How to activate MC7354 Modem

IoT Modules MC/EM Series
1

Hi:

I have a R&S CMW500 cellular tester connect to MC7354 Modem, the modem has attached to the cellular tester emulated cell. However, once I issued deattach from the network (CMW500). The modem won’t be able to reattach the cell even though I restarted both ends (Modem and CMW500).

I am using qmicli tool.

I found out that the modem is deactivated, using the following command:
sudo qmicli -p -d /dev/cdc-wdm0 --dms-get-activation-state

[/dev/cdc-wdm0] Activation state retrieved:
State: ‘not-activated’

I think that is the problem.

can anyone help me why the modem was deactivated and how can I re-activate it?

thanks
Bill

3

Hi billy.he,

Which firmware version are you using? If you are not in the latest Generic firmware, please download the latest one and retry.
https://source.sierrawireless.com/resources/airprime/software/airprime-em73xx_mc73xx-fw-package-latest-release/

Could you please provide some information about your module using below commands?

AT!ENTERCND=“A710”
AT+CPIN?
AT!BAND=?
AT!BAND?
AT!GSTATUS?
AT+COPS?
AT+COPS=?
AT!IMPREF?
AT!IMAGE?
AT!CUSTOM?
AT!GETBAND?
AT+CGATT=1
AT+CGATT?
AT+CFUN?

4

Donald:

I found out that after the Cellular test issued network originated detach, the modem won’t be able to re-attach to the cell for a while (don’t know exact how long, but should be able to re-attach after several days). I found out that reset the modem will clear it and be able to quickly re-attach to the cell

I am not what command from the cell (network) that causes the modem to be “disabled” and wondering whether there is any AT command that other than reset will clear this condition?

I thin the firmware is latest version. Modem supports band 2,4,5, 17. And cell is configured to send band 17 signal. SIM card is from R&S test SIM card

Here is what I did after detach issued from the cell, reset modem and it re-attached to the cell:

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2020.06.29 11:06:17 =~=~=~=~=~=~=~=~=~=~=~=

at!gstatus?

at!gstatus?

!GSTATUS:

Current Time: 2921520 Temperature: 56 ß after detach issued by cell

Bootup Time: 0 Mode: ONLINE

System mode: LTE PS state: Not attached

LTE band: B17 LTE bw: 10 MHz

LTE Rx chan: 5790 LTE Tx chan: 23790

EMM state: Deregistered Normal Service

RRC state: RRC Idle

IMS reg state: No Srv

RSSI (dBm): -67 Tx Power: 0

RSRP (dBm): -87 TAC: 0001 (1)

RSRQ (dB): -3 Cell ID: 00000100 (256)

SINR (dB): 30.0

OK

at!reset ß reset the modem

at!reset

OK

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2020.06.29 11:07:50 =~=~=~=~=~=~=~=~=~=~=~=

at!gstatus?

at!gstatus?

!GSTATUS:

Current Time: 57 Temperature: 59 ß modem quickly re-attached to the cell

Bootup Time: 5 Mode: ONLINE

System mode: LTE PS state: Attached

LTE band: B17 LTE bw: 10 MHz

LTE Rx chan: 5790 LTE Tx chan: 23790

EMM state: Registered Normal Service

RRC state: RRC Connected

IMS reg state: No Srv

RSSI (dBm): -60 Tx Power: -16

RSRP (dBm): -87 TAC: 0001 (1)

RSRQ (dB): -10 Cell ID: 00000100 (256)

SINR (dB): 30.0

OK

Here are some information you asked for:

at!gver?

!GVER: SWI9X15C_05.05.58.00 r27038 carmd-fwbuild1 2015/03/04 21:30:23

OK

at+cpin?

at+cpin?

+CPIN: READY

at!band=?

at!band=?

Index, Name, GW Band Mask L Band Mask

00, All Bands, 0002000004E80380 000000000001001A

01, Europe 3G, 0002000000400000 0000000000000000

02, North America 3G, 0000000004800000 0000000000000000

03, Europe 2G, 0000000000000380 0000000000000000

04, North America 2G, 0000000000280000 0000000000000000

05, GSM ALL, 0000000000280380 0000000000000000

06, Europe, 0002000000400380 0000000000000000

07, North America, 0000000004A80000 000000000001001A

08, WCDMA ALL, 0002000004C00000 0000000000000000

09, LTE ALL, 0000000000000000 000000000001001A

0000000000010000 - B17

0000000000000010 - B5

0000000000000008 - B4

0000000000000002 - B2

0002000000000000 - B8 (900)

0000000004000000 - B5 (850)

0000000000800000 - B2 (1900)

0000000000400000 - B1 (2100)

0000000000200000 - G1900

0000000000080000 - G850

0000000000000200 - G900P

0000000000000100 - G900E

0000000000000080 - G1800

OK

at!band?

Index, Name, GW Band Mask L Band Mask

00, All Bands, 0002000004E80380 000000000001001A

OK

at+cops?

+COPS: 0,0,“001-01 R&S 3G TestSIM”,7

OK

Thanks

Bill

5

Donald:

Just to add that the cell emulator issued detach request to the modem (not sure exact settings, but detach type seems to be “re-attach not required” but no sure about MME code

From the 3GPP spec, it says that T3402 (backoff timer) will be started, the default value is 12 minutes. I don’t know what value this modem has.

at!ltenas shows status as below:

at!ltenas?

LSTI:0

GERAN Cap:0

Disable GUTI Security check: 0

Allow NULL integrity algorithm: 0

Temp Forbidden PLMN:0x0

OK

Thanks

Bill

6

Hi billy.he,

On CMW500, press Config, in PCC->Network->NAS Signaling->Attach Reject Cause, unselect the Attach Reject Cause.
You can try to send AT+CGATT=1 and AT!SCACT =1,1 to module.

After eNB wave stop/start,UE transmitted TAU Request 5 times. If this request did not accept by eNB,the T3402 timer was start. After T3402 timer was expired,UE will transmit TAU request.

Could you please check the state of RACH is successful or fail?

According to 3GPP:
5.3.6 Handling of timer T3402
The value of timer T3402 can be sent by the network to the UE in the ATTACH ACCEPT message and TRACKING AREA UPDATE ACCEPT message. The UE shall apply this value in all tracking areas of the list of tracking areas assigned to the UE, until a new value is received.
The value of timer T3402 can be sent by the network to the UE in the ATTACH REJECT message. If an ATTACH
REJECT message including timer T3402 value was received integrity protected, the UE shall apply this value until a new value is received with integrity protection or a new PLMN is selected. Otherwise, the default value of this timer is used.3GPP Release 122T 63 3GPP TS 24.301 V12.8.0 (2015-03)
The default value of this timer is also used by the UE in the following cases:

  • ATTACH ACCEPT message or TRACKING AREA UPDATE ACCEPT message is received without a value
    specified;
  • the UE does not have a stored value for this timer;
  • a new PLMN which is not in the list of equivalent PLMNs has been entered, the tracking area updating fails and the tracking area updating attempt counter is equal to 5; or
  • a new PLMN which is not in the list of equivalent PLMNs has been entered, the attach procedure fails, the attach attempt counter is equal to 5 and no ATTACH REJECT message was received from the new PLMN
  • Default 12 minutes
7

Hi Donald:

I checked that attach reject cause was not selected by default, I did set the T4302 timer to be 10 seconds

I pressed “Detach” from the CMW500 and turn off and on the LTE signal generator

Then at the modem console I issued AT+CGATT=1, it waited about 20 seconds and returned ERROR. The CMW500 didn’t indicate that modem is attached to the cell

So I think the T3402 timer didn’t seem to work for the modem.

BTW, how can I get the log from the modem, the log which has traffic between modem and cell? Wireshake only capture ppp port traffic not protocol messages between modem and cell

Thanks

Bill

8

Hi billy.he,

You can use the QXDM tool to capture a trace log of traffic between modem and cell.

You then need to provide a trace log to your distributor for further investigation.

1 Like