Huawei ME906 » History » Revision 9
Revision 8 (laforge, 01/14/2017 01:35 PM) → Revision 9/12 (laforge, 01/14/2017 01:39 PM)
h1. Huawei ME906v The Huawei ME906v is yet another MDM9x15 based cellular modem that uses Linux on its Cortex-A5 processor, based on [[Qualcomm_Linux]] (LE). h2. USB configuration The ME906v has different USB configurations: h3. Configuration 1 |Interface|Name|Description| |0|Huawei Mobile Connect - Modem|AT Commands| |1|Huawei Mobile Connect - Application|DIAG| |2|Huawei Mobile Connect - Pcui|| |3|HUAWEI Mobile Connect - Network Card|qmi-wwan| |4|Huawei Mobile Connect - Gps|| |5|Huawei Mobile Connect - Serial B|| h3. Configuration 2 |Interface|Name|Description| |0|CDC Ethernet Control Model (ECM)|| |1|CDC Ethernet Data|| |2|Huawei Mobile Connect - Modem|| |3|HUAWEI Mobile Connect - Application|| |4|HUAWEI Mobile Connect - Pcui|| |5|Huawei Mobile Connect - Gps|| |6|Huawei Mobile Connect - Serial B|| h3. Configuration 3 |Interface|Name|Description| |0|HUAWEI Mobile Connect - Network Card|| |2|Huawei Mobile Connect - Gps|| h3. Initialization on Linux side: from /usr/bin/usb/ (combining multipel scripts, expanding variables) <pre> echo "hsusb" > /sys/devices/platform/usb_bam/enable echo 0 > /sys/class/android_usb/android0/enable echo 0x1573 > /sys/class/android_usb/android0/idProduct echo 0x12D1 > /sys/class/android_usb/android0/idVendor echo diag > /sys/class/android_usb/android0/f_diag/clients echo smd,tty > /sys/class/android_usb/android0/f_serial/transports echo SMD,BAM2BAM > /sys/class/android_usb/android0/f_rmnet/transports echo "pcui,diag,modem,ccid,rmnet,gps:usb_mbim,gps" > /sys/class/android_usb/android0/functions echo 0 > /sys/class/android_usb/android0/mbim_name echo 0 > /sys/module/restart/parameters/download_mode echo 1 > /sys/class/android_usb/android0/remote_wakeup echo 1 > /sys/class/android_usb/android0/enable </pre> h2. AT Command interface Unless otherwise noted, this was done using a modem with the following firmware version: <pre> ATI Manufacturer: Huawei Technologies Co., Ltd. Model: ME906V Revision: 11.234.44.03.00 </pre> <pre> root@9615-cdp:/# cat /build.prop ro.build.version.release=AU_LINUX_BASE_KIWI_TARGET_ALL.03.00.032 </pre> h3. Interesting non-standard commands The following commands appear to be non-standard and implemented in the device: <pre> +ES +ESA +CMOD +CEMODE +CVHU +CECALL +HUAWEI ^TBAT ^TCHRENABLE ^TCHRINFO ^APBATLVL ^SETMODE $QCSIMSTAT $QCPBMPREF $CREG $CCLK $QCCNMI *CNTI $QCCLR $QCDMR $QCDNSP $QCDNSS $QCTER $QCSLOT $QCSIMAPP $QCPINSTAT $QCPDPP $QCPDPLT $QCPWRDN $QCDGEN $QCPDPCFGE $BREW $QCANTE $QCRPW $QCSQ $CSQ $QCSYSMODE $QCCTM $QCBANDPREF ^DSCI $QCVOLT $QCHWREV $QCBOOTVER $ECALL $QCDEFPROF $QCMRUE $QCMRUC $QCAPNE $QCPDPIMSCFGE $QCCLAC $QCRMCALL $QCDRX </pre> h3. AT commands in atfwd_daemon <pre> +HUAWEI ^PSTANDBY ^TBAT ^TCHRENABLE ^TCHRINFO ^APBATLVL ^SETMODE </pre> h4. AT^SETMODE This can be used to switch between different USB Product IDs. * @AT^SETMODE=0@ is for the normal 1573 product ID * @AT^SETMODE=1@ is for the 157E product ID Unfortunately none of the two contain adb by default :( h2. Serial Console Like all/most MDM9x15 targets, there is an 1.8V serial console available on ttyHSL0. TODO: Describe soldering of serial console pads. Once you have connected to the serial console, you should be able to observe the boot log like in the attached @bootlog.txt@ h3. Keeping modem from suspend It seems like the Linux system is suspended after very few seconds of inactivity. To keep it alive, you can write any character to any of the serial devices. For example, the following one-liner script will work (assuming /dev/ttyUSB5 is one of the AT command ports of the modem): <pre> while [ -f /etc/passwd ]; do echo "AT" > /dev/ttyUSB5; sleep 1; done </pre> h2. Linux on Cortex-A5 h3. processes see attached @ps.txt@ h3. rmnet <pre> 2: hw_rmnet: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 3a:1c:af:e4:29:03 brd ff:ff:ff:ff:ff:ff 3: hw_rmnet2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 56:f5:0f:cf:4c:cd brd ff:ff:ff:ff:ff:ff 4: rmnet0: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] 5: rmnet1: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] 6: rmnet2: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] 7: rmnet3: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] 8: rmnet4: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] 9: rmnet5: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] 10: rmnet6: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] 11: rmnet7: <> mtu 2000 qdisc noop state DOWN qlen 1000 link/[530] </pre>
