FCC ID: NKR-IMG2 IMG2 LTE module

IMG2 User Guide V1.0 Author: Wistron NeWeb Corporation Revision: 1.0 Revision Date: 2018/9/20 Normal Internal Use Confidential Restricted Confidential 1 / 46 IMG2-HDK User Guide Contact Information Company Website www.wnc.com.tw Revision History Rev. #

Author Summary of Changes 1.0 WNC First release. Date 2018/09/20 Normal Internal Use Confidential Restricted Confidential 2 / 46 IMG2-HDK User Guide Wistron NeWeb Corporation THIS DOCUMENT AND THE INFORMATION CONTAINED HEREIN IS PROPRIETARY AND IS THE EXCLUSIVE PROPERTY OF WNC AND SHALL NOT BE DISTRIBUTED, REPRODUCED, OR DISCLOSED IN WHOLE OR IN PART WITHOUT PRIOR WRITTEN PERMISSION FROM WNC. LIMITATION OF LIABILITY THIS DOCUMENT AND THE INFORMATION CONTAINED HEREIN IS PURELY FOR DESIGN REFERENCE AND SUBJECT TO REVISION BY WNC AT ANY TIME. NOTHING IN THIS DOCUMENT SHALL BE CONSTRUED AS GRANTING ANY WARRANTY OR RIGHT TO USE THE MATERIAL CONTAINED HEREIN WITHOUT WNCS PRIOR EXPRESS WRITTEN CONSENT. WNC SHALL NOT BE LIABLE FOR ANY USE, APPLICATION OR DEVELOPMENT DERIVED FROM THE MATERIAL WITHOUT SUCH PRIOR EXPRESS WRITTEN CONSENT. Normal Internal Use Confidential Restricted Confidential 3 / 46 IMG2-HDK User Guide Contents Contact Information ........................................................................................................ 2 Revision History .............................................................................................................. 2 Contents ......................................................................................................................... 4 1. Introduction ........................................................................................................... 6 1.1. LTE IMG2 Overview .............................................................................................. 6 1.2. LTE IMG2 Design Reference ................................................................................ 15 1.3. LTE IMG2 Antenna Design .................................................................................. 18 1.4. LTE IMG2 Test Procedure for Design Verification ............................................... 19 1.5. HDK Overview ..................................................................................................... 26 1.5.1. Overview ............................................................................................... 26 1.5.2. LTE Module Installation ......................................................................... 27 1.5.3. SIM Installation ...................................................................................... 28 1.5.4. LTE RF Connector ................................................................................... 29 1.5.5. UART Access (Option) ............................................................................ 30 1.5.6. Driver Installation .................................................................................. 31 2. Prerequisite Configuration .................................................................................... 32 2.1. Factory Reset ...................................................................................................... 32 2.2. RF conformance Setup ....................................................................................... 33 2.3. Protocol conformance Setup .............................................................................. 34 2.4. UICC Test Setup .................................................................................................. 35 2.5. LTE IMS VoIP ....................................................................................................... 36 3. 4. AT Command Control ............................................................................................ 38 F/W Update .......................................................................................................... 40 4.1. F/W Update via WebUI ....................................................................................... 40 4.1.1. Debug Level ........................................................................................... 45 Normal Internal Use Confidential Restricted Confidential 4 / 46 IMG2-HDK User Guide 4.1.1.1. IMS ......................................................................................................... 45 4.1.1.1.1. Configuration to Enable IMS Debug Level ...................................... 45 4.1.1.1.2. Get Log File from Device ................................................................ 46 Normal Internal Use Confidential Restricted Confidential 5 / 46 IMG2-HDK User Guide 1. Introduction This document gives an instruction on how to use IMG2 module and HDK. 1.1. LTE IMG2 Overview Form Factor: LGA Dimension: 32x36x4.3(mm) DC Voltage: 3.3~4.3V Normal Internal Use Confidential Restricted Confidential 6 / 46 Block Diagram IMG2-HDK User Guide Note:

1. Only using ANT1~ANT4, all of other antenna ports should be terminated by 50ohm load for module application, and which output performancs are guaranteed accordingly. 2. This module not certified for embedded antenna or hanheld devices Normal Internal Use Confidential Restricted Confidential 7 / 46 IMG2-HDK User Guide Features:

Platform: GCT GDM7243Q Support FDD Band 2/4/5/13 compliant with LTE specification (3GPP Release 10) Support 1T2R Cat. 6 with downlink carrier aggression Uplink: 50Mbps Downlink: 300Mbps Supports downlink inter and intra 2-Carrier Aggregation (Class C), 2+2, 5+5, 4+4 2+4, 2+5, 2+13, 4+5, 4+13, 5+13, Support all LTE Bandwidth per 3GPP standard

(1.4/3/5/10/15/20MHz) Normal Internal Use Confidential Restricted Confidential 8 / 46 IMG2-HDK User Guide

- Frequency Bands LTE UL (MHz) DL (MHz) TX Power Band 2 1850~1910 1930~1990 23 +/-2.7dBm Band 4 1710~1755 2110~2155 23 +/-2.7dBm Band 5 824~849 869~894 23 +/-2.7dBm Band 13 777~787 746~756 23 +/-2.7dBm a) LGA PCB footprint Normal Internal Use Confidential Restricted Confidential 9 / 46 IMG2-HDK User Guide b) LGA Pin Assignments ETSI Pin #

Pin assign in ETSI Spec IMG2 LGA IMG2 Description Signal Dir Level Signal Dir Level LGA 1 GND 2 GND 3 RF_GNSS 4 GND 5 GND 6 GND 7 LB_RF1 8 GND 9 GND 10 GND 11 LB_RF2 12 GND 13 GND 14 GND 15 LB_RF3 16 GND 17 GND 18 GND 19 LB_RF4 20 GND 21 GND 22 GND 23 HB_RF1 24 GND 25 GND 26 GND NC Antenna for a GNSS receiver Normal Internal Use Confidential Restricted Confidential 10 / 46 27 HB_RF2 28 GND 29 GND 30 GND 31 HB_RF3 32 GND 33 GND 34 GND 35 HB_RF4 36 GND 37 VCC1 IMG2-HDK User Guide Power (Typ=3.8V, Min=3.4V, Max=4.2V) 38 VCC2 Power (Typ=3.8V, 39 VCC3 Power (Typ=3.8V, Min=3.4V, Max=4.2V) 40 VCC4 Power (Typ=3.8V, Min=3.4V, Max=4.2V) Min=3.4V, Max=4.2V) 41 VCC5 Power (Typ=3.8V, 42 VCC6 Power (Typ=3.8V, 43 RTC_POWER NC Typ=3.0V, Min=3.4V, Max=4.2V) Min=3.4V, Max=4.2V) Min=2.0V, Max=3.25V 44 GND 45 GND 46 PCM_SYNC/I2S_WS 47 PCM_DIN/I2S_DIN PCM_SYNC PCM_IN O I 1.8V 1.8V Normal Internal Use Confidential Restricted Confidential 11 / 46 IMG2-HDK User Guide 1.8V 1.8V 1.8V 1.8V 3.3V 1.8V 1.8V 1.8V RGMII Signals 3.3V 48 PCM_DOUT/I2S_DOUT 49 PCM_CLK/I2S_CLK 50 GND 51 GND 52 GPIO01 53 GPIO02 54 GPIO03 55 GPIO04 56 GPP01 57 GPP02 58 GPP03 59 GPP04 60 GPP05 61 GPP06 62 GPP07 63 GPP08 64 RFU 65 RFU 66 RFU 67 RFU 68 RFU 69 RFU 70 RFU 71 RFU 72 RFU 73 RFU 74 GND 75 GND 76 UART1_DTR 77 UART1_RING 78 UART1_DCD 79 UART1_DSR 80 UART1_CTS 81 UART1_RTS 82 UART1_RX PCM_OUT PCM_MCLK VREF UART0_TXD VREF UART0_RXD VREF W_DISABLE#1 VREF W_DISABLE#2 I2C_CLK I2C_SDA RGMII_MDC RGMII_MDIO RGMII_TCLK RGMII_TCTL RGMII_TXD0 RGMII_TXD1 RGMII_TXD2 RGMII_TXD3 RGMII_RXD0 RGMII_RXD1 RGMII_RXD2 RGMII_RXD3 RGMII_RCLK RGMII_RCTL PHY2MAC_125Mhz VREF UART2_RXD VREF UART2_TXD VREF COEX3 VREF VREF UART3_CTS VREF UART3_RTS VREF UART3_RXD O O O I I I O B VREF(1.8V) VREF(1.8V) VREF(1.8V) VREF(1.8V) VREF(1.8V) VREF(1.8V) VREF(1.8V) Normal Internal Use Confidential Restricted Confidential 12 / 46 IMG2-HDK User Guide 83 UART1_TX 84 GND 85 GND 86 USB_DP 87 VBUS/GPIO87 88 UAB_DM 89 GND 90 GND 91 GND 92 USB3_SSTXn 93 PCIe_CLKREQ/MPHY_SB1 94 USB3_SSTXp 95 PCI#_WAKE 96 USB3_SSRXn 97 PCIe_RST 98 USB3_SSRXp 99 USB_STROBE 100 USB_DATA 101 MPHY_TX2_DP 102 PCIe_REFCLKn/MPHY_RX2_DN 103 PCIe_REFCLKp/MPHY_RX2_DP 104 GND 105 GND 106 UART2_RX 107 UART2_TX 108 GND 109 GND 110 RFU 111 RFU 112 RFU 113 RFU 114 RFU 115 RFU 116 RFU VREF UART3_TXD USB2.0_DP USB2.0_DM USB3.0-SSTX-

NC USB3.0-SSTX+

NC USB3.0-SSRX-

NC USB3.0-SSRX+

NC NC NC NC NC VREF UART1_RXD VREF UART1_TXD SPI_CS2#

SPI_SCLK SPI_MOSI SPI_MISO SLIC_RST#

SLIC_INT#

GPS_SYNC VREF(1.8V) B I B B B B B O O O I O I O VREF(1.8V) VREF(1.8V) 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V Normal Internal Use Confidential Restricted Confidential 13 / 46 IMG2-HDK User Guide 117 RFU 118 RFU 119 RFU 120 GPP09 121 GPP10 122 GPP11 123 GPP12 124 GPP13 125 GPP14 126 GPP15 127 GPP16 128 GPP17 129 GPIO05 130 GPIO06 131 GPIO07 132 GPIO08 133 UIM_VCC 134 UIM_DAT 135 UIM_CLK 136 UIM_RESET 137 UIM_DETECT 138 UIM_SPU 139 GND 140 GND 141 WWAN_STATE 142 POWER_ON 143 WAKEUP_OUT/GPIO143 144 WAKEUP_IN/GPIO144 145 RESET 146 VREF O B O O I TBD O I O I I O GPS_ENABLE CLKOUT_GPS ETH_EN SDH0_CLK SCH0_CMD SDH0_DAT0 SDH0_DAT1 SDH0_DAT2 SDH0_DAT3 SDH0_CD#

DPR O O O O B B B B B I SDH0(WIFI)_RST#

VREF ANTCTL0 VREF ANTCTL1 VREF ANTCTL2 VREF ANTCTL3 1.8/3.0V SIM_VCC 1.8/3.0V SIM_DAT 1.8/3.0V SIM_CLK 1.8/3.0V SIM_RST 1.8/3.0V NC NC VREF NC VREF ENABLE_MODULE O O O O O B O O I TBD O I 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V 1.8V 1.8/3.0V 1.8/3.0V 1.8/3.0V 1.8/3.0V 1.8/3.0V 1.8V/3.3V VREF(1.8V) VREF WAKEUP#_HOST O VREF(1.8V) VREF WAKEUP#_LTE VREF RESET#_1.8V I I VREF(1.8V) VREF(1.8V) 1.8V O DCDC_1.8V Normal Internal Use Confidential Restricted Confidential 14 / 46 IMG2-HDK User Guide 1.2. LTE IMG2 Design Reference LTE Module IMG2 on EVK M.2 PCBA with RF Switch connectors (ANT1~ANT4). EVK PCB Structure Type Drill Structure GT P/N:

18012203-03 Metal Layer

(%) Assumptive copper area (%) Thickness after ER Process Material Type

(@2GHZ)

(mil)

(mm) Top Solder Mask L1 3.8 1.00 0.025 Base Cu + Plating 1.40 0.036 Normal Internal Use Confidential Restricted Confidential 15 / 46 IMG2-HDK User Guide Dielectric Metal Dielectric Metal Dielectric Metal Prepreg L2 Core L3 Prepreg L4 Bottom Solder Mask 75.0%

75.0%

2116*2 1OZ 0.005"

1OZ 2116*2 Base Cu + Plating 4 9.37 0.238 1.15 0.029 4.2 5.00 0.127 4 1.15 0.029 9.37 0.238 1.40 0.036 3.8 1.00 0.025 Board thickness : 0.8mm+/-10%(Including Plating+S/M) Total : 30.84 0.783 RF Trace Impedance Table NO. Impedance Layer Requirement 1 2 L1 L4

(ohms) 50 50 Tolerance Impedance Type Line to Trace Trace gnd Calculated Ref. Layer Width Spacing space Values

(mil)

(mil)

(mil)

(ohms)

+/-10%

Coplanar Single

+/-10%

Coplanar Single L2 L3 15 15

-

-

10 10 49.8 49.8 Layout guidelines for RF trace outputs Normal Internal Use Confidential Restricted Confidential 16 / 46 IMG2-HDK User Guide All PJ2/PJ7/PJ4/PJ5 connectors are RF switch connectors and the part description as below. INTERNAL CONNECTOR,MICRO RF SWSMT,180DEG.,JACK,RF SWITCH,(FOXCONN),KMC1001-F007-7F. The main purpose of these RF switches is to verify the conductive TRX RF performances or for debugging. Some key performances should be verified:

i) ii) iii) iv) v) vi) TX Power Level Spectrum Emmission Mask RX Sensitivity EVM Frequency Error VSWR Normal Internal Use Confidential Restricted Confidential 17 / 46 IMG2-HDK User Guide 1.3. LTE IMG2 Antenna Design The antenna should be 50ohm characteristic impedance with Return Loss less than -10dB at all desired frequency bands.The following external antenna as an example for OEM verifications because this special dipole antenna being certified with IMG2 LTE module. Manufactured by MAGLAYERS Model Name: WDA-2010-4G0R2-A1 Outlines of external antenna Return loss <= -10dB Normal Internal Use Confidential Restricted Confidential 18 / 46 IMG2-HDK User Guide 1.4. LTE IMG2 Test Procedure for Design Verification Equipment List Normal Internal Use Confidential Restricted Confidential 19 / 46 IMG2-HDK User Guide Item Quantity Specification 1 1 1 1 2 1 1 PPT-3615 KS E6640A Shielding box PC DC Power Supply USB Cable Ethernet Cable Test fixture LTE Test Plan Normal Internal Use Confidential Restricted Confidential 20 / 46 IMG2-HDK User Guide LTE Test Spec. Normal Internal Use Confidential Restricted Confidential 21 / 46 IMG2-HDK User Guide Normal Internal Use Confidential Restricted Confidential 22 / 46 IMG2-HDK User Guide Normal Internal Use Confidential Restricted Confidential 23 / 46 IMG2-HDK User Guide Normal Internal Use Confidential Restricted Confidential 24 / 46 IMG2-HDK User Guide Normal Internal Use Confidential Restricted Confidential 25 / 46 IMG2-HDK User Guide 1.5. HDK Overview 1.5.1. Overview Normal Internal Use Confidential Restricted Confidential 26 / 46 IMG2-HDK User Guide 1.5.2. LTE Module Installation Three steps to accomplish module installation:

Step1. Insert module with about 15 angle to NGFF connector. Step2. Press down the module. Step3. Fasten with a screw. Normal Internal Use Confidential Restricted Confidential 27 / 46 1.5.3. SIM Installation IMG2-HDK User Guide Normal Internal Use Confidential Restricted Confidential 28 / 46 IMG2-HDK User Guide 1.5.4. LTE RF Connector LTE RF connection is RF cable type dependency. That said, only Murata cable can be used while doing conductive test. Normal Internal Use Confidential Restricted Confidential 29 / 46 IMG2-HDK User Guide 1.5.5. UART Access (Option) 4 PIN UART provides LTE module UART access. Generally it is used for debugging and an RS232-to-USB adaptor is required. Baud rate is 921600. Normal Internal Use Confidential Restricted Confidential 30 / 46 IMG2-HDK User Guide 1.5.6. Driver Installation The communication between DUT and PC is Ethernet-over-USB. Please install driver (i.e., dpinst.exe) on a PC first. TOOL-Windows RNDISACM Driver Installer for Vista and later GDM7243_windows_acm_drivers_installer_v1.1.0.0 32bit 64bit dpinst.exe dpinst.exe for XP GDM7243_windows_xp_acm_rndis_installer_v.1.3.0.0 dpinst.exe Two interfaces are derived when connecting USB connector to PC. USB RNDIS : network interface Modem Com port : AT command interface which supports baud rate: 921600 at most In device manager, you will see an RNDIS interface and a Modem COM port after DUT boots up completely. PC will obtain an IP address of 192.168.0.X assigned by DUT via DHCP. Normal Internal Use Confidential Restricted Confidential 31 / 46 IMG2-HDK User Guide 2. Prerequisite Configuration 2.1. Factory Reset This section provides a way to execute Factory Reset. SDM parameter values will be persistent throughout Factory Reset. Factory Reset is applied to Motive testing, 7Layers OTADM testing and Field testing. It is used during the testing while Factory Reset is needed. Step 1 Step 2 Step 3 Power on DUT and then wait a while (i.e., around 20 sec). Make sure a Modem COM port is observed in device manager. (Please refer to section 1.1.6) This Modem COM port (i.e., AT command interface) can simply connected through generic UART console program such as TeraTerm, putty, etc,

(a.) Type shell

(b.) Type shell command: ucfg sync Step 4 Then a DUT reboot is required to apply the setting. Normal Internal Use Confidential Restricted Confidential 32 / 46 IMG2-HDK User Guide 2.2. RF conformance Setup This section is applied to RF conformance test such as GCF TS 36.521-1:

TS 36.521-3:

Evolved Universal Terrestrial Radio Access (E-UTRA); User Equipment

(UE) conformance specification; Radio transmission and reception;

Part 1: Conformance testing Evolved Universal Terrestrial Radio Access (E-UTRA); User Equipment

(UE) conformance specification; Radio transmission and reception;

Part 3: Radio Resource Management (RRM) conformance testing Prior to test please have Factory Reset for DUT as described in section 2.1. Besides, RF conformance test just uses the internet PDN. And, UL data should be blocked. The instruction is shown as following;

Step 1 Step 2 Step 3 Power on DUT and then wait a while (i.e., around 20 sec). Make sure a Modem COM port is observed in device manager. (Please refer to section 1.1.6) This Modem COM port (i.e., AT command interface) can simply connected through generic UART console program such as TeraTerm, putty, etc,

(a.) Type AT command: AT%SYSCMD="ucfg set config wan lte ims ims_test_mode 1"

(b.) Type AT command: AT%PKTDISCARD=1 Step 4 Then a DUT reboot is required to apply the setting. In order to avoid DUT incorrect operation caused by manually changing it for test purpose. While DUT is reused for another test plan please change it back as following,

(a.) Type AT command: AT%PKTDISCARD=0

(b.) Type AT command: AT%MIMOANTCHECK=0 Normal Internal Use Confidential Restricted Confidential 33 / 46 IMG2-HDK User Guide 2.3. Protocol conformance Setup This section is applied to Protocol conformance test such as GCF TS 36.523-1:

Evolved Universal Terrestrial Radio Access (E-UTRA) and Evolved Packet Core (EPC); User Equipment (UE) conformance specification;

Part 1: Protocol conformance specification Prior to test please have Factory Reset for DUT as described in section 2.1. Besides, Protocol conformance test just uses the internet PDN. And, UL data should be blocked. The instruction is shown as following;

Step 1 Step 2 Step 3 Power on DUT and then wait a while (i.e., around 20 sec). Make sure a Modem COM port is observed in device manager. (Please refer to section 1.1.6) This Modem COM port (i.e., AT command interface) can simply connected through generic UART console program such as TeraTerm, putty, etc,

(a.) Type AT command: AT%SYSCMD="ucfg set config wan lte ims ims_test_mode 1"

(b.) Type AT command: AT%PKTDISCARD=1 Step 4 Then a DUT reboot is required to apply the setting. In order to avoid DUT incorrect operation caused by manually changing it for test purpose. While DUT is reused for another test plan please change it back as following,

(c.) Type AT command: AT%PKTDISCARD=0

(d.) Type AT command: AT%MIMOANTCHECK=0 Normal Internal Use Confidential Restricted Confidential 34 / 46 IMG2-HDK User Guide 2.4. UICC Test Setup This section is applied to UICC test such as GCF TS 31.121:

TS 31.124:

TS 102.230:

UICC-terminal interface; Universal Subscriber Identity Module

(USIM) application test specification Mobile Equipment (ME) conformance test specification; Universal Subscriber Identity Module Application Toolkit (USAT) conformance test specification Smart Cards; UICC-Terminal interface; Physical, electrical and logical test specification Please refer to G7243_USAT_Test_Guide_v2.5.pdf Normal Internal Use Confidential Restricted Confidential 35 / 46 IMG2-HDK User Guide 2.5. LTE IMS VoIP This section provides commands for configuration change requirement. Commands are marked in red. Please input command in # prompt. Please not that if you apply Factory Reset in section 2.1, it will set all VoIP parameters to devices default values. 1). IMS RTP RTCP Inactivity Timer Command Description Example ucfg set config wan lte ims volte rtp_rtcp_inactivity_timer_ims <value>

This parameter indicates the maximum length of time a call can remain active without any media (RTP or RTCP) traffic within a group. Each time an RTP or RTCP packet occurs within a call, this timeout resets. The value is an integer measured in Seconds. Note: set rtcp_inactivity_timer to 300s ucfg set config wan lte ims volte rtp_rtcp_inactivity_timer_ims 300 Get current setting from device ucfg get config wan lte ims volte rtp_rtcp_inactivity_timer_ims 2). IMS Session Timer Command Description Example ucfg set config wan lte ims volte session_timer_ims <value>

The Session-Expires header value can be configured through the SESSION-EXP tag. Session-Expires conveys the duration of the session. SIP entities MUST be prepared to handle Session-Expires header field values of any duration greater than 90 Seconds. Small session intervals can be destructive to the network. They cause excessive messaging traffic that affects both user agents and proxy servers. More information about Session Expires and Min-Session Expire can be found in RFC 4028. The value is an integer measured in Seconds. Note: set session_timer_ims to 90 seconds ucfg set config wan lte ims volte session_timer_ims 90 Get current setting from device ucfg get config wan lte ims volte session_timer_ims 3). IMS Min Se Timer Command Description Example ucfg set config wan lte ims volte min_se_ims <value>

The minimum value for session-expires value The Min-SE header field indicates the minimum value for the session interval, in units of seconds. The value of this element is inserted in MIN-SE header in INVITE request. The value must be greater than 90 seconds. More information about Session Expires and Min-Session Expire can be found in RFC 4028. The value is an integer measured in Seconds. Note: set min_se_ims to 90 seconds ucfg set config wan lte ims volte min_se_ims 90 Get current setting from device ucfg get config wan lte ims volte min_se_ims Normal Internal Use Confidential Restricted Confidential 36 / 46 IMG2-HDK User Guide 4). Enable/Disable SCR_AMRWB Command Example ucfg set config wan lte ims volte scr_amrwb <value>

Note: enable SCR_AMRWB ucfg set config wan lte ims volte scr_amrwb 1 Note: disable SCR_AMRWB ucfg set config wan lte ims volte scr_amrwb 0 Get current setting from device ucfg get config wan lte ims volte scr_amrwb 5). Enable/Disable AMR_WB Command Example ucfg set config wan lte ims volte scr_amrwb <value>

Note: enable AMR_WB ucfg set config wan lte ims volte amrwb 1 Note: disable AMR_WB ucfg set config wan lte ims volte amrwb 0 Get current setting from device ucfg get config wan lte ims volte amrwb 6). Set AMR_WB Mode Command Example ucfg set config wan lte ims volte amrwbmodset <value>

Note: set amrwbmodeset parameter 8 ucfg set config wan lte ims volte amrwbmodset 8 Note: set amrwbmodeset parameter to "0,1,2"

ucfg set config wan lte ims volte amrwbmodset 0,1,2 Note: set amrwbmodeset parameter to "0,2,5,7"

ucfg set config wan lte ims volte amrwbmodset 0,2,5,7 Get current setting from device ucfg get config wan lte ims volte amrwbmodset 7). Set TTY Mode Command Example ucfg set config wan lte ims volte tty_mode <value>

Note: set TTY mode to TTY FULL ucfg set config wan lte ims volte tty_mode 3 Note: set TTY mode to TTY HCO ucfg set config wan lte ims volte tty_mode 1 Note: set TTY mode to TTY VCO ucfg set config wan lte ims volte tty_mode 2 Note: set TTY mode to TTY OFF ucfg set config wan lte ims volte tty_mode 0 Get current setting from device ucfg get config wan lte ims volte tty_mode Normal Internal Use Confidential Restricted Confidential 37 / 46 IMG2-HDK User Guide 3. AT Command Control Tester can enter 3GPP AT Command through GCT GDM7243 LTE USB Monitor Port interface (i.e., section 1.1.6) and it can simply connected through generic UART console program such as TeraTerm, putty, etc, Some proprietary AT commands and VzW AT commands support for testing purpose as followings;

Antenna Selection This command will persist through power cycle Set command

(A.) Usage Description AT%MIMOANTCHECK=0 Enable Main & Div. AT%MIMOANTCHECK=1 Enable Div. only AT%MIMOANTCHECK=2 Enable Main only AT%MIMOANTCHECK?

Query current enabled antenna port

+MIMOANTCHECK : 0 Read command returns the current setting of <+MIMOANTCHECK :>

(B.) Usage Response Read RSRP Usage Response Read RSRQ Usage Response AT%MIMOANTCHECK?

+MIMOANTCHECK : 0 both Main & Div are enabled

+MIMOANTCHECK : 1 only Div is enabled

+MIMOANTCHECK : 2 only Main is enabled AT+VZWRSRP?

+VZWRSRP:

<cellID>1,<EARFCN>1,<RSRP>1,<cellID>2,<EARFCN>2,<RSRP>2,,<cellID>n, <EARFCN>n,<RSRP>n

+CME ERROR: <err>

AT+VZWRSRQ?

+VZWRSRQ:

<cellID>1,<EARFCN>1,<RSRQ>1,<cellID>2,<EARFCN>2,<RSRQ>2,,<cellID>n,<EARFCN>n,<RSRQ>n

+CME ERROR: <err>

Edit APN Table This command will persist through power cycle Set command

(A.) Usage Description AT+VZWAPNE=<wapn>,<apncl>,<apnni>,<apntype>,<apnb>,<apned>

<wapn> index digit 1, 2 or 3

<apnni>: name string

<apncl>: class digit 1, 2 or 3

<apntype>: type string IPv4 IPv6 IPv4v6

<apnb>: bearer string LTE

<apned>

string Enabled Disabled Note Example

<wapn> and <apncl> should be the same Since it is LTE only device, <apnb> should be given as LTE

(i)

(ii) Edit 3rd APN. Give APN name as empty; APN type as IPV4; APN bearer as LTE and 3rd APN is enabled AT+VZWAPNE=3,3,,IPv4,LTE,Enabled Read command returns the current setting of <+VZWAPNE :>

(B.) Usage Response AT+VZWAPNE?

1,IMS,IPv4v6,LTE,Enabled,0, 2,VZWADMIN,IPv4v6,LTE,Enabled,0, 3,VZWINTERNET,IPv4v6,LTE,Enabled,0, 4,VZWAPP,IPv4v6,LTE,Enabled,0, Normal Internal Use Confidential Restricted Confidential 38 / 46 IMG2-HDK User Guide Enable/Disable packet discard This command will persist through power cycle

(A.) Set command Usage Description

(B.) AT%PKTDISCARD=1 Discard the UL packet AT%PKTDISCARD=0 Back to normal operation Read command returns the current setting of <+MIMOANTCHECK :>

Usage Response AT%PKTDISCARD?

+PKTDISCARD : OFF back to normal operation

+PKTDISCARD : ON discard the UL packet Enable/Disable packet discard This command will NOT persist through power cycle Usage Description AT%GSWTESTW=3,1 Discard the UL packet Clear RPLMN list Usage AT%VZWMRUC Clear FPLMN list Usage AT+CRSM=214,28539,0,0,0,"FFFFFFFFFFFFFFFFFFFFFFFF"

AT%GSWTESTW=3,0 Back to normal operation Normal Internal Use Confidential Restricted Confidential 39 / 46 IMG2-HDK User Guide 4. F/W Update 4.1. F/W Update via WebUI Step 1 Step 2 Step 3 Power on DUT and then wait a while (i.e., around 20 sec) Make sure it can ping to DUT (i.e., 192.168.0.1) from PC (e.g., 192.168.0.X)

(a.) Navigate WebUI (i.e., http://192.168.0.1)

(b.) Select Filename1=Bootloader, Filename2=Kernel, Filename3=Filesystem, Filename4=Modem Image to be downloaded. (It should be selected at least one file among four to go on updating process). Generally we will provide Kernel and Filesystem image.

(c.) Click Update button to go on updating process

(d.) Click OK button to be continue while a prompt box displays Normal Internal Use Confidential Restricted Confidential 40 / 46 IMG2-HDK User Guide Step 4 Step 5 Make sure a Modem COM port is observed in device manager. (Please refer to section 1.1.6) This Modem COM port (i.e., AT command interface) can simply connected through generic UART console program such as TeraTerm, putty, etc,

(e.) Type AT command: AT%SYSCMD="ucfg clean config"

(f.) Type AT command: AT%SYSCMD="ucfg clean factory"

Step 6 Then a DUT reboot is required to apply the setting. Normal Internal Use Confidential Restricted Confidential 41 / 46 IMG2-HDK User Guide Step 4

(a.) File => New connection

(b.) Click TCP/IP radio button; select Telnet radio button; give an IP address of 192.168.0.1 and then press OK button.

(c.) Click TCP/IP radio button; select Telnet radio button; give an IP address of 192.168.0.1 and then press OK button.

(a.) DUT Username: root; Password: gct Normal Internal Use Confidential Restricted Confidential 42 / 46 IMG2-HDK User Guide Step 5 Type commands sequentially below:

lted_cli 1. ucfg get config wan lte 2. 3. arm1log 2 4. AT%PKTDISCARD?

Normal Internal Use Confidential Restricted Confidential 43 / 46 Step 6 Run test case Step 7 Press Close button after test case stop. IMG2-HDK User Guide Normal Internal Use Confidential Restricted Confidential 44 / 46 IMG2-HDK User Guide 4.2. Debug Level An introduction to enable default debug level is described in Section 5.2. Furthermore, this subsection illustrates on how to enable a specific debug level. 4.2.1. IMS 4.2.1.1. Configuration to Enable IMS Debug Level After applying configuration, it will store in devices NV. However, it is different from default debug level. That said, it will be invalid after you restore device to factory default. Step 5 gives a way to quickly check and confirm whether the device is already enabled this specific debug level or not. Note: commands are mark in red Step 1 Step 2 Step 3 Power on DUT and then wait a while (i.e., around 20 sec). Please have UART access. (Hint: section 1.1.5) COM port can simply connect through generic UART console program such as TeraTerm.

(a.) Type command in DM> prompt: shell

(b.) Type command in # prompt: ucfg set config wan lte ims debug_level 50 Step 4 Then a DUT reboot is required to apply above setting. Step 5 Please check and confirm if previous setting is applied.

(a.) Type command in DM> prompt: shell

(b.) Type command in # prompt: ucfg get config wan lte ims debug_level Normal Internal Use Confidential Restricted Confidential 45 / 46 IMG2-HDK User Guide 4.2.2. Get Log File from Device Please have DUT set up properly based on section 1.1.6. Step 1 Execute tfpd server running on PC side. Step 2

(a.) Type command in DM> prompt: shell

(b.) Type command in # prompt to get /var/log/EcrioSACALC.log from device to PC. Normal Internal Use Confidential Restricted Confidential 46 / 46

Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

-

-

- Connect the equipment into an outlet on a circuit different from that to which the receiver is Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. connected. Consult the dealer or an experienced radio/TV technician for help.

-

FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. Radiation Exposure Statement:

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This device is intended only for OEM integrators under the following conditions:

1) The antenna must be installed such that 20 cm is maintained between the antenna and users, and 2) The transmitter module may not be co-located with any other transmitter or antenna. As long as 2 conditions above are met, further transmitter test will not be required. However, the OEM integrator is still responsible for testing their end-product for any additional compliance requirements required with this module installed IMPORTANT NOTE: In the event that these conditions can not be met (for example certain laptop configurations or co-location with another transmitter), then the FCC authorization is no longer considered valid and the FCC ID can not be used on the final product. In these circumstances, the OEM integrator will be responsible for re-evaluating the end product (including the transmitter) and obtaining a separate FCC authorization. End Product Labeling This transmitter module is authorized only for use in device where the antenna may be installed such that 20 cm may be maintained between the antenna and users. The final end product must be labeled in a visible area with the following: Contains FCC ID: NKR-IMG2. The grantee's FCC ID can be used only when all FCC compliance requirements are met. Manual Information To the End User The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the users manual of the end product which integrates this module. The end user manual shall include all required regulatory information/warning as show in this manual.