[X]Assistant

[Skvo]

DiscussionNetgear AirCard AC785 (S), AC790 (S), AC810 (S)

• In the subject are allForum Rulesand10 commandments novice who is hard to master the Rules of the Forum
  
• To compare the device with other models and on the choice, refer to the topic.Selection and comparison of wireless modems and mobile routers
  
• Unlock codes for the device are requested in the topicHere you can get device unlock codes for FREE.
  
• Discussion of devices not related to this topic is prohibited. If the theme you need for a specific model does not exist - create it.
  
• Instead of saying “Thank you!” Use. If you have less than 15 posts - click on the "Complaint" button under the message where you were helped, and write a thank you.
  
• Useful topics to note:Forum FAQ, How to search the forum?
  

пїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅпїЅ LTE пїЅпїЅпїЅпїЅпїЅпїЅпїЅ Netgear AirCard download

Characteristics of the last three models of routers Netgear

For Russia, relevant European versions of routers (not locked). For them in the numbering of any letters at the end of the model number is not put.

Netgear AirCard AC785 Mobile Hotspot

URL to the European site Netgear
Router on Qualcomm MDM9225, LTE cat.4 chipset, no aggregation, speed up to 150Mbps
SKU code indicated on the box for a single European model: AC785-100EUS
Supported frequencies:
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38
3G: 850/900/2100 MHz
2G: 900/1800 MHz

Battery for AC875: NETGEAR W-3
Capacity: 2000 mAh (3.7V, 7.4Wh)

Netgear aircardAC790Mobile Hotspot

URL to the European site Netgear
Router on Qualcomm MDM9230, LTE cat.6 chipset, two lanes aggregation, speed up to 300Mbps
The SKU code shown on the box for a single European model: AC790-100EUS
Supported frequencies:
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38, B40
LTE CA: B3 + B20, B3 + B7, B7 + B20, B3 + B3, B7 + B7, B38 + B38
3G: 850/900/1900/2100
2G: not supported

Battery for AC790: NETGEAR W-7
Capacity: 2930 mAh (3.8V, 11.8Wh)

Netgear AirCard AC810 Mobile Hotspot

URL to the European site Netgear
The router on the Qualcomm MDM9240 chipset,
SKU code shown on the box for a single European model: AC810-100EUS
On the box with the router indicated - LTE cat.9, aggregation of three lanes, speed up to 450 Mbit / s
The site and datasheet indicate - LTE cat.11, aggregation of three lanes, speed up to 600Mbps
Supported frequencies:
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38, B40, B41
LTE 2CA: B1 + B8, B1 + B20, B3 + B3, B3 + B7, B7 + B7, B3 + B8, B3 + B20, B3 + B38, B20 + B20, B38 + B38, B41 + B41
LTE 3CA: B3 + B3 + B7, B3 + B3 + B20, B3 + B7 + B7, B3 + B7 + B20, B40 + B40 + B40, B41 + B41 + B41
3G: 850/900/1900/2100
2G: not supported

Battery for AC810: NETGEAR W-7
Capacity: 2930 mAh (3.8V, 11.8Wh)

Operator versions of routers come with a letterSat the end of the model number:
Different LTE ranges for a particular operator, and usually go locked under it.
For example:

Netgear AirCard AC810S for the Australian operator Telstra

The router on the Qualcomm MDM9240 chipset, LTE cat.11, aggregation of three lanes, speed up to 600Mbps
http: //www.netgear.com...d/hotspots/AC810S.aspx
SKU code: AC810S-1TLAUS
LTE FDD: B1, B3, B7, B8, B28 (Australian frequencies, our B20 is not. Because of this, there is not much use in Russia)
LTE TDD: not supported (our B38 is not)
LTE 2CA: B3 + B28, B3 + B7, B7 + B28, B7 + B7
LTE 3CA: B28 + B3 + B7, B3 + B7 + B7, B28 + B7 + B7
3G: 850/900/1900/2100
2G: not supported

Netgear AirCard AC810S for Polish Play operator

Router on Qualcomm MDM9240, LTE cat.9 chipset, aggregation of three lanes, speed up to 450 Mbit / s
http://www.play.pl/tel…netgear-router-ac810s/
SKU code: AC810S-1P1PLS
LTE FDD: B1, B3, B7, B8, B20
LTE TDD: B38, B40, B41
LTE 2CA: B1 + B8, B1 + B20, B3 + B3, B3 + B7, B7 + B7, B3 + B8, B3 + B20, B3 + B38, B20 + B20, B38 + B38, B41 + B41
LTE 3CA: B3 + B3 + B7, B3 + B3 + B20, B3 + B7 + B7, B3 + B7 + B20, B40 + B40 + B40, B41 + B41 + B41
3G: 850/900/1900/2100
2G: not supported

The router is not locked to the Play operator. Any sim cards work.
In terms of frequencies and characteristics, the Polish router AC810S-1P1PLS is completely analogous to the European version AC810-100EUS.

Netgear AirCard AC810S for the American operator Sprint

The router on the Qualcomm MDM9640 chipset, LTE cat.9, aggregation of three lanes, speed up to 450 Mbps
CDMA / RTT / Ev-Do router
SKU code: AC810S-1SNNAS
LTE FDD: B2, B4, B5, B12, B25, B26
LTE TDD: B41
CDMA / Ev-Do: 800, 850, 1900
3G: Band II, IV, V
2G: not supported

Netgear AirCard AC815S for US AT & T operator

The router on the Qualcomm MDM9240 chipset, LTE cat.9, aggregation of three (two ???) lanes, speed up to 450 Mbit / s
- dust and moisture protected housing (IP65)
- high-capacity battery 4340 mAh
http: //www.netgear.com…/AC815S.aspx? cid = gwmng
SKU code: AC815S-1A1NAS
LTE FDD: B2, B4, B5, B7, B12, B30
LTE TDD: not supported
LTE CA: ???
3G: Band II, V
2G: 850, 1900

Useful information on Netgear routers

Access to the AT port of the router

Four ways:

1. Through the regular driver (works on any AC78X, AC79X, AC81X)
- Download port driverAC78xSDrivers.exefrom netgear site.

- install the driver, after which three COMxx virtual ports will appear in the system:
NETGEAR WWAN Modem VSP
NETGEAR DM Port VSP
NETGEAR NMEA Port VSP

- connect the router with a USB cable to the computer.

- knock on the virtual port "NETGEAR WWAN Modem VSP" terminalkoy.

2. Access directly to the port without installing the driver, via USB-cord through the network interface RNDIS

In Netgear routers - AT, the port is also active inAT port over TCP. For use:

- connect the router with a USB cable to the computer.

- Use for example Putty or any other terminal and select in the settings
HostName:192.168.1.1
Port:5510
ConnectionType:Telnet

3. Access directly to the port via Wi-Fi connection
By default, access to port 5510 via Wi-Fi is blocked. To bypass, you need to change the port number to another value.

You can connect via Wi-Fi by analogy with the example above:
HostName:192.168.1.1
Port:XXXX (which you put in the config)
ConnectionType:Telnet

Details on changing the port fromsandwern:
Netgear AirCard AC785 (S), AC790 (S), AC810 (S) - Discussion (Post sandwern # 52346558)


Attention!
Standard password from Sierra "A710" - does not fit Netgear routers for unlocking extended AT commands
Netgear uses its modified passwords. And for different models - passwords are also different.

For aircardAC810-100EUSblocking from extended AT commands is removed throughAT! ENTERCND = "whistler"
For aircardAC810S-1P1PLSblocking from extended AT commands is removed throughAT! ENTERCND = "seymour"
For aircardAC810S-1TLAUSblocking from extended AT commands is removed throughAT! ENTERCND = "grouse"
For aircardAC810S-1RDQASblocking from extended AT commands is removed throughAT! ENTERCND = "cypress"
For aircardAC790-100EUSblocking from extended AT commands is removed throughAT! ENTERCND = "lavender"


For other Aircard ACxxx - passwords are not yet known. But if you want, you can always try to find out from the router itself ...
It is enough to remove the dump sections of the flash drive and pull it out from there ...

Access to the diagnostic port of the router (for QPST, QXDM, etc.)

Two options:

1. Through the regular driver from Netgear

- Download port driverAC78xSDrivers.exefrom netgear site.

- install the driver, after which three COMxx virtual ports will appear in the system:
NETGEAR WWAN Modem VSP
NETGEAR DM Port VSP
NETGEAR NMEA Port VSP

- connect the router with a USB cable to the computer.

- Install QPST, and in the settings select the port "NETGEAR DM Port VSP"
QPST 2.7.437 you can takehereor 2.7.441here


2. Access directly to the port without installing the driver

In the AC810 router - the diagnostic port is also active in theDM port over TCP
Default values:
HostName:192.168.1.1
Port:5511

For use with QPST, we add these values ​​in IP: PORT format on the Ports tab.>Add New Port>Outgoing IP Connections.
By default, access to port 5511 is open only when the router is connected to the computer via a USB cable.
If you want to get work with the Dianhous port via Wi-Fi, then you need to change the port number to another value.

Details on changing the diagnostic port fromsandwern:
Netgear AirCard AC785 (S), AC790 (S), AC810 (S) - Discussion (Post sandwern # 52578326)

Determination of carrier parameters when working in the aggregation mode (Carrier Aggregation)

Actual for AC790 and AC810.

Parameters of carriers that are participating in the aggregation mode (Carrier Aggregation) are not visible in the web interface of the router. It displays data only on the main carrier. You can find out the parameters of all carriers only with the help of AT commands.

To see them you need:
1. Start the download and wait for the LTE-A icon to appear on the router's display.
2. send the command AT! GSTATUS?

The response in the "PCC:" section will be the parameters of the main carrier. In the sections "SCC1:" and "SCC2:" for additional.

example from Sandwern. Aggregation B7 (20Mhz) + B7 (20Mhz):

AT! GSTATUS?
! GSTATUS:
Current Time: 254 Mode: ONLINE
System mode: LTE PS state: Attached
EMM state: Registered Normal Service
RRC state: RRC Connected
IMS reg state: No Srv

PCC:
LTE band: B7
LTE bw: 20 MHz
LTE Rx chan: 2850
LTE Tx chan: 20850
RSSI (dBm): -73.5
RSRP (dBm): -101.5
RSRQ (dB): -7.2
RSSNR (dB): 19
Tx Power (dBm): 11.0
LTE Cell ID: 253717762
Physical Cell ID: 29
TAC: 9987

SCC1:
LTE band: B7
LTE bw: 20 MHz
LTE Rx chan: 3048
RSSI (dBm): -78.3
RSRP (dBm): -97.1
RSRQ (dB): -9.7
Physical Cell ID: 29

Ok

Configure user profiles for AT! BAND

Theory:
Netgear AirCard AC785 (S), AC790 (S), AC810 (S) - Discussion (Post Skvo # 50785404)
Practice:
Netgear AirCard AC785 (S), AC790 (S), AC810 (S) - Discussion (Post vitaly_dv # 52546661)

Post has been editedSkvo - 25.03.17, 00:25

[vvevvevve]

Skvo @ 06/26/2016, 9:47 PM

the main is Band 20 with 5 MHz, and the additional Band 3 with a band as much as 20 MHz

This, apparently, is quite some kind of test run. 20 MHz in B3, in Moscow ....
But theoretically, of course, nothing should interfere. If the operator wants to implement such a combination, it implements.
C B38, of course, there may be additional problems (compared to B20), but still, you can probably do it.
In any case, a serious movement will soon begin in this direction: the bands in the B38 have now received them all over the country. Of course, this range is not very suitable for "Russian open spaces", we can only talk here about not very small cities.

[sandwern]

I managed to get access to ADB, the reason is ... I apologize, I knocked on the wrong port, the real one is 5555.
However, for example, if you run adb shell ls, then the list of files in a strange way is displayed:

в†ђ [0; 0m1 в†ђ [0m в†ђ [0; 0mbuild.prop в†ђ [0m в†ђ [1; 34mfirmware в†ђ [0m в†ђ [1; 36mlinuxr
c в†ђ [0m в†ђ [1; 34mproc в†ђ [0m в†ђ [1; 34mshare в†ђ [0m в†ђ [1; 36mtmp в†ђ [0m
в†ђ [1; 34mWEBSERVER в†ђ [0m в†ђ [1; 34mcache в†ђ [0m в†ђ [1; 34mhome в†ђ [0m в†ђ [1; 34mmedi
a в†ђ [0m в†ђ [1; 34mrun в†ђ [0m в†ђ [1; 34msys в†ђ [0m в†ђ [1; 34musr в†ђ [0m
в†ђ [1; 34mbin в†ђ [0m в†ђ [1; 34mdev в†ђ [0m в†ђ [0; 0minit в†ђ [0m в†ђ [1; 34mmnt в†ђ в†ђ
0m в†ђ [1; 34msbin в†ђ [0m в†ђ [1; 34msystem в†ђ [0m в†ђ [1; 34mvar в†ђ [0m
в†ђ [1; 34mboot в†ђ [0m в†ђ [1; 34metc в†ђ [0m в†ђ [1; 34mlib в†ђ [0m в†ђ [0; 0mnul в†ђ [
0m в†ђ [1; 36msdcard в†ђ [0m в†ђ [0; 0mtarget в†ђ [0m

The only unknown port remained 7777. Someone also listens to him, but who is - until it is a secret ...

Post has been editedsandwern - 26.06.16, 22:24

[vvevvevve]

Sandwern @ 06/26/2016, 10:01 PM

And the same thing, nothing happened. The router sat down in Band 38 and refused to leave it.

The location of the BS with the B38 can be roughly calculated. And then from this place little by little to depart / move away, until the quality of its signal becomes less than the signal in B3. The device will re-select the base, and then ...
However, I do not know how this case is physically arranged by MTS. It may be that all antennas, conditionally speaking, “on the same column” - that is, the signals in B3 and B38 come from one point. If so, then sucks ...

Posted on 06/26/2016 at 10:25 PM:

Sandwern @ 06/26/2016, 10:19 PM

then the list of files is displayed in a strange way

There are used Esc-sequence to control the display - "bold" and underline text, color, etc.
Use a more "advanced" console with ADB support - for example,PuTTY Tray.

[sandwern]

Vvevvevve @ 06/26/2016, 10:22

There are used Esc-sequence to control the display - "bold" and underline text, color, etc.
Use a more "advanced" console with ADB support - for example, PuTTY Tray.

Thank! Only here ... I choose adb, I enter the ip and port, the program closes without any errors ... At the same time, adb works, though only the most recent.

putty_tray

When executing a commandadb backup -all -f C: \ backup.ab "Now unlock your device and confirm the backup operation."

Post has been editedsandwern - 26.06.16, 22:58

[vvevvevve]

Sandwern @ 06/26/2016, 10:35

I choose adb, I enter ip and port, the program closes without any errors ...

Do this: first complete the ADB process in the system. Then in the console, using the standard console application, make adb connect with the necessary parameters. And only then start PuTTY Tray, without changing anything in the parameters - this is how it started, choose adb as the Connection type and immediately click Open.

Sandwern @ 06/26/2016, 10:35

adb backup -all -f C: \ backup.ab

I have never tried this feature with modems. In my opinion, it will not and cannot work here. This is an "android" function, but there is no Android inside.

[sandwern]

Vvevvevve @ 06/26/2016, 11:30 PM

Do this: first complete the ADB process in the system. Then in the console, using the standard console application, make adb connect with the necessary parameters. And only then start PuTTY Tray, without changing anything in the parameters - this is how it started, choose adb as the Connection type and immediately click Open.

Everything turned out exactly as you said in the previous message, the files and folders are highlighted, the cracks are gone.

PuTTy-ADB

Vvevvevve @ 06/26/2016, 11:30 PM

I have never tried this feature with modems. In my opinion, it will not and cannot work here. This is an "android" function, but there is no Android inside.

Do I then correctly understand that it is not possible to make a full backup with modems for insurance purposes?

[vvevvevve]

Sandwern @ 06/26/2016, 11:39 PM

Do I then correctly understand that it is not possible to make a full backup with modems for insurance purposes?

Wrong. You just need to first get to the flash drive.
But dumps of all partitions, except, most likely, MIBIB and EFS2, can be made from Linux. Again, most likely, when I try to read them from Linux, the platform will crash into the PBL interface, and this can later be used to start the bootloader and work with the USB flash drive using the corresponding utilities - emmcdl, if this platform is of the 3rd type, as I I assume, or qtools, if the 2nd type.

Regular (non-file) partitions can be simply read with dd, and for files, it is better to do yaffs images right on the spot, ready for regular firmware using fastboot or QPST (QFIL?).

First look at the amount of free space on all sections (commanddf) to determine where to pre-read readable images.
I understand correctly that the device does not provide for connecting an SD card? Does OTG work? Can I connect an external flash drive or hard drive to it?

Then get a partition map (cat / proc / mtd).
I really want to confirm (or disprove) the preliminary information that 9x4x is a type 3 platform.
To do this, please read and post somewhere SBL image. It is most likely the very first partition on a flash drive, i.e. mtd0. If so, then to read it you need to run

dd if = / dev / mtdblock0 of = sbl.bin

First you need to go to the folder on the section where there is enough space to fit the read image. Or, specify the path to the appropriate folder in the parameter of the command.
SBL in modems usually takes 10 blocks, i.e., for a flash drive with this geometry, 2.5 MB.
Yes, and then the resulting images are taken to the computer using adb pull.

It is even better to install dropbear right away and organize its autorun at startup If it (dropbear) is not there out of the box. If there is, then only solve the issue with auto start. Then you will have normal access to the console via SSH and normal file transfer via SCP.
Also, for the convenience of working with FS, you can install mc. But to understand how to do it correctly, can only be based on the results of the evaluation of free space on the sections.

Post has been editedvvevvevve - 27.06.16, 19:04

[Skvo]

The story of getting the key for AT! ENTERCND continues ...

A bit of theory for everyone.
Sierra Wireless has always used the universal password “A710” by default.
After the transition of the mobile unit to Netgear, the new firmware changed the password to an alternative one.

Sandwern @ 06/22/2016, 6:00 PM

at! entercnd = "grouse"
The same, ERROR, tried both upper and lower case.

This password is "grouse" fromAircard 340U

And in the first firmware from Sierra Wireless for AC340U - the password was "A710". In the latest firmware from Netgear, it became "grouse". Pulled it outthis firmware AC340U from Netgear.
It was hoped that this is a new universal from Netger, but not destiny. If this password did not fit the AirCard 810, then each Netgear product has its own separate password for AT! ENTERCND ...

Also, an attempt was made to obtain a password through elevation of rights, for example, as described hereusing AT! OPENLOCK authentication- but here we were waiting for a bummer. The algorithm for calculating the codes OPENLOCK for AC810 - varied ...

Remains an option through the search section EFS2. There will be a dump of the EFS2 section - I will try to get the password out of it ...

Although the password may be lit in other sections. For example in "CUST". This section stores a backup copy of NVRAM. It must also have a password ...

Post has been editedSkvo - 12.08.16, 08:42

[vvevvevve]

Skvo @ 06/27/2016, 1:33 PM

there is probably a df command

Yes of course. Typo, corrected.

Skvo @ 06/27/2016, 1:33 PM

The router should have a large section under FOTA

I would not recommend to contact him on an unknown device. At least, before receiving its dump and a look at contents.
As with any other section that is not mounted during normal operation of the system.
The fact is that such partitions do not have to be file. And the settings of utilities for working with the file system - including the mount - in modem firmware are such that if you do not explicitly set the type of filesystem to mount, then by default yaffs2 is assumed. And the yaffs driver in the kernel, in turn, is configured so that, by default, it starts the error correction process on the newly encountered partition. Irreversible process.

That is, imagine that on this device the same fota section, for example, contains some specific important data. They are not connected with yaffs in any way - it is just a collection of some binary data that is necessary for the work of a particular subsystem. The corresponding kernel driver or application reads and writes this data according to the scheme it contains, referring to the section simply as / dev / mtdX. And now you are trying to mount this section somewhere. “Everyone decides there” that this is a yaffs2 section with errors and start these errors without asking anyone to “fix”. As a result, in a few seconds you will receive a completely serviceable, empty mounted partition to which you can write your files and enjoy the amount of free space. But those important data that were there and should be, are lost forever - they can not be restored, if not previously made a backup. It is also good if this data does not refer to the number of individual devices for a given instance — then someone else can read them from another instance and pass them on to you. And if they are, and even that driver / application does not know how to initialize them with at least some initial values, that's all ...
So, at the very beginning of the development of platforms with Linux inside, I have more than once seriously “pricked”. I was even happy: “Oh, how funny: it’s necessary - some kind of maundata section, for example, is also a file one! And it is mounted like this easily!”. I was happy ... before the first restart of the modem.

In short, on an unfamiliar piece of iron, before receiving a backup of a specific section, all operations leading to the recording, in any form, in this section, whatever it is, should be carried out only when absolutely necessary. For example, if without this the “penetration” into the system itself is impossible, after which it is possible to make a backup. And if the piece of iron is also unique (there is no one to ask for a backup, "if that"), then this rule should be strictly followed.
And if the piece of hardware still uses authentication of the launched code (for example, in the Secure Boot infrastructure) or there is no certainty that it is not used, then you need to work with it even more carefully, even if it is not unique. Because in this case it is not enough to have someone else's backup of corrupted data kindly read by anyone else - you still need to be able to write it to your device.

[sandwern]

According to the results of the analysis of the SBL image and the kernel configuration file (results are provided by the authorsvvevvevve, for which many thanks) we can draw the following conclusions:

• The platform is really 3rd type, authentication is enabled, but it is signed by the SBL with a Qalcomm test key (Secure Boot 3.0 is used);
  
• Ubifs is used as a file system in the linux subsystem.

At the same time, squashfs is also supported.

P.S. It is important to note that there is not enough space for full backups of all partitions on the flash drive. So with their dumps, there are still obvious problems ...

Post has been editedsandwern - 27.06.16, 23:36

[Skvo]

[email protected], 19:58

I would not recommend to contact him on an unknown device. At least, before receiving its dump and a look at contents.
As with any other section that is not mounted during normal operation of the system.

Good. Removed bad advice ...

But is it really possible to backup using dd but immediately on the computer through the tunnel via TCP using netcat?
Here in the cap:http: //forum.xda-devel...owthread.php? t = 1818321
Following the example as in the paragraph "Back up of the whole memory block (via adb)"

P.S.
Additive..
Everything is real. I checked on my EM7305.

Cygwin under Windows from here took:http://www.cygwin.com/install.html
When installing, I selected the components netcat, pv and util-linux.

In the first console:

$ adb devices
List of devices attached
356906050098555 device

$ adb forward tcp: 6666 tcp: 6666

$ adb shell

~ # dd if = / dev / mtd7 bs = 4096 | nc -l -p 6666

In the second console:

$ adb forward tcp: 6666 tcp: 6666

$ cd c: \ 1

$ nc 127.0.0.1 6666 | pv -i 0.5 | dd of = mtd7 bs = 4096
127MiB 0:00:55 [2,31MiB / s] [<=> ]
30876 + 3336 records received
30876 + 3336 records sent
133300224 bytes (133 MB, 127 MiB) copied, 55.0285 s, 2.4 MB / s

Dump dump drove right into the computer in the folder c: \ 1.

Post has been editedSkvo - 28.06.16, 13:50

[Skvo]

The "cust" section of the AC810 got to me, thanks to sandwern ...

The password for! Entercnd specified there by default is pulled out and decoded. It turned out the word - "whistler"

sandwern. Check:

at! entercnd = "whistler"

Next show
at! custom =?

And try to enable Telnet by regular means:
at! custom = "TELNETENABLE", 1

[sandwern]

Skvo @ 06/28/2016, 5:27

Check

That's what happens ...:

at! entercnd = "whistler"
Ok

at! custom =?
ERROR

at! custom = "TELNETENABLE", 1
ERROR

What works:

at! bsinfo
Product: AirCard 810S
Revision: 40
Main: MDM9240 (2.0)
Power: PMIC9635 (001)
Flash: MT29F4G08ABBDA3W 512MB x8 (44/0/0) (4096 blocks of 64 pages / block)

Ok

AT! BAND =?
Index, Name, GW Band Mask L Band Mask
00, All Bands, 0002000004C00000 000001A0000800C5
01, Europe 3G, 0002000000400000 0000000000000000
02, North America 3G, 0000000004800000 0000000000000000
03, Europe, 0002000000400000 000000A0000800C4
04, North America, 0000000004800000 0000010000000040
05, WCDMA ALL, 0002000004C00000 0000000000000000
06, LTE ALL, 0000000000000000 000001A0000800C5

0000010000000000 - B41
0000008000000000 - B40
0000002000000000 - B38
0000000000080000 - B20
0000000000000080 - B8
0000000000000040 - B7
0000000000000004 - B3
0000000000000001 - B1
0002000000000000 - B8 (900)
0000000004000000 - B5 (850)
0000000000800000 - B2 (1900)
0000000000400000 - B1 (2100)

Ok

Post has been editedsandwern - 28.06.16, 18:32

[Skvo]

Sandwern @ 06/28/2016, 6:22 PM

That's what happens ...:

at! entercnd = "whistler"
Ok

It worked. It's good.

It will be interesting to check this password on the AirCard 785 and 790. Is this the same or other passwords?
But for this we will wait in the topic of owners of such routers ...

Sandwern @ 06/28/2016, 6:22 PM

at! custom =?
ERROR

But this is unexpected.
The first time is. See right to cut. Privilege! Entercnd is no longer enough to change the parameters! Custom ...
We will go around in other ways ..

.

Sandwern @ 06/28/2016, 6:22 PM

AT! BAND =?
Index, Name, GW Band Mask L Band Mask
00, All Bands, 0002000004C00000 000001A0000800C5
01, Europe 3G, 0002000000400000 0000000000000000
02, North America 3G, 0000000004800000 0000000000000000
03, Europe, 0002000000400000 000000A0000800C4
04, North America, 0000000004800000 0000010000000040
05, WCDMA ALL, 0002000004C00000 0000000000000000
06, LTE ALL, 0000000000000000 000001A0000800C5

0000010000000000 - B41
0000008000000000 - B40
0000002000000000 - B38
0000000000080000 - B20
0000000000000080 - B8
0000000000000040 - B7
0000000000000004 - B3
0000000000000001 - B1
0002000000000000 - B8 (900)
0000000004000000 - B5 (850)
0000000000800000 - B2 (1900)
0000000000400000 - B1 (2100)

Ok

Here you can experience.

Configure user profiles for! Band:

(Add separate ranges):
at! entercnd = "whistler"
AT! BAND =0A7, "Band 7", 0.40
AT! BAND =0B8, "Band 20", 0.80000
AT! BAND =0D9, "Band 38", 0.20 million

Masks can be folded, for example.
AT! BAND = 5, "B3 + B7", 0.44

These profiles are stored in the router.

You can use both standard and custom profiles for selection. For example:
AT! BAND = 0 - automatic selection from any ranges
AT! BAND = 6 - automatic selection only from LTE bands
AT! BAND = 7 - only LTE Band 7
AT! BAND = 9 - only LTE Band 38
etc.

Supplement fromvitaly_dv!

Thank! Made as described, works. Team AT! BAND =<index>range is selected, but, a small addition:
the indexes seem to be consistent,

other details here:
Netgear AirCard AC785 (S), AC790 (S), AC810 (S) - Discussion (Post vitaly_dv # 52546661)

Post has been editedSkvo - 05.10.16, 00:01

[Skvo]

Sandwern @ 06/28/2016, 10:18 PM

Thank! Question: what if you need to delete a user profile?

at! entercnd = "whistler"
AT! BANDDEF

[sandwern]

Skvo @ 06/28/2016, 10:10

Here you can experience.

Configure user profiles for! Band:

(Add separate ranges):
at! entercnd = "whistler"
AT! BAND = 0A, ”Band 7”, 0.40
AT! BAND = 0B, "Band 20", 0.80000
AT! BAND = 0C, "Band 3", 0.4
AT! BAND = 0D, "Band 38", 0.200000000

Masks can be folded, for example.
AT! BAND = 0E, "B3 + B7", 0.44

These profiles are stored in the router.

You can use both standard and custom profiles for selection. For example:
AT! BAND = 00 - automatic selection from any ranges
AT! BAND = 06 - automatic selection only from LTE bands
AT! BAND = 0A - only LTE Band 7
AT! BAND = 0D - only LTE Band 38
etc.

So I understand, they will be visible in the face. Hence the question: in which case, how can I delete user profiles?

Skvo @ 06/28/2016, 10:20 PM

at! entercnd = "whistler"
AT! BANDDEF

Thank!

Post has been editedsandwern - 28.06.16, 22:21

[Fichetto]

people, please tell me, suspended my NETGEAR 785

I try to turn on the screen, the screen saver turns on with the name, climbs and is cut down, then three times trying to turn on itself and finally dies.

What can you do with it? can flash or what ...

[sandwern]

Fichetto @ 06/29/2016, 6:32 PM

people, please tell me, suspended my NETGEAR 785

I try to turn on the screen, the screen saver turns on with the name, climbs and is cut down, then three times trying to turn on itself and finally dies.

What can you do with it? can flash or what ...

Prompt behavior as inthis video? How long have it been acquired (approximately)?
How does an AirCard behave if you plug it into a charger plugged in and then try to turn it on?

[Fichetto]

Yes, exactly as in the video.
if you connect a stationary, it is still the same.

long have acquired, (gift) will clarify if it is important.

[sandwern]

Fichetto @ 07/03/2016, 5:16 PM

Yes, exactly as in the video.
if you connect a stationary, it is still the same.

Absolutely without a battery with a network connection tried to include?
You can try resetting your AirCard settings by pressing and holding the navigation and power buttons for five seconds.

Why I asked about the statute of limitations: if a year has not yet passed, it is quite acceptable to contact the service, after which they will most likely replace your device.

Fichetto @ 06/29/2016, 6:32 PM

What can you do with it? can flash or what ...

Firmware is here:AC785S_02.08.00.51.00_EMEAHowever, in this situation, it will not help much, the router may simply not have time to go into update mode.
In addition, if it turns out that the battery / problem is hardware to blame (or the device will reboot during the update process), there is a risk of seriously damaging your AirCard.

Post has been editedsandwern - 03.07.16, 20:06