Quectel EC2x&EG9x&EM05 Quec Cell AT Commands Manual V1.0
Quectel_EC2x%26EG9x%26EM05_QuecCell_AT_Commands_Manual_V1.0
Quectel_EC2x%26EG9x%26EM05_QuecCell_AT_Commands_Manual_V1.0
Quectel_EC2x%26EG9x%26EM05_QuecCell_AT_Commands_Manual_V1.0
Quectel_EC2x%26EG9x%26EM05_QuecCell_AT_Commands_Manual_V1.0
Quectel_EC2x%26EG9x%26EM05_QuecCell_AT_Commands_Manual_V1.0
User Manual:
Open the PDF directly: View PDF
.
Page Count: 16

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 1 / 15
Our aim is to provide customers with timely and comprehensive service. For any
assistance, please contact our company headquarters:
Quectel Wireless Solutions Co., Ltd.
7th Floor, Hongye Building, No.1801 Hongmei Road, Xuhui District, Shanghai 200233, China
Tel: +86 21 5108 6236
Email: info@quectel.com
Or our local office. For more information, please visit:
http://quectel.com/support/sales.htm
For technical support, or to report documentation errors, please visit:
http://quectel.com/support/technical.htm
Or Email to: support@quectel.com
GENERAL NOTES
QUECTEL OFFERS THE INFORMATION AS A SERVICE TO ITS CUSTOMERS. THE INFORMATION
PROVIDED IS BASED UPON CUSTOMERS‟ REQUIREMENTS. QUECTEL MAKES EVERY EFFORT
TO ENSURE THE QUALITY OF THE INFORMATION IT MAKES AVAILABLE. QUECTEL DOES NOT
MAKE ANY WARRANTY AS TO THE INFORMATION CONTAINED HEREIN, AND DOES NOT ACCEPT
ANY LIABILITY FOR ANY INJURY, LOSS OR DAMAGE OF ANY KIND INCURRED BY USE OF OR
RELIANCE UPON THE INFORMATION. ALL INFORMATION SUPPLIED HEREIN IS SUBJECT TO
CHANGE WITHOUT PRIOR NOTICE.
COPYRIGHT
THE INFORMATION CONTAINED HERE IS PROPRIETARY TECHNICAL INFORMATION OF
QUECTEL WIRELESS SOLUTIONS CO., LTD. TRANSMITTING, REPRODUCTION, DISSEMINATION
AND EDITING OF THIS DOCUMENT AS WELL AS UTILIZATION OF THE CONTENT ARE
FORBIDDEN WITHOUT PERMISSION. OFFENDERS WILL BE HELD LIABLE FOR PAYMENT OF
DAMAGES. ALL RIGHTS ARE RESERVED IN THE EVENT OF A PATENT GRANT OR
REGISTRATION OF A UTILITY MODEL OR DESIGN.
Copyright © Quectel Wireless Solutions Co., Ltd. 2017. All rights reserved.

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 2 / 15
About the Document
History
Revision
Date
Author
Description
1.0
2017-12-13
Duke XIN/
Adolph WANG
Initial

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 3 / 15
Contents
About the Document ................................................................................................................................... 2
Contents ....................................................................................................................................................... 3
1 Introduction .......................................................................................................................................... 4
2 Description of QuecCell AT Commands ........................................................................................... 5
2.1. AT+QENG Switch on/off Engineering Mode ............................................................................ 5
3 Appendix A Reference ....................................................................................................................... 14

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 4 / 15
1 Introduction
QuecCell is a featured function embedded in Quectel modules. It can be used to scan the detailed
information of base stations. This document introduces the AT commands relating to QuecCell function.
This document is applicable to following Quectel modules:
- EC2x (including EC25, EC21, EC20 R2.0 and EC20 R2.1)
- EG9x (including EG91 and EG95)
- EM05

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 5 / 15
2 Description of QuecCell AT
Commands
2.1. AT+QENG Switch on/off Engineering Mode
Engineering mode is designed to report the information of serving cells, neighbour cells and packet switch
parameters. The command is used to switch on/off the mode.
AT+QENG Switch on/off Engineering Mode
Test Command
AT+QENG=?
Response
+QENG: (list of supported <celltype>s)
OK
Query the information of serving cells
AT+QENG="servingcell"
Response
In the case of GSM mode:
+QENG:
"servingscell",<state>,"GSM",<mcc>,<mnc>,<lac>,<celli
d>,<bsic>,<arfcn>,<band>,<rxlev>,<txp>,<rla>,<drx>,<c1
>,<c2>,<gprs>,<tch>,<ts>,<ta>,<maio>,<hsn>,<rxlevsub>,
<rxlevfull>,<rxqualsub>,<rxqualfull>,<voicecodec>
OK
In the case of WCDMA mode:
+QENG:
"servingcell",<state>,"WCDMA",<mcc>,<mnc>,<lac>,<cel
lid>,<uarfcn>,<psc>,<rac>,<rscp>,<ecio>,<phych>,<sf>,<
slot>,<speech_code>,<comMod>
OK
In the case of LTE mode:
+QENG:
"servingcell",<state>,"LTE",<is_tdd>,<mcc>,<mnc>,<celli
d>,<pcid>,<earfcn>,<freq_band_ind>,<ul_bandwidth>,<dl

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 6 / 15
_bandwidth>,<tac>,<rsrp>,<rsrq>,<rssi>,<sinr>,<srxlev>
OK
In the case of TD-SCDMA mode:
+QENG:
"servingscell",<state>,"TDSCDMA",<mcc>,<mnc>,<lac>,
<cellid>,<pfreq>,<rssi>,<rscp>,<ecio>
OK
In the case of CDMA mode or CDMA+HDR mode:
+QENG:
"servingscell",<state>,"CDMA",<mcc>,<mnc>,<lac>,<cell
id>,<bcch>,<rxpwr>,<ecio>,<txpwr>
[+QENG:
"servingscell",<state>,"HDR",<mcc>,<mnc>,<lac>,<cellid
>,<bcch>,<rxpwr>,<ecio>,<txpwr>]
OK
In the case of SRLTE mode:
+QENG:
"servingscell",<state>,"CDMA",<mcc>,<mnc>,<lac>,<cell
id>,<bcch>,<rxpwr>,<ecio>,<txpwr>
+QENG:
"servingcell",<state>,"LTE",<is_tdd>,<mcc>,<mnc>,<celli
d>,<pcid>,<earfcn>,<freq_band_ind>,<ul_bandwidth>,<dl
_bandwidth>,<tac>,<rsrp>,<rsrq>,<rssi>,<sinr><srxlev>
OK
Query the information of neighbour cells
AT+QENG="neighbourcell"
Response
In the case of GSM mode:
[+QENG:
"neighbourcell","GSM",<mcc>,<mnc>,<lac>,<cellid>,<bsi
c>,<arfcn>,<rxlev>,<c1>,<c2>,<c31>,<c32>
[…]]
[+QENG:
"neighbourcell","WCDMA",<uarfcn>,<psc>,<rscp>,<ecno
>
[…]]
[+QENG:
"neighbourcell","LTE":<earfcn>,<pcid>,<rsrp>,<rsrq>
[…]]

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 7 / 15
OK
In the case of WCDMA mode:
[+QENG:"neighbourcell","WCDMA",<uarfcn>,<srxqual>,
<psc>,<rscp>,<ecno>,<set>,<rank>,<srxlev>
[…]]
[+QENG:
"neighbourcell","GSM",<bsic>,<rssi>,<rxlev>,<rank>
[…]]
[+QENG:
"neighbourcell","LTE",<earfcn>,<cellid>,<rsrp>,<rsrq>,<
s_rxlev>
[…]]
OK
In the case of LTE mode:
[+QENG:
"neighbourcell
intra","LTE",<earfcn>,<pcid>,<rsrq>,<rsrp>,<rssi>,<sinr>
,<srxlev>,<cell_resel_priority>,<s_non_intra_search>,<th
resh_serving_low>,<s_intra_search>
[…]]
[+QENG:
"neighbourcell
inter","LTE",<earfcn>,<pcid>,<rsrq>,<rsrp>,<rssi>,<sinr>
,<srxlev>,<threshX_low>,<threshX_high>,<cell_resel_pri
ority>
[…]]
[+QENG:
"neighbourcell","GSM",<arfcn>,<cell_resel_priority>,<thr
esh_gsm_high>,<thresh_gsm_low>,<ncc_permitted>,<b
and>,<bsic_id>,<rssi>,<srxlev>
[…]]
[+QENG:
"neighbourcell","WCDMA",<uarfcn>,<cell_resel_priority
>,<thresh_Xhigh>,<thresh_Xlow>,<psc>,<cpich_rscp>,<c
pich_ecno>,<srxlev>
[…]]
OK
Get 3G cell common information
AT+QENG="3gcomm"
Response
Only in WCDMA mode, get 3G cell common items which

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 8 / 15
Parameter
include the information about 3G neighbour cells, 2G
neighbour cells and 3G serving cells information.
For WCDMA serving cells information:
[+QENG:
"3gcomm",<celltype>,<rat>,<state>,<mcc>,<mnc>,<lac>,
<cellid>,<uarfcn>,<psc>,<rssi>,<rscp>,<ecn0>,<srxqual>,
<srxlev>
[…]]
For 3G neighbor cells information of WCDMA serving cell:
[+QENG:
"3gcomm",<celltype>,<rat>,<mcc>,<mnc>,<lac>,<cellid>,
<uarfcn>,<psc>,<rssi>,<rscp>,<ecn0>,<srxqual>,<srxlev
>
[…]]
For 2G neighbor cells information of WCDMA serving cells:
[+QENG:
"3gcomm",<celltype>,<rat>,<arfcn>,<bsic>,<rssi>,<rxlev
>,<rank>
[…]]
OK
If the module works under 2G network, response:
OK
Reference
<celltype> String format. The information of different cells.
"servingcell" The information of 2G/3G/4G serving cells
"neighbourcell" The information of 2G/3G/4G neighbour cells
<state> String format. UE state.
"SEARCH" UE is searching but could not (yet) find a suitable 2G/3G/4G cell.
"LIMSRV" UE is camping on a cell but has not registered on the network.
"NOCONN" UE is camping on a cell and has registered on the network, and it is
in idle mode.
"CONNECT" UE is camping on a cell and has registered on the network, and a
call is in progress.
<rat> String format. Access technology, include:
"GSM"

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 9 / 15
"WCDMA"
"LTE"
"CDMA"
"HDR"
"TDSCDMA"
<mcc> Number format. Mobile country code (first part of the PLMN code)
"-" Invalid
<mnc> Number format. Mobile network code (second part of the PLMN code)
"-" Invalid
<lac> Hexadecimal format. Location area code. The parameter determines the two-byte
location area code in hexadecimal format (e.g. 00C1 equals 193 in decimal) of the cell
that was scanned. Range: 0-65535.
"-" Invalid
<cellid> Hexadecimal format. Cell ID. The parameter determines the 16-bit (GSM) or 28-bit
(UMTS) cell ID. Range: 0-0xFFFFFFF.
"-" Invalid
<bsic> Number format. Base station identification code. Range: 0-63.
<arfcn> Number format. The parameter determines the ARFCN of the cell that was scanned.
Range: 0-1023.
<band> Number format. The current band.
0 DCS_1800
1 PCS_1900
"-" Other bands
<rac> Number format. Routing area code. Range: 0-255.
<pfreq> Primary frequency.
<rxlev> Number format. RX level value for base station selection in dB (see 3GPP 25.304).
Range: 0-63. Subtracting 111 from the RX level value, a dBm value will be got.
<txp> Number format. MS maximum TX power in CCH.
<rla> Number format. Minimum access RX level.
<drx> Number format. Discontinuous reception cycle length.
<c1> Number format. Cell selection criterion.
<c2> Number format. Cell reselection criterion.
<gprs> Number format. Whether the current cell supports GPRS or not.
0 Not support GPRS
1 Support GPRS
<tch> Number format. In hopping, displays „h‟, otherwise displays the current ARFCN in a
voice call.
<ts> Number format. Timeslot number.
<ta> Number format. Timing advance for the base station. Range: 0-63.
<maio> Number format. Mobile allocation index offset.
<hsn> Number format. Hopping sequence number.
<rxqualsub> Number format. RX quality (sub). Range: 0-7.
<rxqualfull> Number format. RX quality (full). Range: 0-7.
<rxlevsub> Number format. RX level (sub). Range: 0-63.

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 10 / 15
<rxlevfull> Number format. RX level (full). Range: 0-63.
<voicecodec> String format. Channel mode during a voice call.
"HR" Half rate
"FR" Full rate
"EFR" Enhanced full rate
"AMR" Adaptive Multi-Rate
"AMRHR" AMR half rate
"AMRFR" AMR full rate
"AMRWB" AMR wide band
"-" Invalid
<uarfcn> Number format. UTRA-ARFCN of the cell that was scanned.
<earfcn> Number format. E-UTRA-ARFCN of the cell that was scanned.
<psc> Number format. The parameter determines the primary scrambling code of the cell that
was scanned.
<rssi> Number format. Received signal strength indication.
<sinr> Number format. Logarithmic value of SINR, and the values are only the first 1/5 part of
the dB value. Range: 0-250, which translates to -20dB - +30dB.
<rscp> Number format. The received signal code power level of the cell that was scanned.
<srxlev> Number format. Select RX level value for base station in dB (see 3GPP 25.304).
<SF> Number format. Spreading factor. Values are 4, 8, 16, 32, 64, 128, 256, and 512.
0 SF_4
1 SF_8
2 SF_16
3 SF_32
4 SF_64
5 SF_128
6 SF_256
7 SF_512
8 UNKNOWN
<slot> Number format. Slot format for DPCH (0-16). Slot format for FDPCH (0-9).
<ComMod> Number format. Whether compress mode is supported.
0 Not support compress mode
1 Support compress mode
<c31> Number format. GPRS cell selection criterion.
<c32> Number format. GPRS cell reselection criterion.
<set> Number format. 3G neighbour cell set.
1 Active Set
2 Sync Neighbour Set
3 Async Neighbour Set
<rank> Rank of this cell as neighbour for inter-RAT cell reselection.
<txpwr> Number format. TX power level for the UE.
<is_tdd> TDD or FDD mode.
<pcid> Physical cell ID
<freq_band_ind> E-UTRA frequency band (see 3GPP 36.101).

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 11 / 15
<ul_bandwidth> Number format. UL bandwidth.
0 1.4MHz
1 3MHz
2 5MHz
3 10MHz
4 15MHz
5 20MHz
<dl_bandwidth> Number format. DL bandwidth.
0 1.4MHz
1 3MHz
2 5MHz
3 10MHz
4 15MHz
5 20MHz
<tac> Tracking area code (see 3GPP 23.003 Chapter 19.4.2.3).
<rsrp> Reference signal received power (see 3GPP 36.214 Chapter 5.1.1).
<rsrq> Reference signal received quality (see 3GPP 36.214 Chapter 5.1.2).
<thresh_serving_low> The threshold of <srxlev> (in dB) used by the UE on the serving cells when
reselecting towards a lower priority RAT/frequency.
<ecio> Number format. Carrier to noise ratio in dB = measured Ec/Io value in dB.
<phych> 0 DPCH
1 FDPCH
<speech_code> Destination number on which the call is to be deflected.
<rxpwr> Rx power value in 1/10 dBm resolution.
<ecno> Number format. Carrier to noise ratio in dB = measured Ec/Io value in dB.
<srxqual> Receiver automatic gain control on the camped frequency.
<s_rxlev> Inter-frequency cell suitable receive level.
<cell_resel_priority> Cell reselection priority. Range: 0-7.
<s_non_intra_search> Threshold to control non-intra-frequency searches.
<s_intra_search> Cell selection parameter for the intra-frequency cell.
<serving_cell_id> LTE serving cell ID. This is the cell ID for the serving cell and can be found in
the cell list. Range: 0-503.
<threshX_low> To be referenced when reselection. The suitable receive level value of an
evaluated lower priority cell must be greater than this value.
<threshX_high> To be referenced when reselection. The suitable receive level value of an
evaluated higher priority cell must be greater than this value.
<thresh_gsm_high> Reselection threshold for high priority layers.
<thresh_gsm_low> Reselection threshold for low priority layers.
<ncc_permitted> Bitmask that specifies whether a neighbor with a particular network color
code is to be reported. Bit n set to 1 means that a neighbor with NCC n is to
be included in the report.
<bsic_id> Base station identity code ID.
<thresh_Xhigh> Reselection threshold for high priority layers.
<thresh_Xlow> Reselection threshold for low priority layers.

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 12 / 15
If “-” or – is returned, it indicates the parameter is invalid under current condition.
Example
AT+QENG="servingcell"
+QENG: "servingcell","SEARCH"
OK
AT+QENG="servingcell"
+QENG:"servingcell","LIMSRV","GSM",460,01,5504,2B55,52,123,0,-67,5,14,64,30,28,0,-,-,-,-,-,-,-,-,-,"
-"
OK
AT+QENG="servingcell"
+QENG:"servingcell","NOCONN","GSM",460,01,5504,2B55,52,123,0,-111,5,14,64,0,0,0,-,-,-,-,-,-,-,-,-,
"-"
OK
AT+QENG="servingcell"
+QENG:"servingcell","CONNECT","GSM",460,00,550A,2BB9,23,94,0,-61,5,14,4,0,0,0,h,1,0,0,33,50,
52,0,0,"EFR"
OK
AT +QENG="neighbourcell"
[2016-08-15_20:23:32]+QENG: "neighbourcell intra","LTE",38950,276,-3,-88,-65,0,37,7,16,6,44
[2016-08-15_20:23:32]+QENG: "neighbourcell inter","LTE",39148,-,-,-,-,-,37,0,30,7,-,-,-,-
[2016-08-15_20:23:32]+QENG: "neighbourcell inter","LTE",37900,-,-,-,-,-,0,0,30,6,-,-,-,-
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",0,3,14,50,255,0,0,-1920,0
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",94,3,14,50,255,0,0,-1920,0
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",93,3,14,50,255,0,0,-1920,0
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",91,3,14,50,255,0,0,-1920,0
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",90,3,14,50,255,0,0,-1920,0
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",89,3,14,50,255,0,0,-1920,0
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",87,3,14,50,255,0,0,-1920,0
[2016-08-15_20:23:32]+QENG: "neighbourcell","GSM",85,3,14,50,255,0,0,-1920,0
<cpich_rscp> Absolute power level of the common pilot channel as received by the UE in
dBm×10.
<cpich_ecno> Ratio of the received energy per PN chip for the common pilot channel to the
total received power spectral density at the UE antenna connector in dB×10.
<bcch> EARFCN. Active channel of the current system.
NOTE

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 13 / 15
OK
AT+QENG="neighbourcell"
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,398,-880,-155,6,-32768,-
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,331,-870,-155,2,-32768,-
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,290,-880,-165,2,-32768,-
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,397,-910,-190,2,-32768,-
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,114,-910,-195,2,-32768,-
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,332,-940,-220,2,-32768,-
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,379,-950,-230,2,-32768,-
[2016-08-15_20:19:54]+QENG: "neighbourcell","WCDMA",10713,-723,115,-1210,-250,6,-32768,-
OK
AT+QENG="3gcomm" //Get common information when in WCDMA mode
+QENG:"3gcomm","servingcell","3G","NOCONN",460,01,D5D6,8062AF1,10713,38,-72,-74,11,25,32
+QENG: "3gcomm","neighbourcell","3G",460,01,D5D6,8062AEF,10713,36,-87,-87,36,0,27
+QENG: "3gcomm","neighbourcell","2G",123,52,-98,12,-5
OK

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 14 / 15
3 Appendix A Reference
Table 1: Terms and Abbreviations
Abbreviation
Description
ARFCN
Absolute Radio Frequency Channel Number
CCH
Common Transport Channel
CDMA
Code Division Multiple Access
DCS
Digital Cellular System
DL
Downlink
DPCH
Dedicated Physical Channel
EARFCN
E-UTRA Absolute Radio Frequency Channel Number
E-UTRA
Evolved Universal Terrestrial Radio Access
E-UTRA-ARFCN
E-UTRA Absolute Radio Frequency Code Number
FDPCH
Fractional DPCH
GPRS
General Packet Radio Service
GSM
Global System of Mobile Communication
HDR
High Data Rate
LTE
Long-Term Evolution
MS
Mobile Station
NCC
Network Color Code
PCS
Personal Communication Service
PLMN
Public Land Mobile Network
PN
Pseudorandom Noise

LTE Module Series
EC2x&EG9x&EM05 QuecCell AT Commands Manual
EC2x&EG9x&EM05_QuecCell_AT_Commands_Manual 15 / 15
RX
Receive
SINR
Signal To Interference Plus Noise Ratio
SRLTE
Single Radio LTE
TD-SCDMA
Time Division - Synchronous Code Division Multiple Access
TX
Transmit
UE
User Equipment
UL
Uplink
UMTS
Universal Mobile Telecommunications Service
UTRA-ARFCN
UTRA Absolute Radio Frequency Channel Number
WCDMA
Wideband Code Division Multiple Access
