SIM7000 Series - AT Command Manual - V1.06

SIM7000 Series_
AT Command Manual
LPWA Module
SIMCom Wireless Solutions Limited

Building B, SIM Technology Building, No.633, Jinzhong Road
Changning District, Shanghai P.R. China
Tel: 86-21-31575100
[email protected]
www.simcom.com
SIM7000 Series_AT Command Manual_V1.06
Document Title: SIM7000 Series_AT Command Manual

Version: 1.06
Date: 2020.7.28
Status: Released
GENERAL NOTES
SIMCOM OFFERS THIS INFORMATION AS A SERVICE TO ITS CUSTOMERS, TO SUPPORT

APPLICATION AND ENGINEERING EFFORTS THAT USE THE PRODUCTS DESIGNED BY SIMCOM.
THE INFORMATION PROVIDED IS BASED UPON REQUIREMENTS SPECIFICALLY PROVIDED TO
SIMCOM BY THE CUSTOMERS. SIMCOM HAS NOT UNDERTAKEN ANY INDEPENDENT SEARCH
FOR ADDITIONAL RELEVANT INFORMATION, INCLUDING ANY INFORMATION THAT MAY BE IN THE
CUSTOMER’S POSSESSION. FURTHERMORE, SYSTEM VALIDATION OF THIS PRODUCT
DESIGNED BY SIMCOM WITHIN A LARGER ELECTRONIC SYSTEM REMAINS THE RESPONSIBILITY
OF THE CUSTOMER OR THE CUSTOMER’S SYSTEM INTEGRATOR. ALL SPECIFICATIONS
SUPPLIED HEREIN ARE SUBJECT TO CHANGE.
COPYRIGHT
THIS DOCUMENT CONTAINS PROPRIETARY TECHNICAL INFORMATION WHICH IS THE PROPERTY

OF SIMCOM WIRELESS SOLUTIONS LIMITED COPYING, TO OTHERS AND USING THIS DOCUMENT,
ARE FORBIDDEN WITHOUT EXPRESS AUTHORITY BY SIMCOM. OFFENDERS ARE LIABLE TO THE
PAYMENT OF INDEMNIFICATIONS. ALL RIGHTS RESERVED BY SIMCOM IN THE PROPRIETARY
TECHNICAL INFORMATION ，INCLUDING BUT NOT LIMITED TO REGISTRATION GRANTING OF A
PATENT , A UTILITY MODEL OR DESIGN. ALL SPECIFICATION SUPPLIED HEREIN ARE SUBJECT TO
CHANGE WITHOUT NOTICE AT ANY TIME.
SIMCom Wireless Solutions Limited

Building B, SIM Technology Building, No.633 Jinzhong Road, Changning District, Shanghai P.R. China
Tel: +86 21 31575100
Email: [email protected]
For more information, please visit:

https://www.simcom.com/download/list-863-en.html
For technical support, or to report documentation errors, please visit:

https://www.simcom.com/ask/ or email to: [email protected]
Copyright © 2020 SIMCom Wireless Solutions Limited All Rights Reserved.
www.simcom.com 2 / 281
Version History
Version Date Chapter What is new

V1.00 2017.06.22 New version
5.2.22 AT+CPSI Add AT command
5.2.23 AT+CGNAPN Add AT command
5.2.24 AT+CSDP Add AT command
5.2.25 AT+MCELLLOCK Add AT command
5.2.26 AT+NCELLLOCK Add AT command
V1.01 2017.09.08
5.2.27 AT+NBSC Add AT command
Chapter 7 Add IP
Chapter 9 Add HTTP
Chapter 10 Add PINGs
Chapter 13 Add GNSS
Delete ATZ,AT&F,AT&V
Modify parameter save mode and max
All
response time
1.7.1 Add AUTO_SAVE_REBOOT
1.7.2 Add Max response time
2.2.2 ATD Delete parameters <;>
3.2.14 AT+CREG Change description of parameters
5.2.28 AT+CAPNMODE Add AT command
V1.02 2017.12.18 5.2.29 AT+CRRCSTATE Add AT command
5.2.30 AT+CBANDCFG Add AT command
Change range of parameter <n> from 0…5
8.2.2 AT+CIPSTART
to 0…7
8.2.32 AT+CIPTKA Add AT command
8.2.33 AT+CIPOPTION Add AT command
Chapter 11 Add FTP
Chapter 12 Add NTP
13.3.10 AT+CGNSTST Add AT Command
3.2.17 AT+CPOL Modify parameters
3.2.24 AT+CNUM Add AT Command
5.2.1 AT+CEDRXS Modify range of <AcT-type>
5.2.31 AT+CNACT Add AT Command
V1.03 2018.05.08
5.2.32 AT+CEDUMP Add AT Command
5.2.33 AT+CNBS Add AT Command
5.2.34 AT+CNDS Add AT Command
5.2.35 AT+CENG Add AT Command
9.2.9 AT+HTTPTOFS Add AT Command

Chapter 13 Add OneNet
Chapter 14 Add Telecom IOT
Chapter 15 Add GNSS
Chapter 16 Add File system
Chapter 17 Add SAT
Chapter 18 Add SSL
Delete AT+CASSL
5.2.36 AT+CNACTCFG Add AT Command
5.2.37 AT+CTLIIC Add AT Command
5.2.38 AT+CWIIC Add AT Command
5.2.39 AT+CRIIC Add AT Command
5.2.40 AT+CMCFG Add AT Command
5.2.41 AT+CSIMLOCK Add AT Command
5.2.42 AT+CRATSRCH Add AT Command
5.2.43 AT+SPWM Add AT Command
5.2.44 AT+CASRIP Add AT Command
5.2.45 AT+CEDRX Add AT Command
6.2.7 AT+CEREG Add AT Command
9.2.10 AT+HTTPTOFSRL Add AT Command
13.2.16
Add AT Command
V1.04 2108.12.25 AT+MIPLBOOTSTRAP
13.2.17 +MIPLREAD Add AT Command
13.2.18 +MIPLWRITE Add AT Command
13.2.19 +MIPLEXECUTE Add AT Command
13.2.20 +MIPLOBSERVE Add AT Command
13.2.21 +MIPLDISCOVER Add AT Command
13.2.22
Add AT Command
+MIPLPARAMETER
13.2.23 +MIPLEVENT Add AT Command
15.2.13 AT+CGNSRTMS Add AT Command
18.2.2 AT+CASSLCFG Extend AT command
18.2.8 AT+CACFG Add AT Command
18.2.9 AT+CASWITCH Add AT Command
Chapter 19 Add PING
Chapter 20 Add Supported Unsolicited Result Codes
AT+CNBP Delete AT Command
5.2.45 AT+CPSMRDP Add AT Command
V1.05 2020.01.20 5.2.46 AT+CPSMCFG Add AT Command
5.2.47 AT+CPSMCFGEXT Add AT Command
5.2.48 AT+CPSMSTATUS Add AT Command
5.2.49 AT+CEDRXRDP Add AT Command

5.2.50 AT+CRAI Add AT Command
15.2.14 AT+CGNSHOR Add AT Command
15.2.15 AT+CGNSUTIPR Add AT Command
15.2.16 AT+CGNSNMEA Add AT Command
15.2.17 AT+CGTP Add AT Command
15.2.18 AT+CGNSSUPLCFG Add AT Command
15.2.19 AT+CGNSSUPL Add AT Command
V1.06 2020.07.28 All
Contents
Version History..................................................................................................................................... 3
Contents................................................................................................................................................. 6
1 Introduction.................................................................................................................................. 15
1.1 Scope of the document........................................................................................................................15
1.2 Related documents...............................................................................................................................15
1.3 Conventions and abbreviations.......................................................................................................... 15
1.4 AT Command syntax............................................................................................................................ 15
1.4.1 Basic syntax...................................................................................................................................16
1.4.2 S Parameter syntax......................................................................................................................16
1.4.3 Extended Syntax...........................................................................................................................16
1.4.4 Combining AT commands on the same Command line........................................................ 17
1.4.5 Entering successive AT commands on separate lines........................................................... 17
1.5 Supported character sets.................................................................................................................... 17
1.6 Flow control............................................................................................................................................18
1.6.1 Software flow control (XON/XOFF flow control)......................................................................18
1.6.2 Hardware flow control (RTS/CTS flow control)........................................................................18
1.7 Definitions...............................................................................................................................................19
1.7.1 Parameter Saving Mode..............................................................................................................19
1.7.2 Max Response Time.....................................................................................................................19
2 AT Commands According to V.25TER...................................................................................20

2.1 Overview of AT Commands According to V.25TER........................................................................ 20
2.2 Detailed Description of AT Commands According to V.25TER.....................................................21
2.2.1 A/ Re-issues the Last Command Given.................................................................................21
2.2.2 ATD Mobile Originated Call to Dial A Number...................................................................... 21
2.2.3 ATE Set Command Echo Mode.............................................................................................. 22
2.2.4 ATH Disconnect Existing Connection.....................................................................................23
2.2.5 ATI Display Product Identification Information...................................................................... 23
2.2.6 ATL Set Monitor speaker loudness.........................................................................................24
2.2.7 ATM Set Monitor Speaker Mode............................................................................................. 24
2.2.8 +++ Switch from Data Mode or PPP Online Mode to Command Mode........................... 24
2.2.9 ATO Switch from Command Mode to Data Mode................................................................ 25
2.2.10 ATQ Set Result Code Presentation Mode.............................................................................25
2.2.11 ATS0 Set Number of Rings before Automatically Answering the Call.............................. 26
2.2.12 ATS3 Set Command Line Termination Character................................................................ 26
2.2.13 ATS4 Set Response Formatting Character...........................................................................27
2.2.14 ATS5 Set Command Line Editing Character.........................................................................28
2.2.15 ATS6 Pause Before Blind Dialing........................................................................................... 28
2.2.16 ATS7 Set Number of Seconds to Wait for Connection Completion.................................. 29
2.2.17 ATS8 Set Number of Seconds to Wait for Comma Dial Modifier Encountered in Dial
String of D Command...................................................................................................................................29
2.2.18 ATS10 Set Disconnect Delay after Indicating the Absence of Data Carrier.................... 30
2.2.19 ATV TA Response Format........................................................................................................ 30
2.2.20 ATX Set CONNECT Result Code Format and Monitor Call Progress..............................31
2.2.21 AT&C Set DCD Function Mode............................................................................................... 32
2.2.22 AT&D Set DTR Function Mode................................................................................................32
2.2.23 AT&E Set CONNECT Result Code Format About Speed.................................................. 33
2.2.24 AT+GCAP Request Complete TA Capabilities List.............................................................. 33
2.2.25 AT+GMI Request Manufacturer Identification.......................................................................34
2.2.26 AT+GMM Request TA Model Identification............................................................................34
2.2.27 AT+GMR Request TA Revision Identification of Software Release.................................. 35
2.2.28 AT+GOI Request Global Object Identification...................................................................... 35
2.2.29 AT+GSN Request TA Serial Number Identification (IMEI)..................................................36
2.2.30 AT+ICF Set TE-TA Control Character Framing.................................................................... 36
2.2.31 AT+IFC Set TE-TA Local Data Flow Control......................................................................... 37
2.2.32 AT+IPR Set TE-TA Fixed Local Rate......................................................................................38
3 AT Commands According to 3GPP TS 27.007.................................................................... 40

3.1 Overview of AT Command According to 3GPP TS 27.007............................................................40
3.2 Detailed Descriptions of AT Command According to 3GPP TS 27.007...................................... 41
3.2.1 AT+CGMI Request Manufacturer Identification....................................................................41
3.2.2 AT+CGMM Request Model Identification.............................................................................. 41
3.2.3 AT+CGMR Request TA Revision Identification of Software Release............................... 42
3.2.4 AT+CGSN Request Product Serial Number Identification..................................................42
3.2.5 AT+CSCS Select TE Character Set....................................................................................... 42
3.2.6 AT+CIMI Request International Mobile Subscriber Identity................................................43
3.2.7 AT+CLCK Facility Lock............................................................................................................. 44
3.2.8 AT+CMEE Report Mobile Equipment Error...........................................................................45
3.2.9 AT+COPS Operator Selection................................................................................................. 46
3.2.10 AT+CPAS Phone Activity Status............................................................................................. 48
3.2.11 AT+CPIN Enter PIN................................................................................................................... 48
3.2.12 AT+CPWD Change Password.................................................................................................49
3.2.13 AT+CRC Set Cellular Result Codes for Incoming Call Indication..................................... 50
3.2.14 AT+CREG Network Registration............................................................................................. 51
3.2.15 AT+CRSM Restricted SIM Access..........................................................................................52
3.2.16 AT+CSQ Signal Quality Report............................................................................................... 53
3.2.17 AT+CPOL Preferred Operator List.......................................................................................... 54
3.2.18 AT+COPN Read Operator Names..........................................................................................55
3.2.19 AT+CFUN Set Phone Functionality........................................................................................ 56
3.2.20 AT+CCLK Clock......................................................................................................................... 57
3.2.21 AT+CSIM Generic SIM Access................................................................................................58
3.2.22 AT+CBC Battery Charge.......................................................................................................... 58
3.2.23 AT+CUSD Unstructured Supplementary Service Data....................................................... 59
3.2.24 AT+CNUM Subscriber Number............................................................................................... 60
4 AT Commands According to 3GPP TS 27.005.................................................................... 61
4.1 Overview of AT Commands According to 3GPP TS 27.005..........................................................61

4.2 Detailed Descriptions of AT Commands According to 3GPP TS 27.005.................................... 61
4.2.1 AT+CMGD Delete SMS Message...........................................................................................61
4.2.2 AT+CMGF Select SMS Message Format..............................................................................62
4.2.3 AT+CMGL List SMS Messages from Preferred Store......................................................... 63
4.2.4 AT+CMGR Read SMS Message.............................................................................................66
4.2.5 AT+CMGS Send SMS Message............................................................................................. 69
4.2.6 AT+CMGW Write SMS Message to Memory........................................................................ 70
4.2.7 AT+CMSS Send SMS Message from Storage..................................................................... 72
4.2.8 AT+CNMI New SMS Message Indications............................................................................73
4.2.9 AT+CPMS Preferred SMS Message Storage....................................................................... 75
4.2.10 AT+CRES Restore SMS Settings........................................................................................... 76
4.2.11 AT+CSAS Save SMS Settings................................................................................................ 77
4.2.12 AT+CSCA SMS Service Center Address...............................................................................77
4.2.13 AT+CSDH Show SMS Text Mode Parameters..................................................................... 78
4.2.14 AT+CSMP Set SMS Text Mode Parameters.........................................................................79
4.2.15 AT+CSMS Select Message Service....................................................................................... 80
5 AT Commands Special for SIMCom.......................................................................................82

5.1 Overview.................................................................................................................................................82
5.2 Detailed Descriptions of Commands................................................................................................. 83
5.2.1 AT+CPOWD Power off..............................................................................................................83
5.2.2 AT+CADC Read ADC................................................................................................................84
5.2.3 AT+CFGRI Indicate RI When Using URC............................................................................. 84
5.2.4 AT+CLTS Get Local Timestamp..............................................................................................85
5.2.5 AT+CBAND Get and Set Mobile Operation Band................................................................ 87
5.2.6 AT+CNSMOD Show Network System Mode........................................................................... 87
5.2.7 AT+CSCLK Configure Slow Clock.......................................................................................... 88
5.2.8 AT+CCID Show ICCID.............................................................................................................. 89
5.2.9 AT+CDEVICE View Current Flash Device Type...................................................................89
5.2.10 AT+GSV Display Product Identification Information............................................................ 90
5.2.11 AT+SGPIO Control the GPIO.................................................................................................. 90
5.2.12 AT+SLEDS Set the Timer Period of Net Light...................................................................... 91
5.2.13 AT+CNETLIGHT Close the Net Light or Open It to Shining...............................................92
5.2.14 AT+CSGS Netlight Indication of GPRS Status..................................................................... 92
5.2.15 AT+CGPIO Control the GPIO by PIN Index..........................................................................93
5.2.16 AT+CBATCHK Set VBAT Checking Feature ON/OFF........................................................ 94
5.2.17 AT+CNMP Preferred Mode Selection.................................................................................... 95
5.2.18 AT+CMNB Preferred Selection between CAT-M and NB-IoT............................................ 95
5.2.19 AT+CPSMS Power Saving Mode Setting..............................................................................96
5.2.20 AT+CEDRXS Extended-DRX Setting.....................................................................................97
5.2.21 AT+CPSI Inquiring UE System Information...........................................................................98
5.2.22 AT+CGNAPN Get Network APN in CAT-M Or NB-IOT.....................................................100
5.2.23 AT+CSDP Service Domain Preference............................................................................... 100
5.2.24 AT+MCELLLOCK Lock the special CAT-M cell.....................................................................101
5.2.25 AT+NCELLLOCK Lock the special NB-IOT cell....................................................................102
5.2.26 AT+NBSC Configure NB-IOT Scrambling Feature............................................................ 102

5.2.27 AT+CAPNMODE Select the Mode of Application Configure APN.................................. 103
5.2.28 AT+CRRCSTATE Query RRC State.................................................................................... 104
5.2.29 AT+CBANDCFG Configure CAT-M Or NB-IOT Band....................................................... 104
5.2.30 AT+CNACT APP Network Active.......................................................................................... 105
5.2.31 AT+CNCFG PDP Configure...................................................................................................106
5.2.32 AT+CEDUMP Set Whether the Module Reset When The Module is Crashed.............107
5.2.33 AT+CNBS Configure Band Scan Optimization For NB-IOT.............................................108
5.2.34 AT+CNDS Configure Service Domain Preference For NB-IOT...................................... 109
5.2.35 AT+CENG Switch On or Off Engineering Mode.................................................................109
5.2.36 AT+CNACTCFG Configure IP Protocol Type......................................................................111
5.2.37 AT+CTLIIC Control the Switch of IIC....................................................................................112
5.2.38 AT+CWIIC Write Values to Register of IIC Device.............................................................113
5.2.39 AT+CRIIC Read Values from Register of IIC Device.........................................................113
5.2.40 AT+CMCFG Manage Mobile Operator Configuration........................................................114
5.2.41 AT+CSIMLOCK SIM Lock...................................................................................................... 115
5.2.42 AT+CRATSRCH Configure Parameter for Better RAT Search........................................ 117
5.2.43 AT+SPWM Generate the Pulse-Width-Modulation............................................................ 118
5.2.44 AT+CASRIP Show Remote IP address and Port When Received Data........................118
5.2.45 AT+CEDRX Configure EDRX parameters...........................................................................119
5.2.46 AT+CPSMRDP Read PSM Dynamic Parameters............................................................. 120
5.2.47 AT+CPSMCFG Configure PSM version and Minimum Threshold Value.......................121
5.2.48 AT+CPSMCFGEXT Configure Modem Optimization of PSM..........................................122
5.2.49 AT+CPSMSTATUS Enable Deep Sleep Wakeup Indication............................................123
5.2.50 AT+CEDRXRDP eDRX Read Dynamic Parameters.........................................................124
5.2.51 AT+CRAI Configure Release Assistance Indication in NB-IOT network........................125
6 AT Commands for GPRS Support........................................................................................127

6.1 Overview.............................................................................................................................................. 127
6.2 Detailed Descriptions of AT Commands for GPRS Support....................................................... 127
6.2.1 AT+CGATT Attach or Detach from GPRS Service............................................................ 127
6.2.2 AT+CGDCONT Define PDP Context................................................................................... 128
6.2.3 AT+CGACT PDP Context Activate or Deactivate.............................................................. 130
6.2.4 AT+CGPADDR Show PDP Address.....................................................................................130
6.2.5 AT+CGREG Network Registration Status........................................................................... 132
6.2.6 AT+CGSMS Select Service for MO SMS Messages........................................................ 134
6.2.7 AT+CEREG EPS Network Registration Status.................................................................. 134
7 AT Commands for IP Application......................................................................................... 137

7.1 Overview.............................................................................................................................................. 137
7.2 Detailed Descriptions of Commands...............................................................................................137
7.2.1 AT+SAPBR Bearer Settings for Applications Based on IP...............................................137
8 AT Commands for TCPIP Application Toolkit................................................................... 139

8.1 Overview.............................................................................................................................................. 139
8.2.1 AT+CIPMUX Start Up Multi-IP Connection......................................................................... 140
8.2.2 AT+CIPSTART Start Up TCP or UDP Connection.............................................................140

8.2.3 AT+CIPSEND Send Data Through TCP or UDP Connection..........................................143
8.2.4 AT+CIPQSEND Select Data Transmitting Mode................................................................144
8.2.5 AT+CIPACK Query Previous Connection Data Transmitting State................................ 145
8.2.6 AT+CIPCLOSE Close TCP or UDP Connection................................................................ 146
8.2.7 AT+CIPSHUT Deactivate GPRS PDP Context.................................................................. 147
8.2.8 AT+CLPORT Set Local Port.................................................................................................. 147
8.2.9 AT+CSTT Start Task and Set APN, USER NAME, PASSWORD................................... 148
8.2.10 AT+CIICR Bring Up Wireless Connection with GPRS...................................................... 149
8.2.11 AT+CIFSR Get Local IP Address..........................................................................................150
8.2.12 AT+CIFSREX Get Local IP Address extend....................................................................... 150
8.2.13 AT+CIPSTATUS Query Current Connection Status.......................................................... 151
8.2.14 AT+CDNSCFG Configure Domain Name Server.............................................................. 152
8.2.15 AT+CDNSGIP Query the IP Address of Given Domain Name........................................ 153
8.2.16 AT+CIPHEAD Add an IP Head at the Beginning of a Package Received.....................154
8.2.17 AT+CIPATS Set Auto Sending Timer................................................................................... 155
8.2.18 AT+CIPSPRT Set Prompt of ‘>’ When Module Sends Data............................................ 155
8.2.19 AT+CIPSERVER Configure Module as Server.................................................................. 156
8.2.20 AT+CIPCSGP Set GPRS for Connection Mode.................................................................157
8.2.21 AT+CIPSRIP Show Remote IP Address and Port When Received Data...................... 158
8.2.22 AT+CIPDPDP Set Whether to Check State of GPRS Network Timing..........................158
8.2.23 AT+CIPMODE Select TCPIP Application Mode................................................................. 159
8.2.24 AT+CIPCCFG Configure Transparent Transfer Mode...................................................... 160
8.2.25 AT+CIPSHOWTP Display Transfer Protocol in IP Head When Received Data........... 161
8.2.26 AT+CIPUDPMODE UDP Extended Mode...........................................................................162
8.2.27 AT+CIPRXGET Get Data from Network Manually.............................................................163
8.2.28 AT+CIPRDTIMER Set Remote Delay Timer.......................................................................165
8.2.29 AT+CIPSGTXT Select GPRS PDP context........................................................................ 166
8.2.30 AT+CIPSENDHEX Set CIPSEND Data Format to Hex.................................................... 166
8.2.31 AT+CIPHEXS Set Output-data Format with suffix.............................................................167
8.2.32 AT+CIPTKA Set TCP Keepalive Parameters......................................................................167
8.2.33 AT+CIPOPTION Enable or Disable TCP nagle algorithm................................................ 168
9 AT Commands for HTTP(S) Application.............................................................................170

9.1 Overview.............................................................................................................................................. 170
9.2.1 AT+SHSSL Select SSL Configure........................................................................................ 171
9.2.2 AT+SHCONF Set HTTP(S) Parameter................................................................................171
9.2.3 AT+SHCONN HTTP(S) Connection.....................................................................................172
9.2.4 AT+SHBOD Set Body............................................................................................................. 172
9.2.5 AT+SHBODEXT Set Extension Body.................................................................................. 173
9.2.6 AT+SHAHEAD Add Head.......................................................................................................173
9.2.7 AT+SHCHEAD Clear Head....................................................................................................174
9.2.8 AT+SHPARA Set HTTP(S) Para........................................................................................... 174
9.2.9 AT+SHCPARA Clear HTTP(S) Para.................................................................................. 175
9.2.10 AT+SHSTATE Query HTTP(S) Connection Status............................................................175

9.2.11 AT+SHREQ Set Request Type............................................................................................. 176
9.2.12 AT+SHREAD Read Response Value...................................................................................177
9.2.13 AT+SHDISC Disconnect HTTP(S)........................................................................................178
9.2.14 AT+HTTPTOFS Download File to AP File System............................................................ 179
9.2.15 AT+HTTPTOFSRL State of Download File to AP File System........................................ 180
10 AT Commands for FTP Application.............................................................................. 181

10.1 Overview.............................................................................................................................................. 181
10.2.1 AT+FTPPORT Set FTP Control Port....................................................................................182
10.2.2 AT+FTPMODE Set Active or Passive FTP Mode.............................................................. 182
10.2.3 AT+FTPTYPE Set the Type of Data to Be Transferred.....................................................183
10.2.4 AT+FTPPUTOPT Set FTP Put Type.................................................................................... 184
10.2.5 AT+FTPCID Set FTP Bearer Profile Identifier.................................................................... 184
10.2.6 AT+FTPREST Set Resume Broken Download.................................................................. 185
10.2.7 AT+FTPSERV Set FTP Server Address..............................................................................185
10.2.8 AT+FTPUN Set FTP User Name.......................................................................................... 186
10.2.9 AT+FTPPW Set FTP Password............................................................................................ 186
10.2.10 AT+FTPGETNAME Set Download File Name............................................................187
10.2.11 AT+FTPGETPATH Set Download File Path............................................................... 188
10.2.12 AT+FTPPUTNAME Set Upload File Name.................................................................188
10.2.13 AT+FTPPUTPATH Set Upload File Path.....................................................................189
10.2.14 AT+FTPGET Download File.......................................................................................... 189
10.2.15 AT+FTPPUT Set Upload File.........................................................................................191
10.2.16 AT+FTPDELE Delete Specified File in FTP Server...................................................192
10.2.17 AT+FTPSIZE Get the Size of Specified File in FTP Server..................................... 192
10.2.18 AT+FTPSTATE Get the FTP State............................................................................... 193
10.2.19 AT+FTPEXTPUT Extend Upload File............................................................................. 194
10.2.20 AT+FTPMKD Make Directory on the Remote Machine............................................ 194
10.2.21 AT+FTPRMD Remove Directory on the Remote Machine.......................................195
10.2.22 AT+FTPLIST List Contents of Directory on the Remote Machine.......................... 196
10.2.23 AT+FTPEXTGET Extend Download File.....................................................................197
10.2.24 AT+FTPETPUT Upload File...........................................................................................198
10.2.25 AT+FTPETGET Download File..................................................................................... 199
10.2.26 AT+FTPQUIT Quit Current FTP Session.................................................................... 200
10.2.27 AT+FTPRENAME Rename the Specified File on the Remote Machine................200
10.2.28 AT+FTPMDTM Get the Last Modification Timestamp of Specified File on the
Remote Machine.........................................................................................................................................201
11 AT Command for NTP function...................................................................................... 203

11.1 Overview.............................................................................................................................................. 203
11.2.1 AT+CNTPCID Set GPRS Bearer Profile’s ID..................................................................... 203
11.2.2 AT+CNTP Synchronize Network Time.................................................................................204
12 AT Commands for OneNet Application........................................................................206
12.1 Overview.............................................................................................................................................. 206

12.2.1 AT+MIPLCREATE Create OneNet configuration............................................................... 207
12.2.2 AT+MIPLDELETE Delete OneNet configuration................................................................207
12.2.3 AT+MIPLOPEN Connect to OneNet.................................................................................... 208
12.2.4 AT+MIPLADDOBJ Add object............................................................................................... 208
12.2.5 AT+MIPLDELOBJ Delete Object.......................................................................................... 209
12.2.6 AT+MIPLCLOSE Disconnect to OneNet............................................................................. 209
12.2.7 AT+MIPLNOTIFY Notify Data to OneNet............................................................................ 210
12.2.8 AT+MIPLREADRSP Send Response on Read Command.............................................. 211
12.2.9 AT+MIPLWRITERSP Send Response on Write Command............................................. 211
12.2.10 AT+MIPLEXECUTERSP Send Response on Execute Command......................... 212
12.2.11 AT+MIPLOBSERVERSP Send Response On Observe Command....................... 212
12.2.12 AT+MIPLDISCOVERRSP Send Response on Discover Command...................... 213
12.2.13 AT+MIPLPARAMETERRSP Send Response on Parameter Command............... 213
12.2.14 AT+MIPLUPDATE Update Registration.......................................................................214
12.2.15 AT+MIPLVER Version of OneNet SDK........................................................................214
12.2.16 AT+MIPLBOOTSTRAP Bootstrap Mode..................................................................... 215
12.2.17 +MIPLREAD Read Request to User............................................................................ 215
12.2.18 +MIPLWRITE Write Request to User...........................................................................216
12.2.19 +MIPLEXECUTE Execute Request to User............................................................... 216
12.2.20 +MIPLOBSERVE Observe Request to User.............................................................. 217
12.2.21 +MIPLDISCOVER Discover Request to User............................................................ 217
12.2.22 +MIPLPARAMETER Set Parameter Request to User.............................................. 217
12.2.23 +MIPLEVENT Event Indication to User.......................................................................218
13 AT Commands for Telecom IOT Application.............................................................. 219

13.1 Overview.............................................................................................................................................. 219
13.2.1 AT+SIMLCREATE Create Configuration............................................................................. 219
13.2.2 AT+SIMLMODE Connection Mode.......................................................................................220
13.2.3 AT+SIMLOPEN Connect to Telecom IOT............................................................................220
13.2.4 AT+SIMLSEND Send Data to Telecom IOT........................................................................221
13.2.5 AT+SIMLCLOSE Disconnect to Telecom IOT.................................................................... 221
14 AT Commands for GNSS Application...........................................................................222

14.1 Overview.............................................................................................................................................. 222
14.2.1 AT+CGNSPWR GNSS Power Control.................................................................................222
14.2.2 AT+CGNSINF GNSS Navigation Information Parsed From NMEA Sentences........... 223
14.2.3 AT+CGNSURC GNSS Navigation URC Report.................................................................225
14.2.4 AT+CGNSPORT GNSS NMEA Out Port Set......................................................................226
14.2.5 AT+CGNSCOLD GNSS Cold Start...................................................................................... 226
14.2.6 AT+CGNSWARM GNSS Warm Start...................................................................................227
14.2.7 AT+CGNSHOT GNSS Hot Start........................................................................................... 227
14.2.8 AT+CGNSMOD GNSS Work Mode Set.............................................................................. 228
14.2.9 AT+CGNSCFG GNSS NMEA Out Configure..................................................................... 228
14.2.10 AT+CGNSTST GNSS NMEA Data Output to AT Port...............................................229

14.2.11 AT+CGNSXTRA GNSS XTRA Function Open...........................................................230
14.2.12 AT+CGNSCPY GNSS XTRA File Copy.......................................................................231
14.2.13 AT+CGNSRTMS GNSS NMEA Out Frequency Configure...................................... 231
14.2.14 AT+CGNSHOR Configure Positioning Desired Accuracy...................................... 232
14.2.15 AT+CGNSUTIPR Configure Baud Rate When NMEA Output from UART3....... 233
14.2.16 AT+CGNSNMEA Configure NMEA Output Sentences............................................. 233
14.2.17 AT+CGTP IZAT GNSS Configure................................................................................. 235
14.2.18 AT+CGNSSUPLCFG GNSS SUPL Configure.......................................................... 237
14.2.19 AT+CGNSSUPL GNSS SUPL Control....................................................................... 238
15 AT Commands for File System...................................................................................... 239

15.1 Overview.............................................................................................................................................. 239
15.2.1 AT+CFSINIT Get Flash Data Buffer..................................................................................... 239
15.2.2 AT+CFSWFILE Write File to the Flash Buffer Allocated by CFSINIT.............................240
15.2.3 AT+CFSRFILE Read File from Flash...................................................................................241
15.2.4 AT+CFSDFILE Delete the File from the Flash................................................................... 241
15.2.5 AT+CFSGFIS Get File Size................................................................................................... 242
15.2.6 AT+CFSREN Rename a File................................................................................................. 243
15.2.7 AT+CFSGFRS Get the Size of File System........................................................................244
15.2.8 AT+CFSTERM Free the Flash Buffer Allocated by CFSINIT...........................................244
15.2.9 AT+CBAINIT Initialize the AP Backup File System............................................................245
15.2.10 AT+CBALIST Set the files Which Want to Backup.................................................... 245
15.2.11 AT+CBAPPS Start to Backup AP File System Allocated by CBAINIT and CBALIST
246
15.2.12 AT+CBART Restore the File into AP File System......................................................246
16 AT Commands for SIM Application Toolkit.................................................................247

16.1 Overview.............................................................................................................................................. 247
16.2.1 AT+STIN SAT Indication.........................................................................................................247
16.2.2 AT+STGI Get SAT Information.............................................................................................. 248
16.2.3 AT+STGR SAT Respond........................................................................................................250
16.2.4 AT+STK STK Switch............................................................................................................... 251
17 AT Commands for SSL Application.............................................................................. 252

17.1 Overview of AT Commands for SSL Application........................................................................... 252
17.2 Detailed Descriptions of AT Commands for SSL Application...................................................... 252
17.2.1 AT+CSSLCFG Configure SSL Parameters of Context Identifier.....................................252
18 AT Commands for TCP/UDP Application.................................................................... 257

18.1 Overview.............................................................................................................................................. 257
18.2.1 AT+CACID Set TCP/UDP Identifier......................................................................................257
18.2.2 AT+CASSLCFG Set SSL Certificate and Timeout Parameters.......................................258
18.2.3 AT+CAOPEN Open a TCP/UDP Connection..................................................................... 260
18.2.4 AT+CASERVER Open a TCP/UDP Server.........................................................................261
18.2.5 AT+CASEND Send Data via an Established Connection................................................ 263

18.2.6 AT+CARECV Receive Data via an Established Connection........................................... 264
18.2.7 AT+CAACK Query Send Data Information......................................................................... 264
18.2.8 AT+CASTATE Query TCP/UDP Connection State............................................................ 265
18.2.9 AT+CACLOSE Close a TCP/UDP Connection...................................................................265
18.2.10 AT+CACFG Configure Transparent Transmission Parameters...............................266
18.2.11 AT+CASWITCH Switch to Transparent Transport Mode..........................................269
19 AT Commands for PING...................................................................................................271

19.1 Overview.............................................................................................................................................. 271
19.2.1 AT+SNPING4 Sends an IPv4 ping....................................................................................... 271
19.2.2 AT+SNPING6 Sends an IPv6 ping....................................................................................... 272
20 Supported Error Codes and Unsolicited Result Codes.......................................... 273

20.1 Summary of CME ERROR Codes...................................................................................................273
20.2 Summary of CMS ERROR Codes...................................................................................................276
20.3 Summary of Unsolicited Result Codes........................................................................................... 279
THIS DOCUMENT IS A REFERENCE GUIDE TO ALL THE AT COMMANDS.
1 Introduction
1.1 Scope of the document
This document presents the AT Command Set for SIMCom SIM7000 Series, including SIM7000A, SIM700C,
SIM7000E, SIM7000C-N, SIM7000E-N, SIM7000JC and SIM7000G.
1.2 Related documents
You can visit the SIMCom Website using the following link:
http://www.simcom.com
1.3 Conventions and abbreviations
In this document, the GSM engines are referred to as following term:

ME (Mobile Equipment);
MS (Mobile Station);
TA (Terminal Adapter);
DCE (Data Communication Equipment) or facsimile DCE (FAX modem, FAX board);
In application, controlling device controls the GSM engine by sending AT Command via its serial interface.
The controlling device at the other end of the serial line is referred to as following term:
TE (Terminal Equipment);
DTE (Data Terminal Equipment) or plainly "the application" which is running on an embedded system;
1.4 AT Command syntax
The "AT" or "at" or "aT" or "At" prefix must be set at the beginning of each Command line. To terminate a
Command line enter <CR>.

Commands are usually followed by a response that includes. "<CR><LF><response><CR><LF>"
Throughout this document, only the responses are presented,<CR><LF> are omitted intentionally.
The AT Command set implemented by SIM7080 Series is a combination of 3GPP TS 27.005, 3GPP TS
27.007 and ITU-T recommendation V.25ter and the AT commands developed by SIMCom.
NOTE
Only enter AT Command through serial port after SIM7080 Series is powered on and Unsolicited Result
Code "RDY" is received from serial port. If auto-bauding is enabled, the Unsolicited Result Codes
"RDY" and so on are not indicated when you start up the ME, and the "AT" prefix, or "at" prefix must be
set at the beginning of each command line.
All these AT commands can be split into three categories syntactically: "basic", "S parameter", and
"extended". These are as follows:
1.4.1 Basic syntax
These AT commands have the format of "AT<x><n>", or "AT&<x><n>", where "<x>"is the Command, and
"<n>"is/are the argument(s) for that Command. An example of this is "ATE<n>", which tells the DCE
whether received characters should be echoed back to the DTE according to the value of "<n>". "<n>" is
optional and a default will be used if missing.
1.4.2 S Parameter syntax
These AT commands have the format of "ATS<n>=<m>", where "<n>" is the index of the S register to set,
and "<m>" is the value to assign to it. "<m>" is optional; if it is missing, then a default value is assigned.
1.4.3 Extended Syntax
These commands can operate in several modes, as in the following table:
Table 1: Types of AT commands and responses

The mobile equipment returns the list of parameters and value
Test Command
ranges set with the corresponding Write Command or by internal
AT+<x>=?
processes.
Read Command This command returns the currently set value of the parameter or
AT+<x>? parameters.
Write Command
This command sets the user-definable parameter values.
AT+<x>=<…>
Execution Command The execution command reads non-variable parameters affected
AT+<x> by internal processes in the GSM engine.
1.4.4 Combining AT commands on the same Command line
You can enter several AT commands on the same line. In this case, you do not need to type the "AT" or "at"
prefix before every command. Instead, you only need type "AT" or "at" the beginning of the command line.
Please note to use a semicolon as the command delimiter after an extended command; in basic syntax or S
parameter syntax, the semicolon need not enter, for example:
ATE1Q0S0=1S3=13V1X4;+IFC=0,0;+IPR=115200.
The Command line buffer can accept a maximum of 559 characters (counted from the first command
without "AT" or "at" prefix) or 39 AT commands. If the characters entered exceeded this number then none
of the Command will executed and TA will return "ERROR".
1.4.5 Entering successive AT commands on separate lines
When you need to enter a series of AT commands on separate lines, please Note that you need to wait the
final response (for example OK, CME error, CMS error) of last AT Command you entered before you enter
the next AT Command.
1.5 Supported character sets
The SIM7080 Series AT Command interface defaults to the IRA character set. The SIM7080 Series
supports the following character sets:
GSM format
UCS2
IRA
The character set can be set and interrogated using the "AT+CSCS" Command (3GPP TS 27.007). The
character set is defined in GSM specification 3GPP TS 27.005.
The character set affects transmission and reception of SMS and SMS Cell Broadcast messages, the entry
and display of phone book entries text field and SIM Application Toolkit alpha strings.
1.6 Flow control
Flow control is very important for correct communication between the GSM engine and DTE. For in the
case such as a data or fax call, the sending device is transferring data faster than the receiving side is ready
to accept. When the receiving buffer reaches its capacity, the receiving device should be capable to cause
the sending device to pause until it catches up.
There are basically two approaches to achieve data flow control: software flow control and hardware flow
control. SIM7080 Series support both two kinds of flow control.
In Multiplex mode, it is recommended to use the hardware flow control.
1.6.1 Software flow control (XON/XOFF flow control)
Software flow control sends different characters to stop (XOFF, decimal 19) and resume (XON, decimal 17)
data flow. It is quite useful in some applications that only use three wires on the serial interface.
The default flow control approach of SIM7080 Series is hardware flow control (RTS/CTS flow control), to
enable software flow control in the DTE interface and within GSM engine, type the following AT Command:
AT+IFC=1,1
Ensure that any communications software package (e.g. Hyper terminal) uses software flow control.
NOTE
Software Flow control should not be used for data calls where binary data will be transmitted or
received (e.g. TCP/IP) as the DTE interface may interpret binary data as flow control characters.
1.6.2 Hardware flow control (RTS/CTS flow control)
Hardware flow control achieves the data flow control by controlling the RTS/CTS line. When the data
transfer should be suspended, the CTS line is set inactive until the transfer from the receiving buffer has
completed. When the receiving buffer is ok to receive more data, CTS goes active once again.
To achieve hardware flow control, ensure that the RTS/CTS lines are present on your application platform.
1.7 Definitions
1.7.1 Parameter Saving Mode
For the purposes of the present document, the following syntactical definitions apply:
 NO_SAVE: The parameter of the current AT command will be lost if module is rebooted or current AT
command doesn't have parameter.
 AUTO_SAVE: The parameter of the current AT command will be kept in NVRAM automatically and
take in effect immediately, and it won't be lost if module is rebooted.
 AUTO_SAVE_REBOOT: The parameter of the current AT command will be kept in NVRAM
automatically and take in effect after reboot, and it won't be lost if module is rebooted.
 -: "-" means this AT command doesn't care the parameter saving mode.
1.7.2 Max Response Time
Max response time is estimated maximum time to get response, the unit is seconds.
"-" means this AT command doesn't care the response time.
2 AT Commands According to
V.25TER
These AT Commands are designed according to the ITU-T (International Telecommunication Union,
Telecommunication sector) V.25ter document.
2.1 Overview of AT Commands According to V.25TER
Command Description
A/ Re-issues the last command given
ATD Mobile originated call to dial a number
ATE Set command echo mode
ATH Disconnect existing connection
ATI Display product identification information
ATL Set monitor speaker loudness
ATM Set monitor speaker mode
+++ Switch from data mode or ppp online mode to command mode
ATO Switch from command mode to data mode
ATQ Set result code presentation mode
ATS0 Set number of rings before automatically answering the call
ATS3 Set command line termination character
ATS4 Set response formatting character
ATS5 Set command line editing character
ATS6 Pause before blind dialing
ATS7 Set number of seconds to wait for connection completion
Set number of seconds to wait for comma dial modifier encountered in dial
ATS8
string of D command
ATS10 Set disconnect delay after indicating the absence of data carrier
ATV TA response format
ATX Set connect result code format and monitor call progress
ATZ Reset default configuration
AT&C Set DCD function mode
AT&D Set DTR function mode
AT&F Factory defined configuration
AT&V Display current configuration
AT&E Set CONNECT Result Code Format About Speed
AT+GCAP Request complete TA capabilities list

AT+GMI Request manufacturer identification
AT+GMM Request TA model identification
AT+GMR Request TA revision identification of software release
AT+GOI Request global object identification
AT+GSN Request TA serial number identification (IMEI)
AT+ICF Set TE-TA control character framing
AT+IFC Set TE-TA local data flow control
AT+IPR Set TE-TA fixed local rate
2.2 Detailed Description of AT Commands According to V.25TER
2.2.1 A/ Re-issues the Last Command Given
A/ Re-issues the Last Command Given

Response
Execution Command
Re-issues the previous Command
A/
Reference Note
V.25ter
2.2.2 ATD Mobile Originated Call to Dial A Number
ATD Mobile Originated Call to Dial A Number

Response
This command can be used to set up outgoing data calls. It also serves to
control supplementary services.
Note: This command may be aborted generally by receiving an ATH
Command or a character during execution. The aborting is not possible
during some states of connection establishment such as handshaking.
Execution Command
ATD<n>[<mgsm]
If error is related to ME functionality
+CME ERROR: <err>
If no dial tone and (parameter setting ATX2 or ATX4)

NO DIALTONE
If busy and (parameter setting ATX3 or ATX4)

BUSY
If a connection cannot be established

NO CARRIER
If the remote station does not answer

NO ANSWER
If connection successful and non-voice call.

CONNECT<text> TA switches to data mode.
Note: <text> output only if ATX<value> parameter setting with the
<value> >0
When TA returns to command mode after call release

OK
Parameters
<n> String of dialing digits and optionally V.25ter modifiers dialing
digits: 0-9, * , #, +, A, B, C
Following V.25ter modifiers are ignored:
,(comma), T, P, !, W, @
Emergency call:
<n> Standardized emergency number 112 (no SIM needed)
<mgsm> String of GSM modifiers:
I Actives CLIR (Disables presentation of own number to
called party)
i Deactivates CLIR (Enable presentation of own number
to called party)
G Activates Closed User Group invocation for this call only
g Deactivates Closed User Group invocation for this call
only
Parameter Saving Mode NO_SAVE
Max Response Time Timeout set with ATS7 (data call)
Note
Reference
V.25ter
2.2.3 ATE Set Command Echo Mode
ATE Set Command Echo Mode

Response
Execution Command
This setting determines whether or not the TA echoes characters received
ATE<value> from TE during Command state.

OK
Parameters
<value> 0 Echo mode off
1 Echo mode on
Max Response Time -
Reference Note
V.25ter
2.2.4 ATH Disconnect Existing Connection
ATH Disconnect Existing Connection

Response
Disconnect existing call by local TE from Command line and terminate call
Execution Command
OK
ATH
Note: OK is issued after circuit 109(DCD) is turned off, if it was previously
on.
Max Response Time 20s
Reference Note
V.25ter
2.2.5 ATI Display Product Identification Information
ATI Display Product Identification Information

Response
TA issues product information text
Execution Command
Example:
ATI
SIM7000 R1351
OK
Max Response Time -
Reference Note
V.25ter
2.2.6 ATL Set Monitor speaker loudness
ATL Set Monitor speaker loudness

Response
Execution Command OK
ATL<value> Parameters
<value> 0..3 Volume
Max Response Time -
Reference Note
V.25ter No effect in GSM
2.2.7 ATM Set Monitor Speaker Mode
ATM Set Monitor Speaker Mode

Response
ATM<value> Parameters
<value> 0..2 Mode
Max Response Time -
Reference Note
2.2.8 +++ Switch from Data Mode or PPP Online Mode to Command Mode
+++ Switch from Data Mode or PPP Online Mode to Command Mode
Response
The +++ character sequence causes the TA to cancel the data flow over the
AT interface and switch to Command mode. This allows you to enter AT
Command while maintaining the data connection to the remote server.
OK
Execution Command
+++ To prevent the +++ escape sequence from being misinterpreted as data, it
should comply to following sequence:
No characters entered for T1 time (1 second)
"+++" characters entered with no characters in between (1 second)
No characters entered for T1 timer (1 second)
Switch to Command mode, otherwise go to step 1.

Max Response Time -
Reference Note
V.25ter To return from Command mode back to data mode: Enter ATO.
2.2.9 ATO Switch from Command Mode to Data Mode
ATO Switch from Command Mode to Data Mode

Response
TA resumes the connection and switches back from command mode to data
mode.
CONNECT
If connection is not successfully resumed
Execution Command
ERROR
ATO[n]
else
TA returns to data mode from command mode CONNECT <text>
Note: <text> only if parameter setting ATX>0
Parameter
<n> 0 Switch from command mode to data mode.
Max Response Time -
Reference Note
V.25ter
2.2.10 ATQ Set Result Code Presentation Mode
ATQ Set Result Code Presentation Mode

Response
This parameter setting determines whether or not the TA transmits any
result code to the TE. Information text transmitted in response is not
affected by this setting.
If <n>=0:
Execution Command
OK
ATQ<n>
If <n>=1:
(none)
Parameters
<n> 0 TA transmits result code
1 Result codes are suppressed and not transmitted

Max Response Time -
Reference Note
V.25ter
2.2.11 ATS0 Set Number of Rings before Automatically Answering the Call
ATS0 Set Number of Rings before Automatically Answering the Call

Response
<n>
Read Command
ATS0? OK
Parameters
See Write Command
Response
This parameter setting determines the number of rings before auto-answer.
OK
or
Write Command
ERROR
ATS0=<n>
Parameters
<n> 0 Automatic answering is disable.
1-255 Number of rings the modem will wait for before answering
the phone if a ring is detected.
Parameter Saving Mode -
Max Response Time -
Note
If <n> is set too high, the calling party may hang up before the call can be
answered automatically.
Reference
If using cmux port, ATH and AT+CHUP can hang up the call (automatically
V.25ter
answering) only in the CMUX channel 0.
If using dual-physical serial port, ATH and AT+CHUP can hang up the call
(automatically answering) only in UART1.
2.2.12 ATS3 Set Command Line Termination Character
ATS3 Set Command Line Termination Character

Response
Read Command
<n>
ATS3?
OK
Parameters
See Write Command
Response
This parameter setting determines the character recognized by TA to
terminate an incoming command line. The TA also returns this character in
output.
Write Command
OK
ATS3=<n>
or
ERROR
Parameters
<n> 13 Command line termination character
Max Response Time -
Reference Note
V.25ter Default 13 = CR. It only supports default value.
2.2.13 ATS4 Set Response Formatting Character
ATS4 Set Response Formatting Character

Response
<n>
Read Command
ATS4? OK
Parameters
See Write Command
Response
This parameter setting determines the character generated by the TA for
result code and information text.
Write Command OK
ATS4=<n> or
ERROR
Parameters
<n> 10 Response formatting character
Max Response Time -
Reference Note
V.25ter Default 10 = LF. It only supports default value.
2.2.14 ATS5 Set Command Line Editing Character
ATS5 Set Command Line Editing Character

Response
<n>
Read Command
ATS5? OK
Parameters
See Write Command
Response
This parameter setting determines the character recognized by TA as a
request to delete from the command line the immediately preceding
character.
Write Command
OK
ATS5=<n>
or
ERROR
Parameters
<n> 0-8-127 Response formatting character
Max Response Time -
Reference Note
V.25ter Default 8 = Backspace.
2.2.15 ATS6 Pause Before Blind Dialing
ATS6 Pause Before Blind Dialing

Response
Read Command <n>
ATS6?
OK
Response
OK
Write Command or
ATS6=<n> ERROR
Parameters
<n> 0-2-999 Time
Max Response Time -
Reference Note
2.2.16 ATS7 Set Number of Seconds to Wait for Connection Completion
ATS7 Set Number of Seconds to Wait for Connection Completion

Response
<n>
Read Command
ATS7? OK
Parameters
See Write Command
Response
This parameter setting determines the amount of time to wait for the
connection completion in case of answering or originating a call.
Write Command OK
ATS7=<n> or
ERROR
Parameters
<n> 0-255 Number of seconds to wait for connection completion
Max Response Time -
Note
If called party has specified a high value for ATS0=<n>, call setup may fail.
Reference
The correlation between ATS7 and ATS0 is important
V.25ter
Example: Call may fail if ATS7=30 and ATS0=20.
ATS7 is only applicable to data call.
2.2.17 ATS8 Set Number of Seconds to Wait for Comma Dial Modifier Encountered in
Dial String of D Command
ATS8 Set Number of Seconds to Wait for Comma Dial Modifier Encountered in Dial
String of D Command
Response
<n>
Read Command
ATS8? OK
Parameters
See Write Command
Response
Write Command OK
ATS8=<n> or
ERROR
Parameters
<n> 0-2-255 The value of this register determines how long the
modem should pause when it sees a comma in the dialing string.
Max Response Time -
Reference Note
2.2.18 ATS10 Set Disconnect Delay after Indicating the Absence of Data Carrier
ATS10 Set Disconnect Delay after Indicating the Absence of Data Carrier
Response
<n>
Read Command
ATS10? OK
Parameters
See Write Command
Response
This parameter setting determines the amount of time that the TA will
remain connected in absence of data carrier. If the data carrier is once more
detected before disconnecting, the TA remains connected.
Write Command
OK
ATS10=<n>
or
ERROR
Parameters
<n> 1-14-255 Number of tenths seconds of delay
Max Response Time -
Reference Note
V.25ter
2.2.19 ATV TA Response Format
ATV TA Response Format

Response
This parameter setting determines the contents of the header and trailer
Execution Command
transmitted with result codes and information responses.
ATV<value>
When <value>=0
0
When <value>=1
OK
Parameters
<value>
0 Information response: <text><CR><LF>
Short result code format: <numeric code><CR>
1 Information response: <CR><LF><text><CR><LF>
Long result code format: <CR><LF><verbose code><CR><LF>
The result codes, their numeric equivalents and brief descriptions of the use
of each are listed in the following table.
Max Response Time -
Reference Note
V.25ter
ATV1 ATV0 Description

OK 0 Acknowledges execution of a Command
A connection has been established; the DCE is moving from
CONNECT 1
Command state to online data state
RING 2 The DCE has detected an incoming call signal from network
The connection has been terminated or the attempt to establish
NO CARRIER 3
a connection failed
Command not recognized, Command line maximum length
ERROR 4 exceeded, parameter value invalid, or other problem with
processing the Command line
NO DIALTONE 6 No dial tone detected
BUSY 7 Engaged (busy) signal detected
"@" (Wait for Quiet Answer) dial modifier was used, but remote
NO ANSWER 8 ringing followed by five seconds of silence was not detected
before expiration of the connection timer (S7)
PROCEEDING 9 An AT command is being processed
Same as CONNECT, but includes manufacturer-specific text
Manufacturer-
CONNECT <text> that may specify DTE speed, line speed, error control, data
specific
compression, or other status
2.2.20 ATX Set CONNECT Result Code Format and Monitor Call Progress
ATX Set CONNECT Result Code Format and Monitor Call Progress
Response
Execution Command This parameter setting determines whether or not the TA detected the
ATX<value> presence of dial tone and busy signal and whether or not TA transmits
particular result codes.
OK
ERROR
Parameters
<value> 0 CONNECT result code only returned, dial tone and busy
detection are both disabled.
1 CONNECT<text> result code only returned, dial tone and
busy detection are both disabled.
2 CONNECT<text> result code returned, dial tone detection
is enabled, busy detection is disabled.
3 CONNECT<text> result code returned, dial tone detection
is disabled, busy detection is enabled.
4 CONNECT<text> result code returned, dial tone and busy
detection are both enabled.
Max Response Time -
Reference Note
V.25ter
2.2.21 AT&C Set DCD Function Mode
AT&C Set DCD Function Mode

Response
This parameter determines how the state of circuit 109 (DCD) relates to the
detection of received line signal from the distant end.
OK
Execution Command
AT&C<value>
ERROR
Parameters
<value> 0 DCD line is always ON
1 DCD line is ON only in the presence of data carrier
Max Response Time -
Reference Note
V.25ter
2.2.22 AT&D Set DTR Function Mode
AT&D Set DTR Function Mode
Response
This parameter determines how the TA responds when circuit 108/2 (DTR)
is changed from the ON to the OFF condition during data mode.
OK
or
Execution Command ERROR
AT&D[<value>] Parameters
<value> 0 TA ignores status on DTR.
1 ON->OFF on DTR: Change to Command mode with
remaining the connected call.
2 ON->OFF on DTR: Disconnect call, change to Command
mode. During state DTR = OFF is auto-answer off.
Max Response Time -
Reference Note
V.25ter
2.2.23 AT&E Set CONNECT Result Code Format About Speed
AT&E Set CONNECT Result Code Format About Speed

This parameter setting determines to report Serial connection rate or
Wireless connection speed. It is valid only ATX above 0.
Response
OK
Execution Command or
AT&E[<value>] ERROR
Parameters
<value>
0 Wireless connection speed in integer format.
1 Serial connection rate in integer format. Such as: "115200"
Max Response Time -
Reference Note
V.25ter
2.2.24 AT+GCAP Request Complete TA Capabilities List
AT+GCAP Request Complete TA Capabilities List

Execution Command Response
AT+GCAP TA reports a list of additional capabilities.

+GCAP: list of supported <name>s
OK
Parameters
<name> +CGSM GSM function is supported
Max Response Time -
Reference Note
V.25ter
2.2.25 AT+GMI Request Manufacturer Identification
AT+GMI Request Manufacturer Identification

Response
Test Command OK
AT+GMI=? Parameters
TA reports one or more lines of information text which permit the user to
identify the manufacturer.
Execution Command
SIMCOM_Ltd
AT+GMI
OK
Max Response Time -
Reference Note
V.25ter
2.2.26 AT+GMM Request TA Model Identification
AT+GMM Request TA Model Identification

Response
Test Command
OK
AT+GMM=?
identify the specific model of device.
Execution Command
<model>
AT+GMM
OK
Parameters
<model> Product model identification text
Max Response Time -
Reference Note
V.25ter
2.2.27 AT+GMR Request TA Revision Identification of Software Release
AT+GMR Request TA Revision Identification of Software Release

Test Command Response
AT+GMR=? OK
identify the revision of software release.
Revision: <revision>
Execution Command
AT+GMR
OK
Parameters
<revision> Revision of software release
Max Response Time -
Reference Note
V.25ter
2.2.28 AT+GOI Request Global Object Identification
AT+GOI Request Global Object Identification

AT+GOI=? OK
Response
identify the device, based on the ISO system for registering unique object
identifiers.
Execution Command <Object Id>
AT+GOI
OK
Parameters
<Object Id> Identifier of device type
see X.208, 209 for the format of <Object Id>

Max Response Time -
Reference Note
V.25ter
2.2.29 AT+GSN Request TA Serial Number Identification (IMEI)
AT+GSN Request TA Serial Number Identification(IMEI)

AT+GSN=? OK
Response
TA reports the IMEI (international mobile equipment identifier) number in
information text which permit the user to identify the individual ME device.
<sn>
Execution Command
AT+GSN
OK
Parameters
<sn> IMEI of the telephone(International Mobile station Equipment
Identity)
Max Response Time -
Reference Note
V.25ter The serial number (IMEI) is varied by individual ME device.
2.2.30 AT+ICF Set TE-TA Control Character Framing
AT+ICF Set TE-TA Control Character Framing

Response
+ICF: (list of supported <format>s),(list of supported <parity>s)
Test Command
AT+ICF=? OK
Parameters
See Write Command
Response
+ICF: <format>,<parity>
Read Command
AT+ICF? OK
Parameters
See Write Command
Response
This parameter setting determines the serial interface character framing
format and parity received by TA from TE.
OK
Parameters
Write Command <format> 1 8 data 0 parity 2 stop
AT+ICF=<format>[,<pa 2 8 data 1 parity 1 stop
rity>] 3 8 data 0 parity 1 stop
4 7 data 0 parity 2 stop
<parity> 0 odd
1 even
3 space (0)
Max Response Time -
Note
The Command is applied for Command state;
Reference
In <format> parameter, "0 parity" means no parity;
V.25ter
The <parity> field is ignored if the <format> field specifies no parity and
string "+ICF: <format>,255" will be response to "AT+ICF?" Command.
2.2.31 AT+IFC Set TE-TA Local Data Flow Control
AT+IFC Set TE-TA Local Data Flow Control

Response
+IFC: (list of supported <dce_by_dte>s),(list of supported <dte_by_dce>s)
Test Command
AT+IFC=? OK
Parameters
See Write Command
Response
+IFC: <dce_by_dte>,<dte_by_dce>
Read Command
AT+IFC? OK
Parameters
See Write Command
Response
Write Command
This parameter setting determines the data flow control on the serial
AT+IFC=<dce_by_dte>
interface for data mode.
[,<dte_by_dce>]
OK
Parameters
<dce_by_dte> Specifies the method will be used by TE at receive of
data from TA
0 No flow control
1 Software flow control
2 Hardware flow control
<dte_by_dce> Specifies the method will be used by TA at receive of data
from TE
0 No flow control
1 Software flow control
2 Hardware flow control

Max Response Time -
Reference Note
V.25ter
2.2.32 AT+IPR Set TE-TA Fixed Local Rate
AT+IPR Set TE-TA Fixed Local Rate

Response
+IPR: (list of supported auto detectable <rate>s),(list of supported
fixed-only <rate>s)
Test Command
AT+IPR=?
OK
Parameters
See Write Command
Response
+IPR: <rate>
Read Command
AT+IPR? OK
Parameters
See Write Command
Response
This parameter setting determines the data rate of the TA on the serial
interface. The rate of Command takes effect following the issuance of any
result code associated with the current Command line.
Write Command
OK
AT+IPR=<rate>
Parameters
<rate> Baud rate per second
0
300
600
1200
2400
4800
9600
19200
38400
57600
115200
230400
921600
2000000
2900000
3000000
3200000
3686400
4000000
Parameter Saving Mode AUTO_SAVE
Max Response Time -
Reference
Note
V.25ter
3 AT Commands According to 3GPP

TS 27.007
3.1 Overview of AT Command According to 3GPP TS 27.007
Command Description
AT+CGMI Request manufacturer identification
AT+CGMM Request model identification
AT+CGMR Request TA revision identification of software release
AT+CGSN Request product serial number identification (identical with +GSN)
AT+CSCS Select TE character set
AT+CIMI Request international mobile subscriber identity
AT+CLCK Facility lock
AT+CMEE Report mobile equipment error
AT+COPS Operator selection
AT+CPAS Phone activity status
AT+CPIN Enter PIN
AT+CPWD Change password
AT+CRC Set cellular result codes for incoming call indication
AT+CREG Network registration
AT+CRSM Restricted SIM access
AT+CSQ Signal quality report
AT+CPOL Preferred operator list
AT+COPN Read operator names
AT+CFUN Set phone functionality
AT+CCLK Clock
AT+CSIM Generic SIM access
AT+CBC Battery charge
AT+CUSD Unstructured supplementary service data
AT+CNUM Subscriber Number
3.2 Detailed Descriptions of AT Command According to 3GPP TS 27.007
3.2.1 AT+CGMI Request Manufacturer Identification
AT+CGMI Request Manufacturer Identification

AT+CGMI=? OK
Response
TA returns manufacturer identification text.
<manufacturer>
Execution Command
AT+CGMI
OK
Parameters
<manufacturer> The ID of manufacturer
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.2 AT+CGMM Request Model Identification
AT+CGMM Request Model Identification

AT+CGMM=? OK
Response
TA returns product model identification text.
<model>
Execution Command
AT+CGMM
OK
Parameters
<model> Product model identification text
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.3 AT+CGMR Request TA Revision Identification of Software Release
AT+CGMR Request TA Revision Identification of Software Release

AT+CGMR=? OK
Response
TA returns product software version identification text.
Revision: <revision>
Execution Command
AT+CGMR
OK
Parameters
<revision> Product software version identification text
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.4 AT+CGSN Request Product Serial Number Identification
AT+CGSN Request Product Serial Number Identification (Identical with +GSN)

AT+CGSN=? OK
Response
see +GSN
<sn>
Execution Command
AT+CGSN
OK
Parameters
<sn> International mobile equipment identity (IMEI)
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.5 AT+CSCS Select TE Character Set
AT+CSCS Select TE Character Set

Response
Test Command
+CSCS: (list of supported <chset>s)
AT+CSCS=?
OK
Parameters
<chset> "GSM" GSM 7 bit default alphabet (3GPP TS 23.038);
"UCS2" 16-bit universal multiple-octet coded character set
(ISO/IEC10646); UCS2 character strings are converted to
hexadecimal numbers from 0000 to FFFF; e.g. "004100620063"
equals three 16-bit characters with decimal values 65, 98 and
99
"IRA" International reference alphabet (ITU-T T.50)
Response
+CSCS: <chset>
Read Command
AT+CSCS? OK
Parameters
See Test Command
Response
Sets which character set <chset> are used by the TE. The TA can then
convert character strings correctly between the TE and ME character sets.
Write Command OK
AT+CSCS=<chset> If error is related to ME functionality:
+CME ERROR: <err>
Parameters
See Test Command
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.6 AT+CIMI Request International Mobile Subscriber Identity
AT+CIMI Request International Mobile Subscriber Identity

AT+CIMI=? OK
Response
TA returns <IMSI>for identifying the individual SIM which is attached to ME.
<IMSI>
Execution Command
OK
AT+CIMI
If error is related to ME functionality:
+CME ERROR: <err>
Parameters
<IMSI> International Mobile Subscriber Identity (string without double
quotes)
Reference
Note
3GPP TS 27.007 [13]
3.2.7 AT+CLCK Facility Lock
AT+CLCK Facility Lock

Response
+CLCK: (list of supported <fac>s)
Test Command
AT+CLCK=? OK
Parameters
See Write Command
Response
This Command is used to lock, unlock or interrogate a ME or a network
facility <fac>. Password is normally needed to do such actions. When
querying the status of a network service (<mode>=2) the response line for
‘not active’ case (<status>=0) should be returned only if service is not
active for any <class>.
If <mode>≠2 and Command is successful

OK
If <mode>=2 and Command is successful
+CLCK: <status>[,<class1>[<CR><LF>+CLCK:
<status>,<class2>[…]]
Write Command
AT+CLCK=<fac>,<mod OK
e>[,<passwd>[,<class> If error is related to ME functionality:
]] +CME ERROR: <err>
Parameters
<fac>
"AB" All Barring services(only for <mode>=0)
"AC" All inComing barring services(only for <mode>=0) "AG"
All outGoing barring services(only for <mode>=0)
"AI" BAIC (Barr All Incoming Calls)
"AO" BAOC (Barr All Outgoing Calls)
"IR" BIC- Roam (Barr Incoming Calls when Roaming
outside the home country)
"OI" BOIC (Barr Outgoing International Calls)
"OX" BOIC- exHC (Barr Outgoing International Calls except to
Home Country)
"SC" SIM (lock SIM/UICC card) (SIM/UICC asks password in

MT power-up and when this lock command issued) Correspond to
PIN1 code.
"FD" SIM card or active application in the UICC (GSM or
USIM) fixed dialling memory feature (if PIN2 authentication has not
been done during the current session, PIN2 is required as <passwd>)
"PN" Network Personalization, Correspond to NCK code
"PU" Network subset Personalization Correspond to NSCK
code
"PP" Service Provider Personalization Correspond to SPCK
code
<mode>
0 unlock
1 lock
2 query status
<passwd> String type (Shall be the same as password specified for the
facility from the MT user interface or with command Change Password
+CPWD)
<class> 1-255
1 Voice (telephony)
2 Data refers to all bearer services; with <mode>=2 this may refer
only to some bearer service if TA does not support values 16, 32, 64 and
128)
4 Fax (facsimile services)
7 All classes
<status>
0 Not active
1 Active
Reference Note
3GPP TS 27.007 [14]  CME errors if SIM not inserted or PIN is not entered.
3.2.8 AT+CMEE Report Mobile Equipment Error
AT+CMEE Report Mobile Equipment Error

Response
+CMEE: (list of supported <n>s)
Test Command
AT+CMEE=? OK
Parameters
See Write Command
Read Command Response
AT+CMEE? +CMEE: <n>
OK
Parameters
See Write Command
Response
TA disables or enables the use of result code +CME ERROR: <err> as an
indication of an error relating to the functionality of the ME.
OK
+CME ERROR: <err>
Write Command
Parameters
AT+CMEE=[<n>]
<n> 0 Disable +CME ERROR: <err> result code and use ERROR
instead.
1 Enable +CME ERROR: <err> result code and use numeric
<err>
2 Enable +CME ERROR: <err> result code and use verbose
<err> values
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.9 AT+COPS Operator Selection
AT+COPS Operator Selection

Response
TA returns a list of quadruplets, each representing an operator present in
the network. Any of the formats may be unavailable and should then be an
empty field. The list of operators shall be in order: home network, networks
referenced in SIM, and other networks.
+COPS: (list of supported<stat>,long alphanumeric<oper>,short

Test Command
alphanumeric<oper>,numeric <oper>,<netact>)s[,,(list of supported
AT+COPS=?
<mode>s),(list of supported <format>s)]
OK
+CME ERROR: <err>
Parameters
See Write Command
Response
Read Command
TA returns the current mode and the currently selected operator. If no
AT+COPS? operator is selected,<format> and <oper> are omitted.

+COPS: <mode>[,<format>,<oper>,<netact>]
OK
+CME ERROR: <err>
Parameters
See Write Command
Response
TA forces an attempt to select and register the GSM network operator. If the
selected operator is not available, no other operator shall be selected
(except <mode>=4). The selected operator name format shall apply to
further read commands (AT+COPS?).
OK
+CME ERROR: <err>
Parameters
<stat> 0 Unknown
1 Operator available
2 Operator current
3 Operator forbidden
<oper> Refer to [27.007]
operator in format as per <format>
Write Command
<mode> 0 Automatic mode; <oper> field is ignored
AT+COPS=<mode>,[<f
1 Manual (<oper> field shall be present, and <AcT> optionally)
ormat>[,<oper>]]
2 manual deregister from network
3 set only <format> (for read Command +COPS?) - not
shown in Read Command response
4 Manual/automatic (<oper> field shall be present); if
manual selection fails, automatic mode (<mode>=0) is
entered
<format> 0 Long format alphanumeric <oper>
1 Short format alphanumeric <oper>
2 Numeric <oper>; GSM Location Area Identification
number
<netact> 0 User-specified GSM access technology
1 GSM compact
3 GSM EGPRS
7 User-specified LTE M1 A GB access technology
9 User-specified LTE NB S1 access technology
Test command: 45 seconds
Max Response Time
Write command: 120 seconds
Reference Note
3GPP TS 27.007 [14]
3.2.10 AT+CPAS Phone Activity Status
AT+CPAS Phone Activity Status

Response
+CPAS: (list of supported <pas>s)
Test Command
AT+CPAS=? OK
Parameters
See Execution Command
Response
TA returns the activity status of ME.
+CPAS: <pas>
OK
Execution Command +CME ERROR: <err>
AT+CPAS Parameters
<pas>
0 Ready (MT allows commands from TA/TE)
3 Ringing (MT is ready for commands from TA/TE, but the ringer is
active)
4 Call in progress (MT is ready for commands from TA/TE, but a call
is in progress)
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.11 AT+CPIN Enter PIN
AT+CPIN Enter PIN

AT+CPIN=? OK
Response
TA returns an alphanumeric string indicating whether some password is
Read Command required or not.
AT+CPIN? +CPIN: <code>
OK
Parameters
<code>
READY MT is not pending for any password
SIM PIN MT is waiting SIM PIN to be given
SIM PUK MT is waiting for SIM PUK to be given
PH_SIM PIN ME is waiting for phone to SIM card (antitheft)
PH_SIM PUK ME is waiting for SIM PUK (antitheft)
SIM PIN2 PIN2, e.g. for editing the FDN book possible only if
preceding Command was acknowledged with +CME ERROR:17
SIM PUK2 Possible only if preceding Command was
acknowledged with error +CME ERROR: 18.
Response
TA stores a password which is necessary before it can be operated (SIM
PIN, SIM PUK, PH- SIM PIN, etc.).
If the PIN required is SIM PUK or SIM PUK2, the second pin is required.
This second pin <new pin>, is used to replace the old pin in the SIM.
Write Command
OK
AT+CPIN=<pin>[,<new
pin>]
+CME ERROR: <err>
Parameters
<pin> String type; password
<new pin> String type; If the PIN required is SIM PUK or SIMPUK2:
new password
Reference Note
3GPP TS 27.007 [13]
3.2.12 AT+CPWD Change Password
AT+CPWD Change Password

Response
TA returns a list of pairs which present the available facilities and the
maximum length of their password.
+CPWD: (list of supported <fac>s, list of supported <pwdlength>s)
Test Command
AT+CPWD=?
OK
Parameters
<fac> See Write Command
<pwdlength> Integer max. length of password
Response
Write Command
TA sets a new password for the facility lock function.
AT+CPWD=<fac>,<old
OK
pwd>,<newpwd> Parameters
<fac>
"AB" All Barring services
"AC" All inComing barring services(only for
<mode>=0)
"AG" All outGoing barring services(only for
<mode>=0)
"AI" BAIC (Barr All Incoming Calls)
"AO" BAOC (Barr All Outgoing Calls)
"IR" BIC- Roam (Barr Incoming Calls when
Roaming outside the home country)
"OI" BOIC (Barr Outgoing International Calls)
"OX" BOIC- exHC (Barr Outgoing International Calls
except to Home Country)
"SC" SIM (lock SIM/UICC card) (SIM/UICC asks
password in MT power-up and when this lock
command issued) Correspond to PIN1 code.
"P2" SIM PIN2
<oldpwd> String type (string should be included in quotation marks):
password specified for the facility from the user interface or with command.
If an old password has not yet been set,<oldpwd> is not to enter.
<newpwd> String type (string should be included in quotation marks):
new password
Reference Note
3GPP TS 27.007 [13]
3.2.13 AT+CRC Set Cellular Result Codes for Incoming Call Indication
AT+CRC Set Cellular Result Codes for Incoming Call Indication

Response
+CRC: (list of supported <mode>s)
Test Command
AT+CRC=? OK
Parameters
See Write Command
Response
+CRC: <mode>
Read Command
AT+CRC? OK
Parameters
See Write Command
Response
TA controls whether or not the extended format of incoming call indication is
used.
OK
Parameters
<mode> 0 Disable extended format
1 Enable extended format
Omitted Use previous value
Write Command Unsolicited Result Code
AT+CRC=[<mode>] When enabled, an incoming call is indicated to the TE with unsolicited result
code +CRING: <type> instead of the normal RING.
Parameters
<type> ASYNC Asynchronous transparent
SYNC Synchronous transparent
REL ASYNC Asynchronous non-transparent
REL SYNC Synchronous non-transparent
FAX Facsimile
VOICE Voice
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.14 AT+CREG Network Registration
AT+CREG Network Registration

Response
+CREG: (list of supported <n>s)
Test Command
AT+CREG=? OK
Parameters
See Write Command
Response
TA returns the status of result code presentation and an integer <stat>
which shows whether the network has currently indicated the registration of
the ME. Location information elements <lac> and <ci> are returned only
Read Command when <n>=2 and ME is registered in the network.
AT+CREG? +CREG: <n>,<stat>[,<lac>,<ci>,<netact>]
OK
+CME ERROR: <err>
Write Command Response
AT+CREG[=<n>] TA controls the presentation of an unsolicited result code +CREG: <stat>

when <n>=1 and there is a change in the ME network registration status.
OK
Parameters
<n> 0 Disable network registration unsolicited result code
1 Enable network registration unsolicited result code
+CREG: <stat>
2 Enable network registration unsolicited result code with
location information(2 is only for 7000 series module which
support GPRS.)
CREG: <stat>[,<lac>,<ci>,<netact>]
<stat> 0 Not registered, MT is not currently searching a new
operator to register to
1 Registered, home network
2 Not registered, but MT is currently searching a new
operator to register to
3 Registration denied
4 Unknown
5 Registered, roaming
<lac> String type (string should be included in quotation marks); two
byte location area code in hexadecimal format
<ci> String type (string should be included in quotation marks); two
byte cell ID in hexadecimal format
1 GSM compact
3 GSM EGPRS
Unsolicited Result Code
If <n>=1 and there is a change in the MT network registration status
+CREG: <stat>
If <n>=2 and there is a change in the MT network registration status or a
change of the network cell:
+CREG: <stat>[,<lac>,<ci>,<netact>]
Parameters
See Write Command
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.15 AT+CRSM Restricted SIM Access
AT+CRSM Restricted SIM Access

AT+CRSM=? OK
Response
+CRSM: <sw1>,<sw2>[,<response>]
OK
ERROR
+CME ERROR: <err>
Parameters
<Command>
176 READ BINARY
178 READ RECORD
192 GET RESPONSE
214 UPDATE BINARY
Write Command 220 UPDATE RECORD
AT+CRSM=<Command 242 STATUS
>[,<fileId>[,<P1>,<P2>, All other values are reserved; refer GSM 11.11.
<P3>[,<data>]]] <fileId> Integer type; this is the identifier for an elementary data file on
SIM. Mandatory for every Command except STATUS
<P1>,<P2>,<P3> Integer type, range 0 – 255
Parameters to be passed on by the ME to the SIM; refer GSM
11.11.
<data> Information which shall be written to the SIM (hex-decimal
character format)
<sw1>,<sw2> Integer type, range 0 - 255
Status information from the SIM about the execution of the
actual Command. These parameters are delivered to the TE in
both cases, on successful or failed execution of the Command;
refer GSM 11.11.
<response> Response of a successful completion of the Command
previously issued (hexadecimal character format)
Max Response Time -
Reference
Note
3GPP TS 27.007
GSM 11.11
3.2.16 AT+CSQ Signal Quality Report
AT+CSQ Signal Quality Report

AT+CSQ=? +CSQ: (list of supported <rssi>s),(list of supported <ber>s)
OK
Response
+CSQ: <rssi>,<ber>
OK
+CME ERROR: <err>
Execution Command returns received signal strength indication <rssi> and
channel bit error rate <ber> from the ME. Test Command returns values
supported by the TA.
Execution Command Parameters
AT+CSQ <rssi>
0 - 115 dBm or less
1 - 111 dBm
2...30 - 110... - 54 dBm
31 - 52 dBm or greater
99 not known or not detectable
<ber> (in percent):
0...7 As RXQUAL values in the table in GSM 05.08 [20]
subclause 7.2.4
99 Not known or not detectable
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.17 AT+CPOL Preferred Operator List
AT+CPOL Preferred Operator List

Response
+CPOL: (list of supported <index>s),(list of supported <format>s)
Test Command
AT+CPOL=? OK
Parameters
See Write Command
Response
+CPOL:
Read Command <index1>,<format>,<oper1>[,<GSM>,<GSM_compact>,<UTRAN>,<E-U
AT+CPOL? TRAN>][<CR><LF>+CPOL:
<index2>,<format>,<oper2>[,<GSM,<GSM_compact>,<UTRAN>,<E-UT
RAN>][…]]
OK
+CME ERROR: <err>
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Parameters
<index> Integer type: order number of operator in SIM preferred
operator list
<format> Indicates whether alphanumeric or numeric
format used (see +COPS Command)
0 Long format alphanumeric <oper>
Write Command 1 Short format alphanumeric <oper>
AT+CPOL=<index>[,<f 2 Numeric <oper>
ormat>[,<oper>[<GSM <oper> String type(string should be included in quotation marks)
>,<GSM_compact>,<U <GSM> GSM access technology
TRAN>,<E-UTRAN>]]]
0 Access technology is not selected
1 Access technology is selected
<GSM_compact> GSM compact access technology
<UTRAN> UTRAN access technology
<E-UTRAN> E-UTRAN access technology
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.18 AT+COPN Read Operator Names
AT+COPN Read Operator Names

AT+COPN=? OK
AT+COPN +COPN: <numeric1>,<alpha1>

[<CR><LF>+COPN: <numeric2>,<alpha2>
[…]]
OK
+CME ERROR: <err>
Parameters
<numericn>String type (string should be included in quotation marks):
operator in numeric format (see +COPS)
<alphan> String type (string should be included in quotation marks):
operator in long alphanumeric format (see +COPS)
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.19 AT+CFUN Set Phone Functionality
AT+CFUN Set Phone Functionality

Response
+CFUN: (list of supported <fun>s),(list of supported <rst>s)
Test Command OK
AT+CFUN=? If error is related to ME functionality:
+CME ERROR: <err>
Parameters
See Write Command
Response
+CFUN: <fun>
Read Command OK
AT+CFUN? If error is related to ME functionality:
+CME ERROR: <err>
Parameters
See Write Command
Response
OK
Write Command
AT+CFUN=<fun>[,<rst
+CME ERROR: <err>
>]
Parameters
<fun>
0 Minimum functionality
1 Full functionality (Default)
4 Disable phone both transmit and receive RF circuits.
5 Factory Test Mode
6 Reset
7 Offline Mode
<rst>
0 Do not Reset the MT before setting it to <fun> power level.
1 Reset the MT before setting it to <fun> power level.
Note
 The <fun> power level will be written to flash except minimum
functionality.
Reference
 AT+CFUN=1,1 can be used to reset module purposely at minimum/full
3GPP TS 27.007 [13]
functionality mode.
 Response string "OK" will be returned after module resets if baud rate
is set to fixed baud rate.
3.2.20 AT+CCLK Clock
AT+CCLK Clock
AT+CCLK=? OK
Response
+CCLK: <time>
Read Command OK
AT+CCLK? If error is related to ME functionality:
+CME ERROR: <err>
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Write Command Parameters
AT+CCLK=<time> <time> String type(string should be included in quotation marks) value;
format is "yy/MM/dd,hh:mm:ss±zz", where characters indicate year (two last
digits),month, day, hour, minutes, seconds and time zone (indicates the
difference, expressed in quarters of an hour, between the local time and
GMT; range -47...+48). E.g. 6th of May 2010, 00:01:52 GMT+2 hours
equals to "10/05/06,00:01:52+08".
Max Response Time -
Reference Note
3GPP TS 27.007 [13] Only time zone is auto saved.
3.2.21 AT+CSIM Generic SIM Access
AT+CSIM Generic SIM Access

AT+CSIM=? OK
Response
+CSIM: <length>,<response>
OK
+CME ERROR: <err>
Write Command
Parameters
AT+CSIM=<length>,<C
ommand> <length> Integer type: length of characters sent to the TE in
<Command> or <response> (i.e. twice the number of octets in the raw
data).
<Command> String type (string should be included in quotation marks):
hex format: GSM 11.11 SIM Command sent from the ME to the SIM.
<response> String type(string should be included in quotation marks):
hex format: GSM 11.11 response from SIM to <Command>.
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
3.2.22 AT+CBC Battery Charge
AT+CBC Battery Charge

Response
+CBC: (list of supported <bcs>s),(list of supported <bcl>s),(<voltage>)
Test Command
AT+CBC=? OK
Parameters
AT+CBC +CBC: <bcs>,<bcl>,<voltage>
OK
+CME ERROR: <err>
Parameters
<bcs> Charge status
0 ME is not charging
1 ME is charging
2 Charging has finished
<bcl> Battery connection level
1...100 battery has 1- 100 percent of capacity remaining vent
<voltage> Battery voltage(mV)
Max Response Time -
Reference
Note
3GPP TS 27.007 [13]
3.2.23 AT+CUSD Unstructured Supplementary Service Data
AT+CUSD Unstructured Supplementary Service Data

Response
+CUSD: (list of supported <n>s)
Test Command
AT+CUSD=? OK
Parameters
See Write Command
Response
+CUSD: <n>
Read Command
AT+CUSD? OK
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Write Command
Parameters
AT+CUSD=<n>,<str>,<
<n> A numeric parameter which indicates control of the unstructured
dcs>
supplementary service data
0 disable the result code presentation in the TE
1 enable the result code presentation in the TE
2 cancel session (not applicable to read Command response)
<str> String type (string should be included in quotation marks)

USSD-string
<dcs> Cell Broadcast Data Coding Scheme in integer format
(default 0)
Max Response Time -
Reference Note
GSM 03.38 [25] When ussd is not suport or return error,TE will print +CUSD:4.
3.2.24 AT+CNUM Subscriber Number
AT+CNUM Subscriber Number

AT+CNUM=? OK
Response
+CNUM: "",<number1>,<type1>
OK
Execution Command If error is related to ME functionality:
+CME ERROR: <err>
AT+CNUM
Parameters
<numberx> String type (string should be included in quotation marks)
phone number of format specified by <typex>
<typex> Type of address octet in integer format (refer GSM04.08[8]
subclause 10.5.4.7)
Max Response Time -
Reference Note
3GPP TS 27.007 [13]
4 AT Commands According to 3GPP

TS 27.005
The 3GPP TS 27.005 commands are for performing SMS and CBS related operations. SIM7000 Series
supports both Text and PDU modes.
4.1 Overview of AT Commands According to 3GPP TS 27.005
Command Description
AT+CMGD Delete SMS message
AT+CMGF Select SMS message format
AT+CMGL List SMS messages from preferred store
AT+CMGR Read SMS message
AT+CMGS Send SMS message
AT+CMGW Write SMS message to memory
AT+CMSS Send SMS message from storage
AT+CNMI New SMS message indications
AT+CPMS Preferred SMS message storage
AT+CRES Restore SMS settings
AT+CSAS Save SMS settings
AT+CSCA SMS service center address
AT+CSDH Show SMS text mode parameters
AT+CSMP Set SMS text mode parameters
AT+CSMS Select message service
4.2 Detailed Descriptions of AT Commands According to 3GPP TS
27.005
4.2.1 AT+CMGD Delete SMS Message
AT+CMGD Delete SMS Message

AT+CMGD=? +CMGD: (list of supported <index>s),(list of supported <delflag>s)
OK
Parameters
See Write Command
Response
TA deletes message from preferred message storage <mem1> location
<index>.
OK
ERROR
+CMS ERROR: <err>
Parameters
<index> Integer type; value in the range of location numbers supported by
the associated memory
Write Command <delflag> 0 Delete the message specified in <index>
AT+CMGD=<index>[,< 1 Delete all read messages from preferred message storage,
delflag>] leaving unread messages and stored mobile originated
messages (whether sent or not) untouched
2 Delete all read messages from preferred message storage
and sent mobile originated messages, leaving unread
messages and unsent mobile originated messages
untouched
3 Delete all read messages from preferred message storage,
sent and unsent mobile originated messages leaving
unread messages untouched
4 Delete all messages from preferred message storage
including unread messages
5s(delete 1 message)
Max Response Time 25s(delete 50 messages)
25s(delete 150 messages)
Reference Note
3GPP TS 27.005
4.2.2 AT+CMGF Select SMS Message Format
AT+CMGF Select SMS Message Format

Response
+CMGF: (list of supported <mode>s)
Test Command
AT+CMGF=?
OK
Parameter
See Write Command

Response
+CMGF: <mode>
Read Command
AT+CMGF? OK
Parameter
See Write Command
Response
TA sets parameter to denote which input and output format of messages to
use.
Write Command
OK
AT+CMGF=[<mode>]
Parameter
<mode> 0 PDU mode
1 Text mode
Max Response Time -
Reference
Note
3GPP TS 27.005
4.2.3 AT+CMGL List SMS Messages from Preferred Store
AT+CMGL List SMS Messages from Preferred Store

Response
+CMGL: (list of supported <stat>s)
Test Command
AT+CMGL=? OK
Parameter
See Write Command
Parameters
1) If text mode:
<stat> "REC UNREAD" Received unread messages
"REC READ" Received read messages
"STO UNSENT" Stored unsent messages
"STO SENT" Stored sent messages
Write Command "ALL" All messages
AT+CMGL=<stat>[,<m <mode> 0 Normal
ode>] 1 Not change status of the specified SMS record
2) If PDU mode:
<stat> 0 Received unread messages
1 Received read messages
2 Stored unsent messages
3 Stored sent messages
4 All messages
<mode> 0 Normal
1 Not change status of the specified SMS record
Response
TA returns messages with status value <stat> from message storage
<mem1> to the TE. If status of the message is 'received unread', status in
the storage changes to 'received read'.
1) If text mode (+CMGF=1) and Command successful:

for SMS-SUBMITs and/or SMS-DELIVERs:
+CMGL: <index>,<stat>,<oa/da>[,<alpha>][,<scts>]
[,<tooa/toda>,<length>]<CR><LF><data>
[<CR><LF>+CMGL: <index>,<stat>,<da/oa>
[,<alpha>][,<scts>][,<tooa/toda>,<length>]<CR><LF><data>[...]]
for SMS-STATUS-REPORTs:
+CMGL: <index>,<stat>,<fo>,<mr>[,<ra>][,<tora>],<scts>,<dt>,<st>
[<CR><LF>+CMGL: <index>,<stat>,<fo>,<mr>
[,<ra>][,<tora>],<scts>,<dt>,<st>[...]]
for SMS-COMMANDs:
+CMGL: <index>,<stat>,<fo>,<ct>[<CR><LF>
+CMGL: <index>,<stat>,<fo>,<ct>[...]]
for CBM storage:

+CMGL: <index>,<stat>,<sn>,<mid>,<page>,<pages>
<CR><LF><data>
<CR><LF>+CMGL: <index>,<stat>,<sn>,<mid>,<page>,<pages>
<CR><LF><data>[...]]
OK
2) If PDU mode (+CMGF=0) and Command successful:

+CMGL: <index>,<stat>[,<alpha>],<length>
<CR><LF><pdu><CR><LF>
+CMGL: <index>,<stat>[,alpha],<length>
<CR><LF><pdu>[...]]
OK
3)If error is related to ME functionality:

+CMS ERROR: <err>
Parameters
<alpha> String type(string should be included in quotation marks)
alphanumeric representation of <da> or <oa> corresponding to the entry
found in MT phonebook; implementation of this feature is manufacturer
specific; used character set should be the one selected with Command
Select TE Character Set +CSCS (see definition of this Command in 3GPP
TS 27.007)
<da> GSM 03.40 TP-Destination-Address Address-Value field in
string format; BCD numbers (or GSM default alphabet characters) are
converted to characters of the currently selected TE character set (refer
Command +CSCS in 3GPP TS 27.007); type of address given by <toda>
<data> In the case of SMS: GSM 03.40 TP-User-Data in text mode
responses; format:
- if <dcs> indicates that GSM 03.38 default alphabet is used and
<fo> indicates that GSM 03.40 TPUser-Data-Header-Indication
is not set:
- if TE character set other than "HEX" (refer Command Select TE
Character Set +CSCS in 3GPP TS 27.007):ME/TA converts
GSM alphabet into current TE character set according to rules of
Annex A
- if TE character set is "HEX": ME/TA converts each 7-bit
character of GSM alphabet into two IRA character long
hexadecimal number (e.g. character P (GSM 23) is presented as
17 (IRA 49 and 55))
- if <dcs> indicates that 8-bit or UCS2 data coding scheme is
used, or <fo> indicates that GSM 03.40
TP-User-Data-Header-Indication is set: ME/TA converts each
8-bit octet into two IRA character long hexadecimal number (e.g.
octet with integer value 42 is presented to TE as two characters
2A (IRA 50 and 65)) In the case of CBS: GSM 03.41 CBM
Content of Message in text mode responses; format:
- if <dcs> indicates that GSM 03.38 default alphabet is used:
- if TE character set other than "HEX" (refer Command +CSCS in
3GPP TS 27.007): ME/TA converts GSM alphabet into current
TE character set according to rules of Annex A
hexadecimal number
used: ME/TA converts each 8-bit octet into two IRA character
long hexadecimal number
<length> Integer type value indicating in the text mode (+CMGF=1) the
length of the message body <data> (or <cdata>) in characters; or in PDU
mode (+CMGF=0), the length of the actual TP data unit in octets (i.e. the RP
layer SMSC address octets are not counted in the length)
<index> Integer type; value in the range of location numbers supported
by the associated memory
<oa> GSM 03.40 TP-Originating-Address Address-Value field in
converted to characters of the currently selected TE character set (refer
Command +CSCS in 3GPP TS 27.007); type of address given by <tooa>
<pdu> In the case of SMS: GSM 04.11 SC address followed by
GSM 03.40 TPDU in hexadecimal format: ME/TA converts each octet of TP

data unit into two IRA character long hexadecimal number (e.g. octet with
integer value 42 is presented to TE as two characters 2A (IRA 50 and 65)).
In the case of CBS: GSM 03.41 TPDU in hexadecimal format.
<scts> GSM 03.40 TP-Service-Center-Time-Stamp in time-string
format (refer <dt>)
<toda> GSM 04.11 TP-Destination-Address Type-of-Address octet in
integer format (when first character of <da> is + (IRA 43) default is 145,
otherwise default is 129)
<tooa> GSM 04.11 TP-Originating-Address Type-of-Address octet in
integer format (default refer<toda>)
1) If text mode:
the same as AT+CMGL="REC UNREAD", received unread messages
2) If PDU mode:
Execution Command
the same as AT+CMGL=0, received unread messages
AT+CMGL
See more messages please refer to Write Command.

Parameters
See Write Command
20s(list 50 messages)
Max Response Time
20s(list 150 messages)
Reference Note
3GPP TS 27.005
4.2.4 AT+CMGR Read SMS Message
AT+CMGR Read SMS Message

AT+CMGR=? OK
Parameters
<mode> 0 Normal
1 Not change status of the specified SMS record
Write Command
Response
AT+CMGR=<index>[,<
TA returns SMS message with location value <index> from message
mode>]
storage <mem1> to the TE. If status of the message is 'received unread',
status in the storage changes to 'received read'.
1) If text mode (+CMGF=1) and Command successful:
for SMS-DELIVER:
+CMGR: <stat>,<oa>[,<alpha>],<scts>[,<tooa>,<fo>,<pid>,<dcs>
,<sca>,<tosca>,<length>]<CR><LF><data>
for SMS-SUBMIT:
+CMGR: <stat>,<da>[,<alpha>][,<toda>,<fo>,<pid>,<dcs>[,<vp>]
,<sca>,<tosca>,<length>]<CR><LF><data>
for SMS-STATUS-REPORTs:
+CMGR: <stat>,<fo>,<mr>[,<ra>][,<tora>],<scts>,<dt>,<st>
for SMS-COMMANDs:
+CMGR: <stat>,<fo>,<ct>[,<pid>[,<mn>][,<da>][,<toda>]
,<length><CR><LF><cdata>]
for CBM storage:

+CMGR: <stat>,<sn>,<mid>,<dcs>,<page>,<pages><CR><LF><data>
2) If PDU mode (+CMGF=0) and Command successful:
+CMGR: <stat>[,<alpha>],<length><CR><LF><pdu>
OK
3) If error is related to ME functionality:
+CMS ERROR: <err>
Parameters
<alpha> String type (string should be included in quotation marks)
alphanumeric representation of <da> or <oa> corresponding to the entry
found in MT phonebook; implementation of this feature is manufacturer
specific
converted to characters of the currently selected TE character set (specified
by +CSCS in 3GPP TS 27.007); type of address given by <toda>
<data> In the case of SMS: GSM 03.40 TP-User-Data in text mode
responses; format:
- if <dcs> indicates that GSM 03.38 default alphabet is used and
<fo> indicates that GSM 03.40 TPUser-Data-Header-Indication
is not set:
- if TE character set other than "HEX" (refer Command Select TE
Character Set +CSCS in 3GPP TS 27.007):ME/TA converts
GSM alphabet into current TE character set according to rules of
Annex A
hexadecimal number (e.g. character P (GSM 23) is presented as
17 (IRA 49 and 55))
used, or <fo> indicates that GSM 03.40
TP-User-Data-Header-Indication is set: ME/TA converts each
8-bit octet into two IRA character long hexadecimal number (e.g.
octet with integer value 42 is presented to TE as two characters

2A (IRA 50 and 65)) In the case of CBS: GSM 03.41 CBM
Content of Message in text mode responses; format:
- if <dcs> indicates that GSM 03.38 default alphabet is used:
- if TE character set other than "HEX" (refer Command +CSCS in
3GPP TS 27.007): ME/TA converts GSM alphabet into current
TE character set according to rules of Annex A
hexadecimal number
used: ME/TA converts each 8-bit octet into two IRA character
long hexadecimal number
<dcs> Depending on the Command or result code: GSM 03.38 SMS
Data Coding Scheme (default 0), or Cell Broadcast Data Coding Scheme in
integer format
<fo> Depending on the Command or result code: first octet of GSM
03.40 SMS-DELIVER, SMS-SUBMIT (default 17),
SMS-STATUS-REPORT, or SMS-COMMAND (default 2) in integer format
<length> integer type value indicating in the text mode (+CMGF=1) the
length of the message body <data> (or <cdata>) in characters; or in
PDU mode (+CMGF=0), the length of the actual TP data unit in octets (i.e.
the RP layer SMSC address octets are not counted in the length)
<mid> GSM 03.41 CBM Message Identifier in integer format
converted characters of the currently selected TE character set (specified
by +CSCS in 3GPP TS 27.007); type of address given by <tooa>
<pdu> In the case of SMS: GSM 04.11 SC address followed by GSM
03.40 TPDU in hexadecimal format: ME/TA converts each octet of TP data
unit into two IRA character long hexadecimal number (e.g. octet with integer
value 42 is presented to TE as two characters 2A (IRA 50 and 65)). In the
case of CBS: GSM 03.41 TPDU in hexadecimal format.
<pid> GSM 03.40 TP-Protocol-Identifier in integer format
(default 0)
<sca> GSM 04.11 RP SC address Address-Value field in string
format; BCD numbers (or GSM default alphabet characters) are converted
to characters of the currently selected TE character set (specified by
+CSCS in 3GPP TS 27.007); type of address given by <tosca>
<scts> GSM 03.40 TP-Service-Centre-Time-Stamp in time-string
format (refer <dt>)
<stat> 0 "REC UNREAD" Received unread messages
1 "REC READ" Received read messages
2 "STO UNSENT" Stored unsent messages
3 "STO SENT" Stored sent messages
4 "ALL" All messages
<toda> GSM 04.11 TP-Destination-Address Type-of-Address octet

in integer format (when first character of <da> is + (IRA 43) default is 145,
integer format (default refer<toda>)
<tosca> GSM 04.11 RP SC address Type-of-Address octet in integer
format (default refer <toda>)
<vp> Depending on SMS-SUBMIT <fo> setting: GSM 03.40
TP-Validity-Period either in integer format (default 167) or in time-string
format (refer <dt>)
Reference Note
3GPP TS 27.005
4.2.5 AT+CMGS Send SMS Message
AT+CMGS Send SMS Message

AT+CMGS=? OK
Parameters
string format(string should be included in quotation marks); BCD numbers
(or GSM default alphabet characters) are converted to characters of the
Write Command currently selected TE character set (specified by +CSCS in 3GPP TS
1) If text mode 27.007); type of address given by <toda>
(+CMGF=1): <toda> GSM 04.11 TP-Destination-Address Type-of-Address octet in
AT+CMGS=<da>[,<tod integer format (when first character of <da> is + (IRA 43) default is 145,
a>] otherwise default is 129)
<CR>text is entered <length> Integer type value (not exceed 160 bytes) indicating in the text
<ctrl-Z/ESC> mode (+CMGF=1) the length of the message body <data> (or <cdata>) in
ESC quits without characters; or in PDU mode (+CMGF=0), the length of the actual TP data
sending unit in octets (i.e. the RP layer SMSC address octets are not counted in the
length)
2) If PDU mode Response
(+CMGF=0): TA sends message from a TE to the network (SMS-SUBMIT). Message
AT+CMGS=<length> reference value <mr> is returned to the TE on successful message delivery.
<CR>PDU is given Optionally (when +CSMS <service> value is 1 and network supports)
<ctrl-Z/ESC> <scts> is returned. Values can be used to identify message upon
unsolicited delivery status report result code.
1) If text mode(+CMGF=1) and sending successful:
+CMGS: <mr>
OK
2) If PDU mode(+CMGF=0) and sending successful:
+CMGS: <mr>
OK
3)If error is related to ME functionality:
+CMS ERROR: <err>
Parameter
<mr> GSM 03.40 TP-Message-Reference in integer format
Reference Note
3GPP TS 27.005  Reject incoming call when sending messages.
4.2.6 AT+CMGW Write SMS Message to Memory
AT+CMGW Write SMS Message to Memory

AT+CMGW=? OK
Response
TA transmits SMS message (either SMS-DELIVER or SMS-SUBMIT) from
TE to memory storage <mem2>. Memory location <index> of the stored
message is returned. By default message status will be set to 'stored
Write Command unsent', but parameter <stat> allows also other status values to be given.
1) If text mode
(+CMGF=1): If writing is successful:
AT+CMGW=<oa/da>[,< +CMGW: <index>
tooa/toda>][,<stat>]
<CR> text is entered OK
<ctrl-Z/ESC> If error is related to ME functionality:
<ESC> quits without +CMS ERROR: <err>
sending Parameters
2) If PDU mode string format(string should be included in quotation marks); BCD numbers
(+CMGF=0): (or GSM default alphabet characters) are converted to characters of the
AT+CMGW=<length>[, currently selected TE character set (specified by +CSCS in 3GPP TS
<stat>] 27.007);type of address given by <tooa>
<CR>PDU is given <da> GSM 03.40 TP-Destination-Address Address-Value field in
<ctrl-Z/ESC> string format(string should be included in quotation marks); BCD numbers
currently selected TE character set (specified by +CSCS in 3GPP TS
27.007); type of address given by <toda>
integer format (default refer <toda>)

<toda> GSM 04.11 TP-Destination-Address Type-of-Address octet in
integer format (when first character of <da> is + (IRA 43) default is 145,
129 Unknown type(IDSN format number)
161 National number type(IDSN format)
145 International number type(ISDN format)
177 Network specific number(ISDN format)
<length> Integer type value (not exceed 160 bytes) indicating in the text
mode (+CMGF=1) the length of the message body <data> (or <cdata>) in
characters;
or in PDU mode (+CMGF=0), the length of the actual TP data
unit in octets (i.e. the RP layer SMSC address octets are not
counted in the length)
<stat> in the text mode (+CMGF=1):
"STO UNSENT" Stored unsent messages
"STO SENT" Stored sent messages
in PDU mode (+CMGF=0):
0 Received unread messages
1 Received read messages
2 Stored unsent messages
3 Stored sent messages
<pdu> In the case of SMS: GSM 04.11 SC address followed by GSM
03.40 TPDU in hexadecimal format: ME/TA converts each octet of TP data
unit into two IRA character long hexadecimal number (e.g. octet with integer
value 42 is presented to TE as two characters 2A (IRA 50 and 65)). In the
case of CBS: GSM 03.41 TPDU in hexadecimal format.
<index> Index of message in selected storage <mem2>
Response
TA transmits SMS message (either SMS-DELIVER or SMS-SUBMIT) from
TE to memory storage <mem2>. Memory location <index> of the stored
message is returned. By default message status will be set to 'stored
unsent', but parameter <stat> allows also other status values to be given.
Execution Command
AT+CMGW If writing is successful:
+CMGW: <index>
OK
+CMS ERROR: <err>
Reference
Note
3GPP TS 27.005
4.2.7 AT+CMSS Send SMS Message from Storage
AT+CMSS Send SMS Message from Storage

AT+CMSS=? OK
Response
TA sends message with location value <index> from message storage
<mem2> to the network (SMS-SUBMIT). If new recipient address <da> is
given, it shall be used instead of the one stored with the message.
Reference value <mr> is returned to the TE on successful message
delivery. Values can be used to identify message upon unsolicited delivery
status report result code.
1) If text mode(+CMGF=1) and sending successful:
+CMSS: <mr>
OK
2) If PDU mode(+CMGF=0) and sending successful:
+CMSS: <mr>
Write Command
AT+CMSS=<index>[,< OK
da>,<toda>] 3)If error is related to ME functionality:
+CMS ERROR: <err>
Parameters
string format(string should be included in quotation marks); BCD numbers
27.007); type of address given by <toda>
<toda> GSM 04.11 TP-Destination-Address Type-of-Address octet
in integer format (when first character of <da> is + (IRA 43) default is 145,
<mr> GSM 03.40 TP-Message-Reference in integer format
Reference
Note
3GPP TS 27.005
4.2.8 AT+CNMI New SMS Message Indications
AT+CNMI New SMS Message Indications

Response
+CNMI: (list of supported <mode>s),(list of supported <mt>s),(list of
supported <bm>s),(list of supported <ds>s),(list of supported <bfr>s)
Test Command
AT+CNMI=?
OK
Parameters
See Write Command
Response
+CNMI: <mode>,<mt>,<bm>,<ds>,<bfr>
Read Command
AT+CNMI? OK
Parameters
See Write Command
Response
TA selects the procedure for how the receiving of new messages from the
network is indicated to the TE when TE is active, e.g. DTR signal is ON. If
TE is inactive (e.g. DTR signal is OFF), message receiving should be done
as specified in GSM 03.38.
OK
or
ERROR
Parameters
<mode> 0 Buffer unsolicited result codes in the TA. If TA result code
buffer is full, indications can be buffered in some other place or the oldest
indications may be discarded and replaced with the new received
Write Command
indications.
AT+CNMI=<mode>[,< 1 Discard indication and reject new received message
mt>[,<bm>[,<ds>[,<bfr
>]]]] unsolicited result codes when TA-TE link is reserved (e.g. in on-line data
mode). Otherwise forward them directly to the TE.
2 Buffer unsolicited result codes in the TA when TA-TE link
is reserved (e.g. in on-line data mode) and flush them to the TE after
reservation. Otherwise forward them directly to the TE.
<mt> (the rules for storing received SMs depend on its data coding
scheme (refer GSM 03.38 [2]), preferred memory storage (+CPMS) setting
and this value):
0 No SMS-DELIVER indications are routed to the TE.
1 If SMS-DELIVER is stored into ME/TA, indication of the
memory location is routed to the TE using unsolicited result code: +CMTI:
<mem>,<index>
2 SMS-DELIVERs (except class 2) are routed directly to the
TE using unsolicited result code:
+CMT: [<alpha>],<length><CR><LF><pdu> (PDU mode enabled)

or
+CMT:
<oa>,[<alpha>],<scts>[,<tooa>,<fo>,<pid>,<dcs>,<sca>,<tosca>,<lengt
h>]<CR><LF><data> (text mode enabled; about parameters in italics, refer
Command Show Text Mode Parameters +CSDH). Class 2 messages result
in indication as defined in <mt>=1.
3 Class 3 SMS-DELIVERs are routed directly to TE
using unsolicited result codes defined in <mt>=2. Messages of other
classes
result in indication as defined in <mt>=1.
<bm> (the rules for storing received CBMs depend on its data coding
scheme (refer GSM 03.38 [2]), the setting of Select CBM Types (+CSCB)
and this value):
0 No CBM indications are routed to the TE.
2 New CBMs are routed directly to the TE using unsolicited
result code:
+CBM: <length><CR><LF><pdu> (PDU mode enabled)
or
+CBM: <sn>,<mid>,<dcs>,<page>,<pages><CR><LF><data> (text
mode enabled).
<ds> 0 No SMS-STATUS-REPORTs are routed to the TE.
1 SMS-STATUS-REPORTs are routed to the TE using
unsolicited result code:
+CDS: <length><CR><LF><pdu> (PDU mode enabled)
or
+CDS: <fo>,<mr>[,<ra>][,<tora>],<scts>,<dt>,<st> (text mode enabled)
2 If SMS-STATUS-REPORT is stored into ME/TA, indication
of the memory location is routed to the TE using unsolicited result code:
+CDSI: <mem3>,<index>
<bfr> 0 TA buffer of unsolicited result codes defined within this
Command is flushed to the TE when <mode> 1...3 is entered (OK response
shall be given before flushing the codes).
1 TA buffer of unsolicited result codes defined within this
command is cleared when <mode> 1…3 is entered
Unsolicited result code
1. Indicates that new message has been received
If <mt>=1:
+CMTI: <mem3>,<index>
If <mt>=2 (PDU mode enabled):
+CMT: [<alpha>],<length><CR><LF><pdu>
If <mt>=2 (text mode enabled):
+CMT:
<oa>,<scts>[,<tooa>,<fo>,<pid>,<dcs>,<sca>,<tosca>,<length>]<CR><
LF><data>
2. Indicates that new cell broadcast message has been received

If <bm>=2 (PDU mode enabled):
+CBM: <length><CR><LF><pdu>
If <bm>=2 (text mode enabled):
+CBM: <sn>,<mid>,<dcs>,<page>,<pages><CR><LF><data>
3. Indicates that new SMS status report has been received

If <ds>=1 (PDU mode enabled):
+CDS: <length><CR><LF><pdu>
If <ds>=1 (text mode enabled):
+CDS: <fo>,<mr>[,<ra>][,<tora>],<scts>,<dt>,<st>
Max Response Time -
Note
 This command is used to select the procedure how receiving of new
Reference messages from the network is indicated to the TE when TE is active,
3GPP TS 27.005 e.g. DTR signal is ON. If TE is inactive (e.g. DTR signal is OFF). If set
<mt>＝2,<mt>＝3 or <ds>＝1, make sure <mode>＝1, otherwise it will
return error..
4.2.9 AT+CPMS Preferred SMS Message Storage
AT+CPMS Preferred SMS Message Storage

Response
+CPMS: (list of supported <mem1>s),(list of supported <mem2>s),(list of
supported <mem3>s)
Test Command
AT+CPMS=?
OK
Parameters
See Write Command
Response
+CPMS: <mem1>,<used1>,<total1>,<mem2>,<used2>,<total2>,
<mem3>,<used3>,<total3>
Read Command
AT+CPMS? OK
ERROR
Parameters
See Write Command
Response
Write Command TA selects memory storages <mem1>,<mem2> and <mem3> to be used for
AT+CPMS=<mem1>[,< reading, writing, etc.
mem2>[,<mem3>]] +CPMS: <used1>,<total1>,<used2>,<total2>,<used3>,<total3>
OK
ERROR
Parameters
<mem1> Messages to be read and deleted from this memory storage
"SM"SIM message storage
<mem2> Messages will be written and sent to this memory storage
<mem3> Received messages will be placed in this memory storage if
routing to PC is not set ("+CNMI")
<usedx> Integer type; Number of messages currently in <memx>
<totalx> Integer type; Number of messages storable in <memx>
Max Response Time -
Reference
Note
3GPP TS 27.005
4.2.10 AT+CRES Restore SMS Settings
AT+CRES Restore SMS Settings

Response
+CRES: list of supported <profile>s
Test Command
AT+CRES=? OK
Parameter
See Write Command
Response
Execution command restores message service settings from non-volatile
memory to active memory. A TA can contain several profiles of settings.
Settings specified in commands Service Centre Address +CSCA and Set
Message Parameters +CSMP are restored. Certain settings may not be
Write Command
supported by the storage (e.g. (U)SIM SMS parameters) and therefore can
AT+CRES=<profile>
not be restored.
OK
ERROR
Parameter
<profile> 0 Restore SM service settings from profile 0
Response
Same as AT+CRES=0.
Execution Command
OK
AT+CRES
+CMS ERROR <err>

Reference Note
3GPP TS 27.005
4.2.11 AT+CSAS Save SMS Settings
AT+CSAS Save SMS Settings

Response
+CSAS: list of supported <profile>s
Test Command
AT+CSAS=? OK
Parameter
See Write Command
Response
Execution command saves active message service settings to a
non-volatile memory. Settings specified in commands Service Centre
Address +CSCA and Set Message Parameters +CSMP are saved. Certain
Write Command settings may not be supported by the storage (e.g. (U)SIM SMS
AT+CSAS=<profile> parameters) and therefore can not be saved.
OK
ERROR
Parameter
<profile> 0 Save SM service setting in profile 0
Response
Same as AT+CSAS=0
AT+CSAS
+CMS ERROR <err>
Reference Note
3GPP TS 27.005
4.2.12 AT+CSCA SMS Service Center Address
AT+CSCA SMS Service Center Address

AT+CSCA=? OK
AT+CSCA? +CSCA: <sca>,<tosca>[,<scaAlpha>]
OK
Parameters
See Write Command
Response
TA updates the SMSC address, through which mobile originated SMS are
transmitted. In text mode, setting is used by send and writes commands. In
PDU mode, setting is used by the same commands, but only when the
length of the SMSC address coded into <pdu> parameter equals zero.
Note: The Command writes the parameters in NON-VOLATILE memory.

OK
Write Command +CME ERROR: <err>
AT+CSCA=<sca>[,<tos Parameters
ca>] <sca> GSM 04.11 RP SC address Address-Value field in string
format(string should be included in quotation marks); BCD numbers (or
GSM default alphabet characters) are converted to characters of the
27.007); type of address given by <tosca>
<tosca> Service center address format GSM 04.11 RP SC address
Type-of-Address octet in integer format (default refer <toda>)
<scaAlpha> String type(string should be included in quotation
marks)
Service center address alpha data
Reference
Note
3GPP TS 27.005
4.2.13 AT+CSDH Show SMS Text Mode Parameters
AT+CSDH Show SMS Text Mode Parameters

Response
+CSDH: (list of supported <show>s)
Test Command
AT+CSDH=? OK
Parameter
See Write Command
Response
Read Command
+CSDH: <show>
AT+CSDH?
OK
Parameter
See Write Command
Response
TA determines whether detailed header information is shown in text mode
result codes.
OK
Write Command Parameter
AT+CSDH=<show> <show> 0 Do not show header values defined in commands +CSCA
and +CSMP (<sca>,<tosca>,<fo>,<vp>,<pid> and <dcs>) nor
<length>,<toda> or <tooa> in +CMT, +CMGL, +CMGR result codes for
SMS-DELIVERs and SMS-SUBMITs in text mode
1 Show the values in result codes
AT+CSDH OK
Max Response Time -
Reference Note
3GPP TS 27.005
4.2.14 AT+CSMP Set SMS Text Mode Parameters
AT+CSMP Set SMS Text Mode Parameters

Response
Test Command OK
AT+CSMP=? Parameters
See Write Command
Response
+CSMP: <fo>,<vp>,<pid>,<dcs>
Read Command
AT+CSMP? OK
Parameters
See Write Command
Response
TA selects values for additional parameters needed when SM is sent to the
network or placed in a storage when text mode is selected (+CMGF=1). It is
Write Command possible to set the validity period starting from when the SM is received by
AT+CSMP=[<fo>[,<vp> the SMSC (<vp> is in range 0... 255) or define the absolute time of the
,<pid>,<dcs>]] validity period termination (<vp> is a string).
Note: The Command writes the parameter <fo> in NON-VOLATILE memory.

OK
Parameters
<fo> Depending on the command or result code: first octet of GSM
03.40 SMS-DELIVER, SMS-SUBMIT (default 17),
SMS-STATUS-REPORT, or SMS-COMMAND (default 2) in integer format.
SMS status report is supported under text mode if <fo> is set to 49.
<vp> Depending on SMS-SUBMIT <fo> setting: GSM 03.40
TP-Validity-Period either in integer format (default 167) or in time-string
format (refer <dt>)
<pid> GSM 03.40 TP-Protocol-Identifier in integer format (default 0).
<dcs> GSM 03.38 SMS Data Coding Scheme in Integer format.
Max Response Time -
Reference Note
3GPP TS 27.005
4.2.15 AT+CSMS Select Message Service
AT+CSMS Select Message Service

Response
+CSMS: (list of supported <service>s)
Test Command
AT+CSMS=? OK
Parameter
See Write Command
Response
+CSMS: <service>,<mt>,<mo>,<bm>
Read Command
AT+CSMS? OK
Parameters
See Write Command
Response
+CSMS: <mt>,<mo>,<bm>
OK
+CME ERROR: <err>
Write Command
Parameters
AT+CSMS=<service>
<service> 0 GSM 03.40 and 03.41 (the syntax of SMS AT commands
is compatible with 3GPP TS 27.005 Phase 2 version 4.7.0; Phase 2+
features which do not require new Command syntax may be supported (e.g.
correct routing of messages with new Phase 2+ data coding schemes))
1 GSM 03.40 and 03.41 (the syntax of SMS AT commands
is compatible with 3GPP TS 27.005 Phase 2+
version; the requirement of <service> setting 1 is

mentioned under corresponding command descriptions)
<mt> Mobile Terminated Messages:
0 Type not supported
1 Type supported
<mo> Mobile Originated Messages:
1 Type supported
<bm> Broadcast Type Messages:
1 Type supported
Max Response Time -
Reference Note
3GPP TS 27.005
5 AT Commands Special for SIMCom
5.1 Overview
Command Description
AT+CPOWD Power off
AT+CADC Read ADC
AT+CFGRI Indicate RI when using URC
AT+CLTS Get local timestamp
AT+CBAND Get and set mobile operation band
AT+CNSMOD Show network system mode
AT+CSCLK Configure slow clock
AT+CCID Show ICCID
AT+CDEVICE View Current Flash Device Type
AT+GSV Display product identification information
AT+SGPIO Control the GPIO
AT+SLEDS Set the timer period of net light
AT+CNETLIGHT Close the net light or open it to shining
AT+CSGS Netlight indication of GPRS status
AT+CGPIO Control the GPIO by PIN Index
AT+CBATCHK Set VBAT checking feature ON/OFF
AT+CNMP Preferred mode selection
AT+CMNB Preferred selection between CAT-M and NB-IoT
AT+CPSMS Power Saving Mode Setting
AT+CEDRXS Extended-DRX Setting
AT+CPSI Inquiring UE system information
AT+CGNAPN Get Network APN in CAT-M Or NB-IOT
AT+CSDP Service Domain Preference
AT+MCELLLOCK Lock the special CAT-M cell
AT+NCELLLOCK Lock the special NB-IOT cell
AT+NBSC Configure NB-IOT Scrambling Feature
AT+CAPNMODE Select the mode of application configure APN
AT+CRRCSTATE Query RRC State
AT+CBANDCFG Configure CAT-M Or NB-IOT Band
AT+CNACT APP Network Active
AT+CNCFG PDP Configure
AT+CEDUMP Set whether the module reset when the module is crashed
AT+CNBS Configure Band Scan Optimization for NB-IOT
AT+CNDS Configure Service Domain Preference For NB-IOT
AT+CENG Switch on or off Engineering Mode
AT+CNACTCFG Configure IP Protocol Type
AT+CTLIIC Control the Switch of IIC
AT+CWIIC Write Values to Register of IIC Device
AT+CRIIC Read Values from Register of IIC Device
AT+CMCFG Manage Mobile Operator Configuration
AT+CSIMLOCK SIM Lock
AT+CRATSRCH Configure parameter for better RAT search
AT+SPWM Generate the Pulse-Width-Modulation
AT+CASRIP Show Remote IP Address and Port When Received Data
AT+CEDRX Configure EDRX parameters
AT+CPSMRDP Read PSM Dynamic Parameters
AT+CPSMCFG Configure PSM version and Minimum Threshold Value
AT+CPSMCFGEXT Configure Modem Optimization of PSM
AT+CPSMSTATUS Enable Deep Sleep Wakeup Indication
AT+CEDRXRDP eDRX Read Dynamic Parameters
AT+CRAI Configure Release Assistance Indication in NB-IOT network
5.2 Detailed Descriptions of Commands
5.2.1 AT+CPOWD Power off
AT+CPOWD Power Off

Response
[NORMAL POWER DOWN]
AT+CPOWD=<n> <n>
0 Power off urgently (Will not send out NORMAL POWER DOWN)
1 Normal power off (Will send out NORMAL POWER DOWN)
Max Response Time -
Note
Reference
5.2.2 AT+CADC Read ADC
AT+CADC Read ADC

Response
+CADC: (list of supported <status>s),(list of supported <value>s)
Test Command OK
AT+CADC=? Parameters
<status> 1 Success
0 Fail
<value> Integer 0,100-1700
Response
+CADC: <status>,<value>
Read Command
AT+CADC? OK
Parameters
See Test Command
Note
Reference
5.2.3 AT+CFGRI Indicate RI When Using URC
AT+CFGRI Indicate RI When Using URC

Response
+CFGRI: (0-2)
Test Command
AT+CFGRI=? OK
Parameters
See Write Command
Response
+CFGRI: <status>
Read Command
AT+CFGRI? OK
Parameters
See Write Command
Response
Write Command OK
AT+CFGRI=<status> ERROR
Parameters
<status> 0 Off
1 On(TCPIP, FTP and URC control RI pin)
2 On(only TCPIP control RI pin)
Max Response Time -
Note
Reference  RI pin can not controll by "AT+CFGRI" command when module has call
service or receiving SMS.
5.2.4 AT+CLTS Get Local Timestamp
AT+CLTS Get Local Timestamp

Response
Test Command +CLTS: "yy/MM/dd,hh:mm:ss+/-zz"
AT+CLTS=?
OK
Response
Read Command +CLTS: <mode>
AT+CLTS?
OK
Response
OK
or
ERROR
Parameters
<mode>
0 Disable
1 Enable
When "get local timestamp" function is enabled, the following URC may be
Write Command reported if network sends the message to the MS to provide the MS with
AT+CLTS=<mode> subscriber specific information.
1. Refresh network name by network:
*PSNWID: "<mcc>", "<mnc>", "<full network name>",<full network
name CI>,"<short network name>",<short network name CI>
2. Refresh time and time zone by network:

This is UTC time, the time queried by AT+CCLK command is local time.
*PSUTTZ: <year>,<month>,<day>,<hour>,<min>,<sec>,"<time
zone>",<dst>
3. Refresh network time zone by network:
+CTZV: "<time zone>"
4. Refresh Network Daylight Saving Time by network:

DST: <dst>
Parameters
<mcc> String type; mobile country code
<mnc> String type; mobile network code
<full network name> String type; name of the network in full length.
<full network name CI> Integer type; indicates whether to add CI.
0 The MS will not add the initial letters of the Country's
Name to the text string.
1 The MS will add the initial letters of the Country's
Name and a separator (e.g. a space) to the text string.
<short network name> String type; abbreviated name of the network
<short network name CI> Integer type; indicates whether to add CI.
0 The MS will not add the initial letters of the Country's
Name to the text string.
1 The MS will add the initial letters of the Country's
Name and a separator (e.g. a space) to the text string.
<year> 4 digits of year (from network)
<month> Month (from network)
<day> Day (from network)
<hour> Hour (from network)
<min> Minute (from network)
<sec> Second (from network)
<time zone> String type; network time zone. If the network time zone has
been adjusted for Daylight Saving Time, the network shall indicate this by
including the <dst> (Network Daylight Saving Time)
<dst> Network Daylight Saving Time; the content of this
indicates the value that used to adjust the network time zone
0 No adjustment for Daylight Saving Time
1 +1 hour adjustment for Daylight Saving
2 +2 hours adjustment for Daylight Saving Time
others Reserved
Max Response Time -
Note
Support for this Command will be network dependent.
Reference
Set AT+CLTS=1, it means user can receive network time updating and
use AT+CCLK to show current time.
*PSUTTZ may report twice.
5.2.5 AT+CBAND Get and Set Mobile Operation Band
AT+CBAND Get and Set Mobile Operation Band

Response
+CBAND: (list of supported <op_band>s)
Test Command
AT+CBAND=? OK
Parameter
See Write Command
Response
+CBAND: <op_band>
Read Command
AT+CBAND? OK
Parameter
See Write Command
Response
OK
+CME ERROR: <err>
Write Command
Parameter
AT+CBAND=<op_band
<op_band> A string parameter which indicate the operation band.
>
And the following strings should be included in quotation marks.
EGSM_MODE
DCS_MODE
ALL_MODE
Max Response Time -
Note
Reference  Radio settings are stored in non-volatile memory.
 Only for GSM
5.2.6 AT+CNSMOD Show Network System Mode
AT+CNSMOD Show Network System Mode

Response
+CNSMOD: (list of supported <n>s)
Test Command
AT+CNSMOD=? OK
Parameter
See Write Command
AT+CNSMOD? +CNSMOD: <n>,<stat>
OK
Parameter
See Write Command
Response
OK
ERROR:
Parameter
<n>
0 Disable auto report the network system mode information
Write Command 1 Auto report the network system mode information, command:
AT+CNSMOD=<n> +CNSMOD: <stat>
<stat>
0 no service
1 GSM
3 EGPRS
7 LTE M1
9 LTE NB
Max Response Time
Reference
5.2.7 AT+CSCLK Configure Slow Clock
AT+CSCLK Configure Slow Clock

Response
+CSCLK: (list of supported <n>s)
Test Command
AT+CSCLK=? OK
Parameter
See Write Command
Response
+CSCLK: <n>
Read Command
AT+CSCLK? OK
Parameter
See Write Command
Response
Write Command OK
AT+CSCLK=<n> or
ERROR
Parameter
<n> 0 Disable slow clock, module will not enter sleep mode.
1 Enable slow clock, it is controlled by DTR. When DTR is
high, module can enter sleep mode. When DTR changes to low
level, module can quit sleep mode.
Max Response Time -
Note
Reference
5.2.8 AT+CCID Show ICCID
AT+CCID Show ICCID

AT+CCID=? OK
Response
Execution Command Ccid data [ex. 898600810906F8048812]
AT+CCID
OK
Note
Reference
5.2.9 AT+CDEVICE View Current Flash Device Type
AT+CDEVICE View Current Flash Device Type

Response
Device Name: Current flash device type
Read Command
Ram Size: Current RAM size
AT+CDEVICE?
OK
Max Response Time -
Reference Note
V.25ter
5.2.10 AT+GSV Display Product Identification Information
AT+GSV Display Product Identification Information

Response
TA returns product information text
Example:
Execution Command
SIMCOM_Ltd
AT+GSV
SIMCOM_SIM7000
Revision: 1351B01SIM7000
OK
Max Response Time -
Reference Note
5.2.11 AT+SGPIO Control the GPIO
AT+SGPIO Control the GPIO

Response
+SGPIO: (0-1),(0-4),(0-1),(0-1)
Test Command
AT+SGPIO=? OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
<operation>
Write Command
0 Set the GPIO function including the GPIO output.
AT+SGPIO=<operation
1 Read the GPIO level. Please note that only when the gpio is set
>,<GPIO>,<function>,<
level> as input, user can use parameter 1 to read the GPIO level, otherwise the
module will return "ERROR".
<GPIO> The GPIO you want to be set. (It has relations with the hardware,
please refer to the hardware manual)
<function> Only when <operation> is set to 0, this option takes effect.
0 Set the GPIO to input.
1 Set the GPIO to output
<level> 0 Set the GPIO low level

1 Set the GPIO high level
Max Response Time -
Note
Reference
5.2.12 AT+SLEDS Set the Timer Period of Net Light
AT+SLEDS Set the Timer Period of Net Light

Response
+SLEDS: (1-3),(0,40-65535),(0,40-65535)
Test Command
AT+SLEDS=? OK
Parameters
See Write Command
Response
+SLEDS: <mode>,<timer_on>,<timer_off>
Read Command
AT+SLEDS? OK
Parameters
See Write Command
Response
OK
ERROR
Parameters
<mode>
1 Set the timer period of net light while SIM7000 series does not
register to the network
Write Command 2 Set the timer period net light while SIM7000 series has already
AT+SLEDS=<mode>,<t registered to the network
imer_on>,<timer_off> 3 Set the timer period net light while SIM7000 series is in the state of
PPP communication
<timer_on>
Timer period of "LED ON" in decimal format which range is 0 or
40-65535(ms)
<timer_off>
Timer period of "LED OFF" in decimal format which range is 0 or
40-65535(ms)
Max Response Time -
Reference Note
The default value is :

<mode>,<timer_on>,<timer_off>
1,64,800
2,64,3000
3,64,300
5.2.13 AT+CNETLIGHT Close the Net Light or Open It to Shining
AT+CNETLIGHT Close the Net Light or Open It to Shining

Response
+CNETLIGHT: (0,1)
Test Command
AT+CNETLIGHT=? OK
Parameters
See Write Command
Response
+CNETLIGHT: <mode>
Read Command
AT+CNETLIGHT? OK
Parameters
See Write Command
Response
OK
Write Command ERROR
AT+CNETLIGHT=<mod Parameters
e> <mode>
0 Close the net light
1 Open the net light to shining
Max Response Time -
Reference Note
5.2.14 AT+CSGS Netlight Indication of GPRS Status
AT+CSGS Netlight Indication of GPRS Status

Response
Test Command +CSGS: (0-2)
AT+CSGS=?
OK
Parameters
See Write Command
Response
+CSGS: <mode>
Read Command
AT+CSGS? OK
Parameters
See Write Command
Response
OK
ERROR
Parameters
<mode>
Write Command
0 Disable
AT+CSGS=<mode>
1 Enable, the netlight will be forced to enter into 64ms on/300ms off
blinking state in GPRS data transmission service. Otherwise, the
netlight state is not restricted.
2 Enable, the netlight will blink according to AT+SLEDS in GPRS data
transmission service.
Max Response Time -
Reference
Note
5.2.15 AT+CGPIO Control the GPIO by PIN Index
AT+CGPIO Control the GPIO by PIN Index

Response
+CGPIO: (0-1),(list of supported <pin>s),(0-1),(0-1)
Test Command
AT+CGPIO=? OK
Parameters
See Write Command
Response
OK
or
Write Command
ERROR
AT+CGPIO=<operation
Parameters
>,<pin>,<function>,<le
vel> <operation>
0 Set the GPIO function including the GPIO output .
1 Read the GPIO level. Please note that only when the gpio is set
as input, user can use parameter 1 to read the GPIO level, otherwise the
module will return "ERROR".

<pin> The PIN index you want to be set. (It has relations with the
hardware, please refer to the hardware manual)
<function> Only when <operation> is set to 0, this option takes effect.
0 Set the GPIO to input.
1 Set the GPIO to output
<level>
0 Set the GPIO low level
1 Set the GPIO high level
Max Response Time -
Note
Reference
5.2.16 AT+CBATCHK Set VBAT Checking Feature ON/OFF
AT+CBATCHK Set VBAT Checking Feature ON/OFF

Response
Test Command +CBATCHK: (0,1)
AT+CBATCHK=?
OK
Response
+CBATCHK: <mode>
Read Command
AT+CBATCHK? OK
Parameters
See Write Command
Response
OK
Write Command If failed:
AT+CBATCHK=<mode +CME ERROR: <err>
> Parameters
<mode> 0 Close the function of VBAT checking
1 Open the function of VBAT checking
Max Response Time -
Reference Note
5.2.17 AT+CNMP Preferred Mode Selection
AT+CNMP Preferred Mode Selection

Response
Test Command +CNMP: (list of supported <mode>s)
AT+CNMP=?
OK
Response
+CNMP: <mode>
Read Command
AT+CNMP? OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
Write Command
Parameters
AT+CNMP=<mode>
<mode> 2 Automatic
13 GSM only
38 LTE only
51 GSM and LTE only
Max Response Time -
Note
Reference
Default value of parameter <mode> is different among SIM7000 series
project.
5.2.18 AT+CMNB Preferred Selection between CAT-M and NB-IoT
AT+CMNB Preferred Selection between CAT-M and NB-IoT

Response
Test Command +CMNB: (list of supported<mode>s)
AT+CMNB=?
OK
Response
+CMNB: <mode>
Read Command
AT+CMNB? OK
Parameters
See Write Command
Response
OK
If failed:
AT+CMNB=<mode> Parameters
<mode> 1 CAT-M
2 NB-Iot
3 CAT-M and NB-IoT
Max Response Time -
Note
Reference Default value of parameter <mode> is different among SIM7000 series
project.
5.2.19 AT+CPSMS Power Saving Mode Setting
AT+CPSMS Power Saving Mode Setting

Response
+CPSMS: (list of supported <mode>s),(list of supported
<Requested_Periodic-RAU>s),(list of supported
Test Command <Requested_GPRS-READY-timer>s),(list of supported
AT+CPSMS=? <Requested_Periodic-TAU>s),(list of supported
<Requested_Active-Time>s)
OK
Response
+CPSMS: <mode>,[<Requested_Periodic-RAU>],[<Requested_GPRS-
READY-timer>],[<Requested_Periodic-TAU>],[<Requested_Active-Tim
Read Command e>]
AT+CPSMS?
OK
Parameters
See Write Command
Response
Write Command OK
AT+CPSMS=[<mode>[, If failed:
<Requested_Periodic- +CME ERROR: <err>
RAU>[,<Requested_G Parameters
PRS-READY-timer>[,<
Requested_Periodic-T <mode>
AU>[,<Requested_Acti 0 Disable the use of PSM
ve-Time>]]]]] 1 Enable the use of PSM
<Requested_Periodic-RAU> Not supported
<Requested_GPRS-READY-timer> Not supported

<Requested_Periodic-TAU>
String type; one byte in an 8 bit format. Requested extended periodic
TAU value (T3412) to be allocated to the UE in E-UTRAN. The
requested extended periodic TAU value is coded as one byte
(octet 3) of the GPRS Timer 3 information element coded as bit
format (e.g. "01000111" equals 70 hours). For the coding and the
value range, see the GPRS Timer 3 IE in 3GPP TS 24.008 [8]
Table 10.5.163a/3GPP TS 24.008. See also 3GPP TS 23.682 [149]
and 3GPP TS 23.401 [82]. The default value, if available, is
manufacturer specific.
<Requested_Active-Time>
String type; one byte in an 8 bit format. Requested Active Time value
(T3324) to be allocated to the UE. The requested Active Time value
is coded as one byte (octet 3) of the GPRS Timer 2 information
element coded as bit format (e.g. "00100100" equals 4 minutes). For
the coding and the value range, see the GPRS Timer 2 IE in
3GPP TS 24.008 [8] Table 10.5.163/3GPP TS 24.008. See also
3GPP TS 23.682 [149], 3GPP TS 23.060 [47] and
3GPP TS 23.401 [82]. The default value, if available, is manufacturer
specific.
Max Response Time -
Reference Note
5.2.20 AT+CEDRXS Extended-DRX Setting
AT+CEDRXS Extended-DRX Setting

Response
+CEDRXS: (list of supported
Test Command
<n>s),<AcT-type>,<Requested_eDRX_value>
AT+CEDRXS=?
OK
Response
+CEDRXS: <AcT-type>,<Requested_eDRX_value>
Read Command
AT+CEDRXS? OK
Parameters
See Write Command
AT+CEDRXS=<n>,<Ac OK
T-type>,<Requested_e If failed:
DRX_value> +CME ERROR: <err>

Parameters
<n>
0 Disable the use of eDRX
1 Enable the use of eDRX
2 Enable the use of eDRX and auto report
3 Disable the use of eDRX(Reserved)
<AcT-type>
4 CAT-M
5 NB-IoT
<Requested_eDRX_value> Requested eDRX value. 4 bit format.
"0000"-"1111"
Max Response Time -
Note
 The Requested_eDRX_value is the value of cycle length, separately
Reference means
5.12,10.24,20.48,40.96,61.44,81.92,102.40,122.88,143.36,163.84,327
.68,655.36,1310.72,2621.44,5242.88,10485.76.(seconds)
5.2.21 AT+CPSI Inquiring UE System Information
AT+CPSI Inquiring UE System Information

AT+CPSI=? OK
If camping on a gsm cell:
+CPSI: <System Mode>,<Operation Mode>,<MCC>-<MNC>,<LAC>,<C
ell ID>,<Absolute RF Ch Num>,<RxLev>,<Track LO Adjust>,<C1-C
2>
OK
If camping on a CAT-M or NB-IOT cell:
+CPSI: <System Mode>,<Operation Mode>,<MCC>-<MNC>,<TAC>,<S
Read Command
CellID>,<PCellID>,<Frequency Band>,<earfcn>,<dlbw>,<ulbw>,<RSR
AT+CPSI?
Q>,<RSRP>,<RSSI>,<RSSNR>
OK
If no service:
+CPSI: NO SERVICE,Online
OK
If failed:
+CME ERROR: <err>

Parameters
<System Mode> System mode.
"NO SERVICE"
"GSM"
"LTE CAT-M1"
"LTE NB-IOT"
<Operation Mode> UE operation mode.
"Online",
"Offline",
"Factory Test Mode",
"Reset",
"Low Power Mode".
<MCC> Mobile Country Code (first part of the PLMN code)
<MNC> Mobile Network Code (second part of the PLMN code)
<LAC> Location Area Code (hexadecimal digits)
<Cell ID> Service-cell Identify
<Absolute RF Ch Num> AFRCN for service-cell.
<Track LO Adjust> Track LO Adjust
<C1> Coefficient for base station selection
<C2> Coefficient for Cell re-selection
<TAC> Tracing Area Code
<SCellID> Serving Cell ID
<PCellID> Physical Cell ID
<Frequency Band> Frequency Band of active set
<earfcn> E-UTRA absolute radio frequency channel number for se
arching CAT-M or NB-IOT cells
<dlbw> Transmission bandwidth configuration of the serving cell o
n the downlink
<ulbw> Transmission bandwidth configuration of the serving cell
on the uplink
<RSRP> Current reference signal received power.Available for CA
T-M or NB-IOT.
<RSRQ> Current reference signal receive quality as measured by L1.
<RSSI> Current Received signal strength indicator
<RSSNR> Average reference signal signal-to-noise ratio of the servi
ng cell The value of SINR can be calculated according to <RSSNR>,t
he formula is as below:
SINR = 2 * <RSSNR> - 20
The range of SINR is from -20 to 30
Max Response Time -
Reference Note
5.2.22 AT+CGNAPN Get Network APN in CAT-M Or NB-IOT
AT+CGNAPN Get Network APN in CAT-M Or NB-IOT

Response
Test Command +CGNAPN: (list of supported <valid>s),<length>
AT+CGNAPN=?
OK
Response
+CGNAPN: <valid>,<Network_APN>
OK
If failed:
+CME ERROR: <err>
Parameters
<valid>
Execution Command
0 The network did not sent APN parameter to UE.In the
AT+CGNAPN
case,<Network_APN> is NULL.
1 The network sent APN parameter to UE.
<length>
Max the length of <network_APN>.
<Network_APN>
String type.The network sends APN parameter to UE when UE
registers CAT-M or NB-IOT network successfully.In
GSM,<Network_APN> always is NULL.
Max Response Time -
Note
 In CAT-M or NB-IOT,after UE sending attach request message,If core
Reference
network responds attach accept message that includes APN
parameter,<Netwok_APN> is valid.
5.2.23 AT+CSDP Service Domain Preference
AT+CSDP Service Domain Preference

Response
Test Command +CSDP: (list of supported <domain>s)
AT+CSDP=?
OK
Response
Read Command +CSDP: <domain>
AT+CSDP?
OK

Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
Write Command
Parameters
AT+CSDP=<domain>
<domain>
0 CS(Circuit Switched Domain) ONLY
1 PS(Packet Switched Domain) ONLY
2 CS(Circuit Switched Domain) + PS(Packet Switched Domain)
Parameter Saving Mode AUTO_SAVE_REBOOT
Max Response Time -
Reference Note
5.2.24 AT+MCELLLOCK Lock the special CAT-M cell
AT+MCELLLOCK Lock the special CAT-M cell

Response
Test Command +MCELLLOCK: (0,1),(0-65535),(0-503)
AT+MCELLLOCK=?
OK
Response
+MCELLLOCK: <mode>[,<earfcn>,<pci>]
Read Command
AT+MCELLLOCK? OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
AT+MCELLLOCK=<mo <mode> 0 Unlock
de>[,<earfcn>,<pci>] 1 Lock
<earfcn> A number in the range 0-65535 representing the EARFCN
to search
<pci> A number in the range 0-503 representing the Physical Cell ID
to search
Max Response Time -
Reference Note

5.2.25 AT+NCELLLOCK Lock the special NB-IOT cell
AT+NCELLLOCK Lock the special NB-IOT cell

Response
Test Command +NCELLLOCK: (0,1),(0-65535),(0-503)
AT+NCELLLOCK=?
OK
Response
+NCELLLOCK: <mode>[,<earfcn>,<pci>]
Read Command
AT+NCELLLOCK? OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
AT+NCELLLOCK=<mo <mode> 0 Unlock
de>[,<earfcn>,<pci>] 1 Lock
<earfcn> A number in the range 0-65535 representing the EARFCN
to search
<pci> A number in the range 0-503 representing the Physical Cell ID
to search
Max Response Time -
Reference Note
5.2.26 AT+NBSC Configure NB-IOT Scrambling Feature
AT+NBSC Configure NB-IOT Scrambling Feature

Response
Test Command +NBSC: (list of supported <mode>s)
AT+NBSC=?
OK
Response
Read Command
+NBSC: <mode>

AT+NBSC?
OK
Parameters
See Write Command
Response
OK
If failed:
AT+NBSC=<mode> Parameters
<mode>
0 Disable the scrambling feature in NB-IOT network.
1 Enable the scrambling feature in NB-IOT network.
Max Response Time -
Note
Reference  Please configure UE in accordance with the base station,Otherwise UE
can not register NB-IOT network.
5.2.27 AT+CAPNMODE Select the Mode of Application Configure APN
AT+CAPNMODE Select the Mode of Application Configure APN

Response
Test Command +CAPNMODE: (list of supported <mode>s)
AT+CAPNMODE=?
OK
Response
+CAPNMODE: <mode>
Read Command
AT+CAPNMODE? OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
AT+CAPNMODE=<mo <mode> mode of application configure APN.In CAT-M or NB-IOT
de> network,if module has registered to the network successfully,i
t will get an APN from base station delivering.
0 Automatic mode.Applications(AT+CSTT and AT+SAPBR) do not
need to config APN,it will use the APN from base station
delivering.

1 Manual mode,Applications(AT+CSTT,AT+SAPBR) need to config

APN,these APNs can get from operators.
Max Response Time -
Note
Reference
 If module are using in GPRS network,you must config <mode> to 1
5.2.28 AT+CRRCSTATE Query RRC State
AT+CRRCSTATE Query RRC State

Response
Test Command +CRRCSTATE: (list of supported <n>s)
AT+CRRCSTATE=?
OK
Response
+CRRCSTATE: <n>,<state>
Read Command
AT+CRRCSTATE? OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
Parameters
Write Command <n> Integer type
AT+CRRCSTATE=<n> 0 Disable unsolicited result code
1 Enable unsolicited result code "+CRRCSTATE: <state>"
<state> Integer type,indicates RRC connection state
0 Idle
1 Connected
255 Other
Max Response Time -
Note
Reference  The command is only valid that module registering in CAT-M or NB-IOT
network.
5.2.29 AT+CBANDCFG Configure CAT-M Or NB-IOT Band

AT+CBANDCFG Configure CAT-M Or NB-IOT Band

Response
Test Command +CBANDCFG: (CAT-M,NB-IOT),(list of supported <band>s)
AT+CBANDCFG=?
OK
Response
+CBANDCFG: "CAT-M",<band>[,<band>…]
<CR><LF>+CBANDCFG: "NB-IOT",<band>[,<band>…]
Read Command
AT+CBANDCFG?
OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
Write Command
Parameters
AT+CBANDCFG=<mod
<mode> string type; network system mode.
e>,<band>[,<band>…]
"CAT-M" LTE Cat.M1(eMTC)
"NB-IOT" Narrow Band Internet of Things
<band> Integer type;The value of <band> must is in the band list of
getting from AT+CBANDCFG=?
Max Response Time -
Note
Reference  The command can take effect immediately,It does not need to reboot
module.
5.2.30 AT+CNACT APP Network Active
AT+CNACT APP Network Active

Response
+CNACT: <status>,<ip_addr>
Read Command
AT+CNACT? OK
Parameters
See Write Command
Response
Write Command
OK
AT+CNACT=<mode>[,
If failed:
<apn>]
+CME ERROR: <err>

Parameters
<mode>
0 Deactive
1 Active
2 Auto Active
<apn>
(Access Point Name) A string parameter (string should be included in
quotation marks) which is a logical name that is used to select the
GGSN or the external packet data network. If the value is null or
omitted, then the subscription value will be requested.The default
value is NULL.
<status>
0 Deactived
1 Actived
2 In operation
Max Response Time -
Note
"+APP PDP: ACTIVE" will be reported if the app network actived,and "+APP
Reference
PDP: DEACTIVE" will be reported if the app network deactived.
Auto Active means the will active automatically if the activation failed.
5.2.31 AT+CNCFG PDP Configure
AT+CNCFG PDP Configure

AT+CNCFG=? +CNCFG: (list of supported
<ip_type>s),<len_APN>,<len_usename>,<len_password>,(list of
supported <authentication>s)
OK
AT+CNCFG? +CNCFG:
<ip_type>,<APN>,<usename>,<password>,<authentication>
OK
AT+CNCFG=<ip_type>[,<AP OK
N>[,<usename>,<password If failed:
>[,<authentication>]]] +CME ERROR: <err>
Max Response Time -
Reference

Defined Values
<action> 0 Deactive
1 Active
2 Auto Active
<ip_type> Packet Data Protocol type) A Integer type parameter which specifies
the type of packet data protocol.
0 Dual PDN Stack
1 Internet Protocol Version 4
2 Internet Protocol Version 6
<APN> (Access Point Name) A string parameter (string should be included in
quotation marks) which is a logical name that is used to select the
GGSN or the external packet data network. If the value is null or
omitted, then the subscription value will be requested.The default
value is NULL.
<usename> Username for authentication.
<password> Password for authentication.
<authentication> 0 NONE
1 PAP
2 CHAP
3 PAP or CHAP
<len_APN> Integer type. Maximum length of parameter <APN>.
<len_name> Integer type. Maximum length of parameter <usename>.
<len_password> Integer type. Maximum length of parameter <password>.
5.2.32 AT+CEDUMP Set Whether the Module Reset When The Module is Crashed
AT+CEDUMP Set Whether the Module Reset When The Module is Crashed
Response
+CEDUMP: <mode>
Read Command OK
AT+CEDUMP? If error is related to ME functionality:
+CME ERROR: <err>
Parameters
See Write Command
Response
Write Command OK
AT+CEDUMP=<mode> If error is related to ME functionality:
+CME ERROR: <err>

Parameters
<fun>
0 The module will reset when the module is crashed(Default)
1 The module will go into download mode when the module is
crashed
Max Response Time
Reference
Note
5.2.33 AT+CNBS Configure Band Scan Optimization For NB-IOT
AT+CNBS Configure Band Scan Optimization for NB-IOT

Response
Test Command +CNBS: (1-5)
AT+CNBS=?
OK
Response
+CNBS: <n>
Read Command
AT+CNBS? OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
Parameters
Band scan is performed in the following levels based on the SNR:
level 0 Used for good SNR levels(0 db and above); detects strong cells
first and takes the shortest time to acquire cells.UE scans each
raster in 30 ms.
Write Command
level 1 Used for medium SNR levels(-9 dB and above),UE scans each
AT+CNBS=<n>
raster for 200 ms
level 2 Used for poor SNR levels(-12.6 dB and above),UE scans each
raster for 500 ms.
<n>
1 UE tries SNR level 0 band scan
2 UE tries SNR level 0 and level 1 band scan
3 UE tries SNR level 0, level 1, and level 2 band scan
4 Reserved
5 UE tries SNR level 2 band scan only


Max Response Time -
Note
 The command controls the band scan for different SNR levels. This
Reference
optimization is applicable only for NB-IOT and it reduces the band scan
time and power consumption.
5.2.34 AT+CNDS Configure Service Domain Preference For NB-IOT
AT+CNDS Configure Service Domain Preference For NB-IOT

Response
+CNDS: (list of supported <domain>s)
Test Command
AT+CNDS=? OK
Parameters
See Write Command
Response
+CNDS: <domain>
Read Command
AT+CNDS? OK
Parameters
See Write Command
Response
OK
If failed:
AT+CNDS=<domain> Parameters
<domain>
1 PS(Packet Switched Domain) ONLY
2 CS(Circuit Switched Domain) + PS(Packet Switched Domain)
Max Response Time -
Note
 The command of AT+CSDP is used to config service domain
Reference
preference for GSM and CAT-M.If you want to config service domain
preference for NB-IOT,you can use AT+CNDS.
5.2.35 AT+CENG Switch On or Off Engineering Mode

AT+CENG Switch On or Off Engineering Mode

Response
TA returns the list of supported modes.
+CENG: (list of supported <mode>s),(list of supported <Ncell>s)
Test Command
AT+CENG=?
OK
Parameters
See Write Command
Response
Engineering Mode is designed to allow a field engineer to view and test the
network information received by a handset, when the handset is either in
idle mode or dedicated mode (that is: with a call active). In each mode, the
engineer is able to view network interaction for the "serving cell" (the cell the
handset is currently registered with) or for the neighboring cells.
TA returns the current engineering mode. The network information including

serving cell and neighboring cells are returned. <cell> carry with them
corresponding network interaction.
If camping on a gsm cell:

+CENG: <mode>,<Ncell>,<cell num>,<System Mode>
[+CENG: <cell>,"<bcch>,<rxl>,<bsic>,<cellid>,<mcc>,<mnc>,<lac>"
Read Command <CR><LF>+CENG:
AT+CENG? <cell>,"<bcch>,<rxl>,<bsic>,<cellid>,<mcc>,<mnc>,<lac>"…]
OK
If camping on a CAT-M or NB-IOT cell:

+CENG: <mode>,<Ncell>,<cell num>,<System Mode>
[+CENG:
<cell>,"<earfcn>,<pci>,<rsrp>,<rssi>,<rsrq>,<sinr>,<tac>,<cellid>,<mc
c>,<mnc>,<tx power>"
<CR><LF>+CENG:
<cell>,"<earfcn>,<pci>,<rsrp>,<rssi>,<rsrq>,<sinr>"…]
OK
Parameters
See Write Command
Switch on or off engineering mode.
Write Command OK
AT+CENG=<mode>[,< If failed:
Ncell>] +CME ERROR: <err>
Parameters

<mode> 0 Switch off engineering mode

1 Switch on engineering mode
<Ncell> 1 Display neighbor cell ID
<cell num> The number of cell,it includes serving cell and neighbor cells.
<System Mode> System mode.
"NO SERVICE"
"GSM"
"LTE CAT-M1"
"LTE NB-IOT"
<cell> 0 The serving cell
1-6 The index of the neighboring cell
<bcch> ARFCN(Absolute radio frequency channel number) of BCCH
carrier, in decimal format
<rxl> Receive level, in decimal format
<mcc> Mobile country code, in decimal format
<mnc> Mobile network code, in decimal format
<bsic> Base station identity code, in decimal format
<cellid> Cell id, in hexadecimal format
<lac> Location area code, in hexadecimal format
<earfcn> E-UTRA absolute radio frequency channel number for sea
rching CAT-M or NB-IOT cells
<pci> Physical Cell ID
<rsrp> Current reference signal received power.Available for
CAT-M or NB-IOT.
<rssi> Current Received signal strength indicator
<rsrq> Current reference signal receive quality as measured by
L1.
<sinr> Signal to Interference plus Noise Ratio,The range is from
-20 to 30.
<tac> Tracing Area Code, in decimal format
<tx power> Tx power value in 1/10 dBm. <tx power> is only meaningful
when the device is in traffic. When there is no traffic, the value
is invalid.The value of <tx power> is 255.
Max Response Time -
Note
Reference
5.2.36 AT+CNACTCFG Configure IP Protocol Type
AT+CNACTCFG Configure IP Protocol Type

Response
Test Command
+CNACTCFG: ("IPV4","IPV6","IPV4V6")

AT+CNACTCFG=?
OK
Parameters
See Write Command
Response
+CNACTCFG: <IPType>
Read Command
AT+CNACTCFG? OK
Parameters
See Write Command
Response
OK
If failed:
AT+CNACTCFG=<IPTy Parameters
pe> <IPType>
"IPV4" IPv4 protocol
"IPV6" IPv6 protocol
"IPV4V6" IPv4 and IPv6 protocol
Max Response Time -
Note
Reference
5.2.37 AT+CTLIIC Control the Switch of IIC
AT+CTLIIC Control the Switch of IIC

Response
+CTLIIC: (0,1)
Test Command
AT+CTLIIC=? OK
Parameters
See Write Command
Response
+CTLIIC: <mode>
Read Command
AT+CTLIIC? OK
Parameters
See Write Command
Response
Write Command
OK
AT+CTLIIC=<mode>
or

ERROR
Parameters
<mode>
0 Switch off the IIC
1 Switch on the IIC
Max Response Time -
Reference Note
5.2.38 AT+CWIIC Write Values to Register of IIC Device
AT+CWIIC Write Values to Register of IIC Device

AT+CWIIC=? OK
Response
OK
or
ERROR
Write Command
Parameters
AT+CWIIC=<addr>,<re
<addr> Device address. Input format must be hex, such as 0xFF.
g>,<data>,<len>
<reg> Register address. Input format must be hex, such as 0xFF.
<len> Read length. Range: 1-4; unit: byte.
<data> Data written. Input format must be hex, such as
0xFF–0xFFFFFFFF
Max Response Time -
Reference Note
5.2.39 AT+CRIIC Read Values from Register of IIC Device
AT+CRIIC Read Values from Register of IIC Device

AT+CRIIC=? OK
Response
Write Command
+CRIIC: <data>
AT+CRIIC=<addr>,<re
g>,<len>
OK

or
ERROR
Parameters
<addr> Device address. Input format must be hex, such as 0xFF.
<reg> Register address. Input format must be hex, such as 0xFF.
<len> Read length. Range:1-4; unit:byte.
<data> Data read. Input format must be hex, such as 0xFF.
Max Response Time -
Reference Note
5.2.40 AT+CMCFG Manage Mobile Operator Configuration
AT+CMCFG Manage Mobile Operator Configuration

Response
+CMCFG: (list of supported <mode>s),<length>
Test Command
AT+CMCFG=?
OK
Parameters
See Write Command
Response
+CMCFG: <mode>,<config_num>
[+CMCFG: <index>,<config_name>,<config_version>,<state>…]
Read Command
AT+CMCFG?
OK
Parameters
See Write Command
when <mode>=0,1,2 or 3 and command successful:
OK
when <mode>=4 and command successful:
+CMCFG: 4,<flag>,<config_name>
Write Command
OK
AT+CMCFG=<mode>[, If failed:
<config_name>]
+CME ERROR: <err>
Parameters
<mode> 0 Manually select mobile operator configuration
1 Automatically select mobile operator configuration
according to ICCID information in SIM card
2 Activate specified mobile operator configuration,

<config_name> must be provided.

3 Deactivation specified mobile operator configuration,
<config_name> must be provided.
<length> Interger type,the maximum length of <config_name>
<config_num> Integer type,the number of mobile network configuration
<index> Integer type,the index of mobile network configuration
<config_name> String type,the name of mobile network configuration.
"Default" Default network configuration
"ATT" ATT network configuration, not support
VOLTE
"Verizon" Verizon network configuration,not support
VOLTE
<config _version> Hex type,the version of mobile network configuration
<state> Integer type,the state of mobile network configuration
0 Inactive
1 Active
<flag> Integer type,it indicates whether module has activated a
network configuration.If network configuration has been
activated,The third parameter <config_name> is the
name of activating network configuration.
0 Network configuration has been activated
1 Not any network configuration is activated
Max Response Time -
Note
 After setting AT+CMCFG=1,module can select mobile operator
configuration according to ICCID information in SIM card
automatically,If network configuration has changed,module will reboot
and make configuration effective
 If module needs to select mobile operator configuration manually, you
Reference should do as the following steps.
1) Setting manual mode
AT+CMCFG=0
2) Activate specified configuration
AT+CMCFG=2,<config_name>
3) Reboot the module
AT+CFUN=1,1
5.2.41 AT+CSIMLOCK SIM Lock
AT+CSIMLOCK SIM Lock

Response
Test Command

AT+CSIMLOCK=? +CSIMLOCK: (list of supported <facility>s),(list of supported <mode>s>,

<pwlength>,<pclength>
OK
Parameters
See Write Command
Response
Read Command OK
AT+CSIMLOCK? Parameters
See Write Command
If <mode>≠2 and Command is successful
OK
If <mode>=2 and Command is successful
+CSIMLOCK: <status>,<pers_code_list>
OK

+CME ERROR: <err>If failed:
Parameters
<facility> String type,Phone security locks set by factory or customer.
which can be:
"PN" Network Personalisation
<mode> 0 unlock
1 lock
2 query status
Write Command
<pwlength> Integer type,maximum length of <password>,the maxinum
AT+CSIMLOCK=<facili length is 16.
ty>,<mode>[,<passwor
d>[,<pers_code_list>]] <pclength> Integer type,maximum length of <pers_code_list>,the
maxinum length is 160.
<password> String type,password is used to lock or unlock a <facility>.
<pers_code_list> String type,code list for device personalization.The
contents depend on the selected <facility>.
If <facility> is "PN":
<pers_code_list> is in the format:
"MCC1-MNC1[;MCC2-MNC2[…]] "
It contains a list of pairs of MCC and MNC.MCC and MNC
is separated by a ‘-‘,every pair of MCC and MNC is
separated by semicolon.
For example:
"460-00;460-01"
<status> Integer type,the status of lock
0 lock is inactive
1 lock is active
Max Response Time -

Note
 Lock device
Customer can send AT command to lock the deivce that can only use
some specific SIM card.
AT+CSIMLOCK="PN",1, "0123456789ABCDEF","460-00;460-01"
 Unlock device
Reference If the device is locking, Customer can send AT command to unlock the
device.
AT+CSIMLOCK="PN",0, "ABCDEFGH12345678"
 Query device status
customer may send AT command as follow to query status of the
device
AT+CSIMLOCK="PN",2
5.2.42 AT+CRATSRCH Configure Parameter for Better RAT Search
AT+CRATSRCH Configure Parameter for Better RAT Search

Response
+CRATSRCH: (list of supported <rat_timer>s),(list of supported
Test Command <srch_align>),
AT+CRATSRCH=?
OK
Parameters
See Write Command
Response
+CRATSRCH: <rat_timer>,<srch_align>
Read Command
AT+CRATSRCH? OK
Parameters
See Write Command
OK

+CME ERROR: <err>If failed:
Parameters
Write Command
<rat_timer> Integer type, <rat_timer> is timeout for better RAT(radio
AT+CRATSRCH=<rat_t
access technology) search.The default value is 60, expressed
imer>,<srch_align>
in minutes.For SIM7000 series modules,the priority of RAT is
as follows:
CAT-M > NB-IOT > GSM
If UE has registered successfully GSM network,it will try to
search CAT-M and NB-IOT network after the timer expiring.

<srch_align> Integer type, <srch_align> specifies an interval before

eDRX page when a scan should begin.The default value is
20,expressed in minutes.
Max Response Time -
Note
Reference
5.2.43 AT+SPWM Generate the Pulse-Width-Modulation
AT+SPWM Generate the Pulse-Width-Modulation

Response
+SPWM: (list of supported<div>s),(list of supported<level>s)
Test Command
AT+SPWM=? OK
Parameters
See Write Command
Response
OK
Write Command
+CME ERROR: <err>
AT+SPWM=<div>,<lev
el> Parameters
<div> The range of <div> is 0-31, theoutput frequency equals to
(192KHz)/(period+1).
<level> 0-100: tone level, which can be converted to duty ratio.
Note
 The equation of final frequency and <period> is this:
frequency=192KHz/(period+1), when div is 0 or 1, the period is 1.
Reference
When div is 2, the period is 1.5. When div is 3, the period is 2. When
div is 4, the period is 2.5……..
 The equation of <level> and duty factor is: duty factor=(level+1).
5.2.44 AT+CASRIP Show Remote IP address and Port When Received Data
AT+CASRIP Show Remote IP Address and Port When Received Data

Response
Read Command +CASRIP: <mode>
AT+CASRIP?
OK

Parameters
See Write Command
Response
OK
or
Write Command ERROR
AT+CASRIP=<mode> Parameters
<mode> A numeric parameter which shows remote IP address and port.
0 Do not show the prompt
1 Show the prompt, the format is as follows:
Max Response Time -
Reference
5.2.45 AT+CEDRX Configure EDRX parameters
AT+CEDRX Configure EDRX parameters

Response
Test Command +CEDRX: (0-3),(0-1),(0-15),(0-15)
AT+CEDRX=?
OK
Response
+CEDRX: <mode>,<enabled>,<ptw>,<cycle_length>
…
Read Command
AT+CEDRX?
OK
Parameters
See Write Command
Response
OK
If failed:
+CME ERROR: <err>
Parameters
Write Command
<mode> 0 GSM
AT+CEDRX=<mode>,< 1 LTE
enabled>,<ptw>,<cycle
_length> 2 NB-IoT
3 CAT-M
<enabled> 0 Disable
1 Enable
<ptw> Page time window
0-15

<cycle_length> 0-15
Note
 The value 0-15 of ptw separately means 1280,2560,3840,5120,6400,
7680,8960,10240,11520,12800,14080,15360,16640,17920,19200,
20480.(ms)
Reference
 The value 0-15 of cycle_length separately means 5.12,10.24,20.48,
40.96,61.44,81.92,102.40,122.88,143.36,163.84,327.68,655.36,1310.
72,2621.44,5242.88,10485.76.(seconds)
 There has no effect if <mode> is 0 or 1.
 The edrx parameters can take effect after module restarting
5.2.46 AT+CPSMRDP Read PSM Dynamic Parameters
AT+CPSMRDP Read PSM Dynamic Parameters

Response
Test Command +CPSMRDP: (0,1)
AT+CPSMRDP=?
OK
Response
+CPSMRDP:
<mode>,<Requested_active_Time>,<Requested_Periodic_TAU>,<Net
work_Active_Time>,<Network_T3412_EXT_value>,<Network_T3412_v
alue>
OK
Parameters
<mode> Integer type.Disable or enable the use of PSM in the UE.
0 Disable the use of PSM
1 Enable the use of PSM
<Requested_active_Time> Integer type.Requested active time
Execution Command
value(T3324) to be configed by UE in E-UTRAN network.Unit:
AT+CPSMRDP
second.
<Requested_Periodic_TAU> Integer type.Requested extended periodic
TAU value (T3412_EXT) to be configed by UE in E-UTRAN
network.Unit: second.
<Network_Active_Time> Integer type.Network assign active timer
value(T3324) in E-UTRAN network.If <network_Active_Time> is
0,it show s that network does not support PSM
feature.Unit:second.
<Network_T3412_EXT_value> Integer type.Network assign extended
periodic TAU value(T3412_EXT) in E-UTRAN
network.Unit:second.
<Network_T3412_value> Integer type.Network assign periodic TAU

value(T3412) in E-UTRAN network.Unit:second.

Max Response Time -
Note
Reference  If <Network_T3412_EXT_value> is greater than 0,UE will start TAU
procedure according to <Network_T3412_EXT_value>.
5.2.47 AT+CPSMCFG Configure PSM version and Minimum Threshold Value
AT+CPSMCFG Configure PSM version and Minimum Threshold Value

Response
+CPSMCFG: (list of supported <threshold>s),(list of supported
Test Command <psm_version>s)
AT+CPSMCFG=?
OK
Parameters
See Write Command
Response
+CPSMCFG: <threshold>,<psm_version>
Read Command
AT+CPSMCFG? OK
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Parameters
Write Command <threshold> Integer type.Minimum threshold value(in second) to enter
AT+CPSMCFG=<thres PSM.The range from 60 to 86400.The default value is 60 seconds.
hold>[,<psm_version> <psm_version> Integer type.Bitmask to indicate PSM modes(1-Enable/0-
] Disable).Each bit is configured independentyly.The range from 0 to
15.The default value is 15.
BIT 0 PSM without network coordination
BIT 1 Rel 12 PSM without context retention
BIT 2 Rel 12 PSM with context retention
BIT 3 PSM in between eDRX cycles
Max Response Time -
Note
Reference

5.2.48 AT+CPSMCFGEXT Configure Modem Optimization of PSM
AT+CPSMCFGEXT Configure Modem Optimization of PSM

Response
+CPSMCFGEXT: (list of supported <psm_opt_mask>s),(list of supported
<max_oos_full_scans>s),(list of supported
<psm_duration_due_to_oos>s),(list of supported
Test Command
<psm_randomization_window>s),(list of supported <max_oos_time>s),
AT+CPSMCFGEXT=?
(list of supported <early_wake_up_time>s)
OK
Parameters
See Write Command
Response
+CPSMCFGEXT:
<psm_opt_mask>,<max_oos_full_scans>,<psm_duration_due_to_oos
>,<psm_randomization_window>,<max_oos_time>,<early_wake_up_ti
Read Command
me>
AT+CPSMCFGEXT?
OK
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Parameters
<psm_opt_mask> Integer type.The range is from 0 to 15.The default
Write Command
value
AT+CPSMCFGEXT=<p is 10.
sm_opt_mask>[,<max
_oos_full_scans>[,<ps 1st bit of <psm_opt_mask> is used to enable/disable PSM ENTER
m_duration_due_to_o request without sending PSM_READY_REQ to NAS.This is a quick PSM
os>[,<psm_randomizat operation.
ion_window>[,<max_o
2nd bit of <psm_opt_mask> is used to enable/disable Out of
os_time>[,<early_wake
_up_time>]]]]] Service(OoS) status indication from Modem to AP.
3rd bit of <psm_opt_mask> is used to enable/disable limited
service status indication from Modem to AP.
4th bit of <psm_opt_mask> is used to enable/disable deep-sleep
mode.If PSM duration is less than the threshold value.If enabled,it puts the
device in deep-sleep mode,if PSM is not entered due to not meeting
threshold value.

<max_oos_full_scans> Integer type.Maximum number of full scans to

wait before modem declares SYS_PSM_STATUS_OOS to
clients.The range is from 1 to 100.The default value is 2.
<psm_duration_due_to_oos> Integer type.PSM duration used by PSM
daemon upon OOS/Limited Service indication,due to service
outage.The range is from 120 to 4294967295.The default value is
120.The unit is second.
<psm_randomization_window> Integer type.PSM wakeup randomization
window to avoid network congestion due to all the PSM devices
waking up at the same time.The Range is from 1 to 1000.The
default value is 5.The unit is 5.
<max_oos_time> Integer type.Maximum time in seconds to wait before
declaring SYS_PSM_STATUS_OOS to clients.The range is from 1
to 65535.The unit is second.
<early_wakeup_time> Integer type.Device wakes up early to account
for boot-up and acquisition delay.While programming PMIC,PSM
daemon reduces PSM duration by this duration.The range is from
1 to 1000.The default value is 3.The unit is second.
Max Response Time -
Note
Reference
5.2.49 AT+CPSMSTATUS Enable Deep Sleep Wakeup Indication
AT+CPSMSTATUS Enable Deep Sleep Wakeup Indication

Response
+CPSMSTATUS: (0-1)
Test Command
AT+CPSMSTATUS=? OK
Parameters
See Write Command
Response
+CPSMSTATUS: <enable>
Read Command
AT+CPSMSTATUS? OK
Parameters
See Write Command
Response
Write Command
OK
AT+CPSMSTATUS=<e
nable>
+CME ERROR: <err>

Parameters
<enable>
0 Disable indication when modem wakes up from deep sleep
1 Enable indication when modem wakes up from deep sleep
Max Response Time -
Note
Reference
5.2.50 AT+CEDRXRDP eDRX Read Dynamic Parameters
AT+CEDRXRDP eDRX Read Dynamic Parameters

Response
Test Command OK
AT+CEDRXRDP=? Parameters
See Write Command
Response
+CEDRXRDP:
<AcT-type>[,<Requested_eDRX_value>[,<NW-provided_eDRX_value>[
,<Paging_time_window>]]]
OK
+CME ERROR: <err>
Parameters
<AcT-type> Integer type,indicates the type of access technology.This
AT-command is used to specify the relationship between the type
of access technology and the requested eDRX value
Execution Command 0 Access technology is not using Edrx
AT+CEDRXRDP 4 E-UTRAN(CAT-M1)
5 E-UTRAN(NB-S1 mode)
<Requested_Edrx_value> String type;half a byte in a 4-bit format.The
Edrx value refers to bit 4 to 1 of octet 3 of the Extended DRX
parameters information element (see sub-clause 10.5.5.32 of
3GPP TS 24.008).For the coding and the value range,see
Extended DRX parameters information element in 3GPP TS
24.008 Table 10.5.5.32/3GPP TS 24.008.
<NW-provided_eDRX_value> String type;half a byte in a 4-bit format.The
edrx value Refers to bit 4 to 1 of octet 3 of the Extended DRX
parameters information element (see sub-clause 10.5.5.32 of
3GPP TS 24.008).For the coding and the value range,see the

24.008 Table 10.5.5.32/3GPP TS 24.008.

<Paging_time_window> String type;half a byte in a 4-bit format.The
paging time window refers to bit 8 to 5 octet 3of the Extended
DRX. Parameters information element (see sub-clause 10.5.5.32
of 3GPP TS 24.008).For the coding and the value range,see the
24.008 Table 10.5.5.32/3GPP TS 24.008.
Max Response Time -
Note
Reference
5.2.51 AT+CRAI Configure Release Assistance Indication in NB-IOT network
AT+CRAI Configure Release Assistance Indication in NB-IOT network

Response
+CRAI: (list of supported <rai>s),(list of supported <valid>s),
Test Command
AT+CRAI=? OK
Parameters
See Write Command
Response
+CRAI: <rai>,<valid_time>
Read Command
AT+CRAI? OK
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Parameters
<rai> Integer type. Indicates the value of the release assistance
Write Command indication,refer 3GPP TS 24.301[83] subclause 9.9.4.25.V
AT+CRAI=<rai>[,<valid 0 No information available
_time>] 1 The MT expects that exchange of data will be completed with the
transmission of the ESM DATA TRANSPORT message.
2 The MT expects that exchange of data will be completed with the
receipt of an ESM DATA TRANSPORT message.
<valid_time> Integer type.<valid_time> is valid time of release assistance
indication.
0 The valid time is 1

1 unlimited time
Max Response Time -
Note
Reference  Before UE sends the last packet of data, AT+CRAI should be executed
firstly.

6 AT Commands for GPRS Support
6.1 Overview
Command Description
AT+CGATT Attach or detach from GPRS service
AT+CGDCONT Define PDP context
AT+CGACT PDP context activate or deactivate
AT+CGPADDR Show PDP address
AT+CGREG Network registration status
AT+CGSMS Select service for MO SMS messages
AT+CEREG EPS Network Registration Status
6.2 Detailed Descriptions of AT Commands for GPRS Support
6.2.1 AT+CGATT Attach or Detach from GPRS Service
AT+CGATT Attach or Detach from GPRS Service

Response
+CGATT: (list of supported <state>s)
Test Command
AT+CGATT=? OK
Parameters
See Write Command
Response
+CGATT: <state>
Read Command
AT+CGATT? OK
Parameters
See Write Command
Response
Write Command
OK
AT+CGATT=<state>

+CME ERROR: <err>

Parameters
<state> Indicates the state of GPRS attachment
0 Detached
1 Attached
Other values are reserved and will result in an ERROR response to the
Write Command.
Max Response Time 75 seconds
Reference Note
6.2.2 AT+CGDCONT Define PDP Context
AT+CGDCONT Define PDP Context

Response
+CGDCONT: (range of supported <cid>s),<PDP_type>,,,(list of
supported <d_comp>s),(list of supported <h_comp>s)(list of
Test Command <ipv4_ctrl>s),(list of <emergency_flag>s)
AT+CGDCONT=?
OK
Parameters
See Write Command
Response
+CGDCONT:
[<cid>,<PDP_type>,<APN>,<PDP_addr>,<d_comp>,<h_comp>,<ipv4_c
trl>,<emergency_flag>[<CR><LF>+CGDCONT:
Read Command <cid>,<PDP_type>,<APN>,<PDP_addr>,<d_comp>,<h_comp>,<ipv4_ct
AT+CGDCONT? rl>,<emergency_flag>[...]]]
OK
Parameters
See Write Command
Response
OK
Write Command
or
AT+CGDCONT=<cid>[,
ERROR
<PDP_type>[,<APN>[,<
PDP_addr>[,<d_comp Parameters
>[,<h_comp>][,<ipv4_c <cid> (PDP Context Identifier) a numeric parameter which
trl>[,<emergency_flag
specifies a particular PDP context definition. The parameter
>]]]]]]
is local to the TE-MT interface and is used in other PDP
context-related commands. The range of permitted values

(minimum value=1) is returned by the test form of the

command.
1…24
<PDP_type> (Packet Data Protocol type) A string parameter which
specifies the type of packet data protocol.
IP Internet Protocol (IETF STD 5)
PPP Point to Point Protocol
IPV6 Internet Protocol Version 6
IPV4V6 Dual PDN Stack
<APN> (Access Point Name) A string parameter (string should be
included in quotation marks) which is a logical name that is
used to select the GGSN or the external packet data
network. If the value is null or omitted, then the subscription
value will be requested.The default value is NULL.
<PDP_addr> A string parameter that identifies the MT in the address
space applicable to the PDP.
Format: "<n>.<n>.<n>.<n>" where <n>=0..255
If the value is null or equals 0.0.0.0 a dynamic address will
be requested. The allocated address may be read using the
+CGPADDR command.
<d_comp> A numeric parameter that controls PDP data compression
0 Off (default if value is omitted)
1 On
2 V.42bis
<h_comp> A numeric parameter that controls PDP head compression
1 On
2 RFC1144
3 RFC2507
4 RFC3095
<ipv4_ctrl> Parameter that controls how the MT/TA requests to get the
IPv4 address information:
0 Address Allocation through NAS Signaling
1 on
<emergency_flag> Emergency_flag:
1 On
Max Response Time -
Reference Note
<cid> values 17 to 24 are supported from MPSS JO 1.0+ onwards.

6.2.3 AT+CGACT PDP Context Activate or Deactivate
AT+CGACT PDP Context Activate or Deactivate

Response
+CGACT: (list of supported <state>s)
Test Command
AT+CGACT=? OK
Parameters
See Write Command
Response
+CGACT: <cid>,<state>[<CR><LF>+CGACT: <cid>,<state>…]
Read Command
AT+CGACT? OK
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Parameters
<state> Indicates the state of PDP context activation
0 Deactivated
Write Command
1 Activated
AT+CGACT=<state>[,<
Other values are reserved and will result in an ERROR response
cid>[,<cid>[,…]]]
to the Write Command.
<cid> A numeric parameter which specifies a particular PDP context
definition (see +CGDCONT Command). If the <cid> is omitted, it
only affects the first cid.
<cid> values 17 to 24 are supported from MPSS JO 1.0+
onwards.
1…24
Note
Reference
 This command is used to test PDPs with network simulators.
Successful activation of PDP on real network is not guaranteed.
6.2.4 AT+CGPADDR Show PDP Address
AT+CGPADDR Show PDP Address

Response
Test Command
+CGPADDR: (list of defined <cid>s)

AT+CGPADDR=?
OK
Parameters
See Write Command
Response
+CGPADDR: <cid>,<PDP_addr>
[<CR><LF>+CGPADDR: <cid>,<PDP_addr>[…]]
OK
If SIM card supports IPV4V6 type and the PDP_type of the command
"AT+CGDCONT" defined is ipv4v6 :
[+CGPADDR: <cid>,<PDP_addr_IPV4>,<PDP_addr_IPV6>]
+CGPADDR: <cid>,<PDP_addr_IPV4>,<PDP_addr_IPV6>[...]]]
OK
or
Write Command ERROR
AT+CGPADDR=<cid>[, Parameters
<cid>[,…]] <cid> A numeric parameter which specifies a particular PDP context
definition (see +CGDCONT Command)
1…24
<PDP_addr> String type, IP address
Format: <n>.<n>.<n>.<n> where <n>=0..255
<PDP_addr_IPV4>
A string parameter that identifies the MT in the address space
applicable to the PDP.
<PDP_addr_IPV6>
A string parameter that identifies the MT in the address space
applicable to the PDP when the sim_card supports ipv6.
The pdp type must be set to "ipv6" or "ipv4v6" by the
AT+CGDCONT command.
Response
[+CGPADDR: <cid>,<PDP_addr>]
+CGPADDR: <cid>,<PDP_addr>[...]]]
OK
Execution Command
+CME ERROR: <err>
AT+CGPADDR
If SIM card supports IPV4V6 type and the PDP_type of the command
"AT+CGDCONT" defined is ipv4v6 :
[+CGPADDR: <cid>,<PDP_addr_IPV4>,<PDP_addr_IPV6>]
+CGPADDR: <cid>,<PDP_addr_IPV4>,<PDP_addr_IPV6>[...]]]

OK
Parameters
See Write Command
Max Response Time -
Note
Reference  <cid> values 17 to 24 are supported from MPSS JO 1.0+ onwards.
 Write command returns address provided by the network if a
connection has been established.
6.2.5 AT+CGREG Network Registration Status
AT+CGREG Network Registration Status

Response
+CGREG: (list of supported <n>s)
Test Command
AT+CGREG=? OK
Parameters
See Write Command
Response
+CGREG:
<n>,<stat>[,<lac>,<ci>,<netact>[,[<Active-Time>],[<Periodic-RAU>],[<
GPRS-READY-timer>]]]
Read Command
AT+CGREG? OK
+CME ERROR: <err>
Parameters
See Write Command
Response
OK
ERROR
Parameters
1 Enable network registration unsolicited result code +CGREG:
Write Command
<stat>
AT+CGREG[=<n>]
2 Enable network registration and location information
unsolicited result code +CGREG: <stat>[,<lac>,<ci>,<netact>]
4 Enable display gprs time and periodic RAU
<stat>
0 Not registered, MT is not currently searching an
operator to register to.The GPRS service is disabled, the UE is

allowed to attach for GPRS if requested by the user.

1 Registered, home network.
2 Not registered, but MT is currently trying to attach or
searching an operator to register to. The GPRS service is
enabled, but an allowable PLMN is currently not available. The
UE will start a GPRS attach as soon as an allowable PLMN is
available.
3 Registration denied, The GPRS service is disabled, the UE
is not allowed to attach for GPRS if it is requested by the user.
4 Unknown
<lac> String type (string should be included in quotation marks); two
byte location area code in hexadecimal format (e.g. "00C3"
equals 195 in decimal)
bytes cell ID in hexadecimal format
1 GSM compact
3 GSM EGPRS
<Active-Time>
String type; one byte in an 8 bit format. Requested Active Time
value (T3324) to be allocated to the UE. The requested Active
Time value is coded as one byte (octet 3) of the GPRS Timer 2
information element coded as bit format (e.g. "00100100" equals
4 minutes).
<Periodic-RAU>
String type; one byte in an 8 bit format. Requested extended
periodic TAU value (T3412) to be allocated to the UE in
E-UTRAN. The requested extended periodic TAU value is coded
as one byte (octet 3) of the GPRS Timer 3 information element
coded as bit format (e.g. "01000111" equals 70 hours).
<GPRS-READY-timer>
String type; one byte in an 8 bit format. Requested GPRS READY
timer value (T3314) to be allocated to the UE in GERAN/UTRAN.
The requested GPRS READY timer value is coded as one byte
(octet 2) of the GPRS Timer information element coded as bit
format (e.g. "01000011" equals 3 decihours or 18 minutes).
Max Response Time -
Reference Note

6.2.6 AT+CGSMS Select Service for MO SMS Messages
AT+CGSMS Select Service for MO SMS Messages

Response
+CGSMS: (list of currently available <service>s)
Test Command
AT+CGSMS=? OK
Parameters
See Write Command
Response
+CGSMS: <service>
Read Command
AT+CGSMS? OK
Parameters
See Write Command
Response
OK
+CME ERROR: <err>
Parameters
<service> A numeric parameter which indicates the service or service
preference to be used
Write Command
0 Packet Domain(value is not really supported and is
AT+CGSMS=<service>
internally mapped to 2)
1 Circuit switched(value is not really supported and is
internally mapped to 3)
2 Packet Domain preferred (use circuit switched if
GPRS not available)
3 Circuit switched preferred (use Packet Domain if circuit
switched not available)
Max Response Time -
Reference
Note
6.2.7 AT+CEREG EPS Network Registration Status
AT+CEREG EPS Network Registration Status

Response
Test Command
+CEREG: (list of supported <n>s)
AT+CEREG=?

OK
Parameters
See Write Command
Response
when <n>=0, 1, 2 and command successful:
+CEREG: <n>,<stat>[,[<tac>],[<rac>],[<ci>],[<AcT>]]
OK
when <n>=4 and command successful:
Read Command
+CEREG: <n>,<stat>[,[<tac>],[<rac>],[<ci>],[<AcT>][,,[,[<Active-Time>]
AT+CEREG? ,[<Periodic-TAU>]]]]
OK
If error is related to wrong AT syntax or operation not allowed:
+CME ERROR: <err>
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
1 Enable network registration unsolicited result code +CEREG:
<stat>
2 Enable network registration and location information
unsolicited result code
+CEREG: <stat>[,[<tac>],[<rac>],[<ci>],[<AcT>]]
4 For a UE that wants to apply PSM, enable network
registration and location information unsolicited result code
Write Command
+CEREG: <stat>[,[<tac>],[<rac>],[<ci>],[<AcT>][,,[,[<Active-
AT+CEREG[=<n>]
Time>],[<Periodic-RAU>]]]]
<stat>
0 Not registered, MT is not currently searching an operator to
register to.The GPRS service is disabled, the UE is allowed to
attach for GPRS if requested by the user.
1 Registered, home network.
2 Not registered, but MT is currently trying to attach or
searching an operator to register to. The GPRS service is
enabled, but an allowable PLMN is currently not available. The
UE will start a GPRS attach as soon as an allowable PLMN is
available.
3 Registration denied, The GPRS service is disabled, the UE
is not allowed to attach for GPRS if it is requested by the user.

4 Unknown
<tac> String type (string should be included in quotation marks); two
byte location area code in hexadecimal format (e.g. "00C3"
equals 195 in decimal)
bytes cell ID in hexadecimal format
<AcT> 0 User-specified GSM access technology
<Active-Time>
String type; one byte in an 8 bit format. Requested Active Time
value (T3324) to be allocated to the UE. The requested Active
Time value is coded as one byte (octet 3) of the GPRS Timer 2
information element coded as bit format (e.g. "00100100" equals
4 minutes).
<Periodic-RAU>
String type; one byte in an 8 bit format. Requested extended
periodic TAU value (T3412) to be allocated to the UE in
E-UTRAN. The requested extended periodic TAU value is coded
as one byte (octet 3) of the GPRS Timer 3 information element
coded as bit format (e.g. "01000111" equals 70 hours).
Max Response Time -
Reference Note

7 AT Commands for IP Application
7.1 Overview
Command Description
AT+SAPBR Bearer settings for applications based on IP
7.2.1 AT+SAPBR Bearer Settings for Applications Based on IP
AT+SAPBR Bearer Settings for Applications Based on IP

Response
+SAPBR: (0-4),(1-3), "ConParamTag","ConParamValue"
Test Command
AT+SAPBR=? OK
Parameters
See Write Command
Response
OK
If <cmd_type>=2
+SAPBR: <cid>,<Status>,<IP_Addr>
Write Command OK
If <cmd_type>=4
AT+SAPBR=<cmd_typ
e>,<cid>[,<ConParamT +SAPBR:
ag>,<ConParamValue> <ConParamTag>,<ConParamValue>
] OK

+SAPBR <cid>: DEACT
Parameters
<cmd_type>

0 Close bearer
1 Open bearer
2 Query bearer
3 Set bearer parameters
4 Get bearer parameters
<cid> Bearer profile identifier
<Status>
0 Bearer is connecting
1 Bearer is connected
2 Bearer is closing
3 Bearer is closed
<ConParamTag> Bearer parameter
"APN" Access point name string: maximum 64
characters
"USER" User name string: maximum 32 characters
"PWD" Password string: maximum 32 characters
<ConParamValue> Bearer paramer value
<IP_Addr> The IP address of bearer
When <cmd_type> is 1, 85 seconds
Max Response Time
When <cmd_type> is 0, 65 seconds
Reference Note
This command is applied to activate some applications such as HTTP, FTP.

8 AT Commands for TCPIP

Application Toolkit
8.1 Overview
Command Description
AT+CIPMUX Start up multi-IP connection
AT+CIPSTART Start up TCP or UDP connection
AT+CIPSEND Send data through TCP or UDP connection
AT+CIPQSEND Select data transmitting mode
AT+CIPACK Query previous connection data transmitting state
AT+CIPCLOSE Close TCP or UDP connection
AT+CIPSHUT Deactivate GPRS PDP context
AT+CLPORT Set local port
AT+CSTT Start task and set APN, user name, password
AT+CIICR Bring up wireless connection with GPRS
AT+CIFSR Get local IP address
AT+CIFSREX Get Local IP Address extend
AT+CIPSTATUS Query current connection status
AT+CDNSCFG Configure domain name server
AT+CDNSGIP Query the IP address of given domain name
AT+CIPHEAD Add an IP head at the beginning of a package received
AT+CIPATS Set auto sending timer
AT+CIPSPRT Set prompt of ‘>’ when module sends data
AT+CIPSERVER Configure module as server
AT+CIPCSGP Set GPRS for connection mode
AT+CIPSRIP Show remote IP address and port when received data
AT+CIPDPDP Set whether to check state of GPRS network timing
AT+CIPMODE Select TCPIP application mode
AT+CIPCCFG Configure transparent transfer mode
AT+CIPSHOWTP Display transfer protocol in IP head when received data
AT+CIPUDPMODE UDP extended mode
AT+CIPRXGET Get data from network manually
AT+CIPRDTIMER Set remote delay timer
AT+CIPSGTXT Select GPRS PDP context

AT+CIPSENDHEX Set CIPSEND Data Format to HEX

AT+CIPHEXS Set Output-data Format with suffix
AT+CIPTKA Set TCP keepalive parameters
AT+CIPOPTION Enable or Disable TCP nagle algorithm
8.2.1 AT+CIPMUX Start Up Multi-IP Connection
AT+CIPMUX Start Up Multi-IP Connection

Response
+CIPMUX: (0,1)
Test Command
AT+CIPMUX=? OK
Parameters
See Write Command
Response
+CIPMUX: <n>
Read Command
AT+CIPMUX? OK
Parameters
See Write Command
Response
OK
Write Command
Parameters
AT+CIPMUX=<n>
<n> 0 Single IP connection
1 Multi IP connection
Max Response Time -
Note
Reference  Only in IP initial state, AT+CIPMUX=1 is effective;
 Only when multi IP connection and GPRS application are both shut
down, AT+CIPMUX=0 is effective.
8.2.2 AT+CIPSTART Start Up TCP or UDP Connection

AT+CIPSTART Start Up TCP or UDP Connection

Response
1) If AT+CIPMUX=0
+CIPSTART: (list of supported <mode>),(<IP address>),(<port>)
+CIPSTART: (list of supported <mode>),(<domain name>),(<port>)
OK
2) If AT+CIPMUX=1
Test Command
+CIPSTART: (list of supported <n>),(list of supported <mode>),(<IP
AT+CIPSTART=?
address>),(<port>)
+CIPSTART: (list of supported <n>),(list of supported <mode>),(<domain
name>),(<port>)
OK
Parameters
See Write Command
Response
1)If single IP connection (+CIPMUX=0)
If format is right response
OK
Write Command otherwise response
1)If single IP connection If error is related to ME functionality:
(+CIPMUX=0) +CME ERROR <err>
Response when connection exists
AT+CIPSTART=<mode
>,<IP address>,<port> ALREADY CONNECT
or Response when connection is successful
CONNECT OK
AT+CIPSTART=<mode
>,<domain Otherwise
name>,<port> STATE: <state>
CONNECT FAIL
2)If multi-IP connection
2)If multi-IP connection (+CIPMUX=1)
(+CIPMUX=1) If format is right
AT+CIPSTART=<n>,< OK,
mode>,<address>,<po otherwise response
rt> If error is related to ME functionality:
or +CME ERROR <err>
AT+CIPSTART=<n>,< Response when connection exists
mode>,<domain <n>,ALREADY CONNECT
name>,<port> If connection is successful
<n>,CONNECT OK
Otherwise
<n>,CONNECT FAIL
Parameters

<n> 0..7 A numeric parameter which indicates the connection

number
<mode> A string parameter which indicates the connection type
"TCP" Establish a TCP connection
"UDP" Establish a UDP connection
<IP address> A string parameter which indicates remote server IP address
<port> Remote server port
<domain name> A string parameter which indicates remote server domain
name
<state> A string parameter which indicates the progress of connecting
0 IP INITIAL
1 IP START
2 IP CONFIG
3 IP GPRSACT
4 IP STATUS
5 TCP CONNECTING/UDP CONNECTING/
SERVER LISTENING
6 CONNECT OK
7 TCP CLOSING/UDP CLOSING
8 TCP CLOSED/UDP CLOSED
9 PDP DEACT
In Multi-IP state:
0 IP INITIAL
1 IP START
2 IP CONFIG
3 IP GPRSACT
4 IP STATUS
5 IP PROCESSING
9 PDP DEACT
When mode is multi-IP state, the max response time75 seconds.
Max Response Time When mode is single state, and the state is IP INITIAL, the max response
time is 160 seconds.
Note
 This command allows establishment of a TCP/UDP connection only
when the state is IP INITIAL or IP STATUS when it is in single state. In
multi-IP state, the state is in IP STATUS only. So it is necessary to
Reference
process "AT+CIPSHUT" before user establishes a TCP/UDP
connection with this command when the state is not IP INITIAL or IP
STATUS.
 When module is in multi-IP state, before this command is executed, it is
necessary to process "AT+CSTT, AT+CIICR, AT+CIFSR".

8.2.3 AT+CIPSEND Send Data Through TCP or UDP Connection
AT+CIPSEND Send Data Through TCP or UDP Connection

Response
1) For single IP connection (+CIPMUX=0)
+CIPSEND: <length>
OK
Test Command
2) For multi IP connection (+CIPMUX=1)
AT+CIPSEND=?
+CIPSEND: (0-7),<length>
OK
Parameters
See Write Command
Response
+CIPSEND: <size>
OK
Read Command 2) For multi IP connection (+CIPMUX=1)
AT+CIPSEND? +CIPSEND: <n>,<size>
OK
Parameters
<n> A numeric parameter which indicates the connection number
<size> A numeric parameter which indicates the data length sent at a time
Response
This Command is used to send changeable length data
If single IP is connected (+CIPMUX=0)
If connection is not established or module is disconnected:
Write Command
+CME ERROR <err>
1) If single IP connection
If sending is successful:
(+CIPMUX=0)
When +CIPQSEND=0
AT+CIPSEND=<length
SEND OK
>
When +CIPQSEND=1
DATA ACCEPT: <length>
2) If multi IP connection
If sending fails:
(+CIPMUX=1)
SEND FAIL
AT+CIPSEND=<n>[,<le
If multi IP connection is established (+CIPMUX=1)
ngth>]
+CME ERROR <err>
When +CIPQSEND=0

<n>,SEND OK
When +CIPQSEND=1
DATA ACCEPT: <n>,<length>
If sending fails:
<n>,SEND FAIL
Parameters
<length> A numeric parameter which indicates the length of sending
data, it must be less than <size>
Response
This Command is used to send changeable length data.
If single IP connection is established (+CIPMUX=0)
+CME ERROR <err>
Execution Command
When +CIPQSEND=0
AT+CIPSEND
SEND OK
Response ">", then type
When +CIPQSEND=1
data for send,tap
DATA ACCEPT: <length>
CTRL+Z to send, tap
If sending fails:
ESC to cancel the
SEND FAIL
operation
Note
This Command can only be used in single IP connection mode
(+CIPMUX=0) and to send data on the TCP or UDP connection that has
been established already. Ctrl-Z is used as a termination symbol. ESC is
used to cancel sending data. There are at most <size> bytes which can be
sent at a time.
When +CIPQSEND=0 and the remote server no response, after 645
Max Response Time
seconds, "CLOSE" will be reported.
Note
 The data length which can be sent depends on network status.
Reference
 Set the time that send data automatically with the Command of
AT+CIPATS.
 Only send data at the status of established connection.
8.2.4 AT+CIPQSEND Select Data Transmitting Mode
AT+CIPQSEND Select Data Transmitting Mode

Response
+CIPQSEND: (0,1)
Test Command
AT+CIPQSEND=? OK
Parameters
See Write Command
Response
+CIPQSEND: <n>
Read Command
AT+CIPQSEND? OK
Parameter
See Write Command
Response
OK
Parameters
<n>
Write Command 0 Normal mode – when the server receives TCP data, it will response
AT+CIPQSEND=<n> SEND OK.
1 Quick send mode – when the data is sent to module, it will response
DATA ACCEPT: <length> (For single IP connection (+CIPMUX=0)) or
DATA ACCEPT: <n>,<length> (For multi IP connection (+CIPMUX=1))
while not responding SEND OK.
Max Response Time -
Reference Note
8.2.5 AT+CIPACK Query Previous Connection Data Transmitting State
AT+CIPACK Query Previous Connection Data Transmitting State

AT+CIPACK=? OK
Response
+CIPACK: <txlen>,<acklen>,<nacklen>
Write Command
OK
If multi IP connection
Parameters
(+CIPMUX=1)
AT+CIPACK=<n>
<txlen> The data amount which has been sent
<acklen> The data amount confirmed successfully by the server
<nacklen> The data amount without confirmation by the server

If single IP connection +CIPACK: <txlen>,<acklen>,<nacklen>

(+CIPMUX=0)
AT+CIPACK OK
Parameters
See Write Command
Max Response Time -
Reference Note
8.2.6 AT+CIPCLOSE Close TCP or UDP Connection
AT+CIPCLOSE Close TCP or UDP Connection

AT+CIPCLOSE=? OK
Response:
Write Command
1) If single IP connection
CLOSE OK
(+CIPMUX=0)
AT+CIPCLOSE=<n>
<id>,CLOSE OK
2) If multi IP connection
Parameters
(+CIPMUX=1)
<n> 0 Slow close
AT+CIPCLOSE=<id>,[< 1 Quick close
n>]
<id> A numeric parameter which indicates the connection number
Response
If close is successfully:
Execution Command
CLOSE OK
AT+CIPCLOSE
If close fails:
ERROR
Max Response Time -
Note
AT+CIPCLOSE only closes connection at corresponding status of TCP/UDP
stack. To see the status use AT+CIPSTATUS command. Status should be:
TCP CONNECTING, UDP CONNECTING, SERVER LISTENING or
Reference
CONNECT OK in single-connection mode (see <state> parameter);
CONNECTING or CONNECTED in multi-connection mode (see <client
state>);
OPENING or LISTENING in multi-connection mode (see <server state>).
Otherwise it will return "ERROR".

8.2.7 AT+CIPSHUT Deactivate GPRS PDP Context
AT+CIPSHUT Deactivate GPRS PDP Context

AT+CIPSHUT=? OK
Response
If close is successful:
Execution Command
SHUT OK
AT+CIPSHUT
If close fails:
ERROR
Note
 If this command is executed in multi-connection mode, all of the IP
connection will be shut.
Reference  User can close gprs pdp context by AT+CIPSHUT. After it is closed, the
status is IP INITIAL.
 If "+PDP: DEACT" urc is reported which means the gprs is released by
the network, then user still needs to execute "AT+CIPSHUT" command
to make PDP context come back to original state.
8.2.8 AT+CLPORT Set Local Port
AT+CLPORT Set Local Port

Response
+CLPORT: ("TCP","UDP"),(0-65535)
OK
Test Command
AT+CLPORT=?
+CLPORT: (0-7),("TCP","UDP"),(0-65535)
OK
Parameters
See Write Command
Response
Read Command +CLPORT: <TCP port>,<UDP port>
AT+CLPORT?
OK

+CLPORT: 0,<TCP port>,<UDP port>

OK
Parameters
See Write Command
Response
Write Command
OK
1) For single IP
or
connection
ERROR
(+CIPMUX=0)
Parameters
AT+CLPORT=<mode>,
<n> 0..7 A numeric parameter which indicates the connection
<port>
number this used in multi IP connection
2) For multi IP
<mode> A string parameter which indicates the connection type
connection
"TCP" TCP local port
(+CIPMUX=1)
"UDP" UDP local port
AT+CLPORT=<n>,<mo
<port> 0-65535 A numeric parameter which indicates the local port.
de>,<port>
Default value is 0, a port can be dynamically allocated a port.
Max Response Time -
Reference Note
This command will be effective when module is set as a Client.
8.2.9 AT+CSTT Start Task and Set APN, USER NAME, PASSWORD
AT+CSTT Start Task and Set APN, USER NAME, PASSWORD

Response
+CSTT: "APN","USER","PWD"
Test Command
AT+CSTT=? OK
Parameters
See Write Command
Response
Read Command +CSTT: <apn>,<user name>,<password>
AT+CSTT?
OK

Parameters
See Write Command
Response
OK
or
ERROR
AT+CSTT=<apn>,<use <apn> A string parameter which indicates the GPRS access point
r name>,<password> name. The max length is 50 bytes.Defautl value is "CMNET".
<user name> A string parameter which indicates the GPRS user name.
The max length is 50 bytes.
<password> A string parameter which indicates the GPRS password.
The max length is 50 bytes.
Max Response Time -
Response
AT+CSTT or
ERROR
Note
Reference The write command and execution command of this command is valid only
at the state of IP INITIAL. After this command is executed, the state will be
changed to IP START.
8.2.10 AT+CIICR Bring Up Wireless Connection with GPRS
AT+CIICR Bring Up Wireless Connection with GPRS

AT+CIICR=? OK
Response
AT+CIICR or
ERROR
Note
 AT+CIICR only activates moving scene at the status of IP START, after
operating this Command is executed, the state will be changed to IP
Reference CONFIG.
 After module accepts the activated operation, if it is activated
successfully, module state will be changed to IP GPRSACT, and it
responds OK, otherwise it will respond ERROR.

8.2.11 AT+CIFSR Get Local IP Address
AT+CIFSR Get Local IP Address

AT+CIFSR=? OK
Response
<IP address>
or
Execution Command
ERROR
AT+CIFSR
Parameter
<IP address> A string parameter which indicates the IP address assigned
from GPRS
Max Response Time -
Note
Only after PDP context is activated, local IP address can be obtained by
AT+CIFSR, otherwise it will respond ERROR. To see the status use
AT+CIPSTATUS command. Status should be:
Reference IP GPRSACT, TCP CONNECTING, UDP CONNECTING, SERVER
LISTENING, IP STATUS, CONNECT OK, TCP CLOSING, UDP CLOSING,
TCP CLOSED, UDP CLOSED in single-connection mode (see <state>
parameter);
IP STATUS, IP PROCESSING in multi-connection mode (see <state>
parameter).
8.2.12 AT+CIFSREX Get Local IP Address extend
AT+CIFSREX Get Local IP Address extend

AT+CIFSREX=? OK
Response
+CIFSREX: <IP address>
Execution Command
OK
AT+CIFSREX
Parameter
<IP address> A string parameter which indicates the IP address assigned
from GPRS

Max Response Time -

Note
Only after PDP context is activated, local IP address can be obtained by
AT+CIFSR, otherwise it will respond ERROR. To see the status use
AT+CIPSTATUS command. Status should be:
Reference IP GPRSACT, TCP CONNECTING, UDP CONNECTING, SERVER
LISTENING, IP STATUS, CONNECT OK, TCP CLOSING, UDP CLOSING,
TCP CLOSED, UDP CLOSED in single-connection mode (see <state>
parameter);
IP STATUS, IP PROCESSING in multi-connection mode (see <state>
parameter).
8.2.13 AT+CIPSTATUS Query Current Connection Status
AT+CIPSTATUS Query Current Connection Status

AT+CIPSTATUS=? OK
Response
+CIPSTATUS: <n>,<bearer>,<TCP/UDP>,<IP address>,<port>,<client
Write Command
state>
If multi IP connection
mode (+CIPMUX=1)
OK
AT+CIPSTATUS=<n>
Parameters
Response
1)If in single connection mode (+CIPMUX=0)
OK
STATE: <state>
2) If in multi-connection mode (+CIPMUX=1)
OK
Execution Command STATE: <state>

AT+CIPSTATUS If the module is set as server
S: 0,<bearer>,<port>,<server state>
C: <n>,<bearer>,<TCP/UDP>,<IP address>,<port>,<client state>
Parameters
<n> 0-7 A numeric parameter which indicates the connection
number
<bearer> 0-1 GPRS bearer, default is 0
<server state> OPENING
LISTENING

CLOSING
<client state> INITIAL
CONNECTING
CONNECTED
REMOTE CLOSING
CLOSING
CLOSED
<state> A string parameter which indicates the progress of
connecting
0 IP INITIAL
1 IP START
2 IP CONFIG
3 IP GPRSACT
4 IP STATUS
5 TCP CONNECTING/UDP CONNECTING
/SERVER LISTENING
6 CONNECT OK
7 TCP CLOSING/UDP CLOSING
8 TCP CLOSED/UDP CLOSED
9 PDP DEACT
In Multi-IP state:
0 IP INITIAL
1 IP START
2 IP CONFIG
3 IP GPRSACT
4 IP STATUS
5 IP PROCESSING
9 PDP DEACT
Max Response Time -
Reference Note
8.2.14 AT+CDNSCFG Configure Domain Name Server
AT+CDNSCFG Configure Domain Name Server

Response
+CDNSCFG: ("Primary DNS"),("Secondary DNS")
Test Command
AT+CDNSCFG=? OK
Parameters
See Write Command

Response
PrimaryDns: <pri_dns>
SecondaryDns: <sec_dns>
Read Command
AT+CDNSCFG?
OK
Parameter
See Write Command
Response
OK
or
Write Command ERROR
AT+CDNSCFG=<pri_d Parameters
ns>[,<sec_dns>] <pri_dns> A string parameter which indicates the IP address of the
primary domain name server. Default value is 0.0.0.0.
<sec_dns> A string parameter which indicates the IP address of the
secondary domain name server. Default value is 0.0.0.0.
Max Response Time -
Reference Note
8.2.15 AT+CDNSGIP Query the IP Address of Given Domain Name
AT+CDNSGIP Query the IP Address of Given Domain Name

AT+CDNSGIP=? OK
Response
OK
or
ERROR
If successful, return:
+CDNSGIP: 1,<domain name>,<IP1>[,<IP2>]
If fail, return:
Write Command
+CDNSGIP:0,<dns error code>
AT+CDNSGIP=<domai Parameters
n name>
<domain name> A string parameter which indicates the domain name
<IP1> A string parameter which indicates the first IP address
corresponding to the domain name
<IP2> A string parameter which indicates the second IP address
corresponding to the domain name
<dns error code> A numeric parameter which indicates the error code
8 DNS COMMON ERROR

3 NETWORK ERROR
There are some other error codes as well.
Max Response Time -
Reference Note
8.2.16 AT+CIPHEAD Add an IP Head at the Beginning of a Package Received
AT+CIPHEAD Add an IP Head at the Beginning of a Package Received

Response
+CIPHEAD: (list of supported <mode>s)
Test Command
AT+CIPHEAD=? OK
Parameter
See Write Command
Response
+CIPHEAD: <mode>
Read Command
AT+CIPHEAD? OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
<mode> A numeric parameter which indicates whether an IP header
Write Command
is added to the received data or not.
AT+CIPHEAD=<mode>
0 Not add IP header
1 Add IP header, the format is:
+IPD,<data length>:
+RECEIVE,<n>,<data length>:
Max Response Time -
Reference Note

8.2.17 AT+CIPATS Set Auto Sending Timer
AT+CIPATS Set Auto Sending Timer

Response
+CIPATS: (list of supported <mode>s),(list of supported <time>)
Test Command
AT+CIPATS=? OK
Parameters
See Write Command
Response
+CIPATS: <mode>,<time>
Read Command
AT+CIPATS? OK
Parameters
See Write Command
Response
OK
or
ERROR
AT+CIPATS=<mode>[, <mode> A numeric parameter which indicates whether set timer when
<time>] module is sending data
0 Not set timer when module is sending data
1 Set timer when module is sending data
<time> 1..100 A numeric parameter which indicates the seconds
after which the data will be sent
Max Response Time -
Reference
Note
8.2.18 AT+CIPSPRT Set Prompt of ‘>’ When Module Sends Data
AT+CIPSPRT Set Prompt of ‘>’ When Module Sends Data

Response
+CIPSPRT: (list of supported <send prompt>s)
Test Command
AT+CIPSPRT=? OK
Parameters
See Write Command

AT+CIPSPRT? +CIPSPRT: <send prompt>
OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
Write Command <send prompt> A numeric parameter which indicates whether to echo
AT+CIPSPRT=<send prompt ‘>’ after module issues AT+CIPSEND command.
prompt> 0 It shows "send ok" but does not prompt echo ‘>’ when sending is
successful.
1 It prompts echo ‘>’ and shows "send ok" when sending is
successful.
2 It neither prompts echo ‘>’ nor shows "send ok" when sending is
successful.
Max Response Time -
Reference Note
8.2.19 AT+CIPSERVER Configure Module as Server
AT+CIPSERVER Configure Module as Server

Response
+CIPSERVER: (0-CLOSE SERVER, 1-OPEN SERVER),(1-65535)
Test Command
AT+CIPSERVER=? OK
Parameters
See Write Command
Response
+CIPSERVER: <mode>[,<port>,<channel id>,<bearer>]
Read Command
AT+CIPSERVER? OK
Parameters
See Write Command
Response
Write Command
OK
AT+CIPSERVER=<mo
or
de>[,<port>]
ERROR

Parameters
<mode> 0 Close server
1 Open server
<port> 1..65535 Listening port
<channel id> Channel id
<bearer> GPRS bearer
Max Response Time -
Note
Reference This command is allowed to establish a TCP server only when the state is
IP INITIAL or IP STATUS when it is in single state. In multi-IP state, the
state is in IP STATUS only.
8.2.20 AT+CIPCSGP Set GPRS for Connection Mode
AT+CIPCSGP Set GPRS for Connection Mode

Response
+CIPCSGP: 1-GPRS,APN,USER NAME,PASSWORD
Test Command
AT+CIPCSGP=? OK
Parameters
See Write Command
Response
+CIPCSGP: <mode>,<apn>,<user name>,<password>[,<rate>]
Read Command
AT+CIPCSGP? OK
Parameters
See Write Command
Response
OK
or
ERROR
Write Command
Parameters
AT+CIPCSGP=<mode> <mode> A numeric parameter which indicates the wireless connection
[,(<apn>,<user
name>,<password>)] mode
1 set GPRS as wireless connection mode
<apn> A string parameter which indicates the access point name
<user name> A string parameter which indicates the user name
<password> A string parameter which indicates the password
Max Response Time -
Reference Note

8.2.21 AT+CIPSRIP Show Remote IP Address and Port When Received Data
AT+CIPSRIP Show Remote IP Address and Port When Received Data

Response
+CIPSRIP: (list of supported <mode>s)
Test Command
AT+CIPSRIP=? OK
Parameters
See Write Command
Response
+CIPSRIP: <mode>
Read Command
AT+CIPSRIP? OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
Write Command <mode> A numeric parameter which shows remote IP address and port.
AT+CIPSRIP=<mode> 0 Do not show the prompt
1 Show the prompt, the format is as follows:
RECV FROM:<IP ADDRESS>:<PORT>
+RECEIVE,<n>,<data length>,<IP ADDRESS>:<PORT>
Max Response Time -
Reference
8.2.22 AT+CIPDPDP Set Whether to Check State of GPRS Network Timing
AT+CIPDPDP Set Whether to Check State of GPRS Network Timing

Response
Test Command
+CIPDPDP: (list of supported<mode>s, list of supported <interval>,list of
AT+CIPDPDP=?
supported <timer>)

OK
Parameters
See Write Command
Response
+CIPDPDP: <mode>,<interval>,<timer>
Read Command
AT+CIPDPDP? OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
Write Command
<mode>
AT+CIPDPDP=<mode>
0 Not set detect PDP
[,<interval>,<timer>]
1 Set detect PDP
<interval>
1<=interval<=180(s), default value is 10.
<timer>
1<=timer<=10, default value is 3.
Max Response Time -
Note
Reference If "+PDP: DEACT" urc is reported because of module not attaching to gprs
for a certain time or other reasons, user still needs to execute
"AT+CIPSHUT" command makes PDP context come back to original state.
8.2.23 AT+CIPMODE Select TCPIP Application Mode
AT+CIPMODE Select TCPIP Application Mode

Response
+CIPMODE: (0-NORMAL MODE,1-TRANSPARENT MODE)
Test Command
AT+CIPMODE=? OK
Parameters
See Write Command
Response
Read Command +CIPMODE: <mode>
AT+CIPMODE?
OK

Parameters
See Write Command
Response
OK
Write Command or
AT+CIPMODE=<mode ERROR
> Parameters
<mode> 0 Normal mode
1 Transparent mode
Max Response Time -
Reference Note
8.2.24 AT+CIPCCFG Configure Transparent Transfer Mode
AT+CIPCCFG Configure Transparent Transfer Mode

Response
+CIPCCFG:
(NmRetry:3-8),(WaitTm:1-10),(SendSz:1-1460),(esc:0,1) ,(Rxmode:0,1),(
Test Command RxSize:50-1460),(Rxtimer:20-1000)
AT+CIPCCFG=?
OK
Parameters
See Write Command
Response
+CIPCCFG:
<NmRetry>,<WaitTm>,<SendSz>,<esc>,<Rxmode>,<RxSize>,<Rxtimer
Read Command >
AT+CIPCCFG?
OK
Parameters
See Write Command
Response
OK
Write Command or
ERROR
AT+CIPCCFG=<NmRet
ry>,<WaitTm>,<SendS Parameters
z>,<esc>[,<Rxmode>,< <NmRetry> Number of retries to be made for an IP packet.Default
RxSize>,<Rxtimer>]
value is 5.
<WaitTm> Number of 100ms intervals to wait for serial input before
sending the packet. Default value is 2.

<SendSz> Size in bytes of data block to be received from serial port

before sending. Default value is 1024.
<esc> Whether turn on the escape sequence, default is TRUE.
0 Turn off the escape sequence
1 Turn on the escape sequence
<Rxmode> Whether to set time interval during output data from serial
port.
0 output data to serial port without interval
1 output data to serial port within <Rxtimer> interval.
<RxSize> Output data length for each time. Default value is 1460.
<Rxtimer> Time interval (ms) to wait for serial port to output data again.
Default value: 50ms
Max Response Time -
Note
Reference
This command will be effective only in single connection mode
(+CIPMUX=0)
8.2.25 AT+CIPSHOWTP Display Transfer Protocol in IP Head When Received Data
AT+CIPSHOWTP Display Transfer Protocol in IP Head When Received Data

Response
+CIPSHOWTP: (list of supported <mode>s)
Test Command
AT+CIPSHOWTP=? OK
Parameters
See Write Command
Response
+CIPSHOWTP: <mode>
Read Command
AT+CIPSHOWTP? OK
Parameters
See Write Command
Response
OK
or
Write Command ERROR
AT+CIPSHOWTP=<mo Parameters
de> <mode> A numeric parameter which indicates whether to display
transfer protocol in IP header to received data or not
0 Not display transfer protocol
1 Display transfer protocol, the format is "+IPD,

<data size>,<TCP/UDP>:<data>"
Max Response Time -
Note
 This command will be effective only in single connection mode
Reference
(+CIPMUX=0).
 Only when +CIPHEAD is set to 1, the setting of this command will work.
8.2.26 AT+CIPUDPMODE UDP Extended Mode
AT+CIPUDPMODE UDP Extended Mode

Response
+CIPUDPMODE: (0-2),("(0-255).(0-255).(0-255).(0-255)"),(1-65535)
OK
Test Command
AT+CIPUDPMODE=?
+CIPUDPMODE: (0-5),(0-2),("(0-255).(0-255).(0-255).(0-255)"),(1-65535)
OK
Parameters
See Write Command
Response
+CIPUDPMODE: <mode>[,<IP address>,<Port>]
OK
+CIPUDPMODE: 0,<mode>[,<IP address>,<Port>]
Read Command +CIPUDPMODE: 2,<mode>[,<IP address>,<Port>]
AT+CIPUDPMODE? +CIPUDPMODE: 3,<mode>[,<IP address>,<Port>]
OK
Parameter
See Write Command
1) For single IP OK

connection or
(+CIPMUX=0) ERROR
AT+CIPUDPMODE=<m
ode>[,<IP <n> 0-7 A numeric parameter which indicates the connection
address>,<Port>] number
2) For multi IP <mode> 0UDP Normal Mode
connection 1 UDP Extended Mode
(+CIPMUX=1) 2 Set UDP address to be sent
AT+CIPUDPMODE=<n <IP address> A string parameter which indicates remote IP address
>,<mode>[,<IP <port> Remote port
address>,<Port>]
Max Response Time -
Reference Note
8.2.27 AT+CIPRXGET Get Data from Network Manually
AT+CIPRXGET Get Data from Network Manually

Response
If single IP connection (+CIPMUX=0)
+CIPRXGET: (list of supported <mode>s),(list of supported <reqlength>)
OK
Test Command If multi IP connection (+CIPMUX=1)
AT+CIPRXGET=? +CIPRXGET: (list of supported <mode>s), (list of supported <id>s), (list of
supported <reqlength>)
OK
Parameters
See Write Command
Response
+CIPRXGET: <mode>
Read Command
AT+CIPRXGET? OK
Parameters
See Write Command
1) If single IP connection OK
(+CIPMUX=0) or
ERROR
AT+CIPRXGET=<mode 1)For single IP connection
>[,<reqlength>] If "AT+CIPSRIP=1" is set, IP address and port are contained.

if <mode>=1
2) If multi IP connection +CIPRXGET: 1[,<IP ADDRESS>:<PORT>]
(+CIPMUX=1) if <mode>=2
+CIPRXGET: 2,<reqlength>,<cnflength>[,<IP ADDRESS>:<PORT>]
AT+CIPRXGET=<mode 1234567890…
>[,<id>,<reqlength>] OK
if <mode>=3
+CIPRXGET: 3,<reqlength>,<cnflength>[,<IP ADDRESS>:<PORT>]
5151…
OK
if <mode>=4
+CIPRXGET: 4,<cnflength>
OK
2)For multi IP connection
If "AT+CIPSRIP=1" is set, IP address and port is contained.
if <mode>=1
+CIPRXGET: 1[,<id>,<IP ADDRESS>:<PORT>]
if <mode>=2
+CIPRXGET: 2,<id>,<reqlength>,<cnflength>[,<IP
ADDRESS>:<PORT>]
1234567890…
OK
if <mode>=3
+CIPRXGET: 3,<id>,<reqlength>,<cnflength>[,<IP
ADDRESS>:<PORT>]
5151…
OK
if <mode>=4
+CIPRXGET: 4,<id>,<cnflength>
OK

+CME ERROR: <err>
Parameters
<mode>
0 Disable getting data from network manually, the module is
set to normal mode, data will be pushed to TE directly.
1 Enable getting data from network manually.
2 The module can get data, but the length of output data can
not exceed 1460 bytes at a time.
3 Similar to mode 2, but in HEX mode, which means the
module can get 730 bytes maximum at a time.
4 Query how many data are not read with a given ID.
<id> A numeric parameter which indicates the connection number

<reqlength> Requested number of data bytes (1-1460 bytes)to be read.

If <mode>=4,the range of <reqlength> is 0-2920bytes.
<cnflength> Confirmed number of data bytes to be read, which may be less
than <length>. 0 indicates that no data can be read.
Max Response Time -
Note
Reference
To enable this function, parameter <mode> must be set to 1 before
connection.
8.2.28 AT+CIPRDTIMER Set Remote Delay Timer
AT+CIPRDTIMER Set Remote Delay Timer

Response
+CIPRDTIMER: (100-4000),(100-7000)
Test Command
AT+CIPRDTIMER=? OK
Parameters
See Write Command
Response
+CIPRDTIMER: <rdsigtimer>,<rdmuxtimer>
Read Command
AT+CIPRDTIMER? OK
Parameters
See Write Command
Response
OK
AT+CIPRDTIMER=<rds Parameters
igtimer>,<rdmuxtimer> <rdsigtimer>Remote delay timer of single connection. Default value is
2000.
<rdmuxtimer> Remote delay timer of multi-connections. Default value is
3500.
Max Response Time -
Note
Reference This command is used to shorten the disconnect time locally when the
remote server has been disconnected.

8.2.29 AT+CIPSGTXT Select GPRS PDP context
AT+CIPSGTXT Select GPRS PDP context

Response
+CIPSGTXT: (0,1)
Test Command
AT+CIPSGTXT=? OK
Parameters
See Write Command
Response
OK
Write Command If error is related to ME functionality:
AT+CIPSGTXT=<mode +CME ERROR: <err>
> Parameters
<mode> 0 Select first PDP context
1 Select second PDP context
Max Response Time -
Note
Reference This command is used to select pdp context, only for multi IP connection
(+CIPMUX=1).
8.2.30 AT+CIPSENDHEX Set CIPSEND Data Format to Hex
AT+CIPSENDHEX Set CIPSEND Data Format to HEX

Response
+ CIPSENDHEX: (0,1)
Test Command
AT+CIPSENDHEX=? OK
Parameters
See Write Command
Response
OK
Write Command
+CME ERROR: <err>
AT+CIPSENDHEX=<m
Parameters
ode>
<mode> 0 The default format of output data in AT+CIPSEND.
1 Set the input data in HEX format when using CIPSEND
command to send data.
Max Response Time -

Note
Reference
8.2.31 AT+CIPHEXS Set Output-data Format with suffix
AT+CIPHEXS Set Output-data Format with suffix

Response
+CIPHEXS: (list of supported <mode>s)
Test Command
AT+CIPHEXS=? OK
Parameters
See Write Command
Response
OK
AT+CIPHEXS=<mode> Parameters
<mode> 0 The default format of output data
1 Set the output data with suffix "0d 0a"
2 Set the output data in HEX format with suffix "0d 0a".
Max Response Time -
Note:
Reference
This command is only available when "AT+CIPHEAD=1".
8.2.32 AT+CIPTKA Set TCP Keepalive Parameters
AT+CIPTKA Set TCP Keepalive Parameters

Response
+CIPTKA: (list of supported <mode>s),(list of supported
<keepIdle>s),(list of supported <keepInterval>),(list of
Test Command supported <keepCount>s)
AT+CIPTKA=?
OK
Parameters
See Write Command
Response
Read Command +CIPTKA: <mode>,<keepIdle>,<keepInterval>,<keepCount>
AT+CIPTKA?
OK

Parameters
See Write Command
Response
OK
ERROR
Parameters
<mode> Set TCP keepalive option.
Write Command 0 Disable TCP keep alive mechanism
AT+CIPTKA=<mode>[, 1 Enable TCP keep alive mechanism
<keepIdle>[,<keepInter <keepIdle> Integer type; Idle time (in second) before TCP send the initial
val>[,<keepCount>]]] keepalive probe.
30-7200
<keepInterval> Interval time (in second) between keepalive probes
retransmission.
30-75-600
<keepCount> Integer type; Maximum number of keepalive probes to be
sent.
1-9
Max Response Time -
Reference Note
8.2.33 AT+CIPOPTION Enable or Disable TCP nagle algorithm
AT+CIPOPTION Enable or Disable TCP nagle algorithm

Response
+CIPOPTION: (list of supported <mode>s)
Test Command
AT+CIPOPTION=? OK
Parameters
See Write Command
Response
+CIPOPTION: <mode>
Read Command
AT+CIPOPTION? OK
Parameters
See Write Command
AT+CIPOPTION=<mod

e> OK
ERROR
Parameters
<mode> Config to enable or disable TCP nagle algorithm
0 Enable TCP nagle algorithm
1 Disable TCP nagle algorithm
Max Response Time -
Reference Note

9 AT Commands for HTTP(S)

Application
SIM7000 series has an embedded TCP/IP stack that is driven by AT commands and enables the host
application to easily access the Internet HTTP(S) service. This chapter is a reference guide to all the AT
commands and responses defined to use with the TCP/IP stack in HTTP(S) Service.
9.1 Overview
AT Command Description
AT+SHSSL Select SSL Configure
AT+SHCONF Set HTTP(S) Parameter
AT+SHCONN HTTP(S) Connection
AT+SHBOD Set Body
AT+SHBODEXT Set Extension Body
AT+SHAHEAD Add Head
AT+SHPARA Set HTTP(S) Para
AT+SHCPARA Clear HTTP(S) Para
AT+SHCHEAD Clear Head
AT+SHSTATE Query HTTP(S) Connection Status
AT+SHREQ Set Request Type
AT+SHREAD Read Response Value
AT+SHDISC Disconnect HTTP(S)
AT+HTTPTOFS Download file to ap file system
AT+HTTPTOFSRL State of download file to ap file system

9.2.1 AT+SHSSL Select SSL Configure
AT+SHSSL Select SSL Configure

Response
Test command +SHSSL: (0-5), "ca list","cert name"
AT+SHSSL=?
OK
Response
Read command +SHSSL: <index>,<ca list>,<cert name>
AT+SHSSL?
OK
Response
OK
or
Write command
ERROR
AT+SHSSL=<index>,<ca
Parameters
list>,<certname>
<index> CSSLCFG set Configure index
<ca list> Ca Certificate name
<cert name> Cert Certificate name
Max Response Time -
Reference -
9.2.2 AT+SHCONF Set HTTP(S) Parameter
AT+SHCONF Set HTTP(S) Parameter

Response
Test command +SHCONF: "HTTPParamTag","HTTPParamValue"
AT+SHCONF=?
OK
Response
Read command +SHCONF: <HTTPParamTag>,<HTTPParamValue>
AT+SHCONF?
OK
Response
OK
Write command
or
AT+SHCONF=<HTTPPar
ERROR
amTag>,<HTTPParamVa
Parameters
lue>
<HTTPParaTag> <HTTPParamValue>
"URL" Server URL address(max is 64 bytes)

"server domain[: tcpPort]"

"TIMEOUT" Hold once request time.
Unit is second.Default 60s. range: 30-1800
"BODYLEN" Set body max length(max is 1024 bytes)
"HEADERLEN" Set head max length(max is 350 bytes)
"IPVER" Set IP version
0 IPv4
1 IPv6
Max Response Time -
Note:
Reference Must set URL,BODYLEN,HEADERLEN value, TIMEOUT default is 60 s,
URL format must "http://xxx.xx.xx" or "https://xxx.xx.xx"
9.2.3 AT+SHCONN HTTP(S) Connection
AT+SHCONN HTTP(S) Connection

Response
Execution command OK
AT+SHCONN or
ERROR
Max Response Time -
Reference -
9.2.4 AT+SHBOD Set Body
AT+SHBOD Set Body

Response
Test command +SHBOD: "body",<bodylen>
AT+SHBOD=?
OK
Response
Read command +SHBOD: <body>,<bodylen>
AT+SHBOD?
OK
Write command Response
AT+SHBOD=<body>,<b OK
odylen> or

ERROR
Parameters
<body> Set body value (max length is SHCONF Set value)
<bodylen> Set body length (max length is SHCONF Set value)
Max Response Time -
Note:
Reference
Must be executed after the connection
9.2.5AT+SHBODEXT Set Extension Body
AT+SHBODEXT Set Exetension Body

AT+SHBODEXT=? +SHBODEXT: (range of supported <bodylen>s),(range of supported
<timeout>s)
OK
AT+SHBODEXT? +SHBODEXT: <body>,<len_body>
OK
AT+SHBODEXT=<len_body OK
>,<timeout> or
<CR>text is entered ERROR
<ctrl-Z/ESC> Parameters
ESC quits without sending <body> Set body value (max length is SHCONF Set value)
<len_body> Length of <body>. Max value is <bodylen>.
<bodylen> Max length set by
"AT+SHCONF="BODYLEN",<bodylen>"
<timeout> Timeout for automatically sending edited data
(100-10000 ms)
Max Response Time -
Note:
Reference
9.2.6 AT+SHAHEAD Add Head
AT+SHAHEAD Add Head

Response
Test command +SHAHEAD: "type",”value”
AT+SHAHEAD=?
OK
Response
Read command +SHAHEAD: <type>,<value>
AT+SHAHEAD?
OK
Response
OK
OR
Write command
ERROR
AT+SHAHEAD=<type>,<
Parameters
value>
<type> Head type (max length is SHCONF Set value)
<value> Head value (max length is SHCONF Set value)
Note: The sum of type and value max length is 350
Max Response Time -
Note:
Reference
9.2.7 AT+SHCHEAD Clear Head
AT+SHCHEAD Clear Head

Response
AT+SHCHEAD or
ERROR
Max Response Time -
Note:
Reference
9.2.8 AT+SHPARA Set HTTP(S) Para
AT+SHPARA Set HTTP(S) Para

Response
Test command
+SHPARA: "key",”value”
AT+SHPARA=?

OK
Response
Read command +SHPARA: <key>,<value>
AT+SHPARA?
OK
Response
OK
Write command or
AT+SHPARA=<key>,<va ERROR
lue> Parameters
<key> Set key (max is 64 bytes)
<value> Set value (max is 64 bytes)
Max Response Time -
Note:
Reference
Must be executed after the connection.
9.2.9AT+SHCPARA Clear HTTP(S) Para
AT+SHCPARA Clear HTTP(S) Para

AT+SHCPARA=? OK
AT+SHCPARA OK
or
ERROR
Max Response Time -
Note:
Reference
Must be executed after the connection.
9.2.10 AT+SHSTATE Query HTTP(S) Connection Status
AT+SHSTATE Query HTTP(S) Connection Status

Response
+SHSTATE: <status>
Read command
AT+SHSTATE? OK
Parameters
<status>

0 Expression HTTP(S) disconnect state；

1 Expression HTTP(S) connect state；
Max Response Time -
Reference -
9.2.11 AT+SHREQ Set Request Type
AT+SHREQ Set Request Type

Response
Test command +SHREQ: url,(1-5)
AT+SHREQ=?
OK
Response
Read command +SHREQ: <url>,<type>
AT+SHREQ?
OK
Response
OK
or
ERROR
+SHREQ: <type string>,<StatusCode>,<DataLen>
Parameters
<url> Request server domain (max is 512 bytes)
<type>
1 GET
2 PUT
Write command 3 POST
AT+SHREQ=<url>,<type 4 PATCH
> 5 HEAD
<type string> String of type are GET ,PUT,POST,PATCH,HEAD.
<timeout> Waiting for Response time(default is 60 sec)
<StatusCode> HTTP(S) Status Code responded by remote server, it
identifier refer to HTTP1.1(RFC2616)
100 Continue
101 Switching Protocols
200 OK
201 Created
202 Accepted
203 Non-Authoritative Information
204 No Content

205 Reset Content

206 Partial Content
300 Multiple Choices
301 Moved Permanently
302 Found
303 See Other
304 Not Modified
305 Use Proxy
307 Temporary Redirect
400 Bad Request
401 Unauthorized
402 Payment Required
403 Forbidden
404 Not Found
405 Method Not Allowed
406 Not Acceptable
407 Proxy Authentication Required
408 Request Time-out
409 Conflict
410 Gone
411 Length Required
412 Precondition Failed
413 Request Entity Too Large
414 Request-URI Too Large
415 Unsupported Media Type
416 Requested range not satisfiable
417 Expectation Failed
500 Internal Server Error
501 Not Implemented
502 Bad Gateway
503 Service Unavailable
504 Gateway Time-out
505 HTTP(S) Version not supported
<DataLen> The length of data got
Max Response Time -
Note:
Reference
9.2.12 AT+SHREAD Read Response Value
AT+SHREAD Read Response Value

Response
Test command +SHREAD: (0-306176),(1-306176)
AT+SHREAD=?
OK
Response
OK
+SHREAD: <data_len>
<data>
+SHREAD: <data_len>
<data>
.....
or
Write command
ERROR
AT+SHREAD=<startaddr
ess>,<datalen>
If<datalen> is bigger than the data size received, it’s error
If <datalen> is bigger than 2048, will got multi URC +SHREAD
Parameters
<startaddress> Start address of data
<datalen> Set read values length
<data_len> Return data length max is 2048 bytes once,
if more than 2048 bytes, will return many timer until all data are
read out
<data> Response data
Max Response Time -
Note:
Reference
Read data after request
9.2.13 AT+SHDISC Disconnect HTTP(S)
AT+SHDISC Disconnect HTTP(S)

Response
AT+SHDISC or
ERROR
Max Response Time -
Reference -

9.2.14 AT+HTTPTOFS Download File to AP File System
AT+HTTPTOFS Download File to AP File System

Response
Test Command +HTTPTOFS: (1-255),(1-127)
AT+HTTPTOFS=?
OK
Response
+HTTPTOFS: <status>,<url>,<file_path>
Read Command OK
AT+HTTPTOFS? If error is related to ME functionality:
+CME ERROR: <err>
Parameters
See Write Command
Response
OK
+HTTPTOFS: <StatusCode>,<DataLen>
Parameters
<status>
0 Idle
1 Busy
<url> The url
<file_path>
File path and name on AP side,
For example: "/customer/test.bin","/custapp/ test.bin ","/fota/test.bin"
<timeout> Timeout of HTTP request. Unit is second.
Write Command Range is 10-1000, default value is 50.
AT+HTTPTOFS=<url>, <retrycnt> Retry times of HTTP request.
<file_path>[,<timeout> Range is 5-100, default value is 5.
[,<retrycnt>]] <StatusCode> HTTP Status Code responded by remote server, it
identifier refer to HTTP1.1(RFC2616)
100 Continue
200 OK
206 Partial Content
400 Bad Request
404 Not Found
408 Request Time-out
500 Internal Server Error
600 Not HTTP PDU
601 Network Error
602 No memory
603 DNS Error
604 Stack Busy

620 SSL continue

65535 Other Errors
<DataLen>
The length of data download
Max Response Time -
Note
Reference
9.2.15 AT+HTTPTOFSRL State of Download File to AP File System
AT+HTTPTOFSRL State of Download File to AP File System

AT+HTTPTOFSRL=? OK
Response
+HTTPTOFSRL: <status>,<curlen >,<totallen>
OK
+CME ERROR: <err>
Read Command
Parameters
AT+HTTPTOFSRL?
<status> Downloading state
0 Idle
1 During downloading
<curlen> The length of data have been download successfully
<totallen> The length of data download. If total length does not been got,
<totallen> will be 0.
Max Response Time -
Note
Reference

10 AT Commands for FTP Application
SIM7000 series has an embedded TCP/IP stack that is driven by AT commands and enables the host
application to easily access the Internet FTP service. This chapter is a reference guide to all the AT
commands and responses defined for using with the TCP/IP stack in FTP Service.
10.1 Overview
Command Description
AT+FTPPORT Set FTP control port
AT+FTPMODE Set active or passive FTP mode
AT+FTPTYPE Set the type of data to be transferred
AT+FTPPUTOPT Set FTP put type
AT+FTPCID Set FTP bearer profile identifier
AT+FTPREST Set resume broken download
AT+FTPSERV Set FTP server address
AT+FTPUN Set FTP user name
AT+FTPPW Set FTP password
AT+FTPGETNAME Set download file name
AT+FTPGETPATH Set download file path
AT+FTPPUTNAME Set upload file name
AT+FTPPUTPATH Set upload file path
AT+FTPGET Download file
AT+FTPPUT Set upload file
AT+FTPDELE Delete specified file in FTP server
AT+FTPSIZE Get the size of specified file in FTP server
AT+FTPSTATE Get the FTP state
AT+FTPEXTPUT Extend upload file
AT+FTPMKD Make directory on the remote machine
AT+FTPRMD Remove directory on the remote machine
AT+FTPLIST List contents of directory on the remote machine
AT+FTPEXTGET Extend download file
AT+FTPETPUT Upload File
AT+FTPETGET Download File
AT+FTPQUIT Quit current FTP session
AT+FTPRENAME Rename the Specified File on the Remote Machine

AT+FTPMDTM Get the Last Modification Timestamp of Specified File on the Remote Machine
10.2.1 AT+FTPPORT Set FTP Control Port
AT+FTPPORT Set FTP Control Port

AT+FTPPORT=? OK
Response
+FTPPORT: <value>
Read Command
AT+FTPPORT? OK
Parameters
See Write Command
Response
OK
Write Command
+CME ERROR: <err>
AT+FTPPORT=<value>
Parameters
<value> The value of FTP Control port, from 1 to 65535.
Default value is 21
Max Response Time -
Note
Reference Numbers above 65535 are illegal as the port identification fields are 16 bits
long in the TCP header.
10.2.2 AT+FTPMODE Set Active or Passive FTP Mode
AT+FTPMODE Set Active or Passive FTP Mode

AT+FTPMODE=? OK
Response
Read Command +FTPMODE: <value>
AT+FTPMODE?
OK

Parameters
See Write Command
Response
OK
AT+FTPMODE=<value +CME ERROR: <err>
> Parameters
<value> 0 Active FTP mode
1 Passive FTP mode
Max Response Time -
Reference Note
10.2.3 AT+FTPTYPE Set the Type of Data to Be Transferred
AT+FTPTYPE Set the Type of Data to Be Transferred

AT+FTPTYPE=? OK
Response
+FTPTYPE: <value>
Read Command
AT+FTPTYPE? OK
Parameters
See Write Command
Response
OK
Write Command
+CME ERROR: <err>
AT+FTPTYPE=<value>
Parameters
<value> "A" For FTP ASCII sessions
"I" For FTP Binary sessions
Max Response Time -
Note
When this value is set to A, all the data sent by the stack to the FTP server
Reference
is made of 7 bits characters (NVT-ASCII: the MSB is set to 0). As a
consequence binary data containing 8 bits characters will be corrupted
during the transfer if the FTPTYPE is set to A.

10.2.4 AT+FTPPUTOPT Set FTP Put Type
AT+FTPPUTOPT Set FTP Put Type

AT+FTPPUTOPT=? OK
Response
+FTPPUTOPT: <value>
Read Command
AT+FTPPUTOPT? OK
Parameters
See Write Command
Response
OK
Write Command
+CME ERROR: <err>
AT+FTPPUTOPT=<valu
Parameters
e>
<value> "APPE" For appending file
"STOU" For storing unique file
"STOR" For storing file
Max Response Time -
Reference Note
10.2.5 AT+FTPCID Set FTP Bearer Profile Identifier
AT+FTPCID Set FTP Bearer Profile Identifier

Response
Test Command OK
AT+FTPCID=? Parameters
See Write Command
Response
+FTPCID: <value>
Read Command
AT+FTPCID? OK
Parameter
See Write Command
Response
Write Command OK
AT+FTPCID=<value> If error is related to ME functionality:
+CME ERROR: <err>

Parameters
<value> Bearer profile identifier refer to AT+SAPBR
Max Response Time -
Reference Note
10.2.6 AT+FTPREST Set Resume Broken Download
AT+FTPREST Set Resume Broken Download

AT+FTPREST=? OK
Response
+FTPREST: <value>
Read Command
AT+FTPREST? OK
Parameters
See Write Command
Response
OK
AT+FTPREST=<value> +CME ERROR: <err>
Parameters
<value> Broken point to be resumed
Max Response Time -
Reference
Note
10.2.7 AT+FTPSERV Set FTP Server Address
AT+FTPSERV Set FTP Server Address

AT+FTPSERV=? OK
Response
+FTPSERV: <value>
Read Command
AT+FTPSERV?
OK
Parameters

See Write Command

Response
OK
Write Command
+CME ERROR: <err>
AT+FTPSERV=<value>
Parameters
<value> 32-bit number in dotted-decimal notation (i.e. xxx.xxx.xxx.xxx)
or alphanumeric ASCII text string up to 49 characters if DNS is available
Max Response Time -
Reference Note
10.2.8 AT+FTPUN Set FTP User Name
AT+FTPUN Set FTP User Name

Response
Test Command OK
AT+FTPUN=? Parameters
See Write Command
Response
+FTPUN: <value>
Read Command
AT+FTPUN? OK
Parameters
See Write Command
Response
OK
Write Command
AT+FTPUN=<value>
+CME ERROR: <err>
Parameters
<value> Alphanumeric ASCII text string up to 49 characters.
Max Response Time -
Reference Note
10.2.9 AT+FTPPW Set FTP Password

AT+FTPPW Set FTP Password

Response
Test Command OK
AT+FTPPW=? Parameters
See Write Command
Response
+FTPPW: <value>
Read Command
AT+FTPPW? OK
Parameters
See Write Command
Response
OK
AT+FTPPW=<value> +CME ERROR: <err>
Parameters
<value> Alphanumeric ASCII text string up to 49 characters.
Max Response Time -
Reference Note
10.2.10AT+FTPGETNAME Set Download File Name
AT+FTPGETNAME Set Download File Name

AT+FTPGETNAME=? OK
Response
+FTPGETNAME: <value>
Read Command
AT+FTPGETNAME? OK
Parameters
See Write Command
Response
OK
Write Command
AT+FTPGETNAME=<v
+CME ERROR: <err>
alue>
Parameters
<value> Alphanumeric ASCII text string up to 99 characters
Max Response Time -
Reference Note

10.2.11 AT+FTPGETPATH Set Download File Path
AT+FTPGETPATH Set Download File Path

AT+FTPGETPATH=? OK
Response
+FTPGETPATH: <value>
Read Command
AT+FTPGETPATH? OK
Parameters
See Write Command
Response
OK
Write Command
AT+FTPGETPATH=<val
+CME ERROR: <err>
ue>
Parameters
Max Response Time -
Reference Note
10.2.12AT+FTPPUTNAME Set Upload File Name
AT+FTPPUTNAME Set Upload File Name

AT+FTPPUTNAME=? OK
Response
+FTPPUTNAME: <value>
Read Command
AT+FTPPUTNAME? OK
Parameters
See Write Command
Response
Write Command
OK
AT+FTPPUTNAME=<va
lue>
+CME ERROR: <err>

Parameters
Max Response Time -
Reference Note
10.2.13AT+FTPPUTPATH Set Upload File Path
AT+FTPPUTPATH Set Upload File Path

AT+FTPPUTPATH=? OK
Response
+FTPPUTPATH: <value>
Read Command
AT+FTPPUTPATH? OK
Parameters
See Write Command
Response
OK
Write Command
AT+FTPPUTPATH=<val
+CME ERROR: <err>
ue>
Parameters
Max Response Time -
Reference Note
10.2.14AT+FTPGET Download File
AT+FTPGET Download File

AT+FTPGET=? OK
Response
Write Command If mode is 1 and it is a successful FTP get session:
AT+FTPGET=<mode>[, OK
<reqlength>]
+FTPGET: 1,1

If data transfer finished:

+FTPGET: 1,0
If mode is 1 and it is a failed FTP get session:

OK
+FTPGET: 1,<error>
If mode is 2:
+FTPGET: 2,<cnflength>
012345678…
OK
+CME ERROR: <err>
Parameters
<mode> 1 For opening FTP get session
2 For reading FTP download data.
<reqlength> Requested number of data bytes (1-1460)to be read
<cnflength> Confirmed number of data bytes to be read, which may be less
than <length>. 0 indicates that no data can be read.
<error> 61 Net error
62 DNS error
63 Connect error
64 Timeout
65 Server error
66 Operation not allow
70 Replay error
71 User error
72 Password error
73 Type error
74 Rest error
75 Passive error
76 Active error
77 Operate error
78 Upload error
79 Download error
80 Manual quit
Max Response Time 75 seconds(In case no response is received from server)
Note
Reference When "+FTPGET: 1,1" is shown, then use "AT+FTPGET=2,<reqlength>"
to read data. If the module still has unread data, "+FTPGET: 1,1" will be
shown again in a certain time.

10.2.15AT+FTPPUT Set Upload File
AT+FTPPUT Set Upload File

AT+FTPPUT=? OK
Response
If mode is 1 and it is a successful FTP get session:
OK
+FTPPUT: 1,1,<maxlength>

OK
+FTPPUT: 1,<error>
If mode is 2 and <reqlength> is not 0

+FTPPUT: 2,<cnflength>
…… //Input data
OK
+FTPPUT: 1,1,1360
Write Command
AT+FTPPUT=<mode>[, If mode is 2 and <reqlength> is 0, it will respond OK, and FTP session will
<reqlength>] be closed
OK
If data transfer finished.

+FTPPUT: 1,0

+CME ERROR: <err>
Parameters
<mode> 1 For opening FTP put session
2 For writing FTP upload data.
<reqlength> Requested number of data bytes(0-<maxlength>) to be
transmitted
<cnflength> Confirmed number of data bytes to be transmitted
<maxlength> The max length of data can be sent at a time. It depends on
the network status.
<error> See "AT+FTPGET"

Note
Reference
When "+FTPPUT: 1,1,<maxlength>" is shown, then use "AT+FTPPUT=2,
<reqlength>" to write data.
10.2.16AT+FTPDELE Delete Specified File in FTP Server
AT+FTPDELE Delete Specified File in FTP Server

Response
Test Command OK
AT+FTPDELE=? Parameters
Response
If successed:
OK
+FTPDELE: 1,0
If failed:
Execution Command
OK
AT+FTPDELE
+FTPDELE: 1,<error>

+CME ERROR: <err>
Parameters
Note
Reference
The file to be deleted is specified by the "AT+FTPGETNAME" and
"AT+FTPGETPATH" commands.
10.2.17AT+FTPSIZE Get the Size of Specified File in FTP Server
AT+FTPSIZE Get the Size of Specified File in FTP Server

Response
Test Command OK
AT+FTPSIZE=? Parameters

AT+FTPSIZE If successed:
OK
+FTPSIZE: 1,0,<size>
If failed:
OK
+FTPSIZE: 1,<error>,0

+CME ERROR: <err>
Parameters
<size> The file size. Unit: byte
Note
Reference
The file is specified by the "AT+FTPGETNAME" and "AT+FTPGETPATH"
commands.
10.2.18AT+FTPSTATE Get the FTP State
AT+FTPSTATE Get the FTP State

Response
Test Command OK
AT+FTPSTATE=? Parameters
Response
+FTPSTATE: <state>
OK
Execution Command
+CME ERROR: <err>
AT+FTPSTATE
Parameters
<state>
0 Idle
1 In the FTP session, including FTPGET, FTPPUT, FTPDELE and
FTPSIZE operation.
Max Response Time -
Reference Note

10.2.19AT+FTPEXTPUT Extend Upload File
AT+FTPEXTPUT Extend Upload File

AT+FTPEXTPUT=? OK
Response
If mode is 0 or 1
OK
If mode is 2
+FTPEXTPUT: <address>,<len>
…… //Input data
OK
Write Command
AT+FTPEXTPUT=<mod
+CME ERROR: <err>
e>[,<pos>,<len>,<time
Parameters
out>]
<mode> 0 use default FTPPUT method
1 use extend FTPPUT method
2 send data to RAM through serial port, then FTPPUT method
will get the data from RAM.
<pos> data offset address 0-300k
<len> data length 0-300k
<timeout> timeout value of serial port. 1000ms-1000000ms
<file name> File name length should less or equal 50 characters.
<err> See "AT+FTPGET"
Note
 When extend FTPPUT mode is activated, input data then execute
Reference
"AT+FTPPUT=1" to transmit, after session is complete, if successful, it
returns "+FTPPUT: 1,0", otherwise it returns "+FTPPUT: 1,<error>",
<error> see "AT+FTPGET".
10.2.20AT+FTPMKD Make Directory on the Remote Machine
AT+FTPMKD Make Directory on the Remote Machine


AT+FTPMKD=? OK
Response
If success:
OK
+FTPMKD: 1,0
If failed:
Execution Command
OK
AT+FTPMKD
+FTPMKD: 1,<error>

+CME ERROR: <err>
Parameters
Reference Note
The created folder is specified by the "AT+FTPGETPATH" command.
10.2.21AT+FTPRMD Remove Directory on the Remote Machine
AT+FTPRMD Remove Directory on the Remote Machine

AT+FTPRMD=? OK
Response
If success:
OK
+FTPRMD: 1,0
If failed:
Execution Command
OK
AT+FTPRMD
+FTPRMD: 1,<error>

+CME ERROR: <err>
Parameters


Reference Note
The removed folder is specified by the "AT+FTPGETPATH" command.
10.2.22AT+FTPLIST List Contents of Directory on the Remote Machine
AT+FTPLIST List Contents of Directory on the Remote Machine

AT+FTPLIST=? OK
Response
If mode is 1 and it is a successful FTP get session:
OK
+FTPLIST: 1,1
If data transfer is finished:

+FTPLIST: 1,0

OK
+FTPLIST: 1,<error>
Write Command
AT+FTPLIST=<mode>[, If mode is 2:
<reqlength>] +FTPLIST: 2,<cnflength>
012345678…
OK

+CME ERROR: <err>
Parameters
<mode>
1 For opening FTP get file list session
2 For reading FTP file list
<reqlength> Requested number of data bytes (1-1460) to be read
<cnflength> Confirmed number of data bytes to be read, which may be
less than <reqlength>. 0 indicates that no data can be read.
Reference Note
 When "+FTPLIST: 1,1" is shown, "AT+FTPLIST=2,<reqlength>" can

be used to read data. If the module still has unread data, "+FTPLIST:
1,1" will be shown again in a certain time.
 If using "AT+FTPGETPATH" to set a directory path, it will returned the
files contents under this directory; if set a file path, it will return the
information of the file specified.
10.2.23AT+FTPEXTGET Extend Download File
AT+FTPEXTGET Extend Download File

Response
Test Command OK
AT+FTPEXTGET=? Parameters
See Write Command
Response
+FTPEXTGET: <mode>,<length>
Read Command
OK
AT+FTPEXTGET?
Parameters
See Write Command
Response
If mode is 0:
OK
If mode is 1 and successfully download data:

OK
+FTPEXTGET: 1,0
Write Command If mode is 1 and failed to download data:

1) if mode is 0 or 1 OK
AT+FTPEXTGET=<mo
de> +FTPEXTGET: 1,<error>
3)if mode is 3
AT+FTPEXTGET=<mo If mode is 3 and successfully download data:
de>,<pos>,<len> +FTPEXTGET: 3,<length>
0123456…
OK
If <file name> is already exist in flash:
ERROR
Parameters
<mode> 0 use default FTPGET method.
1 open extend FTP get session and download data to RAM.
3 read the downloaded data from RAM, then output it to the
serial port.

<file name> File name length should less than or equal to 50 characters.
<pos> data offset should less than <length>.
<len> data length 0-300k.
<length> The length of the downloaded data from the remote machine.
Reference Note
 The data it can get is 300k at most.
10.2.24AT+FTPETPUT Upload File
AT+FTPETPUT Upload File

Response
Test Command
OK
AT+FTPETPUT=?
Parameters
See Write Command
Response
If mode is 1 and successfully open PUT session:
OK
+FTPETPUT: 1,1
If mode is 1 and failed to open PUT session:

OK
+FTPETPUT: 1,<error>
Write Command
If mode is 2:
AT+FTPETPUT=<mode
+FTPETPUT: 2,1
>
… //Input data
<ETX> //To notify the module that all data has been sent, switch
from data mode to command mode
OK

+FTPETPUT: 1,0
If data transfer failed:

+FTPETPUT: 1,<error>
Parameters

<mode> 1 For opening FTPETPUT session.

2 For writing FTP upload data.
<error> See "AT+FTPEXTGET"
Max Response Time -
Note
 The TCP/IP stack will only interpret an <ETX> character as the end of
the file to be transferred if it's not preceded by a <DLE> character. As a
Reference
consequence the attached host must send <ETX> characters preceded
by <DLE> characters and it must also code <DLE> characters in
<DLE><DLE>.
10.2.25AT+FTPETGET Download File
AT+FTPETGET Download File

Response
Test Command
OK
AT+FTPETGET=?
Parameters
See Write Command
Response
If mode is 1 and successfully open GET session:
OK
+FTPETGET: 1,1

0123456789…
<ETX> //To notify the user that all data transfer has been finished,
Write Command
switch from data mode to command mode.
AT+FTPETGET=<mode
>
+FTPETGET: 1,0
If mode is 1 and failed to download data:

OK
+FTPETGET: 1,<error>
Parameters
<mode> 1 Open FTPETGET session and download data.
<error> See "AT+FTPEXTGET"
Max Response Time -

Note
 Each <ETX> character present in the payload data of the FTP flow will
Reference
be coded by the TCP/IP stack on the serial port as <DLE><ETX>. Each
<DLE> character will be coded as <DLE><DLE>. The attached host
must then decode the FTP flow to remove these escape characters.
10.2.26AT+FTPQUIT Quit Current FTP Session
AT+FTPQUIT Quit Current FTP Session

AT+FTPQUIT=? OK
Response
If the current operation is GET method:

OK
+FTPGET: 1,80
Execution Command
AT+FTPQUIT If the current operation is PUT method:
OK
+FTPPUT: 1,80
If FTP is in idle state:

ERROR
Max Response Time -
Reference Note
10.2.27AT+FTPRENAME Rename the Specified File on the Remote Machine
AT+FTPRENAME Rename the Specified File on the Remote Machine

Response
Test Command OK
AT+FTRENAME=? Parameters
Response
Execution Command If success:
AT+FTPRENAME OK

+FTPRENAME: 1,0
If failed:
OK
+FTPRENAME: 1,<error>

+CME ERROR: <err>
Parameter
Max Response Time -
Note
 The file is specified by the "AT+FTPGETNAME" and
Reference "AT+FTPGETPATH" commands.
 The new file name is set by "AT+FTPPUTNAME" and
"AT+FTPPUTPATH" command.
10.2.28AT+FTPMDTM Get the Last Modification Timestamp of Specified File on the

Remote Machine
AT+FTPMDTM Get the Last Modification Timestamp of Specified File on the

Remote Machine
Response
Test Command OK
AT+FTPMDTM=? Parameters
Response
If success:
OK
+FTPMDTM: 1,0,<timestamp>
If failed:
Execution Command
OK
AT+FTPMDTM
+FTPMDTM: 1,<error>

+CME ERROR: <err>
Parameter

<timestamp> The last modification timestamp of the specified file.

Max Response Time -
Note
Reference The file is specified by the "AT+FTPGETNAME" and "AT+FTPGETPATH"
commands.

11 AT Command for NTP function
11.1 Overview
Command Description
AT+CNTPCID Set GPRS bearer profile’s ID
AT+CNTP Synchronize network time
11.2.1 AT+CNTPCID Set GPRS Bearer Profile’s ID
AT+CNTPCID Set GPRS Bearer Profile’s ID

Response
+ CNTPCID: (range of supporded <cid>s)
Test Command
AT+CNTPCID=? OK
Parameters
See Write Command
Response
+ CNTPCID: <cid>
Read Command
AT+CNTPCID? OK
Parameters
See Write Command
Response
OK
AT+CNTPCID=<cid> ERROR
Parameters
<cid> Bearer profile identifier, refer to AT+SAPBR
Max Response Time -

Reference Note
11.2.2 AT+CNTP Synchronize Network Time
AT+CNTP Synchronize Network Time

Response
+CNTP: (length of <ntp server>),(range of <time zone>),(range of <cid>),
(range of <mode>)
Test Command
AT+CNTP=?
OK
Parameter
See Write Command
Response
+ CNTP: <ntp sever>,<time zone>,<cid>,<mode>
Read Command
AT+CNTP? OK
Parameter
See Write Command
Response
OK
Parameter
<ntp server> NTP server’s url
<time zone> Local time zone, the range is (-47 to 48), in fact, time
Write Command zone range (-12 to 12), but taking into account that some countries and
AT+CNTP=<ntp regions will use half time zone, or even fourth time zone, so the entire
server>[,<time extended four time zones X, so that when the time zone of the input integers
zone>][,<cid>][,<mode are used, without the need for decimal. Time zone in front of the West if it is
>] a negative number indicates the time zone.
<cid> Bearer profile identifier, refer to AT+SAPBR
<mode> print network time on uart and set to local time
0 Just set network to localtime
1 Just output network time to AT port
2 Set network to localtime and output network time to AT port
Response
OK
+CNTP: <code>[,<time>]
Execution command Parameter
AT+CNTP <code> 1 Network time synchronization is successful
61 Network Error
62 DNS resolution error
63 Connection Erro
64 Service response error

65 Service Response Timeout

<time> Network time
Max Response Time -
Note
Reference  After successful synchronization time, you can use AT+CCLK to query
local time.

12 AT Commands for OneNet

Application
12.1 Overview
Command Description
AT+MIPLCREATE Create OneNet configuration
AT+MIPLDELETE Delete OneNet configuration
AT+MIPLOPEN Connect to OneNet
AT+MIPLADDOBJ Add object
AT+MIPLDELOBJ Delete object
AT+MIPLCLOSE Disconnect to OneNet
AT+MIPLNOTIFY Notify data to OneNet
AT+MIPLREADRSP Send response on read command
AT+MIPLWRITERSP Send response on write command
AT+MIPLEXECUTERSP Send response on execute command
AT+MIPLOBSERVERSP Send response on observe command
AT+MIPLDISCOVERRSP Send response on discover command
AT+MIPLPARAMETERRSP Send response on parameter command
AT+MIPLUPDATE Update registration
AT+MIPLVER Version of OneNet SDK
AT+MIPLBOOTSTRAP Bootstrap mode
+MIPLREAD Read request to user
+MIPLWRITE Write request to user
+MIPLEXECUTE Execute request to user
+MIPLOBSERVE Observe request to user
+MIPLDISCOVER Discover request to user
+MIPLPARAMETER Set parameter request to user
+MIPLEVENT Event indication to user

12.2.1 AT+MIPLCREATE Create OneNet configuration
AT+MIPLCREATE Create OneNet configuration

Response
+MIPLCREATE: <size>,<config>,<index>,<totalsize>,<flag>
Test Command
AT+MIPLCREATE=? OK
Parameters
See Write Command
Response
Execution Command <ref>
AT+MIPLCREATE
OK
Response
<ref>
Write Command OK
AT+MIPLCREATE=<siz Parameters
e>,<config>,<index>,<t <size> Current <config> size
otalsize>,<flag> <config> Config in hex format
<index> Current config index
<totalsize> Total config size
<flag> Indicate the input is over or not
Max Response Time -
Reference Note
12.2.2 AT+MIPLDELETE Delete OneNet configuration
AT+MIPLDELETE Delete OneNet configuration

Response
+MIPLDELETE: <ref>
Test Command
AT+MIPLDELETE=? OK
Parameters
See Write Command
AT+MIPLDELETE=<ref OK

> Parameters
<ref> Config id
Max Response Time -
Reference Note
12.2.3 AT+MIPLOPEN Connect to OneNet
AT+MIPLOPEN Connect to OneNet

Response
+MIPLOPEN: <ref>,<lifetime>,<param>
Test Command
AT+MIPLOPEN=? OK
Parameters
See Write Command
Response
OK
Write Command
Parameters
AT+MIPLOPEN=<ref>,<
<ref> Config id
lifetime>,<param>
<lifetime> Lifetime to update automatically
<param> Reserved
Max Response Time -
Reference Note
12.2.4 AT+MIPLADDOBJ Add object
AT+MIPLADDOBJ Add object

Response
+MIPLADDOBJ:
<ref>,<objectid>,<instancecount>,<instanceBitmap>,<attributeCount>
Test Command ,<actionCount>
AT+MIPLADDOBJ=?
OK
Parameters
See Write Command
AT+MIPLADDOBJ=<ref OK
>,<objectid>,<instance Parameters

count>,<instanceBitm <ref> Config id

ap>,<attributeCount>,< <objectid> Object id
actionCount> <instancecount> Count of instance
<instanceBitmap> Bitmap of instance
<attributeCount> Count of attribute resource
<actionCount> Count of action resource
Max Response Time -
Reference Note
12.2.5 AT+MIPLDELOBJ Delete Object
AT+MIPLDELOBJ Delete object

Response
+MIPLDELOBJ: <ref>,<objectid>
Test Command
AT+MIPLDELOBJ=? OK
Parameters
See Write Command
Response
Write Command OK
AT+MIPLDELOBJ=<ref Parameters
>,<objectid> <ref> Config id
<object> Object id
Max Response Time -
Reference
Note
12.2.6 AT+MIPLCLOSE Disconnect to OneNet
AT+MIPLCLOSE Disconnect to OneNet

Response
+MIPLCLOSE: <ref>
Test Command
AT+MIPLCLOSE=? OK
Parameters
See Write Command

AT+MIPLCLOSE=<ref> OK
Parameters
<ref> Config id
Max Response Time -
Reference Note
12.2.7 AT+MIPLNOTIFY Notify Data to OneNet
AT+MIPLNOTIFY Notify Data to OneNet

Response
+MIPLNOTIFY:
<ref>,<msgid>,<objectid>,<instanceid>,<resourceid>,<valuetype>,<le
Test Command n>,<value>,<index>,<flag>[,<ackid>]
AT+MIPLNOTIFY=?
OK
Parameters
See Write Command
Response
OK
Parameters
<ref> Config id
<objectid> Object id
<instanceid> Instance id
Write Command
<resourceid> Resource id
AT+MIPLNOTIFY=<ref>
<valuetype> Type of value
,<msgid>,<objectid>,<i
1 String
nstanceid>,<resourcei
2 Opaque
d>,<valuetype>,<len>,
3 Integer
<value>,<index>,<flag
4 Float
>[,<ackid>]
5 Bool
<len> Length
<value> Value string
<index> Index of current input
<ackid> Need ack or not
Max Response Time -
Reference
Note

12.2.8 AT+MIPLREADRSP Send Response on Read Command
AT+MIPLREADRSP Send Response on Read Command

Response
+MIPLREADRSP:
<ref>,<msgid>,<result>,<objectid>,<instanceid>,<resourceid>,<valuet
Test Command ype>,<len>,<value>,<index>,<flag>
AT+MIPLREADRSP=?
OK
Parameters
See Write Command
Response
OK
Parameters
<ref> Config id
<msgid> Message id
<result> Result
Write Command <objectid> Object id
AT+MIPLREADRSP=<r <instanceid> Instance id
ef>,<msgid>,<result>,< <resourceid> Resource id
objectid>,<instanceid> <valuetype> Type of value
,<resourceid>,<valuety 1 String
pe>,<len>,<value>,<in 2 Opaque
dex>,<flag> 3 Integer
4 Float
5 Bool
<len> Length
<value> Value string
<index> Index of current input
Max Response Time -
Reference
Note
12.2.9 AT+MIPLWRITERSP Send Response on Write Command
AT+MIPLWRITERSP Send Response on Write Command

AT+MIPLWRITERSP=? +MIPLWRITERSP: <ref>,<msgid>,<result>

OK
Parameters
See Write Command
Response
OK
Write Command
Parameters
AT+MIPLWRITERSP=<
<ref> Config id
ref>,<msgid>,<result>
<msgid> Message id
<result> Result
Max Response Time -
Reference
Note
12.2.10AT+MIPLEXECUTERSP Send Response on Execute Command
AT+MIPLEXECUTERSP Send Response on Execute Command

Response
+MIPLEXECUTERSP: <ref>,<msgid>,<result>
Test Command
AT+MIPLEXECUTERS
OK
P=?
Parameters
See Write Command
Response
Write Command OK
AT+MIPLEXECUTERS Parameters
P=<ref>,<msgid>,<res <ref> Config id
ult> <msgid> Message id
<result> Result
Max Response Time -
Reference
Note
12.2.11 AT+MIPLOBSERVERSP Send Response On Observe Command
AT+MIPLOBSERVERSP Send Response on Observe Command


AT+MIPLOBSERVERS +MIPLOBSERVERSP: <ref>,<msgid>,<result>

P=?
OK
Parameters
See Write Command
Response
Write Command OK
AT+MIPLOBSERVERS Parameters
P=<ref>,<msgid>,<res <ref> Config id
ult> <msgid> Message id
<result> Result
Max Response Time -
Reference
Note
12.2.12AT+MIPLDISCOVERRSP Send Response on Discover Command
AT+MIPLDISCOVERRSP Send Response on Discover Command

Response
+MIPLDISCOVERRSP: <ref>,<msgid>,<result>,<length>,<valuestring>
Test Command
AT+MIPLDISCOVERRS
OK
P=?
Parameters
See Write Command
Response
OK
Write Command
Parameters
AT+MIPLDISCOVERRS
<ref> Config id
P=<ref>,<msgid>,<res
<msgid> Message id
ult>,<length>,<valuestr
<result> Result
ing>
<length> Number of resourceid
<valuestring> Resource id string
Max Response Time -
Reference
Note
12.2.13AT+MIPLPARAMETERRSP Send Response on Parameter Command

AT+MIPLPARAMETERRSP Send Response on Parameter Command

Response
+MIPLPARAMETERRSP: <ref>,<msgid>,<result>
Test Command
AT+MIPLPARAMETER
OK
RSP=?
Parameters
See Write Command
Response
Write Command OK
AT+MIPLPARAMETER Parameters
RSP=<ref>,<msgid>,<r <ref> Config id
esult> <msgid> Message id
<result> Result
Max Response Time -
Reference
Note
12.2.14AT+MIPLUPDATE Update Registration
AT+MIPLUPDATE Update Registration

Response
+MIPLUPDATE: <ref>,<lifetime>,<flag>
Test Command
AT+MIPLUPDATE=? OK
Parameters
See Write Command
Response
OK
Write Command
Parameters
AT+MIPLUPDATE=<ref
<ref> Config id
>,<lifetime>,<flag>
<lifetime> Lifetime to update
<flag> Update with object update or not
Max Response Time -
Reference
Note
12.2.15AT+MIPLVER Version of OneNet SDK

AT+MIPLVER Version of OneNet SDK

Response
+MIPLVER: <version>
Read Command
AT+MIPLVER? OK
Parameters
<version> Version of SDK
Max Response Time -
Reference
Note
12.2.16AT+MIPLBOOTSTRAP Bootstrap Mode
AT+MIPLBOOTSTRAP Bootstrap Mode

Response
OK
Write Command
Parameters
AT+MIPLBOOTSTRAP
<mode> Bootstrap mode
=<mode>
0 Disable
1 Enable
Max Response Time -
Reference
Note
12.2.17+MIPLREAD Read Request to User
+MIPLREAD Read Request to User

Response
+MIPLREAD: <ref>,<msgid>,<objectid>,<instanceid>,<resourceid>
Parameters
<ref> Integer, OneNET instance returned by AT+MIPLCREATE
<msgid> Integer, message id
<objectid> Integer, object id
<instanceid> Integer, instance id, read all resources of all instances of
the object if instanceid equals -1
<resourceid> Integer, resource id, read all resources of the instance if
resourceid equals -1

12.2.18+MIPLWRITE Write Request to User
+MIPLWRITE Write Request to User

Response
+ MIPLWRITE:
<ref>,<msgid>,<objectid>,<instanceid>,<resourceid>,<valuetype>,<le
n>,<value>,<flag>,<index>
Parameters
<instanceid> Integer, instance id
<resourceid> Integer, resource id
<valuetype> Integer, write data value type
1 String
2 Opaque
3 Integer
0 Float
5 Bool
<len> Integer, write data length. It can be ommited, if valuetype is Integer
or Float, or Bool
<value> Integer, write data value
<flag> Integer, message flag
1 First message;
2 Middle message;
0 Last message
<index> Integer, message index, from 0 to 1024
12.2.19+MIPLEXECUTE Execute Request to User
+MIPLEXECUTE Execute Request to User

Response
+MIPLEXECUTE:
<ref>,<msgid>,<objectid>,<instanceid>,<resourceid>,<len>,<argumen
ts>
Parameters
<instanceid> Integer, instance id

<resourceid> Integer, resource id

<len> Integer, parameter length
<arguments> String, parameter string
12.2.20+MIPLOBSERVE Observe Request to User
+MIPLOBSERVE Observe Request to User

Response
+ MIPLOBSERVE:
<ref>,<msgid>,<flag>,<objectid>,<instanceid>,<resourceid>
Parameters
<flag> Integer, observe flag.
1 Indicates observe
0 Indicates cancel observe
<instanceid> Integer, instance id, observe all resources of all instances
of the object if instanceid equals -1
<resourceid> Integer, resource id, observe all resources of the instance if
12.2.21+MIPLDISCOVER Discover Request to User
+MIPLDISCOVER Discover Request to User

Response
+MIPLDISCOVER: <ref>,<msgid>,<objectid>
Parameters
12.2.22+MIPLPARAMETER Set Parameter Request to User
+MIPLPARAMETER Set Parameter Request to User

Response
+MIPLPARAMETER:

<ref>,<msgid>,<objectid>,<instanceid>,<resourceid>,<len>,<paramete
r>
Parameters
<instanceid> Integer, instance id, observe all resources of all instances
of the object if instanceid equals -1
<resourceid> Integer, resource id, observe all resources of the instance if
<len> Integer, parameter length
<parameter> String, parameter string, must start with "and end with"
pmin=xxx; pmax=xxx; gt=xxx; lt=xxx; stp=xxx
12.2.23+MIPLEVENT Event Indication to User
+MIPLEVENT Event Indication to User

Response
+MIPLEVENT: <ref>,<evtid>
Parameters
<evtid> Integer, event id
1 BOOTSTRAP_START
2 BOOTSTRAP_SUCCESS
3 BOOTSTRAP_FAILED
4 CONNECT_SUCCESS
5 CONNECT_FAILED
6 REG_SUCCESS
7 REG_FAILED
8 REG_TIMEOUT
9 LIFETIME_TIMEOUT
10 STATUS_HALT
11 UPDATE_SUCCESS
12 UPDATE_FAILED
13 UPDATE_TIMEOUT
14 UPDATE_NEED
15 UNREG_DONE
20 RESPONSE_FAILED
21 RESPONSE_SUCCESS
25 NOTIFY_FAILED
26 NOTIFY_SUCCESS

13 AT Commands for Telecom IOT

Application
13.1 Overview
Command Description
AT+SIMLCREATE Create configuration
AT+SIMLMODE Connection mode
AT+SIMLOPEN Connect to Telecom IOT
AT+SIMLSEND Send data to Telecom IOT
AT+SIMLCLOSE Disconnect to Telecom IOT
13.2.1 AT+SIMLCREATE Create Configuration
AT+SIMLCREATE Create Configuration

Response
+SIMLCREATE: <config>
Test Command
AT+SIMLCREATE=? OK
Parameters
See Write Command
Response
Write Command
OK
AT+SIMLCREATE=<co
Parameters
nfig>
<config> Config in hex format
Max Response Time -
Reference
Note

13.2.2 AT+SIMLMODE Connection Mode
AT+SIMLMODE Connection Mode

Response
+SIMLMODE: <mode>
Test Command
AT+SIMLMODE=? OK
Parameters
See Write Command
Response
OK
Write Command
Parameters
AT+SIMLMODE=<mod
<mode> Connection mode
e>
1 Other
2 China Telecom IOT
Max Response Time -
Reference
Note
13.2.3 AT+SIMLOPEN Connect to Telecom IOT
AT+SIMLOPEN Connect to Telecom IOT

Response
+SIMLOPEN: <lifetime>
Test Command
AT+SIMLOPEN=? OK
Parameters
See Write Command
Response
Write Command
OK
AT+SIMLOPEN=<lifeti
Parameters
me>
<lifetime> Reserved
Max Response Time -
Reference
Note

13.2.4 AT+SIMLSEND Send Data to Telecom IOT
AT+SIMLSEND Send Data to Telecom IOT

Response
+SIMLSEND: <data>,<flag>
Test Command
AT+SIMLSEND=? OK
Parameters
See Write Command
Response
OK
AT+SIMLSEND=<data> <data> String in hex format
,<flag> <flag>
0 Input over
1 Input not over
Max Response Time -
Reference
Note
13.2.5 AT+SIMLCLOSE Disconnect to Telecom IOT
AT+SIMLCLOSE Disconnect to Telecom IOT

Response
AT+SIMLCLOSE Parameters

Max Response Time -
Reference
Note

14 AT Commands for GNSS

Application
SIM7000 series modules provide GNSS AT command is as follows:
14.1 Overview
Command Description
AT+CGNSPWR GNSS Power Control
AT+CGNSINF GNSS Navigation Information Parsed From NMEA Sentences
AT+CGNSURC GNSS Navigation URC Report
AT+CGNSPORT GNSS NMEA Out Port Set
AT+CGNSCOLD GNSS Cold Start
AT+CGNSWARM GNSS Warm Start
AT+CGNSHOT GNSS Hot Start
AT+CGNSMOD GNSS Work Mode Set
AT+CGNSCFG GNSS NMEA Out Configure
AT+CGNSTST GNSS NMEA Data Output to AT Port
AT+CGNSXTRA GNSS XTRA Function Open
AT+CGNSCPY GNSS XTRA File Copy
AT+CGNSRTMS GNSS NMEA out frequency configure
AT+CGNSHOR Configure Positioning Desired Accuracy
AT+CGNSUTIPR Configure Baud Rate When NMEA Output From UART3
AT+CGNSNMEA Configure NMEA output sentences
AT+CGTP IZAT GNSS Configure
AT+CGNSSUPLCFG GNSS SUPL Configure
AT+CGNSSUPL GNSS SUPL Control
14.2.1 AT+CGNSPWR GNSS Power Control

AT+CGNSPWR GNSS Power Control

Response
+CGNSPWR: (list of supported <mode>s )
Test Command
AT+CGNSPWR=? OK
Parameters
See Write Command
Response
TA returns the current status of GNSS Power supply
+CGNSPWR: <mode>
Read Command
AT+CGNSPWR?
OK
Parameters
See Write Command
Response
OK
or
Write Command
ERROR
AT+CGNSPWR=<mod
Parameters
e>
<mode>
0 Turn off GNSS power supply
1 Turn on GNSS power supply
Max Response Time -
NMEA data will not out put to usb’s NMEA port when set AT+CGNSPWR=1
Reference
through uart port except config it by AT+CGNSCFG=1.
14.2.2 AT+CGNSINF GNSS Navigation Information Parsed From NMEA Sentences
AT+CGNSINF GNSS Navigation Information Parsed From NMEA Sentences

Response
Test Command OK
AT+CGNSINF=? Parameters
Response
+CGNSINF: <GNSS run status>,<Fix status>,<UTC date &
Time>,<Latitude>,<Longitude>,<MSL Altitude>,<Speed Over
Execution Command Ground>,<Course Over Ground>,<Fix
AT+CGNSINF Mode>,<Reserved1>,<HDOP>,<PDOP>,<VDOP>,<Reserved2>,<GNSS
Satellites in View>,<GNSS Satellites Used>,<GLONASS Satellites
Used>,<Reserved3>,<C/N0 max>,<HPA>,<VPA>

OK
Parameters
<GNSS run status>
0 GNSS off
1 GNSS on
<Fix status>
0 Not fixed position
1 Fixed position
See below table 15-1.
Max Response Time -
Reference
Table 15- 1: AT+CGNSINF return Parameters

Index Parameter Unit Range Length
1 GNSS run status -- 0-1 1
2 Fix status -- 0-1 1
yyyy: [1980,2039]
MM : [1,12]
yyyyMMddhhmm dd: [1,31]
3 UTC date & Time 18
ss.sss hh: [0,23]
mm: [0,59]
ss.sss:[0.000,60.999]
4 Latitude ±dd.dddddd [-90.000000,90.000000] 10
5 Longitude ±ddd.dddddd [-180.000000,180.000000] 11
6 MSL Altitude meters 8
7 Speed Over Ground Km/hour [0,999.99] 6
8 Course Over Ground degrees [0,360.00] 6
9 Fix Mode -- 0,1,2[1] 1
10 Reserved1 0
11 HDOP -- [0,99.9] 4
12 PDOP -- [0,99.9] 4
13 VDOP -- [0,99.9] 4
14 Reserved2 0
15 GNSS Satellites in View -- [0,99] 2
16 GPS Satellites Used -- [0,99] 2
17 GLONASS Satellites used -- [0,99] 2
18 Reserved3 0
19 C/N0 max dBHz [0,55] 2
20 HPA[2] meters [0,9999.9] 6
21 VPA[2] meters [0,9999.9] 6

Total：(94) chars
Note:
1. The range of <Fix Mode> depends on the GNSS chip used.
2. Reserved.
14.2.3 AT+CGNSURC GNSS Navigation URC Report
AT+CGNSURC GNSS Navigation URC Report

Response
+CGNSURC: (0-255)
Test Command
AT+CGNSURC=? OK
Parameters
See Write Command
Response
TA returns the current URC setting
+CGNSURC: <Navigation mode>
OK
Parameters
Read Command See Write Command
AT+CGNSURC? Unsolicited Result Code
+UGNSINF: <GNSS run status>,<Fix status>,<UTC date &
Time>,<Latitude>,<Longitude>,<MSL Altitude>,<Speed Over
Ground>,<Course Over Ground>,<Fix
Mode>,<Reserved1>,<HDOP>,<PDOP>,<VDOP>,<Reserved2>,<GNSS
Satellites in View>,<GNSS Satellites Used>,<GLONASS Satellites
Used>,<Reserved3>,<C/N0 max>,<HPA>,<VPA>
Response
OK
or
ERROR
AT+CGNSURC=<Navig <Navigation mode>:
ation mode> 0 Turn off navigation data URC report
1 Turn on navigation data URC report, and report every GNSS FIX
2 Turn on navigation data URC report, and report every 2 GNSS FIX
…
255 Turn on navigation data URC report, and report every 255 GNSS FIX
Max Response Time -

Note
Reference  Factory setting is "AT+CGNSURC=0".
 URC "+UGNSINF: "parameters are the same as "+CGNSINF:" return.
14.2.4 AT+CGNSPORT GNSS NMEA Out Port Set
AT+CGNSPORT GNSS NMEA Out Port Set

Response
+CGNSPORT: (list of supported <port>)
Test Command
AT+CGNSPORT=? OK
Parameters
See Write Command
Response
Read Command +CGNSPORT: <port>
AT+CGNSPORT?
OK
Response
OK
Write Command
+CME ERROR: <err>
AT+CGNSPORT=<port
Parameters
>
<port> Num of the port NMEA out
3 NMEA port
4 NONE
Max Response Time -
Reference Note
Module must reboot to make it effect if <port> value is changed.
14.2.5 AT+CGNSCOLD GNSS Cold Start
AT+CGNSCOLD GNSS Cold Start

AT+CGNSCOLD=? OK
Response
If AT+CGNSXTRA=0
Execution Command
OK
AT+CGNSCOLD
Else if AT+CGNSXTRA=1
OK

+CGNSXTRA: <mod>
Parameters
<mod>
0 Aid XTRA file success
1 XTRA file is not exist
2 XTRA file is not effective
Max Response Time -
Reference Note
14.2.6 AT+CGNSWARM GNSS Warm Start
AT+CGNSWARM GNSS Warm Start

AT+CGNSWARM=? OK
Response
Execution Command
AT+CGNSWARM
OK
Max Response Time -
Reference Note
14.2.7 AT+CGNSHOT GNSS Hot Start
AT+CGNSHOT GNSS Hot Start

AT+CGNSHOT=? OK
Response
Execution Command
AT+CGNSHOT
OK
Max Response Time -
Reference Note

14.2.8 AT+CGNSMOD GNSS Work Mode Set
AT+CGNSMOD GNSS Work Mode Set

Response
+CGNSMOD: (list of supported <gps mode>),(list of supported <glo
mode>s),(list of supported <bd mode>s),(list of supported <gal mode>s)
Test Command
AT+CGNSMOD=?
OK
Parameters
See Write Command
Response
Read Command +CGNSMOD: <gps mode>,<glo mode>,<bd mode>,<gal mode>
AT+CGNSMOD?
OK
Response
OK
+CME ERROR: <err>
Parameters
<GPS mode> GPS work mode
1 Start GPS NMEA out
Write Command
<glo mode> GLONASS work mode
AT+CGNSMOD=<gps
0 Stop GLONASS NMEA out
mode>,<glo
1 Start GLONASS NMEA out
mode>,<bd
<bd mode> BEIDOU work mode
mode>,<gal mode>
0 Stop BEIDOU NMEA out
1 Start BEIDOU NMEA out
2 BEIDOU outside of us
<ga mode> GALILEAN work mode
0 Stop GALILEAN NMEA out
1 Start GALILEAN NMEA out
2 GALILEAN outside of us
Max Response Time -
Reference Note
14.2.9 AT+CGNSCFG GNSS NMEA Out Configure
AT+CGNSCFG GNSS NMEA Out Configure

AT+CGNSCFG=? +CGNSCFG: (list of supported <mode>s)

OK
Parameters
See Write Command
Response
TA returns the current status of configure
+CGNSCFG: <mode>
Read Command
AT+CGNSCFG?
OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
Write Command
<mode>
AT+CGNSCFG=<mode
0 Turn off GNSS NMEA data output to USB’s NMEA port when set
>
AT+CGNSPWR=1/0 through UART
1 Turn on GNSS NMEA data output to USB’s NMEA port when set
AT+CGNSPWR=1/0 through UART
2 Turn on GNSS NMEA data output to UART3 port when set
AT+CGNSPWR=1/0
Max Response Time -
Note
Reference
This command only supported in UART port.
14.2.10AT+CGNSTST GNSS NMEA Data Output to AT Port
AT+CGNSTST GNSS NMEA Data Output to AT Port

Response
+CGNSTST: (0-1), (1-255)
Test Command
AT+CGNSTST=? OK
Parameters
See Write Command
Response
Read Command
+CGNSTST: <TST>
AT+CGNSTST?
OK

Parameters
See Write Command
Response
OK
or
ERROR
Write Command
Parameters
AT+CGNSTST=<TST>[,
<TST>
<cont>]
0 Turn off GNSS NMEA data out put to AT port
1 Turn on GNSS NMEA data out put to AT port
<cont> the number of NMEA data package
1-255
Max Response Time -
Reference
14.2.11 AT+CGNSXTRA GNSS XTRA Function Open
AT+CGNSXTRA GNSS XTRA Function Open

Response
+CGNSXTRA: (0-1)
Test Command
AT+CGNSXTRA=? OK
Parameters
See Write Command
Response
+CGNSXTRA: <enable>
Read Command
AT+CGNSXTRA?
OK
Parameters
See Write Command
Response
OK
or
Write Command
ERROR
AT+CGNSXTRA=<ena
Parameters
ble>
<enable>
0 Disable XTRA function
1 Enable XTRA function
AT+CGNSXTRA This command is used to query validate time of XTRA file. The XTRA file

exists if the download and copy are successful.

If XTRA file is not exist
ERROR
Else if XTRA file is exist
<validDurationHours>,<Inject gpsOneXTR GPS time>
OK
Parameters
<validDurationHours> Validate time of XTRA file,Unit is Hour. Defaut
value is 168.
<Inject gpsOneXTR GPS time> Download time of XTRA file.
Max Response Time -
Reference Note
14.2.12AT+CGNSCPY GNSS XTRA File Copy
AT+CGNSCPY GNSS XTRA File Copy

Response
Test Command OK
AT+CGNSCPY=? Parameters
Response
+CGNSCPY: <ret>
AT+CGNSCPY Parameters
<ret>
1 File not exist
0 Copy success
Max Response Time -
Reference
14.2.13AT+CGNSRTMS GNSS NMEA Out Frequency Configure
AT+CGNSRTMS GNSS NMEA Out Frequency Configure

AT+CGNSRTMS=? +CGNSRTMS: (list of supported <frequency>s)

OK
Parameters
See Read Command
Response
+CGNSRTMS: <frequency >
Read Command
OK
AT+CGNSRTMS?
Parameters
<frequency> GNSS NMEA Out Frequency, range is 50-1000.
Defaultvalue is 1000.
Max Response Time -
Reference
14.2.14AT+CGNSHOR Configure Positioning Desired Accuracy
AT+CGNSHOR Configure Positioning Desired Accuracy

Response
+CGNSHOR: (0-1800000)
Test Command
AT+CGNSHOR=? OK
Parameters
See Write Command
Response
+CGNSHOR: <acc>
Read Command
AT+CGNSHOR?
OK
Parameters
See Write Command
Response
OK
or
Write Command
ERROR
AT+CGNSHOR=<acc>
Parameters
<acc> Configure the positioning desired accuracy threshold in meters.
Range: 0-1800000 Default value is 50
Max Response Time -
Reference

14.2.15AT+CGNSUTIPR Configure Baud Rate When NMEA Output from UART3
AT+CGNSUTIPR Configure Baud Rate When NMEA Output from UART3

Response
+CGNSUTIPR: (9600,19200,38400,57600,115200)
Test Command
AT+CGNSUTIPR=? OK
Parameters
See Write Command
Response
+CGNSUTIPR: <ipr>
Read Command
AT+CGNSUTIPR?
OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
Write Command
<ipr> Baud rate when NMEA output from UART3.
AT+CGNSUTIPR=<ipr>
9600
19200
38400
57600
115200
Max Response Time -
Note
When GPS is started, set AT+CGNSUTIPR=<ipr> first, then use
Reference
AT+CGNSCFG=2 to configure UART3 output. After turning on GPS, you
can use the set baud rate output in UART3.
14.2.16AT+CGNSNMEA Configure NMEA Output Sentences
AT+CGNSNMEA Configure NMEA Output Sentences

Response
Test Command
+CGNSNMEA: (range of supported <nmea>s)
AT+CGNSNMEA=?

OK
Parameters
See Write Command
Response
+CGNSNMEA: <nmea>
Read Command
AT+CGNSNMEA? OK
Parameters
See Write Command
This command is used to configure NMEA output sentences which are
generated by the GPS One engine when position data is available.
Response
OK
or
ERROR
Parameters
<nmea> Range is 0-262143.
Each bit enables an NMEA sentence output as follows:
Bit 0 GPGGA (global positioning system fix data)
Bit 1 GPRMC (recommended minimum specific GPS/TRANSIT data)
Bit 2 GPGSV (GPS satellites in view)
Bit 3 GPGSA (GPS DOP and active satellites)
Bit 4 GPVTG (track made good and ground speed)
Write Command Bit 5 PQXFI (Global Positioning System Extended Fix Data.)
AT+CGNSNMEA=<nme Bit 6 GLGSV (GLONASS satellites in view GLONASS fixes only)
a> Bit 7 GNGSA (1. GPS/2. Glonass/3. GALILE DOP and Active
Satellites.)
Bit 8 GNGNS (fix data for GNSS receivers;output for
GPS,GLONASS,GALILEO)
Bit 9 Reserved
Bit 10 GAGSV (GALILEO satellites in view)
Bit 11 Reserved
Bit 12 Reserved
Bit 13 Reserved
Bit 14 Reserved
Bit 15 Reserved,
Bit 16 BDGSA/PQGSA (BEIDOU/QZSS DOP and active satellites)
Bit 17 BDGSV/PQGSV (BEIDOUQZSS satellites in view)
Set the desired NMEA sentence bit(s). If multiple NMEA sentence formats
are desired, "OR" the desired bits together.
Max Response Time -
Reference Note:
 Reserved default 0, set invalid.

14.2.17AT+CGTP IZAT GNSS Configure
AT+CGTP IZAT GNSS Configure

Response
Test Command OK
AT+CGTP=? Parameters
See Write Command
Response
+CGTP:
<feature_control>,<user_session_control>,<primary_svr_address>,<p
Read Command rimary_svr_port>,<secondary_svr_address>,<secondary_svr_port>
AT+CGTP?
OK
Parameters
See Write Command
Response
If successfully:
OK
If failed:
ERROR
Parameters
<feature_control>
0 GTP disabled
1 GTP enabled
If you want to use IZAT function,this value must be 1
<user_session_control>
0 Connection to the XTS is never permitted
1 Connection to the XTS is always permitted
Write Command
AT+CGTP=<feature_co
<primary_svr_address> the IP address of the primary GTP Server.
ntrol>
If you want to use IZAT function,this value must be gtp1.izatclout.net
<primary_svr_port> the port number of the primary
<secondary_svr_address> the IP address of the secondary GTP
Server.
If you want to use IZAT function,this value must be gtp2.izatclout.net
<secondary_svr_port> the port number of the primary
<latitude> Latitude (specified in WGS84 datum).
Type: Floating point
Units: Degrees
Range: -90.0 to 90.0
Positive values indicate northern latitude

Negative values indicate southern latitude

<longitude> Longitude (specified in WGS84 datum).
Units: Degrees
Range: -180.0 to 180.0
Positive values indicate eastern longitude
Negative values indicate western longitude
<date> Output format is yyyy-mm-dd
<time> UTC time output format is hh:mm:ss
<accuary> Horizontal position uncertainty (circular).
Units: Meters
Response
OK
Execution Command
AT+CGTP +GTPCELL: <latitude>,<longitude>,<date>,<time>,<accuary>
Parameters
See Write Command
Max Response Time -
Note
 Before all IZAT related operations, we should ensure network is
registered.
 IZAT flow
Step 1: Configure IZAT NV param by AT+CGTP=1.
Step 2: Query IZAT NV param by AT+CGTP?
Step 3: Start IZAT location by AT+CGTP
 AT command example
//Query IZAT NV set
AT+CGTP?
+CGTP: 1,1,gtp1.izatcloud.net,443,gtp2.izatcloud.net,443
Reference
OK
//If query result is not this , need set it
AT+CGTP=1
OK
// Start IZAT location
AT+CGTP
OK
+GTPCELL:
32.943878,-117.214508,2019-08-23,17:28:03,1330.200928

14.2.18AT+CGNSSUPLCFG GNSS SUPL Configure
AT+CGNSSUPLCFG GNSS SUPL Configure

Response
+CGNSSUPLCFG: "APN","SUPLURL",(0-31),(1-4),(0-1)
Test Command
AT+CGNSSUPLCFG=? OK
Parameters
See Write Command
Response
+CGNSSUPLCFG: <APN>,<URL>,<SRV>,<PDN>,<SECURITY>
Read Command
AT+CGNSSUPLCFG? OK
Parameters
See Write Command
Response
OK
or
ERROR
Parameters
<APN> APN name
<SUPLURL> Server address url
<SRV> Serving systems type
Write Command Bit 0 CDMA
AT+CGNSSUPLCFG=< Bit 1 HDR
APN>,<SUPLURL>,<S Bit 2 GSM
RV>,<PDN>,<SECURIT Bit 3 WCDMA
Y> Bit 4 LTE
<PDN>
1 IPV4
2 IPV6
3 IPV4V6
4 PPP
<SECURITY>
0 Disables security
1 Enables security
Max Response Time -
Reference Note

14.2.19AT+CGNSSUPL GNSS SUPL Control
AT+CGNSSUPL GNSS SUPL Control

Response
+CGNSSUPL: (list of supported <mode>s)
Test Command
AT+CGNSSUPL=? OK
Parameters
See Write Command
Response
+CGNSSUPL: <mode>
Read Command
AT+CGNSSUPL? OK
Parameters
See Write Command
Response
OK
or
Write Command
ERROR
AT+CGNSSUPL=<mod
Parameters
e>
<mode>
0 Turn off GNSS SUPL
1 Turn on GNSS SUPL
Max Response Time -
Reference Note

15 AT Commands for File System
15.1 Overview
Command Description
AT+CFSINIT Get Flash Data Buffer
AT+CFSWFILE Write File to the Flash Buffer Allocated by CFSINIT
AT+CFSRFILE Read File from Flash
AT+CFSDFILE Delete the File from the Flash
AT+CFSGFIS Get File Size
AT+CFSREN Rename a file
AT+CFSGFRS Get the size of file system
AT+CFSTERM Free the Flash Buffer Allocated by CFSINIT
AT+CBAINIT Initialize the ap backup file system
AT+CBALIST Set the files which want to backup
AT+CBAPPS Start to backup ap file system allocated by CBAINIT and CBALIST
AT+CBART Restore the file into ap file system
15.2.1 AT+CFSINIT Get Flash Data Buffer
AT+CFSINIT Get Flash Data Buffer

Response
OK
or
AT+CFSINIT or
+CME ERROR: <err>
Parameters

Max Response Time -

Reference Note
15.2.2 AT+CFSWFILE Write File to the Flash Buffer Allocated by CFSINIT
AT+CFSWFILE Write File to the Flash Buffer Allocated by CFSINIT

Response
+CFSWFILE: (0-3),"fileName",(0-1),(1-10240),(100-10000)
Test Command
AT+CFSWFILE=? OK
Parameters
See Write Command
Response
OK
or
ERROR
or
+CME ERROR: <err>
Parameters
<index>
Directory of AP filesystem:
Write Command 0 "/custapp/"
AT+CFSWFILE=<index 1 "/fota/"
>,<file 2 "/datatx/"
name>,<mode>,<file 3 "/customer/"
size>,<input time> <file name>
File name length should less or equal 50 characters
<mode>
0 If the file already existed, write the data at the beginning of the
file.
1 If the file already existed, add the data at the end of the file.
<file size>
File size should be less than 10240 bytes.
<input time> Millisecond, should send file during this period or you can’t
send file when timeout. The value should be less than 10000 ms.
Max Response Time -
Reference Note

15.2.3 AT+CFSRFILE Read File from Flash
AT+CFSRFILE Read File from Flash

Response
+CFSRFILE: (0-3),"fileName",(0-1),(1-10240),(0-filesize)
Test Command
AT+CFSRFILE=? OK
Parameters
See Write Command
Response
OK
or
ERROR
or
+CME ERROR: <err>
Parameters
<index>
0 "/custapp/"
Write Command 1 "/fota/"
AT+CFSRFILE=<index 2 "/datatx/"
>,<file 3 "/customer/"
name>,<mode>,<file <file name>
size>,<position> File name length should be less than or equal to 50 characters,
<mode>
0 Read data at the beginning of the file .
1 Read data at the <position> of the file .
<file size>
The size of the file that you want to read should be less than 10240.
<position> The starting position that will be read in the file.
When <write mode>=0, <position> is invalid. Read data from the beginning
to the end of the file.
When <write mode>=1, <position> is valid. Read data from the <position> to
the end of the file.
Max Response Time -
Reference Note
15.2.4 AT+CFSDFILE Delete the File from the Flash
AT+CFSDFILE Delete the File from the Flash

Response
+CFSDFILE: (0-3),"fileName"
Test Command
AT+CFSDFILE=? OK
Parameters
See Write Command
Response
OK
or
ERROR
or
+CME ERROR: <err>
AT+CFSDFILE=<index <index>
>,<file name> Directory of AP filesystem:
0 "/custapp/"
1 "/fota/"
2 "/datatx/"
3 "/customer/"
<file name>
File name length should be less than or equal to 50 characters.
Max Response Time -
Reference Note
15.2.5 AT+CFSGFIS Get File Size
AT+CFSGFIS Get File Size

Response
+CFSGFIS: (0-3),"fileName"
Test Command
AT+CFSGFIS=? OK
Parameters
See Write Command
Response
ERROR
Write Command or
AT+CFSGFIS=<index>, +CME ERROR: <err>
<file name> or
+CFSGFIS: <n>

OK
Parameters
<file name>
<n> File size
<index>
0 "/custapp/"
1 "/fota/"
2 "/datatx/"
3 "/customer/"
Max Response Time -
Reference Note
15.2.6 AT+CFSREN Rename a File
AT+CFSREN Rename a File

Response
+CFSREN: (0-3),"old_name","new_name"
Test Command
AT+CFSREN=? OK
Parameters
See Write Command
Response
OK
or
ERROR
or
+CME ERROR: <err>
Parameters
Write Command
<index>
AT+CFSREN=<index>,
<old file name>,<new
0 "/custapp/"
file name>
1 "/fota/"
2 "/datatx/"
3 "/customer/"
<old file name>
<new file name>


Max Response Time -
Reference Note
15.2.7 AT+CFSGFRS Get the Size of File System
AT+CFSGFRS Get the Size of file system

Response
ERROR
or
+CME ERROR: <err>
Read Command or
AT+CFSGFRS? +CFSGFRS: <n>
OK
Parameters
<n> the size of file system
Max Response Time -
Reference Note
15.2.8 AT+CFSTERM Free the Flash Buffer Allocated by CFSINIT
AT+CFSTERM Free the Flash Buffer Allocated by CFSINIT

Response
OK
or
Execution Command
ERROR
AT+CFSTERM
or
+CME ERROR: <err>
Parameters
Max Response Time -
Reference Note

15.2.9 AT+CBAINIT Initialize the AP Backup File System
AT+CBAINIT Initialize the AP Backup File System

Response
OK
AT+CBAINIT ERROR
or
+CME ERROR: <err>
Reference Note
15.2.10AT+CBALIST Set the files Which Want to Backup
AT+CBALIST Set the Files Which Want to Backup

Response
+CBALIST: <index>,<filename>
Read Command
AT+CBALIST? OK
Parameters
See Write Command
Response
OK
AT+CBALIST=<index>, Parameters
<filename> <index> 0-9 The file index.
10 Disable log
11 Enable log
<file name>File name length should less than or equal to 80 characters.
Max Response Time
Reference Note

15.2.11 AT+CBAPPS Start to Backup AP File System Allocated by CBAINIT and

CBALIST
AT+CBAPPS Start to Backup AP File System Allocated by CBAINIT and CBALIST

Response
OK
AT+CBAPPS ERROR
or
+CME ERROR: <err>
Reference Note
15.2.12AT+CBART Restore the File into AP File System
AT+CBART Restore the File into AP File System

Response
OK
or
AT+CBART or
+CME ERROR: <err>
Parameters

Reference Note
The files should have been backup into ap file system.

16 AT Commands for SIM Application

Toolkit
16.1 Overview
Command Description
AT+STIN SAT indication
AT+STGI Get SAT information
AT+STGR SAT respond
AT+STK STK switch
16.2.1 AT+STIN SAT Indication
AT+STIN SAT Indication

Response
Test Command OK
AT+STIN=? Parameters
See Read Command
Response
+STIN: <cmd_id>
OK
If the current proactive command has been changed:
Read Command + STIN: <cmd_id>
AT+STIN? Parameters
<cmd_id> Indicate the type of proactive command issued.
21 Display text
22 Get inkey
23 Get input
24 Select item

25 Set up menu
Max Response Time -
Reference Notification that application will return to main menu automatically if user
doesn’t do any action in 2 minutes.
16.2.2 AT+STGI Get SAT Information
AT+STGI Get SAT Information

Response
Test Command OK
AT+STGI=? Parameters
See Write Command
Response
If <cmd_id>=21:
+STGI:21,<prio>,<clear_mode>,<text_len>,<text>
OK
If <cmd_id>=22:
+STGI:22,<rsp_format>,<help>,<text_len>,<text>
OK
If <cmd_id>=23:
+STGI:23,<rsp_format>,<max_len>,<min_len>,<help>,<show><text_le
n>,<text>
Write Command
AT+STGI=<cmd_id>
OK
If <cmd_id>=24:
+STGI:24,<help>,<softkey>,<present>,<title_len>,<title><item_num>
+STGI:24,<item_id>,<item_len>,<item_data>
[…]
OK
If <cmd_id>=25:
+STGI:25,<help>,<softkey>,<title_len>,<title><item_num>
+STGI:25,<item_id>,<item_len>,<item_data>
[…]

OK
or
ERROR
Parameters
<cmd_id> See AT+STIN.
<prio> Priority of display text.
0 Normal priority
1 High priority
<clear_mode>
0 Clear after a delay
1 Clear by user
<text_len> Length of text
<rsp_format>
0 SMS default alphabet
1 YES or NO
2 Numerical only
3 UCS2
<help>
0 Help unavailable
1 Help available
<max_len> Maximum length of input
<min_len> Minimum length of input
<show>
0 Hide input text
1 Display input text
<softkey>
0 No softkey preferred
1 Softkey preferred
<present> Menu presentation format available for select item
0 Presentation not specified
1 Data value presentation
2 Navigation presentation
<title_len> Length of title
<item_num> Number of items in the menu
<item_id> Identifier of item
<item_len> Length of item
<title> Title in ucs2 format
<item_data> Content of the item in ucs2 format
<text> Text in ucs2 format
Max Response Time -
Regularly this command is used upon receipt of an URC "+STIN" to request
Reference the parameters of the proactive command. Then the TA is expected to
acknowledge the AT+STGI response with AT+STGR to confirm that the
proactive command has been executed.

16.2.3 AT+STGR SAT Respond
AT+STGR SAT respond

Response
Test Command OK
AT+STGR=? Parameters
See Write Command
Response
OK
or
ERROR
Parameters
<cmd_id> Identifier of proactive command.
22 Get inkey
23 Get input
24 Select item
25 Set up menu
83 Session end by user
84 Go backward
<data>
If <cmd_id>=22:
Input a character
Write Command If <cmd_id>=23:
AT+STGR=<cmd_id>[, Input a string.
<data>] If <rsp_format> is YES or NO, input of a character in case of ANSI
character set requests one byte, e.g. "Y".
If <rsp_format> is numerical only, input the characters in decimal
number, e.g. "123".
If <rsp_format> is UCS2, requests a 4 byte string, e.g. "0031".
<rsp_format> refer to the response by AT+STGI=23.
If <cmd_id>=24:
Input the identifier of the item selected by user.
If <cmd_id>=25:
Input the identifier of the item selected by user.
If <cmd_id>=83:
<data>Ignore
Note: It could return main menu during proactive command id is not 22
or 23.
If <cmd_id>=84:
<data> Ignore
Max Response Time -

Note
Reference
16.2.4 AT+STK STK Switch
AT+STK STK Switch

Response
Test Command OK
AT+STK=? Parameters
See Write Command
Response
+STK: <value>
Read Command
AT+STK? OK
Parameters
See Write Command
Response
OK
or
Write Command ERROR
AT+STK=<value> Parameters
<value>
0 Disable STK
1 Enable STK
Max Response Time -
Reference
Note

17 AT Commands for SSL Application
17.1 Overview of AT Commands for SSL Application
Command Description
AT+CSSLCFG Configure SSL parameters of context identifier
17.2 Detailed Descriptions of AT Commands for SSL Application
17.2.1 AT+CSSLCFG Configure SSL Parameters of Context Identifier
AT+CSSLCFG Configure SSL Parameters of Context Identifier

Response
+CSSLCFG: "sslversion",(0-5),(0-5)
+CSSLCFG:
"ciphersuite",(0-5),(0-7),(0x008A,0x008B,0x008C,0x008D,0x00A8,0x00
A9,0x00AE,0x00AF,0x002F,0x0033,0x0035,0x0039,0xC02A,0xC02B,0x
C02C,0xC02D,0xC02E,0xC02F,0xC030,0xC031,0xC032,0xC09C,0xC09
D,0xC09E,0xC09F,0xC0A0,0xC09F,0xC0A1,0xC0A2,0xC0A3,0xCC13,0x
CC14,0xCC15)
Test Command
+CSSLCFG: "ignorertctime",(0-5),(0-1)
AT+CSSLCFG=?
+CSSLCFG: "protocol",(0-5),(1-2)
+CSSLCFG: "sni",(0-5),<servername>
+CSSLCFG: "ctxindex",(0-5)
+CSSLCFG: "convert",(1-3),(<cname>,[<keyname>[,<passkey>]])
OK
Parameters
See Write Command
Response
Read Command
OK
AT+CSSLCFG?
Parameters

See Write Command

Response
OK
If failed:
+CME ERROR: <err>
Parameters
Write Command
<ctxindex> (0-5)
AT+CSSLCFG="sslver
<sslversion>
sion",<ctxindex>,<sslv
0 QAPI_NET_SSL_PROTOCOL_UNKNOWN
ersion>
1 QAPI_NET_SSL_PROTOCOL_TLS_1_0
4 QAPI_NET_SSL_PROTOCOL_DTLS_1_0
5 QAPI_NET_SSL_PROTOCOL_DTLS_1_2
Response
OK
If failed:
+CME ERROR: <err>
Parameters
<ctxindex> (0-5)
<cipher_index> (0-7)
<ciphersuite>
0x008A QAPI_NET_TLS_PSK_WITH_RC4_128_SHA
0x008B QAPI_NET_TLS_PSK_WITH_3DES_EDE_CBC_SHA
0x008C QAPI_NET_TLS_PSK_WITH_AES_128_CBC_SHA
0x008D QAPI_NET_TLS_PSK_WITH_AES_256_CBC_SHA
0x00A8 QAPI_NET_TLS_PSK_WITH_AES_128_GCM_SHA256
0x00A9 QAPI_NET_TLS_PSK_WITH_AES_256_GCM_SHA384
AT+CSSLCFG="cipher
0x00AE QAPI_NET_TLS_PSK_WITH_AES_128_CBC_SHA256
suite",<ctxindex>,<cip
0x00AF QAPI_NET_TLS_PSK_WITH_AES_256_CBC_SHA384
her_index>,<ciphersuit
0x002F QAPI_NET_TLS_RSA_WITH_AES_128_CBC_SHA
e>
0x0033 QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CBC_SHA
0x0035 QAPI_NET_TLS_RSA_WITH_AES_256_CBC_SHA
0x0039 QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
0x003C QAPI_NET_TLS_RSA_WITH_AES_128_CBC_SHA256
0x003D QAPI_NET_TLS_RSA_WITH_AES_256_CBC_SHA256
0x0067 QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
0x006B QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
0x009C QAPI_NET_TLS_RSA_WITH_AES_128_GCM_SHA256
0x009D QAPI_NET_TLS_RSA_WITH_AES_256_GCM_SHA384
0x009E QAPI_NET_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
0x009F QAPI_NET_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
0xC004 QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
0xC005 QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
0xC009 QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

0xC00A QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
0xC00E QAPI_NET_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
0xC00F QAPI_NET_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
0xC013 QAPI_NET_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
0xC014 QAPI_NET_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
0xC023
QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
0xC024
QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
0xC025 QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
0xC026 QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
0xC027 QAPI_NET_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
0xC028 QAPI_NET_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
0xC029 QAPI_NET_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
0xC02A QAPI_NET_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
0xC02B
QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
0xC02C
QAPI_NET_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
0xC02D
QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
0xC02E
QAPI_NET_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
0xC02F QAPI_NET_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
0xC030 QAPI_NET_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
0xC031 QAPI_NET_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
0xC032 QAPI_NET_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
0xC09C QAPI_NET_TLS_RSA_WITH_AES_128_CCM
0xC09D QAPI_NET_TLS_RSA_WITH_AES_256_CCM
0xC09E QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CCM
0xC09F QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CCM
0xC0A0 QAPI_NET_TLS_RSA_WITH_AES_128_CCM_8
0xC0A1 QAPI_NET_TLS_RSA_WITH_AES_256_CCM_8
0xC0A2 QAPI_NET_TLS_DHE_RSA_WITH_AES_128_CCM_8
0xC0A3 QAPI_NET_TLS_DHE_RSA_WITH_AES_256_CCM_8
0xCC13
QAPI_NET_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA25
6
0xCC14
QAPI_NET_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA
256
0xCC15
QAPI_NET_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
AT+CSSLCFG="ignore Response
rtctime",<ctxindex>,<i OK
gnorertctime> If failed:

+CME ERROR: <err>

Parameters
<ctxindex> (0-5)
<ignorertctime>
0 Do not ignore the RTC time
1 Ignore the RTC time
Response
OK
If failed:
AT+CSSLCFG="protoc +CME ERROR: <err>
ol",<ctxindex>,<protoc Parameters
ol> <ctxindex> (0-5)
<protocol>
1 QAPI_NET_SSL_TLS_E
2 QAPI_NET_SSL_DTLS_E
Response
+CSSLCFG:
<ctxindex>,<sslversion>,<ciphersuite>,<ignorertctime>,<protocol>,<s
ni>
AT+CSSLCFG="ctxind
ex",<ctxindex> OK
If failed:
+CME ERROR: <err>
Parameters
See other commands
Response
OK
If failed:
+CME ERROR: <err>
Parameters
<ssltype>
AT+CSSLCFG="conver
1 QAPI_NET_SSL_CERTIFICATE_E
t",<ssltype>,<cname>[,
2 QAPI_NET_SSL_CA_LIST_E
<keyname>[,<passkey
3 QAPI_NET_SSL_PSK_TABLE_E
>]]
<cname> String type (string should be included in quotation marks): name
of cert file
<keyname> String type (string should be included in quotation
marks):name of key file
<passkey> String type (string should be included in quotation
marks):value of passkey
Response
AT+CSSLCFG="sni",< OK
ctxindex>,<servernam If failed:
e> +CME ERROR: <err>
Parameters

<ctxindex> (0-5)
<servername> String type.Server Name Indication.SNI addresses this
issue by having the client send the name of the virtual domain as part of the
TLS negotiation.
Max Response Time -
Reference Note

18 AT Commands for TCP/UDP

Application
18.1 Overview
Command Description
AT+CACID Set TCP/UDP identifier
AT+CASSLCFG Set SSL certificate and timeout parameters
AT+CAOPEN Open a TCP/UDP connection
AT+CASERVER Open a TCP/UDP Server
AT+CASEND Send data via an established connection
AT+CARECV Receive data via an established connection
AT+CAACK Query Send Data Information
AT+CASTATE Query TCP/UDP Connection State
AT+CACLOSE Close a TCP/UDP connection
AT+CACFG Configure transparent transmission parameters
AT+CASWITCH Switch to transparent transport mode
18.2.1 AT+CACID Set TCP/UDP Identifier
AT+CACID Set TCP/UDP Identifier

Response
+CACID: (range of supported <cid>s)
Test Command
AT+CACID=? OK
Parameters
See Write Command

AT+CACID? [+CACID: <cid>]
OK
Parameters
See Write Command
Response
OK
AT+CACID=<cid> +CME ERROR: <err>
Parameters
<cid> TCP/UDP identifier
Max Response Time -
Reference Note
18.2.2 AT+CASSLCFG Set SSL Certificate and Timeout Parameters
AT+CASSLCFG Set SSL Certificate and Timeout Parameters

Response
+CASSLCFG: (range of supported <cid>s),"cacert",<caname>
+CASSLCFG: (range of supported <cid>s),"clientcert",<certname>
+CASSLCFG: (range of supported <cid>s),"psktable",<pskname>
+CASSLCFG: (range of supported <cid>s),"timeout",(0-65535)
+CASSLCFG: (range of supported <cid>s),"ssl",(0,1)
Test Command
+CASSLCFG: (range of supported <cid>s),"crindex",(0,5)
AT+CASSLCFG=?
+CASSLCFG: (range of supported <cid>s),"localport",(0-65536)
+CASSLCFG: (range of supported <cid>s),"protocol",(0,1)
OK
Parameters
See Write Command
Response
If <cid> has been set by AT+CACID:
+CASSLCFG: <cid>
cacert:<caname>
Read Command clientcert:<certname>
AT+CASSLCFG? psktable:<pskname>
timeout:<timeout>
ssl:<ssl>
crindex:<crindex>
localport:<localport>

protocol:<protocol>
OK
If no <cid> has been set by AT+CACID:
OK
Parameter
See Write Command
Response
OK
+CME ERROR: <err>
Write Command
Parameters
AT+CASSLCFG=<cid>,
<cid> TCP/UDP identifier, see AT+CACID
"cacert",<caname>
<caname> Alphanumeric ASCII text string up to 64 characters. Root
certificate name that has been configured by AT+CSSLCFG.
Note: If the root certificate is empty, module will trust all certificates as
default.
Response
OK
AT+CASSLCFG=<cid>,
+CME ERROR: <err>
"clientcert",<certname
Parameters
>
<cid> see AT+CACID
<certname> Alphanumeric ASCII text string up to 64 characters. Client
certificate name that has been configured by AT+CSSLCFG.
Response
OK
+CME ERROR: <err>
AT+CASSLCFG=<cid>,
Parameters
"psktable",<pskname>
<cid> see AT+CACID
<pskname> Alphanumeric ASCII text string up to 64 characters. PSK
table name that has been configured by AT+CSSLCFG.
File content format is <identity>:<hex string>.
Response
OK
+CME ERROR: <err>
AT+CASSLCFG=<cid>,
Parameters
"ssl",<sslFlag>
<cid> see AT+CACID
<sslFlag> Interger
0 Not support SSL
1 Support SSL
AT+CASSLCFG=<cid>, Response
"crindex",<crindex> OK


+CME ERROR: <err>
Parameters
<cid> see AT+CACID
<ctxindex> The identifier of SSL configurations, see AT+CSSLCFG.
Response
OK
+CME ERROR: <err>
AT+CASSLCFG=<cid>,
Parameters
"protocol",<crindex>
<cid> see AT+CACID
<protocol> Interger
0 TCP
1 UDP
Max Response Time -
Reference Note
18.2.3 AT+CAOPEN Open a TCP/UDP Connection
AT+CAOPEN Open a TCP/UDP Connection

Response
+CAOPEN: (range of supported <cid>s),<server>,(1-65535)
Test Command
AT+CAOPEN=? OK
Parameters
See Write Command
Response
If <cid> has been set by AT+CACID:
+CAOPEN: <cid>,<conn_type>,<server>,<port>
Read Command
OK
AT+CAOPEN?
If no <cid> has been set by AT+CACID:
OK
Parameter
See Write Command
Response
Write Command
If <asyncOpen_enable> not set or set 0.
AT+CAOPEN=<cid>[,<
+CAOPEN: <cid>,<result>
conn_type>],<server>,
<port>
OK

Otherwise
OK
+CAOPEN: <cid>,<result>
+CME ERROR: <err>
Parameters
<cid> see AT+CACID
<conn_type> String type. Transfer type. IPV4 or IPV6 address can be
automatically identified on the client.
"TCP"
"UDP"
<server> Alphanumeric ASCII text string up to 64 characters.Server IP
address or host name.
<port> Interger. Server port.
<result>
0 Success
1 Socket error
2 No memory
3 Connection limit
4 Parameter invalid
6 Invalid IP address
7 Not support the function
12 Can’t bind the port
13 Can’t listen the port
20 Can’t resolv the host
21 Network not active
23 Remote refuse
24 Certificate’s time expired
25 Certificate’s common name does not match
26 Certificate’s common name does not match and time expired
27 Connect failed
Max Response Time -
Note
Reference
After open a connection successfully, if module receives data, it will report
"+CADATAIND: <cid>" to remind user to read data.
18.2.4 AT+CASERVER Open a TCP/UDP Server
AT+CASERVER Open a TCP/UDP Server

AT+CASERVER=? +CASERVER: (range of supported <cid>s),(list of supported

<conn_type>s),(range of supported <port>s)
OK
AT+CASERVER? [+CASERVER: <cid>,<conn_type>,<port>
]
OK
AT+CASERVER<cid>,< +CASERVER: <cid>,<result>
conn_type>,<port>
OK
+CME ERROR: <err>
Max Response Time -
Reference
Defined Values
<conn_type> Transfer type
"TCP"
"TCP6"
"UDP"
"UDP6"
<port> Integer. Server port.
<result> 0 Success
1 Socket error
2 No memory
3 Connection limit
4 Parameter invalid
6 Invalid IP address
7 Not support the function
12 Can’t bind the port
13 Can’t listen the port
20 Can’t resolv the host
21 Network not active
23 Remote refuse
24 Certificate’s time expired
25 Certificate’s common name does not match
26 Certificate’s common name does not match and time expired
27 Connect failed error
NOTE

 After a client access, it will report that.

+CANEW: <server_cid>,<client_cid>,<client_ip>,<client_port>
18.2.5 AT+CASEND Send Data via an Established Connection
AT+CASEND Send Data via an Established Connection

Response
+CASEND: (range of supported <cid>s),(range of supported
<datalen>),(range of supported <inputtime>)
Test Command
AT+CASEND=?
OK
Parameters
See Write Command
AT+CASEND=<cid> +CASEND: <leftsize>
OK
+CME ERROR: <err>
Response
+CASEND: <cid>,<datalen>
…….. //Input data
OK
+CASEND: <cid>,<result>,<sendlen>
Write Command
+CME ERROR: <err>
AT+CASEND=<cid>,<d
Parameters
atalen>[,inputtime]
<cid> see AT+CACID
<datalen> Requested number of data bytes to be transmitted
<inputtime> Millisecond, should input data during this period or you can’t
input data when timeout.
<sendlen> Data bytes that has been sent successfully
<result> see AT+CAOPEN
Max Response Time -
Note
Reference Set the input time that input data during this period or you can’t input data
when timeout. The default inputtime is 5000ms.

18.2.6 AT+CARECV Receive Data via an Established Connection
AT+CARECV Receive Data via an Established Connection

Response
+CARECV: (range of supported <cid>s),(range of supported <readlen>)
Test Command
AT+CARECV=? OK
Parameters
See Write Command
Response
+CARECV: <cid>,<recvlen>
……. //output data
OK
Write Command
AT+CARECV=<cid>,<r
+CME ERROR: <err>
eadlen>
Parameters
<cid> see AT+CACID
<readlen> Requested number of data bytes to be read
<recvlen> Data bytes that has been actually received
Max Response Time -
Reference Note
18.2.7 AT+CAACK Query Send Data Information
AT+CAACK Query Send Data Informations

AT+CAACK=? +CAACK: (range of supported <cid>s)
OK
AT+CAACK=<cid> +CAACK: <totalsize>,<unacksize>
OK
+CME ERROR: <err>
Max Response Time -
Reference -
Defined Values


<totalsize> Total size of sent data.
<unacksize> The size of unack data
18.2.8 AT+CASTATE Query TCP/UDP Connection State
AT+CASTATE Query TCP/UDP Connection State

AT+CASTATE? [+CASTATE: <cid>,<state>
]
OK
Unsolicited Result Code If the remote connection is disconnected。
+CASTATE: <cid>,<state>
Max Response Time -
Reference -
Defined Values

<state> 0 Closed by remote server or internal error
1 Connected to remote server
2 Listening (server mode)
18.2.9 AT+CACLOSE Close a TCP/UDP Connection
AT+CACLOSE Close a TCP/UDP Connection

Response
+CACLOSE: (range of supported <cid>s)
Test Command
AT+CACLOSE=? OK
Parameters
See Write Command
Response
Write Command OK
AT+CACLOSE=<cid> If error is related to ME functionality:
+CME ERROR: <err>

Parameters
<cid> see AT+CACID
Unsolicited Result Code If <autoClose_s>=1, this report will be reported when the remote connection
is disconnected.
+CACLOSE: (range of supported <cid>s)
Max Response Time -
Reference Note
18.2.10AT+CACFG Configure Transparent Transmission Parameters
AT+CACFG Configure Transparent Transmission Parameters

Response
+CACFG: "TRANSWAITTM",(range of supported <wait_timeout>s)
+CACFG: "TRANSPKTSIZE",(range of supported <size>s)
+CACFG: "SACK",(list of supported <sack_enable>s)
+CACFG: "MSS",(range of supported <mss_value>s)
+CACFG: "ACKDELAY",(range of supported <ackDelay_ms>s)
+CACFG: "TCPIRT",(range of supported <tcpIRT_ms>s)
+CACFG: "MAXRXT",(range of supported <tcpMaxRXT_cnt>s)
+CACFG: "TCPOT",(range of supported <tcpOT_ms>s)
+CACFG: "KEEPALIVE",(list of supported<keepalive_enable>s)[,(range
of supported <keepalive_idle>s), (range of supported
<keepalive_intval>s), (range of supported <keepalive_cnt>s)]
+CACFG: "TCP_NODELAY",(list of supported <tcpNodelay_enable>s)
+CACFG: "LINGER",(list of supported <linger_enable>s)[,(range of
Test Command
supported <linger_ms>s)]
AT+CACFG=?
+CACFG: "SNDBUF",(range of supported <sndBuf_size>)
+CACFG: "RCVBUF",(range of supported <rcvBuf_size>)
+CACFG: "ATOCLOSE",(list of supported <autoClose_enable>s)[,(range
of supported <autoClose_s>s]
+CACFG: "ACCEPTNUM",(range of supported <acceptMax_num>s)
+CACFG: "ASYNCOPEN",(list of supported <asyncOpen_enable>s)
+CACFG: "TIMEOUT",(range of supported <cid>s),(range of supported
<timeout>s)
+CACFG: "LOCALPORT",(range of supported <cid>s),(range of
supported <localport>s)
+CACFG: "REMOTEADDR",(range of supported <cid>s),(range of
supported <ip address>s),(range of supported <port>s)
OK

Response
+CACFG:
+TRANSWAITTM: <wait_timeout>
+TRANSPKTSIZE: <size>
[
+CACFG: "SACK",<sack_enable>
+CACFG: "MSS",<mss_value>
+CACFG: "ACKDELAY",<ackDelay_ms>
+CACFG: "TCPIRT",<tcpIRT_ms>
+CACFG: "MAXRXT",<tcpMaxRXT_cnt>s)
+CACFG: "TCPOT",<tcpOT_ms>
+CACFG:
"KEEPALIVE",<keepalive_enable>[<keepalive_idle>,<keepalive_intval
Read Command
>,<keepalive_cnt>]
AT+CACFG?
+CACFG: "TCP_NODELAY",<tcpNodelay_enable>
+CACFG: "LINGER",<linger_enable>[,<linger_ms>]
+CACFG: "SNDBUF",<sndBuf_size>
+CACFG: "RCVBUF",<rcvBuf_size>
+CACFG: "ATOCLOSE",<autoClose_enable>[,<autoClose_s>]
+CACFG: "ACCEPTNUM",<acceptMax_num>
+CACFG: "ASYNCOPEN",<asyncOpen_enable>
+TIMEOUT: <cidx>,<timeoutx>...
+LOCALPORT: <cidx>,<localportx>...
[+REMOTEADDR,<cidx>,<ipadressx>,<portx>...
]]
OK
AT+CACFG="TRANSW OK
AITTM",<wait_timeout or
> ERROR
AT+CACFG="TRANSP OK
KTSIZE",<size> or
ERROR
AT+CACFG="SACK",< OK
sack_enable> or
ERROR
AT+CACFG="MSS",<m OK
ss_value> or
ERROR
AT+CACFG=" OK

ACKDELAY",<ackDela or
y_ms> ERROR
AT+CACFG="TCPIRT", OK
<tcpIRT_ms> or
ERROR
AT+CACFG="TCPOT", OK
<tcpOT_ms> or
ERROR
AT+CACFG="KEEPALI OK
VE",<keepalive_enable or
>[<keepalive_idle>,<ke ERROR
epalive_intval>,<keepa
live_cnt>]
AT+CACFG="TCP_NO OK
DELAY",<tcpNodelay_ or
enable> ERROR
AT+CACFG="LINGER" OK
,<linger_enable>[,<ling or
er_ms>] ERROR
AT+CACFG="SNDBUF OK
",<sndBuf_size> or
ERROR
AT+CACFG="RCVBUF OK
",<rcvBuf_size> or
ERROR
AT+CACFG="ATOCLO OK
SE",<autoClose_enabl or
e>[,<autoClose_s>] ERROR
AT+CACFG="ACCEPT OK
NUM",<acceptMax_nu or
m> ERROR
AT+CACFG="ASYNCO OK
PEN",(0-1) or
ERROR

AT+CACFG="TIMEOUT OK
",<cid>,<timeoutx> or
ERROR
AT+CACFG="LOCALP OK
ORT",<cid>,<localport or
> ERROR
AT+CACFG="REMOTE OK
ADDR",<cid>,<ipaddre or
ss>,<localport> ERROR
Max Response Time -
Reference Note
18.2.11 AT+CASWITCH Switch to Transparent Transport Mode
AT+CASWITCH Switch to Transparent Transport Mode

Response
Test Command +CASWITCH: (0-1),(0,1)
AT+CASWITCH=?
OK
Response
Read Command +CASWITCH: 0,0
AT+CASWITCH?
OK
Response
OK
or
OK
CONNECT
Write Command ……
AT+CASWITCH=<cid>,
<transmode> OK
or
ERROR
Parameters
<cid> see AT+CACID
<transmode>
0 Non transparent transmission mode

1 Transparent transmission mode

Max Response Time -
Reference Note

19 AT Commands for PING
19.1 Overview
Command Description
AT+SNPING4 Sends an IPv4 ping
19.2.1 AT+SNPING4 Sends an IPv4 ping

Response
Test command +SNPING4: "URL",(1-500),(1-1400),(0-60000)
AT+SNPING4=?
OK
Response
+SNPING4: <replyId>,<IP address>,<replyTime>
OK
or
Write command ERROR
AT+SNPING4=<URL>,< Parameters
count>,<size>,<timeou <URL> String type :Address of the remote host
t> <count> The number of Ping Echo Requset to send, range: 1~500
<size> Number of data bytes to send, range: 1~1400
<timeout> Ping request timeout value (in ms),range:0-60000
<replyId> Echo Reply number
<IP Address> IP Address of the remote host
<replyTime> Time, in ms, required to receive the response
Max Response Time -

Note:
Reference
Before sending PING Request the GPRS context must be activated
19.2.2 AT+SNPING6 Sends an IPv6 ping

Response
Test command +SNPING6: "URL",(1-500),(1-1400),(0-60000)
AT+SNPING6=?
OK
Response
+SNPING6: <replyId>,<IP address>,<replyTime>
OK
or
Write command ERROR
AT+SNPING6=<URL>,< Parameters
count>,<size>,<timeou <URL> String type :Address of the remote host
t> <count> The number of Ping Echo Requset to send, range: 1~500
<size> Number of data bytes to send, range: 1~1400
<timeout> Ping request timeout value (in ms),range:0-60000
<replyId> Echo Reply number
<IP Address> IP Address of the remote host
<replyTime> Time, in ms, required to receive the response
Max Response Time -
Note:
Reference
Before sending PING Request the GPRS context must be activated.

20 Supported Error Codes and

Unsolicited Result Codes
20.1 Summary of CME ERROR Codes
Final result code +CME ERROR: <err> indicates an error related to mobile equipment or network. The
operation is similar to ERROR result code. None of the following commands in the same Command line is
executed. Neither ERROR nor OK result code shall be returned.
<err> values used by common messaging commands:
Code of <err> Meaning

0 phone failure
1 no connection to phone
2 phone-adaptor link reserved
3 operation not allowed
4 operation not supported
5 PH-SIM PIN required
6 PH-FSIM PIN required
7 PH-FSIM PUK required
10 SIM not inserted
11 SIM PIN required
12 SIM PUK required
13 SIM failure
14 SIM busy
15 SIM wrong
16 incorrect password
17 SIM PIN2 required
18 SIM PUK2 required
20 memory full
21 invalid index
22 not found
23 memory failure
24 text string too long
25 invalid characters in text string
26 dial string too long

27 invalid characters in dial string

30 no network service
31 network timeout
32 network not allowed - emergency call only
40 network personalization PIN required
41 network personalization PUK required
42 network subset personalization PIN required
43 network subset personalization PUK required
44 service provider personalization PIN required
45 service provider personalization PUK required
46 corporate personalization PIN required
47 corporate personalization PUK required
99 resource limitation
100 unknown
103 Illegal MS
106 Illegal ME
107 GPRS services not allowed
111 PLMN not allowed
112 Location area not allowed
113 Roaming not allowed in this location area
132 service option not supported
133 requested service option not subscribed
134 service option temporarily out of order
148 unspecified GPRS error
149 PDP authentication failure
150 invalid mobile class
160 DNS resolve failed
161 Socket open failed
171 MMS task is busy now
172 The MMS data is oversize
173 The operation is overtime
174 There is no MMS receiver
175 The storage for address is full
176 Not find the address
177 The connection to network is failed
178 Failed to read push message
179 This is not a push message
180 gprs is not attached
181 tcpip stack is busy
182 The MMS storage is full
183 The box is empty

184 failed to save MMS

185 It is in edit mode
186 It is not in edit mode
187 No content in the buffer
188 Not find the file
189 Failed to receive MMS
190 Failed to read MMS
191 Not M-Notification.ind
192 The MMS enclosure is full
193 Unknown
600 No Error
601 Unrecognized Command
602 Return Value Error
603 Syntax Error
604 Unspecified Error
605 Data Transfer Already
606 Action Already
607 Not At Cmd
608 Multi Cmd too long
609 Abort Cops
610 No Call Disc
611 BT SAP Undefined
612 BT SAP Not Accessible
613 BT SAP Card Removed
614 AT Not Allowed By Customer
753 missing required cmd parameter
754 invalid SIM command
755 invalid File Id
756 missing required P1/2/3 parameter
757 invalid P1/2/3 parameter
758 missing required command data
759 invalid characters in command data
765 Invalid input value
766 Unsupported mode
767 Operation failed
768 Mux already running
769 Unable to get control
770 SIM network reject
771 Call setup in progress
772 SIM powered down
773 SIM file not present

791 Param count not enough

792 Param count beyond
793 Param value range beyond
794 Param type not match
795 Param format invalid
796 Get a null param
797 CFUN state is 0 or 4
20.2 Summary of CMS ERROR Codes
Final result code +CMS ERROR: <err> indicates an error related to message service or network. The
operation is similar to ERROR result code. None of the following commands in the same Command line is
executed. Neither ERROR nor OK result code shall be returned.
<err> values used by common messaging commands:
Code of <err> Meaning

1 Unassigned(unallocated) number
3 No route to destination
6 Channel unacceptable
8 Operator determined barring
10 Call barred
11 Reserved
16 Normal call clearing
17 User busy
18 No user responding
19 User alerting, no answer
21 Short message transfer rejected
22 Number changed
25 Pre-emption
26 Non-selected user clearing
27 Destination out of service
28 Invalid number format (incomplete number)
29 Facility rejected
30 Response to STATUS ENQUIRY
32 Normal, unspecified
34 No circuit/channel available
38 Network out of order
41 Temporary failure

42 Switching equipment Congestion

43 Access information discarded
44 Requested circuit/channel not available
47 Resources unavailable, unspecified
49 Quality of service unavailable
50 Requested facility not subscribed
55 Requested facility not subscribed
57 Bearer capability not authorized
58 Bearer capability not presently available
63 Service or option not available, unspecified
65 Bearer service not implemented
68 ACM equal or greater than ACM maximum
69 Requested facility not implemented
70 Only restricted digital information bearer capability is available
79 Service or option not implemented, unspecified
81 Invalid transaction identifier value
87 User not member of CUG
88 Incompatible destination
91 Invalid transit network selection
95 Semantically incorrect message
96 Invalid mandatory information
97 Message type non-existent or not implemented
98 Message type not compatible with protocol state
99 Information element non-existent or not implemented
100 Conditional information element error
101 Message not compatible with protocol
102 Recovery on timer expiry
111 Protocol error, unspecified
127 Interworking, unspecified
128 Telematic interworking not supported
129 Short message Type 0 not supported
130 Cannot replace short message
143 Unspecified TP-PID error
144 Data coding scheme (alphabet) not supported
145 Message class not supported
159 Unspecified TP-DCS error
160 Command cannot be acted
161 Command unsupported
175 Unspecified TP-Command error
176 TPDU not supported
192 SC busy

193 No SC subscription
194 SC system failure
195 Invalid SME address
196 Destination SME barred
197 SM Rejected-Duplicate SM
198 TP-VPF not supported
199 TP-VP not supported
208 SIM SMS storage full
209 No SMS storage capability in SIM
210 Error in MS
211 Memory Capacity Exceeded
212 SIM Application Toolkit Busy
213 SIM data download error
224 CP retry exceed
225 RP trim timeout
226 SMS connection broken
255 Unspecified error cause
300 ME failure
301 SMS reserved
302 operation not allowed
303 operation not supported
304 invalid PDU mode
305 invalid text mode
310 SIM not inserted
311 SIM pin necessary
312 PH SIM pin necessary
313 SIM failure
314 SIM busy
315 SIM wrong
316 SIM PUK required
317 SIM PIN2 required
318 SIM PUK2 required
320 memory failure
321 invalid memory index
322 memory full
323 invalid input parameter
324 invalid input format
325 invalid input value
330 SMSC address unknown
331 no network
332 network timeout

340 no cnma ack

500 Unknown
512 SMS no error
513 Message length exceeds maximum length
514 Invalid request parameters
515 ME storage failure
516 Invalid bearer service
517 Invalid service mode
518 Invalid storage type
519 Invalid message format
520 Too many MO concatenated messages
521 SMSAL not ready
522 SMSAL no more service
523 Not support TP-Status-Report & TP-Command in storage
524 Reserved MTI
525 No free entity in RL layer
526 The port number is already registerred
527 There is no free entity for port number
528 More Message to Send state error
529 MO SMS is not allow
530 GPRS is suspended
531 ME storage full
532 Doing SIM refresh
20.3 Summary of Unsolicited Result Codes
URC Description AT Command

Indicates incoming call to the TE if extended
+CRING: <type> AT+CRC=1
format is enabled.
There is a change in the MT network
+CREG:
registration status or a change of the AT+CREG=<n>
<stat>[,<lac>,<ci>,<netact>]
network cell.
Indicates that new message has been AT+CNMI
+CMTI: <mem3>,<index>
received. <mt>=1
+CMTI:
Indicates that new MMS message has been AT+CNMI
<mem3>,<index>,"MMS
received. <mt>=1
PUSH"
+CMT: Indicates that new message has been AT+CNMI
<length><CR><LF><pdu> received. <mt>=2 (PDU mode)

+CMT:
<oa>,<scts>[,<tooa>,<fo>,<pid Indicates that new message has been AT+CNMI
>,<dcs>,<sca>,<tosca>, received. <mt>=2 (text mode)
<length>]<CR><LF><data>
AT+CNMI
+CBM: Indicates that new cell broadcast message
<bm>=2 (PDU mode
<length><CR><LF><pdu> has been received.
enabled):
+CBM: AT+CNMI
Indicates that new cell broadcast message
<sn>,<mid>,<dcs>,<page>,<pa <bm>=2 (text mode
has been received.
ges><CR><LF><data> enabled):
AT+CNMI
+CDS: Indicates that new SMS status report has
<ds>=1 (PDU mode
<length><CR><LF><pdu> been received.
enabled):
+CDS: AT+CNMI
Indicates that new SMS status report has
<fo>,<mr>[,<ra>][,<tora>],<sct <ds>=1 (text mode
been received.
s>,<dt>,<st> enabled):
*PSNWID: "<mcc>","<mnc>",
"<full network name>",<full
network name CI>,"<short Refresh network name by network.
network name>",<short
network name CI>
*PSUTTZ:
AT+CLTS=1
<year>,<month>,<day>,<hour>
Refresh time and time zone by network.
,<min>,<sec>,"<time
zone>",<dst>
+CTZV: "<time zone>" Refresh network time zone by network.
Refresh Network Daylight Saving Time by
DST: <dst>
network.
Indicates whether some password is
+CPIN: <code>
required or not.
AT+CPIN
+CPIN: NOT READY SIM Card is not ready.
+CPIN: NOT INSERTED SIM Card is not inserted.
+CUSD: Indicates an USSD response from the
AT+CUSD=1
<n>[,<str_urc>[,<dcs>]] network, or network initiated operation.
SIM7000 is powered down by the PWRKEY
NORMAL POWER DOWN
pin or AT command "AT+CPOWD=1".
UNDER-VOLTAGE POWER
Under-voltage automatic power down.
DOWN
UNDER-VOLTAGE WARNNING under-voltage warning
OVER-VOLTAGE POWER
Over-voltage automatic power down.
DOWN
OVER-VOLTAGE WARNNING over-voltage warning
Power on procedure is completed, and the
module is ready to operate at fixed baud AT+IPR=<rate>
RDY
rate. (This URC does not appear when <rate> is not 0
auto-bauding function is active).
+CFUN: <fun> Phone functionality indication (This URC AT+IPR=<rate>

does not appear when auto-bauding <rate> is not 0

function is active).
[<n>,]CONNECT OK TCP/ UDP connection is successful AT+CIPSTART
TCP/UDP connection in channel mode is
CONNECT
successful
[<n>,]CONNECT FAIL TCP/UDP connection fails AT+CIPSTART
[<n>,]ALREADY CONNECT TCP/UDP connection exists AT+CIPSTART
[<n>,]SEND OK Data sending is successful
[<n>,]CLOSED TCP/UDP connection is closed
RECV FROM: <IP ADDRESS>: shows remote IP address and port
AT+CIPSRIP=1
<PORT> (only in single connection mode)
display transfer protocol in IP header to
+IPD,<data AT+CIPHEAD
received data or not (only in single
size>,<TCP/UDP>:<data> AT+CIPSHOWTP
connection mode)
Received data from remote client (only in
+RECEIVE,<n>,<length>
multiple connection mode)
REMOTE IP: <IP ADDRESS> Remote client connected in
+CDNSGIP: 1,<domain
DNS successful AT+CDNSGIP
name>,<IP>[,<IP2>]
+CDNSGIP:0,<dns error code> DNS failed
+PDP: DEACT GPRS is disconnected by network
+APP PDP: ACTIVE Active the network of app side AT+CNACT=1
+APP PDP: DEACTIVE Deactive the network of app side AT+CNACT=0

SIM7000 Series - AT Command Manual - V1.06

Uploaded by

Copyright:

Available Formats

SIM7000 Series - AT Command Manual - V1.06

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

SIM7000 Series - AT Command Manual - V1.06

Uploaded by

Copyright:

Available Formats

SIM7000 Series_

SIMCom Wireless Solutions Limited

Document Title: SIM7000 Series_AT Command Manual

SIMCOM OFFERS THIS INFORMATION AS A SERVICE TO ITS CUSTOMERS, TO SUPPORT

THIS DOCUMENT CONTAINS PROPRIETARY TECHNICAL INFORMATION WHICH IS THE PROPERTY

SIMCom Wireless Solutions Limited

For more information, please visit:

For technical support, or to report documentation errors, please visit:

Copyright © 2020 SIMCom Wireless Solutions Limited All Rights Reserved.

Version Date Chapter What is new

9.2.9 AT+HTTPTOFS Add AT Command

5.2.49 AT+CEDRXRDP Add AT Command

2 AT Commands According to V.25TER...................................................................................20

3 AT Commands According to 3GPP TS 27.007.................................................................... 40

4 AT Commands According to 3GPP TS 27.005.................................................................... 61

4.1 Overview of AT Commands According to 3GPP TS 27.005..........................................................61

5 AT Commands Special for SIMCom.......................................................................................82

5.2.26 AT+NBSC Configure NB-IOT Scrambling Feature............................................................ 102

6 AT Commands for GPRS Support........................................................................................127

7 AT Commands for IP Application......................................................................................... 137

8 AT Commands for TCPIP Application Toolkit................................................................... 139

8.2.2 AT+CIPSTART Start Up TCP or UDP Connection.............................................................140

9 AT Commands for HTTP(S) Application.............................................................................170

9.2.10 AT+SHSTATE Query HTTP(S) Connection Status............................................................175

10 AT Commands for FTP Application.............................................................................. 181

11 AT Command for NTP function...................................................................................... 203

12 AT Commands for OneNet Application........................................................................206

12.1 Overview.............................................................................................................................................. 206

13 AT Commands for Telecom IOT Application.............................................................. 219

14 AT Commands for GNSS Application...........................................................................222

14.2.10 AT+CGNSTST GNSS NMEA Data Output to AT Port...............................................229

15 AT Commands for File System...................................................................................... 239

16 AT Commands for SIM Application Toolkit.................................................................247

17 AT Commands for SSL Application.............................................................................. 252

18 AT Commands for TCP/UDP Application.................................................................... 257

18.2.5 AT+CASEND Send Data via an Established Connection................................................ 263

19 AT Commands for PING...................................................................................................271

20 Supported Error Codes and Unsolicited Result Codes.......................................... 273

THIS DOCUMENT IS A REFERENCE GUIDE TO ALL THE AT COMMANDS.

1.1 Scope of the document

1.2 Related documents

1.3 Conventions and abbreviations

In this document, the GSM engines are referred to as following term:

1.4 AT Command syntax

Command line enter <CR>.

1.4.1 Basic syntax

1.4.2 S Parameter syntax

1.4.3 Extended Syntax

These commands can operate in several modes, as in the following table:

Table 1: Types of AT commands and responses

1.4.4 Combining AT commands on the same Command line

1.4.5 Entering successive AT commands on separate lines

1.5 Supported character sets

1.6 Flow control

1.6.1 Software flow control (XON/XOFF flow control)

1.6.2 Hardware flow control (RTS/CTS flow control)

1.7.1 Parameter Saving Mode

1.7.2 Max Response Time

2.1 Overview of AT Commands According to V.25TER