Chinese 4G LTE modem with WiFi option based on Qualcomm MDM9600 / MDM9610 - discussion пїЅ ltemodem usbwifi | USB: 4G modem I propose to exchange useful information about a cheap Chinese 4G modem based on Qualcomm MDM9600 / MDM9610.
I took it under the name PIXLINK (PIX-LINK) 4G LTE 100Mbps USB Modem.
Likely analogues (or alternative names): ALEKA UV310, Yifan Yeacomm D21, Emi (EMICOLOR CORP.), Unicom l-4g-008, Xinxun 9600. Likely manufacturer: ALEKA INCORPORATED.
What for:
- Cheap.
- Silent IMEI (works without change in unlimited tariffs, although it changes elementarily, see below)
- The chip, in theory, should be flashed into other LTE Bands.
Why a separate topic: the device probably grew out of this:
Chinese 3G HSDPA Modem- but there are significant differences, and little information was found. In addition, what we managed to collect - already allows you to fully use the device. Suddenly someone will come in handy. I leave the information below.
Description
How it works on Windows.
The first time it is connected, it is defined as VendorID 05c6, ProductID f000
CD-ROM 4G MMC Storage 2.31 PQ: 0 ANSI: 2
The software differs externally, depending on the model with or without WiFi, but is functionally identical; when connecting the model with WiFi, both software options have a mode setting: Dongle or Wifi mode.
Pictures in the description, there is no Russian software interface.
The WiFi version has a WebUI at 192.168.100.1 that painfully resembles this:
HAME MPR-A1 - Discussionbut Telnet is missing (nmap checked, only HTTP 80 and Dnsmasq are listening on the 53rd)
After installing the drivers, 4 COM ports appear (a screenshot in the description).
The set of settings available in the interface is extremely limited.
For a WiFi hotspot, the maximum key length is 10 characters.
It works in Linux, in OpenWRT it was possible to change the composition only for the version with WiFi (see the useful information section).
What would be interesting to know:
- are there any firmware for other LTE bands
- why OpenWrt (usbmode) cannot be a regular modem, but it can have a version with WiFi.
Specifications
Not unique as Qualcomm USB Modem 6000
Chip (read from the markings in the device):
MDM9600 - version without WiFi
MDM9610 - version with WiFi
Conclusions of AT commands:
ATI
Modem (version without WiFi):
Manufacturer: QUALCOMM INCORPORATED
Model: 0
Revision: MDM9K-CIGO-D_9.5.5-4M 1 [Jan 19 2012 21:00:00]
SVN: 00
+ GCAP: + CGSM
at ^ CONAME: ALEKA INCORPORATED
at ^ PROJECTNAME: MDM9600 UV310
at ^ PRGREQ: 2EC52BEF67923802C5822C31
at ^ PRGACK: 1,14105,476525J, 18111.168.217
at ^ PRGINFOJ, 18111.168.217
at ^ TECHAUTH: CIGO CO.LTD
at ^ SWVER: MDM9K-CIGO-D_9.5.5-4M, Jun 21 2016,20: 53: 56
at ^ HWVER: UV310-D-5.1 CGWL
at ^ MEID: a80000320025b2
at ^ SYSINFO: 2,2,0,5,1, 4
Version c WiFi Hotspot:
Manufacturer: QUALCOMM INCORPORATED
Model: 0
Revision: 9600-UFI-2.0 1 [Jan 19 2012 11:05:00]
SVN: 00
+ GCAP: + CGSM, + DS, + ES
I quote the rest from the Chinese store, I took it specifically for LTE Band 3, did not check it in all details.
FDD-LTE: 2100 (B1) / 1800 (B3); WCDMA 2100; GSM / GPRS / EDGE 850/900/1800 / 1900MHz
HSPA +: 3GPP Release6, up to 11Mbps UL, category 7
HSPA +: 3GPP Release, up to 42Mbps DL, category 7/8
EDGE: 3GPP Release4, up to 384Kbps DL and UL
GSM: 3GPP Release 4, Multislot class 12, up to 237Kbps
GPRS: 3GPP Release4, Multislot class 10, up to 85.6Kbps
USB: standard USB interface
USB speed: USB 2.0
Power mode: powered by USB interface
SIM / USIM пјљ standard 6 Pin SIM card interface, compliant with 3GPP 31.101 and 31.102
AT interface: 3GPP TS 27.005 and 27.007
Useful information
As defined in Linux
[10824.093039] usb 1-1.2.4: new high-speed USB device number 10 using dwc_otg
[10824.226079] usb 1-1.2.4: New USB device found, idVendor = 05c6, idProduct = f000
[10824.226103] usb 1-1.2.4: New USB device strings: Mfr = 3, Product = 2, SerialNumber = 4
[10824.226114] usb 1-1.2.4: Product: Qualcomm CDMA Technologies MSM
[10824.226147] usb 1-1.2.4: Manufacturer: Qualcomm, Incorporated
[10824.226158] usb 1-1.2.4: SerialNumber: 1234567890ABCDEF
[10825.305320] scsi 2: 0: 0: 0: CD-ROM 4G MMC Storage 2.31 PQ: 0 ANSI: 2
[10825.308836] sr 2: 0: 0: 0: [sr1] scsi-1 drive
[10825.311851] sr 2: 0: 0: 0: Attached scsi CD-ROM sr1
Bus 001 Device 010: ID 05c6: f000 Qualcomm, Inc.
Excerpts from the USB Trace
1. Version without WiFi
00000000 55 53 42 43 A0 04 10 09 C0 00 00 00 80 00 06 71 03 00 00 00 00 00 00 00 00 00 00 00 U S B C. . . A. . . ? . . q. . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 43 A0 04 10 09 C0 00 00 00 80 00 06 71 03 00 00 00 00 00 00 00 00 00 00 00 U S B C. . . A. . . ? . . q. . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 53 A0 04 10 09 C0 00 00 00 00 U S B S. . . A. . . .
2. WiFi version:
00000000 55 53 42 43 10 DC 9F 07 12 00 00 00 80 00 0C 03 00 00 00 12 00 00 00 00 00 00 00 00 U S B C. U? . . . . . ? . . . . . . . . . . . . . . .
0000001C 00 00 00. . .
00000000 55 53 42 53 10 DC 9F 07 00 00 00 00 00 00 U S B S. U? . . . . . .
00000000 41 54 2B 43 50 49 4E 3F 0D A T + C P I N? .
00000000 41 54 2B 57 49 46 49 3F 0D A T + W I F I? .
00000000 41 54 2B 4E 45 54 4D 4F 44 45 3F 0D A T + N E T M O D E? .
00000000 41 54 2B 43 53 51 0D A T + C S Q.
00000000 41 54 2B 57 49 46 49 3D 31 0D A T + W I F I = 1.
00000000 41 54 2B 54 45 53 54 49 4E 46 4F 3D 32 35 32 0D 00 00 00 00 00 00 00 00 00 00 00 00 00 A T + T E S T I N F O = 2 5 2. . . . . . . . . . . . .
0000001C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00. . . . . . . . . . . . . . . . . . . . .
00000000 41 54 5E 53 59 53 49 4E 46 4F 0D A T ^ S Y S I N F O.
00000000 0D 0A 5E 53 59 53 49 4E 46 4F 3A 31 2C 30 2C 31 2C 35 2C 32 35 35 2C 2C 30 0D 0A 0D. . ^ S Y S I N F O: 1, 0, 1, 5, 2 5 5, 0. . .
0000001C 0A 4F 4B 0D 0A. O K. .
00000000 41 54 2B 50 48 50 52 45 46 3D 34 0D 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 AT + P H P R E F = 4. . . . . . . . . . . . . . . . .
0000001C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00. . . . . . . . . . . . . . . . . . . . .
00000000 41 54 5E 53 53 49 44 3F 0D A T ^ S S I D? .
00000000 41 54 5E 43 49 4D 49 0D A T ^ C I M I.
00000000 41 54 2B 57 49 46 49 3D 30 0D A T + W I F I = 0.
00000000 41 54 5E 53 59 53 49 4E 46 4F 0D A T ^ S Y S I N F O.
00000000 0D 0A 5E 53 59 53 49 4E 46 4F 3A 31 2C 30 2C 31 2C 35 2C 32 35 35 2C 2C 30 0D 0A 0D. . ^ S Y S I N F O: 1, 0, 1, 5, 2 5 5, 0. . .
0000001C 0A 4F 4B 0D 0A. O K. .
Changing composition on Linux
usb_modeswitch -v 05C6 -p f000 -V 05C6 -P 6000 -W -M '555342431234567890ABCDEF80000671030000000000000000000000000000'
Four / dev / ttyUSB [0-3] will appear, then everything is almost automatic.
echo '05c6 6000 ff'>/ sys / bus / usb-serial / drivers / option1 / new_id
wvdialconf
etc.
pfSense (FreeBSD)
1. Install usb_modeswitch by
official instructions Links, of course, become outdated - you have to find the link for the desired version.
Currently, for x86_64:
pkg add http://pkg.freebsd.org/freebsd:10:x86:64/latest/All/usb_modeswitch-2.5.0.txz
Currently, for i386:
pkg add http://pkg.freebsd.org/FreeBSD:10:i386/latest/All/usb_modeswitch-2.5.0.txz
2. Create the /usr/local/etc/devd/05c6-f000.conf file with the following contents, which has a little trick (5 sec delay), without which the results of usb_modswitch are either overwritten or cannot be reached at all:
attach 10 {
device-name "umass [0-9] +";
match "vendor" "0x05c6";
match "product" "0xf000";
action "sleep 5; / usr / local / sbin / usb_modeswitch -v 05C6 -p f000 -V 05C6 -P 6000 -W -M '555342431234567890ABCDEF80000671030000000000000000000000000000'";
};
3. Restart the devd daemon
4. (Re) stick the modem, then configure it according to the instructions (at the moment everything is under the old interface, but the essence is the same):
https: //doc.pfsense.or.../Configuring_3G_modemsor the second part is here:
https://habrahabr.ru/post/187702/The phone number to use is * 99 #, the APN field is under the "Advanced" button.
After creating PPP and assigning the interface, you need to go into it, enable it and select PPP again.
OpenWrt Chaos Calmer 15.05 (usbmode)
In NEXX-WT3020 - it works after adapting usbmode (see a bit below).
Also tried in clone HAME A1
HAME MPR-A1 - DiscussionPeppy Snowdrop 2.4.0 Beta 7 for A5 V11 (RT5350F 4MB / 32MB) - none of the device’s versions started up.
"Tricky Brownie"
Modified OpenWRT firmware for Hame-A1, A15 and its clones :
version without modem does not start in any
I tried accordingly with such a change in the usbmode config:
"05c6: f000": {
"*": {
"t_vendor": 1478,
"t_product": [24576],
"mode": "StandardEject",
"msg": "5553424312345679c000000080000671030000000000000000000000000000"
}
},
where the msg value was also tried by the number of the element in the array
At the same time, the WiFi version is switched to WiFi mode, it is instantly detected by OpenWRT, which “crushes” it for itself, takes / dev / ttyUSB0 and raises the 3G connection.
The only thing I did before was that under Windows I added the connection parameters (APN, phone number * 99 #) to my profile for my provider.
WiFi at the same time works, but it becomes completely useless - after all, the modem port selects OpenWRT. Therefore, I decided to disable WiFi with the AT command - see below.
How to change IMEI
Everything is simple to ugliness:
at + wrimei2 =<required_ciphers>
(specify: for example, at + wrimei2 = 111122223333555)
How to turn on / off WiFi
at + wifi = 0
at + wifi = 1
request status: at + wifi?
It’s convenient to do the same in a script, send it to the second port with a busy modem:
echo "at + wifi = 0">/ dev / ttyUSB1
echo "at + wifi = 1">/ dev / ttyUSB1
Other AT teams
at + cfun = 1,1 - reboot
AT + CLAC - All supported commands. Descriptions can be googled for example with the keywords AT Command Set GOBI
How is the antenna connected
Where to buy, links to analogues and more
I don’t see the point of leaving a link to a specific product, especially since the store raised the price for some reason. It’s easy to find PIXLINK 4G LTE on demand, but as noted above, Pix-link is no brand.
Look in appearance, do not forget to select the right LTE Band.
As far as I understand, the Qualcomm 9600 chip supports any bands, but not all at once, but only two necessary at the request of the creator of the firmware.
More similar devices:
YeacommEmiUnicomxinxunProbable manufacturer:
http://www.aleka.com.cn/service.htmlhttp://en.aleka.com.cn/ There is no curator in the subject. For questions about filling the caps, contact the author in the QMS or the section moderators via the buttonA complaintunder the messages. How to do it right, what would you understand the first time, well describedhere. Post has been edited25x8 - 06.10.18, 21:18Reason for editing: added about Nexx router and photo antenna