Chinese 4G LTE modem with WiFi option based on Qualcomm MDM9600 / MDM9610 - discussion | [ltemodem] [usbwifi] | 4G modem



Rep: (7)
Chinese 4G LTE modem with WiFi option based on Qualcomm MDM9600 / MDM9610 - discussion пїЅ
ltemodem usbwifi | USB: 4G modem


Attached Image

I propose to exchange useful information about a cheap Chinese 4G modem based on Qualcomm MDM9600 / MDM9610.
I took it under the name PIXLINK (PIX-LINK) 4G LTE 100Mbps USB Modem.
Likely analogues (or alternative names): ALEKA UV310, Yifan Yeacomm D21, Emi (EMICOLOR CORP.), Unicom l-4g-008, Xinxun 9600. Likely manufacturer: ALEKA INCORPORATED.

What for:
- Cheap.
- Silent IMEI (works without change in unlimited tariffs, although it changes elementarily, see below)
- The chip, in theory, should be flashed into other LTE Bands.

Why a separate topic: the device probably grew out of this:Chinese 3G HSDPA Modem- but there are significant differences, and little information was found. In addition, what we managed to collect - already allows you to fully use the device. Suddenly someone will come in handy. I leave the information below.
Description
How it works on Windows.
The first time it is connected, it is defined as VendorID 05c6, ProductID f000
CD-ROM 4G MMC Storage 2.31 PQ: 0 ANSI: 2
The software differs externally, depending on the model with or without WiFi, but is functionally identical; when connecting the model with WiFi, both software options have a mode setting: Dongle or Wifi mode.
Pictures in the description, there is no Russian software interface.
The WiFi version has a WebUI at 192.168.100.1 that painfully resembles this:
HAME MPR-A1 - Discussion
but Telnet is missing (nmap checked, only HTTP 80 and Dnsmasq are listening on the 53rd)

After installing the drivers, 4 COM ports appear (a screenshot in the description).

The set of settings available in the interface is extremely limited.
For a WiFi hotspot, the maximum key length is 10 characters.

It works in Linux, in OpenWRT it was possible to change the composition only for the version with WiFi (see the useful information section).

What would be interesting to know:
- are there any firmware for other LTE bands
- why OpenWrt (usbmode) cannot be a regular modem, but it can have a version with WiFi.
Additional Images
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Specifications
Not unique as Qualcomm USB Modem 6000
Chip (read from the markings in the device):
MDM9600 - version without WiFi
MDM9610 - version with WiFi

Conclusions of AT commands:
ATI
Modem (version without WiFi):
Manufacturer: QUALCOMM INCORPORATED
Model: 0
Revision: MDM9K-CIGO-D_9.5.5-4M 1 [Jan 19 2012 21:00:00]
SVN: 00
+ GCAP: + CGSM

at ^ CONAME: ALEKA INCORPORATED
at ^ PROJECTNAME: MDM9600 UV310
at ^ PRGREQ: 2EC52BEF67923802C5822C31
at ^ PRGACK: 1,14105,476525J, 18111.168.217
at ^ PRGINFOJ, 18111.168.217
at ^ TECHAUTH: CIGO CO.LTD
at ^ SWVER: MDM9K-CIGO-D_9.5.5-4M, Jun 21 2016,20: 53: 56
at ^ HWVER: UV310-D-5.1 CGWL
at ^ MEID: a80000320025b2
at ^ SYSINFO: 2,2,0,5,1, 4

Version c WiFi Hotspot:
Manufacturer: QUALCOMM INCORPORATED
Model: 0
Revision: 9600-UFI-2.0 1 [Jan 19 2012 11:05:00]
SVN: 00
+ GCAP: + CGSM, + DS, + ES


I quote the rest from the Chinese store, I took it specifically for LTE Band 3, did not check it in all details.
FDD-LTE: 2100 (B1) / 1800 (B3); WCDMA 2100; GSM / GPRS / EDGE 850/900/1800 / 1900MHz
HSPA +: 3GPP Release6, up to 11Mbps UL, category 7
HSPA +: 3GPP Release, up to 42Mbps DL, category 7/8
EDGE: 3GPP Release4, up to 384Kbps DL and UL
GSM: 3GPP Release 4, Multislot class 12, up to 237Kbps
GPRS: 3GPP Release4, Multislot class 10, up to 85.6Kbps
USB: standard USB interface
USB speed: USB 2.0
Power mode: powered by USB interface
SIM / USIM пјљ standard 6 Pin SIM card interface, compliant with 3GPP 31.101 and 31.102
AT interface: 3GPP TS 27.005 and 27.007
Useful information
As defined in Linux
[10824.093039] usb 1-1.2.4: new high-speed USB device number 10 using dwc_otg
[10824.226079] usb 1-1.2.4: New USB device found, idVendor = 05c6, idProduct = f000
[10824.226103] usb 1-1.2.4: New USB device strings: Mfr = 3, Product = 2, SerialNumber = 4
[10824.226114] usb 1-1.2.4: Product: Qualcomm CDMA Technologies MSM
[10824.226147] usb 1-1.2.4: Manufacturer: Qualcomm, Incorporated
[10824.226158] usb 1-1.2.4: SerialNumber: 1234567890ABCDEF
[10825.305320] scsi 2: 0: 0: 0: CD-ROM 4G MMC Storage 2.31 PQ: 0 ANSI: 2
[10825.308836] sr 2: 0: 0: 0: [sr1] scsi-1 drive
[10825.311851] sr 2: 0: 0: 0: Attached scsi CD-ROM sr1

Bus 001 Device 010: ID 05c6: f000 Qualcomm, Inc.
Excerpts from the USB Trace
1. Version without WiFi
00000000 55 53 42 43 A0 04 10 09 C0 00 00 00 80 00 06 71 03 00 00 00 00 00 00 00 00 00 00 00 U S B C. . . A. . . ? . . q. . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 43 A0 04 10 09 C0 00 00 00 80 00 06 71 03 00 00 00 00 00 00 00 00 00 00 00 U S B C. . . A. . . ? . . q. . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 53 A0 04 10 09 C0 00 00 00 00 U S B S. . . A. . . .

2. WiFi version:

00000000 55 53 42 43 10 DC 9F 07 12 00 00 00 80 00 0C 03 00 00 00 12 00 00 00 00 00 00 00 00 U S B C. U? . . . . . ? . . . . . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 53 10 DC 9F 07 00 00 00 00 00 00 U S B S. U? . . . . . .
00000000 41 54 2B 43 50 49 4E 3F 0D A T + C P I N? .
00000000 41 54 2B 57 49 46 49 3F 0D A T + W I F I? .
00000000 41 54 2B 4E 45 54 4D 4F 44 45 3F 0D A T + N E T M O D E? .
00000000 41 54 2B 43 53 51 0D A T + C S Q.
00000000 41 54 2B 57 49 46 49 3D 31 0D A T + W I F I = 1.
00000000 41 54 2B 54 45 53 54 49 4E 46 4F 3D 32 35 32 0D 00 00 00 00 00 00 00 00 00 00 00 00 00 A T + T E S T I N F O = 2 5 2. . . . . . . . . . . . .
0000001C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00. . . . . . . . . . . . . . . . . . . . .
00000000 41 54 5E 53 59 53 49 4E 46 4F 0D A T ^ S Y S I N F O.
00000000 0D 0A 5E 53 59 53 49 4E 46 4F 3A 31 2C 30 2C 31 2C 35 2C 32 35 35 2C 2C 30 0D 0A 0D. . ^ S Y S I N F O: 1, 0, 1, 5, 2 5 5, 0. . .
0000001C 0A 4F 4B 0D 0A. O K. .
00000000 41 54 2B 50 48 50 52 45 46 3D 34 0D 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AT + P H P R E F = 4. . . . . . . . . . . . . . . . .
0000001C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00. . . . . . . . . . . . . . . . . . . . .
00000000 41 54 5E 53 53 49 44 3F 0D A T ^ S S I D? .
00000000 41 54 5E 43 49 4D 49 0D A T ^ C I M I.
00000000 41 54 2B 57 49 46 49 3D 30 0D A T + W I F I = 0.
00000000 41 54 5E 53 59 53 49 4E 46 4F 0D A T ^ S Y S I N F O.
00000000 0D 0A 5E 53 59 53 49 4E 46 4F 3A 31 2C 30 2C 31 2C 35 2C 32 35 35 2C 2C 30 0D 0A 0D. . ^ S Y S I N F O: 1, 0, 1, 5, 2 5 5, 0. . .
0000001C 0A 4F 4B 0D 0A. O K. .


Changing composition on Linux
usb_modeswitch -v 05C6 -p f000 -V 05C6 -P 6000 -W -M '555342431234567890ABCDEF80000671030000000000000000000000000000'

Four / dev / ttyUSB [0-3] will appear, then everything is almost automatic.
echo '05c6 6000 ff'>/ sys / bus / usb-serial / drivers / option1 / new_id
wvdialconf
etc.
pfSense (FreeBSD)
1. Install usb_modeswitch byofficial instructions
Links, of course, become outdated - you have to find the link for the desired version.
Currently, for x86_64:
pkg add http://pkg.freebsd.org/freebsd:10:x86:64/latest/All/usb_modeswitch-2.5.0.txz

Currently, for i386:
pkg add http://pkg.freebsd.org/FreeBSD:10:i386/latest/All/usb_modeswitch-2.5.0.txz


2. Create the /usr/local/etc/devd/05c6-f000.conf file with the following contents, which has a little trick (5 sec delay), without which the results of usb_modswitch are either overwritten or cannot be reached at all:
attach 10 {
device-name "umass [0-9] +";
match "vendor" "0x05c6";
match "product" "0xf000";
action "sleep 5; / usr / local / sbin / usb_modeswitch -v 05C6 -p f000 -V 05C6 -P 6000 -W -M '555342431234567890ABCDEF80000671030000000000000000000000000000'";
};

3. Restart the devd daemon
service devd restart

4. (Re) stick the modem, then configure it according to the instructions (at the moment everything is under the old interface, but the essence is the same):
https: //doc.pfsense.or.../Configuring_3G_modems
or the second part is here:https://habrahabr.ru/post/187702/
The phone number to use is * 99 #, the APN field is under the "Advanced" button.
After creating PPP and assigning the interface, you need to go into it, enable it and select PPP again.

OpenWrt Chaos Calmer 15.05 (usbmode)
In NEXX-WT3020 - it works after adapting usbmode (see a bit below).
Also tried in clone HAME A1HAME MPR-A1 - Discussion

Peppy Snowdrop 2.4.0 Beta 7 for A5 V11 (RT5350F 4MB / 32MB) - none of the device’s versions started up.

"Tricky Brownie"Modified OpenWRT firmware for Hame-A1, A15 and its clones :
version without modem does not start in any
I tried accordingly with such a change in the usbmode config:
"05c6: f000": {
"*": {
"t_vendor": 1478,
"t_product": [24576],
"mode": "StandardEject",
"msg": "5553424312345679c000000080000671030000000000000000000000000000"
}
},
where the msg value was also tried by the number of the element in the array


At the same time, the WiFi version is switched to WiFi mode, it is instantly detected by OpenWRT, which “crushes” it for itself, takes / dev / ttyUSB0 and raises the 3G connection.
The only thing I did before was that under Windows I added the connection parameters (APN, phone number * 99 #) to my profile for my provider.
WiFi at the same time works, but it becomes completely useless - after all, the modem port selects OpenWRT. Therefore, I decided to disable WiFi with the AT command - see below.
How to change IMEI
Everything is simple to ugliness:
at + wrimei2 =<required_ciphers>
(specify: for example, at + wrimei2 = 111122223333555)
How to turn on / off WiFi
at + wifi = 0
at + wifi = 1
request status: at + wifi?

It’s convenient to do the same in a script, send it to the second port with a busy modem:
echo "at + wifi = 0">/ dev / ttyUSB1
echo "at + wifi = 1">/ dev / ttyUSB1
Other AT teams

at + cfun = 1,1 - reboot

AT + CLAC - All supported commands. Descriptions can be googled for example with the keywords AT Command Set GOBI
How is the antenna connected
Attached Image
Where to buy, links to analogues and more
I don’t see the point of leaving a link to a specific product, especially since the store raised the price for some reason. It’s easy to find PIXLINK 4G LTE on demand, but as noted above, Pix-link is no brand.
Look in appearance, do not forget to select the right LTE Band.

As far as I understand, the Qualcomm 9600 chip supports any bands, but not all at once, but only two necessary at the request of the creator of the firmware.

More similar devices:
Yeacomm
Emi
Unicom
xinxun

Probable manufacturer:
http://www.aleka.com.cn/service.html
http://en.aleka.com.cn/


There is no curator in the subject. For questions about filling the caps, contact the author in the QMS or the section moderators via the buttonA complaintunder the messages. How to do it right, what would you understand the first time, well describedhere.

Post has been edited25x8 - 06.10.18, 21:18
Reason for editing: added about Nexx router and photo antenna



Rep: (16)
Roman Dmitrievich @ 03/16/18, 16:18*
Has anyone bought this 4G906? Does it work normally with Yota ...

Judging by the photo, then this is the same modem as mine. Iota does not work.

Post has been editedscorpion1977 - 17.03.18, 13:20



Rep: (0)
They sent it to me as I get it



Rep: (0)
Guys, please tell me how to fix TTL on this modem without wifi. otherwise MTS blocks
use it with zyxel keenetic 4g III



Rep: (0)
The modem got 4g catches checked on the beeline and pay



Rep: (17)
Hello.
I bought such a mythUnlocked 3G 4G FDD LTE WiFi router modem USB Wifi wireless modem with SIM Card Slot


similar to qualcomm. EF910 version, which is with Wi-Fi. Goes well on an iota.

I will list the IDs that appear after switch
USB composite device
USB \ VID_161C & PID_F101 & REV_0232
USB \ VID_161C & PID_F101

Qualcomm application
USB \ VID_161C & PID_F101 & REV_0232 & MI_00
USB \ VID_161C & PID_F101 & MI_00

Qualcomm Virtual Ethernet Adapter
USB \ VID_161C & PID_F101 & REV_0232 & MI_01
USB \ VID_161C & PID_F101 & MI_01

USB storage device
USB \ VID_161C & PID_F101 & REV_0232 & MI_02
USB \ VID_161C & PID_F101 & MI_02

Disk drive
USBSTOR \ DiskLTE _____ Hotspot _________ 2.31
USBSTOR \ DiskLTE _____ Hotspot_________
USBSTOR \ DiskLTE _____
USBSTOR \ LTE _____ Hotspot_________2
LTE_____Hotspot_________2
USBSTOR \ GenDisk
Genisk


terminal issuance

at + wifi?
ERROR
at + clac
ERROR
ati
Manufacturer: + GMI: WOSIN
Model: LTE USB MODEM
Revision: _X.Y
IMEI: 356793033818055
+ GCAP: + CGSM, + DS, + ES

Ok
at + gmi
Wosin

Ok


Post has been editedololopetr - 05.04.18, 07:00



Rep: (-1)
* ololopetr what speed? And how to determine whether it catches 4G or not? Is this shown in the web interface?



Rep: (0)
Guys, it was not possible to register IMEI in the Chinese modem via the hyperterminal with the command AT + WRIMEI =<IMEI code>writes Recieve: + CME ERROR: memory failure-Get: + CME error: memory failure how to configure this miracle?



Rep: (0)
Hello.
Could not find a way to flash (or somehow enable) other "BANDs" of LTE 4G?
And then MTS works with a bang, but TELE2 does not. They work on 7.20 and 38, and we have like 1 and 3.



Rep: (1)
Finally managed to run this unit under Linux 18.04.

Looks like the right driver: usb-modemswitch. And he stands there automatically.



Rep: (0)
Hello. How to change IMEI on this modem? For all necessary AT commands ERROR.



Rep: (0)
Good afternoon, who knows if the modem works on yota 4G?



Rep: (0)
It worked perfectly, changed the access point to MTS and was happy, but it so happened that it suddenly stopped responding, the color diode does not light up, but it gets very hot, help anyone



Rep: (25)
Hello. I got this device for use at work and on long-distance trips:https: //ru.aliexpress....3111.0.0.274233edLFc6b5
I tried cards Motive, Tele2, MTS and Yota. On Motive and MTS I immediately saw 4G, on Tele2 only 3G, on Yota sometimes it does not see 4G, a reboot helps. A Yota SIM card with a tariff for a smartphone, the store vowed that they won’t work with USB modems, but it works with this. The program included in the kit is pretty wretched, several messages arrived, but it is impossible to read them, there is no such item, can someone share their own who has the "Messages" item? Configured through the web-based interface the connection and distribution of the Internet via Wi-Fi.
Disadvantages: since there is a SIM card with a tariff for a smartphone (I do not need no limit, there is no way to control the balance and the rest of the traffic, because the fucking Yota can only do this through the application. When connected to 4G Internet on Yota, the web interface hangs tightly , however, nothing hangs on 3G. However, the Internet is also available via Wi-Fi without any problems. After a couple of hours of work, by the way, even on the 3G web interface it still hangs, which does not affect the work.
Attached Image

Attached Image

Attached Image

Attached Image


Post has been editedkotyara_sr - 20.01.19, 14:46
Reason for editing: Added pictures.



Rep: (13)
Tell me, is there a program for the android for this modem, in addition to the PPP widget,? The fact is that I use this modem in the car radio on the android, in the radio itself there is a modem connection setting in the settings, but the device does not see the modem and therefore is not active, it connects normally via wifi, but sometimes the modem is disconnected from the wifi radio, through the ppr widget the modem clings, but the widget itself is not stable and most importantly it cannot be activated in a third-party launcher (Agama), maybe there is an alternative to ppr viget? Maybe you can flash it so that MMS sees it .... Thank you in advance

Post has been editedtersik - 27.10.18, 21:42



Rep: (5)
This pandao modem came for 800 rubles. Inserted into xiaomi router 3G on padawan. Sim card Rostelecom, works on the Tele2 network. Band 3. The case had to be removed, wide too, the antenna interferes. Heats up to 60.

Attached images
Attached Image
Attached Image



Rep: (0)
Good day! People tell me please, where is the contact that needs to be shorted to the housing for disaster recovery?
Attached Image
Attached Image



Rep: (12)
Attached Image
Attached Image

Here is a miracle acquired. Frequency supports everything! on pandao for 1500 rubles you can take. If the Wi-Fi is loaded, then it falls off. Have from the series 865298 ...... But here is the "unlimited" from MTS and "everything is possible" from the beeline wound up on it, which is strange. A similar tariff from a megaphone refused to work on it. Tell me how to have a change on it. No port appears, respectively, the terminal does not connect to enter a command from the header. The modem is controlled via the web interface.
Attached Image


Post has been editedtrubodur82 - 17.01.19, 14:27



Rep: (15)
And so this device came, stuck in a SIM card of Rostelecom, it seems to show 4zhi but the speed is not more than 10 and it does not work in USB from the radio constantly, so it is advisable to supply power 2 amperes then all the rules.



Rep: (25)
supply preferably 2 amperes

Why does he need two amperes when he consumes no more than 400 milliamps. It works without problems in my single-amp socket.



Rep: (15)
It works without problems in my single-amp socket.

Well, I just have a 2 amp charger, but from the USB radio, xs always flies out how much it gives out.


Full version    

Help     rules

Now: 09/15/19, 08:51