wiki:Huawei/E3131UsbHspa

Huawei E3131 USB HSPA+ Cellular Modem

Huawei E3131 This is a record of my hacking the  Huawei E3131 multi-function USB 2.0 cellular modem and micro-SD adapter with external antenna connector. I use it as a back-up WAN interface on a Zyxel VMG8324-B10A VDSL2 WAN gateway. For that purpose the device needs to be permanently in serial modem mode, rather than its default CDC Ethernet mode, which the embedded Linux-based Zyxel firmware doesn't recognise.

Device Functions

Function Vendor Product Description Command Comments
0 12D1 1F01 USB Mass Storage Virtual CD-ROM image emulator containing device drivers for Microsoft Windows,Apple Mac OSX, and Linux
1 12D1 14DB CDC Ethernet Embedded VXWORKS OS with web-server (HiLink mode)
12D1 14DC CDC Ethernet + SD Storage Embedded VXWORKS OS with web-server. (HiLink mode)
2 12D1 Serial modem Presents 2 serial ports (one for control, one for data).
3 12D1 1442 CDC Ethernet + 2x serial ports http://192.168.1.1/html/switchProjectMode.html DEVICE_MODE_PROJECT_MODE=0. Called when in HiLink mode.
4 12D1 1441 CDC Ethernet + SD Storage + 3x serial ports http://192.168.1.1/html/switchDebugMode.html DEVICE_MODE_DEBUG_MODE = 1. Called when in HiLink mode. Presents 3 serial ports. port 2 == AT commands, port 3 == QXWORKS OS diagnostic C shell.

Commands

In the Windows "Update Wizard.exe" firmware updater, associated with "SwitchToDiag":

AT$QCDMG

Other AT command strings:

AT^DLOADVER?
AT^DLOADINFO?
AT^AUTHORITYVER?
AT^AUTHORITYID?
AT^DATAMODE
AT^HWNATQRY?
AT^FLASHINFO?


Modes

Project Mode

Embedded web server:

http://192.168.1.1/html/switchProjectMode.html

/var/log/kern.log:

cdc_ether 2-3:1.0 eth2: unregister 'cdc_ether' usb-0000:00:1d.7-3, CDC Ethernet Device
usb 2-3: new high-speed USB device number 65 using ehci-pci
usb 2-3: New USB device found, idVendor=12d1, idProduct=1442
usb 2-3: New USB device strings: Mfr=2, Product=1, SerialNumber=0
usb 2-3: Product: HUAWEI HiLink
usb 2-3: Manufacturer: HUAWEI
option 2-3:1.0: GSM modem (1-port) converter detected
usb 2-3: GSM modem (1-port) converter now attached to ttyUSB1
option 2-3:1.1: GSM modem (1-port) converter detected
usb 2-3: GSM modem (1-port) converter now attached to ttyUSB2


And on /dev/ttyUSB2:

ATE1

OK
ATV1

OK
AT^U2DIAG?
^U2DIAG: 119

OK
AT^SYSCFG?
^SYSCFG:2,0,3FFFFFFF,1,2

OK
ATI
Manufacturer: huawei
Model: E3131
Revision: 22.157.39.00.105
IMEI: 866715019545058
+GCAP: +CGSM,+DS,+ES

OK
AT^HVER
^HVER:"CH2E303SM"

OK

Debug Mode

Embedded web server:

http://192.168.1.1/html/switchDebugMode.html

/var/log/kern.log:

usb 2-3: new high-speed USB device number 62 using ehci-pci
usb 2-3: New USB device found, idVendor=12d1, idProduct=1441
usb 2-3: New USB device strings: Mfr=3, Product=2, SerialNumber=0
usb 2-3: Product: HUAWEI HiLink
usb 2-3: Manufacturer: HUAWEI
cdc_ether 2-3:1.0 eth1: register 'cdc_ether' at usb-0000:00:1d.7-3, CDC Ethernet Device, 58:2c:80:13:92:63
option 2-3:1.2: GSM modem (1-port) converter detected
usb 2-3: GSM modem (1-port) converter now attached to ttyUSB1
option 2-3:1.3: GSM modem (1-port) converter detected
usb 2-3: GSM modem (1-port) converter now attached to ttyUSB2
option 2-3:1.4: GSM modem (1-port) converter detected
usb 2-3: GSM modem (1-port) converter now attached to ttyUSB3


And on /dev/ttyUSB2:

ATE1

OK
ATV1

OK
AT^U2DIAG?
^U2DIAG: 119

OK
AT+GMI
huawei

OK
AT+GMR
22.157.39.00.105

OK
AT+COPS?
+COPS: 0,2,"23410",2

OK
AT^SYSCFG?
^SYSCFG:2,0,3FFFFFFF,1,2


"23410" is the UK O2 cellular operator.

References

 E3131 Specifications [PDF]
 HUAWEI ME906E LTE M.2 Module AT Command Interface Specification [PDF]
 HUAWEI MU736 HSPA+ M.2 Module AT Command Interface Specification [PDF]
 HUAWEI MU609 HSPA LGA Module AT Command Interface Specification [PDF]
 Huawei AT^U2DIAG Commands

Attachments