RM500Q-GL not working

Hello,

I have recently purchased a RM500QGL_VH (RM500QGLABR10A02M4G) module.
The module is connected to an ARMv8 SBC running linux over usb.
The sim card was taking from a huawei CPE(H112-370).
The carrier is “3 UK” (wuawei base station in N77,N78).

I am using qmi_wwan in linux 5.8.9-2-ARCH.

I have tried using ModemManager (recent master) and libqmi (1.26.6) but cannot
seem to get the card working in 5g mode.

I have tried a few different combinations of settings:
NR5G only – unable to register on any network
NR5G:LTE – lte is working but no 5g

Before I ask the provider for a new SIM card is there some way to:

  1. Reset firmware to factory defaults
  2. magic QMI command to poke the 5g radio
  3. Upgrade module firmware/config to a newer version

Anything else I should try?

Thank you kindly,
John

Here is some modem session:

+CREG: 2

+CREG: 1,"1447","141906", 7
AT+COPS?

+COPS: 0,1,"3",7

OK
AT+COPS=4,1,"3",13

OK
AT+COPS?

+COPS: 0,1,"3",7

OK
ATI

Quectel
RM500Q-GL
Revision: RM500QGLABR10A02M4G

OK
AT+CFUN?

+CFUN: 1

OK
AT+CPAS

+CPAS: 0

OK
AT+QCFG="data_interface"


+QCFG: "data_interface",0,0

OK
AT+CREG?

+CREG: 2,1

OK
AT+CSQ

+CSQ: 31,99

OK
AT+CPOL?

+CME ERROR: 3
AT+QENG="servingcell"

+QENG: "servingcell","NOCONN","LTE","FDD",234,20,141900,312,1392,3,4,4,3EE,-83,-13,-51,11,255,-32768,42

OK
AT+QENG="neighbourcell"

OK
AT+QCAINFO

OK
AT+QNWCFG="lte_csi"

+QNWCFG: "lte_csi",0,1,7,11

OK
AT+QNWCFG="nr5g_csi"

+QNWCFG: "nr5g_csi",0,0,0,0

OK
AT+QNWPREFCFG= "nsa_nr5g_band"

+QNWPREFCFG: "nsa_nr5g_band",1:3:7:20:77:78:79

OK
AT+QNWPREFCFG= "nr5g_band"

+QNWPREFCFG: "nr5g_band",1:3:7:20:77:78:79

OK
AT+QNWPREFCFG="policy_band"

ERROR
AT+QNWPREFCFG="rat_acq_order"

ERROR
AT+QNWPREFCFG="nr5g_disable_mode",0

ERROR
AT+QADC=?

+QADC: (0,1)

OK
AT+QADC=0


+QADC: 1,84212

OK
AT+QADC=1


+QADC: 1,87262

OK
AT+QSCLK?

+QSCLK: 0,0

OK
AT+QTEMP


+QTEMP:"qfe_wtr_pa0","40"

+QTEMP:"qfe_wtr_pa1","41"

+QTEMP:"qfe_wtr_pa2","37"

+QTEMP:"qfe_wtr_pa3","35"

+QTEMP:"aoss0-usr","37"

+QTEMP:"mdm-q6-usr","37"

+QTEMP:"ipa-usr","37"

+QTEMP:"cpu0-a7-usr","37"

+QTEMP:"mdm-5g-usr","37"

+QTEMP:"mdm-vpe-usr","37"

+QTEMP:"mdm-core-usr","37"

+QTEMP:"xo-therm-usr","37"

+QTEMP:"sdx-case-therm-usr","37"

Without any more detail it looks like pa for 5g radio is completely idle

Here is some qmicli commands:

[root@alarm ~]# bash -x info.sh
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-manufacturer
[/dev/cdc-wdm0] Device manufacturer retrieved:
	Manufacturer: 'Quectel'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-model
[/dev/cdc-wdm0] Device model retrieved:
	Model: 'RM500QGL_VH'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-revision
[/dev/cdc-wdm0] Device revision retrieved:
	Revision: 'RM500QGLABR10A02M4G'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-hardware-revision
[/dev/cdc-wdm0] Hardware revision retrieved:
	Revision: '20000'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-software-version
[/dev/cdc-wdm0] Software version: RM500QGLABR10A02M4G
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-power-state
[/dev/cdc-wdm0] Device power state retrieved:
	Power state: 'external-source'
	Battery level: '0 %'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-operating-mode
[/dev/cdc-wdm0] Operating mode retrieved:
	Mode: 'online'
	HW restricted: 'no'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --dms-get-band-capabilities
[/dev/cdc-wdm0] Device band capabilities retrieved:
	Bands: 'wcdma-2100, wcdma-pcs-1900, wcdma-dcs-1800, wcdma-1700-us, wcdma-850-us, wcdma-800, wcdma-900, wcdma-850-japan'
	LTE bands: '1, 2, 3, 4, 5, 7, 8, 12, 13, 14, 17, 18, 19, 20, 25, 26, 28, 29, 30, 32, 34, 38, 39, 40, 41, 42, 43'
	LTE bands (extended): '1, 2, 3, 4, 5, 7, 8, 12, 13, 14, 17, 18, 19, 20, 25, 26, 28, 29, 30, 32, 34, 38, 39, 40, 41, 42, 43, 46, 48, 66, 71'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-technology-preference
[/dev/cdc-wdm0] Successfully got technology preference
	Active: '3gpp, lte', duration: 'permanent'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-system-selection-preference
[/dev/cdc-wdm0] Successfully got system selection preference
	Emergency mode: 'no'
	Mode preference: 'lte, 5gnr'
	Disabled modes: '(null)'
	Band preference: 'bc-0-a-system, bc-0-b-system, bc-1-all-blocks, bc-2, bc-3-a-system, bc-4-all-blocks, bc-5-all-blocks, gsm-dcs-1800, gsm-900-extended, gsm-900-primary, bc-6, bc-7, bc-8, bc-9, bc-10, bc-11, wcdma-2100, wcdma-pcs-1900, wcdma-dcs-1800, wcdma-1700-us, wcdma-850-us, wcdma-800, wcdma-900, wcdma-850-japan'
	LTE band preference: '1, 2, 3, 4, 5, 7, 8, 12, 13, 14, 17, 18, 19, 20, 25, 26, 28, 29, 30, 32, 34, 38, 39, 40, 41, 42, 43'
	LTE band preference (extended): '1, 2, 3, 4, 5, 7, 8, 12, 13, 14, 17, 18, 19, 20, 25, 26, 28, 29, 30, 32, 34, 38, 39, 40, 41, 42, 43, 46, 48, 66, 71'
	TD-SCDMA band preference: 'a, b, c, d, e, f'
	Roaming preference: 'any'
	Network selection preference: 'automatic'
	Service domain preference: 'cs-ps'
	GSM/WCDMA acquisition order preference: 'automatic'
	Usage preference: 'data-centric'
	Voice domain preference: 'ps-preferred'
	Registration restriction: 'unrestricted'
	Acquisition order preference: 5gnr, lte, umts
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-cell-location-info
[/dev/cdc-wdm0] Successfully got cell location info
Intrafrequency LTE Info
	UE In Idle: 'yes'
	PLMN: '23420'
	Tracking Area Code: '1006'
	Global Cell ID: '1317120'
	EUTRA Absolute RF Channel Number: '0' (E-UTRA band 1: 2100)
	Serving Cell ID: '107'
	Cell Reselection Priority: '0'
	S Non Intra Search Threshold: '0'
	Serving Cell Low Threshold: '0'
	S Intra Search Threshold: '0'
	Cell [0]:
		Physical Cell ID: '0'
		RSRQ: '0.0' dB
		RSRP: '0.0' dBm
		RSSI: '0.0' dBm
		Cell Selection RX Level: '0'
	Cell [1]:
		Physical Cell ID: '0'
		RSRQ: '0.0' dB
		RSRP: '0.0' dBm
		RSSI: '0.0' dBm
		Cell Selection RX Level: '0'
	Cell [2]:
		Physical Cell ID: '2566'
		RSRQ: '0.4' dB
		RSRP: '1587.2' dBm
		RSSI: '0.0' dBm
		Cell Selection RX Level: '-1'
	Cell [3]:
		Physical Cell ID: '3927'
		RSRQ: '79.4' dB
		RSRP: '648.3' dBm
		RSSI: '79.4' dBm
		Cell Selection RX Level: '0'
	Cell [4]:
		Physical Cell ID: '0'
		RSRQ: '0.0' dB
		RSRP: '0.0' dBm
		RSSI: '0.0' dBm
		Cell Selection RX Level: '0'
	Cell [5]:
		Physical Cell ID: '0'
		RSRQ: '0.0' dB
		RSRP: '0.0' dBm
		RSSI: '0.0' dBm
		Cell Selection RX Level: '0'
	Cell [6]:
		Physical Cell ID: '0'
		RSRQ: '0.0' dB
		RSRP: '0.0' dBm
		RSSI: '0.0' dBm
		Cell Selection RX Level: '0'
	Cell [7]:
		Physical Cell ID: '0'
		RSRQ: '0.0' dB
		RSRP: '0.0' dBm
		RSSI: '0.0' dBm
		Cell Selection RX Level: '0'
Interfrequency LTE Info
	UE In Idle: 'yes'
LTE Info Neighboring GSM
	UE In Idle: 'yes'
LTE Info Neighboring WCDMA
	UE In Idle: 'yes'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-operator-name
[/dev/cdc-wdm0] Successfully got operator name data
PLMN List:
	MCC/MNC: '234-20'  LAC Range: 0->65279	PNN Record: 1
	MCC/MNC: '234-33'  LAC Range: 0->65279	PNN Record: 1
	MCC/MNC: '272-05'  LAC Range: 0->65279	PNN Record: 2
	MCC/MNC: '272-02'  LAC Range: 0->65279	PNN Record: 2
PLMN Names:
	0: '3' ('')		Country: 'initials-do-not-add'
	1: '3 IRL' ('')		Country: 'initials-do-not-add'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-lte-cphy-ca-info
error: couldn't get carrier aggregation info: QMI protocol error (74): 'InformationUnavailable'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-rf-band-info
[/dev/cdc-wdm0] Successfully got RF band info
Band Information:
	Radio Interface:   'lte'
	Active Band Class: 'eutran-3'
	Active Channel:    '1392'
Band Information (Extended):
	Radio Interface:   'lte'
	Active Band Class: 'eutran-3'
	Active Channel:    '1392'
Bandwidth:
	Radio Interface:   'lte'
	Bandwidth:         '15'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-signal-strength
[/dev/cdc-wdm0] Successfully got signal strength
Current:
	Network 'lte': '-50 dBm'
RSSI:
	Network 'lte': '-50 dBm'
ECIO:
	Network 'lte': '-2.5 dBm'
IO: '-106 dBm'
SINR (8): '9.0 dB'
RSRQ:
	Network 'lte': '-12 dB'
SNR:
	Network 'lte': '3.6 dB'
RSRP:
	Network 'lte': '-81 dBm'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-signal-info
[/dev/cdc-wdm0] Successfully got signal info
LTE:
	RSSI: '-50 dBm'
	RSRQ: '-12 dB'
	RSRP: '-81 dBm'
	SNR: '3.6 dB'
5G:
	RSRP: '-32768 dBm'
	SNR: '-3276.8 dB'
	RSRQ: '-32768 dB'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-tx-rx-info=lte
[/dev/cdc-wdm0] Successfully got TX/RX info
RX Chain 0:
	Radio tuned: 'yes'
	Power: '-51.2 dBm'
	ECIO: '-13.5 dB'
	RSRP: '-83.4 dBm'
	Phase: '0.00 degrees'
RX Chain 1:
	Radio tuned: 'yes'
	Power: '-60.5 dBm'
	ECIO: '-14.9 dB'
	RSRP: '-94.2 dBm'
	Phase: '0.00 degrees'
TX:
	In traffic: 'no'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-tx-rx-info=5gnr
error: couldn't get TX/RX info: QMI protocol error (93): 'NoRadio'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-home-network
[/dev/cdc-wdm0] Successfully got home network:
	Home network:
		MCC: '234'
		MNC: '20'
		Description: '3 UK'
	Network name source: se13
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-serving-system
[/dev/cdc-wdm0] Successfully got serving system:
	Registration state: 'registered'
	CS: 'attached'
	PS: 'attached'
	Selected network: '3gpp'
	Radio interfaces: '1'
		[0]: 'lte'
	Roaming status: 'off'
	Data service capabilities: '1'
		[0]: 'lte'
	Current PLMN:
		MCC: '234'
		MNC: '20'
		Description: '3'
	Roaming indicators: '1'
		[0]: 'off' (lte)
	3GPP cell ID: '1317120'
	Detailed status:
		Status: 'available'
		Capability: 'cs-ps'
		HDR Status: 'none'
		HDR Hybrid: 'no'
		Forbidden: 'no'
	LTE tracking area code: '1006'
	Full operator code info:
		MCC: '234'
		MNC: '20'
		MNC with PCS digit: 'no'

Dear Johnskopis,
Could you send AT+QENG=“servingcell” , is there really nr5G network coverage on your side,SA or NSA? it will be better if you can do a larger download or upload during NSA network. as you may know, the network will only assign nr5G resources to users when it makes sense to do that. and this is NSA characteristics.
In addition, are you in UK, and what company do you work for?if there are still problems, we can ask our local FAE in UK for support, thanks.

I put the sim in a 5g handset and verified there is no signal on that side of the building. I moved the router to the other side and now I am seeing 5g :slight_smile: I will do a better survey shortly.

The signal still isn’t great though.

There are 4 antennas (0-3) on the module. Can you tell me how they are mapped? I would like to try a narrowband antenna in SA mode. If only 2 antennas are used would I require a dummy load for the unused ports?

In addition, are you in UK, and what company do you work for?if there are still problems, we can ask our local FAE in UK for support, thanks.

I have a sales support query open already. I haven’t received any response yet. I doubt my query is a priority given the low expected volume. The main issue here is that I would like to flash the latest code and I guess it requires an NDA? :expressionless:

Thanks!

+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-tx-rx-info=lte
[/dev/cdc-wdm0] Successfully got TX/RX info
RX Chain 0:
	Radio tuned: 'yes'
	Power: '-60.6 dBm'
	ECIO: '-16.9 dB'
	RSRP: '-94.4 dBm'
	Phase: '0.00 degrees'
RX Chain 1:
	Radio tuned: 'yes'
	Power: '-60.7 dBm'
	ECIO: '-19.3 dB'
	RSRP: '-99.2 dBm'
	Phase: '285.62 degrees'
TX:
	In traffic: 'yes'
	Power: '19.0 dBm'
+ qmicli -d /dev/cdc-wdm0 --device-open-proxy --nas-get-tx-rx-info=5gnr
[/dev/cdc-wdm0] Successfully got TX/RX info
RX Chain 0:
	Radio tuned: 'yes'
	Power: '-85.3 dBm'
	ECIO: '-11.0 dB'
	RSRP: '-96.3 dBm'
	Phase: '0.00 degrees'
RX Chain 1:
	Radio tuned: 'yes'
	Power: '-83.1 dBm'
	ECIO: '-10.7 dB'
	RSRP: '-93.8 dBm'
	Phase: '0.00 degrees'
TX:
	In traffic: 'yes'
	Power: '0.0 dBm'

Dear John,
i have told our backup FAE team leader Sammy, you could send mail to her who can help to provide latest firmware and support you. Here is her mail address, sammy.zhu@quectel.com. Thanks!