Chinese 4G LTE modem with WiFi option based on Qualcomm MDM9600 / MDM9610 - discussion | [ltemodem] [usbwifi] | 4G modem



Rep: (7)
Chinese 4G LTE modem with WiFi option based on Qualcomm MDM9600 / MDM9610 - discussion пїЅ
ltemodem usbwifi | USB: 4G modem


Attached Image

I propose to exchange useful information about a cheap Chinese 4G modem based on Qualcomm MDM9600 / MDM9610.
I took it under the name PIXLINK (PIX-LINK) 4G LTE 100Mbps USB Modem.
Likely analogues (or alternative names): ALEKA UV310, Yifan Yeacomm D21, Emi (EMICOLOR CORP.), Unicom l-4g-008, Xinxun 9600. Likely manufacturer: ALEKA INCORPORATED.

What for:
- Cheap.
- Silent IMEI (works without change in unlimited tariffs, although it changes elementarily, see below)
- The chip, in theory, should be flashed into other LTE Bands.

Why a separate topic: the device probably grew out of this:Chinese 3G HSDPA Modem- but there are significant differences, and little information was found. In addition, what we managed to collect - already allows you to fully use the device. Suddenly someone will come in handy. I leave the information below.
Description
How it works on Windows.
The first time it is connected, it is defined as VendorID 05c6, ProductID f000
CD-ROM 4G MMC Storage 2.31 PQ: 0 ANSI: 2
The software differs externally, depending on the model with or without WiFi, but is functionally identical; when connecting the model with WiFi, both software options have a mode setting: Dongle or Wifi mode.
Pictures in the description, there is no Russian software interface.
The WiFi version has a WebUI at 192.168.100.1 that painfully resembles this:
HAME MPR-A1 - Discussion
but Telnet is missing (nmap checked, only HTTP 80 and Dnsmasq are listening on the 53rd)

After installing the drivers, 4 COM ports appear (a screenshot in the description).

The set of settings available in the interface is extremely limited.
For a WiFi hotspot, the maximum key length is 10 characters.

It works in Linux, in OpenWRT it was possible to change the composition only for the version with WiFi (see the useful information section).

What would be interesting to know:
- are there any firmware for other LTE bands
- why OpenWrt (usbmode) cannot be a regular modem, but it can have a version with WiFi.
Additional Images
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Specifications
Not unique as Qualcomm USB Modem 6000
Chip (read from the markings in the device):
MDM9600 - version without WiFi
MDM9610 - version with WiFi

Conclusions of AT commands:
ATI
Modem (version without WiFi):
Manufacturer: QUALCOMM INCORPORATED
Model: 0
Revision: MDM9K-CIGO-D_9.5.5-4M 1 [Jan 19 2012 21:00:00]
SVN: 00
+ GCAP: + CGSM

at ^ CONAME: ALEKA INCORPORATED
at ^ PROJECTNAME: MDM9600 UV310
at ^ PRGREQ: 2EC52BEF67923802C5822C31
at ^ PRGACK: 1,14105,476525J, 18111.168.217
at ^ PRGINFOJ, 18111.168.217
at ^ TECHAUTH: CIGO CO.LTD
at ^ SWVER: MDM9K-CIGO-D_9.5.5-4M, Jun 21 2016,20: 53: 56
at ^ HWVER: UV310-D-5.1 CGWL
at ^ MEID: a80000320025b2
at ^ SYSINFO: 2,2,0,5,1, 4

Version c WiFi Hotspot:
Manufacturer: QUALCOMM INCORPORATED
Model: 0
Revision: 9600-UFI-2.0 1 [Jan 19 2012 11:05:00]
SVN: 00
+ GCAP: + CGSM, + DS, + ES


I quote the rest from the Chinese store, I took it specifically for LTE Band 3, did not check it in all details.
FDD-LTE: 2100 (B1) / 1800 (B3); WCDMA 2100; GSM / GPRS / EDGE 850/900/1800 / 1900MHz
HSPA +: 3GPP Release6, up to 11Mbps UL, category 7
HSPA +: 3GPP Release, up to 42Mbps DL, category 7/8
EDGE: 3GPP Release4, up to 384Kbps DL and UL
GSM: 3GPP Release 4, Multislot class 12, up to 237Kbps
GPRS: 3GPP Release4, Multislot class 10, up to 85.6Kbps
USB: standard USB interface
USB speed: USB 2.0
Power mode: powered by USB interface
SIM / USIM пјљ standard 6 Pin SIM card interface, compliant with 3GPP 31.101 and 31.102
AT interface: 3GPP TS 27.005 and 27.007
Useful information
As defined in Linux
[10824.093039] usb 1-1.2.4: new high-speed USB device number 10 using dwc_otg
[10824.226079] usb 1-1.2.4: New USB device found, idVendor = 05c6, idProduct = f000
[10824.226103] usb 1-1.2.4: New USB device strings: Mfr = 3, Product = 2, SerialNumber = 4
[10824.226114] usb 1-1.2.4: Product: Qualcomm CDMA Technologies MSM
[10824.226147] usb 1-1.2.4: Manufacturer: Qualcomm, Incorporated
[10824.226158] usb 1-1.2.4: SerialNumber: 1234567890ABCDEF
[10825.305320] scsi 2: 0: 0: 0: CD-ROM 4G MMC Storage 2.31 PQ: 0 ANSI: 2
[10825.308836] sr 2: 0: 0: 0: [sr1] scsi-1 drive
[10825.311851] sr 2: 0: 0: 0: Attached scsi CD-ROM sr1

Bus 001 Device 010: ID 05c6: f000 Qualcomm, Inc.
Excerpts from the USB Trace
1. Version without WiFi
00000000 55 53 42 43 A0 04 10 09 C0 00 00 00 80 00 06 71 03 00 00 00 00 00 00 00 00 00 00 00 U S B C. . . A. . . ? . . q. . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 43 A0 04 10 09 C0 00 00 00 80 00 06 71 03 00 00 00 00 00 00 00 00 00 00 00 U S B C. . . A. . . ? . . q. . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 53 A0 04 10 09 C0 00 00 00 00 U S B S. . . A. . . .

2. WiFi version:

00000000 55 53 42 43 10 DC 9F 07 12 00 00 00 80 00 0C 03 00 00 00 12 00 00 00 00 00 00 00 00 U S B C. U? . . . . . ? . . . . . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 53 10 DC 9F 07 00 00 00 00 00 00 U S B S. U? . . . . . .
00000000 41 54 2B 43 50 49 4E 3F 0D A T + C P I N? .
00000000 41 54 2B 57 49 46 49 3F 0D A T + W I F I? .
00000000 41 54 2B 4E 45 54 4D 4F 44 45 3F 0D A T + N E T M O D E? .
00000000 41 54 2B 43 53 51 0D A T + C S Q.
00000000 41 54 2B 57 49 46 49 3D 31 0D A T + W I F I = 1.
00000000 41 54 2B 54 45 53 54 49 4E 46 4F 3D 32 35 32 0D 00 00 00 00 00 00 00 00 00 00 00 00 00 A T + T E S T I N F O = 2 5 2. . . . . . . . . . . . .
0000001C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00. . . . . . . . . . . . . . . . . . . . .
00000000 41 54 5E 53 59 53 49 4E 46 4F 0D A T ^ S Y S I N F O.
00000000 0D 0A 5E 53 59 53 49 4E 46 4F 3A 31 2C 30 2C 31 2C 35 2C 32 35 35 2C 2C 30 0D 0A 0D. . ^ S Y S I N F O: 1, 0, 1, 5, 2 5 5, 0. . .
0000001C 0A 4F 4B 0D 0A. O K. .
00000000 41 54 2B 50 48 50 52 45 46 3D 34 0D 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AT + P H P R E F = 4. . . . . . . . . . . . . . . . .
0000001C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00. . . . . . . . . . . . . . . . . . . . .
00000000 41 54 5E 53 53 49 44 3F 0D A T ^ S S I D? .
00000000 41 54 5E 43 49 4D 49 0D A T ^ C I M I.
00000000 41 54 2B 57 49 46 49 3D 30 0D A T + W I F I = 0.
00000000 41 54 5E 53 59 53 49 4E 46 4F 0D A T ^ S Y S I N F O.
00000000 0D 0A 5E 53 59 53 49 4E 46 4F 3A 31 2C 30 2C 31 2C 35 2C 32 35 35 2C 2C 30 0D 0A 0D. . ^ S Y S I N F O: 1, 0, 1, 5, 2 5 5, 0. . .
0000001C 0A 4F 4B 0D 0A. O K. .


Changing composition on Linux
usb_modeswitch -v 05C6 -p f000 -V 05C6 -P 6000 -W -M '555342431234567890ABCDEF80000671030000000000000000000000000000'

Four / dev / ttyUSB [0-3] will appear, then everything is almost automatic.
echo '05c6 6000 ff'>/ sys / bus / usb-serial / drivers / option1 / new_id
wvdialconf
etc.
pfSense (FreeBSD)
1. Install usb_modeswitch byofficial instructions
Links, of course, become outdated - you have to find the link for the desired version.
Currently, for x86_64:
pkg add http://pkg.freebsd.org/freebsd:10:x86:64/latest/All/usb_modeswitch-2.5.0.txz

Currently, for i386:
pkg add http://pkg.freebsd.org/FreeBSD:10:i386/latest/All/usb_modeswitch-2.5.0.txz


2. Create the /usr/local/etc/devd/05c6-f000.conf file with the following contents, which has a little trick (5 sec delay), without which the results of usb_modswitch are either overwritten or cannot be reached at all:
attach 10 {
device-name "umass [0-9] +";
match "vendor" "0x05c6";
match "product" "0xf000";
action "sleep 5; / usr / local / sbin / usb_modeswitch -v 05C6 -p f000 -V 05C6 -P 6000 -W -M '555342431234567890ABCDEF80000671030000000000000000000000000000'";
};

3. Restart the devd daemon
service devd restart

4. (Re) stick the modem, then configure it according to the instructions (at the moment everything is under the old interface, but the essence is the same):
https: //doc.pfsense.or.../Configuring_3G_modems
or the second part is here:https://habrahabr.ru/post/187702/
The phone number to use is * 99 #, the APN field is under the "Advanced" button.
After creating PPP and assigning the interface, you need to go into it, enable it and select PPP again.

OpenWrt Chaos Calmer 15.05 (usbmode)
In NEXX-WT3020 - it works after adapting usbmode (see a bit below).
Also tried in clone HAME A1HAME MPR-A1 - Discussion

Peppy Snowdrop 2.4.0 Beta 7 for A5 V11 (RT5350F 4MB / 32MB) - none of the device’s versions started up.

"Tricky Brownie"Modified OpenWRT firmware for Hame-A1, A15 and its clones :
version without modem does not start in any
I tried accordingly with such a change in the usbmode config:
"05c6: f000": {
"*": {
"t_vendor": 1478,
"t_product": [24576],
"mode": "StandardEject",
"msg": "5553424312345679c000000080000671030000000000000000000000000000"
}
},
where the msg value was also tried by the number of the element in the array


At the same time, the WiFi version is switched to WiFi mode, it is instantly detected by OpenWRT, which “crushes” it for itself, takes / dev / ttyUSB0 and raises the 3G connection.
The only thing I did before was that under Windows I added the connection parameters (APN, phone number * 99 #) to my profile for my provider.
WiFi at the same time works, but it becomes completely useless - after all, the modem port selects OpenWRT. Therefore, I decided to disable WiFi with the AT command - see below.
How to change IMEI
Everything is simple to ugliness:
at + wrimei2 =<required_ciphers>
(specify: for example, at + wrimei2 = 111122223333555)
How to turn on / off WiFi
at + wifi = 0
at + wifi = 1
request status: at + wifi?

It’s convenient to do the same in a script, send it to the second port with a busy modem:
echo "at + wifi = 0">/ dev / ttyUSB1
echo "at + wifi = 1">/ dev / ttyUSB1
Other AT teams

at + cfun = 1,1 - reboot

AT + CLAC - All supported commands. Descriptions can be googled for example with the keywords AT Command Set GOBI
How is the antenna connected
Attached Image
Where to buy, links to analogues and more
I don’t see the point of leaving a link to a specific product, especially since the store raised the price for some reason. It’s easy to find PIXLINK 4G LTE on demand, but as noted above, Pix-link is no brand.
Look in appearance, do not forget to select the right LTE Band.

As far as I understand, the Qualcomm 9600 chip supports any bands, but not all at once, but only two necessary at the request of the creator of the firmware.

More similar devices:
Yeacomm
Emi
Unicom
xinxun

Probable manufacturer:
http://www.aleka.com.cn/service.html
http://en.aleka.com.cn/


There is no curator in the subject. For questions about filling the caps, contact the author in the QMS or the section moderators via the buttonA complaintunder the messages. How to do it right, what would you understand the first time, well describedhere.

Post has been edited25x8 - 06.10.18, 21:18
Reason for editing: added about Nexx router and photo antenna



Rep: (12)
james80elt @ 01.11.17, 20:38*
Maybe there are recommendations for setting up this Chinese happiness?

* james80elt
I'm the same modem with WiFi acquired in September 2017. Ali-Express for PG PX5 Android 6.0.1. Prior to that, I tried 3 different modem to connect directly (old worked 2 others - not) and using the PPP-widget. All tests were negative - GU occasionally crashed, because the car is not standing still and is constantly changing radio environments, and PPP-widget is also very capricious thing. This modem I plugged PG has strictly via WiFi, with transitional lace, which left 2 extreme outer contact on the power, and the average 2, responsible for the transmission of data, - delete, or from time to time GU swear by the disappearance of Sims and requested a reboot, and if you do not restart - the system hung. Due to the curve of the Chinese firmware Beeline immediately is not picked up (maybe it refers to those who "do not see Simca"?): Need to open a web-based interface, select the second item type UMTS network or the Auto, then press the button "Apply "(and to earn 2nd item, you must first click on the 3rd), only the diode of the yellow-white turns into a violet-green. Data transfer rate (Beeline, Nizhny Novgorod) to 10 Mbit / s, it is very rare - 20 (as I understand, a higher speed can be achieved at a frequency 2,6GGts, which do not have this modem). As predicted, the Chinese seller does not help me in my throwing. So I brush up Tasker and with the help of his AutoInput plug-wrote the script, which is WiFi connection to your modem browser opens on the page of the modem settings and presses the hapless button. Now everything is running quite stable: it is possible to start the car, to get under way and not be distracted. Over time, publish your script in sootvetstvuyushaya branch about Tasker.



Rep: (6)
* MrJeijy Thank you, unfortunately I whistle without wi-fi, so these dances are not for me. I went back to 3g modem, translated to "modem only" mode. Inet is picked up after 3 seconds after ignition without a drum and pppwidget.



Rep: (2)
yah nafik these dances with a tambourine
easier to open a dispute and get something else
then buy a router 4G operator following proper



Rep: (2313)
PetrOzz @ 25.11.17, 13:11*
yah nafik these dances with a tambourine

You're not romantic.
But what about the gimp ...
How can masturbation ...



Rep: (12)
james80elt @ 25.11.17, 10:48*
Inet is picked up after 3 seconds after ignition without a drum and pppwidget.

Perhaps other recorder manufacturers the situation is better. But I, as he wrote, PX5 with three modems sboila, 2 more new Android modem just does not see at close range. To the modem firmware changed, one of them translated exactly in the "modem only" mode, put an extra soft, HiLink tried to run over Ethernet.
For my case the modem - the best option, after you connect the network keeps excellent. Perhaps, when there will be a firmware update, an Internet modem begins to fasten on to the machine (in China the way, he touches theirs network machine, I saw the video).
P.S. dispute on Ali to open is not profitable: will have his own expense to send the modem China.



Rep: (0)
Chinese 4G LTE modem with WiFi option based on the Qualcomm MDM9600 / MDM9610

Guys if this modem firmware for Band 7 that would be at a frequency of 2600 to work? with iota not friendly at all (and very necessary ...



Rep: (2313)
Veter232 @ 10.12.17, 15:30*
Guys if this modem firmware for Band 7 that would be at a frequency of 2600 to work? with iota not friendly at all (and very necessary ...

No and never will



Rep: (0)
I bought a modem with Wifi, c Simcoe Tele2 Moscow sees 3G only.
speed 7/3 MB / s maximum If at 4G do not ask, it's rubbish, of course.
Maybe there was a firmware for it?
Which providers support its 4G range?



Rep: (7)
CGIL @ 15/12/17, 00:12*
Which providers support its 4G range?

Band (band) 3 (1800 MHz) can be used in almost all of the operators:https: //ru.wikipedia.o...0%B5%D1%82%D0%B5%D0%B9
But if used in a particular area - ask the operator himself.

Post has been edited25x8 - 16.12.17, 16:48



Rep: (3)
I wanted preobresti the "whistle" so no problem to stick in him 4g sim-cards of any operator, plug it into the Chargers and enable the distribution of wi-fi, so no problem to use the Internet, but after reading this topic realized that it is not possible!
You can tell me what "whistle" will work for me without any problems as a modem and a router at the same time to enjoy 4g internet with wi fi in the phone without androyd 4g ?!
I do not have a PC!
And I need a very small "whistle"!

Post has been editedustamab1 - 28.12.17, 18:18



Rep: (2)
Guys, after selling dispute sent me another (in the sense of the following) our device
When the automatic installation to install other dashboards
And it has already earned our miracle!

Now try tinkered to and from an Internet everything is OK and was vayfay heard from him



Rep: (2)
2 good news:
Through vebmordu (not via dashboards) I started the settings in Tele2 whistle (I Simca Tele2)
By default, vebmordu can be reached via modem vayfay (password 1234567890) at the address 192.168.100.1. Login admin, password admin.
The result showed the rate of 9/2. but I've got no coverage 4d. I'll go into town today, to measure the velocity in the zone 4d

A second news - radio infidini see this modem.
I'm just at the time zadolbalsya sort through this radio modems in the end she saw only zte mf180



Rep: (2)
Guys, there 4g
17/20 therethrough speed

Posted on 12/30/2017, 11:57:

Proof
Attached Image



Rep: (2)
Proof2
Attached Image


Post has been editedPetroz - 30.12.17, 12:04



Rep: (2)
at that moment I had the speed, took it in a different place, there was even 17/23



Rep: (0)
Children, and how to connect it to an external antenna with two cables



Rep: (0)
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Hi, I have a problem with this usb modem. My free Wi-Fi. USB-port data is broken. How to Repair it?



Rep: (16)
Recently I became the "happy" owner of the device (version with WiFi).
Briefly share impressions of use.
The modem works but gets very hot when overheating begins to fail (fall off WiFi and Internet connection). The WiFi-mode, oddly enough, works faster and more stable than in the Dongle-mode. I tried all opsosov Kursk (all have 4G, c Yota does not work!), This device is able to disperse the above 10Mbps. LTE B7 (2600), this device does not support, therefore, quick internet from it should not wait (for the same reason does not work with Yota). In general, who are satisfied with 10 Mbit Internet and do not frighten the dumps connection with the active use, due to overheating of hell - you can take it, but I do not see much sense, because 10 Mbps are now able to give almost any opsos via 3G standard, besides 3G-modem is cheaper or better to buy a 4G-modem at opsosa followed unlock stuff if needed.

Post has been editedscorpion1977 - 22.02.18, 15:05



Rep: (0)
The Chinese sent a version without wi-fi, although ordered the contrary. There was a problem to make friends with its router DIR-320 rev. B1. My choice somehow fell on the firmware ZyXEL Keenetic 4G II rev.A. Everything was done in the instructions, and the miracle came. This whistle is successfully working with the DIR-320, continue testit further.



Rep: (26)
https://www.aliexpress.com/item/Mobile-Hotspot-4G-USB-wifi-dongle-Modem-Mini-4G-WiFi-SIM-Router-Support-4G-3G-2G/32433161110.html- here a seller insists that supports FDD-LTE: B1 / B3 / B7 / B8 / B20 FDD 2100 / 1800MHZ / 2600/900/800. Even said he chatting about the 2600 LTE FDD support, Band 7 (2500-2530 mhz / 2620-2650 mhz), received a positive response.
I buy anyone this model 4G906? If it is working with Yota in Russia?


Full version    

Help     rules

Time is now: 27/09/19, 6:02