Message Type ................................................ 210
15.2 AT*EMWI Message Waiting Indication............................................................... 211
16 SIM Commands ............................................................................................... 213

16.1 AT+CRSM Restricted SIM Access.................................................................... 213
16.2 AT+CPIN PIN Control..................................................................................... 216
16.3 AT*EPEE Pin Event ......................................................................................... 218
16.4 AT*E2SSN SIM Serial Number ......................................................................... 219
16.5 AT+CIMI Subscriber Identification ................................................................. 219
16.6 AT*EPIN Additional PIN Information ............................................................... 220
16.7 AT+CEAP EAP Authentication ......................................................................... 221
16.8 AT+CERP EAP Retrieve Parameters.................................................................. 223
16.9 AT+CUAD UICC Application Discovery............................................................ 224
17 SIM Application Toolkit ................................................................................... 225

17.1 AT*ESTKMENU Menu Selection........................................................................ 225
17.2 AT*ESTKRES Terminal Response .................................................................... 225
17.3 AT*ESTKS SIM Application Toolkit Settings ................................................... 228
17.4 SIM Toolkit Unsolicited Result Codes ............................................................... 229
18 Supplementary Services................................................................................... 247

18.1 AT+COLP Connected Line Identification Presentation ...................................... 247
18.2 AT+CACM Accumulated Call Meter.................................................................. 248
18.3 AT+CAMM Accumulated Call Meter Maximum ................................................ 249
18.4 AT+CAOC Advice of Charge ............................................................................ 250
18.5 AT+CPUC Price Per Unit and Currency Table.................................................... 251
18.6 AT+CCFC Call Forwarding number and Conditions .......................................... 252
18.7 AT+CCWA Call Waiting.................................................................................... 254
18.8 AT+CLIP Calling Line Identification.................................................................. 256
18.9 AT+CLIR Calling Line Identification Restriction ................................................ 259
18.10 AT+CSSN Supplementary Service Notification .................................................. 260
18.11 AT+CUSD Unstructured Supplementary Service Data ....................................... 263
19 Alternate Line Services .................................................................................... 268

19.1 AT*ECSP Customer Service Profile................................................................... 268

4/159 35-5/FCP 101 4577 Uen Rev B
20 Alphabetic Listing of AT Commands ................................................................ 269

4/159 35-5/FCP 101 4577 Uen Rev B
1 Introduction to AT Commands
This manual lists detailed information on the function of the AT
Command set that can be used with the PC300 or EM400.
This manual refers to the PC300 and EM400 as radio devices. If
there is a difference in the functionality of the radio devices PC300
and EM400, information will be listed separately.
1.1 Related Documentation

This manual is supplied with an Integrator’s Manual when you
purchase a PC300 or EM400.
1.2 Overview
AT commands, issued from a computer in your application are used
to control and implement the functions of the module.
Using AT commands, the following actions are possible:
•Control of DCE
•GPRS
•Call control
•Supplementary Service
•SIM application tool kit
•Control any embedded application in the device
The manual contains a large number of Sony Ericsson-specific
commands in addition to those implemented in accordance with the
3GPP and ITU-T recommendations. These commands are provided
to enhance the functions of the module. The Sony Ericsson-specific
commands are identified by the asterisk that precedes the command
(see the syntax description provided below).
Only commands that are listed in the AT Commands Manual are
supported unless otherwise stated. Other commands may be
supported by the module but these are only included for historical
or legacy reasons.
1.3 History of Core Module AT Commands Manuals

The following table describes the module software version
documented in each AT Command Manual version.
AT Manual Version Product Firmware Revision

PA1 R1A025
PA3 R1A039
1.4 Syntax Description

This section provides a brief description of the syntax used for the
PC300 AT command set. See the ITU-T recommendation V.25ter
for additional information.

4/159 35-5/FCP 101 4577 Uen Rev B
1.4.1 Conventions
In this manual, the following conventions are used to explain the
AT commands.
<command> The name of the command that is to be entered.
<parameter> The parameter values that are defined for a certain
command.
<CR> The command line is terminated by the Carriage Return (or
Enter key) or ATS3 command.
<LF> Line feed character or ATS4 command.
< > The term enclosed in angle brackets is a syntactical element.
The brackets do not appear in the command line.
[] Square brackets are used to indicate that a certain item is
optional. For example, sub-parameters of a command or an
optional part of a response. The brackets do not appear in the
command line.
<Value> The default values of the supported parameters are
indicated by using bold text when presenting the value.
•Other characters, including ‘?', parenthesis, etc., appear in
commands and responses as written.
•The final result codes OK, ERROR, +CME ERROR: <err> and
CMS ERROR:<err> (see sections 1.3.3 AT Response Syntax and
1.4 Error Codes) are not listed under “Possible Responses” for
each AT command.
•OK and ERROR are listed if these are the only possible
responses.
1.4.2 AT Command Syntax

The AT standard is a line-oriented command language. Each
command is made up of the following three elements:
•the prefix;
•the body;
•the termination character.
The prefix consists of the letters “AT” or "at", or , to repeat the
execution of the previous command line, the characters "A/" or
"a/".
The body is made up of the command, the parameter, and if
applicable the associated values.
Commands may be combined in the same command line. Spaces
between the individual bodies are ignored.
Basic Syntax Command

The format of basic syntax commands is as follows:
AT<command>[=][<parameter>]<CR>
ATS0=0<CR> (sets the automatic answering)
Additional commands may follow a command on the same
command line without any character being required for separation.
For the command D parameters, see the description for the
command in question.
A version of the basic syntax is:
4/159 35-5/FCP 101 4577 Uen Rev B
AT<command><parameter>
Extended Syntax Command

•AT+<command>= [<parameter>]
•AT*<command>=[<parameter>]
AT+CFUN=0<CR> (powers down the module)
If several values are included in the command, they are separated
by commas. It is also possible to enter commands with no values.
Additional commands may follow an extended syntax command on
the same command line if a semicolon (; IRA 3B) is inserted after
the preceding extended command as a separator.
Read Command Syntax

The read command is used to check the current values of
parameters. Type ‘?’, after the command line:
•AT+<command>?
•AT*<command>?
•AT<command>?
AT+CSCS?<CR> (show current character set)
<CR>“IRA”<CR> (information text response)
<CR>OK<CR>(final result code response)
Test Command Syntax
The test command is used to test whether the command has been
implemented or to give information about the type of subparameters
it contains. Type ‘?’, after the command line:
•AT+<command>=?
•AT*<command>=?
AT+CPAS=?<CR> (shows supported values for the response
parameters)
<CR>CPAS: (0, 3, 4, 129, 130, 131)<CR> (supported values)
<CR>OK<CR> (final result code)
If the indicated <parameter> is not recognized, the result code
ERROR is issued.
Possible responses are indicated both as <command>:(list of
supported<parameter>) and (in most cases) the actual range of the
parameter values.
1.4.3 Other Terminology

In this document, terms “alternating mode” and “alternating call”
refer to all GSM bearer and teleservices that incorporate more than
one basic service (voice, data, fax) within one call.
1.4.4 AT Response Syntax

The default mode response shown below is in text mode. For
information about the ATV DCE response, see ATV DCE
Response Format.
Possible formats for the result codes are:
•Basic format result code, such as OK. The Basic result code also
has a numerical equivalent.
4/159 35-5/FCP 101 4577 Uen Rev B
•Extended format result code, prefixed with a plus sign (+) or an
asterisk (*):
•AT+<command>: <parameter >
•AT*<command>: <parameter>
where the <parameter> is the result code value, note that a single
space character separates the colon character from the
<parameter>. If several values are included in the result code, they
are separated by commas. It is also possible that a result code has
no value. The extended syntax result codes have no numerical
equivalent. They are always issued in alphabetical form.
•Information text response may contain multiple lines separated by
<CR>. The TE detects the end of informational text responses by
looking for a final result code response, such as OK.
There are two types of result code responses as outlined below:
Final Result Code
A final result code indicates to the TE that execution of the
command is completed and another command may be issued.
•If you type an implemented AT command, you should get the
result code OK.
•If you type an AT command that is not implemented, or which had
the wrong parameter or syntax, you will get an error result code. It
is ERROR or, for example, +<command> ERROR followed by an
error code.
Final result codes are:
Value General meaning
OK Command executed, no errors
ERROR Invalid command or command line too long
NO DIALTONE No dialing possible, wrong mode
BUSY Remote station busy
NO ANSWER Connection completion time-out
NO CARRIER Link not established or disconnected
Unsolicited Result Code

Unsolicited result codes indicate the occurrence of an event not
directly associated with a command being issued from the TE.
1.5 Examples on How to Use the AT Commands

For many of the more complicated commands, examples are
provided after the command’s description. Always refer to the
detailed description of the command in question to check valid
parameter values, AT command syntax and Response syntax.
1.6 GPRS Communication

To initiate a session with the network you need to set up a ‘data
account’ on the module using the AT+CGDCONT command. You
need to specify the correct Access Point Name (APN) which you
get from your service provider. The command below sets up the
data account to access an APN called "internet."

4/159 35-5/FCP 101 4577 Uen Rev B
AT+CGDCONT=1,“IP”,“internet”
After this you need to use the ATD command to make a GPRS call.
The example below dials into the network using account number 1.
ATD*99***1#
If the module is able to connect to the APN it will return a

CONNECT. At this point PPP/IP packets should be sent by the
application, to negotiate an IP address. The easiest way of doing
this whole thing is to create a windows dial up networking session
with the dial string *99***1# after creating the data account on the
module.
It is not possible to initiate a GPRS session from the network at
present. The reason for this is that unless a PDP context has been
setup it has not been assigned an IP address by the GGSN/DHCP
server and as a result it cannot be addressed other than through its
ME number (defeating the object of using IP). This is specified in
GSM 7.60 or 3GPP 27.060.
For additional information about GPRS communication, refer to the
application note, which can be obtained from the extranet or from
customer support.
1.7 Abortability
Commands that are able to be stopped or terminated while
executing are said to be "abortable". These abortable commands
may be terminated by sending a character or control sequence. As
very few commands are abortable - all AT-Commands in this
manual should be considered "not abortable" unless otherwise
noted.
This command is abortable.
The following commands can be aborted:

AT&W Store Configuration Profile
AT*E2CMGL List Message without marking Read
AT+CCFC Call Forwarding number and Conditions
AT+CCWA Call Waiting
AT+CGACT PCP Context Activate
AT+CGATT GPRS Attach or Detach
AT+CLAC List AT Commands
AT+CLCK Facility Lock
AT+CLIP Calling Line Identification
AT+CLIR Calling Line Identification Restriction
AT+CMGC Send Command
AT+CMGS Send Message
AT+CMGW Write Message to Memory
AT+CMSS Send Storage
AT+CNUM Subscriber Number
AT+COLP Connected Line Presentation
AT+COPN Read Operator Names
AT+CPOL Preferred Operator List
4/159 35-5/FCP 101 4577 Uen Rev B
ATA Answer Incoming Call
ATD Dial

4/159 35-5/FCP 101 4577 Uen Rev B
2 Call Control
2.1 ATA Answer Incoming Call
Description Command Possible Responses

Answer an incoming call ATA CONNECT
CONNECT <text>
NO CARRIER
ERROR
OK
Description:
The command instructs the MS to answer immediately if an incoming call
is pending. The behaviour is different depending on the type of incoming
call as reflected in the table below.
Note 1: If a test command (ATA=?) is issued, the response will be NO
CARRIER as this will be interpreted as ATA command.
Defined values:
<text> Description
4800 Connected with data bit rate of 4800 bits/s
xx (other values may appear due to functionality)
Example:
RING
RING
ATA
OK
2.2 ATD Dial

Command syntax:
The dial command includes a number of dial modifiers and parameters
that influence both the behaviour and the result codes. As a
consequence of that the description table includes a number of typical
4/159 35-5/FCP 101 4577 Uen Rev B
combinations for better understanding compared to writing the
command with all parameters and dial modifiers presented as one line
as in most other commands.
Possible
Description Command
Responses
Originate a call and dial ATD<dial_string>[G CONNECT
the phone number or g][I or i][;] CONNECT
specified in <text>
<dial_string>. NO
CARRIER
NO
DIALTONE
BUSY
No action commands ATD[;] OK (If
that returns result codes semicolon
immediately. included)
NO
CARRIER (If
semicolon
not
included)
Dial the phone number ATD>[<mem>]<n>[G CONNECT
stored in memory or g][I or i][;] CONNECT
location <mem> with <text>
index <n>. If <mem> is NO
omitted, the memory CARRIER
storage is defined by the NO DIAL
+CPBS command. TONE
BUSY
Dial the phone number ATD><str>[G or g][I CONNECT
that corresponds with or i][;] CONNECT
alphanumeric field in <text>
<str> NO
CARRIER
NO DIAL
TONE
BUSY
Redial the latest phone ATDL[G or g][I or i][;] CONNECT
number dialled. Note CONNECT
that in case of <text>
multiplexer, e.g. 27.010 NO
this command will send CARRIER
the latest dialled number NO DIAL

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Responses
on the same channel as TONE
the ATDL command. This BUSY
in contrast to the
ATD>LD command,
which will send the latest
dialled number in total.
Description:
This command instructs the MS to originate a call, which may be data or
voice. The phone number used to establish the connection will consist of
digits and modifiers included in <dial_string> or a stored number specified
by the <mem>, <n> or <str> parameters, or dial modifier L.
This allows for dialling from phonebook locations based on index or an
alphanumeric field that identifies an entry in phonebook as well as from
other <mem> storages such as Last Dialled Numbers (LD).
Command Select Phonebook Memory Storage (+CPBS) is recommended to
be used to select memory storage. Note! Only ME and SM memory storage
are supported by ATD.
If the dial string is followed by a semicolon this informs the phone that the
number is a voice call rather than a data number. Dial command terminated
by semicolon shall always give OK as terminating result code.
Note: Other commands added in the same string after the ATD command
are ignored.
Aborting an ATD command is accomplished by the transmission from the
DTE to the DCE of any character. A single character shall be sufficient to
abort the command in progress; however, characters transmitted during the
first 125 milliseconds after transmission of the termination character are
ignored. This is to allow the DTE to append additional control characters
such as line feed after the command line termination character.
Defined values:
<dial_string> Description
“0 1 2 3 4 5 6 7 Valid characters for origination
8 9 * # + A B C”
D This character is a part of V.25ter, but is here
only included for compatibility reasons, no code
is transmitted for this character.
W The W modifier is ignored but is included for
compatibility reasons.
' The comma modifier is ignored but is included
for compatibility reasons.
T The T modifier is ignored but is included for
P The P modifier is ignored but is included for
4/159 35-5/FCP 101 4577 Uen Rev B
<dial_string> Description
! The ! modifier is ignored but is included for
@ The @ modifier is ignored but is included for
<text> Description
Final Result Codes
For the use of final result codes NO DIALTONE and BUSY see the X
command.
Alphabetic Numeric
Description
(ATV1) (ATV0)
CONNECT 1 If connection is successfully established,
and X0 is selected
CONNECT - If connection is successfully established
<text> and Xn is selected where "n" is any value
other than 0. The meaning of the <text>
parameter is explained below
NO 3 Unable to establish a connection or the
CARRIER connection attempt was aborted by the
user
ERROR 4 An unexpected error occurred while trying
to establish the connection
NO 6 The ME is being used for a voice call or is
DIALTONE not within coverage of the network
BUSY 7 The ME number called is engaged, valid
for data and voice connections
OK 0 Only valid for voice connections
<str> Description
String String type value, which should be equal to an
type alphanumeric field in a phonebook entry in the searched
memories.
Note: The character specifying which number in the
contact entry that should be used must be included in the

4/159 35-5/FCP 101 4577 Uen Rev B
<str> Description
string; e.g. "/H" for home number, "/M" for mobile
number and so on.
<n> Description
Integer Memory location in the selected memory. This value
type should be in the range of locations available in the
memory used.
<mem> Description
ME ME memory
SM SIM memory
LD Last Dialled memory. This is available, and may be used for
dialling, but is not updated by the platform. This must be
handled by an application.
Example:
ATD07747008670;
OK
2.3 ATD Extension (*99) - Request Packet Domain Service
Possible
Description Syntax
responses
Make a D*<GPRS/Packet CONNECT
GPRS/Packet Domain_SC>[*[<called_address>] NO
Domain call. [*[<L2P>][*[<cid>]]]]# CARRIER
Read the Not applicable
current
setting
Test Not applicable
command to
show if the
command is
supported
Description:
The V.25ter 'D' (Dial) command causes the ME to enter the V.25ter
online data state and, with the TE, to start the specified layer 2
protocol. The ME will return CONNECT to confirm acceptance of
the command prior to entering the V.25ter online data state. No

4/159 35-5/FCP 101 4577 Uen Rev B
further commands may follow on the AT command line.
When layer 2 protocol has terminated, either as a result of an
orderly shut down of the PDP or an error, the ME shall enter
V.25ter command state and return the NO CARRIER final result
code.
<L2P> and <cid> are the same as in the +CGDATA command. The
+CGDCONT, +CGQREQ, etc. commands may be used in the
modem initialisation AT command string to set values for for PDP
type, APN, QoS etc.
NOTE: The dial string conforms to the syntax specified in 3GPP
TS 22.030
Defined Values:
<GPRS/Packet_Domain
Description
SC>
Integer type (GPRS/Packet Domain Service Code) a digit
string (value 99) which identifies a request
to use the GPRS/Packet Domain
<called_address> Description
String type Value received in this parameter is ignored by the
platform.
<L2P> Description
1 PPP
<cid> Description
Integer type See +CGDCONT for definition of <cid>
2.4 ATD Extension (*98) - Request Packet Domain IP Service
Possible
Description Syntax
responses
Make a D*<GPRS/Packet CONNECT
GPRS/Packet Domain_SC_IP>[*<cid>]# NO
Domain call. CARRIER
Read the current Not applicable
setting
Test command to Not applicable
show if the

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Syntax
responses
command is
supported
Description:
This command causes the ME to perform whatever actions are
necessary to establish communication between the TE and the
external Packet Data Network.
The V.25ter 'D' (Dial) command causes the ME to enter the V.25ter
online data state and, with the TE, to start the specified layer 2
protocol. The ME shall return CONNECT to confirm acceptance of
the command prior to entering the V.25ter online data state. No
further commands may follow on the AT command line.
The detailed behaviour after the online data state has been entered is
dependent on the PDP type. It is described briefly in clause 9 (for
IP) of 3GPP TS 27.060. PS attachment and PDP context activation
procedures may take place prior to or during the PDP startup if they
have not already been performed using the +CGATT and +CGACT
commands.
When the layer 2 protocol has terminated, either as a result of an
orderly shut down of the PDP or an error, the ME enters V.25ter
command state and return the NO CARRIER final result code. The
usage of <cid> is the same as in the +CGDATA command. The
+CGDCONT, +CGQREQ, etc. commands may then be used in the
modem initialisation AT command string to set values for for PDP
type, APN, QoS etc..
If <cid> is omitted, the ME shall attempt to activate the context
using:
(a) any information provided by the TE during the PDP startup
procedure, e.g. the TE may provide a PDP type and/or PDP address
to the ME,
(b) a priori knowledge, e.g. the ME may implement only one PDP
type
(c) using the 'Empty PDP type' (3GPP TS 24.008). (No PDP
address or APN shall be sent in this case and only one PDP context
subscription record shall be present in the HLR for this subscriber.)
This command may be used in both normal and modem
compatibility modes.
NOTE: The dial string conforms to the syntax specified in 3GPP
TS 22.030
Defined Values:
<GPRS/Packet_Domain
Description
SC_IP>
Integer type (GPRS/Packet Domain Service Code) a
digit string (value 98) which identifies a
request to use the GPRS/Packet Domain
with IP (PDP types IP & PPP)

4/159 35-5/FCP 101 4577 Uen Rev B
<cid> Description
2.5 ATH Hang up
Possible
Description Command
Responses
Terminate the call ATH[<n>]
Test command to show if the ATH=? H: (0)
command is supported
Description:
This command signals the MS to terminate an active call.
Defined Values:
<n> Description
0 Terminate a connection, only <n> = 0 supported.
2.6 ATO Return to Online Data Mode
Possible
Description Command
Responses
Return to on-line data mode ATO[<value>] CONNECT
CONNECT
<text>
NO CARRIER
ERROR
Test command to show if the ATO=? O: [0]
Description:
Switch to the on-line data mode from the on-line command mode
during an active call. Returns ERROR when not in on-line
command mode.
Defined values:
<value> Description
0 Return to on-line data state from on-line command

4/159 35-5/FCP 101 4577 Uen Rev B
2.7 ATP Select Pulse dialing

Select pulse dialing ATP OK
Test if the command is ATP=? OK
supported
Description:
Command is ignored, and is implemented for compatibility only.
It would normally cause the next D command to use pulses when
dialing the number.
2.8 ATT Select Tone Dialing

Select tone dialing ATT OK
Test if the command is ATT=? OK
supported
Description:
This command is ignored. It is implemented for compatibility only.
It would normally cause the next D command to use tones when
dialing the number.
2.9 ATX Call Progress Monitoring Control

Set call progress ATX[=][<n>] OK
monitoring control ERROR
Show the current setting ATX? X: <n>
Test if the command is ATX=? X: (list of supported
supported <n>s)
Description:
This command is used to indicate whether dial-tone detection and
busy-tone detection are used during a call set-up. You can also use
this command to display the current dial-tone and busy-tone
detection settings.
Defined values:
<n> Description
0 No BUSY or NO DIALTONE result codes given. No line speed

4/159 35-5/FCP 101 4577 Uen Rev B
<n> Description
reported together with CONNECT result code.
1 Busy and dial tone detection off. Report line-speed on
connection
2 No BUSY result code is given. NO DIALTONE result code
returned if no network. Reports line speed together with
CONNECT result code.
3 BUSY result code given if called line is busy. No NO DIALTONE
result code is given. Reports line speed together with CONNECT
result code.
4 BUSY result code is given if called line is busy. NO DIALTONE is
given if no network. Report line speed together with CONNECT
result code. Default value.
Note: If there is no network available the <n> parameter will decide
if “NO DIALTONE” or “NO CARRIER” will be returned. If the
call recipient is busy, the <n> parameter will decide if “BUSY” or
“NO CARRIER” will be returned.
2.10 AT+CHUP Hang up Call

Request hang-up AT+CHUP OK
ERROR
Description:
This command causes the TA to hang up the current CS call of the
MT.
If no call is present, but an incoming call is notified, then the
incoming call is rejected.
The purpose of this command is not to replace the V.25ter

command "H", but to give an assured procedure to terminate an
alternating mode call.
2.11 AT+CLCC List Current Calls
Description Syntax Possible Responses

Get list of current calls from the AT+CLCC [+CLCC:
MS <id1>,<dir>,<s
tat>,<mode>,<
mpty>[,<numbe
r>,<type>[,<alp
ha>[,<priority>]

4/159 35-5/FCP 101 4577 Uen Rev B
]]
[<CR><LF>
+CLCC:
<id2>,<dir>,<s
tat>,<mode>,<
mpty>[,<numbe
r>,<type>[,<alp
ha>[,<priority>]
]]
[...]]]
Test if the command is AT+CLCC OK
supported =?
Description:
This command returns the list of current calls of MT. If command
succeeds but no calls are available, no information response is sent
to TE.
Defined values:
<idx> Description
integer Call identification number as described in 3GPP TS
22.030.
<dir> Description
0 Mobile originated (MO) call
1 Mobile terminated (MT) call
<stat> Description
0 Active
1 Held
2 Dialing (MO call)
3 Alerting (MO call)
4 Incoming (MT call)
5 Waiting (MT call)
<mode> Description
0 Voice
1 Data
4/159 35-5/FCP 101 4577 Uen Rev B
<mode> Description
9 Unknown
<mpty> Description
0 Call is not one of multiparty (conference) call parties
1 Call is one of multiparty (conference) call parties
<number> Description
String Phone number in format specified by <type>
<type> Description
Integer type Type of address octet, refer 3GPP 24.008
128 Unknown numbering plan, national / international
number unknown
129 ISDN / telephony numbering plan, national /
international unknown
145 ISDN / telephony numbering plan, international
number
161 ISDN / telephony numbering plan, national number
128...155 Other values refer to 3GPP 24.008
<alpha> Description
String Alphanumeric representation of <number>
corresponding to the entry found in phonebook; used
character set should be the one selected with command
Select TE Character Set AT+CSCS
<priority> Description
Integer optional digit type parameter indicating the eMLPP
type priority level of the call, values specified in 3GPP TS
22.067
0-4 Valid values

4/159 35-5/FCP 101 4577 Uen Rev B
3 Control and Status
3.1 ATS0 Automatic Answer Control

Automatic answer ATS0=[<rcnt>] OK
control ERROR
Read the current ATS0? <rcnt>
setting
Test if the command is ATS0=? S0: (list of supported
supported <rcnt>s)
Description:
This command sets the number of call indications (rings) before
automatically answering the call; value equaling zero disables
automatic answering and is the default setting.
Defined values:
<rcnt> Description
0 Disable automatic answer. Default value
1-7 Answer after the specified number of rings
When <rcnt> is displayed using ATS0?, leading zeroes are added to
make the result 3 digits.
3.2 ATS2 Escape Sequence Character

Set escape sequence ATS2=[<esc>] OK
character ERROR
Show the current ATS2? <esc>
setting
supported <esc>s)
Description:
Defines the character to be used as the escape sequence character
when switching from on-line data mode to on-line command
mode. The response to the command is modified to reflect the
change.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
<esc> Description
128 Default value. Escape function disabled by default.
0 to 127 Escape sequence character
128-255 Escape function not enabled
Note: If the <esc> parameter is set to a value in the range of 128-
255, the escape sequence detection is disabled.
3.3 ATS3 Command Line Termination Character

Set Command Line ATS3=[<value>] OK
Termination Character ERROR
Show the current setting ATS3? <value>
Test if the command is ATS3=? S3: (list of
supported supported
<value>s)
Description:
This S-Register parameter represents the decimal IA5 value of the
character recognized by the DCE from the DTE to terminate an
incoming command line. It is also generated by the DCE as part of
the header, trailer, and terminator for result codes and information
text, along with the S4 parameter.
The previous value of S3 is used to determine the command line
termination character for entry of the command line containing the
S3 setting command. However, the result code issued uses the
value of S3 as set during the processing of the command line.
For example, if S3 was previously set to 13 and the command line
“ATS3=30” is issued, the command line is terminated with a
<CR> character (IA5 0/13), but the result code issued uses the
character with the ordinal value 30 (IA5 2/14) in place of the
<CR>.
Defined values:
<value> Description
013 Command line termination character <CR>, Default
value
0 to 127 Command line termination character
3.4 ATS4 Response Formatting Character

4/159 35-5/FCP 101 4577 Uen Rev B
Set Response Formatting ATS4=[<value>] OK
Character ERROR
supported supported
<value>s)
Description:
character generated by the DCE as part of the header, trailer, and
terminator for result codes and information text, along with the S3
parameter (see the description of the V command for usage).
If the value of S4 is changed in a command line, the result code
issued in response to that command line will use the new value of
S4.
Defined values:
<value> Description
010 Formatting character <LF>. Default value
0 to 127 Formatting character
3.5 ATS5 Command Line Editing Character (BACKSPACE)

Request Command Line ATS5=[<value>] OK
Editing Character ERROR
supported supported
<value>s)
Description:
character that indicates, when recognized by the DCE , a request to
delete from the command line the immediately preceding
character.
Defined values:
<value> Description
008 Line editing character, <BS>. Default value
4/159 35-5/FCP 101 4577 Uen Rev B
<value> Description
0 to 127 Line editing character
3.6 ATS6 Blind Dial Delay Control

Blind dial delay control ATS6=[<dly>] OK
Show the current ATS6? <dly>
setting
supported <dly>s)
Description:
This command is included for compatibility. No functionality
<dly> Description
2 Wait two seconds before blind dialing. Default value
2-10 Number of seconds to wait before blind dialing
3.7 ATS7 Connection Completion Timeout

Set connection ATS7=[<tmo>] OK
completion timeout ERROR
Show the current ATS7? <tmo>
setting
supported supported <tmo>s)
Description:
Defines the maximum time allowed between completion of dialing
and the connection being established. If this time is exceeded then
the connection is aborted.
Defined values:
<tmo> Description
50 Timeout value in seconds. Default value
1-255 Timeout value in seconds

4/159 35-5/FCP 101 4577 Uen Rev B
3.8 ATS8 Comma Dial Modifier Delay Control

Set Comma Dial Modifier ATS8=[<dly>] OK
Delay Control ERROR
Show the current setting ATS8? <dly>
supported supported <dly>s)
Description:
This command sets the number of seconds to wait when a comma
dial modifier is encountered in the dial string of the D command.
The default is 2 seconds.
This command is included for compatibility only. No functionality
<dly> Description
2 The value of the dial modifier delay in seconds. Default
value
2- The value of the dial modifier delay in seconds
10
3.9 ATS10 Automatic Disconnect Delay Control

Set Automatic ATS10=[<val>] OK
Disconnect Delay ERROR
Control
Show the current ATS10? <val>
setting
supported supported <val>s)
Description:
This command sets the number of tenths of seconds to wait before
disconnecting after TA has indicated the absence of received line
signal.
This command is included for compatibility. No functionality.
<val> Description
2 Remains connected for two tenths of a second.
Default value
1-254 Number of tenths of a second of delay

4/159 35-5/FCP 101 4577 Uen Rev B
3.10 AT+CEER Extended Error Report

Request an Extended Error AT+CEER +CEER:
Report <report>
OK
ERROR
Test if the command is AT+CEER= OK
supported ? ERROR
Description:
This command causes the TA to return one or more lines of
information text, <report> , which offers the user of the TA an
extended report for the following events:
•Failure in the last unsuccessful call setup (originating or

answering) or in-call modification
•Last call release
•Last unsuccessful GPRS attach or unsuccessful PDP context
activation
•Last GPRS detach or PDP context deactivation
Typically, the text will consist of a single line containing the failure
information given by the network in text format.
Defined values:
<report> Description
Unquoted The total number of characters, including line
character terminators, in the information text shall not
string exceed 2041 characters.
Text shall not contain the sequence 0<CR> or
OK<CR>
3.11 AT+CIND Indicator Control

Set Indicator AT+CIND=[<ind> ERROR
Control [,<ind>[,…]]]
Show the AT+CIND? +CIND: <ind>,<ind>,…
current +CME ERROR: <err>
setting
OK

4/159 35-5/FCP 101 4577 Uen Rev B
ERROR
Test if the AT+CIND=? +CIND: (<descr>,(list of
command is supported <ind>s)),
supported (<descr>,(list of
supported <ind>s)),…
+CME ERROR: <err>
OK
ERROR
Description:
This command shows the values of ME indicators. <ind> value 0
means that the indicator is off (or in a state which can be identified
as “off” state), 1 means that indicator is on (or in a state which is
more substantial than “off” state), 2 is more substantial than 1, and
so on. If the indicator is a simple on/off style element, it has values
0 and 1. The list of <ind>s is returned as an ordered list of values
without identifiers - the position of each <ind> in the list must be
determined by using the test command.
The ME does not allow setting of indicators, ERROR is returned
from the set command.
Test command returns pairs, where string value <descr> is a
maximum 16 character description of the indicator and compound
value is the allowed values for the indicator. If ME is not currently
reachable, +CME ERROR: <err> is returned (refer to 3GPP
27.007).
Notes:
The indicator <descr>="signal" represents the relative signal level
(e.g. number of "bars") for both GSM and WCDMA signals. This is
the preferred method for obtaining signal level for both technology
types. Note that +CSQ is available to obtain GSM signal levels only
and an indicator mapping algorithm must be applied to the raw
RSSI values returned by +CSQ, whereas +CIND may be used to
obtain levels for both technology types. There is no method
available for the TE to obtain the raw WCDMA signal values from
the ME.
The range of values reported in "signal" may vary by
implementation. The default range is (0-5), however the test
command should be used to determine the currently reported range.
The maximum possible range of "signal" is (0-9).
Indicators which apply only to phones and not to Data Card devices
may appear in the test command results. Indicators listed below as
(not applicable) may have reported values but are meaningless for
a Data Card device.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
order
<descr> Description
number
"battchg" Battery charge level (0-5) (not 1
applicable)
“signal” Signal quality 2
Default range: (0-5)
Maximum range: (0-9)
"batterywarning" Battery warning (0-1) (not 3
applicable)
"chargerconnected" Charger connected (0-1) (not 4
applicable)
“service” Network service availability (0-1) 5
“sounder” Sounder activity (0-1) (not 6
applicable)
“message” Message received (0-1) 7
“call” Call in progress (0-1) 8
“roam” Roaming indicator (0-1) (0=Home, 9
1=Roaming)
“sms full” A short message memory storage 10
in the MT has become full (1), or
memory locations are available (0);
i.e. the range is (0-1). Applies to
SIM and ME memory.
"callsetup" Bluetooth proprietary call set up 11
status indicator.
Possible values are as follows:
Not currently in call set up (0),
incoming call process ongoing (1),
outgoing call set up is ongoing (2),
remote party being alerted in an
outgoing call (3); i.e the range is
(0-3)
(not applicable)
"callheld" Bluetooth propritary call hold 12
status indicator.
Possible values are as follows:
No calls currently on hold (0), a
call is currently on hold.
(not applicable)
Note: order number in the above table is used only in +CIEV unsolicited response

4/159 35-5/FCP 101 4577 Uen Rev B
<ind> Description
Integer Value shall be in range of corresponding <descr>
type
Example:
AT+CIND=?
+CIND: ("battchg",(0-5)),("signal",(0-5)),("batterywarning",(0-
1)),("chargerconnected",(0-1)),("service",(0-1)),("sounder",(0-
1)),("message",(0-1)),("call",(0-1)),("roam",(0-1)),("smsfull",(0-
1)),("callsetup",(0-3)),("callheld",(0-1))
OK
AT+CIND?
+CIND: 5,5,0,0,1,0,1,0,1,1,0,0
OK
3.12 AT* List all Supported AT Commands

List all implemented AT* <AT Command1>
AT commands [<CR><LF>
<AT Command2> […
[<CR><LF><ATCommandN>]]]
OK
+CME ERROR: <err>
Description:
Lists all the commands supported by the MS.
3.13 AT+CLAC List All Available AT Commands

List available AT AT+CLAC <AT Command1>
Commands [<CR><LF>
<AT Command2> […
[<CR><LF><ATCommandN>]]]
OK
+CME ERROR: <err>
Description:
This command returns the AT commands that are available to the
user.

4/159 35-5/FCP 101 4577 Uen Rev B
3.14 AT+CMEE Mobile Equipment Error

Request Mobile AT+CMEE=[<n>] OK
Equipment Error ERROR
Show the current AT+CMEE? +CMEE: <n>
setting OK
ERROR
Test if the command AT+CMEE=? +CMEE: (list of
is supported supported <n>s)
OK
ERROR
Description:
Disables or enables the use of result code +CME ERROR: <err> as
an indication of an error relating to the functionality of the ME.
When enabled, ME related errors cause +CME ERROR: <err> final
result code instead of the regular ERROR final result code. ERROR
is returned normally when error is related to syntax, invalid
parameters, or TA functionality. For more information, refer to
“+CME ERROR (Mobile Equipment Error Code)”.
Defined values:
<n> Description
0 Disable +CME ERROR: <err> result code and use ERROR
instead. Default value
1 Enable +CME ERROR: <err> result code and use numeric <err>
values.
2 Enable +CME ERROR: <err> result code and use verbose <err>
values.
3.15 +CME ERROR (Mobile Equipment Error Code)

Description:
This final result code is similar to the regular ERROR result code. If
+CME ERROR: <err> is the result code for any of the commands in
a command line, none of the commands in the same command line
will be executed (neither ERROR nor OK result code shall be
returned as a result of a completed command line execution). The
format of <err> can be either numerical or alphabetical, and is set
with the +CMEE command.
The V.25ter command V does not affect the format of this result
code.
The following table provides the numerical values for the parameter
<err>.
4/159 35-5/FCP 101 4577 Uen Rev B
<err> Description (General Errors)
0 Module failure
1 No connection to phone
3 Operation not allowed
4 Operation not supported
5 PH-SIM PIN required
6 PH-FSIM PIN Required
7 PH-FSIM PUK Required
10 SIM not inserted
11 SIM PIN required
12 SIM PUK required
13 SIM failure
14 SIM busy
15 SIM wrong
16 Incorrect password
17 SIM PIN2 required
18 SIM PUK2 required
20 Memory or List full
21 Invalid index within the list
22 Item not available or list empty
23 Memory failure
24 Text string or parameter too long
25 Invalid characters in text string
26 Dial string too long
27 Invalid characters in dial string
30 No network service
31 Network time-out
32 Network not allowed - emergency calls only
40 Network personalization PIN required
41 Network personalization PUK required
42 Network subset personalization PIN required
43 Network subset personalization PUK required
44 Service provider personalization PIN required
45 Service provider personalization PUK required
46 Corporate personalization PIN required
4/159 35-5/FCP 101 4577 Uen Rev B
<err> Description (General Errors)
47 Corporate personalization PUK required
51 - Reserved
99
100 Unknown
103 Illegal MS
106 Illegal ME
107 GPRS Service not allowed
111 PLMN not allowed
112 Location area not allowed
113 Roaming not allowed in this location area
132 Service option not supported
133 Requested service option not subscribed
134 Service option temporarily out of order
148 Unspecified GPRS error
149 PDP authentication failure
150 Invalid Mobile class
151- Reserved
256
257 Syntax Error
258 Invalid Parameter
259 Length ERROR
260 SIM Authentication Failure
261 SIM File Error (either wrong ID or content corrupted)
262 File System Failure (GDFS error)
263 Service Unavailable
264 Phonebook Not Ready
265 Phonebook Not Supported
266 Command Line Too Long
267 Parameter out of range
268 Band not allowed
269 Supplementary Service failure
270 Command aborted
271 Action already in progress
272 WAN Disabled on Host
273 - Reserved
4/159 35-5/FCP 101 4577 Uen Rev B
3.16 AT+CMER Mobile Equipment Event Reporting

Set ME AT+CME +CME ERROR: <err>
activity R=[<mo OK
status de>[,<ke
ERROR
yp>[,<di
sp>[,<in
d>[,<bfr
>]]]]]
Read the AT+CME +CMER:
current R? <mode>,<keyp>,<disp>,<ind>,<bfr
setting >
OK
ERROR
Test if the AT+CME +CMER: (list of supported
command R=? <mode>s),(list of supported
is <keyp>s),(list of supported
supported <disp>s),(list of supported <ind>s),
(list of supported <bfr>s)
OK
ERROR
Description:
The command enables or disables the sending of unsolicited result
codes from the ME to the TE in the case of key pressings, display
changes, and indicator state changes. <mode> controls the
processing of unsolicited result codes specified within this
command. <bfr> controls the effect on buffered codes when
<mode> 1, 2 or 3 is entered.
Test command returns the modes supported by the TA as
compound values.
Defined values:
<mode> Description3
0 Buffer unsolicited result codes in the TA; if TA result code
buffer is full, codes can be buffered in some other place
or the oldest ones can be discarded. (Default)
3 Forward unsolicited result codes directly to the TE; There
is no inband technique used to embed result codes and
data when TA is in on-line data mode

4/159 35-5/FCP 101 4577 Uen Rev B
<keyp> Description
0 No keypad event reporting
<disp> Description
0 No display event reporting
<ind> Description
0 No indicator event reporting
1 Indicator event reporting using result code +CIEV:
<ind>,<value>. <ind> indicates the indicator order number
(as specified for +CIND) and <value> is the new value of
indicator.
<bfr> Description
0 TA buffer of unsolicited result codes defined within this
command is cleared when <mode> 1...3 is entered
Unsolicited Result Codes:
+CIEV: <ind>,<value>
3.16.1 +CIEV Indicator Event Unsolicited reports

Description:
This unsolicited result code is enabled with the AT+CMER
command and indicates changes in indicator levels. <ind> in the
table below indicates the indicator order number (as specified for
AT+CIND). The +CIEV result code has the following syntax:
+CIEV: <ind>,<value>
Defined values:
<ind> <value> Description

2 0-x Signal quality indicator
(x varies - see +CIND)
5 0-1 Service indicator
7 0-1 Message Received (SMS)
8 0-1 Call in progress indicator
9 0-1 roam indicator
10 0-1 SMS memory full
Note: See +CIND for details on <value> definitions.

4/159 35-5/FCP 101 4577 Uen Rev B
3.17 +CMS ERROR (Message Service Failure Result Code)
Description:
This final result code indicates an error related to mobile equipment
or to the network. The operation is similar to the ERROR result
code. None of the following commands in the same command line
will be executed. Neither ERROR nor OK result code will be
returned. ERROR is returned normally when an error is related to
syntax or invalid parameters. Nevertheless, it always appears when
a command fails.
The syntax is as follows:
+CMS ERROR: <err>
Values for the <err> parameter are described in the following table.
<err> Description
0 - 127 GSM 04.11 Annex E-2 values
128 - 255 GSM 03.40 subclause 9.2.3.22 values
300 ME failure
301 SMS service of ME reserved
304 Invalid PDU mode parameter
305 Invalid text mode parameter
310 SIM not inserted
311 SIM PIN required
312 PH-SIM PIN required
313 SIM failure
314 SIM busy
315 SIM wrong
316 SIM PUK required
317 SIM PIN2 required
318 SIM PUK2 required
320 Memory failure
321 Invalid memory index
322 Memory full
330 SMSC address unknown
332 Network time-out
340 No +CNMA acknowledgment expected
500 Unknown error

4/159 35-5/FCP 101 4577 Uen Rev B
<err> Description
999 OK
3.18 AT+CPAS Phone Activity Status

Execute ME Activity AT+CPAS[=<mode>] +CPAS: <pas>
Status +CME ERROR
<err>
OK
ERROR
Test if the command AT+CPAS=? +CPAS:
is supported (list of supported
<pas>s)
+CME ERROR
<err>
OK
ERROR
Description:
This command returns the activity status <pas> of the ME. It can be
used to interrogate the ME before requesting action from the ME.
When the command is executed without the <mode> argument, the
command returns <pas> values from 0 to 128 (for supported values
see table below). When, on the other hand, the command is
executed with the <mode> argument set to 1, the command may
return Sony Ericsson specific <pas> values from 129 to 255 (for
supported values see the table below).
Test command returns values supported by the ME as a compound
value: refer to 3GPP 27.007.
Defined values:
<pas> Description
0 Ready (MT allows commands from TA/TE)
1 Unavailable (MT does not allow commands from TA/TE)
2 Unknown (MT is not guaranteed to respond to instructions)
3 Ringing (MT is ready for commands from TA/TE, but the
ringer is active)
4 Call in progress (MT is ready for commands from TA/TE, but
a call is in progress)
5 asleep (MT is unable to process commands from TA/TE
because it is in a low functionality state)

4/159 35-5/FCP 101 4577 Uen Rev B
<pas> Description
129 Not in call
130 Mobile originated call in progress. This is a sub-state to ‘call
in progress’
131 Mobile terminated call in progress. This is a sub-state to
‘call in progress’
<mode> Description
0 Restricts the CPAS to return only standard <pas>values
1 Allows the CPAS to return Sony Ericsson specific <pas>
values, such as 129, 130 and 131
Example:
AT+CPAS=?
+CPAS: (0-5,129-131)
OK
AT+CPAS
+CPAS: 0
OK
3.19 AT+CPWD Change Password

Request AT+CPWD=<fac>, +CME ERROR <err>
facility lock <oldpwd>, OK
<newpwd>
ERROR
Test if the AT+CPWD=? +CPWD:
command (<fac1>,<pwdlength1>),
is (<fac2>,<pwdlength2>),…
supported +CME ERROR <err>
OK
ERROR
Description:
This command sets a new password for the facility lock function
defined by command Facility Lock +CLCK.
Test command returns a list of pairs which present the available
facilities and the maximum length of their password.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
<fac> Description
"PS" PH-SIM (lock PHone to SIM card) (ME asks password when
other than current SIM card inserted)
“SC” SIM (lock SIM card) (SIM asks password in ME power-up and
when this lock command issued)
“AO” BAOC (Barr All Outgoing Calls) (refer GSM 02.88 clause 1)
“OI” BOIC (Barr Outgoing International Calls) (refer GSM 02.88
clause 1)
“AI” BAIC (Barr All Incoming Calls) (refer GSM 02.88 clause 2)
“IR” BIC-Roam (Bar Incoming Calls when Roaming outside the
home country) (refer GSM 02.88 clause 2)
“OX” BOIC-exHC (Barr Outgoing International Calls except to
Home Country) (refer GSM 02.88 clause 1)
“AB” All Barring services (refer GSM 02.30)
“AG” All outGoing barring services (refer GSM 02.30)
“AC” All inComing barring services (refer GSM 02.30)
"P2" SIM PIN2
<oldpwd> Description
string <oldpwd> shall be the same as password specified for
type the facility from the ME user interface or with the change
password command, +CPWD
<newpwd> Description
string <newpwd> is the new password, maximum length of
type password can be determined with <pwdlength>
<pwdlength> Description
Integer type Maximum length of the password for the facility
<err> See Listing of CME ERROR values

Example:
AT+CPWD=“SC”,“0000”,“0001”
OK
3.20 AT+CR Service Reporting Control

4/159 35-5/FCP 101 4577 Uen Rev B
Set Service AT+CR=<mode> OK
Reporting Control ERROR
Read current setting AT+CR? +CR: <mode>
OK
ERROR
Test if the command AT+CR=? +CR: (list of
is supported supported
<mode>s)
OK
ERROR
Description:
This command controls whether intermediate bearer capability
result code +CR: <serv> is returned from the TA to the TE. If
service reporting is enabled, the intermediate result code is
transmitted at the point during connect negotiation at which the TA
has determined the speed and quality of service that will be used,
before any error control or data compression reports are transmitted,
and before the intermediate result code CONNECT is transmitted.
Note: This command replaces old V.25ter command Modulation
Reporting Control +MR, which is not appropriate for use in the
GSM network.
Possible error control (other than radio link protocol) and data
compression reporting can be enabled with V.25ter commands
Error Control Reporting +ER and Data Compression Reporting
+DR.
Defined values:
<mode> Description
0 Disable reporting. Default value
1 Enable reporting
3.20.1 +CR Service Reporting Unsolicited Response

Description:
The +CR unsolicited messages are enabled and disabled by the
AT+CR command. Format:
+CR: <serv>
<serv> Description
ASYNC Asynchronous transparent
SYNC Synchronous transparent
REL Asynchronous non-transparent
ASYNC

4/159 35-5/FCP 101 4577 Uen Rev B
<serv> Description
REL SYNC Synchronous non-transparent
GPRS GPRS
[<L2P>] The optional <L2P> proposes a layer 2 protocol to use
between the MT and the TE. It is defined in the Enter
GPRS Data Mode (+CGDATA) command.
3.21 AT+CRC Cellular Result Code

Set Cellular Result AT+CRC=[<mode>] OK
Code option ERROR
Show the current AT+CRC? +CRC: <mode>
setting OK
ERROR
Test if the AT+CRC=? +CRC: (list of
supported <mode>s)
OK
ERROR
Description:
This command controls whether the extended format of incoming
call indication or GPRS network request for PDP context activation
or notification for VBS/VGCS calls is used.
When enabled, an incoming call is indicated to the TE with
unsolicited result code +CRING: <type> instead of the normal
RING
Note: Similar command may be found in TIA IS-99 and TIA IS-135.
Defined values:
<mode> Description
0 Disables extended format. Default.
1 Enables extended format
3.21.1 +CRING Incoming Call Type Notification

Description:
The +CRING unsolicited message replaces the normal RING
message when it is enabled by the AT+CRC command. The
following message format is used:
+CRING: <type>
Additional Information

4/159 35-5/FCP 101 4577 Uen Rev B
In order to not confuse the UR code with a command response, the
UR code is withheld if it occurs in the time between a command
termination character is received and a final result code is sent.
<type> Description
ASYNC Asynchronous transparent
SYNC Synchronous transparent
REL ASYNC Asynchronous non-transparent
REL SYNC Synchronous non-transparent
FAX Facsimile
VOICE Normal voice call
GPRS GPRS network request for PDP context activiation
3.22 AT+CSQ Signal Strength

Request Signal AT+CSQ +CSQ: <rssi>,<ber>
Strength +CME ERROR <err>
OK
ERROR
Test if the AT+CSQ=? +CSQ: (list of supported
command is <rssi>s),(list of supported
supported <ber>s)
+CME ERROR <err>
OK
ERROR
Description:
Returns the received signal strength indication <rssi> and channel
bit error rate <ber> from the ME.
Test command returns values supported as compound values.
Additional Information:
For WCDMA the returned values are +CSQ: 99,99 It is
recommended to use the +CIND command.
Defined values:
<rssi> Description
0 -113dBm or less
1 -111dBm
2..30 -109… -53dBm

4/159 35-5/FCP 101 4577 Uen Rev B
<rssi> Description
31 -51dBm or greater
99 Not known or not detectable
<ber> Description (BER = Bit Error Rate)

99 Not known or not detectable
3.23 AT*ECAM Call Monitoring

Set Call Monitoring AT*ECAM=<onoff> +CME ERROR:
on or off <err>
OK
ERROR
Show the current AT*ECAM? *ECAM: <on/off>
setting +CME ERROR:
<err>
OK
ERROR
Test if the AT*ECAM=? *ECAM: list of
supported <on/off>s
+CME ERROR:
<err>
OK
ERROR
Description:
This command activates or deactivates the call monitoring function
in the ME. When this log function is activated in the ME, the ME
informs about call events, such as incoming call, connected, hang
up etc.
It is preferable that the current status shall always be sent with
result code *ECAV when activating the log function. The purpose
of this is two fold:
•to gather relevant information for the call log in a TE;
•to make it possible for the TE to display call state information for
an ongoing call.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
<onoff> Description
0 The call log function is disabled (off). Default value
1 The call log function is enabled (on)
3.23.1 *ECAV Call Monitoring Unsolicited Result Code

Description:
The *ECAV result code is issued every time there is a change in the
progress of a call. The *ECAV result code has the following
syntax.
*ECAV:
<ccid>,<ccstatus>,<calltype>[,<processid>][,exitcause][,<number>,
<type>]
<ccid>: This is an integer value identifying the call for which the
progress has changed. Unless more than one call is in progress, this
value will be 1. The maximum number of call control processes is
7 (5 multiparty members, 1 call on hold, 1 call waiting).
Defined values:
<ccid> Description
0-7 Id of the call for which progress change is reported.
<ccstatus>: This is an integer value showing the status of the call.
<ccstatus> Description
0 IDLE.
1 CALLING. Mobile Originated (outgoing) call started.
2 CONNECTING. Mobile Originated (outgoing) call in the
process of establishing a connection.
3 ACTIVE. Connection established between A and B.
4 HOLD. Connection put on hold.
5 WAITING. Mobile Terminated (incoming).
6 ALERTING. Mobile Terminated (incoming) call ringing or
Mobile Originated (outgoing) ringback (remote end
ringing) detected.
7 BUSY.
<calltype>: This is an integer identifying what type of call is in
progress.
<calltype> Description
1 Voice.
2 Data
4 FAX. Not supported

4/159 35-5/FCP 101 4577 Uen Rev B
<calltype> Description
128 Voice 2.
<processid>: This is an integer identifying the process that the
module returns to after returning to the IDLE state.
<processid> Description
08 CC. Call Control
68 MM. Mobile Management.
69 MS. Mobile Station.
122 RR. Radio Resources.
<exitcause>: This is an integer value showing why the call ended.
Only reported when returning to the IDLE state (<ccstatus>=0).
<exitcause> Description
1 Unassigned (unallocated) number.
3 No route to destination.
6 Channel unacceptable.
8 Operator determined barring.
16 Normal call clearing.
17 User busy.
18 No user responding.
19 User alerting, no answer.
21 Call rejected.
22 Number changed.
25 Pre-emption.
26 Non selected user clearing.
27 Destination out of order.
28 Invalid number format (incomplete number).
29 Facility rejected.
30 Response to STATUS ENQUIRY.
31 Normal, unspecified.
34 No circuit/channel available.
38 Network out of order.
41 Temporary failure.
42 Switching equipment congestion.
43 Access information discarded.
44 requested circuit/channel not available.

4/159 35-5/FCP 101 4577 Uen Rev B
<exitcause> Description
47 Resources unavailable, unspecified.
49 Quality of service unavailable.
50 Requested facility not subscribed.
55 Incoming calls barred within the CUG.
57 Bearer capability not authorized.
58 Bearer capability not presently available.
63 Service or option not available, unspecified.
65 Bearer service not implemented.
68 ACM equal to or greater than ACMmax.
69 Requested Facility not yet implemented.
70 Only Restricted Digital information bearer capability is
available.
79 Service or option not implemented, unspecified.
81 Invalid Transaction Identifier value.
87 User not member of CUG.
88 Incompatible Destination.
91 Invalid transit network selection.
95 Semantically incorrect message.
96 Invalid mandatory information.
97 Message type non-existent or not implemented.
98 Message type not compatible with protocol state.
99 Information element non-existent or not implemented
100 Conditional IE Error
101 Message not compatible with protocol state
102 Recovery on timer expiry
111 Protocol error, unspecified
127 Inter-working unspecified
150 Radio Path Not Available
255 Empty
<number>: A string containing the phone number of the party
calling the module (Mobile Terminated) or the party called from the
module (Mobile Originated). The <number> is only shown for state
CALLING (1) and ALERTING (6) for MT calls.
String String of valid dial characters (‘0’-‘9’, ‘+’, ‘#’, ‘*’, ‘A’, ‘B’,

4/159 35-5/FCP 101 4577 Uen Rev B
and ‘C’)
<type>: This is an integer identifying the type of number displayed
in <number>.
<type> Description
Integer Type of address octet in integer format (refer GSM 04.08
subclause 10.5.4.7). ; default 145 when dialing string
includes international access code character “+”,
otherwise 129.

4/159 35-5/FCP 101 4577 Uen Rev B
4 Operational Control and Status
4.1 AT+CFUN Set Phone Functionality

Set MS functionality AT+CFUN=<fun> +CME ERROR:
<err>
OK
Show the current AT+CFUN? +CFUN: <fun>
setting +CME ERROR:
<err>
Test if the command AT+CFUN=? +CFUN: (list of
is supported supported <fun>s)
+CME ERROR:
<err>
Description:
This command selects the level of functionality <fun> in the MS.
Level “full functionality” results in the highest level of power
drawn. “Minimum functionality” results in the minimum power
drawn. This command may also be used to restrict the supported
Radio Access Technology (RAT) of the ME between GSM only or
WCDMA only.
Test command returns values supported by the ME.
Notes:
Switching to Power Down mode <fun>=0, results in a complete
power down of the ME, and it is then no longer responsive to
further AT commands. The ME must be reset by removing and
reinserting the device in order to reestablish control. For this reason,
<fun>=0 should never be used with an internal minicard ME unless
the host system is shutting down and power to the card slot is
guaranteed to be cycled.
In order to set the ME to minimal functionality and still retain the
ability for further software control, <fun>=4 should be used.
For PCI Express mini card products, note that the W_Disable_N
input signal will also have an effect on the CFUN state, and the
allowed CFUN values. When this signal prevents turning on the
radio with <fun>=1, 5, or 6, a specific CME ERROR (WAN
Disabled on Host) will be returned to indicate this failure cause.
Defined values:
<fun> Description
0 Power down.

4/159 35-5/FCP 101 4577 Uen Rev B
<fun> Description
1 Full functionality
2 Not supported
3 Not supported
4 Disable transmit and receive RF circuits. SIM still enabled. This
is often referred to as "flight mode."
Default value
5 GSM only (WCDMA radio is off)
6 WCDMA only (GSM radio is off)
4.2 AT*E2RESET Restart Module
Possible
Description Command
Responses
Perform a restart of the device AT*E2RESET OK
firmware ERROR
Test if the command is AT*E2RESET=? OK
supported ERROR
Description:
This command is used to cause the module to reset and restart. The
software internally will allow a watch dog timeout to occur which
will reset the microcontroller’s internal registers and restart the
software at the beginning of operation. Most blocks internal to the
module will be reset and reinitialized. All settings and levels set by
previous AT commands that are not stored in non-volatile memory
will have to be reissued. The general result of this command is to
return as much of the system back to normal power on conditions.
The power state will be returned to CFUN=4 after the reset.
This command is available without SIM access.
Note: The proper radio access operations as defined by 3GPP will
be performed prior to the reset. e.g. if the device is GPRS attached
and registered then a detach and power-down registration will be
performed.
4.3 AT+CMAR Master Reset
Possible
Description Command
Responses
Perform a master AT+CMAR=<ME_lock_code> +CME
reset in the MS ERROR:
<err>

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Responses
OK
ERROR
Test if the AT+CMAR=? +CME
command is ERROR:
supported <err>
OK
ERROR
Description:
This command requests the MS to reset user data. The user data in
the MS will be reset to the default values. This command also
unlocks the MS.
<ME_lock_code> Description
String Security code (ME_lock_code) must be verified
before performing the master reset, see also
AT+CLCK

4/159 35-5/FCP 101 4577 Uen Rev B
5 Profiles
5.1 AT&F Set to Factory Defined Configuration Profile

Execute AT&F[=][<profile>] OK
ERROR
Test if the AT&F=? &F: (list of
command is supported factory
supported profiles)
Description:
This command instructs the DCE to set all parameters in the current
profile to default values specified by the manufacturer, which may
take in consideration hardware configuration and other
manufacturer defined criteria.
This command modifies parameters in volatile memory. In order to
commit these changes to non-volatile memory, AT&W must be
executed after AT&F has returned OK. If AT&W is not executed,
the AT&F effect will not survive a reset.
Defined values:
<profile> Description
0 Factory profile to restore (only profile 0 is supported)
Configuration Profile Settings and Default Values

The commands AT&F, ATZ, and AT&W allow the user to restore, and store the current
profile parameter values outlined in the table below.
Parameter Factory Defined

AT Command Range
Description Values
Result Code ATQ (0-1) 0 - Quiet
Suppression Mode is off
DCE ATV (0-1) 1 - Verbose is
Response on
Format
Call Progress ATX (0-1) 0 - Don't
Monitoring Show Speed
Control
Calling Line AT+CLIR (0-2) 0 - Don't use
ID Restricted Network
Setting

4/159 35-5/FCP 101 4577 Uen Rev B
AT Command Range
Description Values
Extended AT+CMEE (0-2) 0 - CMEE is
Error off
Reporting
Command ATE (0-1) 1 - Echo is on
Echo
Handshake AT\Q (0-2) 1 - HW
Mode handshake
Circuit 108 AT&D (0-2) 0 - DTR
Response Ignore
(Data
Terminal
Ready)
Circuit 107 AT&S (0-1) 0 - DSR On
Response
(Data Set
Ready)
Circuit 109 AT&C (0-2) 1 - DCD
Control Passage
(Carrier
Detect)
DTE-DCE AT+IFC (0-3) 2 - HW,
Local Flow DCE_DTE, 2 - HW
Control (0-2)
DTE_DCE
Select bearer AT+CBST (0-134) 7 - 9600bps,
service type Speed, 0 - Data Ckt
(0-7) Name, Async,
(0-3) 1 - Non-
Connection transparent
Element
Calling Line AT+CLIP (0-1) 0 - Off
Identification
Presentation
Connected AT+COLP (0-1) 0 - Off
Line
Identification
Presentation
Operator AT+COPS (0-2) 0 - Long
Selection Alphanumeric

4/159 35-5/FCP 101 4577 Uen Rev B
AT Command Range
Description Values
Format
Service AT+CR (0-1) 0 - Off
Reporting
Control
Cellular AT+CRC (0-1) 0 - Off
Result Code
(extended)
Network AT+CREG (0-2) 0 - Off
Registration
Radio Link AT+CRLP (1-61) IWS, 61,
Protocol (1-61) MS, 61,
(48-255)T1, 48,
(1-255) N2 6
Cable AT+ILRR (0-1) 0 - Off
Interface
Local Rate
Reporting
Select AT+CSCS (0-7) 0 - PCCP437
Character
Set
Advice of AT+CAOC (0-2) 0 - Query
Charge mode
Call Meter AT+CCWE (0-1) 0 - Off
Maximum
Event
Phonebook AT+CPBS (FD,LD,ME,M SM - SIM
Storage T,SM,DC,RC, Phonebook
Select MC,EN,ON
Call Waiting AT+CCWA (0-1) 0 - Off,
Capability, 0 - Off,
(0-2) Mode, 1 - Voice
(0-128)
Bearer
Interface AT+IPR (0,1200,240 0 - Auto
Port 0,4800,960
Command 0,19200,38
400,57600,
115200,230
400,460800
4/159 35-5/FCP 101 4577 Uen Rev B
AT Command Range
Description Values
,921600)
Single AT+CSNS 0 Voice, 4 0 - Voice
Numbering Data
Scheme
Message AT*EMWI (0-2) 0 - Off
Waiting
Indication
Network Info AT*ERINFO (0-1) 0 - Off
DRX AT*EDRX (0-1) 0 - Off
Reporting
Mode
SIM AT*E2SDR (0-1) 0 - Off
Detection
Reporting
Cell AT*E2CD (0-1) 0 - Off
Description
Operational AT*E2OTR (0-1) 0 - Off
Temperature
Reporting
IP Setup AT*E2IPS (1-10), 2,
Parameters: (3-8) , 8,
Initial (1-10), 2,
Timeout,
(255-1460), 1020,
Retransmit
(0,1), 0,
Count,
(0-120) 64
Send Block
Size
Send Interval
Wait,
Lock Escape
Sequence,
OpenTimeou
t
Escape AT*E2ESC (0-10) 0 - No Guard
Sequence Time
Guard Time
(GPRS)
Unstructured AT+CUSD (0-2) 0 - Off
Supplementa
4/159 35-5/FCP 101 4577 Uen Rev B
AT Command Range
Description Values
ry Service
Data
Call AT*ECAM (0-1) 0 - Off
Monitoring
Mobile AT+CMER (0-3) 0 - Off/Buffer,
Equipment Reporting, 0 - Off
Event (0-1)
Reporting Capability
Supplementa AT+CSSN (0-1) MO 0 - Off,
ry Service unsol, 0 - Off
Notification (0-1) MT
unsol
Expanded AT*ECIND (0-1) for 0 - Off (for
Indicator each all)
Control indicator
Pin Event AT*EPEE (0-1) 0 - Off
Module State AT*EMRDY (0-1) 0 - Off
Check and
Report in
State Change
Restart AT*ESRB (0-1) 1 - On
Message
DTMF AT+VTD (1-1000) 1
Duration in
sec
SMS
Cell AT+CSCB (0-1) Mode, 0 - Accept,
Broadcast N/A Msg Id, "" - Empty,
Message
N/A, CBM "" - Empty
Type
DCS
Set Text AT+CSMP (0-255) 17,
Mode First Oct, 167,
Parameters (0-255) 0,
Valid Pd,
0
(0-255) Prot
Id,
(0-255) DCS
Show Text AT+CSDH (0-1) 0 - Don't

4/159 35-5/FCP 101 4577 Uen Rev B
AT Command Range
Description Values
Mode show
Parameters
New AT+CNMI (0-1) Unsol 1 - Discard,
Message Msg, 0 - None,
Indication (0-3) Rcv 0 - None,
Msg,
0 - None,
(0-3) Cell
0 - Flush
Bcast,
(0-2) Status
Rept,
0 Buffered
Result
GPRS
Controls AT+CGREG (0-2) 0 - Disable
unsol output
when change
in network
GPRS: Packet AT+CGEREP (0-2) Mode, 1 - Discard,
domain (0-1) Buffer 1 - Flush
event Effect
reporting
PDP Context AT+CGDCO (1-20) Ctxt Empty (No
NT id, PDPcontexts
("IP", "IPV4", defined).
"IPV6") PDP
Type,
N/A PDP
Addr,
(0-2) data
comp,
(0-4) hdr
comp
Minimum AT+CGEQMI See Empty (No
QoS profile N AT+CGEQMI QoS profiles
for PDP N for any PDP
Context contexts).
Requested AT+CGEQRE See Empty (No
QoS profile Q AT+CGEQRE QoS profiles
for PDP Q for any PDP

4/159 35-5/FCP 101 4577 Uen Rev B
AT Command Range
Description Values
Context contexts).
Internet AT*ENAD See Empty (No
Account AT*ENAD internet
Settings accounts for
any PDP
contexts).
Global
Settings
Input/Output AT*E2IO N/A 0
Read/Write
SIM Selection AT*ESSE (0-1) 0 - Internal
Ring AT*E2SMSRI (0-1150) 0 (ms)
indicator for
SMS
(duration of
ring pulse in
steps of
50ms)
Daylight AT*EDST (0-2) 0 - STD
Saving Time
(adjustment)
Automatic AT+CTZU (0-1) 0
Time Zone
update
(capability)
Operator AT+COPS (0-1,3) 0 - Automatic
Selection
Mode
Operator AT+COPS Only used "" (empty
Selection when mode string)
(operator is set to
name) manual
SMS Bearer AT+CGSMS (0-3) 3 - CSD
Mode preferred
GPRS AT*E2GAA (0-2) 0 - Never
AutoAttach Attach
Service AT+CSCA N/A "" - Empty,
Center Address, 129 -
Address 129 Type National

4/159 35-5/FCP 101 4577 Uen Rev B
Example:
AT&F
OK
5.2 AT&W Store Configuration Profile

Stores the current AT&W[=][<profile>] OK
user profile to non ERROR
volatile memory
Test if the command AT&W=? &W: (list of
profile ids)
Description:
This command stores the current profile in non-volatile memory.
The profile in non-volatile memory is mapped to the <profile>
parameter.
If a profile exists in non-volatile memory for <profile>, it is
overwritten with the current profile.
See the AT&F description for a list of all parameter settings stored
in the configuration profile.
Defined values:
<
Description
profile>
0 Stores current profile to location <profile>. (Only profile 0
is supported)
5.3 ATZ Restore Configuration Profile

Execute ATZ[=][<profile>] OK
ERROR
Show if supported and ATZ=? Z: (list of
list available parameter supported
range profile ids)
Description:
This command instructs the DCE to restore the configuration profile
from non-volatile memory that corresponds to <profile> . Consider
hardware configuration switches or non-volatile parameter storage
(if implemented) when using this command. The current profile is
replaced with the configuration profile from non-volatile memory.
4/159 35-5/FCP 101 4577 Uen Rev B
Commands included on the same command line as the Z command
will be ignored. See AT&F for a list of parameters available in a
configuration profile.
Defined values:
0 Select the profile to restore. (Only profile 0 is
supported)

4/159 35-5/FCP 101 4577 Uen Rev B
6 Time Commands
6.1 AT+CCLK Set Clock and Date
Possible
Description Command
Responses
Set the real time clock AT+CCLK=<time> +CME ERROR:
of the ME <err>
OK
ERROR
Show the current setting AT+CCLK? +CCLK:
<time>
+CME ERROR:
<err>
OK
ERROR
Test if the command is AT+CCLK=? OK
supported ERROR
Description:
Sets the real time clock of the ME. If setting fails in an ME, error
+CME ERROR: <err> is returned. Read command returns the
current setting of the clock.
Defined values:
<time> Description
string Format is “yyyy/MM/dd,hh:mm:ss±zz”, where characters
indicate year (four digits), month, day, hour, minutes,
seconds and time zone (indicates the difference, expressed
in quarters of an hour, between the local time and GMT;
range -47...+48), e.g. 6th of May 1994, 22:10:00 GMT+2
hours reads “94/05/06,22:10:00+08”
Example:
AT+CCLK?
+CCLK: “00/01/01,22:54:48+00”
OK
AT+CCLK=“19/11/02,09:30:00+00”
OK

4/159 35-5/FCP 101 4577 Uen Rev B
7 Data - CSD
7.1 AT+CBST Select Bearer Service Type

Select AT+CBST=[<speed>, OK
bearer [<name>,[<ce>]]] ERROR
service type
Show the AT+CBST? +CBST:
current <speed>,<name>,
setting <ce>
OK
ERROR
Test if the AT+CBST=? +CBST: (list of supported
command is <speed>s,list of
supported supported <name>s, list
of supported <ce>s)
OK
ERROR
Description:
Selects the bearer service <name> with data rate <speed>, and the
connection element <ce> to be used when data calls are originated.
Values may also be used during mobile terminated data call setup,
especially in the case of single numbering scheme calls.
Test command returns values supported by the TA as compound
values.
Defined values:
<speed> Description
0 Auto selection of speed. Only possible in case of 3.1 kHz
modem and non-transparent service.
Default value
7 9600 bps V.32
12 9600 bps V.34
14 14400 bps V.34
15 19200 bps V.34
16 28800 bps V.34
17 33600 bps V.34
39 9600 bps (V.120)

4/159 35-5/FCP 101 4577 Uen Rev B
<speed> Description
43 14400 bps (V.120)
47 19200 bps (V.120)
48 28800 bps (V.120)
49 38400 bps (V.120)
50 48000 bps (V.120)
51 56000 bps (V.120)
71 9600 bps V.110 (ISDN)
75 14400 bps V.110 (ISDN)
79 19200 bps V.110 (ISDN)
80 28800 bps V.110 (ISDN)
81 38400 bps V.110 (ISDN)
82 48000 bps V.110 (ISDN)
83 56000 bps V.110 (ISDN)
84 64000 bps (X.31 flag stuffing)
<name> Description
0 Asynchronous connection (UDI or 3.1 KHz modem). Default
value.
4 Data circuit asynchronous (RDI)
<ce> Description
0 Transparent
1 Non transparent. Default value.
7.2 AT+CRLP Radio Link Protocol

Set radio AT+CRLP=[<iws> OK
link [,<mws>[,<T1> ERROR
protocol [,<N2>[,<ver>[,<T4
>]]]]]
Show the AT+CRLP? +CRLP:
current <iws>,<mws>,<T1>,<N
setting 2>,<ver1>[,<T4>]
<CR><LF>
4/159 35-5/FCP 101 4577 Uen Rev B
+CRLP:
<iws>,<mws>,<T1>,<N
2>,<ver2>[,<T4>]
[...]]
OK
ERROR
Test if the AT+CRLP=? +CRLP: (list of supported
command <iws>s), (list of
is supported <mws>s),
supported (list of supported
<T1>s),
(list of
supported<N2>s),<ver1
>[,(list of supported
<T4>s]
[<CR><LF>+CRLP: (list
of supported <iws>s),
(list of supported
<mws>s), (list of
supported <T1>s), (list
of supported
<N2>s),<ver2>[,(list of
supported <T4>s][...]]
OK
ERROR
Description:
Radio link protocol (RLP) parameters used when non-transparent
data calls are originated may be altered with this command.
Available command subparameters depend on the RLP versions
implemented by the device.
Read command returns current settings for each supported RLP
version <verx>. Only RLP parameters applicable to the
corresponding <verx> are returned.
Test command returns values supported by the TA as a compound
value.
Defined values:
<iws> Description
Supported values 1 to IWF to MS window size. Default value is
61 61.

4/159 35-5/FCP 101 4577 Uen Rev B
<mws> Description
Supported values 1 to MS to IWF window size. Default value is
61 61.
<T1> Description
Supported values 38 Acknowledgment timer T1 (*10ms).
to 100 Default value is 59.
<N2> Description
Supported values 0 to Re-transmission attempts N2. Default
255 value is 6.
<T4> Description
3 - 255 Re-sequencing period T4 (*10ms). Default value is 5.
Only applicable to V2
<ver> Description
Integer RLP version.
0, 1, 2 Note: versions 0 and 1 share the same parameter set.

4/159 35-5/FCP 101 4577 Uen Rev B
8 Data - GPRS
8.1 AT+CGACT PDP Context Activate or Deactivate

Activate or AT+CGACT=<state> +CME ERROR: <err>
deactivate the [,<cid>[,<cid>]]] OK
specified PDP
ERROR
context(s)
Read the AT+CGACT? +CGACT: <cid>,
command <state>[<CR><LF>
+CGACT: <cid>,
<state>[…]]
OK
ERROR
Test if the AT+CGACT=? +CGACT: (list of
command is supported <state>s)
supported OK
ERROR
Description:
Used to activate or deactivate the specified PDP context(s). Before
a context may be activated it must be defined by the command
AT+CGDCONT.
If a context is not already attached to the GPRS network then this
command will automatically attach before attempting the activation.
After the command has completed, the MS remains in V.250
command state. If the MS is already in the requested state, the
command is ignored and OK is returned. If the requested state
cannot be achieved, ERROR or +CME ERROR is returned. If the
MS is not attached to the GPRS service when the activation form of
the command is executed, the MS first performs a GPRS attach and
then attempts to activate the specific contexts.
If no <cid>s are specified, then the activation form of the command
activates all defined contexts and the deactivation form of the
command deactivates all active contexts.
Defined values:
<state> Description
0 PDP context activation deactivated
1 PDP context activation activated

4/159 35-5/FCP 101 4577 Uen Rev B
<cid> Description
Integer Reference to a PDP context identifier
previously defined with AT+CGDCONT
8.2 AT+CGCMOD PDP Context Modify

Activate or AT+CGCMOD=[<cid>
deactivate the [,<cid>[,[,…]]] OK
specified PDP
ERROR
context(s)
Test if the AT+CGCMOD=? +CGCMOD: (list of
command is <cid>s associated
supported with active
contexts)
Description:
The execution command is used to modify the specified PDP
context(s) with respect to QoS profiles and TFTs. After the
command has completed, the MT returns to V.25ter online data
state. If the requested modification for any specified context cannot
be achieved, an ERROR or +CME ERROR response is returned.
Extended error responses are enabled by the +CMEE command.
If no <cid>s are specified, the activation form of the command
modifies all active contexts.
The test command returns a list of <cid>s associated with active
contexts.
Defined values:
<cid> Description
Integer type See AT+CGDCONT command for range
8.3 AT+CGATT GPRS Attach or Detach
Possible
Description Command
Responses
Attach or detach MS to AT+CGATT=[<state>] +CME ERROR:
the GPRS/packet <err>
domain/packet OK
domain service
ERROR
Show the current AT+CGATT? +CGATT:
setting <state>

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Responses
OK
ERROR
Test if the command is AT+CGATT=? +CGATT: (list
supported of supported
<state>s)
OK
ERROR
Description:
Used to attach the MS to, or detach the MS from, the GPRS/packet
domain service. After the command has completed, the MS remains
in V.250 command state. If the MS is already in the requested state,
the command is ignored and the OK response is returned. If the
requested state cannot be achieved, an ERROR or +CME ERROR
response is returned. Extended error responses (enabled by the
+CMEE command) are listed under “+CME ERROR (Mobile
Equipment Error Code)”.
Any active PDP contexts will be automatically deactivated when
the attachment state changes to detached.
Note: The unit software is automatically hard coded to attach to a
GPRS network therefore entering this command as part of the
initialization sequence is not required.
Note: This command has the characteristics of both the V.250
action and parameter commands. Hence it has the read form in
addition to the execution/set and test forms.
Defined values:
<state> Description
0 Detached
1 Attached
8.4 AT+CGCLASS GPRS Mobile Station Class

Set class AT+CGCLASS=<class> OK
ERROR
Read current class AT+CGCLASS? +CGCLASS:
<class>
ERROR
Test if the AT+CGCLASS=? +CGCLASS: (list
command is of supported

4/159 35-5/FCP 101 4577 Uen Rev B
supported <class>s)
Description:
The set command is used to set the specified GPRS/Packet Domain
mobile class. If the requested class is not supported, an ERROR or
+CME ERROR response is returned.
The read command returns the current mode of operation set by the
TE, independent of serving cell capability and serving cell Access
Technology. If no value has been set by the TE previously, the
return value shall be the highest mode of operation that can be
supported.
The test command returns the supported <class>s.
Defined values:
<class> Description
A Class A (GPRS) or PS/CS mode (UMTS)
B Class B (value does not apply to UMTS)
CG Class C packet only (GPRS) or PS mode (UMTS)
CC Class C CS only (GPRS) or CS mode (UMTS)
8.5 AT+CGDATA Enter Data State
Possible
Description Command
Responses
Establish AT+CGDATA=[<L2p>,[cid[,cid>[, CONNECT
GPRS/packet …]]]] ERROR
domain
OK
connection
ERROR
Test if the AT+CGDATA=? +CGDATA:
command is (list of
supported supported
<L2P>s)
OK
ERROR
Description:
The execution command causes the ME to perform whatever
actions are necessary to establish communication between the TE
and the network using one or more GPRS/Packet Domain PDP
types. This may include performing a GPRS/Packet Domain attach
and one or more PDP context activations. If the <L2P> parameter
value is unacceptable to the ME, the ME returns an ERROR or
+CME ERROR response. Otherwise, the ME issues the
intermediate result code CONNECT and enters V.25ter online data
4/159 35-5/FCP 101 4577 Uen Rev B
state.
Commands following +CGDATA command in the AT command
line are not processed by the ME.
During each PDP startup procedure the ME may have access to
some or all of the following information -
· The command may have provided an <L2P> parameter value.
· The TE may provide a PDP type and/or PDP address to the ME
during in the PDP startup procedure.
If any of this information is in conflict, the command will fail.
Any PDP type and/or PDP address present in the above information
are compared with the PDP type and/or PDP address in any context
definitions specified in the command in the order in which their
<cid>s appear.
For a context definition to match -
· The PDP type must match exactly.
· The PDP addresses are considered to match if they are identical or
if either or both addresses are unspecified. For example, a PPP NCP
request specifying PDP type = IP and no PDP address would cause
the ME to search through the specified context definitions for one
with PDP type = IP and any PDP address.
The context shall be activated using the matched value for PDP type
and a static PDP address if available, together with the other
information found in the PDP context definition. If a static PDP
address is not available then a dynamic address is requested.
If no <cid> is given or if there is no matching context definition, the
ME shall attempt to activate the context with whatever information
is available to the ME. The other context parameters shall be set to
their default values.
If the activation is successful, data transfer may proceed.
After data transfer is complete, and the layer 2 protocol termination
procedure has completed successfully, the V.25ter command state is
re-entered and the ME returns the final result code OK.
In the event of an erroneous termination or a failure to start up, the
V.25ter command state is re-entered and the ME returns the final
result code NO CARRIER or, if enabled, +CME ERROR. Attach,
activate and other errors may be reported.
Defined values:
<L2P> Description
PPP Point-to-point protocol for a PDP such as IP
<cid> Description
8.6 AT+CGDCONT Define PDP Context

4/159 35-5/FCP 101 4577 Uen Rev B
Select PDP AT+CGDCONT=[<cid> +CME ERROR: <err>
context [,<PDP_type>[,<APN> OK
parameters [,<PDP_addr>
ERROR
[,<d_comp>
[,<h_comp> [,<pd1>
[,...[,pdN]]]]]]]]]
Read the AT+CGDCONT? +CGDCONT: <cid>,
command <PDP_type>,<APN>,
<PDP_addr>,<d_comp
>,
<h_comp>[,<pd1>[,...[
,pdN>]]]
[<CR><LF>+CGDCON
T: <cid>,
<PDP_type>,<APN>,
<PDP_addr>,<d_comp
>,
<h_comp>[,<pd1>[,...[
,pdN>]]]
[…]]
OK
ERROR
Test if the AT+CGDCONT=? +CGDCONT: (range of
command supported <cid>s),
is <PDP_type>,,,(list of
supported supported
<d_comp>s),
(list of supported
<h_comp>s)
[,(list of supported
<pd1>s)
[,…[,(list of supported
<pdN>s)]]]
[<CR><LF>+CGDCON
T: (range of supported
<cid>s),
<PDP_type>,,, (list of
supported
<d_comp>s), (list of
supported
<h_comp>s) […]]
OK

4/159 35-5/FCP 101 4577 Uen Rev B
ERROR
Description:
Specifies PDP context parameter values for a PDP context
identified by the (local) context identification parameter, <cid>. If
the parameter list is empty, the table will be cleared. If just the
<cid> is specified then that entry will be cleared but the rest of the
table will stay intact. PDP context table entries may only be cleared
if the context is not activated.
When the PDP context is activated a dynamic IP address will be

filled into the table entry by the network. If the network supports it,
then a static IP address may be filled in and will be used when
activating the context. When the context is deactivated the IP
address will be removed from the table if it is a dynamic IP but a
static IP will remain.
Defined values:
<cid> Description
Integer (PDP Context Identifier) a numeric parameter which
type specifies a particular PDP context definition. The
parameter is local to the TE-MS interface and is used in
other PDP context-related commands. The range of
permitted values (minimum value = 1) is returned by the
test form of the command
1-10 Supported values
<PDP_type> Description
IP Internet Protocol, version 4 (IETF STD 5) (Default)
IPV6 Internet Protocol, version 6 (IETF RFC 2460)
<APN> Description
String (Access Point Name) a string parameter which is a
type logical name that is used to select the GGSN or the
external packet data network. If the value is null or
omitted, then the subscription value will be requested
<PDP_addr> Description
String A string parameter that identifies the MS in the
type address space applicable to the PDP. If the value is
null or omitted, then a value may be provided by the

4/159 35-5/FCP 101 4577 Uen Rev B
TE during the PDP startup procedure or, failing that, a
dynamic address will be requested
<d_comp> Description
0 PDP data compression OFF (Default)
1 PDP data compression ON
2 V.42bis
<h_comp> Description
0 PDP header compression OFF (Default)
1 PDP header compression ON
2...255 Reserved
<PdN> Description
String Zero to N string parameters whose meanings are
type specific to the <PDP_type> Not supported
8.7 AT+CGDSCONT Define Secondary PDP Context

Select AT+CGDSCONT=[<cid> OK
secondary ,<p_cid> [,<PDP_type> ERROR
PDP [,<d_comp>
context [,<h_comp>]]]]
parameters
Read the AT+CGDSCONT? +CGDSCONT: <cid>,
command <p_cid>,<d_comp>,
<h_comp>
[<CR><LF>+CGDSC
ONT: <cid>,
<p_cid>,<d_comp>,
<h_comp>
[…]]
OK
ERROR
Test if the AT+CGDSCONT=? +CGDSCONT: (range
4/159 35-5/FCP 101 4577 Uen Rev B
command of supported
is <cid>s), (list of
supported <cid>s for active
primary
contexts),(list of
supported
<PDP_type>s), (list of
supported
<d_comp>s),
(list of supported
<h_comp>s)
OK
ERROR
Description:
The set command specifies PDP context parameter values for a
Secondary PDP context identified by the (local) context
identification parameter, <cid>. The number of PDP contexts that
may be in a defined state at the same time is given by the range
returned by the test command.
A special form of the set command, +CGDSCONT= <cid> causes

the values for context number <cid> to become undefined.
The read command returns the current settings for each defined
context.
Note: If <cid> states an already existing, primary context, this will
be converted to a secondary one, provided of course, that stated
<p_cid> is a different and existing primary account defined with
+CGDCONT. Note that any secondary contexts attached to the
converted context disappears.
Defined values:
<cid> Description
Integer (PDP Context Identifier) a numeric parameter which
type specifies a particular PDP context definition. The
parameter is local to the TE-MS interface and is used in
other PDP context-related commands. The range of
permitted values (minimum value = 1) is returned by the
test form of the command
1-20 Supported values
<p_cid> Description
Integer (Primary PDP Context Identifier) a numeric parameter
type which specifies a particular PDP context definition which
4/159 35-5/FCP 101 4577 Uen Rev B
<p_cid> Description
has been specified by use of the +CGDCONT command.
The parameter is local to the TE-ME interface.
"IP" Internet Protocol (IP Version 4)
"IPV6" Internet Protocol (IP Version 6)
<d_comp> Description
0 PDP data compression OFF (Default)
1 PDP data compression ON
2 V.42bis
<h_comp> Description
0 PDP header compression OFF (Default)
1 PDP header compression ON
2...255 Reserved
8.8 AT+CGEREP GPRS Event Reporting

Set AT+CGEREP=[<mode +CME ERROR: <err>
command > OK
[,<bfr>]]
ERROR
Read the AT+CGEREP? +CGEREP:
command <mode>,<bfr>
OK
ERROR
Test if the AT+CGEREP=? +CGEREP: (list of
command is supported <mode>s),
supported (list of supported
<bfr>s)
OK
ERROR
Description:

4/159 35-5/FCP 101 4577 Uen Rev B
Enables or disables GPRS event reporting via unsolicted result
codes. <mode> controls the processing of unsolicited result codes
specified within this command. <bfr> controls the effect on
buffered codes when <mode> 1 or 2 is entered. See +CGEV for a
description of the unsolicited response format.
Defined values:
<mode> Description
0 Buffer unsolicited result codes in the MT. No codes are
forwarded to the TE. If MT result code buffer is full, the
oldest ones can be discarded.
1 Discard unsolicited result codes when MT-TE link is
reserved (e.g. in onlne data mode); otherwise forward them
directly to the TE. (online data mode indication is currently
not available, therefore link is assuemed to be not reserved)
<bfr> Description
0 MT buffer of unsolicited result codes defined within this
command is cleared when <mode> 1 or 2 is entered
8.8.1 +CGEV GPRS Event Reporting

Description:
The +CGEV unsolicited messages are enabled or disabled by the
AT+CGEREP command. The format of the unsolicited report is:
+CGEV: <XXX>
Defined values:
<XXX> Description
+CGEV: NW DEACT The network has forced a context
<PDP_type>, deactivation. The <cid> that was used
<PDP_addr>[,<cid>] to activate the context is provided if
known.
+CGEV: ME DEACT The mobile equipment has forced a
<PDP_type>, context deactivation. The <cid> that
<PDP_addr>[,<cid>] was used to activate the context is
provided if known.
+CGEV: NW DETACH The network has forced a
GPRS/Packet Domain detach. This
implies that all active contexts have
been deactivated. These are not
reported separately
+CGEV: ME DETACH The mobile equipment has forced a
GPRS/Packet Domain detach. This

4/159 35-5/FCP 101 4577 Uen Rev B
<XXX> Description
implies that all active contexts have
been deactivated. These are not
reported separately
String A string parameter that identifies the module in the
type address space applicable to the PDP. If the value is null
or omitted, then a value may be provided by the TE
during the PDP startup procedure or, failing that, a
dynamic address will be requested
IP Internet Protocol (IETF STD 5)
<cid> Description
Integer type See AT+CGDCONT command for range
8.9 AT+CGPADDR Show PDP Address

Show PDP AT+CGPADDR=[<cid> +CGPADDR:
addresses [,<cid> [,…]]] <cid>,<PDP_addr>
for [<CR><LF>+CGPADDR:
specified <cid>,<PDP_addr>
CIDs [...]]
OK
ERROR
Test if the AT+CGPADDR=? +CGPADDR: (list of
command defined <cid>s)
is OK
supported
ERROR
Description:
Returns a list of PDP addresses for the specified context identifiers.
The test command returns a list of defined <cid>s. An IP address is
only assigned to a PDP context if the context is activated (see
+CGACT) or if the IP address has been staticly assigned by the user
via +CGDCONT.
Defined values:
4/159 35-5/FCP 101 4577 Uen Rev B
<cid>
Description
Integer Parameter which specifies a particular PDP context

type definition (see +CGDCONT command). If no <cid> is
specified, the addresses for all defined contexts are
returned
<PDP_address> Description
String type A string that identifies the MS in the address space
applicable to the PDP. The address may be static or
dynamic. For a static address, it will be the one set
by the +CGDCONT and +CGDSCONT commands
when the context was defined. For a dynamic
address it will be the one assigned during the last
PDP context activation that used the context
definition referred to by <cid>. <PDP_address> is
omitted if none is available
8.10 AT+CGEQMIN 3G Quality of Service Profile (Minimum

acceptable)
Possible
Description Command
Response(s)
set a profile AT+CGEQMIN=[<cid> OK
for the [,<Traffic class> ERROR
context [,<Maximum bitrate UL>
identified by [,<Maximum bitrate DL>
the (local) [,<Guaranteed bitrate UL>
context [,<Guaranteed bitrate DL>
identification [,<Delivery order>
parameter [,<Maximum SDU size>
[,<SDU error ratio>
[,<Residual bit error ratio>
[,<Delivery of erroneous
SDUs> [,<Transfer delay>
[,<Traffic handling
priority>]]]]]]]]]]]]]
Read the AT+CGEQMIN? +CGEQMIN:
current <cid>, <Traffic
setting class>
,<Maximum

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Response(s)
bitrate UL>,
<Maximum
bitrate DL>
,<Guaranteed
bitrate UL>
,<Guaranteed
bitrate DL>,
<Delivery
order>
,<Maximum SDU
size> ,<SDU
error ratio>
,<Residual bit
error ratio>
,<Delivery of
erroneous
SDUs>
,<Transfer
delay> ,<Traffic
handling
priority>
[<CR><LF>
+CGEQMIN:
<cid>, <Traffic
class>
,<Maximum
bitrate UL>
,<Maximum
bitrate DL>
,<Guaranteed
bitrate UL>
,<Guaranteed
bitrate DL>,
<Delivery
order>
,<Maximum SDU
size> ,<SDU
error ratio>
,<Residual bit
error ratio>
,<Delivery of
erroneous
SDUs>
4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Response(s)
,<Transfer
delay> ,<Traffic
handling
priority>
[…]]
Test if the AT+CGEQMIN=? +CGEQMIN:
command is <PDP_type>,
supported (list of
supported
<Traffic class>s)
,(list of
supported
<Maximum
bitrate UL>s)
,(list of
supported
<Maximum
bitrate DL>s),
(list of
supported
<Guaranteed
bitrate UL>s),
(list of
supported
<Guaranteed
bitrate DL>s)
,(list of
supported
<Delivery
order>s) ,(list of
supported
<Maximum SDU
size>s) ,(list of
supported <SDU
error ratio>s)
,(list of
supported
<Residual bit
error ratio>s)
,(list of
supported
<Delivery of
erroneous
4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Response(s)
SDUs>s) ,(list of
supported
<Transfer
delay>s) ,(list of
supported
<Traffic
handling
priority>s)
[<CR><LF>
+CGEQMIN:
<PDP_type>,
(list of
supported
<Traffic class>s)
,(list of
supported
<Maximum
bitrate UL>s),
(list of
supported
<Maximum
bitrate DL>s)
,(list of
supported
<Guaranteed
bitrate UL >s),
(list of
supported
<Guaranteed
bitrate DL >s)
,(list of
supported
<Delivery
order>s) ,(list of
supported
<Maximum SDU
size>s) ,(list of
supported <SDU
error ratio>s)
,(list of
supported
<Residual bit
error ratio>s)
4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Response(s)
,(list of
supported
<Delivery of
erroneous
SDUs>s) ,(list of
supported
<Transfer
delay>s) ,(list of
supported
<Traffic
handling
priority>s)
[…]]
Description
This command allows the TE to specify a minimum acceptable
profile, which is checked by the MT against the negotiated profile
returned in the Activate/Modify PDP Context Accept message.
The set command specifies a profile for the context identified by the
(local) context identification parameter, <cid>. The specified profile
will be stored in the MT and checked against the negotiated profile
only at activation or MS-initiated modification of the related
context. Since this is the same parameter that is used in the
+CGDCONT and +GGDSCONT commands, the +CGEQMIN
command is effectively an extension to these commands. The QoS
profile consists of a number of parameters, each of which may be
set to a separate value.
A special form of the set command, +CGEQMIN= <cid> causes the
minimum acceptable profile for context number <cid> to be
returned to the default values. In this case no check is made against
the negotiated profile.
context.
The test command returns values supported as a compound value.
The parameter value ranges for each PDP type are returned on a
separate line.
The QoS profiles for PDP contexts are part of the configuration
profile. The default setting for every PDP context is an empty QoS
profile. Executing AT&F restores the QoS profile for all PDP
contexts to the empty profile. To commit the QoS profile for all
PDP contexts to non-volatile memory, AT&W must be executed.
Defined values
<cid> Description
See AT+CGDCONT for range of <cid>.
4/159 35-5/FCP 101 4577 Uen Rev B
<cid> Description
NOTE: is is not necessary to define a <cid> value using
+CGDCONT before setting the QoS values using this
command.
The following parameters are defined in 3GPP TS 23.107 -
<Traffic
Description
class>
Integer A numeric parameter that indicates the type of
format application for which the UMTS bearer service is
optimised.
0 Conversational
1 Streaming
2 Interactive
3 Background (Default)
<Maximum bitrate UL> Description

Integer Maximum number of kbit/s delivered to
UMTS.
Ericsson Specific note: With reference to
3GPP TS 24.008 subclause 10.5.6.5, not all
the integer values are valid. Thus upon
setting this parameter, the value is
rounded down to the nearest valid value. It
then follows that reading back this
parameter may produce a different value
than that used upon setting.
0...384 Default 0 (Subscribed value will be
requested)
<Maximum bitrate DL> Description

Integer Maximum number of kbit/s delivered by
UMTS.
See note under <Maximum bitrate UL>
0...3648 Default 0 (Subscribed value will be
requested)

4/159 35-5/FCP 101 4577 Uen Rev B
<Guaranteed
Description
bitrate UL>
Integer A numeric parameter that indicates the guaranteed
number of kbits/s delivered to UMTS (up-link
traffic) at a SAP (provided that there is data to
deliver).
0...384 Default 0 (Subscribed value will be requested)
<Guaranteed
Description
bitrate DL>
Integer A numeric parameter that indicates the guaranteed
number of kbits/s delivered to UMTS (down-link
deliver).
<Delivery
Description
order>
Integer A numeric parameter that indicates whether the UMTS
Type bearer shall provide in-sequence SDU delivery or not.
0 No
1 Yes
<Maximum
Description
SDU size>
Integer Indicates the maximum allowed SDU size in octets
Note: With reference to 3GPP TS 24.008 subclause
10.5.6.5, not all the integer values are valid. The
general rule is then that the integer will be rounded
down to the nearest valid value.
It is therefore possible to read out a value other than
that given.

4/159 35-5/FCP 101 4577 Uen Rev B
<SDU
error Description
ratio>
String Indicates the target value for the fraction of SDUs lost or
detected as erroneous. SDU error ratio is defined only for
conforming traffic. The value is specified as 'mEe'. As an
example a target SDU error ratio of 510-3 would be
specified as '5E3' (e.g. AT+CGEQMIN=…,”5E3”,…).
<Residual
bit error Description
ratio>
String Indicates the target value for the undetected bit error
ratio in the delivered SDUs. If no error detection is
requested, Residual bit error ratio indicates the bit error
ratio in the delivered SDUs. The value is specified as
'mEe'. As an example a target residual bit error ratio of
5•10-3 would be specified as '5E3' (e.g.
AT+CGEQMIN=…,”5E3”,…)
<Delivery of
Description
erroneous SDUs>
Integer Type A numeric parameter that indicates whether
SDUs detected as erroneous shall be delivered or
not.
0 No
1 Yes
2 No detection or erroneous SDUs (Default)
<Transfer
Description
delay>
Integer The targeted time between request to transfer an SDU
at one SAP to its delivery at the other SAP, in
milliseconds.

4/159 35-5/FCP 101 4577 Uen Rev B
<Traffic
handling Description
priority>
Integer Specifies the relative importance for handling of all
SDUs belonging to the UMTS bearer compared to
the SDUs of other bearers.
String See +CGDCONT command
If a value is omitted for a particular class then the value is considered to be
unspecified.
8.11 AT+CGEQNEG 3G Quality of Service Profile (Negotiated)
Description Command Possible Response(s)

Retrieves +CGEQNEG +CGEQNEG: <cid>,
the =[<cid>[,<cid>[,…]]] <Traffic class>
negotiated ,<Maximum bitrate UL>,
QoS <Maximum bitrate DL>
profiles ,<Guaranteed bitrate
UL>, <Guaranteed
bitrate DL> ,<Delivery
order> ,<Maximum SDU
size> ,<SDU error ratio>
,<Residual bit error
ratio> ,<Delivery of
erroneous SDUs>
,<Transfer delay>
,<Traffic handling
priority>
[<CR><LF>
+CGEQNEG: <cid>,
<Traffic class>
,<Maximum bitrate UL>,
<Maximum bitrate DL>
,<Guaranteed bitrate
UL>, <Guaranteed
bitrate DL> ,<Delivery
order> ,<Maximum SDU
size> ,<SDU error ratio>
,<Residual bit error
4/159 35-5/FCP 101 4577 Uen Rev B
ratio> ,<Delivery of
erroneous SDUs>
,<Transfer delay>
,<Traffic handling
priority>
[…]]
Test if the +CGEQNEG=? +CGEQNEG: (list of
command <cid>s associated with
is active contexts)
supported
Description
This command allows the TE to retrieve the negotiated QoS profiles
returned in the Activate PDP Context Accept message.
The execution command returns the negotiated QoS profile for the
specified context identifiers, <cid>s. The QoS profile consists of a
number of parameters, each of which may have a separate value.
The test command returns a list of <cid>s associated with active
contexts.
Defined values
<cid>: a numeric parameter which specifies a particular PDP
context definition (see +CGDCONT command).
The following parameters are defined in 3GPP TS 23.107 [46] -
<Traffic
Description
class>
optimised.
0 Conversational
1 Streaming
2 Interactive
3 Background
Other values are reserved.
<Maximum
Description
bitrate UL>
Integer A numeric parameter that indicates the maximum
Type number of kbits/s delivered to UMTS (up-link traffic)
at a SAP. As an example a bitrate of 32kbit/s would be
specified as '32' (e.g. +CGEQNEG:…,32, …).

4/159 35-5/FCP 101 4577 Uen Rev B
<Maximum
Description
bitrate DL>
Integer A numeric parameter that indicates the maximum
Type number of kbits/s delivered by UMTS (down-link
traffic) at a SAP As an example a bitrate of 32kbit/s
would be specified as '32' (e.g. +CGEQNEG:…,32, …).
<Guaranteed
Description
bitrate UL>
Integer Anumeric parameter that indicates the guaranteed
Type number of kbits/s delivered to UMTS (up-link traffic)
at a SAP (provided that there is data to deliver). As an
example a bitrate of 32kbit/s would be specified as
'32' (e.g. +CGEQNEG:…,32, …).
<Guaranteed
Description
bitrate DL>
Integer Anumeric parameter that indicates the guaranteed
Type number of kbits/s delivered by UMTS (down-link
deliver). As an example a bitrate of 32kbit/s would
be specified as '32' (e.g. +CGEQNEG:…,32, …).
<Delivery
Description
order>
0 No
1 Yes
<Maximum SDU
Description
size>
Integer Type A numeric parameter that indicates the maximum
0...1502 allowed SDU size in octets.

4/159 35-5/FCP 101 4577 Uen Rev B
<SDU
error Description
ratio>
String A string parameter that indicates the target value for the
Type fraction of SDUs lost or detected as erroneous. SDU error
ratio is defined only for conforming traffic. The value is
specified as 'mEe'. As an example a target SDU error ratio
of 5•10-3 would be specified as '5E3' (e.g.
+CGEQNEG:…,”5E3”,…).
<Residual
bit error Description
ratio>
String A string parameter that indicates the target value for the
Type undetected bit error ratio in the delivered SDUs. If no
error detection is requested, Residual bit error ratio
indicates the bit error ratio in the delivered SDUs. The
value is specified as 'mEe'. As an example a target
residual bit error ratio of 5•10-3 would be specified as
'5E3' (e.g. +CGEQNEG:…,”5E3”,…).
<Delivery of
Description
erroneous SDUs>
Integer Type A numeric parameter that indicates whether
SDUs detected as erroneous shall be delivered or
not.
0 No
1 Yes
2 No detection of erroneous SDUs
<Transfer
Description
delay>
Integer A numeric parameter (0,1,2,…) that indicates the
Type targeted time between request to transfer an SDU at
one SAP to its delivery at the other SAP, in milliseconds.

4/159 35-5/FCP 101 4577 Uen Rev B
<Traffic handling
Description
priority>
Integer Type a numeric parameter (1,2,3,…) that specifies the
relative importance for handling of all
SDUs belonging to the UMTS bearer compared to
the SDUs of other bearers.
If a value is omitted for a particular class then the value is
considered to be unspecified.
8.12 AT+CGEQREQ 3G Quality of Service Profile (Requested)

Specify a +CGEQREQ=[<cid> OK
UMTS [,<Traffic class> ERROR
Quality of [,<Maximum bitrate UL>
Service [,<Maximum bitrate DL>
Profile [,<Guaranteed bitrate UL>
[,<Guaranteed bitrate DL>
[,<Delivery order>
[,<Maximum SDU size>
[,<SDU error ratio>
[,<Residual bit error ratio>
[,<Delivery of erroneous
SDUs> [,<Transfer delay>
[,<Traffic handling
priority> ]]]]]]]]]]]]]
Read the +CGEQREQ? +CGEQREQ: <cid>,
current <Traffic class>
setting ,<Maximum bitrate
UL> ,<Maximum
bitrate DL>
UL> ,<Guaranteed
bitrate DL>
,<Delivery order>
,<Maximum SDU
size> ,<SDU error
ratio> ,<Residual bit
error ratio>
,<Delivery of
erroneous SDUs>
,<Transfer delay>
,<Traffic handling

4/159 35-5/FCP 101 4577 Uen Rev B
priority>
[<CR><LF>
+CGEQREQ: <cid>,
<Traffic class>
,<Maximum bitrate
UL> ,<Maximum
bitrate DL>
UL> ,<Guaranteed
bitrate DL>
,<Delivery order>
,<Maximum SDU
size> ,<SDU error
ratio> ,<Residual bit
error ratio>
,<Delivery of
erroneous SDUs>
,<Transfer delay>
,<Traffic handling
priority>
[…]]
Test if the +CGEQREQ=? +CGEQREQ:
command <PDP_type>, (list of
is supported <Traffic
supported class>s) ,(list of
supported
<Maximum bitrate
UL>s), (list of
supported
<Maximum bitrate
DL>s), (list of
supported
<Guaranteed bitrate
UL>s), (list of
supported
<Guaranteed bitrate
DL>s),(list of
supported <Delivery
order>s) ,(list of
supported
<Maximum SDU
size>s) ,(list of
supported <SDU

4/159 35-5/FCP 101 4577 Uen Rev B
error ratio>s) ,(list of
supported <Residual
bit error ratio>s)
,(list of supported
<Delivery of
erroneous SDUs>s)
,(list of supported
<Transfer delay>s)
,(list of supported
<Traffic handling
priority>s)
[<CR><LF>
+CGEQREQ:
<PDP_type>, (list of
supported <Traffic
class>s) ,(list of
supported
<Maximum bitrate
UL>s), (list of
supported
<Maximum bitrate
DL>s), (list of
supported
<Guaranteed bitrate
UL>s), (list of
supported
<Guaranteed bitrate
DL>s),(list of
supported <Delivery
order>s) ,(list of
supported
<Maximum SDU
size>s) ,(list of
supported <SDU
error ratio>s) ,(list of
supported <Residual
bit error ratio>s)
,(list of supported
<Delivery of
erroneous SDUs>s)
,(list of supported
<Transfer delay>s)
,(list of supported
<Traffic handling
4/159 35-5/FCP 101 4577 Uen Rev B
priority>s)
[…]]
Description
This command allows the TE to specify a UMTS Quality of Service
Profile that is used when the MT sends an Activate PDP Context
Request message to the network.
The set command specifies a profile for the context identified by the
(local) context identification parameter, <cid>. The specified profile
will be stored in the MT and sent to the network only at activation
or MS-initiated modification of the related context. Since this is the
same parameter that is used in the +CGDCONT command, the
+CGEQREQ command is effectively an extension to this command.
The QoS profile consists of a number of parameters, each of which
may be set to a separate value.
A special form of the set command, +CGEQREQ= <cid> causes the
requested profile for context number <cid> to reset to the default
QoS values..
context.
The test command returns values supported as a compound value. If
the MT supports several PDP types, the parameter value ranges for
each PDP type are returned on a separate line.
The QoS profiles for PDP contexts are part of the configuration
profile. The default setting for every PDP context is an empty QoS
profile. Executing AT&F restores the QoS profile for all PDP
contexts to the empty profile. To commit the QoS profile for all
PDP contexts to non-volatile memory, AT&W must be executed.
Defined values
<cid>: a numeric parameter which specifies a particular PDP context
definition (see +CGDCONT command).
<Traffic
Description
class>
optimised.
0 Conversational
1 Streaming
2 Interactive
3 Background

4/159 35-5/FCP 101 4577 Uen Rev B
If the Traffic class is specified as conversational or streaming, then
the Guaranteed and Maximum bitrate parameters should also be
provided. Other values are reserved.
<Maximum bitrate UL>:
A numeric parameter that indicates the maximum number of kbits/s
delivered to UMTS (up-link traffic) at a SAP.
As an example, a bitrate of 32kbit/s would be specified as '32'
(e.g. AT+CGEQREQ=...,32,...).
This parameter should be provided if the Traffic class is specified as
conversational or streaming.
<Maximum bitrate DL>:
A numeric parameter that indicates the maximum number of kbits/s
delivered by UMTS (down-link traffic) at a SAP.
As an example a bitrate of 32kbit/s would be specified as '32'
(e.g. AT+CGEQREQ=...,32,...).
If the parameter is set to '0' the subscribed value will be requested.
<Guaranteed bitrate UL>:
A numeric parameter that indicates the guaranteed number of kbits/s
delivered to UMTS (up-link traffic) at a SAP (provided that there is data to
deliver).
(e.g. AT+CGEQREQ=...,32,...).
<Guaranteed bitrate DL>:
A numeric parameter that indicates the guaranteed number of kbits/s
delivered by UMTS (down-link traffic) at a SAP (provided that there is data
to deliver).
(e.g. AT+CGEQREQ=...,32,...).
<Delivery
Description
order>
Integer A numeric parameter that indicates whether the GPRS
0 No
1 Yes

4/159 35-5/FCP 101 4577 Uen Rev B
<Maximum SDU size>:
A numeric parameter (1, 2, 3, …) that indicates the maximum allowed SDU
size in octets.
<SDU error ratio>:
A string parameter that indicates the target value for the fraction of SDUs
lost or detected as erroneous. SDU error ratio is defined only for
conforming traffic. The value is specified as 'mEe'.
As an example a target SDU error ratio of 5•10-3 would be specified as
'5E3'
(e.g. AT+CGEQREQ=...,"5E3",...). '0E0' means subscribed value.
<Residual bit error ratio>:
A string parameter that indicates the target value for the undetected bit error
ratio in the delivered SDUs. If no error detection is requested, Residual bit
error ratio indicates the bit error ratio in the delivered SDUs. The value is
specified as 'mEe'.
As an example a target residual bit error ratio of 5•10-3 would be specified
as '5E3'
(e.g. AT+CGEQREQ=...,"5E3",...). '0E0' means subscribed value.
<Delivery of erroneous SDUs>:
A numeric parameter that indicates whether SDUs detected as erroneous
shall be delivered or not.
0 no
1 yes
2 no detect
3 subscribed value
<Transfer delay>:
A numeric parameter (0, 1, 2, …) that indicates the targeted time between
request to transfer an SDU at one SAP to its delivery at the other SAP, in
milliseconds. If the parameter is set to '0' the subscribed value will be
requested.
<Traffic handling priority>:
A numeric parameter (1, 2, 3, …) that specifies the relative importance for
handling of all SDUs belonging to the UMTS bearer compared to the SDUs
of other bearers. If the parameter is set to '0' the subscribed value will be
requested.
<PDP_type>: (see +CGDCONT command).
If a value is omitted for a particular class then the value is considered to be
unspecified.
8.13 AT+CGQMIN Quality of Service Profile (Minimum

Acceptable)

Set AT+CGQMIN=[<cid> +CME ERROR: <err>
minimum [,<precedence> OK
acceptable [,<delay>

4/159 35-5/FCP 101 4577 Uen Rev B
profile [,<reliability> ERROR
[,<peak>
[,<mean>]]]]]]
Show the AT+CGQMIN? +CGQMIN: <cid>,
current <precedence>, <delay>,
setting <reliability>, <peak>,
<mean>[<CR><LF>+CG
QMIN: <cid>,
<precedence>, <delay>,
<reliability>, <peak>,
<mean>[…]]
OK
ERROR
Test if the AT+CGQMIN=? +CGQMIN: <PDP_type>,
command (list of supported
is <precedence>s), (list of
supported supported <delay>s), (list
of supported
<reliability>s) , (list of
supported <peak>s), (list
of supported
<mean>s)[<CR><LF>+C
GQMIN: <PDP_type>, (list
of supported
<precedence>s), (list of
supported <delay>s), (list
of supported
<reliability>s) , (list of
supported <peak>s), (list
of supported
<mean>s)[…]]
OK
ERROR
Description:
Note that this command is present for compatibility only. This
command is a dummy only and the +CGEQMIN command
must be used instead.
8.14 AT+CGQREQ Quality of Service Profile (Requested)

4/159 35-5/FCP 101 4577 Uen Rev B
Set AT+CGQREQ=[<cid> +CME ERROR: <err>
quality of [,<precedence> OK
service [,<delay>
ERROR
profile [,<reliability>
[,<peak>
[,<mean>]]]]]]
Show the AT+CGQREQ? +CGQREQ: <cid>,
current <precedence>, <delay>,
setting <reliability>, <peak>,
<mean>[<CR><LF>+CGQREQ:
<cid>, <precedence>,
<delay>, <reliability>,
<peak>, <mean>[…]]
OK
ERROR
Test if the AT+CGQREQ=? +CGQREQ: <PDP_type>,
command (list of supported
is <precedence>s),
supported (list of supported <delay>s),
(list of supported
<reliability>s),
(list of supported <peak>s),
(list of supported <mean>s)
[<CR><LF>+CGQREQ:
<PDP_type>, (list of supported
<precedence>s), (list of
supported <delay>s),
(list of supported
<reliability>s),
(list of supported <peak>s),
(list of supported
<mean>s)[…]]
OK
ERROR
Description:
Note that this command is present for compatibility only. This
command is a dummy only and the +CGEQREQ command
must be used.
8.15 AT+CGREG GPRS Network Registration Status

4/159 35-5/FCP 101 4577 Uen Rev B
Set command AT+CGREG=[<n>] +CME ERROR: <err>
OK
ERROR
Show the AT+CGREG? +CGREG:
current <n>,<stat>[,<lac>,<ci>]
setting +CME ERROR: <err>
OK
ERROR
Test if the AT+CGREG=? +CGREG: (list of
command is supported <n>s)
supported. OK
ERROR
Unsolicited +CGREG: <stat>

response if +CGREG:
reporting is <stat>[,<lac>,<ci>]
enabled
Description:
Controls the presentation of an unsolicited result code +CGREG:
<stat> when <n>=1 and there is a change in the GPRS/packet
domain network registration status of the MS, or code +CGREG:
<stat>[,<lac>,<ci>] when <n>=2 and there is a change of the
network cell.
The read command returns the status of result code presentation and
an integer <stat> which shows whether the network has currently
indicated the registration of the ME. Location information elements
<lac> and <ci> are returned only when <n>=2 and ME is registered
in the network.
Note: If the GPRS/Packet Domain MS also supports circuit mode
services, the +CGREG command and +CGREG: result code apply
to the registration status and location information for circuit
switched services.
Defined values:
<n> Description
0 Disable network registration unsolicited result code. Default
value.
1 Enable network registration unsolicited result code
2 Enable network registration and location information
unsolicited result code

4/159 35-5/FCP 101 4577 Uen Rev B
<stat> Description
0 Not registered, MS is not searching for a new operator to
register with
1 Registered, home network
2 Not registered, but MS is searching for a new operator to
register with
3 Registration denied
4 Unknown
5 Registered, roaming
<lac> Description
String Two byte location area code in hexadecimal format
type
<ci> Description
String Four byte cell ID in hexadecimal format. For GSM cells,
type the first two bytes will be zeros.
Example:
AT+CGREG=1
OK
AT+CGREG?
+CGREG: 0,2
OK
AT+CGATT=1
OK
+CGREG=1
8.15.1 +CGREG GPRS Network Unsolicited Response

Description:
The ouput format is +CGREG: <stat> when <n>=1. The unsolicited
response is output when there is a change in the GPRS/packet
domain network registration status of the MS. This can happen
when the user manually attaches or detaches to/from the GPRS
network (using +CGATT or +CGACT). The module is considered
registered to the network when the device is attached and it is not
registered when the module is detached from the GPRS network.

4/159 35-5/FCP 101 4577 Uen Rev B
The code +CGREG: <stat>[,<lac>,<ci>] will be output when
<n>=2. This event happens when there is a change of the network
cell.
<stat> Description
0 Not registered, MS is not searching for a new operator to
register with
2 Not registered, but MS is searching for a new operator to
register with
4 Unknown
<lac> Description
String Two byte location area code in hexadecimal format
type
<ci> Description
String Four byte cell ID in hexadecimal format. For GSM cells,
type the first two bytes will be zeros.
8.16 AT+CGTFT Traffic Flow Template

Allows the AT+CGTFT=[<cid>, OK
TE to specify [<packet filter ERROR
a Packet identifier>,
Filter for a <evaluation
Traffic Flow precedence index>
Template - [,<source address and
TFT that is subnet mask>
used in the [,<protocol number
GGSN for (ipv4) / next header
routing of (ipv6)> [,<destination
down-link port range> [,<source
packets port range> [,<ipsec
onto security parameter
different index (spi)> [,<type of
QoS flows service (tos) (ipv4) and
4/159 35-5/FCP 101 4577 Uen Rev B
towards the mask / traffic class
TE (ipv6) and mask>
[,<flow label (ipv6)>
]]]]]]]]]
Query AT+CGTFT? +CGTFT: <cid>,
template <packet filter
parameters identifier>,
<evaluation
precedence index>,
<source address and
subnet mask>,
<protocol number
(ipv4) / next header
(ipv6)>, <destination
port range>, <source
port range>, <ipsec
security parameter
index (spi)>, <type of
service (tos) (ipv4) and
mask / traffic class
(ipv6) and mask>,
<flow label (ipv6)>
[<CR><LF>+CGTFT:
<cid>, <packet filter
identifier>,
<evaluation
precedence index>,
<source address and
subnet mask>,
<protocol number
(ipv4) / next header
(ipv6)>, <destination
port range>, <source
port range>, <ipsec
security parameter
index (spi)>, <type of
(ipv6) and mask>,
<flow label (ipv6)>
[…]]
Test if the AT+CGTFT=? +CGTFT: <PDP_type>,
command is (list of supported

4/159 35-5/FCP 101 4577 Uen Rev B
supported <packet filter
identifier>s), (list of
supported <evaluation
precedence index>s),
(list of supported
<source address and
subnet mask>s), (list of
supported <protocol
number (ipv4) / next
header (ipv6)>s), (list
of supported
<destination port
range>s), (list of
supported <source
port range>s), (list of
supported <ipsec
security parameter
index (spi)>s), (list of
supported <type of
(ipv6) and mask>s),
(list of supported <flow
label (ipv6)>s)
[<CR><LF>+CGTFT:
<PDP_type>, (list of
supported <packet
filter identifier>s), (list
of supported
<evaluation
precedence index>s),
(list of supported
<source address and
subnet mask>s), (list of
supported <protocol
number (ipv4) / next
header (ipv6)>s), (list
of supported
<destination port
range>s), (list of
supported <source
port range>s), (list of
supported <ipsec
security parameter

4/159 35-5/FCP 101 4577 Uen Rev B
index (spi)>s), (list of
supported <type of
(ipv6) and mask>s),
(list of supported <flow
label (ipv6)>s)
[…]]
Description:
This command allows the TE to specify a Packet Filter - PF for a
Traffic Flow Template - TFT that is used in the GGSN for routing
of down-link packets onto different QoS flows towards the TE. The
concept is further described in the 3GPP TS 23.060. A TFT
consists of from one and up to eight Packet Filters, each identified
by a unique <packet filter identifier>. A Packet Filter also has an
<evaluation precedence index> that is unique within all TFTs
associated with all PDP contexts that are associated with the same
PDP address.
The set command specifies a Packet Filter that is to be added to the
TFT stored in the MT and used for the context identified by the
(local) context identification parameter, <cid>. The specified TFT
will be stored in the GGSN only at activation or MS-initiated
modification of the related context. Since this is the same parameter
that is used in the +CGDCONT and +CGDSCONT commands, the
+CGTFT command is effectively an extension to these commands.
The Packet Filters consist of a number of parameters, each of
which may be set to a separate value.
A special form of the set command, +CGTFT= <cid> causes all of
the Packet Filters in the TFT for context number <cid> to become
undefined. At any time there may exist only one PDP context with
no associated TFT amongst all PDP contexts associated to one PDP
address. At an attempt to delete a TFT, which would violate this
rule, an ERROR or +CME ERROR response is returned. Extended
error responses are enabled by the +CMEE command.
The read command returns the current settings for all Packet Filters
for each defined context. In case no filter is defined the read
command will return "OK" only.
The test command returns values supported as a compound value.
If the MT supports several PDP types, the parameter value ranges
for each PDP type are returned on a separate line. TFTs shall be
used for PDP-type IP and PPP only. For PDP-type PPP a TFT is
applicable only when IP traffic is carried over PPP. If PPP carries
header-compressed IP packets, then a TFT cannot be used.
Defined values:
<cid>: a numeric parameter which specifies a particular PDP
context definition (see the +CGDCONT and +CGDSCONT
commands).
4/159 35-5/FCP 101 4577 Uen Rev B
<packet filter identifier>: Numeric parameter, value range from 1
to 8.
<source address and subnet mask>: Consists of dot-separated
numeric (0-255) parameters on the form
'a1.a2.a3.a4.m1.m2.m3.m4', for IPv4 and
'a1.a2.a3.a4.a5.a6.a7.a8.a9.a10.a11.a12.a13.a14.a15.a16.
m1.m2.m3.m4.m5.m6.m7.m8.m9.m10.m11.m12.m13.m14.m15.m1
6', for IPv6.
<protocol number (ipv4) / next header (ipv6)>: Numeric parameter,
value range from 0 to 255.
<destination port range>: String consisting of dot-separated
numeric (0-65535) parameters on the form 'f.t'.
<source port range>:String consisting of dot-separated numeric (0-
65535) parameters on the form 'f.t'.
<ipsec security parameter index (spi)>: Hexadecimal parameter,
value range from 00000000 to FFFFFFFF.
<type of service (tos) (ipv4) and mask / traffic class (ipv6) and
mask>:
Dot-separated numeric (0-255) parameters on the form 't.m'.
<flow label (ipv6)>: Hexadecimal parameter, value range from
00000 to FFFFF. Valid for IPv6 only.
<evaluation precedence index>: Numeric parameter, value range
from 0 to 255.
Some of the above listed attributes may coexist in a Packet Filter
while others mutually exclude each other, the possible
combinations are shown in 3GPP TS 23.060.
8.17 AT*ENAP USB Ethernet Interface Control
Description Syntax Possible responses

Control the AT*ENAP=<state>,<i OK
USB ndex> ERROR
Ethernet
+CME ERROR: <err>
connection
state
Read the AT*ENAP? *ENAP: <status>
current
setting
Test AT*ENAP=? *ENAP: (range of valid
command to <state>s),(range of
show if the valid <index>es)
command is OK
supported
+CME ERROR: <err>
Description:
4/159 35-5/FCP 101 4577 Uen Rev B
This command is used to enable or disable the USB Ethernet
Emulation communication interface, and to associate a particular
PDP Context with the interface. A PDP context is referenced which
must have been previously defined via the *EIAC command or the
+CGDCONT command. Also, an internet account must have been
previously created and defined via the *EIAC command.
A response of OK does not mean that a connection has been
established or disconnected. This simply means that the command
has been processed without any errors. To check the status of the
connection, use the check connection status command.
(AT*ENAP?)
When executing the command to create a USB Ethernet connection,

the response will be ERROR if a connection already exists.
When executing the command to disconnect a USB Ethernet

connection, the response will be ERROR if no connection exists.
Defined values:
<state> Description
0 Disconnect
1 Connect
<index> Description
Integer Equivalent to <index> in *EIAC command and also
type <cid> in +CGDCONT
1-99
<status> Description
0 Not connected
1 Connected
2 Connection setup in progress
8.18 AT*EUPLINK Send Uplink Data
Possible
Description Syntax
responses
Do Some ATxxx=<parm1>[,<parm2>[,<parm3>]] List of xxx:
Function *xxx:
<parm1>,
<parm2>,
4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Syntax
responses
<parm3>
[:]
+CME
ERROR:
<err>
current
setting
Test ATxxx=? Range of
command parameters:
to show if *xxx: (0-
the 255)
command OK
is
+CME
supported
ERROR:
<err>
Description:
This command is used to...
Here is some additional information...
Defined values:
<parm1> Description
0 XXX Default value
1....25 XXX
5
<parm2> Description
Hex string xxx
<parm3> Description
0 xxx
1 xxx
2 xxx
3 xxx

4/159 35-5/FCP 101 4577 Uen Rev B
9 Internet Accounts
9.1 AT*EIAAUR - Internet Account Configuration, Read

Authentication Parameters

Read the AT*EIAAUR=[<inde List of existing IA(s)
current x>,<bearer_type>] authentication params
authentication *EIAAUR: <index>,
parameter <bearer_type>,
settings <userid>,<password>,
,<auth_prot>,
<ask4pwd>
[:]
current
setting
Test AT*EIAAUR=? Range of parameters:
command to *EIAAUR: (0-255),(0-4)
show if the
command is
supported
Description:
This command reads the authentication parameters of one (or all)
existing Internet Account(s).
Defined values:
<index> Description
0 Read Authentication parameters of ALL existing Internet
Accounts. Default value
1....255 Write parameters of <bearer_type> Internet Account with
index as specified. For range and more details on
<index>, see under command AT*EIAC
Note: When <bearer_type>=0 it is necessary that <index>=0 and vice
versa.
<bearer_type> Description
0 All bearers. Default value
1....4 Specific bearer. For more information on bearer
types see <bearer_type> pararemer definitions
under command AT*EIAC

4/159 35-5/FCP 101 4577 Uen Rev B
<password> Description
String type Password for access to the IP network. Max 30 8-bit
characters.
<auth_prot> Description
Bit 0 None
Bit 1 PAP
Bit 2 CHAP
Bit 3 MS-CHAP
Bit 4 MS-
CHAPv2
The authentication method is organised as 5 bit long field in which each bit
indicates a specific authentication method. The bitmask set, represents the
Authentication methods supported by the Internet Account in question
(<index>, <bearer>). Default value = 00111
Note: By None it is meant that it doesn't matter what authentication method
is supported by the peer
9.2 AT*EIAAUW - Internet Account Configuration, Write

Authentication Parameters

Define AT*EIAAUW=<index>,<bea
authentication rer_type>[,[<userid>][,[<pa
parameters ssword>][,[<auth_prot>][,[
<ask4pwd>]]]]]
current
setting
Test AT*EIAAUW=? Range of
command to Authentication
show if the parameters:
command is *EIAAUW: (1-
supported 255),(1-
4),(""),(""),
(00001-
11111),(0-1)
Description:
This command specifies the authentication parameters of one (or all)
existing Internet Account(s).
4/159 35-5/FCP 101 4577 Uen Rev B
Authentication parameters are used under any PPP negotiation as well as
under PS network connection establishment (context activation).
Note!
If the user do not specify both the parameters <Index> and
<bearer_type>, the command results in an error response.
Defined values:
<index> Description
1....255 Write of <bearer_type> Internet Account with index as
specified.
For range and more details on <index>, see under
command AT*EIAC
1 PS bearer i.e. PS connection over UMTS/GPRS
network.
2 CS bearer, NTCSD connection over UMTS/GSM
network
<user_id> Description
String type Password for access to the IP network. Max 30 8-bit
characters.
<auth_prot> Description
Bit 0 None
Bit 1 PAP
Bit 2 CHAP
Bit 3 MS-CHAP
Bit 4 MS-CHAPv2
The authentication method is organised as 5 bit long field in which each bit
indicates a specific authentication method. The bitmask set, represents the
Authentication methods supported by the Internet Account in question
(<index>, <bearer>). Default value = 00111As an example, 00111, i.e.
bit2,bit1 and bit0 is set to 1. Indicating the support for CHAP, PAP and
None.
By None is meant that it doesn't matter what authentication method is
supported by the peer.
The value 0 (all the bits set to 0) is not allowed. At least one bit has to be
set to 1
Note: Leading 0's does not need to be stated. E.g. 111 is the same as 00111.

4/159 35-5/FCP 101 4577 Uen Rev B
9.3 AT*EIAC - Internet Account, Create

Create AT*EIAC=<bearer_type> *EIAC:
account/define [,[<name>]] <index>,<name
general >
parameters
Read the AT*EIAC? List of created
current setting IA's:
*EIAC: <index>,
<bearer_type>,
<name>
:
Test command AT*EIAC=? Range of general
to show if the parameters:
command is *EIAC: (1-4),("")
supported
Description:
This command is used to define the general parameters of an Internet
Account (IA).
When a new account is defined it is assigned an index which is
subsequently returned as an informational text response together with
bearer type and name of account. When using the IA configuration
command, one can not force the value of the index.
The other Internet Account commands can not be used to create an account.
The other AT commands have to indicate the index value of an existing
Account in combination with what kind of bearer the parameters are set for.
The exception is the Internet Account configuration commands where it is
implicit what the bearer type is (e.g. AT*EIAPSW - write PS bearer
parameters), then only index value is necessary.
Note!
When a PDP Context is defined via an AT command, an Internet Account
is automatically created with Packet Domain Service as the bearer and it
get's an index value with a one-to-one mapping to the specified <cid>
parameter value of the GPRS command. If the IA with that mapping to CId
value is already existing, the specific parameters of that IA is overwritten
(also when IA parameters are originally specified for another bearer than
PS). In the same way a PDP Context with the default values set is defined
when an IA is created with Packet Domain Service as the bearer, using the
AT*EIAC command. The <cid> of the PDP context will have a one-to-one
mapping with the PS bearer IA's index.
Note! If user does not specify any bearer type, the command results in an
error response.
Note! If user does not specify a name of the account, an autogenerated
name will be added to the account.
Note! The temporary or locked type of accounts are reserved for internal

4/159 35-5/FCP 101 4577 Uen Rev B
applications use and not listed in the read command, nor possible to create
using this command.
Defined values:
1 PS Bearer, i.e. PS connection over UMTS/GPRS
network.
2 CS Bearer, i.e. NTCSD connection over UMTS/GSM
network
<name> Description
String type Each Internet Account has a ”friendly” name.
Used mostly by MMI application of phone. Max 20
characters
<index> Description
1....255 Index of an account within the specific bearer type.
There might be several accounts that has the same
index value, but only one account within a given bearer
type. So it is the combination of bearer type and index
that forms the unique reference to one specific Internet
Account.
9.4 AT*EIACSR - Internet Account Configuration, Read CSD

Bearer Capabilities

Read CSD AT*EIACSR=[<index List of IA's with
parameters of >] CSD parameters:
Internet Account *EIACS: <index>,
<dialout_nbr>,
<dial_type>,
<data_rate>,
<data_compr>
[:]
Read the current Not applicable
setting
Test command to AT*EIACSR=? Range of
command is *EIACSR: (0-255)

4/159 35-5/FCP 101 4577 Uen Rev B
supported
Description:
This command is used to read the CS bearer parameters of one (or
all) CS bearer Internet Account(s).
Defined values:
<index> Description
0 Read CSD bearer parameters of ALL CSD bearer Internet
Accounts.
If no CS bearer IA's exists, only OK is submitted.
Default value
1....255 Read CSD bearer parameters of the specified Internet
Account.
For range and more details on <index>, see under *EIAC
command.
<dialout_nbr> Description
String type ISP phone number for internal dial out application
to call
<dial_type> Description
0 Analogue modem. Default value
1 ISDN modem.
<data_rate> Description
1 9600 kbps, GSM: 1 time slot * 9600
3 19200 kbps, GSM: 2 time slots * 9600
4 28800 kbps, GSM: 2 time slots * 14400 (or 3 TS*9600)
Default value
Not supported

4/159 35-5/FCP 101 4577 Uen Rev B
<data_compr> Description
0 V42bis data compression off.
1 V42bis data compression on. Default value
Using default V42 bis parameters for dictionary size.
Negotiates compression in both directions, Rx and
Tx.
9.5 AT*EIACSW - Internet Account Configuration, Write CSD

Bearer Capabilities

Define CSD AT*EIACSW=<index>[,[<dialo ...
parameters ut_nbr>][,[<dial_type>][,[<dat
of Internet a_rate>][,[<data_compr>]]]]]
Account
current
setting
Test AT*EIACSW=? Range of CS
command parameters:
to show if *EIACSW: (1-
the 255),(""),(0,1),(
command 1-7),(0-1)
is
supported
Description:
This command is used to define the CS bearer parameters of one (or all) CS
bearer Internet Account(s).
Note!
CS bearer IA's can only be used for internal applications only, to dial out to
an ISP providing IP network access (e.g. for WAP over CS). Normal CS
"modem style" dial-up networking and plain CS modem connections are
done by TE issuing the "legacy" AT commands as specified by . The
parameters for such calls (RLP parameters, V42bis parameters, HSCSD
parameters, etc.) are only stored in volatile memory, if not stored by using
&W command.
Note! If the user do not specify the parameters <Index>, the command
results in an error response.
Defined values:
<index> Description
1....2 Write CSD bearer parameters of the specified Internet
55 Account.

4/159 35-5/FCP 101 4577 Uen Rev B
<index> Description
For range and more details on <index>, see under *EIAC
command.
<dialout_nbr> Description
String type ISP phone number for internal dial out application to
call
<dial_type> Description
0 Analogue modem. Default value
1 ISDN modem.
<data_rate> Description
4 28800 kbps, GSM: 2 time slots * 14400 (or 3 TS*9600)
Default value
5 38400 kbps, GSM: 4 time slots * 9600 Not
supported
0 V42bis data compression off.
1 V42bis data compression on. Default value
Tx.
9.6 AT*EIAD - Internet Account Configuration, Delete
Possible
Description Syntax
responses
Delete AT*EIAD=<index>,<bearer_type>

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Syntax
responses
account
current
setting
Test AT*EIAD=? Range of
command parameters:
to show if *EIAD: (0-
the 255),(0-4)
command is
supported
Description:
Action command used to delete one specific (or all) existing Internet
Account(s). The other Internet Account commands (or GPRS AT
commands) can not be used to delete an account.
Note!
If the user do not specify both the parameters <Index> and <bearer_type>,
the command results in an error response.
Defined values:
<index> Description
0 Delete ALL existing <bearer_type> Internet Accounts
1....255 Delete Internet Account with index as specified, and
bearer type as specified.
For ranges and more details on <index> see under *EIAC
command.
Note: When <index>=0 it is necessary that <bearer_type>=0 and vice
versa.
0 All bearers
1....4 Specific bearer. see definition of <bearer_type>
under command *EIAC.
versa.
9.7 AT*EIALCPR - Internet Account Configuration, Read PPP

Parameters - LCP

Read LCP AT*EIALCPR=[<index>, List of IA's with their
parameters LCP parameters:
4/159 35-5/FCP 101 4577 Uen Rev B
of Internet <bearer_type>] *EIALCPR: <index>,
Account <bearer_type>,
<accm>,<mru>,<pfc
>,<acfc>,<keep_alive
>,
<allowed_ncp>
[:]
current
setting
Test AT*EIALCPR=? Range of LCP
command parameters:
to show if *EIALCPR: (0-255),(0-
the 4)
command
is
supported
Description:
This command is used to read the PPP LCP parameters of one
(or all) Internet Account(s).
Defined values:
<index> Description
0 Read LCP parameters of ALL <bearer_type> Internet
1....255 Read LCP parameters of <bearer_type> Internet Account
with index as specified.
For range and more details on index, see under
command *EIAC
versa.
0 All bearers
Used together with Index=0, reading all Internet
Accounts of all bearer types.
1....255 Specific bearers.
See definitions on <bearers> under command
*EIAC
versa.

4/159 35-5/FCP 101 4577 Uen Rev B
<accm> Description
0-FFFFFFFF Asynchronous Control Character Map value, as a
hexadecimal value.
Default is: 0
<mru> Description
1- Max Receive Unit.
150 The value specified is the recommended, but any MRU
0 between this specified value and 1500 will be accepted.
<pfc> Description
0 00
Protocol Field Compression negotiation might not be
suggested.
accepted.
1 01
Protocol Field Compression negotiation might be
suggested.
accepted.
2 10
suggested.
Protocol Field Compression negotiation might be accepted.
3 11
suggested.
Default value
<acfc> Description
0 00
Address Control Field Compression negotiation might not
be suggested.
be accepted.
1 01
Address Control Field Compression negotiation might be
suggested.
4/159 35-5/FCP 101 4577 Uen Rev B
<acfc> Description
be accepted.
2 10
be suggested.
accepted.
3 11
suggested.
accepted.
Default value
<keep_alive> Description
0 LCP keepalive messages should not be sent
Default value
1 LCP keepalive messages should be sent
<allowed_ncp> Description
0 Not supported
1 Network Control Protocol IPCP allowed. (bit0)
Default value
2 Network Control Protocol IPv6CP allowed (bit 1)
3 Both network control protocols allowed (bit 0, bit 1)
9.8 AT*EIALCPW - Internet Account Configuration, Write PPP

Parameters - LCP
Possible
Description Syntax
responses
Define LCP AT*EIALCPW=<index>,<bearer_ty ...
parameters pe>[,[<accm>][,[<mru>][,[<pfc>][
of Internet ,[<acfc>][,[<keep_alive>][,[<allow
Account ed_ncp>]]]]]]]
current

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Syntax
responses
setting
Test AT*EIALCPW=? Range of
command LCP
to show if parameters:
the *EIALCPW:
command (1-255),(1-
is 4),(0-
supported ffffffff),
(0-
1500),(0-
16),(0-16),
(0-1),(0-3)
Description:
Action command used to define the PPP LCP parameters of an Internet
Account (IA).
This Internet Account command can not be used to create an account.
Note! If the user do not specify both the parameters <Index> and
Defined values:
<index> Description
1....255 Write LCP parameters of <bearer_type> Internet Account
For range and more details on index, see under
command *EIAC
network.
network
3 Bluetooth Bearer, i.e. to connect with remote
Bluetooth LAN device
4 External Interface. Test value, for "dial-in" use
<accm> Description
0- Asynchronous Control Character Map value, as a
FFFFFFFF hexadecimal value.
Default is: 0

4/159 35-5/FCP 101 4577 Uen Rev B
<mru> Description
1- Max Receive Unit.
150 The value specified is the recommended, but any MRU
0 between this specified value and 1500 will be accepted.
<pfc> Description
0 00
suggested.
accepted.
1 01
suggested.
accepted.
2 10
suggested.
3 11
suggested.
Default value
<acfc> Description
0 00
be suggested.
be accepted.
1 01
suggested.
be accepted.
2 10
be suggested.

4/159 35-5/FCP 101 4577 Uen Rev B
<acfc> Description
accepted.
3 11
suggested.
accepted. Default value
<keep_alive> Description
0 LCP keepalive messages should not be sent
Default value
1 LCP keepalive messages should be sent
<allowed_ncp> Description
0 Not supported
1 Network Control Protocol IPCP allowed. (bit0)
Default value
2 Network Control Protocol IPv6CP allowed (bit 1)
3 Both network control protocols allowed (bit 0, bit 1)
9.9 AT*EIALSR - Internet Account Configuration, Read Link

Socket Parameters

Read link- AT*EIALSR=[<index>,<bearer List of existing
socket _type>] IA(s) link-
parameters socket params
*EIALSR:
<index>,
<bearer_type>,
<link_socket>
[:]
current
setting
Test AT*EIALSR=? Range of
command parameters:
to show if *EIALSR: (1-
4/159 35-5/FCP 101 4577 Uen Rev B
the 255),(1-4),(0-
command 1)
is
supported
Description:
Action command that reads the status of the link socket parameter
of one (or all) existing Internet Account(s).
Defined values:
<index> Description
0 Read status of the <link_ socket> parameter of ALL
<bearer_type> Internet Accounts.
1....255 Read general parameters of <bearer_type> Internet
Account with index as specified.
For range and more details on <index> see under
command *EIAC
network.
network
<link_socket> Description
0 Disable link socket. Default value
1 Enable link socket.
9.10 AT*EIALSW - Internet Account Configuration, Write Link

Socket Parameters
Possible
Description Syntax
responses
Enable/disable AT*EIALSW=<index>,<bearer_t ...
link socket. ype>[,[<link_socket>]]
current setting
Test AT*EIALSW=? Range of
command to parameters:

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Syntax
responses
show if the *EIALSW:
command is (1-255),(1-
supported 4),(0-1)
Description:
Action command that enables or disables the link socket.
Defined values:
<index> Description
1....255 Write general parameters of <bearer_type> Internet
command *EIAC
network.
network
<link_socket> Description
0 Disable link socket. Default value
1 Enable link socket.
9.11 AT*EIAIPCPR - Internet Account Configuration, Read PPP

Parameters - IPCP

Read IPCP AT*EIAIPCPR=[<index>,< List of IA's with PPP
parameters bearer_type>] IPCP parameters:
of Internet *EIAIPCPR:
Account <index>,
<bearer_type>,
<own_IP_addr>,
<prim_DNS_addr>,
<sec_dns_addr>,
<header_compr>

4/159 35-5/FCP 101 4577 Uen Rev B
[:]
current
setting
Test AT*EIAIPCPR=? Range of
command parameters:
to show if *EIAIPCPR: (0-
the 255),(0-4)
command
is
supported
Description:
This command reads out the IPCP parameters of one (or all)
Internet Accounts
Defined values:
<index> Description
0 Read IPCP parameters of ALL <bearer_type> Internet
1....255 Read IPCP parameters of <bearer_type> Internet Account
command *EIAC
versa.
0 All bearers. Default value
1....4
versa.
<ip_addr> Description
String of format IPv4 host address
"a.b.c.d" ME's own IP address. Default set to
0.0.0.0, which means request for dynamic
IP address to be allocated by network
upon connection.

4/159 35-5/FCP 101 4577 Uen Rev B
<prim_dns_addr> Description
String of format IPv4 primary DNS server address
"a.b.c.d" Default set to 0.0.0.0.0, which means
request for dynamic IP address to be
allocated by network upon connection.
<sec_dns_addr> Description
String of format IPv4 secondary DNS server address
"a.b.c.d" Default set to 0.0.0.0, which means
<header_compr> Description
0? Header compression off Default value Or
various protocol numbers for different types of
header compression?
1? Header compression on
9.12 AT*EIAIPCPW - Internet Account Configuration, Write PPP

Parameters - IPCP
Possible
Description Syntax
responses
Define AT*EIAIPCPW=<index>,<bearer_ty ...
IPCP pe>[,[<
parameters ip_addr>][,[<prim_dns_addr>][,[<
of Internet sec_dns_addr>][,[<header_compr
Account >]]]]]
current
setting
Test AT*EIAIPCPW=? Range of
command PPP IPCP
to show if parameters:
the *EIAIPCPW:
command (1-255)(1-
is 4),(""),(""),
supported (""),(0-1)
Description:

4/159 35-5/FCP 101 4577 Uen Rev B
Action command that specifies the PPP IPCP parameters of one (or all)
Internet Accounts.
The command is used to specify the IP addresses to be used, both under
PPP negotiations as well as under PS network connection establishment
(context activation). If "0" values are given necessary parameters are
requested to be genereated dynamically by the network one attaches to. If
specific values are set, it means requesting for static IP addresses to be
used.
Note!
Values stored here are not the ones used when doing PS dial-up connection
from external application (TE), since TE in this case has it's own IP
addresses to negotiate with the network (what TE sends is forwarded by
ME's PPP proxy to network).
Note! PPP parameters are relevant for all bearer types, but mostly for
internal calls.
Defined values:
<index> Description
1....255 Write IPCP parameters of <bearer_type> Internet Account
command *EIAC
versa.
network.
network
versa.
<ip_addr> Description
String of format IPv4 host address
"a.b.c.d" ME's own IP address. Default set to
0.0.0.0, which means request for dynamic
IP address to be allocated by network
upon connection.
String of format IPv4 primary DNS server address
"a.b.c.d" Default set to 0.0.0.0.0, which means
4/159 35-5/FCP 101 4577 Uen Rev B
<sec_dns_addr> Description
String of format IPv4 secondary DNS server address
"a.b.c.d" Default set to 0.0.0.0, which means
0? Header compression off Default value
Or various protocol numbers for different types of
header compression?
1? Header compression on
9.13 AT*EIAPSW - Internet Account Configuration, Write PS

Bearer Parameters
Possible
Description Syntax
responses
Write PSD AT*EIAPSW=<index>[,[<pref_serv ...
parameters >][,[<apn>]
of Internet [,[<traffic_class>][,[<header_comp
Account r>][,[<data_compr>]]]]]]
current
setting
Test AT*EIAPSW=? Range of PS
command parameters:
to show if *EIAPSW:
the (1-255),(0-
command 1),(""),(0-4),
is (0-1),(0-1)
supported
Description:
Action command used to specify PS specific parameters of one (or all) PS
bearer Internet Account.
This command is used to define the most relevant Packet Switched (PS)
data connection parameters. Note that all PS parameters of this command
4/159 35-5/FCP 101 4577 Uen Rev B
except <pref_serv> can also be configured using the normal R'99 GPRS
commands, see [7] (plus a lot more PS parameters).
Note! For PS bearers, the <index> maps to the <ContextId> used in the
GPRS commands.
Note! If the user do not specify the parameter <Index>, the command
results in an error response.
Defined values:
<index> Description
1....255 Write packet switched bearer parameters of Internet
command *EIAC
<pref_serv> Description
0 Preferred service - Packet Switched only
Means that an incoming call will be denied when
running PS connection(s), if there are not system
resources to serve both.
1 Preferred service - Automatic Default value
Means that an incoming call will put GPRS or UMTS
packet switched connection(s) on hold if there are not
system resources to serve both.
<apn> Description
String type APN
<traffic_class> Description
0 Conversational. Gives best effort
1 Streaming
For e.g. Voice over IP and other QoS (delay) critical
applications
2 Interactive
For e.g. Video/Audio over IP and other QoS
(delay+data volume) critical applications.
3 Background
For e.g. Chat and applications with some time
requirements and low-medium data volume.
4 Subscribed value Default value
For non-time critical applications
4/159 35-5/FCP 101 4577 Uen Rev B
0 Header compression off. Default value
1 Header compression on.
RFC 1144 (Van Jacobson) or RFC 2507 depending
on UMTS or GSM network.
0 Data compression off. Default value
1 Data compression on.
Tx.
9.14 AT*EIAPSR - Internet Account Configuration, Read PS

Bearer Parameters

Read PS AT*EIAPSR=[<index>] List of IA's with PS
parameters of parameters:
Internet *EIAPSR: <index>,
Account <pref_serv>,<apn>,
<traffic_class>,
<header_compr>,
<data_compr>
[:]
current setting
Test command AT*EIAPSR=? Range of PS
to show if the parameters:
command is *EIAPSR: (0-255)
supported
Description:
Action command that reads the wanted Packet Switched (PS)
parameters from one (or all) primary PS bearer Internet Account(s).
Defined values:
<index> Description
0 Read packet switched bearer parameters of ALL existing
PS bearer Internet Accounts.

4/159 35-5/FCP 101 4577 Uen Rev B
<index> Description
If no PS bearer IA's exists, only OK is submitted.
Default value
1....255 Read packet switched bearer parameters of Internet
Account with Index as specified.
command *EIAC
<pref_serv> Description
0 Preferred service - Packet Switched only
Means that an incoming call will be denied when
running PS connection(s), if there are not system
resources to serve both.
1 Preferred service - Automatic Default value
Means that an incoming call will put GPRS or UMTS
packet switched connection(s) on hold if there are not
system resources to serve both.
<apn> Description
String type APN
<traffic_class> Description
0 Conversational. Gives best effort
1 Streaming
For e.g. Voice over IP and other QoS (delay) critical
applications
2 Interactive
For e.g. Video/Audio over IP and other QoS
(delay+data volume) critical applications.
3 Background
For e.g. Chat and applications with some time
requirements and low-medium data volume.
4 Subscribed value Default value
For non-time critical applications
0 Header compression off. Default value

4/159 35-5/FCP 101 4577 Uen Rev B
1 Header compression on.
RFC 1144 (Van Jacobson) or RFC 2507 depending
on UMTS or GSM network.
0 Data compression off. Default value
1 Data compression on.
Using default V42 bis parameters for dictionary
size. Negotiates compression in both directions, Rx
and Tx.
9.15 AT*EIAR - Internet Account Configuration, Read General

Parameters

Read the AT*EIAR=[<index>][,[<bea List of existing
current rer_type>]] IA(s)
authentication authentication
parameter params
settings *EIAR:
<index>,
<bearer_type>,
<name>
[:]
current
setting
Test AT*EIAR=? Range of
command to general
command is *EIAR: (0-
supported 255),(0-4)
Description:
This command reads out the general parameters of one or several Internet
Accounts.
versa.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
<index> Description
0 Read general parameters of ALL existing <bearer_type>
Internet Accounts. Default value
1....255 Read general parameters of <bearer_type> Internet
Account with given index.
0 All bearers Default value
1....4 Specific bearer. See definitions on <bearer_type>
under command *EIAC
<name> Description
String Each Internet Account has a ”friendly” name.
type Used mostly by MMI application of phone. Max 20
characters
9.16 AT*EIAW - Internet Account Configuration, Write General

Parameters
Possible
Description Syntax
responses
Define AT*EIAW=<index>,<bearer_type ...
authentication >[,[<name>]]
parameters
current
setting
Test AT*EIAW=? Range of
command to parameter
show if the s:
command is *EIAW: (1-
supported 255),(1-
4),("")
Description:
Action comamnd that specifies the general parameters of the Internet
Account.
4/159 35-5/FCP 101 4577 Uen Rev B
Defined values:
<index> Description
1....255 Write general parameters of <bearer_type> Internet
network.
network
<name> Description
String Each Internet Account has a ”friendly” name.
type Used mostly by MMI application of phone. Max 20
characters
9.17 AT*EIARUTR - Internet Account Configuration, Read

Routing Table Parameters

Read AT*EIARUTR= List of IA's with their Routing
Routing [<index>,<bear table parameters:
table er_type>] *EIARUTR: <index>,
parameters <bearer_type>,
of Internet <IP-version>,
Account <prefix>,
<destination_address>,<next
hop_address>
[:]
current
setting
Test AT*EIARUTR=? Range of Routing table
command parameters:
to show if *EIARUTR:
the (1-255),(0-4),(""),
command (0-32/0-128),(""),("")
is
supported

4/159 35-5/FCP 101 4577 Uen Rev B
Description:
This command reads the Routing table parameters of one Internet
Account.
Defined values:
<index> Description
0 Read Routing table parameters of ALL <bearer_type>
Internet Accounts. Default value
1....255 Read Routing table parameters of <bearer_type>
Internet Account with index as specified.
0 All bearers
1....4 Specific bearer. See bearer definitions under the
*EIAC command
versa.
<prefix> Description
(0....3 IPv4:
2) Value used to create a IPv4 subnet mask. Indicates how
many bits that should be set to 1 in the mask.
0 indicates default route.
A value of 24 will result in the following subnet mask:
255.255.255.0.
<IP_version> Description
String format "IP" Internet Protocol (IETF STD 5)
<destination_address> Description
String of format IPv4 address of the destination host.
"a.b.c.d" An entry with a value of 0.0.0.0 is
considered as a default route.
<nexthop_address> Description
String of format IPv4 address of the adjacent host or router
"a1.a2.a3.a4" to which the packet should be sent next.

4/159 35-5/FCP 101 4577 Uen Rev B
Not utilized for point-to-point
connections
9.18 AT*EIARUTW - Internet Account Configuration, Write

Possible
Description Syntax
responses
Set AT*EIARUTW= ...
Routing <index>,<bearer_type>,<IP-
table version>,<prefix>,<destination_ad
parameters dress>,<nexthop_address>
of Internet
Account
current
setting
Test AT*EIARUTW=? Range of
command Routing
to show if table
the parameters:
command *EIARUTW:
is (1-255),(1-
supported 4),(""),(0-1),
(0-32 / 0-
128),(""),("")
Description:
This command specifies one row of parameters in the Routing table of one
Internet Account. All parameters <IP-
version>,<prefix>,<destination_address>,<nexthop_address> must be
given regardless if only one parameter is to be set.
Note! For IPv6 addresses, the notation :: can be used, but only once. e.g.
Dest addr. FFFF:FFFF:0:0:0:0:0:0:0:0:0:0:0:0:0:1 can be written like
FFFF:FFFF::1
Note! If the user do not specify all parameters, the command results in an
error response
Defined values:
<index> Description
1....255 Write Routing table parameters of <bearer_type>
Internet Account with index as specified.

4/159 35-5/FCP 101 4577 Uen Rev B
network.
network
versa.
(0....32) IPv4:
Value used to create a IPv4 subnet mask. Indicates
how many bits that should be set to 1 in the mask.
A value of 24 will result in the following subnet
mask: 255.255.255.0.
connections
9.19 AT*EIARUTD - Internet Account Configuration, Delete

Possible
Description Syntax
responses
Delete AT*EIARUTD= ...
Routing <index>,<bearer_type>[,<IP-
table version>,<prefix>,<destination_a
parameters
4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Syntax
responses
of Internet ddress>,<nexthop_address>]
Account
current
setting
Test AT*EIARUTD=? Range of
command Routing
to show if table
the parameters:
command *EIARUTW:
is (1-255),(1-
supported 4),(""),(0-1),
(0-32 / 0-
128),(""),("")
Description:
This command deletes the Routing table parameters of one Internet
Account. All parameters <IP-
version>,<prefix>,<destination_address>,<nexthop_address> must be
given to delete one row in the specified routing table.
Note! For IPv6 addresses, the notation :: can be used, but only once. e.g.
Dest addr. FFFF:FFFF:0:0:0:0:0:0:0:0:0:0:0:0:0:1 can be written like
FFFF:FFFF::1
Note! If the user specify <index> and <bearer_type> parameters only, all
defined IPv4 and IPv6 routes will be removed.
Defined values:
<index> Description
1....255 Delete parameters of <bearer_type> Internet Account
network.
network
versa.

4/159 35-5/FCP 101 4577 Uen Rev B
(0....32) IPv4:
Value used to create a IPv4 subnet mask. Indicates
how many bits that should be set to 1 in the mask.
A value of 24 will result in the following subnet mask:
255.255.255.0.
connections

4/159 35-5/FCP 101 4577 Uen Rev B
10 Identification
10.1 AT Attention Command
Possible
Description Command
Responses
Checks the communication between AT OK
the MS and application +CME ERROR
<err>
Description:
This command is used to determine the presence of an MS. If the
MS supports AT commands, it returns an OK final result code.
10.2 AT+CGMI Read MS Manufacturer Identification

Request manufacturer AT+CGMI <manufacturer>
identification +CME ERROR:
<err>
Test if the command is AT+CGMI=? OK
supported ERROR
Description:
Causes the MS to return one or more lines of information text
<manufacturer>.
Defined values:
<manufacturer> Description
Sony Ericsson This company’s name is displayed.
Example:
AT+CGMI
Sony Ericsson
OK
10.3 AT+CGMM Read MS Model Identification

Request the model AT+CGMM <model>
identification +CME ERROR:

4/159 35-5/FCP 101 4577 Uen Rev B
<err>
Test if the command is AT+CGMM=? OK
supported ERROR
Description:
Causes the MS to return one or more lines of information text
<model>, determined by the MS manufacturer.
Defined values:
<model> Description
String type Model name for the transceiver unit
Example:
AT+CGMM
PC300
OK
10.4 AT+CGMR Read Revision Identification

Request revision AT+CGMR <revision>
identification string +CME ERROR:
<err>
Test if the command is AT+CGMR=? OK
supported ERROR
Description:
This command causes the module to return a string containing
information about the software revision.
Also implemented as AT+GMR.
Defined values:
<revision> Description
String type An ASCII string containing the software revision
Example:
AT+CGMR
R1A017
OK
10.5 AT+CGSN Read Product Serial Number Identification

4/159 35-5/FCP 101 4577 Uen Rev B
Request product serial AT+CGSN <sn>
number +CME ERROR:
<err>
Test if the command is AT+CGSN OK
supported =? ERROR
Description:
This command causes the module to return the IMEI (International
Mobile station Equipment Identity), which identifies the individual
ME.
Example:
AT+CGSN
004601013266310
OK
10.6 AT+GCAP Capabilities

Request complete capability AT+GCA +GCAP: +CGSM,
list P +DS
OK
Description:
This command returns the module’s capabilities.
Defined values:
Capabilities Description
+CGSM Support for GSM commands
+DS Support for V.42bis compression
Example:
AT+GCAP
+GCAP: +CGSM, +DS
OK
10.7 AT+GMI Request Manufacturer Identification

Read manufacturer’s AT+GMI <manufacturer>
name OK
Description:
This command returns the name of the manufacturer.
Equivalent to +CGMI
Defined values:
4/159 35-5/FCP 101 4577 Uen Rev B
Parameters Description
<manufacturer>
Sony Ericsson The name of the manufacturer.
Example:
AT+GMI
Sony Ericsson
OK
10.8 AT+GMM Request Model Identification

Read the model AT+GMM <model>
identification OK
Description:
This command returns the identification of the specific module
model.
Equivalent to +CGMM
Defined values:
Parameter Description
<model>
String type Model name for the transceiver unit
Example:
AT+GMM
PC300
OK
10.9 AT+GMR Revision Identification

Read software revision AT+GMR <revision>
identification. OK
Description:
This command returns the software revision.
Equivalent to +CGMR
Defined values:
Parameters Description
<revision>
String 6 characters

4/159 35-5/FCP 101 4577 Uen Rev B
Example:
AT+GMR
R1A001
OK
10.10 ATI Identification Information
Possible
Description Command
Responses
Read identification information ATI[<value>] <information>
Test if the command is ATI=? I: (0,1,3,5,7,9)
supported and which optional
information types
Description:
This command causes the DCE to transmit one or more lines of
text, followed by a final result code. As an option, <value> can be
used to select from among multiple types of identifying information
as shown in the table below.
Defined values:
<value> Description
0 Model identification. Equivalent to +GMM
1 Software revision. Equivalent to +GMR
3 Modem manufacturer name
5 Listing of active settings
7 Modem Configuration Profile, i.e. brief listing of the modem
functionality: Bluetooth, IrDA, modem type etc.
9 PnP (Plug n Play) identification
Examples:
ATI0
PC300
OK
ATI1
R1A001
OK
ATI3
Sony Ericsson
OK
ATI=5
Configuration Settings on Channel 1
&C: 1
&D: 2
4/159 35-5/FCP 101 4577 Uen Rev B
*EIAC: 1,1,"PS Account 1"
*ELIN: 1
+CBST: 0,0,1
+CDIP: 0,0
+CGACT: 1,0
+CGATT: 1
+CGDCONT: 1,"IP","isp.internet","0.0.0.0",0,0
+CGEQMIN: 1,3,0,0,0,0,0,0,"0E0","0E0",2,0,0
+CGEQREQ: 1,4,0,0,0,0,2,0,"1E4","1E5",0,0,0
+CGEREP: 0,0
+CGQMIN: 1,0,0,0,0,0
+CGQREQ: 1,0,0,3,0,0
+CHSN: 0,1,0,4
+CHSR: 0
+CHSU: 0
+CMEE: 1
+CMUX: 0,0,1,31,10,3,30,10,2
+CR: 0
+CRC: 0
+CRLP: 61,61,48,6,0
+CRLP: 120,120,48,6,2,3
+CSCS: "GSM"
+CV120: 1,1,1,0,0,0
+CVHU: 0
+DR: 0
+DS: 3,0,1024,32
+ICF: 3,3
+IFC: 2,2
+ILRR: 0
+IPR: 115200
E: 1
M: 0
Q: 0
S0: 000
S10: 002
S2: 128
S3: 013
S4: 010
S5: 008
S6: 002
S7: 050
S8: 002
V: 1
X: 4
OK
ATI7
PC Card Configuration Profile
Product Type Type II PC Card
Interfaces USB
Options RLP, V42bis
4/159 35-5/FCP 101 4577 Uen Rev B
OK
ATI9
(0136SE101D\\MODEM\\PC30091)
OK

4/159 35-5/FCP 101 4577 Uen Rev B
11 Serial Interface
11.1 AT&C Circuit 109 (DCD) Control

Set behavior of carrier AT&C[<value>] OK
detect ERROR
Show the current AT&C? &C: <value>
setting OK
Test if the command AT&C=? &C: (list of supported
is supported <value>s)
OK
Description:
Determines how ITU-T V.24 circuit 109 (Data Carrier Detect)
relates to the detection of a received line signal from the remote
end.
Defined values:
<value> Description
0 DCD always on
1 DCD follows the connection. Default value
Note: If in online command mode, while running a TCP/IP session
through AT Commands, DCD will only be updated when returning
to online data mode using ATO.
11.2 AT&D Circuit 108 (DTR) Response

Control actions from AT&D[=][<value>] OK
DTE ERROR
Show the current AT&D? &D: <value>
setting OK
Test if the command AT&D=? &D: (list of
<value>s)
OK
Description:
Controls all actions initiated by data terminal ready from DTE.
This command controls the behavior of online data state when the
4/159 35-5/FCP 101 4577 Uen Rev B
Data Terminal Ready (DTR - circuit 108.2) line is deasserted by
the DTE.
Defined values:
<value> Description
0 Ignore.
1 When in on-line data mode, deassert DTR switches to on-
line command mode.
2 When in on-line data mode, deassert DTR closes the current
connection and switch to off-line command mode. (Default
value)
11.3 ATV DCE Response Format

Set DCE response ATV[=]<value> OK
format ERROR
Show the current ATV? V: <value>
setting
Test if the command ATV=? V: (list of supported
is supported <value>s)
Description:
Select either descriptive or numeric response codes. The ATV
command sets the verbose numeric response codes and strips off the
<S3><S4> additions to the command response.
It shall be noted that in the case where a final result code is pending,
this will delay any unsolicited result codes to not be returned until
after the final result code has been sent.
Defined values:
<value> Description
0 Display numeric result codes
1 Display verbose result codes. Default value
List of result codes
ATV1/ATV=1 ATV0/ATV=0 Description

OK 0 Acknowledges execution of a
command Final
CONNECT 1 A connection has been established;
the DCE is moving from command
state to online data state

4/159 35-5/FCP 101 4577 Uen Rev B
ATV1/ATV=1 ATV0/ATV=0 Description
Intermediate
RING 2 The DCE has detected an incoming
call signal from the network
Unsolicited
NO 3 The connection has been terminated
CARRIER or the attempt to establish a
connection failed
Intermediate
ERROR 4 Command not recognized, command
line maximum length exceeded,
parameter value invalid, or other
problem with processing the
command line
Final
NO 6 No dial tone detected
DIALTONE Final
BUSY 7 Engaged (busy) signal detected
Final
CONNECT None Same as CONNECT, but includes
<TEXT> manufacturer-specific text that may
specify DTE speed, line speed, error
control, data compression, or other
status
Intermediate
11.4 AT+ICF DTE-DCE Character Framing Format

Defines DTE- AT+ICF=[format OK
DCE character [,parity]] ERROR
framing
Read the AT+ICF? +ICF: <format>[,<parity>]
current OK
setting
ERROR
Test if the AT+ICF=? +ICF: (list of supported
command is <format>s), (list of
supported supported <parity>s)

4/159 35-5/FCP 101 4577 Uen Rev B
OK
ERROR
Description:
This extended-format compound parameter is used to determine the
local serial port start-stop (asynchronous) character framing used by
the DCE to accept DTE commands, and while transmitting
information text and result code, if this is not automatically
determined;
AT+IPR=0 forces AT+ICF=0 (see AT+IPR).
Only applicable to RS-232. This command is provided for
compatibility only and has no effect on PC Card functionality over
USB.
Defined values:
<format> Description
1 8 Data 2 Stop
2 8 Data 1 Parity 1 Stop
3 8 Data 1 Stop. (Default value)
4 7 Data 2 Stop
5 7 Data 1 Parity 1 Stop
6 7 Data 1 Stop
<parity> Description
0 Odd
1 Even
2 Mark
3 Space (Default value)
11.5 AT+IFC DTE-DCE Local Flow Control

Defines DTE- AT+IFC=[<by_te>, OK
DCE local flow [<by_ta>]] ERROR
control
Show the AT+IFC? +IFC: <by_te>,<by_ta>
current setting
Test if the AT+IFC=? +IFC: (list of supported
command is <by_te>s,<by_ta>s)
4/159 35-5/FCP 101 4577 Uen Rev B
supported
Description:
Defines the flow control between the modem and the computer
when in on-line data mode.
No flow control is enabled when in any of the command modes.
Defined values:
<by_te> Description
0 No flow control on DTE
1 Xon/Xoff flow control from DTE to DCE. Control characters
are removed by the DCE interface
2 RTS flow control from DTE. (Default value)
3 Xon/Xoff flow control from DTE to DCE. Contorl characters
are passed to the remote DCE/DTE.
<by_ta> Description
0 No flow control on DCE
1 Xon/Xoff flow control from DCE to DTE
2 CTS flow control from DCE. Default value
11.6 AT+IPR Cable Interface Port baud rate

Defines fixed AT+IPR=[rate] OK
DTE rate ERROR
Show the AT+IPR? +IPR:<rate>
current setting OK
ERROR
Test if the AT+IPR=? +IPR: (List of supported
command is autodetectable <rate>s), (list
supported of fixed-only <rate>s)]
OK
ERROR
Description:
Specifies the data rate at which the DCE will accept commands, in
addition to 1200 bits/s or 9600 bits/s (as required in v25ter,
subclause 4.3).

4/159 35-5/FCP 101 4577 Uen Rev B
Only applicable to RS-232. This command is provided for
compatibility only and has no effect on PC Card functionality over
USB.
Defined values:
<rate> Description
Discrete The <rate> value specified shall be the rate in bits
integer per second at which the DTE-DCE interface should
value operate, e.g. “19200” or “115200”. The rates
supported by a particular DCE are manufacturer
specific.
The following rates, are supported;
0 = autobaud. Default value.
300 bps
0
600 bps
300
1200 bps
600
2400 bps
1200
3600 bps
2400
4800 bps
3600
7200 bps
4800
9600 bps
7200
14400 bps
9600
19200 bps
14400
28800 bps
19200
38400 bps
28800
57600 bps
38400
115200 bps
57600
230400 bps
115200
460800 bps
230400
460800
11.7 ATE Command Echo

Request Command ATE[<value>] OK
Echo ERROR
Show the current ATE? <value>

4/159 35-5/FCP 101 4577 Uen Rev B
setting
Test if the command is ATE=? E: (list of supported
supported <value>s)
Description:
The setting of this parameter determines whether or not the DCE
echoes characters received from the DTE during command state
and online command state.
Defined values:
<value> Description
0 DCE does not echo characters during command state and
online command state
1 DCE echoes characters during command state and online
command state. Default value
11.8 ATQ Result Code Suppression

Set Result Code ATQ<value> OK
Suppression ERROR
Read the current setting ATQ? Q: <value>
Test if the command is ATQ=? Q: (list of supported
supported <value>s)
Description:
This command determines whether the DCE transmits result codes
to the DTE. When result codes are being suppressed, no portion of
any intermediate, final, or unsolicited result code - header, result
text, line terminator, or trailer - is transmitted.
Defined values:
<value> Description
0 DCE transmits result codes. Default value
1 Result codes are suppressed and not transmitted

4/159 35-5/FCP 101 4577 Uen Rev B
12 Network
12.1 AT*E2EMM Engineering Monitoring Mode

Set AT*E2EMM= *E2EMM
operation <n>[,<m>] GSM Idle
during Serving Cell
GSM Idle MCC, MNC, LAC, CellId, BSIC,
mode Ch, RxL, C1, C2
<mcc>,<mnc>,<lac>,<ci>,<bsic
>,<ch>,<rxl>,<c1>,<c2>
Neighbor Cells
MCC, MNC, LAC, CellId, BSIC,
Ch, RxL, C1, C2
>,<ch>,<rxl>,<c1>,<c2>
…
>,<ch>,<rxl>,<c1>,<c2>
OK
ERROR
CME ERROR
operation <n>[,<m>] GSM Dedicated
during Serving Cell
GSM MCC, MNC, LAC, CellId, BSIC,
Dedicated Ch, RxL, RxLF, RxLS, RxQF, RxQS,
mode TA, TN
>,<ch>,<rxlfull>,<rxlsub>,<rxqf
ull>,<rxqsub>,<ta>,<tn>
Neighbor Cells
MCC, MNC, LAC, CellId, BSIC,
Ch, RxL, C1, C2

4/159 35-5/FCP 101 4577 Uen Rev B
>,<ch>,<rxl>,<c1>,<c2>
…
>,<ch>,<rxl>,<c1>,<c2>
OK
ERROR
CME ERROR
operation <n>[,<m>]
during WCDMA - Serving Cell
WCDMA <RRCState>
mode MCC, MNC, LAC, Ch, SC, RSCP,
EcN0, RSSI, ServL, ServQ, Hs, Rs
<mcc>,<mnc>,<lac>,<ch>,<sc>
,<rscp>,<EcNo>,<rssi><ServLvl
>,<ServQual>,<Hs>,<Rs>
Monitored Intra-Frequency Cells

Ch, SC, PTxPwr, ULTxPwr, ServL,
ServQ, Hn, Rn
<ch>,<sc>,<PtxPwr>,<ULTxPwr
>,<ServLvl>,<ServQual>,<Hn>,<
Rn>
…
Rn>
Monitored Inter-Frequency Cells

ServQ, Hn, Rn
Rn>
…

4/159 35-5/FCP 101 4577 Uen Rev B
Rn>
Monitored Inter-RAT Cells

Ch, BSIC, CIO, RSSI, RxLevMin
<ch>,<bsic>,<cio>,<rssi>,<rxle
vmin>
…
<ch>,<bsic>,<cio>,<rssi>,<rxle
vmin>
Detected Cells
ServQ, Hn, Rn
Rn>
…
Rn>
OK
ERROR
CME ERROR
Read AT*E2EMM? Not Supported
Test if the AT*E2EMM=? *E2EMM: (list of supported
command <n>s),(list of supported <m>s)
is ERROR
supported
Description:
There is only one presentation format mode (Display)) and one
response type (one shot response).
The purpose of the Display presentation format mode is to display
the data in a readable form, including headers and line breaks
(<CR><LF>).
The response types give the user the choice of one-shot
information or an unsolicited response with <m> seconds between
each response. Responses occur when the module is camped on a
network.
Note:
The periodic unsolicited response is not supported in this version
of *E2EMM
4/159 35-5/FCP 101 4577 Uen Rev B
Examples:
AT*E2EMM=9
*E2EMM
WCDMA - Serving Cell ( Idle )
MCC, MNC, LAC, Ch, SC, RSCP, EcNo, RSSI, ServL, ServQ,
Hs, Rs
310, 410, 32c5, 9766, 267, -33, - 3, 0, 1, 11, ,
Monitored Intra-Frequency Cells
Ch, SC, PTxPwr, ULTxPwr, ServL, ServQ, Hn, Rn
9766, 275, 4, 24, 1, 11, ,
Monitored Inter-Frequency Cells
Monitored Inter-RAT Cells
Ch, BSIC, CIO, RSSI, RxLevMin
674, 3, 0, 255, 0
673, 29, 0, 255, 0
670, b, 0, 255, 0
681, 32, 0, 255, 0
677, 2, 0, 255, 0
676, 7, 0, 255, 0
684, 23, 0, 255, 0
683, 16, 0, 255, 0
Detected Cells
OK
Defined values:
<n> Description
9 Presentation of the network location information. Display mode
with headers and <CR><LF> line separators
<m> Description
0- Integer type giving time (in seconds) between unsolicited
255 responses. <m>=0 means immediately send out ONE
response only.
Default and only supported value: 0
<RRCState> Description
String type Idle, Dedicated

4/159 35-5/FCP 101 4577 Uen Rev B
<mcc> Description
Integer Three digits in decimal format. The Mobile Country
type Code identifies the PLMN serving cell country according
to ITU
<mnc> Description
Integer Two digits in decimal format. The Mobile Network Code
type identifies the PLMN operator in the serving cell
<lac> Description
Integer type Two byte location area code in hexadecimal format
<ci> Description
Integer type Two byte cell ID in hexadecimal format
<bsic> Description
Integer One byte Base Stations Identification code in
type hexadecimal format
<ch> Description
(0-1023) It represents the ARFCN that shows the Absolute RF
Channel, which identifies the BCCH carrier
<rxl> Description
Integer type Received Signal Strength level in dBm measured
-110 to -40 on idle mode.
<rxlfull> Description
Integer type Received Signal Strength level in dBm. The Rx Level
-110 to -40 is taken in non-DTX mode during a SACCH
multiframe
<rxlsub> Description
Integer type Received Signal Strength level in dBm. The Rx
4/159 35-5/FCP 101 4577 Uen Rev B
<rxlsub> Description
-110 to -40 Level is taken from the DownLink signal in DTX
mode and the average is applied to subset of
SACCH frames
Description
<rxqfull>
Received Signal Quality (non-DTX mode)
0 BER < 0.2%
1 BER < 0.4%
2 BER < 0.8%
3 BER < 1.6%
4 BER < 3.2%
5 BER < 6.4%
6 BER < 12.8%
Description
<rxqsub>
Received Signal Quality (DTX mode)
0 BER < 0.2%
1 BER < 0.4%
2 BER < 0.8%
3 BER < 1.6%
4 BER < 3.2%
5 BER < 6.4%
6 BER < 12.8%
<c1> Description
Integer Path Loss criterion parameter for neighbour cells. The MS
calculates this parameter, in idle mode, to decide if the
cell is suitable to camp on. After the calculation the
criterion is C1 > 0. See GSM 05.08
<c2> Description
Integer Cell reselection parameter for neighbour cells. This
parameter shall optimise the selected cell reselection

4/159 35-5/FCP 101 4577 Uen Rev B
<ta> Description
0- According to GSM 04.18 V8.6.0, the coding of the timing
63 advance value is the binary representation of the timing
advance in bit periods; 1 bit period = 48/13uS. <ta> is the
integer representation of the timing advance in binary
format
64- Reserved
255
<tn> Description
0-7 Its value indicates the time slot number in a traffic
channel
<rscp> Description
-120 to -25 Receive Signal Code Power
<EcNo> Description
0 to 49 Carrier to Noise Ratio
<ServLvl> Description
1 to 11 Cell selection/reselection quality measure of serving cell
<ServQual> Description
-110 to -40 Cell selection quality of the serving cell
<Hs> Description
0x00 - 0xFFFF Quality level threshold criterion H of serving cell
<Rs> Description
0x00 - 0xFFFF Cell ranking criterion R of serving cell
<Hn> Description
0x00 - 0xFFFF Quality level threshold criterion H of the

4/159 35-5/FCP 101 4577 Uen Rev B
<Hn> Description
strongest neighbor cell
<Rn> Description
0x00 - 0xFF Cell ranking criterion R of the strongest neighbor
cell
<ULTxPwr> Description
-110 to -40 Max allowed uplink Tx power
<PtxPwr> Description
10 to 50 Primary CPICH Tx Power
<cio> Description
-128 to 127 Cell Individual Offset
<rssi> Description
0 to 255 Received Signal Strength Indication
12.2 AT*ERINFO Network Capability

Active the AT*ERINFO=<m OK
response ode> +CME ERROR: <err>
mode
Query the AT*ERINFO? *ERINFO:

current <mode>,<gsm_rinfo>,<umts
radio _rinfo>
access +CME ERROR: <err>
information
Test if the AT*ERINFO=? *ERINFO: (list of supported
command <mode>s)
is +CME ERROR <err>
supported
Unsolicited *ERINFO:
4/159 35-5/FCP 101 4577 Uen Rev B
report if <gsm_rinfo>,<umts_info>
*ERINFO
reports are
enabled
Description:
This command is used to provide an unsolicited result code
indicating the current technology of the current cell, or to query the
current cell information.
Defined values:
<mode> Description
0 Disable unsolicited information. Default value.
1 Enable unsolicited information
<gsm_rinfo> Description
0 No GPRS or EGPRS available
1 GPRS service is available
2 EGPRS service is available
<umts_rinfo> Description
0 No UMTS or HSDPA service available
1 UMTS service available
2 HSDPA service availalbe
Examples:
AT*ERINFO=0
OK
AT*ERINFO?
*ERINFO: 0,2,2
OK
12.3 AT+CLCK Facility Lock

Request AT+CLCK=<fac>, when <mode>=2 and
facility <mode>[,<passwd> command successful:

4/159 35-5/FCP 101 4577 Uen Rev B
lock [,<class>]] +CLCK:
<status>[,<class1>
[<CR><LF>+CLCK:
<status>,<class2>[...]]
+CME ERROR <err>
OK
ERROR
Test if the AT+CLCK=? +CLCK: (list of supported
command <fac>s)
is +CME ERROR <err>
supported
OK
Description:
The command is used to lock, unlock or interrogate an ME or a
network facility <fac>. A password is normally needed to carry out
such actions.
When querying the status of a network service (<mode>=2), the
response line for 'not active' case (<status>=0) should be returned
only if service is not active for any <class>.
Call barring facilities are based on GSM/UMTS supplementary
services (refer to 3GPP 02.88). The interaction of these, with other
commands based on other GSM/UMTS supplementary services, is
described in the GSM/UMTS standard.
Additional information:
Note: "PS" and <mode>=1 correspond to Auto Lock
Defined values:
<fac> Description
“PS” PH-SIM (lock PHone to SIM card) (ME asks password when
other than current SIM card inserted)
“SC” SIM (lock SIM card) (SIM asks password in ME power-up and
when this lock command issued)
"CS" CNTRL (lock control surface)
“AO” BAOC (bar all outgoing calls)
“OI” BOIC (bar outgoing international calls)
“AI” BAIC (bar all incoming calls)
“IR” BIC-Roam (bar incoming calls when roaming outside the
home country)
“OX” BOIC-exHC (bar outgoing international calls except to home
country)
“AB” All barring services
“AG” All out going barring services

4/159 35-5/FCP 101 4577 Uen Rev B
<fac> Description
“AC” All in coming barring services
“FD” SIM fixed dialing feature. PIN2 is required as a password
“PN” Network personalization
“PU” Network subset personalization
“PP” Service provider personalization
“PC” Corporate personalization
<mode> Description
0 Unlock
1 Lock
2 Query status
10 Full lock (only valid for <fac>=“PS”, after power on always
ask for ME_lock_code)
0 Not active
1 Active
2 Not available
<passw> Description
string Is the same as password specified for the facility from
type the ME user interface or with change password
command, +CPWD
<classx> Description
1 Voice L1
2 Data
4 Fax (Not supported)
8 Short message service
16 Data circuit sync
32 Data circuit async
64 Dedicated packet access
128 Dedicated PAD Access

4/159 35-5/FCP 101 4577 Uen Rev B
12.4 AT+CNUM Subscriber Number

Request AT+CNUM +CNUM:
subscriber [<alpha1>],<number1>,<type1>
number [,<speed>,<service>[,<itc>]][<CR>
<LF>
+CNUM:
[<alpha2>],<number2>,<type2>
[,<speed>,<service> [,<itc>]][…]]
+CME ERROR: <err>
OK
ERROR
Test if the AT+CNUM=? +CME ERROR: <err>
command OK
is
ERROR
supported
Description:
This command returns the MSISDNs related to the subscriber (this
information can be stored in the SIM or in the ME). If subscriber
has different MSISDN for different services, each MSISDN is
returned in a separate line.
The implementation of this command is made according to
Bluetooth HFP 1.5, which deviates somewhat from the 3GPP, and
the parameters <alpha> and <itc> are not supported but included to
show the full command as specified in 3GPP TS 27.005.
Defined values:
<alphax> Description
Alphanumeric Associated with <numberx>; Not supported
string
<numberx> Description
String type Phone number of format specified by <typex>
<typex> Description
Integer type Type of address, (refer to 3GPP 24.008)

4/159 35-5/FCP 101 4577 Uen Rev B
<speed> Description
data Always displays 8. +CNUM is a standard command
rate (27.007). This field makes no sense for voice numbers
and fax numbers, and the module has no knowledge what
speed the user (SIM) has subscribed to.
<service> Description
0 Asynchronous modem
4 Voice
5 Fax
<itc> Description Not supported

0 3.1kHz
1 UDI
The typex field is defined in 3GPP 24.008 as an integer which
combines the Number Type parameter and the Numbering Plan
parameter. The parameters may be extracted as follows:
Subtract 128 from the displayed value
Divide the result by 16.
The quotient is the Number Type parameter.
The remainder is the Numbering Plan parameter.
For example, given a displayed typex value of 161:
161 - 128 = 33
33 / 16 = 2 with a remainder of 1
Therefore Number Type = 2, Numbering Plan = 1
The definitions are given in the next two tables.
Number Type Description

0 Unknown
1 International number
2 National number
3 Network specific number
4 Dedicated address, short code
5 Reserved
6 Reserved
7 Reserved for extension
Numbering Plan Description

0 unknown
4/159 35-5/FCP 101 4577 Uen Rev B
Numbering Plan Description
1 ISDN/telephony numbering plan (Rec.
E.164/E.163)
2 reserved
3 data numbering plan (Recommendation X.121)
4 telex numbering plan (Recommendation F.69)
5-7 reserved
8 national numbering plan
9 private numbering plan
10 reserved
11 reserved for CTS (see 3GPP TS 44.056)
12-14 reserved
15 reserved for extension
12.5 AT+COPN Read Operator Names

Request operator AT+COPN +COPN:
selection <numeric1>,<alpha1>
[<CR><LF>
+COPN:
<numeric2>,<alpha2>
[...]]
+CME ERROR: <err>
OK
ERROR
Test if the AT+COPN=? OK
command is
supported
Description:
Command returns the list of operator names from the ME. Each
operator code <numericn> that has an alphanumeric equivalent
<alphan> in the ME memory shall be returned. This command can
return several hundred names and can execute for up to 90 seconds..
Defined values:
<numericn>: string type; operator in numeric format. (See
AT+COPS)
<alphan>: string type; operator in long alphanumeric format. (See
AT+COPS)

4/159 35-5/FCP 101 4577 Uen Rev B
12.6 AT+COPS Operator Selection

Request AT+COPS=[<mode> +CME ERROR <err>
operator [,<format> OK
selection [,<oper>[,<AcT>]]]]
ERROR
Show the AT+COPS? +COPS:
current <mode>[,<format>,
setting <oper>,<AcT>]
+CME ERROR <err>
OK
ERROR
Test if the AT+COPS=? +COPS: [list of
command is supported (<stat>,long
supported; alphanumeric <oper>,
Perform short alphanumeric
operator <oper>,numeric
search <oper>,<AcT>)s]
+CME ERROR <err>

OK
ERROR
Description:
The set command performs operator selection. <mode>=0 or 1
forces an attempt to select and register the GSM/UMTS network
operator. The value of <mode> determines whether the selection
is done automatically by the ME or is forced to operator <oper>,
specified in format <format>. If the selected operator is not
available, no other operator will be selected (except for
<mode>=4). The selected operator name format applies to futher
read commands (+COPS?).
The read part of the command returns the current mode and current
operator. If there is no current operator, only the mode is returned.
The test part of this command returns a list of quintuplets, each

representing an operator present in the network. Quintuplet
consists of an integer indicating the availability of the operator
<stat>, long and short alphanumeric format of the name of the
operator, numeric format representation of the operator, and the
access technology <AcT>. Any of the formats may be unavailable
and should then be an empty field. The list of operators shall be in

4/159 35-5/FCP 101 4577 Uen Rev B
order: home network, networks referenced in the SIM/UICC, and
other networks.
Defined values:
<mode> Description
0 Automatic (<oper> field is ignored). Default value.
1 Manual (<oper> field shall be present and <AcT> is
optional)
3 Set only <format> (for read command +COPS?), do not
attempt registration/de-registration (<oper> and <AcT>
fields are ignored); this value is not applicable in read
command response
4 Manual/automatic (<oper> field shall be present); if
manual selection fails, automatic mode (<mode>=0) is
entered
Note: When using <mode> = 1, only <format> = 2 is allowed.
0 long format alphanumeric <oper>. Default value.
1 short format alphanumeric <oper>
2 Numeric <oper>. A text string representation of the PLMN
code consisting of the 3-digit MCC and 2 or 3-digit MNC.
<oper> Description
string Format determined by the <format> setting. Default is
type empty string.
<stat> Description
0 Unknown
1 Available
2 Current
3 Forbidden
<AcT> Description
0 GSM Access Technology
2 UTRAN Access Technology
Example:
AT+COPS=?
+COPS: (2,“UK VODAFONE”,,“23415”,0)
4/159 35-5/FCP 101 4577 Uen Rev B
+COPS: (3,“UK Orange PCS Ltd”,,“23433”,0)
+COPS: (3,“T-Mobile UK”,,“23430”,0)
+COPS: (3,“O2 - UK”,,“23410”,0)
OK
An invalid home network, eg. no SIM inserted, will display as null

string as follows:
AT+COPS=?
+COPS: (0,“”,,“”,0)
+COPS: (2,“UK VODAFONE”,,“23415”,0)
OK
12.7 AT+CPOL Preferred Operator List

Request AT+CPOL=[< +CME ERROR: <err>
operator index>][, OK
selection <format>[,<
ERROR
oper>[,GSM_
AcT,<GSM_C
ompact_AcT
>,<UTRAN_A
cT>]]]
Shows the AT+CPOL? +CPOL:
current <index1>,<format>,<oper1>[,<
setting GSM_AcT1>,<GSM_Compact_AcT
1>,<UTRAN_AcT1>]
[<CR><LF>+CPOL:
<index2>,<format>,<oper2>[,<
GSM_AcT2>,<GSM_Compact_AcT
2>,<UTRAN_AcT2>]
[...]]
+CME ERROR: <err>
Test if the AT+CPOL=? +CPOL: (list of supported
command <index>s),(list of supported
is <format>s)
supported +CME ERROR: <err>
OK
ERROR
Description:
This command is used to edit the PLMN selector with Access
Technology lists in the SIM card or active application in the
UICC(GSM or USIM).

4/159 35-5/FCP 101 4577 Uen Rev B
Execute command writes an entry in the SIM/USIM list of
preferred PLMNs, which could previously have been selected by
the command +CPLS, however, as this command is not supported,
the User controlled PLMN selector with Access Technology,
EFPLMNwAcT, is the one accessed by default. If <index> is given but
<oper> is left out, entry is deleted. If <oper> is given but <index> is
left out, <oper> is put in the next free location. If only <format> is
given, the format of the <oper> in the read command is changed.
The Access Technology selection parameters, <GSM_AcT>,
<GSM_Compact_AcT> and <UTRAN_AcT>, are required when
writing User controlled PLMN selector with Access Technology,
EF EFPLMNwAcT,
If <index> is given but <oper> is left out, entry is deleted. If <oper>
is given but <index> is left out, <oper> is put in the next free
location. If only <format> is given, the format of the <oper> in the
read command is changed
Note: ME may also update this list automatically when new
networks are selected.
Note: AcT parameters are optional for the set command, but if one
of the parameters is issued then all should be issued.If the
parameters are not issued at all or only indicated by commas then
the respective default values 1,0,1 are used.
Read command returns all used entries from the SIM list of
preferred operators.
Test command returns the whole index range supported by the SIM.
Note: While the +CPLS command is not supported, this +CPOL
command will behave as though +CPLS is set to value 0. Thus, per
TS27.007, this behavior is "User controlled PLMN selector with
Access Technology EFPLMNwAcT, if not found in the SIM/UICC then
PLMN preferred list EFPLMNsel (this file is only available in SIM
card or GSM application selected in UICC)"
Defined values:
<index> Description
Integer The order number of operator in the SIM preferred
type operator list (value range returned by test command)
0 long format alphanumeric <oper>
1 short format alphanumeric <oper>
2 numeric <oper> Default value
<oper> Description
string Format determined by the <format> setting
type

4/159 35-5/FCP 101 4577 Uen Rev B
<GSM_AcT> Description
0 Access technology not selected
1 Access technology selected
<GSM_Compact_AcT> Description
<UTRAN_AcT> Description
12.8 AT+CREG Network Registration

Request AT+CREG=[<n>] +CME ERROR <err>
network OK
registration
ERROR
Show the AT+CREG? +CREG:
current setting <n>,<stat>[,<lac>,<ci>]
+CME ERROR <err>
OK
ERROR
Test if the AT+CREG=? +CREG: (list of supported
command is <n>s)
OK
ERROR
Description:
Set command controls the presentation of an unsolicited result
code +CREG: <stat> when <n>=1 and there is a change in the ME
network registration status, or code +CREG: <stat>[,<lac>,<ci>]
when <n>=2 and there is a change of the network cell.
Read command returns the status of result code presentation and
an integer <stat>, which shows whether the network has currently
indicated the registration of the ME. Location information

4/159 35-5/FCP 101 4577 Uen Rev B
elements <lac> and <ci> are returned only when <n>=2 and ME is
registered in the network.
Controls the presentation of the unsolicited result code +CREG.
Defined values:
<n> Description
0 Disable network registration unsolicited result code. Default
value
1 Enable network registration unsolicited result code +CREG:
<stat>
2 Enable network registration and location information
unsolicited result code +CREG: <stat>[,<lac>,<ci>]
<stat> Description
0 Not registered, ME is not currently searching for a new
operator to register with
2 Not registered, but ME is currently searching for a new
operator to register with
4 Unknown
<lac> Description
string two byte location area code in hexadecimal format (e.g.
type "00C3" equals 195 in decimal)
<ci> Description
string Four byte cell ID in hexadecimal format. Four bytes are
type required for UMTS, whereas only two bytes are applicable
for GSM, and the two first bytes are then zeros e.g.
00001A02
Example:
AT+CREG?
+CREG: 0,1
OK
12.8.1 +CREG - Network Registration Unsolicted Response

+CREG: <stat>[,<lac>,<ci>]
4/159 35-5/FCP 101 4577 Uen Rev B
4/159 35-5/FCP 101 4577 Uen Rev B
13 Phonebook
13.1 AT+CPBR Phonebook Read

Notes:
* - SIM is required for SIM based phonebooks.

Read AT+CPBR=<index1> +CPBR:<index1>,<numb
phone [,<index2>] er>,
book <type>,<text>[[,<text_da
entries tetime>]<CR><LF>
+CPBR:
<index2>,<number>,<ty
pe>,
<text>[,<text_datetime>]
]
+CME ERROR <err>
OK
ERROR
Test if the AT+CPBR=? +CPBR: (list of supported
command <index>s),<nlength>,<tl
is ength>
OK
ERROR
Description:
Returns phonebook entries in location number range <index1>...
<index2> from the current phonebook memory storage selected
with +CPBS. If <index2> is left out, only location <index1> is
returned. Entry fields returned are location number <indexn>,
phone number stored there <number> (of format <type>) and text
<text> associated with the number.
When the “Received Calls List”, the “Missed Calls List” or the
“Dialed Calls List” is selected, the two additional fields <text_date>
and <text_time> containing date and time will be returned. In this
case the <text> field containing text associated with the number has
to be extracted from one of the phonebooks (SIM, ME or TA).
If listing fails in ME, +CME ERROR: <err> is returned.
Defined values:
<indexn> Description
integer Values in the range of location numbers of phone
type book memory

4/159 35-5/FCP 101 4577 Uen Rev B
string Phone number of format <type>
type
<type> Description
Integer Type of address octet, refer 3GPP 24.008
type
129 ISDN/telephony numbering plan,
national/international unknown
Default if no "+" in <number>
145 ISDN/telephony numbering plan, international
number
Default if "+" in <number>
161 ISDN/telephony numbering plan, national number
128 - 255 Other values refer to 3GPP 24.008
<text> Description
string Field of maximum length <tlength>;
type character set as specified by the Select TE Character Set
command, +CSCS.
<nlength> Description
integer Value indicating the maximum length of field
type <number>
<tlength> Description
integer Value indicating the maximum length of field <text>
type
<text_datetime> Description
string Date and time in the format: yy/mm/dd,hh:mm
Example:
AT+CPBR=1,99
+CPBR: 1,“44123456789”,145,“Test Number”
+CPBR: 2,“440987654321”,145,“Test number 2”
+CPBR: 3,“449876543210”,129,“Test Number 3”
4/159 35-5/FCP 101 4577 Uen Rev B
OK
13.2 AT+CPBS Phonebook Storage Select

Notes:

Set phone AT+CPBS=<storage> +CME ERROR <err>
book [,<password>] OK
storage ERROR
Read the AT+CPBS? +CPBS:
current <storage>,<used>,<total>
setting +CME ERROR <err>
OK
ERROR
Test if the AT+CPBS=? +CPBS: (list of supported
command <storage>s)
is +CME ERROR <err>
supported OK
ERROR
Description:
Selects phonebook memory storage <storage>, which is used by
other phonebook commands. Read command returns currently
selected memory, number of used locations and total number of
locations in the memory.
Defined values:
<storage> Description
“FD” SIM/USIM fix-dialing-phonebook. If a SIM card is present
or if a UICC with an active GSM application is present, the
information in EFFDN under DFTelecom is selected. If a UICC
with an active USIM application is present, the information
in EFFDN under ADFUSIM is selected.
“EN” Emergency numbers (read only)
“SM” SIM phone book. Default value.
"LD" SIM/USIM last number dialed list. Not Supported
“DC” ME dialled calls list (read only) Not Supported
“RC” ME received calls list (read only) Not Supported
“MC” ME missed calls list (read only) Not Supported
"ON" SIM (or ME) own numbers (MSISDNs) list (reading of this
storage may be available through +CNUM also). When
storing information in the SIM/UICC, if a SIM card is
present or if a UICC with an active GSM application is

4/159 35-5/FCP 101 4577 Uen Rev B
<storage> Description
present, the information in EFMSISDN under DFTelecom is
selected. If a UICC with an active USIM application is
present, the information in EFMSISDN under ADFUSIM is
selected.
<passwd> Description
String Represents the password required when selecting
type password protected <storage>s, for example PIN2 for
storage “FD”
<used> Description
Integer Number of locations used in the selected memory
type (<storage>)
<total> Description
Integer Total number of locations in the selected memory
type (<storage>)
13.3 AT+CPBW Phonebook Write

Notes:

Request AT+CPBW=<index> +CME ERROR <err>
phone book [, OK
write <number>[,<type> ERROR
[,<text>]]]
Test if the AT+CPBW=? +CPBW: (list of supported
command <index>s),<nlength>
is ,(list of supported
supported <type>s),<tlength>
+CME ERROR <err>
OK
ERROR
Description:
Writes phonebook entry in location number <index> in the current
phonebook memory storage area, selected with AT+CPBS. If the
<number> and <text> parameters are omitted, the entry is deleted.
If <index> is omitted but <number> is included, the entry is written
to the first free location in the phonebook. If writing fails in ME,
4/159 35-5/FCP 101 4577 Uen Rev B
+CME ERROR: <err> is returned.
Test command returns location range supported by the current
storage as a compound value, the maximum length of <number>
field, supported number formats of the storage, and the maximum
length of <text> field. If ME is not currently reachable, +CME
ERROR: <err> is returned. If storage does not offer format
information, the format list is empty parenthesis.
Defined values:
<index> Description
integer type Values in the range of location numbers of phone
book memory
string Phone number of format <type>
type
<type> Description
integer Type of address octet, default 145 when dialing string
format includes international access code character “+”,
otherwise 129. (refer to 3GPP 24.008)
129 ISDN/telephony numbering plan, national/international
unknown
Default if no "+" in <number>.
145 ISDN/telephony numbering plan, international number
Default if "+" in <number>.
128-255 Other values refer GSM 04.08 section 10.5.4.7
<text> Description
string Field of maximum length <tlength>;
type character set as specified by the select TE character set
command, +CSCS
See description at end of this section
<nlength> Description
integer Value indicating the maximum length of field
type <number>

4/159 35-5/FCP 101 4577 Uen Rev B
<tlength> Description
integer Value indicating the maximum length of field <text>
type
Notes:
When using +CPBW to add entries to SIM/USIM phonebook, it is likely
that not all entries will be accepted for numbers longer than 20 digits.
There is a dependency on the size of the extension file EFext1. If the space
allocated to the extension file is used up, then new phonebook write
attempts of numbers with more than 20 digits will not be accepted.
Entries stored in memories DC, RC, and MC, will not be deleted using
+CPBW.

4/159 35-5/FCP 101 4577 Uen Rev B
14 Short Message Services - Point to Point
14.1 AT+CGSMS Select Service for MO SMS Messages

Set service or AT+CGSMS=[<service>] OK
service ERROR
preference
Read the AT+CGSMS? +CGSMS:
command <service>
OK
ERROR
Test if the AT+CGSMS=? +CGSMS: (list of
command is available
supported <service>s)
OK
ERROR
Description:
The set command is used to specify the service or service
preference that the MT will use to send MO SMS messages. The
read command returns the currently selected service or service
preference.
Defined values:
0 GPRS/Packet Domain
1 Circuit switched
2 GPRS/packet domain preferred (use circuit switched if
GPRS/packet domain not available)
3 Circuit switched preferred (use GPRS/packet domain if
circuit switched not available). Default value.
14.2 AT+CMGF Message Format

Common for both PDU and Text Modes

Set message AT+CMGF=<mode> OK
format ERROR
Show the current AT+CMGF? +CMGF: <mode>

4/159 35-5/FCP 101 4577 Uen Rev B
setting OK
ERROR
Test if the AT+CMGF=? +CMGF: (list of
supported <mode>s)
OK
ERROR
Description:
This command tells the TA, which input and output format to use
for messages. The <mode> parameter indicates the format of
messages used with send, list, read and write commands, and
unsolicited result codes resulting from received messages. Mode
can be either PDU mode (entire TP data units used) or text mode
(headers and body of the messages given as separate parameters).
Test command returns supported modes as a compound value.
Defined values:
<mode> Description
0 PDU mode. Default value
1 Text mode. Not Supported.
14.3 AT+CMGW Write Message to Memory

PDU Mode
Possible
Description Command
Responses
Write message to AT+CMGW=<length> +CMGW:
memory [,<stat>]<CR> <index>
<pdu><ctrl-Z/ESC> +CMS
ERROR:
<err>
OK
ERROR
Test if the AT+CMGW=? OK
command is ERROR
supported
Description:
Stores a message to memory storage <mem2>. Memory location
<index> of the stored message is returned. By default message
status will be set to ‘stored unsent’, but parameter <stat> allows
other status values to be given. Entering PDU is the same as
specified by the send message command, +CMGS. If writing fails,
4/159 35-5/FCP 101 4577 Uen Rev B
final result code +CMS ERROR: <err> is returned. See AT+CPMS
Preferred Message Storage.
This command is abortable by sending <ESC> character (IRA 27)
This character must be be sent before the terminating <ctrl-Z> (IRA
26) is sent in order to have any effect.
Defined values:
<stat> Description
2 Stored unsent message (only applicable to SMs)
<index> Description
Integer Value in the range of location numbers supported by
type the associated memory
<length> Description
Integer Value indicating in PDU mode (+CMGF=0), the length of
type the actual TP data unit in octets (i.e. the RP layer SMSC
address octets are not counted in the length)
<pdu> Description
Unquoted In the case of SMS: 3GPP 24.011 SC address followed
string by 3GPP 23.040 TPDU in hexadecimal format: ME/TA
converts each octet of TP data unit into two IRA
character long hexadecimal number (e.g. octet with
integer value 42 is presented to TE as two characters
2A (IRA 50 and 65))
In the case of CBS: 3GPP 23.041 TPDU in hexadecimal
format
14.4 AT+CMGC Send Command

PDU Mode

Send AT+CMGC=<length><CR> if PDU mode
command <pdu><ctrl-Z/ESC> (+CMGF=0) and
message sending successful:
+CMGC:
<mr>[,<ackpdu>]
if sending fails:
+CMS ERROR:

4/159 35-5/FCP 101 4577 Uen Rev B
<err>
OK
ERROR
Test if the AT+CMGC=? OK
command ERROR
is
supported
Description:
Sends a command message from a TE to the network (SMS-
COMMAND). The entering of PDU is as specified in the send
message command, +CMGS. Message reference value <mr> is
returned to the TE on successful message delivery. Optionally
(when +CSMS <service> value is 1 and network supports)
<ackpdu> is returned. Values can be used to identify message upon
unsolicited delivery status report result code. If sending fails in a
network or an ME error, final result code +CMS ERROR: <err> is
returned.
Defined values:
<pdu> Description
String by 3GPP 23.040 TPDU in hexadecimal format: ME/TA
2A (IRA 50 and 65))
format
<mr> Description
Integer 3GPP 23.040 TP-Message-Reference in integer
type format

4/159 35-5/FCP 101 4577 Uen Rev B
<ackpdu> Description
String GSM 03.40 RP-User-Data element of RP-ACK PDU; format
is same as for <pdu> in case of SMS, but without GSM
04.11 SC address field and parameter shall be bounded
by double quote characters like a normal string type
parameter
Not supported
14.5 AT+CMGS Send Message

PDU Mode

Send AT+CMGS=<length> +CMGS:
message <CR><pdu><ctrl- <mr>[,<ackpdu>]
Z/ESC> +CMS ERROR:
<err>
OK
ERROR
Test if the AT+CMGS=? OK
command is ERROR
supported
Description:
Sends a message from a TE to the network (SMS-SUBMIT).
Message reference value <mr> is returned to the TE on successful
message delivery. Optionally, when AT+CSMS <service> value is
1 and there is network support, <ackpdu> is returned. Values can
be used to identify message upon unsolicited delivery status report
result code. If sending fails in a network or an ME error, final
result code +CMS ERROR: <err> is returned.
•<length> must indicate the number of octets coded in the TP layer
data unit to be given (i.e. SMSC address octets are excluded).
•The TA shall send a four character sequence
<CR><LF><greater_than><space> (IRA 13, 10, 62, 32) after
command line is terminated with <CR>; after that PDU can be
given from TE to ME/TA.
•The PDU shall be hexadecimal format (similarly as specified for
<pdu>) and given in one line; ME converts this coding into the
actual octets of PDU.
•When the length octet of the SMSC address (given in the <pdu>)
equals zero, the SMSC address set with command Service Centre
Address +CSCA is used.
•<ctrl-Z> (IRA 26) must be used to indicate the ending of PDU

4/159 35-5/FCP 101 4577 Uen Rev B
•Sending can be aborted by giving <ESC> character (IRA 27).
This character must be sent before the terminating <ctrl-Z> (IRA
26) is sent in order to have any effect.
Defined values:
<mr> Description
Integer 3GPP 23.040 TP-Message-Reference in integer format
type
Integer Value indicating in PDU mode (+CMGF=0), the length
type of the actual TP data unit in octets (i.e. the RP layer
SMSC address octets are not counted in the length).
<pdu> Description
2A (IRA 50 and 65))
format
<ackpdu> Description
... 3GPP 23.040 RP-User-Data element of RP-ACK PDU;
format is same as for <pdu> in case of SMS, but without
GSM 04.11 SC address field and parameter shall be
bounded by double quote characters like a normal string
type parameter
Not supported
14.6 AT+CMSS Send From Storage

PDU mode
Possible
Description Command
Responses
Send from AT+CMSS=<index>[,<da>[,<toda>]] +CMSS:
storage <mr>
+CMS

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Responses
ERROR:
<err>
OK
ERROR
Test if the AT+CMSS=? OK
command is ERROR
supported
Description:
Sends message with location value <index> from message storage
<mem2> to the network (SMS-SUBMIT or SMS-COMMAND).
Reference value <mr> is returned to the TE on successful message
delivery. If sending fails in a network or an ME error, final result
code +CMS ERROR: <err> is returned. See AT+CPMS Preferred
Message Storage for definition and setting of <mem2>
Note: Parameters <da> and <toda> will be accepted without error

but ignored (they will not override the values stored in the message
<pdu>).
Defined values:
<index> Description
<mr> Description
Integer GSM 03.40 TP-Message-Reference in integer format
type
14.7 AT+CMGD Delete Message

Common for both PDU and Text modes

Delete AT+CMGD=<index>[, +CMS ERROR: <err>
message <delflag>] OK
ERROR
Test if the AT+CMGD=? +CMGD: (list of
supported <index>s[,list of
supported

4/159 35-5/FCP 101 4577 Uen Rev B
<delflag>s]
OK
ERROR
Description:
Deletes message from preferred message storage <mem1> location
<index>. If <delflag> is present and not set to 0, the ME ignores
<index> and acts according to the definition of <delflag> in the
table shown below. If <delflag> is omitted, only the entry in
<index> will be deleted.
If deleting fails, final result code +CMS ERROR: <err> is
returned. Test command shows the valid memory locations.
Defined values:
<index> Description
<delflag> Description
0 Delete the message specified in <index>. Default.
1 Delete all read messages from preferred messages
storage, leaving unread messages and stored mobile
originated messages (whether sent or not) untouched.
2 Delete all read messages from preferred message storage
and sent mobile originated messages, leaving unread
messages and unsent mobile originated messages
untouched.
3 Delete all read messages from preferred message storage
and unsent mobile originated messages leaving unread
messages untouched.
4 Delete all messages from preferred message storage
including unread messages.
14.8 AT+CMGL List Message

PDU Mode

List AT+CMGL=[<stat>] +CMGL:
message <index>,<stat>,[<alpha>],
<length>
<CR><LF><pdu>[<CR><L
F>

4/159 35-5/FCP 101 4577 Uen Rev B
+CMGL:
<index>,<stat>,[<alpha>],
<length>
<CR><LF><pdu>[…]]
+CMS ERROR: <err>
Test if the AT+CMGL=? +CMGL: (list of supported
command <stat>s)
is
supported
Description:
Note: Returns messages with status value <stat> from preferred
message storage <mem1> to the TE. Entire data units <pdu> are
returned. If status of the message is ‘received unread’, status in the
storage changes to ‘received read’. If listing fails, final result code
+CMS ERROR: <err> is returned.
See +CPMS for definition of <mem1>
Defined values:
<stat> Description
Integer type Indicates status of message in memory.
0 Received unread message (i.e. new message)
1 Received read message
3 Stored sent message (only applicable to SMs)
4 All messages (only applicable to +CMGL
command)
Default value
<index> Description
<alpha> Description
String Will be left empty but not omitted
type

4/159 35-5/FCP 101 4577 Uen Rev B
<pdu> Description
2A (IRA 50 and 65))
format
Example:
AT+CMGF=1
+CMGL: 1,1,,91
07919107739613F2000A81000000000032007040709074348A536
176594E07B4DFE234BBEC62A7ED65D7F8DD0651CB6E777A0
E7296EF731D485A9F97C9F3751A242FD3D3F2F21C6496BFDB
207AD9ED4ECF416133BD2C0711C3F6F41C34ACC341F7B41B
+CMGL: 2,1,,85
07919107739613F2000A81000000000032007040705170428A4C6
176594E07B4DFE234BBEC62A7ED65D7F8DD0651CB6E777A0
E7296EF731D4828CF87DD20FA3DED9E83E0753AA8EA9ABA
406937FD0D2286EDE93968588783E6E5767A0E
OK
AT+CMGL=?
+CMGL: (0-4)
OK
14.9 AT+CMGR Read Message

PDU Mode

Read AT+CMGR= +CMGR:
message <index> <stat>,[<alpha>],<length>]
<CR><LF><pdu>
+CMS ERROR: <err>
OK
ERROR
Test if the AT+CMGR=? OK
command is ERROR
supported
Description:
4/159 35-5/FCP 101 4577 Uen Rev B
Returns message with location value <index> from preferred
message storage <mem1> to the TE. Status of the message and
entire message data unit <pdu> is returned. If status of the message
is ‘received unread’, status in the storage changes to ‘received
read’. If reading fails, final result code +CMS ERROR: <err> is
returned.
See +CPMS for definition of <mem1>
Defined values:
<stat> Description
Integer type Indicates the status of message in memory.
0 Received unread message (i.e. new message)
1 Received read message
3 Stored sent message (only applicable to SMs)
<index> Description
<alpha> Description
String type Will be left empty but not omitted
<pdu> Description
2A (IRA 50 and 65))
format

4/159 35-5/FCP 101 4577 Uen Rev B
14.10 AT +CMMS More Messages to Send
Parameter Command Syntax
Description Command Possible response(s)

Set mode of SMS relay +CMMS=[<n>]
protocol link
Read the current setting +CMMS? +CMMS: <n>
Test command to show if +CMMS=? +CMMS: (list of
the command is supported <n>s)
supported
Description
Set command controls the continuity of SMS relay protocol link. When
feature is enabled (and supported by network) multiple messages can be
sent much faster as link is kept open.
Test command returns supported values as a compound value.
Defined Values
<n> Description
0 Disable
1 Keep enabled until the time between the response of the latest
message send command (+CMGS, +CMSS, etc.) and the next
send command exceeds 1-5 seconds, then ME shall close the
link and switch <n> automatically back to 0
2 Enable (if the time between the response of the latest message
send command and the next send command exceeds 1-5
seconds, ME shall close the link but TA shall not switch
automatically back to <n>=0)
14.11 AT+CNMI New Message Indications to TE

PDU Mode

Set new AT+CNMI=[<mode> +CMS ERROR:
message [,<mt>[,<bm>[,<ds>[,<bfr> <err>
indication ]]]]] OK
to TE
ERROR
Show the AT+CNMI? +CNMI:
current <mode>,<mt>,
setting <bm>,<ds>,<bf
r>
OK
ERROR

4/159 35-5/FCP 101 4577 Uen Rev B
Show if AT+CNMI=? +CNMI:
the (list of supported
command <mode>s),
is (list of supported
supported <mt>s),
(list of supported
<bm>s),
(list of supported
<ds>s),
(list of supported
<bfr>s
OK
ERROR
Description:
Selects the procedure for the way in which new messages received
from the network, are indicated to the TE when it is active, e.g.
DTR signal is ON. If the TE is inactive (DTR signal is OFF),
message receiving is carried out as specified in GSM 03.38 (3G TS
23.038).
If the command fails and the error is related to mobile equipment
or network, the final result code CMS ERROR: <err> is returned.
Defined values:
<mode> Description
0 Indication mode to buffer in TA Not supported
1 Indication mode to discard Not supported
2 Indication mode to buffer in TA while TA-TE link is reserved
(e.g. in online data mode) and flush to TE when the link is
unreserved. Otherwise, forward them directly to the TE.
Default & only supported value
<mt> Description
0 No SMS-DELIVER indications are routed to the TE.
Use <mem3> as preferred storage.
Default value
1 SMS-DELIVER is stored into ME/TA and the indication of the
memory location is routed to the TE using unsolicited result
code:
+CMTI: <mem>,<index>
2 Class 0, class 1, and class 3 SMS-DELIVERs are routed directly

4/159 35-5/FCP 101 4577 Uen Rev B
<mt> Description
to the TE using the unsolicited result code but not stored in
ME/TA:
+CMT:[<alpha >], <length><CR><LF><pdu> (PDU mode)
Class 2 messages are handled as if <mt>=1
3 Class 3 SMS-DELIVERs are routed directly to TE using
unsolicited result codes +CMT: <length><CR><LF><pdu>.
Class 3 SMS-DELIVER is not stored in ME/TA. Messages of
other data coding schemes result in indication as defined in
<mt>=1
Note: See below for a table showing the indication and message destination
dependency on SMS Class.
<bm> Description
0 Store message to “BM” (or some manufacturer specific
memory). No CBM indications are routed to the TE
Default value
2 New CBMs are routed directly to the TE using unsolicited
result code:
+CBM: <length><CR><LF><pdu> (PDU mode). New CBMs
are not stored in CBM memory
<ds> Description
0 No SMS-STATUS-REPORTs are routed to the TE. SMS-STATUS-
REPORT is not stored in ME/TA
Default value
1 SMS-STATUS-REPORTs are routed to the TE using unsolicited
result code: +CDS: < length>< CR>< LF>< pdu> (PDU mode).
SMS-STATUS-REPORT is not stored in ME/TA
2 SMS-STATUS-REPORTs are routed to the TE using unsolicited
result code: +CDSI: < mem><index> (PDU mode enabled).
SMS-STATUS-REPORT is stored in ME/TA
Not supported
<bfr> Description
command is flushed to the TE when <mode> 1..3 is entered
(OK response shall be given before flushing the codes).

4/159 35-5/FCP 101 4577 Uen Rev B
<bfr> Description
command is cleared when <mode> 1..3 is entered
Not supported
Unsolicited Result codes:
+CMT: <length><CR><LF><pdu>
+CBM: <length><CR><LF><pdu>
+CDS: <length><CR><LF><pdu>
Indication and destination of message routing vs. SMS class and <mt>
setting.
Destination
SMS Destination
<mt> Indication CPMS
Class CPMS<mem3>="SM"
<mem3>="ME"
none 0 none ME SM
none 1 +CMTI... ME SM
none 2 +CMT... TE TE
none 3 +CMTI... ME SM
0 0 none ME SM
0 1 +CMTI... ME SM
0 2 +CMT... TE TE
0 3 +CMTI... ME SM
1 0 none ME SM
1 1 +CMTI... ME SM
1 2 +CMT... TE TE
1 3 +CMTI... ME SM
2 0 none SM SM
2 1 +CMTI... SM SM
2 2 +CMTI... SM SM
2 3 +CMTI... SM SM
3 0 none ME SM
3 1 +CMTI ME SM
3 2 +CMT... TE TE
3 3 +CMT... TE TE

4/159 35-5/FCP 101 4577 Uen Rev B
14.11.1 +CMTI New Message Indication Unsolicited
Response
Description:
An Unsolicited Response indicating that a message is received.
AT+CNMI is used to control the format of the message received
indication.
Defined values:
<mem> Description
“ME” ME message storage
“SM” SIM message storage
<index> Description
14.11.2 +CMT Received Message Unsolicited Response

Description:
An Unsolicited Response indicating a Short Message is received
and routed directly to TE. AT+CNMI is used to control the format
of the message received indication.
+CMT: <length><CR><LF><pdu>
Defined values:
integer Value indicating in PDU mode (+CMGF=0), the length of
<pdu> Description
Unquoted In the case of SMS: GSM 04.11 SC address followed by
string GSM 03.40 TPDU in hexadecimal format: ME/TA
2A (IRA 50 and 65))
In the case of CBS: GSM 03.41 TPDU in hexadecimal
format

4/159 35-5/FCP 101 4577 Uen Rev B
14.11.3 +CBM Received Cell Broadcast Unsolicited
Response
Description:
An Unsolicited Response indicating a Cell Broadcast Message is
received and routed directly to TE. AT+CNMI is used to control
the format of the message received indication.
+CBM: <length><CR><LF><pdu>
Defined values:
<pdu> Description
2A (IRA 50 and 65))
format
14.11.4 +CDS SMS Status Report Unsolicited Response

Description:
An Unsolicited Response indicating sent message status.
+CDS: <length><CR><LF><pdu>
Defined values:
<pdu> Description
2A (IRA 50 and 65))
4/159 35-5/FCP 101 4577 Uen Rev B
<pdu> Description
format
14.12 AT+CPMS Preferred Message Storage

Set AT+CPMS=<mem1> +CPMS:
preferred [,<mem2>] <used1>,<total1>,<used
message [,<mem3>] 2>,<total2>,<used3>,<t
storage otal3>
+CMS ERROR: <err>
OK
ERROR
Show the AT+CPMS? +CPMS:
current <mem1>,<used1>,<total
setting 1,
<mem2>,<used2>,<total
2,
<mem3>,<used3>,<total
3>
+CMS ERROR: <err>
OK
ERROR
Test if the AT+CPMS=? +CPMS: (list of supported
command <mem1>s),(list of
is supported <mem2>s),(list
supported of supported <mem3>s)
OK
ERROR
Description:
Selects memory storage <mem1>, <mem2> and <mem3> to be
used for reading, writing, etc. If chosen storage is not appropriate
for the ME, final result code +CMS ERROR: <err> is returned.
Test command returns lists of memory storage supported by the
TA.
The setting made by AT+CPMS=.... is valid for all channels.
The current setting applied via AT+CPMS will not be maintained
over a power cycle.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
<mem1> Description
string Memory from which messages are read and deleted
type (commands List Messages +CMGL, Read Message
+CMGR and Delete Message +CMGD)
“SM” SIM message storage. Default value
<mem2> Description
string Memory to which writing and sending operations are
type made (commands Send Message from Storage +CMSS
and Write Message to Memory +CMGW)
<mem3> Description
string Memory to which received SMSs are preferred to be
type stored (unless forwarded directly to TE).
<used1>,<used2>,<used3> Description
integer type Total number of messages currently in
<mem1>, <mem2> and <mem3>
respectively
<total1>,<total2>
Description
,<total3>
integer type Total number of message locations in
<mem1>, <mem2> and <mem3>
respectively
Examples:
AT+CPMS=?
+CPMS: (“ME”,“SM”),(“ME”,“SM”),("ME",“SM”)
OK
AT+CPMS?
+CPMS: “ME”,0,100,“SM”,0,13,“SM”,0,13
OK
4/159 35-5/FCP 101 4577 Uen Rev B
AT+CPMS=“me”,“me”,“sm”
+CPMS: 0,100,0,100,0,13
OK
14.13 AT+CSCA Service Centre Address


Set service centre AT+CSCA=<sca> OK
address [,<tosca>] ERROR
Show the current AT+CSCA? +CSCA:
setting <sca>,<tosca>
OK
ERROR
Test if the command AT+CSCA=? OK
is supported ERROR
Description:
Updates the SMSC address, through which mobile originated SMs
are transmitted. In text mode, the setting is used by send (+CMGS)
and write (+CMGW) commands. In PDU mode, the setting is used
by the same commands, but only when the length of the SMSC
address coded into <pdu> parameter equals zero. Note that a “+” in
front of the number in <sca> has precedence over the <tosca>
parameter, so that a number starting with “+” will always be treated
as an international number.
Defined values:
<sca> Description
string 3GPP TS 24.011 RP SC address Address-Value field in
type string format; BCD numbers (or GSM default alphabet
characters) are converted to characters of the currently
selected TE character set
<tosca> Description
integer 3GPP TS 24.011 RP SC address type-of-address octet
type in integer format
129 ISDN/telephony numbering plan,
national/international unknown
Default if no "+" in sca.
145 ISDN/telephony numbering plan, international number
Default if "+" in sca.

4/159 35-5/FCP 101 4577 Uen Rev B
<tosca> Description
161 ISDN/telephony numbering plan, national number
128-255 Other values refer 3GPP 24.008
Example:
AT+CSCA?
+CSCA: “44385016005”,145
OK
14.14 AT+CSCS Select Character Set

Set command informs AT+CSCS=<chset> OK
TA which character set ERROR
is used by the TE
Show the current AT+CSCS? +CSCS: <chset>
setting OK
ERROR
Test if the command is AT+CSCS=? +CSCS: (list of
supported supported
<chset>s)
OK
ERROR
Description:
This command informs the TA which character set <chset> is used
by the TE. The TA is then able to convert character strings correctly
between TE and ME character sets.
When TA-TE interface is set to 8-bit operation and the used TE
alphabet is 7-bit, the highest bit shall be set to zero.
Read command shows current setting and test command display
conversion schemes implemented in the TA.
Defined values:
<chset> Description
“UCS2” Unicode, 16-bit Universal Multiple Octet Coded
Character Set 2 (ISO/IEC 10646)
“GSM” GSM default alphabet (3GPP 23.038). Note this setting
causes software flow control (Xon/Xoff) problems.
Default value
“IRA” International reference alphabet (ITU-T T.50). Note this
is the recommended default setting by 3GPP 27.007
“8859- ISO 8859 graphic character sets, where n is an integer
4/159 35-5/FCP 101 4577 Uen Rev B
<chset> Description
n” (1-6,C,A,G,H) that indicates the specific character set.
Only the 8859-1 Latin1 character set is supported.
"UTF- Universal text format, 8 bit
8"
Example:
AT+CSCS?
+CSCS: “GSM”
OK
14.15 AT+CSMP Set Text Mode Parameters

Only Applicable to Text Mode

Set the text AT+CSMP=[<fo> +CME ERROR: <err>
mode [,<vp>[,<pid> OK
parameters [,<dcs>]]]]
ERROR
Show the AT+CSMP? +CSMP:
current <fo>,<vp>,<pid>,<dcs>
setting +CME ERROR: <err>
Test if the AT+CSMP=? OK
command is
supported
Description:
Used to select values for additional parameters needed when SM is
sent to the network or placed in a storage when text format
message mode is selected. It is possible to set the validity period
starting from when the SM is received by the SMSC (<vp> is in
range 0… 255). The <pid> parameter identifies the higher protocol
being used or indicates interworking with a certain type of
telematic service and <dcs> determines the way the information is
encoded as in GSM 03.38.
Defined values:
<fo> Description
0- Depending on the command or result code: first octet of
255 GSM 03.40 SMS-DELIVER, SMS-SUBMIT (default value
17),SMS-STATUS-REPORT, or SMS-COMMAND (Default value
2) in integer format
<vp> Description
0- (TP-VP+1) x 5 minutes (i.e 5 minutes intervals up to 12
4/159 35-5/FCP 101 4577 Uen Rev B
<vp> Description
143 hours)
144- 12 hours + ((TP_VP-143) x 30 minutes) Default value is
167 167.
168- (TP-VP-166) x 1 day
196
197- (TP-VP-192) x 1 week
255
<pid> Description
0-255 Protocol Identifier in integer format. Default value is 0,
according to 07.05 section 9.2.3.9
<dcs> Description
0-255 Data coding scheme. See GSM 03.38. UCS2 and
compressed text not supported. Default value is 0.
14.16 AT+CSMS Select Message Service


Select AT+CSMS=<service> +CSMS:
message <mt>,<mo>,<bm>
service +CMS ERROR: <err>
OK
ERROR
Show the AT+CSMS? +CSMS:
current <service>,<mt>,<mo>,
setting <bm>
OK
ERROR
Test if the AT+CSMS=? +CSMS: (list of
command is supported <service>s)
supported OK
ERROR
Description:
Selects messaging service <service>. It returns the types of
messages supported by the ME: <mt> for mobile terminated
messages, <mo> for mobile originated messages and <bm> for
4/159 35-5/FCP 101 4577 Uen Rev B
broadcast type messages. If the chosen service is not supported by
the ME (but is supported by the TA), final result code +CMS
ERROR: <err> is returned.
Defined values:
0 3GPP 23.040 and 23.041. The syntax of SMS AT
commands is compatible with 3GPP 27.005 Phase 2
version 4.7.0; Phase 2+ features which do not require new
command syntax may be supported (e.g. correct routing
of messages with new Phase 2+ data coding schemes)
2..127 Reserved
<mt> Description
0 Mobile terminated messages not supported
1 Mobile terminated messages supported Default
<mo> Description
0 Mobile originated messages not supported
1 Mobile originated messages supported Default
<bm> Description
0 Broadcast messages not supported
1 Broadcast messages supported Default
14.17 AT*E2CMGA Modify message attribute
Possible
Description Command
Responses
Set AT*E2CMGA=<op>,<index>[,< *E2CMGA:
message attr>] <attr> (for
attribute read operation)
OK
ERROR
Test if the AT*E2CMGA=? *E2CMGA: (list
command of supported
is <op>s),(list of
supported supported

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Responses
<index>es,(list
of supported
<attr>s)
Description:
This command reads or modifies (selected by <op>) the attributes
for a specific message selected by <index>.
Defined values:
<op> Description
0 Read attribute
1 Write attribute
<index> Description
Integer type Index number of message to be modified
(1-65535)
<attr> Description
0 Received-unread
1 Received-read
2 Stored unsent (only for <op>=0, read attribute)
3 Stored sent (only for <op>=0, read attribute)
14.18 AT+CRES Restore SMS Settings

Restore settings AT+CRES[=<profile>] +CMS ERROR:
<err>
OK
ERROR
Test if the AT+CRES=? +CRES: (list of
supported <profile>s)
+CMS ERROR:
<err>
OK
ERROR
4/159 35-5/FCP 101 4577 Uen Rev B
Description:
This command restores message service settings saved by +CSAS
from non-volatile SIM memory to active memory. A SIM can
contain several profiles of settings. Only the settings controlled by
AT+CSCA are stored with this command.
Defined values:
0..1 Profile number where settings are to be stored. Default
value is 0
Note: The ATZ command is used to restore all other parameters
settings. AT+CRES only restores parameters set by AT+CSCA.
14.19 AT+CSAS Save SMS Settings

Save Settings AT+CSAS[=<profile>] +CMS ERROR:
<err>
OK
ERROR
Test if the AT+CSAS=? +CSAS: (list of
supported <profile>s)
+CMS ERROR:
<err>
OK
ERROR
Description:
This command saves active message service settings to SIM
memory. A TA can contain several settings profiles. Only the
settings specified in the Service Centre Address command, +CSCA,
are saved.
Test command displays the supported profile numbers for reading
and writing of settings.
Defined values:
0..1 Manufacturer specific profile number where settings are to
be stored. Default value is 0
Note: The AT&W command is used to save all other parameters
settings. AT+CSAS only stores parameters set by AT+CSCA.

4/159 35-5/FCP 101 4577 Uen Rev B
15 Short Message Services - Cell Broadcast
15.1 AT+CSCB Select Cell Broadcast Message Type

Common for both PDU and text modes

Select cell +CSCB=[<mode>[,< +CMS ERROR: <err>
broadcast mids>[,<dcss>]]] OK
message
ERROR
type
Show the AT+CSCB? +CSCB:
current <mode>,<mids>,<dcss
setting >
OK
ERROR
Test if the AT+CSCB=? +CSCB: (list of
command supported <mode>s)
is OK
supported
ERROR
Description:
Selects which types of CBMs are to be received by the ME.
Note that for mode 0, a value for <dcss> should be entered to
specify which <dcss> should be accepted.
Defined values:
<mode> Description
0 Message types in <mids> and <dcss> are accepted.
Default value.
1 Message types in <mids> and <dcss> are not accepted
Not supported
<mids> Description
string 3GPP 23.041 CBM Message Identifier in integer format.
type All different possible combinations of CBM message
identifiers (refer <mid>) (default is empty string);
e.g. “0,1,5-7”
<dcss> Description
string 3GPP 23.038 CBM Data Coding Scheme in integer format.
4/159 35-5/FCP 101 4577 Uen Rev B
<dcss> Description
type All different possible combinations of CBM data coding
schemes (refer <dcs>) (default is empty string); e.g. "0-
3,5"
Example:
AT+CSCB?
+CSCB: 0,“50”,"1"
OK
15.2 AT*EMWI Message Waiting Indication

Notes:
* - SIM is required for query.
** - Query will not operate in CFUN mode 4.

Set message AT*EMWI OK
waiting indication =<mode> +CME ERROR: <err>
Shows the current AT*EMWI? *EMWI: <mode>+CME
setting ERROR: <err>
Show if the AT*EMWI=? *EMWI: (list of supported
command is <mode>s)
supported +CME ERROR: <err>
Response *EMWI: <unsolicited>,
<status>, (<count>)
Description:
This command interrogates voice mail status. This AT command
shall provide an indication of waiting messages and message count
if available. An unsolicited result code shall be enabled/disabled to
inform the host of a new message waiting. The host can read at
power up. USIM file contents shall have priority over CPHS
contents.
Defined values:
<mode> Description
0 Disable unsolicited voice mail indication.
1 Enable unsolicited voice mail indication. Default value.
2 Query voice mail indication for all lines.
<unsolicited> Description
0 This is a solicited response.

4/159 35-5/FCP 101 4577 Uen Rev B
<unsolicited> Description
1 This is an unsolicited response.
0 The specific line has no voice mail waiting.
1 The specific line has voice mail waiting.
<count> Description
0- Integer type. Count of messages waiting, if available.
255
Example:
Query command
AT*EMWI=2
*EMWI: 0,1,1
OK

4/159 35-5/FCP 101 4577 Uen Rev B
16 SIM Commands
16.1 AT+CRSM Restricted SIM Access

Transmit AT+CRSM=<command +CRSM:
command >[,<fileid>[, <sw1>,<sw2>[,<respo
<P1>,<P2>,<P3>[,<da nse>]
ta>[,<pathid>]]]] +CME ERROR: <err>
Test if the AT+CRSM=? OK
command
is
supported
Description:
By using this command instead of Generic SIM Access +CSIM TE
application has easier but more limited access to the SIM database.
This command transmits to the MT the SIM <command> and its
required parameters. MT handles internally all SIM-MT interface
locking and file selection routines. As response to the command,
MT sends the actual SIM information parameters and response data.
MT error result code +CME ERROR may be returned when the
command cannot be passed to the SIM, but failure in the execution
of the command in the SIM is reported in <sw1> and <sw2>
parameters.
The TE should be aware of the precedence of the GSM/UMTS
application commands internal to the MT over the commands
issued by the TE.
When accessing a SIM/USIM some <fileid> values are common
between the different directory paths. In order to unambiguously
specify which common <fileid> is intended the command *ECDF
must first be used to select the active directory path to be used by
+CRSM.
Note that the *ECDF command effectively sets the active directory
for all subsequent +CRSM use.
Even if an EF can be uniquely identified by its <fileid> alone, if the
correct directory has not been selected by *ECDF then the file will
not be accessible.
Defined values:
<command> Description (SIM commands defined in 3GPP 51.011)

176 READ BINARY
178 READ RECORD
192 GET RESPONSE
4/159 35-5/FCP 101 4577 Uen Rev B
<command> Description (SIM commands defined in 3GPP 51.011)
214 UPDATE BINARY
220 UPDATE RECORD
Other Reserved
values
NOTE 1: The MT internally executes all commands necessary for
selecting the desired file, before performing the actual command.
<fileid> Description
decimal Identifier of a elementary datafile on SIM. Mandatory
integer for every command except GET RESPONSE
The values are defined in 3GPP 51.011.
NOTE 2: The range of valid file identifiers depends on the actual SIM
and is defined in 3GPP 51.011. Optional files may not be present at all.
<p1>,<p2>,<p3> Description
integer Parameters passed on by the MT to the SIM.
These parameters are mandatory for every
command, except GET RESPONSE.
The values are defined in 3GPP 51.011
<data> Description
hexadecimal character data Information which shall be
(refer to +CSCS) written to the SIM
<pathid> Description
hexadecimal The path of an elementary file on the SIM/UICC
string type in hexadecimal format as defined in ETSI TS
102 221
<sw1>,<sw2> Description
integer Information from the SIM about the execution of the
actual command. These parameters are delivered to
the TE in both cases, on successful or failed
execution of the command

4/159 35-5/FCP 101 4577 Uen Rev B
<response> Description
hexadecimal Response of a successful completion of the
command previously issued
The GET RESPONSE command return data which
gives information about the current elementary
datafield. This information includes the type of file
and its size (refer to 3GPP 51.011)
After the READ BINARY or READ RECORD command,
the requested data will be returned
A <response> is not returned after a successful
UPDATE BINARY or UPDATE RECORD command
Command Help
The AT+CRSM description in the 27.007 spec only shows the general
syntax, and refers the reader to other specs for specific SIM/USIM
commands. Here are a few specific examples.
READ BINARY:
AT+CRSM=176,<fileid>,<OffsetHi>,<OffsetLo>,<Len>
UPDATE BINARY:
AT+CRSM=214,<fileid>,<OffsetHi>,<OffsetLo>,<Len>,"<data>"
READ RECORD:
AT+CRSM=178,<fileid>,<RecNum>,<mode>,<RecLen>
UPDATE RECORD:
AT+CRSM=220,<fileid>,<RecNum>,<mode>,<RecLen>,"<data>"
Parameters:
<fileid> Must be entered in decimal
<RecNum> Record number, starting at record 1.
<mode> 2=Next record. <RecNum> must be 0.
3=Previous. <RecNum> must be 0.
4=Absolute. If <RecNum> = 0, then Current record.
<Len> Length of file, in bytes.
<RecLen> Length of record, in bytes.
<data> Hex data, two hex digits per byte.
Examples:
Read record 1 of linear fixed file 0x6F47 (28487). It has 30 bytes/record.
AT+CRSM=178,28487,1,4,30
+CRSM:
144,0,"00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFF"
Read the next record.

AT+CRSM=178,28487,0,2,30

4/159 35-5/FCP 101 4577 Uen Rev B
+CRSM:
144,0,"00FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFF"
Update record 1.
AT+CRSM=220,28487,1,4,30,"1111111111111111111111111111111111
11111111111111111111111111"
+CRSM: 144,0
Read binary file 6F7E (28542). It has 11 bytes.

AT+CRSM=176,28542,0,0,11
+CRSM: 144,0,"FFFFFFFF130130012D0001"
Update binary file 6F7E.

AT+CRSM=214,28542,0,0,11,"0123456789ABCDEF012345"
+CRSM: 144,0
16.2 AT+CPIN PIN Control
Possible
Description Command
Responses
Request PIN Control AT+CPIN=<pin>[,<newpin>] +CME
ERROR:
<err>
OK
ERROR
Show the current AT+CPIN? +CPIN:
setting <code>
+CME
ERROR:
<err>
OK
ERROR
Test if the AT+CPIN=? +CME
command is ERROR:
supported <err>
OK
ERROR
Description:
Sends the password to the ME, which is necessary to make the ME
operational (SIM PIN or SIM PUK). If the PIN is to be entered
twice, the TA autonomously repeats the PIN. If no PIN request is
4/159 35-5/FCP 101 4577 Uen Rev B
pending, no action is taken towards the ME and an error message
(+CME ERROR <err>) is returned to the TE.
If the PIN required is PUK, the second pin is required. This second
PIN, <newpin>, is used to replace the old PIN in the SIM in the
active application in the UICC (GSM or USIM) or SIM card.
Note:
Commands which interact with MT that are accepted when MT is
pending SIM PIN or SIM PUK are: +CGMI, +CGMM, +CGMR,
+CGSN, D112; (emergency call), +CPAS, +CFUN, +CPIN and
+CIND (read and test command only).
Defined values:
<pin>,<newpin> Description
string The range for the SIM PIN is 4 - 8 digits. The SIM
PUK consists of 8 digits.
PH-NET PIN, PH-NETSUB PIN, PH-SP PIN, PH-CORP
PIN, PH-ESL PIN and PH-SIMLOCK PIN are 8-16
digits.
<code> Description
READY MT is not pending for any password
SIM PIN ME is waiting for UICC/SIM PIN to be given
SIM PUK ME is waiting for UICC/SIM PUK to be given
PH-SIM ME is waiting for ME_lock_code password to be given
PIN (PCK in 3GPP 22.022).
SIM PIN2 ME is waiting active application in the UICC (GSM or
USIM) or SIM card PIN2 to be given (this <code> is to
be returned only when the last executed command
resulted in PIN2 authentication failure (i.e. +CME
ERROR: 17); if PIN2 is not entered right after the
failure, the ME does not block its operation)
SIM PUK2 ME is waiting active application in the UICC (GSM or
USIM) or SIM card PUK2 to be given (this <code> is to
be returned only when the last executed command
resulted in PUK2 authentication failure (i.e. +CME
ERROR: 18); if PUK2 and new PIN2 are not entered
right after the failure, the ME does not block its
operation)
PH-NET ME is waiting network personalization password to be
PIN given (NCK in 3GPP 22.022).
PH- ME is waiting network subset personalization password
NETSUB to be given (NSCK in 3GPP 22.022).
PIN
4/159 35-5/FCP 101 4577 Uen Rev B
<code> Description
PH-SP PIN ME is waiting service provider personalization
password to be given (SPCK in 3GPP 22.022).
PH-CORP ME is waiting corporate personalization password to
PIN be given (CCK in 3GPP 22.022).
PH-ESL- Extended SIM-Lock. Ericsson specific
PIN
BLOCKED The SIM card is blocked for the user.
Example:
AT+CPIN=“0000”
OK
16.3 AT*EPEE Pin Event

Enable/disable PIN1 AT*EPEE=<onoff> +CME ERROR:
code events <err>
OK
ERROR
Read the current status AT*EPEE? *EPEE: <onoff>
for PIN1 Code Request +CME ERROR:
<err>
OK
ERROR
Test if the command is AT*EPEE=? *EPEE: (list of
supported supported
<onoff>s)
+CME ERROR:
<err>
OK
ERROR
Description:
The command requests the module to report when the PIN1 code
has been entered and accepted.
<onoff> Description
0 Request for report on correctly entered PIN1 code is not
activated (off). Default value
1 Request for report on correctly inserted PIN1 code is
activated (on)

4/159 35-5/FCP 101 4577 Uen Rev B
16.3.1 *EPEV Pin Event Unsolicited report
The *EPEV PIN Event code unsolicited response is issued when a
pin code has been entered and accepted. The unsolicited reports are
enabled using the AT*EPEE command (see above).
The *EPEV unsolicited response has the following syntax (no
parameters): *EPEV
16.4 AT*E2SSN SIM Serial Number

Request SIM Serial number AT*E2SSN <SSN>
Shows if the command is AT*E2SSN= OK
supported ? ERROR
Description:
This command requests the SIM serial number held in the ICCid
field (address 2FE2) on the SIM and returns all valid characters to
the TE. This field is detailed in GSM 11.11 section 10.1.1.
Defined values:
<SSN> Description
String without double quotes SIM serial number
Examples:
AT*E2SSN
8944110063503224707
OK
where the raw data contained in the ICCid field on the SIM is
984411003605234207F7.
Test command:
AT*E2SSN=?
OK
16.5 AT+CIMI Subscriber Identification

Read IMSI AT+CIMI <IMSI>
+CME ERROR <err>
OK
ERROR
Test if the command is AT+CIMI OK
supported =? ERROR
Description:

4/159 35-5/FCP 101 4577 Uen Rev B
Causes the TA to return <IMSI>, identifying the individual SIM
attached to the ME.
Defined values:
<IMSI> Description
string without double International Mobile Subscriber
quotes Identity
Examples:
AT+CIMI
234157411545420
OK
16.6 AT*EPIN Additional PIN Information

Request PIN AT*EPIN? *EPIN:<chv1>,<unbl_chv1>,
information <chv2>,<unbl_chv2>
OK
ERROR
+CME ERROR <err>
Test if the AT*EPIN=? OK
command is ERROR
supported
Description:
This command returns the number of remaining attempts of
entering the correct PIN code for the SIM card in use. The
command returns the number of remaining attempts for both PIN1
(CHV1), PIN2 (CHV2), PUK1 (unblock CHV1) and PUK2
(unblock CHV2).
The user has 3 attempts of entering the correct PIN. If unsuccessful
the third time, the SIM will be Blocked. The attempts can occur in
separate sessions.
This command is available without SIM access.
The setting is persistent through a power cycle.
Defined values:
<chv1>,<cvh2> Description
0 No more attempts remain
1..3 Number of remaining attempts

4/159 35-5/FCP 101 4577 Uen Rev B
<unbl_chv1>,<unbl_cvh2> Description
0 No more attempts remain
1..10 Number of remaining attempts
16.7 AT+CEAP EAP Authentication

Exchange AT+CEAP=<dfname>, +CEAP:
EAP <EAPMethod>, <EAPsessionid>
packets <EAP_packet_data>[,<DFeap>] ,
<EAP_packet_re
sp>
+CME ERROR:
<err>
current
setting
Test AT+CEAP=? OK
command +CME ERROR:
to show if <err>
the
command
is
supported
Description:
This command allows a TE to exchange EAP packets with the
UICC or the ME.
Prior to the execution of this command, the TE shall retrieve the
available AIDs using the +CUAD command. The TE shall select
one appropriate AID to be addressed. Selection may include asking
the user, and considering EAP methods supported by the AIDs. The
TE shall set the <dfname> value using the selected AID and shall
set the <EAPMethod> value to the requested EAP method. The TE
may set the <DFeap> value to the directory file identifier that is
applicable to the <EAPMethod>; which is derived from the
discretionary data returned by +CUAD. The parameter is mandatory
for EAP terminated in UICC.
If the targeted application on the UICC does support the requested
EAP method, the MT shall use the value provided in <DFeap>, and
it shall transmit the <EAP_packet_data> to the UICC application
using the Authenticate APDU command as defined in ETSI TS 102
310. The appropriate DFEAP in the ADF must be selected prior to
the submission of an EAP Authenticate command with the <EAP
packet data>. Then the EAP Response data sent by the UICC

4/159 35-5/FCP 101 4577 Uen Rev B
application in its response to the Authenticate command shall be
provided to the TE in <EAP_packet_resp>.
If the targeted application on the UICC does not support the
requested EAP method and if the MT does support this method then
the <EAP packet data> shall be handled by the MT. During the
handling of the EAP method, the MT shall run the authentication
algorithm on the SIM or USIM, respectively.
Also the MT has to allocate an <EAPsessionid> in order to identify
an EAP session and its corresponding keys and parameters.
If neither the MT nor the appropriate UICC application support the
requested EAP method, the MT shall respond with CME ERROR:
49, (EAP method not supported).
Note that this implementation supports only UICC handling of EAP
methods.
Defined values:
<dfname> Description
Hexadecimal all selectable applications represented in the
String type UICC by an AID are referenced by a DF name
coded on 1 to 16 bytes.
<EAPMethod> Description
Hexadecimal this is the EAP Method Type as defined in RFC
String type 3748 in 1 byte format or in 8 byte expanded
format.
<EAP_packet_data> Description
Hexadecimal String type as defined in ETSI TS 102 310
<DFeap> Description
Hexadecimal Contains the DF(EAP) associated with the
String type specified <EAPMethod> on the SIM/UICC as
defined in ETSI TS 102 310
<EAPsessionid> Description
Integer type this is the identifier of the EAP session to be used in
order to retrieve the EAP parameters with the +CERP
command. Value range is from 1 to 4294967295

4/159 35-5/FCP 101 4577 Uen Rev B
<EAP_packet_resp> Description
Hexadecimal String type as defined in ETSI TS 102 310
16.8 AT+CERP EAP Retrieve Parameters

Retreive +CERP=<EAPsessi +CERP:<EAP_parameter_res
EAP onid>,<EAPparam ponse>
parameters eter> +CME ERROR: <err>
current
setting
Test AT+CERP=? OK
command +CME ERROR: <err>
to show if
the
command
is
supported
Description:
This command allows a TE to retrieve EAP session parameters /
derived keys after a run of the +CEAP command. If the EAP
session is handled by the UICC then the MT shall return the content
of the elementary file corresponding to the indicated
<EAPparameter>. Those EFs are defined in ETSI TS 102 310.
If the MT handles the EAP session then the MT shall return the
corresponding parameter encoded as defined for EAP files, see
ETSI TS 102 310.
For example, the keys shall be retrieved in the TLV format
described in ETSI TS 102 310.
If neither the MT nor the appropriate UICC application can provide
the requested information (e.g. because the requested EAP session
ID does not exist), the MT will respond with CME ERROR: 50,
(Incorrect parameters).
Note that this implementation supports only UICC handling of EAP
methods.
Defined values:
<EAPparameter> Description
01 Keys
02 Status

4/159 35-5/FCP 101 4577 Uen Rev B
<EAPparameter> Description
03 Identity
04 Pseudonym
<EAPsessionid> Description
Integer type this is the identifier of the EAP session to be used in
order to retrieve the EAP parameters corresponding
to an active EAP session with EAP Retreive
Parameters +CERP command.
<EAP_parameter_response> Description
Hexadecimal string depends on the value of
<EAPparameter>; format of the
parameter response is as defined in ETSI
TS 102 310
16.9 AT+CUAD UICC Application Discovery

Read the available UICC +CUAD +CUAD:
applications <response>
+CME ERROR:
<err>
Read the current setting Not
applicable
Test command to show if the AT+CUAD=? OK
command is supported +CME ERROR:
<err>
Description:
This command asks the MT to discover what applications are
available for selection on the UICC. According to TS 102.221, the
ME shall access and read the EFDIR file in the UICC and return the
values that are stored in its records. Each record contains the AID
and optionally application parameters of one of the applications
available on the UICC.
Defined values:
<response> Description
Hexedecimal string the response is the content of the EFDIR

4/159 35-5/FCP 101 4577 Uen Rev B
17 SIM Application Toolkit
17.1 AT*ESTKMENU Menu Selection
Possible
Description Command
responses
Do the menu selection AT*ESTKMENU=<item> +CME
ERROR
<err>
OK
ERROR
Test if the command is AT*ESTKMENU=? +CME
supported ERROR
<err>
OK
ERROR
Description:
User has selected a menu item set up by the SET UP MENU
proactive command from the SIM/USIM.
Defined values:
<item> Description
Integer The identifier is a single byte between 1 and 255. It
type identifies the selected menu item corresponding to
SET-UP MENU command.
17.2 AT*ESTKRES Terminal Response

Send the AT*ESTKRES=<command OK
TERMINAL >,<result>,[<result2>],[ +CME ERROR: <err>
RESPONSE <text>],[<id>]
Test if the AT*ESTKRES=? OK
command ERROR
is
supported
Description:
This AT command provides the method for responding to the
SIM/USIM Toolkit commands. The host will provide as much
information that it knows. In some instances, the wireless
4/159 35-5/FCP 101 4577 Uen Rev B
modem device will have more detailed information and is
expected to provide this in the TERMINAL RESPONSE sent to
the SIM/USIM.
Defined values:
<command> Description
0 DISPLAY TEXT
1 GET INKEY
2 GET INPUT
3 PLAY TONE
4 SELECT ITEM
5 SEND SS
6 SEND USSD
7 SET UP CALL
8 SET UP MENU
9 BLANK
10 REFRESH
11 SEND SHORT MESSAGE
12 OPEN CHANNEL
13 CLOSE CHANNEL
14 RECEIVE DATA
15 SEND DATA
<result> Description
decimal value for <result> must be entered as a decimal
integer integer as listed.
0 Command performed successfully
1 Command performed with partial comprehension
2 Command performed with missing information
3 REFRESH performed with additional EFs read
4 Command performed successfully but requested
icon could not be displayed
5 Command performed but modified by call control by
SIM
6 Command performed successfully, limited service
7 Command performed with modification
16 Proactive SIM/USIM session terminated successfully

4/159 35-5/FCP 101 4577 Uen Rev B
17 Backward move in proactive SIM/USIM session
requested
18 No response from user
19 Help information required by user
not supported
20 USSD transaction terminated by the user
32 Host currently unable to process command
33 Network currently unable to process command
34 User did not accept call set up request
35 User cleared down call before connection or network
release
36 Action in contradiction with the current timer state
not supported
37 Interaction with call control by SIM, temporary
problem
38 Launch browser generic error
not supported
48 Command beyond host’s capabilities
49 Command type not understood by host
50 Command data not understood by host
51 Command number not known by host
52 SS Return Error (error cause handled by wireless
modem device
53 SMS RPERROR
54 Error, required values are missing
55 USSD Return Error (error cause provide by wireless
modem device
56 Multiple card command error
not supported
57 Interaction with call control by SIM or MO SM control
by SIM, permanent problem
58 Bearer independent Protocol error
<result2> Description
0 No specific cause can be given

4/159 35-5/FCP 101 4577 Uen Rev B
1 Screen is busy
2 Host currently busy on call
3 Host currently busy on SS transaction
7 Not in speech call
8 Host currently busy on USSD transaction
<text> Description
String type 0-9,*,#,+
GSM 3.38 SMS default alphabet (unpacked)
YES/NO
<id> Description
1-255 Identifier of menu item for the SELECT ITEM command
Note: For <command>=7 (SET UP CALL), the <text> parameter is
required as the number to call.
Note: A call that is originated from a SIM proactive command has to be
hung up using the command
AT*estkres=7,16
17.3 AT*ESTKS SIM Application Toolkit Settings
Possible
Description Command
responses
Set the presentation of AT*ESTKS=<on_off> +CME ERROR
the unsolicited result <err>
codes corresponding to OK
STK
ERROR
Show the current AT*ESTKS? *ESTKS:
setting <on_off>
+CME ERROR
<err>
OK
ERROR
Test if the command is AT*ESTKS=? *ESTKS: list of
supported supported
<on_off>

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
responses
+CME ERROR
<err>
OK
ERROR
Description:
Allows the external application to disable or enable the
presentation of the unsolicited result codes corresponding to the
STK commands. Parameter <on_off> is used to disable or enable
the presentation of an unsolicited result code *ESTK. Setting
chosen is stored internally so that it is not necessary to change it
each time the ME is switched on.
If the presentation of the unsolicited result codes is disabled, the
messages below are not sent to the application.
The unsolicited result codes shall be disabled by default.
Defined values:
<on_off> Description
0 Disable the presentation of the unsolicited result codes
related to STK. Default value
1 Enable the presentation of the unsolicited result codes
related to STK
17.4 SIM Toolkit Unsolicited Result Codes
17.4.1 *ESTKCALL Set Up Call
Comman
Possible responses
d
AT*ESTKCALL=<mode>,[<alphaid>],<codetype>,<dest
>,[<duration>,<capabilityconfig>,<CallSetupAlphaId>
Description:
The host will handle the initiation of new calls by the
SIM/USIM Toolkit.
Defined values:
<mode> Description
0 Set up call, but only if not currently busy on another call
1 Set up call, but only if not currently busy on another call,
with redial
2 Set up call, putting all other calls (if any) on hold

4/159 35-5/FCP 101 4577 Uen Rev B
<mode> Description
3 Set up call, putting all other calls (if any) on hold, with
redial
4 Set up call, disconnecting all other calls (if any)
5 Set up call, disconnecting all other calls (if any), with
redial
<alphaid> Description
String Corresponds to Alpha Identifier specified in 51.014
type and 31.111
For <codetype>=0, this is a displayable text string.
For <codetype>=1, this is an ASCII hexadecimal string
representation of the UCS2 2-octet characters.
<codetype> Description
0 SMS default alphabet
1 UCS2 alphabet
<dest> Description
Destination address (called party number)
<duration> Description
integer type redial duration (milliseconds)
Response
The response to SET UP CALL is TERMINAL RESPONSE as
follows
AT*ETSTKRES=7,<result>,<dialstring>,<result2>
17 Backward move in proactive SIM/USIM session requested
32 Host currently unable to process command (require
<result2>)

4/159 35-5/FCP 101 4577 Uen Rev B
34 User did not accept call set-up request
35 User cleared down call before connection or network
release
48 Command beyond Host capabilities
52 SS Return Error (Firmware to provide the error cause to
SIM/USIM)
<dialstring> Description
string type 0-9,*,#,+
3 Host currently busy on SS Transaction
17.4.2 *ESTKCC Call Control Event From SIM/USIM Application

Toolkit
Command Possible Responses

AT*ESTKCC: <resultMode>[,<errCode>,
<oldType>[,<newType>]],<”alpha”>
When Call Control by SIM/USIM is activated in SIM/USIM
Profile, the result of the STK Call Control will return as this
unsolicited event.
<resultMode> Description
1 Allowed, no modification.
2 Allowed, modified (type or dial string).
3 Not allowed.
4 Call control failed.
<errCode> Description
0 Call not allowed.
1 SIM/USIM toolkit is busy, cannot setup call.
2 SIM/USIM error causes setup fail.
3 There is other ongoing call setup.
4/159 35-5/FCP 101 4577 Uen Rev B
<errCode> Description
4 Beyond ME capabilities.
5 Call control by SIM/USIM, modified.
6 Call control by SIM/USIM, not allowed, temporary.
7 Call control by SIM/USIM, not allowed, permanent.
<oldType>, <newType> Description

1 Voice Call.
2 SS.
3 USSD.
4 SMS.
<”alpha”> Description
String Alphanumeric representation of the alpha ID text that is
type displayed along with the STK CC result.
Note:
When <resultMode> is not “Call Control failed”, the <errCode>
field will not be present.
*ESTKCC: <resultMode>,<oldType>,<newType>,<”alpha”>
When <resultMode> is “Call Control failed”, the <errCode> field
will always be present and the <newType> field will not be present.
*ESTKCC: <resultMode>,<errCode >,< oldType >,<”alpha”>
17.4.3 *ESTKDISP Display Text
Command Possible responses

Displays text AT*ESTKDISP:
of <priority>,<clear>,<codetype><CR><LF><data>
unsolicited
result code
Description:
The ME passes the parameters within DISPLAY TEXT command
to the external application by means of the unsolicited result code
*ESTKDISP.
Command AT*ESTKDISP allows the external application to send
the appropriate answer after receiving the unsolicited result code,
and before the timeout expires.
If Answer command is sent once the timeout expires, an ERROR
response is generated.
Test command returns the list of supported <answer>. Values
follow GSM 11.14 standard
4/159 35-5/FCP 101 4577 Uen Rev B
Defined values:
<priority> Description
0 Display normal priority text
1 Display high priority text
<clear> Description
0 Clear message after a delay (60s)
1 Wait for user to clear message
1 UCS2 alphabet
<data> Description
string Text of message to be displayed. 240 characters maximum
Response
AT*ESTKRES=0,<result>,[<result2>]
16 Hang up call
<result2>)
1 Screen busy
17.4.4 *ESTKGIN Get Input

4/159 35-5/FCP 101 4577 Uen Rev B
Comman
Possible responses
d
AT*ESTKGIN:
<input>,<codetype>,<echo>,<minl>,<maxl><CR><LF
><data>
Description:
The host will display this request for input from the SIM/USIM
Toolkit application. Data entered by the user shall be returned
to the wireless modem device.
Defined values:
<input> Description
1 0-9, *, #, + only
2 Alphabet set
1 UCS2 alphabet
<echo> Description
1 Echo user input on display
0 Hide user input
<minl> Description
0 No minimum length
1- Minimum length
255
<maxl> Description
255 No maximum length
0- Maximum length
254
<data> Description
String Text to be displayed
type For <codetype>=0, this is a displayable text string.

4/159 35-5/FCP 101 4577 Uen Rev B
<data> Description
Response:
AT*ESTKRES=2,<result>,,<text>
17 Backward move in proactive SIM/USIM session
requested
<text> Description
String Single digit within this range: 0-9,*,# or
type +
GSM 3.38 SMS default alphabet,
unpacked
17.4.5 *ESTKKEY Get Inkey

AT*ESTKKEY:<input>,<codetype><CR><LF><data
>
Description:
The host will display the text message provided in *ESTKKEY.
The single character or digit shall be returned to the wireless
modem device.
Defined values:
<input> Description
0 YES/NO
1 0-9,*,#,+ only
2 Alphabet set

4/159 35-5/FCP 101 4577 Uen Rev B
1 UCS2 alphabet
<data> Description
String Text to be displayed
Response
AT*ESTKRES=1,<result>,,<text>
<result2>)
<text> Description
String Single digit within this range: 0-9,*,# or +
type
A single character from GSM 3.38 SMS default
alphabet, unpacked
17.4.6 *ESTKITEM Select Item
Comman
Possible responses
d
AT*ESTKITEM:<title>,<codetype>,<numitems><CR><LF
><id1>,<text1>[<CR><LF><id2>,<text2><CR><LF>
…<idn><texto>]
Description:
The host will display a list of items and return the selected item
to wireless modem device.
Defined values:
<title> Description
String type Text describing menu

4/159 35-5/FCP 101 4577 Uen Rev B
<title> Description
For <codetype>=1, this is an ASCII hexadecimal
string representation of the UCS2 2-octet characters.
1 UCS2 alphabet
<numitems> Description
1-255 The number of menu items to display
<id> Description
1-255 The identifier of menu item
<text> Description
String Text of menu item
Response
AT*ESTKRES=4,<result>,,,<id>
<id> Description
1-255 Identifier of menu item
17.4.7 *ESTKRSH Refresh

4/159 35-5/FCP 101 4577 Uen Rev B
AT*ESTKRSH: <refreshType>[<CR><LF><EF list>]
Description:
The REFRESH command contains the refresh type and the list
of EF files (separated by comma), if any.
In the case the refresh type is not SIM/USIM RESET, EF list
will be given and cached data in the firmware will be updated.
The host will need to update any cached data and respond with
Terminal Response to inform the SIM/USIM if the command is
carried out successfully. If the response is not result=0 or 3, the
same command will be send again.
In the case the refresh type is SIM/USIM RESET, the host will
need to response if the reset can be carried out (result=0) or
currently unable to process the reset (result=20). If the
response is result=0, the firmware will be reset, and the host
will need to turn radio back on again. To save unsaved data, the
host shall perform such task before responding back to the
firmware using Terminal Response. If the response result=20,
the firmware will resend the command again at a later time.
Defined values:
<refresh type> Description

0 Initialization with full file change
1 File change
2 Initialization with file change
3 SIM/USIM Initialization
4 SIM/USIM Reset
<EF
Description
list>
List of EF files that have changed corresponding to file
definitions given in the standard.
0xFF No files have changed
Response
The response to REFRESH is TERMINAL RESPONSE
described as follows:
AT*ESTKRES=10 ,<result>, [<result2>]
3 Refresh performed with additional EF files read
<result2>)

4/159 35-5/FCP 101 4577 Uen Rev B
1 Screen busy
17.4.8 *ESTKSMENU Set Up Menu
Comman
Possible responses
d
AT*ESTKSMENU:<alphaid>,<codetype>,<itemcount><CR
><LF><id1>,<text1>[,<CR><LF><id2>,<text2><CR>
<LF>,…<idn>,<texto>
Description:
The SET UP MENU command is used to add SIM/USIM
applications for selection to the host application menu system.
The SET UP MENU command is also used to remove
SIM/USIM applications from the menu system.
Defined values:
String type Text description of menu
“NULL” Indicates that the alphaid is not available
1 UCS2 alphabet
<itemcount> Description
integer number of items
type
<id> Description
1-255 Item number of menu item
<text> Description
String type Text for menu item

4/159 35-5/FCP 101 4577 Uen Rev B
Response:
AT*ESTKRES=8,<result>
48 Command beyond host capabilities
17.4.9 *ESTKSMS Send Short Message

AT*ESTKSMS: [<alphaid>],<alphabet>,<result>
Description:
The wireless modem device will be responsible for sending the
SIM/USIM Toolkit application SMS message. The result of
sending the message shall be reported to the host. The host will
display an info. Box indicating that an SMS message was sent.
However, this will be received “after the fact”. If <alphaid> is
not sent with the AT command, then the host will inform the
user that an SMS had been sent with a generic display message.
If the Alpha id is valid then it will be displayed. If the SEND
SHORT MESSAGE command from the SIM/USIM contains an
empty/NULL Alpha Identifier, then this AT command shall not
be sent to the host.
Defined values:
Corresponds to Alpha Identifier specified in 51.014 and
31.111
<alphabet> Description
1 UCS2 alphabet
0 SMS sent successfully
1 SMS operation failed
Response
AT*ESTKRES=11,0

4/159 35-5/FCP 101 4577 Uen Rev B
17.4.10 *ESTKSS Send SS

AT*ESTKSS:<alphaid>,<codetype>,<SSstring>
Description:
The host will support parsing the SSstring and initiating the SS
procedures. When the alpha id is sent by the SIM/USIM toolkit
application, it will be displayed while the host is processing the
Supplementary Service procedure. If the alpha id indicates that
it is empty, then no indication is given to the user that a
supplementary service procedure is being processed. If no
alpha id is provided, then the normal procedures for processing
a supplementary service procedure shall be followed. The SS
procedure will not be included in the Last Number Dialed list.
Defined values:
<alpha_id> Description
String Text message to be displayed while processing
type Supplementary Service string
“NULL” Empty alpha identifier
1 UCS2 alphabet
<SS_string> Description
String a supplementary service control procedure, coded as
type for EF_ADN
Response:
AT*ESTKRES=5,<result>,<result2>

4/159 35-5/FCP 101 4577 Uen Rev B
<result2>)
48 Command beyond Host capabilities
52 SS Return Error (firmware must provide the error cause
3 Host currently busy on SS transaction
17.4.11 *ESTKTONE Play Tone

AT*ESTKTONE:
[<alphaid>],[<codetype>],<tone>,[<unit>,<duration>]
Description:
AT*ESTKTONE is sent to the host to play a tone.
Defined values:
String Text message to be displayed during tone
“NULL” Indicates an empty alphaid
1 UCS2 alphabet
<tone> Description
8 Ringing tone
10 General Beep
11 Positive acknowledgement
12 Negative acknowledgement
Maybe others
4/159 35-5/FCP 101 4577 Uen Rev B
<unit> Description
0 Minutes
1 Seconds
2 Tenths of seconds
<duration> Description
1-255 Value in <units>
Response:
AT*ESTKRES=3,<result>
17.4.12 *ESTKUSSD Send USSD

AT*ESTKUSSD: [<alpha_id>],<codetype>,<USSDstring>
Description:
The host shall support parsing the USSDstring and initiating the
USSD procedures. When the alpha id is sent by the SIM/USIM
toolkit application, it will be displayed while the host is
processing the initial USSD procedure. If the alpha id indicates
that it is empty, then no indication is given to the user that a
USSD procedure is being processed. If no alpha_id is
provided, then the normal procedures for processing a USSD
procedure shall be followed. The USSD procedure will not be
included in the Last Number Dialed list.
Defined values:
String type Text message to be displayed

4/159 35-5/FCP 101 4577 Uen Rev B
1 UCS2 alphabet
<USSDstring> Description
String type USSD string, coded as for EF_ADN
Response:
AT*ESTKRES=6,<result>,<result2>
20 USSD transaction terminated by the user
<result2>)
52 SS Return Error (wireless modem device must provide the
error cause)
55 USSD Return Error (wireless modem device must provide
the error cause
3 Currently busy on SS transaction
8 Currently busy on USSD transaction
17.4.13 *ESTKSIMT Setup Idle Mode Text

AT*ESTKSIMT: <text>, <codetype>
Description:
Displays a text string to be used by the ME as standby mode
text.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
<text> Description
String type Text to be displayed
“NULL” Indicates empty Idle Mode Text string
1 UCS2 alphabet
Response:
The AT*ESTKRES terminal response for this command
requires you to enter the code type
that was sent in the unsolicited message as a parameter in the
reply.
AT*ESTKRES=16,<result>,<codetype>
<result2>)
17.4.14 *ESTKDTMF Send DTMF tone

AT*ESTKDTMF [<alphaid>], [<DTMFstring>], [<codetype>]
Description:
The DTMF Tones will be played in the earpiece. The host will
display the text passed in the proactive command to the screen
if present.
There is no AT*ESTKRES reply message required for this

command. The Terminal Response will be sent automatically
when all the tones have been played.
Defined values:
String type Text message to be displayed during tone

4/159 35-5/FCP 101 4577 Uen Rev B
<DTMFstring> Description
String type String representative of DTMF sequence to be
played
1 UCS2 alphabet
Response:

4/159 35-5/FCP 101 4577 Uen Rev B
18 Supplementary Services
18.1 AT+COLP Connected Line Identification Presentation

Request connected line AT+COLP=[<n>] OK
identification ERROR
presentation
Show the current setting AT+COLP? +COLP:
<n>,<m>
OK
ERROR
Test if the command is AT+COLP=? +COLP: (list of
supported supported <n>s)
OK
ERROR
Description:
This command refers to the GSM/UMTS supplementary service
COLP (Connected Line Identification Presentation) that enables a
calling subscriber to get the connected line identity (COL) of the
called party after setting up a mobile originated call. The command
enables or disables the presentation of the COLP at the TE. It has
no effect on the execution of the supplementary service COLR in
the network.
Read command gives the status of <n>, and also triggers an
interrogation of the provision status of the COLP service according
3GPP TS 22.081 (given in <m>).
value.
Defined values:
<n> Description
0 Enable. Default value.
1 Disable
<m> Description
0 COLP not provisioned
1 COLP provisioned
2 unknown (e.g. no network, etc.)

4/159 35-5/FCP 101 4577 Uen Rev B
18.1.1 +COLP Connected Line Identification Presentation
Unsolicited Response
Description:
When enabled (and allowed by the called subscriber), COLP
intermediate result code is returned from the TA to the TE before
any +CR or V.25ter responses in the following format:
+COLP: <number>,<type>[,<subaddr>,<satype> [,<alpha>]]
18.2 AT+CACM Accumulated Call Meter
Possible
Description Command
Responses
Reset the ACM AT+CACM=[<passwd>] +CME
(Accumulated Call Meter) ERROR:
value on the SIM <err>
OK
ERROR
Show the current value AT+CACM? +CACM:
<acm>
+CME
ERROR:
<err>
OK
ERROR
Tests if the command is AT+CACM=? +CME
supported ERROR:
<err>
OK
ERROR
Description:
Resets the Advice of Charge related accumulated call meter value
in SIM file EFACM. ACM contains the total number of home units
for both the current and preceding calls. SIM PIN2 is usually
required to reset the value. If setting fails an ME error, +CME
ERROR: <err> is returned. See “ +CME ERROR (Mobile
Equipment Error Code)”.
Note: This command is only valid for line 1 irrespective of the
*ELIN command settings.
Read command returns the current value of ACM.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
String type SIM-PIN2
<acm> Description
String type Accumulated call meter value similarly coded as
<ccm> under +CAOC
18.3 AT+CAMM Accumulated Call Meter Maximum
Possible
Description Command
Responses
Set command sets AT+CAMM=[<acmmax> +CME
the Advice of Charge [,<passwd>]] ERROR:
related accumulated <err>
call meter maximum OK
value in SIM file
ERROR
EFACMmax
Read the current AT+CAMM? +CAMM:
value <acmmax>
+CME
ERROR:
<err>
OK
ERROR
Test if the command AT+CAMM=? +CME
if supported ERROR:
<err>
OK
ERROR
Description:
Sets the Advice of Charge related accumulated call meter maximum
value in SIM file EFACMmax. ACMmax contains the maximum
number of home units allowed to be consumed by the subscriber.
When ACM (refer +CACM) reaches ACMmax calls are prohibited
(see also 3GPP 22.024). SIM PIN2 is usually required to set the
value. If setting fails an ME error, +CME ERROR: <err> is
returned.
Read command returns the current value of ACMmax.
Defined values:

4/159 35-5/FCP 101 4577 Uen Rev B
<acmmax> Description
String Accumulated call meter maximum value similarly coded
type as <ccm> under +CAOC; value zero disables ACMmax
feature
String type SIM PIN2
18.4 AT+CAOC Advice of Charge

Execute AT+CAOC[=<mode>] [+CAOC: <ccm>]
command +CME ERROR:
<err>
OK
ERROR
Show the current AT+CAOC? +CAOC: <mode>
setting OK
ERROR
Test if the AT+CAOC=? [+CAOC: (list of
supported <mode>s]
OK
ERROR
Description:
Use of Advice of Charge supplementary service command enables
the subscriber to get information about the cost of calls. With
<mode>=0, the execute command returns the current call meter
value from the ME. The command also includes the possibility to
enable an unsolicited event reporting of the CCM information. The
unsolicited result code +CCCM: <ccm> is sent when the CCM
value changes, but no more than every 10 seconds. Deactivation of
the unsolicited event reporting is made with the same command.
Read command indicates whether the unsolicited reporting is
activated or not. Read command is available when the unsolicited
result code is supported.
Defined Values:
<mode> Description
0 Query CCM value (default)

4/159 35-5/FCP 101 4577 Uen Rev B
<mode> Description
1 Deactivate the unsolicited reporting of CCM value
2 Activate the unsolicited reporting of CCM value
18.4.1 +CCCM Current Call Meter Unsolicited

Response
Description:
An Unsolicited Response indicating the accumulated charge as computed
by the MS, expressed in terms of Home units. AT+CAOC is used to
activate or deactivate the reporting of CCM.
+CCCM: <ccm>
Defined values:
<ccm> Description
string Three bytes of the current call meter value in
type hexadecimal format (e.g. “00001E” indicates decimal
value 30); value is in home units and bytes are similarly
coded as ACMmax value in the SIM.
18.5 AT+CPUC Price Per Unit and Currency Table

Set command AT+CPUC=<currency>, +CME ERROR:
sets the <ppu>[,<passwd>] <err>
parameters of OK
Advice of
ERROR
Charge related
price per unit
and currency
table in SIM
file EFPUCT
Shows the AT+CPUC? +CPUC:
current values <currency>,<ppu>
+CME ERROR:
<err>
OK
ERROR
Shows if the AT+CPUC=? OK
command is ERROR
supported
Description:
4/159 35-5/FCP 101 4577 Uen Rev B
Sets the parameters of Advice of Charge related price per unit and
currency table in SIM file EFPUCT. PUCT information can be used
to convert the home units (as used in +CAOC, +CACM and
+CAMM) into currency units. SIM SIM PIN2 is required to set the
parameters. If setting fails in an ME error, +CME ERROR: <err> is
returned.
Read command returns the current parameters of PUCT.
For information on the character set see AT+CSCS in the Short
Message Services section.
Defined values:
<currency> Description
String Alpha-identifier of the currency code (3 characters,
e.g. SEK)
<ppu> Description
String price per unit; dot is used as a decimal separator (e.g.
type “2.66”)
String type SIM PIN2
18.6 AT+CCFC Call Forwarding number and Conditions

Request AT+CCFC=<reas +CME ERROR <err>
Calling on> when <mode>=2 and
forwarding ,<mode>[,<num command successful:
number ber +CCFC:
and >[,<type>[,<clas <status>,<class1>[,<numb
conditions s> er>,
[,<subaddr>[,<sa <type>[,<subaddr>[,<satyp
type>[,<time>]]]] e>[,<time>]]]][<CR><LF>
]] +CCFC:
<status>,<class2>[,<numb
er>,
<type>[,subaddr>[,<satype
>
[,<timer>]]]]
[…]]
OK

4/159 35-5/FCP 101 4577 Uen Rev B
ERROR
Test if the AT+CCFC=? + CCFC: (list of supported
command <reason>s)
is +CME ERROR <err>
supported
OK
ERROR
Description:
This command allows control of the call forwarding supplementary
service. Registration, erasure, activation, deactivation, and status
query are supported. When querying the status of a network service
(<mode>=2) the response line for 'not active' case (<status>=0) is
returned only if service is not active for any <class>.
Defined Values:
<reason> Description
0 Unconditional
1 Mobile busy
2 No reply
3 Not reachable
4 All call forwarding (refer to 3GPP TS 22.030)
5 All conditional call forwarding (refer to 3GPP TS
22.030)
<mode> Description
0 Disable
1 Enable
2 Query status
3 Registration
4 Erasure
String String type phone number of forwarding address in
type format specified by <type>
<type> Description
129 ISDN / telephony numbering plan, national /

4/159 35-5/FCP 101 4577 Uen Rev B
<type> Description
international unknown
Default setting if ‘+’ is not in <sca>
145 ISDN / telephony numbering plan, international number
Default setting if '+' is in <sca>
161 ISDN / telephony numbering plan, national number
128- Other values refer GSM 04.08 section 10.5.4.7
255
0 Not active
1 Active
18.7 AT+CCWA Call Waiting

Notes:
* - Query operation requires SIM (<mode> = 2).
** - Mode and Class are not parameter settings (value <n> only).
*** - Query operation is not available in CFUN mode 4 (<mode> =
2).

Request AT+CCWA=[<n> when<mode>=2 and
call [,<mode> command successful:
waiting [,<class>]]] +CCWA:<status>,<class1>[<
CR><LF>
+CCWA:
<status>,<class2>[…]]
+CME ERROR <err>
OK
ERROR
Show the AT+CCWA? +CCWA: <n>
current +CME ERROR <err>
setting OK
ERROR
Test if the AT+CCWA=? +CCWA: (list of supported
command <n>s)
is +CME ERROR <err>
supported OK
ERROR
Description:

4/159 35-5/FCP 101 4577 Uen Rev B
This command allows control of the call waiting supplementary
service according to 3GPP TS 22.083. Activation, deactivation and
status query are supported. When querying the status of a network
service (<mode>=2) the response line for ‘not active’ case
(<status>=0) should be returned only if service is not active for
any <class>. Parameter <n> is used to disable or enable the
presentation of an unsolicited result code +CCWA:
<number>,<type>,<class>,[<alpha>][,<CLI validity>] to the TE
when call waiting service is enabled. The command is abortable
when the network is interrogated.
The interaction of this command with other commands based on
other GSM/UMTS supplementary services is described in the
GSM/UMTS standards.
Defined values:
<n> Description
0 Disable. Default value.
1 Enable
<mode> Description
0 Disable
1 Enable
2 Query status
<classx> Description
integer Sum of integers each representing a class of
information. Default value = 7 (1+2+4)
1 Voice L1
2 Data
4 Fax
8 Short message service
16 Data circuit sync
32 Data circuit async
64 Dedicated packet access
128 Dedicated PAD access
0 Not active
1 Active

4/159 35-5/FCP 101 4577 Uen Rev B
String type String type ME number of forwarding address in
format specified by <type>
<type> Description
Integer Type of address octet in integer format (GSM 04.08
format 10.5.4.7)
<err> Description
0 ME failure
21 Invalid index
31 Network timeout
100 Unknown
Example:
AT+CCWA=?
+CCWA: (0-1)
OK
AT+CCWA?
+CCWA: 0
OK
18.7.1 +CCWA Unsolicited Result Code:

+CCWA: <number>, <type>, <class>
18.8 AT+CLIP Calling Line Identification

Notes:
* - Query (AT+CLIP?) does not operate in CFUN mode 4.

Set calling line AT+CLIP=<n> +CME ERROR:
identification <err>
OK

4/159 35-5/FCP 101 4577 Uen Rev B
ERROR
Shows the current setting AT+CLIP? +CLIP: <n>,<m>
+CME ERROR:
<err>
OK
ERROR
Test if the command is AT+CLIP=? +CLIP: (list of
supported supported <n>s)
+CME ERROR:
<err>
OK
ERROR
Description:
This command refers to the GSM supplementary service CLIP
(Calling Line Identification Presentation) that enables a called
subscriber to get the calling line identity (CLI) of the calling party
when receiving a mobile terminated call. Set command enables or
disables the presentation of the CLI at the TE. It has no effect on
the execution of the supplementary service CLIP in the network.
When the presentation of the CLI at the TE is enabled (and calling
subscriber allows), the unsolicited response, +CLIP, is sent for
every incoming call.
Read command gives the status of <n> and also triggers an
interrogation of the provision status of the CLIP service according
to GSM 02.81 (given in <m>).
Defined values:
<n> Description
0 Disable. Default value.
1 Enable
<m> Description
0 CLIP not provisioned
1 CLIP provisioned
2 Unknown (e.g. no network)
The data affected by this command is contained in the User Profile.

4/159 35-5/FCP 101 4577 Uen Rev B
18.8.1 +CLIP Calling Line Identification Unsolicited
Response
The unsolicited response, enabled/disabled by AT+CLIP, reports
the caller ID of any incoming call. Format:
+CLIP: <number>,<type>[,<subaddr>,<satype>[,[<alpha>]
[,<CLI_validity>]]]
When CLI is not available ( <CLI validity>=2), <number> shall be
an empty string ("") and <type> value will not be significant.
When CLI has been withheld by the originator, (<CLI validity>=1)
and the CLIP is provisioned with the "override category" option
(refer 3GPP TS 22.081 and 3GPP TS 23.081), <number> and
<type> is provided. Otherwise, the module will return the same
setting for <number> and <type> as if the CLI was not available.
String String type phone number of format specified by
type <type>
<type> Description
Integer format Type of address octet in integer (refer to GSM
04.08 sub-clause 10.5.4.7)
<subaddr> Description
String String type subaddress of format specified by
type <satype>
<satype> Description
Integer format Type of subaddress octet in integer format (refer
TS 4.08 subclause 10.5.4.8)
<alpha> Description
String String type alphanumeric representation of <number>
type corresponding to the entry found in phonebook; used
character set should be the one selected with command
Select TE Character Set AT+CSCS
<CLI_validity> Description
0 CLI is valid

4/159 35-5/FCP 101 4577 Uen Rev B
<CLI_validity> Description
1 CLI has been withheld by originator
2 CLI is not available due to interworking problems or
limitations of originating network
Example:
AT+CLIP=1
OK
RING
+CLIP: “07747008670”,129,,,“Matt L”,0
18.9 AT+CLIR Calling Line Identification Restriction

Notes:
* - Query (AT+CLIR?) does not operate in CFUN mode 4.

Request calling line AT+CLIR=[<n>] +CME ERROR:
identification restriction <err>
OK
ERROR
Read the current setting AT+CLIR? +CLIR:
<n>,<m>
+CME ERROR:
<err>
OK
ERROR
Test if the command is AT+CLIR=? +CLIR: (list of
supported supported
<n>s)
+CME ERROR:
<err>
OK
ERROR
Description:
This command refers to CLIR-service according to 3GPP TS
22.081 that allows a calling subscriber to enable or disable the
presentation of the CLI to the called party when originating a call.
Set command overrides the CLIR subscription (default is restricted
or allowed) when temporary mode is provisioned as a default
adjustment for all following outgoing calls. Using the opposite
command can revoke this adjustment. If this command is used by a

4/159 35-5/FCP 101 4577 Uen Rev B
subscriber without provision of CLIR in permanent mode the
network will act according 3GPP TS 22.081.
The setting shall be per logical channel.
Set command directly writes to non-volatile memory so that the
setting is preserved also after turning off/on the MS. The &F
command will not affect the setting.
Read command gives the default adjustment for all outgoing calls
(given in <n>), and also triggers an interrogation of the provision
status of the CLIR service (given in <m>).
value.
This command is not abortable.
Defined values:
<n> Description
0 Presentation indicator is used according to the subscription of
the CLIR service. Default value.
1 CLIR invocation
2 CLIR suppression
<m> Description
0 CLIR not provisioned
1 CLIR provisioned in permanent mode
2 Unknown (e.g. no network)
3 CLIR temporary mode presentation restricted
4 CLIR temporary mode presentation allowed
18.10 AT+CSSN Supplementary Service Notification
Possible
Description Command
Responses
Presentation of AT+CSSN=[<n>[,<m>]] +CME ERROR:
notification result <err>
codes from TA to OK
TE
ERROR
Read the current AT+CSSN? +CSSN:
setting <n>,<m>
+CME ERROR:
<err>
OK

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Responses
ERROR
Test if the AT+CSSN=? +CSSN: (list of
supported <n>s), (list of
supported
<m>s)
+CME ERROR:
<err>
OK
ERROR
Description:
This command refers to supplementary service related network
initiated notifications. The set command enables or disables the
presentation of notification result codes from TA to TE.
When <n>=1 and a supplementary service notification is received
after a mobile originated call setup, unsolicited result code +CSSI:
<code1> [,<index>] is sent to TE before any other MO call setup
result codes presented in this manual or in V.25ter. When several
different <code1>s are received from the network, each of them
shall have its own +CSSI result code.
When <m>=1 and a supplementary service notification is received
during a mobile terminated call setup or during a call, or when a
forward check supplementary service notification is received,
unsolicited result code +CSSU: <code2>[,<index>] is sent to TE.
In case of MT call setup, result code is sent after every +CLIP result
code (refer command “Calling line identification presentation
+CLIP”) and when several different <code2>s are received from the
network, each of them shall have its own +CSSU result code.
Defined values:
<n> Description
0 Disable the +CSSI result code presentation status in the TA.
Default value.
1 Enable the +CSSI result code presentation status in the TA
<m> Description
0 Disable the +CSSU result code presentation status in the TA.
Default value.
1 Enable the +CSSU result code presentation status in the TA

4/159 35-5/FCP 101 4577 Uen Rev B
<code1> Description
0 Unconditional call forwarding is active
1 Some of the conditional call forwarding are active
2 Call has been forwarded
3 Call is waiting
5 Outgoing calls are barred
6 Incoming calls are barred
7 CLIR suppression rejected
8 Call has been deflected
<code2> Description
0 This is a forwarded call (MT call setup)
2 Call has been put on hold (during a voice call)
3 Call has been retrieved (during a voice call)
4 Multiparty call entered (during a voice call)
5 Call on hold has been released (this is not a SS notification)
(during a voice call)
6 Forward check SS message received (can be received
whenever)
7 Call is being connected (alerting) with the remote party in
alerting state in explicit call transfer operation (during a
voice call)
8 Call has been connected with the other remote party in
explicit call transfer operation (also number and
subaddress parameters may be present) (during a voice call
or MT call setup)
9 This is a deflected call (MT call setup)
18.10.1 +CSSI Supplementary Services Notification

Description:
The +CSSI unsolicited message is enabled or disabled by the
AT+CSSN command. Unsolicited response format:
+CSSI: <code>[,<index>]
Defined values:
<code> Description
0 Unconditional Call Forwarding is active
1 Some of the conditional call forwardings are active

4/159 35-5/FCP 101 4577 Uen Rev B
<code> Description
2 A call has been forwarded
3 A call is waiting
5 Outgoing calls are barred
6 Incoming calls are barred
7 CLIR suppression is rejected
16 This is a CUG call (CUG index indicated in <cindex>)
<cindex> Description
0...32767 CUG index
18.10.2 +CSSU Supplementary Services Notification

Description:
The +CSSU unsolicited message is enabled or disabled by the
AT+CSSN command. When enabled, the message is of the
following form:
+CSSU: <code>[,<cindex>]
Defined values:
<code> Description
0 This is a forwarded call
2 A call has been put on hold (during voice call)
3 A call has been retrieved (during voice call)
4 A multi-party call has been entered (during voice call)
5 The call on hold has been released (during voice call) (this is
not a SS notification)
6 Forward check SS messages
16 This is a CUG call (index specified by <cindex>) (MT call
setup)
<cindex> Description
0...32767 CUG index
18.11 AT+CUSD Unstructured Supplementary Service Data

Notes:
* - Only the <n> parameter. <str> is not a parameter setting.
** - Mobile initiated USSD will not operate in CFUN mode 4.

4/159 35-5/FCP 101 4577 Uen Rev B
Possible
Description Command
Responses
Request AT+CUSD=[<n>[,<str>[,<dcs>]]] +CME
unstructured ERROR:
supplementary <err>
service data OK
Show the AT+CUSD? +CUSD:
current setting <n>
OK
ERROR
Test if the AT+CUSD=? +CUSD:
command is (list of
supported supported
<n>s)
OK
ERROR
Description:
This command allows control of the Unstructured Supplementary
Service Data (USSD) according to 3GPP TS 22.090. Both network
and mobile initiated operations are supported. Parameter <n> is
used to disable/enable the presentation of an unsolicited result
code (USSD response from the network, or network initiated
operation) +CUSD: <m>[,<str>,<dcs>] to the TE. In addition,
value <n>=2 is used to cancel an ongoing USSD session. If <n> is
not given then the default value 0 is taken.
When <str> is given, a mobile initiated USSD string or a response
USSD string to a network initiated operation is sent to the network.
The response USSD string from the network is returned in a
subsequent unsolicited +CUSD: result code.
The interaction of this command with other commands based on
other GSM supplementary services is described in the GSM
standard.
value.
Some different scenarios are shown below:
1. An incoming network initiated USSD-Notify should be
presented to the external application as an unsolicited result code
+CUSD: if the external application has enabled result code
presentation.
2. An incoming USSD-request asking for a reply should sent to the
external application as an unsolicited result code +CUSD: if the
external application has enabled result code.
3. If the external application answers to the request with the
command AT+CUSD then the ME sends the answer to the
network.

4/159 35-5/FCP 101 4577 Uen Rev B
3b. A USSD-request sent with the command AT+CUSD from the
external application.
The different alternatives are shown below.
Network Mobile Equipment External application

1 Signal Sends unsolicited Result code
result code presentation
+CUSD enabled, presented
2 Signal Sends unsolicited Result code
asking for result code presentation
reply +CUSD enabled, presented
3 Answer AT+CUSD
3b Sends AT+CUSD
Defined values:
<n> Description
0 Disable result code presentation in the TA. Default value.
1 Enable result code presentation in the TA
2 Terminate (abort) USSD dialogue. This value is not applicable to
the read command response (not supported)
<str> Description
string type String type USSD (when <str> parameter is
not given, network is not interrogated)
- if <dcs> indicates - if TE character set other than "HEX" (refer
that 3GPP TS command Select TE Character Set +CSCS):
23.038 7 bit default ME/TA converts GSM alphabet into current
alphabet is used: TE character set according to rules of 3GPP
TS 27.005 Annex A.
- if TE character set is "HEX": ME/TA converts
each 7-bit character of GSM alphabet into
two IRA character long hexadecimal number
(e.g. character P (GSM 23) is presented as 17
(IRA 49 and 55))
- if <dcs> indicates ME/TA converts each 8-bit octet into two
that 8-bit data IRA character long hexadecimal number (e.g.
coding scheme is octet with integer value 42 is presented to
used: TE as two characters 2A (IRA 50 and 65))

4/159 35-5/FCP 101 4577 Uen Rev B
<dcs> Description
Integer 3GPP TS 23.038 [25] Cell Broadcast Data Coding
type Scheme in integer format (default 0)
Example:
AT+CUSD=1,“*34#”
OK
+CUSD:1,"id code"
AT+CUSD=0,"7465338"
OK
Example:
+CUSD:0,“Expensive incoming call”
Example:
AT+CUSD=1,“*55*0700#”
OK
+CUSD:0,“ALARM”
Example:
AT+CUSD=1,“*#100#”
OK
+CUSD: 0,“07787154042”
18.11.1 +CUSD Unstructured Supplementary Service Unsolicited

Response
Description:
Unsolicited response reporting changes in USSD status. Format:
+CUSD: <m>[,<str>,<dcs>]
See AT+CUSD, for more details.
Defined values:
<m> Description
0 no further user action required (network initiated USSD-Notify,
or no further information needed after mobile initiated
operation)
1 further user action required (network initiated USSD-Request,
or further information needed after mobile initiated operation)
2 USSD dialogue terminated (due to network supplementary
service release request). This result code is not generated if the
dialogue terminates with a result code where <m> is equal to
zero (0).
3 Other I/O client has responded. This parameter value is not
applicable to GM 12. This result code is received if the network
initiates a USSD dialogue and some other I/O client responds.
The client that responds first receives the dialogue. Clients that
try to respond after this notification has been generated, will

4/159 35-5/FCP 101 4577 Uen Rev B
<m> Description
get a result code ERROR.
4 operation not supported
5 network time out
<str> Description
String type String type USSD-string (when <str>
parameter is not given, network is not
interrogated)
If <dcs> indicates Further user action required (network
that 3GPP TS 23.038 initiated USSD-Request, or further
7 bit default information needed after mobile initiated
alphabet is used: operation)
If <dcs> indicates ME/TA converts each 8-bit octet into two
that 8-bit data IRA character long hexadecimal number
coding scheme is (e.g. octet with integer value 42 is
used: presented to TE as two characters 2A (IRA
50 and 65))
<dcs> Description
Integer 3GPP TS 23.038 [25] Cell Broadcast Data Coding
type Scheme in integer format (default 0)

4/159 35-5/FCP 101 4577 Uen Rev B
19 Alternate Line Services
19.1 AT*ECSP Customer Service Profile

Read the AT*ECSP=<service *ECSP: <service
customer service group> group>,<services>
profile from the +CME ERROR: <err>
SIM
OK
ERROR
Test if the AT*ECSP=? +CME ERROR: <err>
command is OK
supported
ERROR
Description:
This command is used to read the customer service profile (CSP)
from the SIM. CSP is a list on the SIM, which indicates the services
that are user accessible. Each of the services has a related bit within
the CSP. The services are grouped into service groups, with a
maximum of 8 services in a group. For each service group, a bit
mask tells which services are available (bit=1). Unused bits are set
to 0.
Defined values:
<service group> Description

Integer type The service group code of the service group
1-9, 192-255 to read
<services> Description
Integer Decimal representation of a Bit mask (8 bits),
type indicating the services within the service group
0-255 Bit=0: unused or unavailable service
Bit=1: available service

4/159 35-5/FCP 101 4577 Uen Rev B
20 Alphabetic Listing of AT Commands
Provided below is an alphabetic list of all AT Commands by section and page number.
Command or Unsolicited Response Section Page

+CME ERROR (Mobile Equipment Error Code) 3.15 38
+CMS ERROR (Message Service Failure Result Code) 3.17 42
Abortability 1.7 13
AT Attention Command 10.1 146
AT +CMMS More Messages to Send 14.10 198
AT&C Circuit 109 (DCD) Control 11.1 153
AT&D Circuit 108 (DTR) Response 11.2 153
AT&F Set to Factory Defined Configuration Profile 5.1 57
AT&W Store Configuration Profile 5.2 64
AT* List all Supported AT Commands 3.12 36
AT*E2CMGA Modify message attribute 14.17 211
AT*E2EMM Engineering Monitoring Mode 12.1 160
AT*E2RESET Restart Module 4.2 55
AT*E2SSN SIM Serial Number 16.4 223
AT*ECAM Call Monitoring 3.23 49
AT*ECSP Customer Service Profile 19.1 273
AT*EIAAUR - Internet Account Configuration, Read
Authentication Parameters 9.1 113
AT*EIAAUW - Internet Account Configuration, Write
Authentication Parameters 9.2 114
AT*EIAC - Internet Account, Create 9.3 116
AT*EIACSR - Internet Account Configuration, Read CSD
Bearer Capabilities 9.4 117
AT*EIACSW - Internet Account Configuration, Write CSD
Bearer Capabilities 9.5 119
AT*EIAD - Internet Account Configuration, Delete 9.6 121
AT*EIAIPCPR - Internet Account Configuration, Read PPP
Parameters - IPCP 9.11 129
AT*EIAIPCPW - Internet Account Configuration, Write PPP
Parameters - IPCP 9.12 131
AT*EIALCPR - Internet Account Configuration, Read PPP
Parameters - LCP 9.7 122
AT*EIALCPW - Internet Account Configuration, Write PPP
Parameters - LCP 9.8 124
AT*EIALSR - Internet Account Configuration, Read Link
Socket Parameters 9.9 127
AT*EIALSW - Internet Account Configuration, Write Link
Socket Parameters 9.10 128
AT*EIAPSR - Internet Account Configuration, Read PS
Bearer Parameters 9.14 135
AT*EIAPSW - Internet Account Configuration, Write PS
Bearer Parameters 9.13 133
AT*EIAR - Internet Account Configuration, Read General 9.15 137

4/159 35-5/FCP 101 4577 Uen Rev B
Parameters
AT*EIARUTD - Internet Account Configuration, Delete
Routing Table Parameters 9.19 143
AT*EIARUTR - Internet Account Configuration, Read
AT*EIARUTW - Internet Account Configuration, Write
AT*EIAW - Internet Account Configuration, Write General
Parameters 9.16 138
AT*EMWI Message Waiting Indication 15.2 215
AT*ENAP USB Ethernet Interface Control 8.17 110
AT*EPEE Pin Event 16.3 222
AT*EPIN Additional PIN Information 16.6 224
AT*ERINFO Network Capability 12.2 167
AT*ESTKMENU Menu Selection 17.1 230
AT*ESTKRES Terminal Response 17.2 230
AT*ESTKS SIM Application Toolkit Settings 17.3 233
AT*EUPLINK Send Uplink Data 8.18 111
AT+CACM Accumulated Call Meter 18.2 253
AT+CAMM Accumulated Call Meter Maximum 18.3 254
AT+CAOC Advice of Charge 18.4 255
AT+CBST Select Bearer Service Type 7.1 67
AT+CCFC Call Forwarding number and Conditions 18.6 257
AT+CCLK Set Clock and Date 6.1 66
AT+CCWA Call Waiting 18.7 259
AT+CEAP EAP Authentication 16.7 225
AT+CEER Extended Error Report 3.10 33
AT+CERP EAP Retrieve Parameters 16.8 227
AT+CFUN Set Phone Functionality 4.1 54
AT+CGACT PDP Context Activate or Deactivate 8.1 71
AT+CGATT GPRS Attach or Detach 8.3 72
AT+CGCLASS GPRS Mobile Station Class 8.4 73
AT+CGCMOD PDP Context Modify 8.2 72
AT+CGDATA Enter Data State 8.5 74
AT+CGDCONT Define PDP Context 8.6 76
AT+CGDSCONT Define Secondary PDP Context 8.7 78
AT+CGEQMIN 3G Quality of Service Profile (Minimum
acceptable) 8.10 83
AT+CGEQNEG 3G Quality of Service Profile (Negotiated) 8.11 91
AT+CGEQREQ 3G Quality of Service Profile (Requested) 8.12 95
AT+CGEREP GPRS Event Reporting 8.8 80
AT+CGMI Read MS Manufacturer Identification 10.2 146
AT+CGMM Read MS Model Identification 10.3 146
AT+CGMR Read Revision Identification 10.4 147
AT+CGPADDR Show PDP Address 8.9 82
AT+CGQMIN Quality of Service Profile (Minimum
Acceptable) 8.13 101
AT+CGQREQ Quality of Service Profile (Requested) 8.14 102
4/159 35-5/FCP 101 4577 Uen Rev B
AT+CGREG GPRS Network Registration Status 8.15 103
AT+CGSMS Select Service for MO SMS Messages 14.1 187
AT+CGSN Read Product Serial Number Identification 10.5 147
AT+CGTFT Traffic Flow Template 8.16 106
AT+CHUP Hang up Call 2.10 24
AT+CIMI Subscriber Identification 16.5 223
AT+CIND Indicator Control 3.11 33
AT+CLAC List All Available AT Commands 3.13 36
AT+CLCC List Current Calls 2.11 25
AT+CLCK Facility Lock 12.3 168
AT+CLIP Calling Line Identification 18.8 262
AT+CLIR Calling Line Identification Restriction 18.9 264
AT+CMAR Master Reset 4.3 55
AT+CMEE Mobile Equipment Error 3.14 37
AT+CMER Mobile Equipment Event Reporting 3.16 40
AT+CMGC Send Command 14.4 189
AT+CMGD Delete Message 14.7 193
AT+CMGF Message Format 14.2 187
AT+CMGL List Message 14.8 194
AT+CMGR Read Message 14.9 196
AT+CMGS Send Message 14.5 191
AT+CMGW Write Message to Memory 14.3 188
AT+CMSS Send From Storage 14.6 192
AT+CNMI New Message Indications to TE 14.11 198
AT+CNUM Subscriber Number 12.4 171
AT+COLP Connected Line Identification Presentation 18.1 252
AT+COPN Read Operator Names 12.5 173
AT+COPS Operator Selection 12.6 174
AT+CPAS Phone Activity Status 3.18 43
AT+CPBR Phonebook Read 13.1 181
AT+CPBS Phonebook Storage Select 13.2 183
AT+CPBW Phonebook Write 13.3 184
AT+CPIN PIN Control 16.2 220
AT+CPMS Preferred Message Storage 14.12 204
AT+CPOL Preferred Operator List 12.7 176
AT+CPUC Price Per Unit and Currency Table 18.5 256
AT+CPWD Change Password 3.19 45
AT+CR Service Reporting Control 3.20 46
AT+CRC Cellular Result Code 3.21 47
AT+CREG Network Registration 12.8 178
AT+CRES Restore SMS Settings 14.18 212
AT+CRLP Radio Link Protocol 7.2 68
AT+CRSM Restricted SIM Access 16.1 217
AT+CSAS Save SMS Settings 14.19 212
AT+CSCA Service Centre Address 14.13 206
AT+CSCB Select Cell Broadcast Message Type 15.1 214
AT+CSCS Select Character Set 14.14 207
AT+CSMP Set Text Mode Parameters 14.15 208
4/159 35-5/FCP 101 4577 Uen Rev B
AT+CSMS Select Message Service 14.16 209
AT+CSQ Signal Strength 3.22 49
AT+CSSN Supplementary Service Notification 18.10 265
AT+CUAD UICC Application Discovery 16.9 228
AT+CUSD Unstructured Supplementary Service Data 18.11 269
AT+GCAP Capabilities 10.6 148
AT+GMI Request Manufacturer Identification 10.7 148
AT+GMM Request Model Identification 10.8 149
AT+GMR Revision Identification 10.9 149
AT+ICF DTE-DCE Character Framing Format 11.4 155
AT+IFC DTE-DCE Local Flow Control 11.5 156
AT+IPR Cable Interface Port baud rate 11.6 157
ATA Answer Incoming Call 2.1 15
ATD Dial 2.2 15
ATD Extension (*98) - Request Packet Domain IP Service 2.4 20
ATD Extension (*99) - Request Packet Domain Service 2.3 19
ATE Command Echo 11.7 158
ATH Hang up 2.5 22
ATI Identification Information 10.10 150
ATO Return to Online Data Mode 2.6 22
ATP Select Pulse dialing 2.7 23
ATQ Result Code Suppression 11.8 159
ATS0 Automatic Answer Control 3.1 28
ATS10 Automatic Disconnect Delay Control 3.9 32
ATS2 Escape Sequence Character 3.2 28
ATS3 Command Line Termination Character 3.3 29
ATS4 Response Formatting Character 3.4 30
ATS5 Command Line Editing Character (BACKSPACE) 3.5 30
ATS6 Blind Dial Delay Control 3.6 31
ATS7 Connection Completion Timeout 3.7 31
ATS8 Comma Dial Modifier Delay Control 3.8 32
ATT Select Tone Dialing 2.8 23
ATV DCE Response Format 11.3 154
ATX Call Progress Monitoring Control 2.9 23
ATZ Restore Configuration Profile 5.3 65

4/159 35-5/FCP 101 4577 Uen Rev B

PC300 MD300 GSG AT Command R2a EN

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

PC300 MD300 GSG AT Command R2a EN

Uploaded by

Copyright:

Available Formats

PC300

The AT Command Manual describes the

AT Commands that are supported in the

PC300 PC Card and MD300 Broadband USB Modem.

Further, no portion of this publication may be reproduced, stored in a

First Edition (July 2007)

Sony Ericsson Mobile Communications International publishes this manual

All rights reserved.

© Sony Ericsson Mobile Communications International, 2008

Publication number: 1202-6404 Rev. 2

Printed in United States of America

PC300 AT Command Manual Page 2 of 272

3 Control and Status ............................................................................................ 27

4 Operational Control and Status.......................................................................... 53

6 Time Commands ............................................................................................... 65

8 Data - GPRS ...................................................................................................... 70

PC300 AT Command Manual Page 4 of 272

9 Internet Accounts............................................................................................ 111

11 Serial Interface ................................................................................................ 150

PC300 AT Command Manual Page 5 of 272

12 Network .......................................................................................................... 157

14 Short Message Services - Point to Point ........................................................... 184

15 Short Message Services - Cell Broadcast .......................................................... 210

16 SIM Commands ............................................................................................... 213

17 SIM Application Toolkit ................................................................................... 225

18 Supplementary Services................................................................................... 247

19 Alternate Line Services .................................................................................... 268

PC300 AT Command Manual Page 7 of 272

PC300 AT Command Manual Page 8 of 272

1.1 Related Documentation

1.3 History of Core Module AT Commands Manuals

AT Manual Version Product Firmware Revision

1.4 Syntax Description

PC300 AT Command Manual Page 9 of 272

1.4.2 AT Command Syntax

Basic Syntax Command

Extended Syntax Command

Read Command Syntax

1.4.3 Other Terminology

1.4.4 AT Response Syntax

Unsolicited Result Code

1.5 Examples on How to Use the AT Commands

1.6 GPRS Communication

PC300 AT Command Manual Page 12 of 272

If the module is able to connect to the APN it will return a

The following commands can be aborted:

PC300 AT Command Manual Page 14 of 272

2.1 ATA Answer Incoming Call

Description Command Possible Responses

This command is abortable.

2.2 ATD Dial

PC300 AT Command Manual Page 16 of 272

PC300 AT Command Manual Page 18 of 272

2.3 ATD Extension (*99) - Request Packet Domain Service

PC300 AT Command Manual Page 19 of 272

2.4 ATD Extension (*98) - Request Packet Domain IP Service

PC300 AT Command Manual Page 20 of 272

PC300 AT Command Manual Page 21 of 272

2.5 ATH Hang up

2.6 ATO Return to Online Data Mode

PC300 AT Command Manual Page 22 of 272

Description Command Possible Responses