397 lines
4.2 KiB
Plaintext
397 lines
4.2 KiB
Plaintext
Device uses an LG L2000 LTE chip and a Qualcomm MDM6800A for CDMA/EVDO.
|
|
|
|
The firmware flasher tool speaks DIAG and includes a lot of LTE-related
|
|
NV items.
|
|
|
|
Device has two USB interfaces:
|
|
|
|
0 - Proprietary ethernet interface
|
|
1 - CDC-ACM serial port
|
|
|
|
The ACM port speaks a proprietary protocol that MUX-es traffic from the
|
|
following virtual interfaces (according to Windows):
|
|
|
|
0: LGE LTE DM Port
|
|
1: LGE USB Modem Port
|
|
2: LGE LTE RF Serial Port (com)
|
|
3: LGE CDMA USB Serial Port (com)
|
|
4: LGE CDMA USB GPS NMEA Port (com)
|
|
5: LGE CDMA LBS Serial Port (com)
|
|
|
|
MUX Header Format
|
|
-----------------
|
|
|
|
u32: magic, always [ 0x5a 0x48 0x12 0xa5 ]
|
|
u32: sequence number (unpaired; host and device use separate sequence numbers)
|
|
u32: length (not including this header, but including any padding)
|
|
u16: MUX channel (21 f0: CMD) (11 f0: AT)
|
|
<data>
|
|
|
|
|
|
Packets are 4-byte aligned with padding of zeros, and this padding is included
|
|
in the length given in the header.
|
|
|
|
AT commands may have trailing bytes outside the data length specified in the
|
|
header, obviously these should be ignored. AT commands may also have trailing
|
|
status bytes after the last 0x0D 0x0A which may take the place of OK and
|
|
ERROR in some AT commands. Status bytes include 0x30 0x0d (success) and
|
|
0x34 0x0d (unknown AT command).
|
|
|
|
CMD packets are terminated with a standard HDLC CRC-16 and 0x7E.
|
|
|
|
Known CMD numbers are:
|
|
0xf14a - network attach, ethernet port start (use DHCP and IPv6 RA)
|
|
|
|
|
|
|
|
AT SMS Indications
|
|
------------------
|
|
They appear out of nowhere without AT formatting:
|
|
|
|
MT MSG: "612804xxxx","13/02/13,19:27:11+00",73
|
|
Heyy it's Tiffany i uploaded some pics on my profile on www.hottsites.com
|
|
|
|
|
|
Misc AT command notes:
|
|
----------------------
|
|
+VZWMRUE: <entry>,<rat>,<band>,<channel>
|
|
|
|
%LCNWINFO: <rat>, <roam>, <1x>, <Ev>, <LTE>, <state>, <cause>, <PDNid>
|
|
%LCNWINFO: <rat>, <roam>, <1x>, <Ev>, <LTE>, <state>, <cause>
|
|
<rat> = 6:LTE
|
|
|
|
|
|
Reported AT Commands
|
|
--------------------
|
|
|
|
Firmware version VL600ZV8 reports the following supported AT commands in
|
|
response to an AT+CLAC query:
|
|
|
|
E0V1
|
|
HE1
|
|
E
|
|
Q
|
|
V
|
|
Z
|
|
&F
|
|
S3
|
|
S4
|
|
S5
|
|
CIMI
|
|
GCAP
|
|
CEER
|
|
CPAS
|
|
CSQ
|
|
CLAC
|
|
CGDCONT
|
|
CGDSCONT
|
|
CGTFT
|
|
CGATT
|
|
CGACT
|
|
CGCMOD
|
|
CGDATA
|
|
CGPADDR
|
|
CGEREP
|
|
CSCB
|
|
CSAS
|
|
CRES
|
|
CSDH
|
|
CEREG
|
|
CGEQOS
|
|
CGCONTRDP
|
|
CGSCONTRDP
|
|
CGTFTRDP
|
|
CGEQOSRDP
|
|
CGMI
|
|
CGMM
|
|
CGMR
|
|
CGSN
|
|
GSN
|
|
PWDT
|
|
PTIMER
|
|
PDMA
|
|
PSDRAM
|
|
PSMACTIVE
|
|
PSMT
|
|
PHIMLP
|
|
PURTTX
|
|
PURTRX
|
|
PURTCB
|
|
PFSEL
|
|
PFID
|
|
PFREAD
|
|
PFRW
|
|
PCSMWID
|
|
PCSMCP
|
|
PSYSC
|
|
PCPGB
|
|
PUETH
|
|
PUMDM1
|
|
PUMDM2
|
|
PI2C
|
|
PHIMULPATH
|
|
PHIMTX
|
|
PHIMTXPATH
|
|
PHIMSTOPTX
|
|
PCC5BOOT
|
|
PURTLOOPBACK
|
|
PMEMWRITE
|
|
PMEMREAD
|
|
PMUXLOOPBACK
|
|
PSQ
|
|
PHIMNC
|
|
PUESTATUS
|
|
PSWRESET
|
|
PRFCONTROL
|
|
PCMDBYPASS
|
|
PTM
|
|
PEMUATCI
|
|
PNVTEST
|
|
PNVRD
|
|
PNVWR
|
|
PSWTTST
|
|
PSWT
|
|
PSMTESTIP
|
|
PTESTDATAPATH
|
|
PTXPOWER
|
|
PSPIWRITE
|
|
PSPIREAD
|
|
PLLARCSEND
|
|
PLLARCNV
|
|
PANTDISABLE
|
|
PLLARCSTART
|
|
PLLARCEND
|
|
TURNMODE
|
|
PPHYSTATUS
|
|
PPHYSNR
|
|
PLLARCSTARTEX
|
|
PCPELTIMER
|
|
PCPESTIMER
|
|
PGCTCAL
|
|
CSG
|
|
AUTH
|
|
LTEINIT
|
|
SETIMSI
|
|
SETPLMNID
|
|
SETNPARAM
|
|
ATCMODE
|
|
SETKEY
|
|
SETOP
|
|
&C
|
|
&D
|
|
&E
|
|
&F
|
|
&S
|
|
&V
|
|
&W
|
|
E
|
|
I
|
|
L
|
|
M
|
|
Q
|
|
V
|
|
X
|
|
Z
|
|
T
|
|
P
|
|
\Q
|
|
\S
|
|
\V
|
|
%V
|
|
D
|
|
A
|
|
H
|
|
O
|
|
S0
|
|
S3
|
|
S4
|
|
S5
|
|
S6
|
|
S7
|
|
S8
|
|
S9
|
|
S10
|
|
S11
|
|
S30
|
|
S103
|
|
S104
|
|
+VZWMRUC
|
|
+VZWMRUE
|
|
+VZWAPNE
|
|
+CRSM
|
|
+CSCS
|
|
+CMEE
|
|
+CCLK
|
|
+CLCK
|
|
+COPS
|
|
+CPOL
|
|
+CGDCONT
|
|
+CPBS
|
|
+CPBW
|
|
+CPBR
|
|
+CNMI
|
|
+CMGF
|
|
+CMGC
|
|
+CSCA
|
|
+CSMP
|
|
+CPMS
|
|
+CMGL
|
|
+CMGR
|
|
+CMGW
|
|
+CMGS
|
|
+CMGD
|
|
+CMSS
|
|
+CNMA
|
|
+CMMS
|
|
+CPWD
|
|
+CNUM
|
|
+CIMI
|
|
+CPIN
|
|
+CACM
|
|
+CGSN
|
|
+CFUN
|
|
+CSIM
|
|
+FCLASS
|
|
+ICF
|
|
+IFC
|
|
+IPR
|
|
+GMI
|
|
+GMM
|
|
+GMR
|
|
+GCAP
|
|
+GSN
|
|
+DR
|
|
+DS
|
|
+CMEE
|
|
$QCCLR
|
|
$QCDMG
|
|
$QCDMR
|
|
$QCDNSP
|
|
$QCDNSS
|
|
$QCTER
|
|
$QCSLOT
|
|
$QCPWRDN
|
|
$BREW
|
|
$QCSYSMODE
|
|
$QCCTM
|
|
%ATCTEST
|
|
%HOYATEST
|
|
%EJTEST
|
|
%CHANGTEST
|
|
%TEMPTEST
|
|
%FRST
|
|
%SWV
|
|
%SIMCHECK
|
|
%GPS
|
|
%CMSTATE
|
|
%LCATT
|
|
%LCRSSI
|
|
%LCNWCHK
|
|
%LCNWINFO
|
|
%LCNWP
|
|
%LCPID
|
|
%LCPHPING
|
|
%LCLTESTATE
|
|
%LCLQOS
|
|
%LCCQOS
|
|
%LCDQOS
|
|
%LCTFT
|
|
%LCQOSAC
|
|
%LCQOSRL
|
|
%LCQOSMD
|
|
%LCEMULP
|
|
%LCVER
|
|
%LCPKTSTATS
|
|
%LCPINBLK
|
|
%LCPINUNBLK
|
|
%LCDMBR
|
|
%LCMOD
|
|
%LCMTU
|
|
%LCIMSON
|
|
%LCPINNUM
|
|
%LCCMDT
|
|
%LCFREQ
|
|
%LCRETCTR
|
|
%LCPTMR
|
|
%LCLTEBOOTM
|
|
%WIMSI
|
|
%LCLTEBOOTTIME
|
|
%GMTMR
|
|
%LCIMSSETCFG
|
|
%LCIMSGETCFG
|
|
%LCRST
|
|
%LCAPN
|
|
%LCRPT
|
|
%RSTSQN
|
|
%SetApp
|
|
%SETPIN
|
|
%TSTRFSH
|
|
%LCTCIV
|
|
%LCINTPDNCTL
|
|
%LCIIP
|
|
%GMTT
|
|
%LCINACT
|
|
%RESETEN
|
|
%LCACONMOD
|
|
%LCGMSSCFG
|
|
%SETLOG
|
|
%LCBIPENABLEFLAG
|
|
%LCROAMING
|
|
%LOCGET
|
|
%LOCON
|
|
%LOCOFF
|
|
|
|
+UART
|
|
+MDN
|
|
+MIN
|
|
+LGPASS
|
|
+LGUSERID
|
|
+LGPASSX
|
|
+PING
|
|
+PINGF
|
|
+PINGD
|
|
+PPPCAR
|
|
+MIPRMNAI
|
|
+PPPPW
|
|
+SKTENABLE
|
|
+PINGA
|
|
$LGTEST
|
|
$QCDMG
|
|
$LGDMGO
|
|
$LGSO
|
|
$LGFRC
|
|
$LGSCI
|
|
$LGSCM
|
|
$LGMTH
|
|
$LGMTS
|
|
$LGMTN
|
|
$LGOTAPA
|
|
$LGNLOCK
|
|
$LGMCCM
|
|
$LGMNCM
|
|
$LGS2M
|
|
$LGS1M
|
|
$LGMCCT
|
|
$LGMNCT
|
|
$LGS2T
|
|
$LGS1T
|
|
$LGMRUCL
|
|
$LGACCOLC
|
|
$LGBYCHAR
|
|
$LGMEID
|
|
$LGMDN
|
|
$LGMIN
|
|
$LGMODEP
|
|
$LGBANDP
|
|
$LGROAMP
|
|
$LGDTB
|
|
$LGPREV
|
|
$LGAKEY
|
|
$LGPWR
|
|
$LGACTV
|
|
$LGTC
|
|
$LGEPRL
|
|
$LGUIMID
|
|
$OTADM
|
|
|