| Device uses an LG L2000 LTE chip and a Qualcomm MDM6800A for CDMA/EVDO. |
| |
| The firmware flasher tool speaks DIAG and includes a lot of LTE-related |
| NV items. |
| |
| Device has two USB interfaces: |
| |
| 0 - Proprietary ethernet interface |
| 1 - CDC-ACM serial port |
| |
| The ACM port speaks a proprietary protocol that MUX-es traffic from the |
| following virtual interfaces (according to Windows): |
| |
| 0: LGE LTE DM Port |
| 1: LGE USB Modem Port |
| 2: LGE LTE RF Serial Port (com) |
| 3: LGE CDMA USB Serial Port (com) |
| 4: LGE CDMA USB GPS NMEA Port (com) |
| 5: LGE CDMA LBS Serial Port (com) |
| |
| MUX Header Format |
| ----------------- |
| |
| u32: magic, always [ 0x5a 0x48 0x12 0xa5 ] |
| u32: sequence number (unpaired; host and device use separate sequence numbers) |
| u32: length (not including this header, but including any padding) |
| u16: MUX channel (21 f0: CMD) (11 f0: AT) |
| <data> |
| |
| |
| Packets are 4-byte aligned with padding of zeros, and this padding is included |
| in the length given in the header. |
| |
| AT commands may have trailing bytes outside the data length specified in the |
| header, obviously these should be ignored. AT commands may also have trailing |
| status bytes after the last 0x0D 0x0A which may take the place of OK and |
| ERROR in some AT commands. Status bytes include 0x30 0x0d (success) and |
| 0x34 0x0d (unknown AT command). |
| |
| CMD packets are terminated with a standard HDLC CRC-16 and 0x7E. |
| |
| Known CMD numbers are: |
| 0xf14a - network attach, ethernet port start (use DHCP and IPv6 RA) |
| |
| |
| |
| AT SMS Indications |
| ------------------ |
| They appear out of nowhere without AT formatting: |
| |
| MT MSG: "612804xxxx","13/02/13,19:27:11+00",73 |
| Heyy it's Tiffany i uploaded some pics on my profile on www.hottsites.com |
| |
| |
| Misc AT command notes: |
| ---------------------- |
| +VZWMRUE: <entry>,<rat>,<band>,<channel> |
| |
| %LCNWINFO: <rat>, <roam>, <1x>, <Ev>, <LTE>, <state>, <cause>, <PDNid> |
| %LCNWINFO: <rat>, <roam>, <1x>, <Ev>, <LTE>, <state>, <cause> |
| <rat> = 6:LTE |
| |
| |
| Reported AT Commands |
| -------------------- |
| |
| Firmware version VL600ZV8 reports the following supported AT commands in |
| response to an AT+CLAC query: |
| |
| E0V1 |
| HE1 |
| E |
| Q |
| V |
| Z |
| &F |
| S3 |
| S4 |
| S5 |
| CIMI |
| GCAP |
| CEER |
| CPAS |
| CSQ |
| CLAC |
| CGDCONT |
| CGDSCONT |
| CGTFT |
| CGATT |
| CGACT |
| CGCMOD |
| CGDATA |
| CGPADDR |
| CGEREP |
| CSCB |
| CSAS |
| CRES |
| CSDH |
| CEREG |
| CGEQOS |
| CGCONTRDP |
| CGSCONTRDP |
| CGTFTRDP |
| CGEQOSRDP |
| CGMI |
| CGMM |
| CGMR |
| CGSN |
| GSN |
| PWDT |
| PTIMER |
| PDMA |
| PSDRAM |
| PSMACTIVE |
| PSMT |
| PHIMLP |
| PURTTX |
| PURTRX |
| PURTCB |
| PFSEL |
| PFID |
| PFREAD |
| PFRW |
| PCSMWID |
| PCSMCP |
| PSYSC |
| PCPGB |
| PUETH |
| PUMDM1 |
| PUMDM2 |
| PI2C |
| PHIMULPATH |
| PHIMTX |
| PHIMTXPATH |
| PHIMSTOPTX |
| PCC5BOOT |
| PURTLOOPBACK |
| PMEMWRITE |
| PMEMREAD |
| PMUXLOOPBACK |
| PSQ |
| PHIMNC |
| PUESTATUS |
| PSWRESET |
| PRFCONTROL |
| PCMDBYPASS |
| PTM |
| PEMUATCI |
| PNVTEST |
| PNVRD |
| PNVWR |
| PSWTTST |
| PSWT |
| PSMTESTIP |
| PTESTDATAPATH |
| PTXPOWER |
| PSPIWRITE |
| PSPIREAD |
| PLLARCSEND |
| PLLARCNV |
| PANTDISABLE |
| PLLARCSTART |
| PLLARCEND |
| TURNMODE |
| PPHYSTATUS |
| PPHYSNR |
| PLLARCSTARTEX |
| PCPELTIMER |
| PCPESTIMER |
| PGCTCAL |
| CSG |
| AUTH |
| LTEINIT |
| SETIMSI |
| SETPLMNID |
| SETNPARAM |
| ATCMODE |
| SETKEY |
| SETOP |
| &C |
| &D |
| &E |
| &F |
| &S |
| &V |
| &W |
| E |
| I |
| L |
| M |
| Q |
| V |
| X |
| Z |
| T |
| P |
| \Q |
| \S |
| \V |
| %V |
| D |
| A |
| H |
| O |
| S0 |
| S3 |
| S4 |
| S5 |
| S6 |
| S7 |
| S8 |
| S9 |
| S10 |
| S11 |
| S30 |
| S103 |
| S104 |
| +VZWMRUC |
| +VZWMRUE |
| +VZWAPNE |
| +CRSM |
| +CSCS |
| +CMEE |
| +CCLK |
| +CLCK |
| +COPS |
| +CPOL |
| +CGDCONT |
| +CPBS |
| +CPBW |
| +CPBR |
| +CNMI |
| +CMGF |
| +CMGC |
| +CSCA |
| +CSMP |
| +CPMS |
| +CMGL |
| +CMGR |
| +CMGW |
| +CMGS |
| +CMGD |
| +CMSS |
| +CNMA |
| +CMMS |
| +CPWD |
| +CNUM |
| +CIMI |
| +CPIN |
| +CACM |
| +CGSN |
| +CFUN |
| +CSIM |
| +FCLASS |
| +ICF |
| +IFC |
| +IPR |
| +GMI |
| +GMM |
| +GMR |
| +GCAP |
| +GSN |
| +DR |
| +DS |
| +CMEE |
| $QCCLR |
| $QCDMG |
| $QCDMR |
| $QCDNSP |
| $QCDNSS |
| $QCTER |
| $QCSLOT |
| $QCPWRDN |
| $BREW |
| $QCSYSMODE |
| $QCCTM |
| %ATCTEST |
| %HOYATEST |
| %EJTEST |
| %CHANGTEST |
| %TEMPTEST |
| %FRST |
| %SWV |
| %SIMCHECK |
| %GPS |
| %CMSTATE |
| %LCATT |
| %LCRSSI |
| %LCNWCHK |
| %LCNWINFO |
| %LCNWP |
| %LCPID |
| %LCPHPING |
| %LCLTESTATE |
| %LCLQOS |
| %LCCQOS |
| %LCDQOS |
| %LCTFT |
| %LCQOSAC |
| %LCQOSRL |
| %LCQOSMD |
| %LCEMULP |
| %LCVER |
| %LCPKTSTATS |
| %LCPINBLK |
| %LCPINUNBLK |
| %LCDMBR |
| %LCMOD |
| %LCMTU |
| %LCIMSON |
| %LCPINNUM |
| %LCCMDT |
| %LCFREQ |
| %LCRETCTR |
| %LCPTMR |
| %LCLTEBOOTM |
| %WIMSI |
| %LCLTEBOOTTIME |
| %GMTMR |
| %LCIMSSETCFG |
| %LCIMSGETCFG |
| %LCRST |
| %LCAPN |
| %LCRPT |
| %RSTSQN |
| %SetApp |
| %SETPIN |
| %TSTRFSH |
| %LCTCIV |
| %LCINTPDNCTL |
| %LCIIP |
| %GMTT |
| %LCINACT |
| %RESETEN |
| %LCACONMOD |
| %LCGMSSCFG |
| %SETLOG |
| %LCBIPENABLEFLAG |
| %LCROAMING |
| %LOCGET |
| %LOCON |
| %LOCOFF |
| |
| +UART |
| +MDN |
| +MIN |
| +LGPASS |
| +LGUSERID |
| +LGPASSX |
| +PING |
| +PINGF |
| +PINGD |
| +PPPCAR |
| +MIPRMNAI |
| +PPPPW |
| +SKTENABLE |
| +PINGA |
| $LGTEST |
| $QCDMG |
| $LGDMGO |
| $LGSO |
| $LGFRC |
| $LGSCI |
| $LGSCM |
| $LGMTH |
| $LGMTS |
| $LGMTN |
| $LGOTAPA |
| $LGNLOCK |
| $LGMCCM |
| $LGMNCM |
| $LGS2M |
| $LGS1M |
| $LGMCCT |
| $LGMNCT |
| $LGS2T |
| $LGS1T |
| $LGMRUCL |
| $LGACCOLC |
| $LGBYCHAR |
| $LGMEID |
| $LGMDN |
| $LGMIN |
| $LGMODEP |
| $LGBANDP |
| $LGROAMP |
| $LGDTB |
| $LGPREV |
| $LGAKEY |
| $LGPWR |
| $LGACTV |
| $LGTC |
| $LGEPRL |
| $LGUIMID |
| $OTADM |
| |