How to configure Quectel RM502Q-AE 5G Modem

[LTEWIZ]

I have a "Quectel RM502Q-AE 5G NR" 5G/LTE Modem Module with Adapter Enclosure from TheWirelessHaven.com.
This is paired to the NESX2GO 5G/LTE Router with WIFIX, Golden Orb Rooter firmware version (GoldenOrb_2022-04-19).

My issue is that the Modem came programmed with a T-Mobile SIM card modem identity (IMEI) and I need to reset the Modem to "autodetect" the SIM card I put in it.

I have tried the command below but after reboot it still comes up with the programmed IMEI.
AT+CFUN=1,1 --to reset the modem

When I run command: AT+QSIMSTAT?
It returns "AT+QSIMSTAT: 0,0" meaning it does not see the SIM.

I know the SIM works as I have the SIM in another NESX2GO 4G/LTE Modem/Router bundle and it boots up and connects to T-Mobile on 4G LTE.

I am worried about running the command "AT+QPRTPARA=3" to reset the modem to its OEM state as I had WirelessHaven Team update the Modem firmware to latest for the Quectel RM502Q-AE.

Appreciate any help or support on this you can give.

Also if anyone can share the commands to pull the (IMSI and ICCID) and to program them it would be helpful as well. Similar to how the "AT+EGMR=0,7" command pulls the IMEI.

[LTEWIZ]

Quick Update:
I ran the following commands but they dont reset the modem to autodetect the SIM card and still have the same IMEI.
AT+QPRTPARA=3 --reset modem to its OEM state / factory reset setting
AT+QPRTPARA=1 --so settings will save properly to NVRAM after the next power cycle
AT+CFUN=1,1 --Reset Modem Module (Reboot the Module and apply settings learned from +QPRTPARA command)

[punkguy00017]

The para command won't reset yer modem firmware

[LTEWIZ]

Thanks, is there a command I can run to reset the modem firmware?

[LTEWIZ]

I tried this command per Quectel support.
AT&F0

I also tried to upload the firmware to run the update and reinstall RM502QAEAAR13A02M4G (R13 version) but it says it is out of space so cant finish copying it up. I have no idea what files I could delete from the modem when SSH into it.
QFirehose -f /tmp/updatefw

Is there seriously no command to reset IMEI and SN# to factory or just an autoselection so it automatically recognizes the SIM when installed??

[LTEWIZ]

RM502QAEAAR13A02M4G_01.001.01.001.zip

Just wanted to share the link for the (R11 & R13) version firmwares for the RM502Q-AE modem.
This is direct form Quectel forums.

https://forums.quectel.com/t/firmware-f ... /27?page=2

RM502QAEAAR11A04M4G_01.004.01.004.zip

[mtl26637]

LTEWIZ,

Lets step back a second before trying anything else and borking your modem. I'm a bit confused by the wording of some of your items so lets go over a couple of the basics just in case.

Your modem card RM502Q-AE has an identification number. This number is called "IMEI". This typically can not be modified as it is how each device (modems / cell phones / etc) is individually identified. Note that this specific modem does have a way to change its identity but is usually not discussed in public since your not really supposed to change it.

Your SIM card also has an identification number. Every SIM has a specific number called ICCID. These do not get modified.

Typically when your carrier activates a phone or device they will send you an activated SIM card and tie the SIM card to a specific device IMEI number in their system. When the 'device' communicates with the carrier tower it will check both numbers to make sure they match what their records show.

Apologies if you already know all of the above but its a bit confusing to see what you are trying to accomplish? The only thing that can be modified is possibly the IMEI and you already posted how that is done. The ICCID does not get modified. It only changes when you swap to a different SIM. If you have an activated SIM card, then it is tied to a specific device IMEI on the carriers side of things. You just have to make your modem look like whatever device this is supposed to be via IMEI.

In reference to flashing your modem firmware, be careful as you don't upload the firmware to the modem then flash it, you upload the firmware file to your ROUTER then flash from there. Typically if your router memory is not large enough to handle the entire modem firmware it will error out like you are seeing. Rather than upload the firmware to the /tmp folder of your router you will need to upload it to say a thumb drive or something and flash it from there.

Also, first thing I would check is why your modem is not seeing the sim. Activated or not, when you run the AT command to check the SIM it should respond with the SIM information. For whatever reason it is not communicating with the SIM card. I'd start there and figure out why its not talking to the SIM.

[LTEWIZ]

thanks for responding to try and help!

I have a "Quectel RM502Q-AE 5G NR" 5G/LTE Modem Module with Adapter Enclosure from TheWirelessHaven.com.
This is paired to the NESX2GO 5G/LTE Router with WIFIX firmware.

My Goal: I have a separate NESX2GO bundled with the internal 4G/LTE Sierra Wireless and it connects to T-Mobile all day long on my SIM card.
All I am trying to do at this stage is get my 5G Modem (RM502Q-AE) to connect to the same 4G towers to prove the modem works. After I get that working I plan to test the 5G signal.

Couple questions:

Since my 5G modem is USB3 to my router (NESX2GO) are you saying I just need to plug in a USB drive into my router (meaning I am unplugging my 5G modem USB3 connector) and run the RM502Q-AE firmware update that way to restore the factory settings? Wont that overwrite the (NESX2GO) wifix firmware and brick the router? Sorry I am noob to the these routers and modems. Been using AirMaster setup on Band 41 until T-Mobile killed it and now can only get band n71 on 5G, hence the setup I purchased.

I have validated the IMEI matches my SIM and SN# that I own. If I boot up with the SIM in MBIM mode I get no signal on Rooter status page. If I change from MBIM mode to ECM mode I get a strong signal but still cant get to the internet. My DNS is set so I know that is not the issue. I thought the modem protocol controlled the packets from the router to the modem so dont see how changing to ECM mode allows me to see the tower and get a signal.

[mtl26637]

I have a "Quectel RM502Q-AE 5G NR" 5G/LTE Modem Module with Adapter Enclosure from TheWirelessHaven.com.
This is paired to the NESX2GO 5G/LTE Router with WIFIX firmware.

My Goal: I have a separate NESX2GO bundled with the internal 4G/LTE Sierra Wireless and it connects to T-Mobile all day long on my SIM card.
All I am trying to do at this stage is get my 5G Modem (RM502Q-AE) to connect to the same 4G towers to prove the modem works. After I get that working I plan to test the 5G signal.

You should be able to take the working SIM and insert into your other setup and it work just the same if the APN is set and IMEI matches what it should (Don't run 2 devices with same IMEI at same time).

Since my 5G modem is USB3 to my router (NESX2GO) are you saying I just need to plug in a USB drive into my router (meaning I am unplugging my 5G modem USB3 connector) and run the RM502Q-AE firmware update that way to restore the factory settings? Wont that overwrite the (NESX2GO) wifix firmware and brick the router?

No, what I'm saying is you have to upload the modem's firmware file to the router first. Once the firmware file of the modem is uploaded to the temporary flash memory of the router you can then send a command to transfer/write the modems firmware from the routers temp flash to the modem. The problem you are having is your routers memory is too small to temporarily hold the modems firmware file. The only way you can get this to work is to upload the modems firmware to a different location other than your routers small memory. Does your router have an sd card slot? you could add an sd memory card to your router for extra storage and then upload the modem flash to the sd card and then write it to the modem from there but thats all tricky. Quite honestly I'd forget trying to write the modem firmware for now. Why is it you are wanting to rewrite it? The AT command you sent resets it to factory defaults already. If it didn't reset the IMEI back to its original IMEI then just write it using the command you already know. Look at the label on the modem to get the original devices IMEI and just write it back if you want it to be original?

It can be flashed with what you have or even using a win10 computer and the usb3 sled, but I just don't think that ultimately its needed in your situation and can be tricky if you don't quite understand the specifics.

I have validated the IMEI matches my SIM and SN# that I own. If I boot up with the SIM in MBIM mode I get no signal on Rooter status page. If I change from MBIM mode to ECM mode I get a strong signal but still cant get to the internet. My DNS is set so I know that is not the issue. I thought the modem protocol controlled the packets from the router to the modem so dont see how changing to ECM mode allows me to see the tower and get a signal.

Maybe its just the wording that is being used but it is confusing when you say the IMEI matches your SIM/SN you own. The IMEI of the modem should match the IMEI of the originally activated device such as a phone. SIM number doesnt really come into play here except on the carriers side of things. Just want to make sure that is what you meant?

I'd stick with MBIM for now. Are you using the correct APN settings? Look at the logs and find out exactly what is going wrong. Log into your routers web page and go to /status/syslog and look at where things are going wrong.

Generalized Example: Have a working phone and sim. Phone IMEI is 12345. Take sim out of phone and insert into RM500Q-AE device. Modify IMEI of RM500Q-AE to 12345. Change APN setting under rooter to your carriers APN (fast.t-mobile.com for T-Mobile sim). Modify TTL settings. reboot and done.

[LTEWIZ]

Ok, I figured out what I was doing wrong. I had the SIM plugged into the NESX2GO router and overlooked the SIM slot on the USB enclosure. I moved the SIM to the enclosure and I am getting connected now but only to 4G/LTE not 5G Bands.

I want to preface this next section with I tested my setup (Dual - External Bolton Long Ranger Antennas) with a MOFI5500 with the SierraWireless EM9191 5G modem and was seeing T-Mobile Band n71 with a strong signal (-75DB). I just could never got the EM9191 to band lock so I order the NESX2GO/RM502Q-AE build from thewirelesshaven.com store.

Now that we know Band n71 is available let me switch the conversation back to my NESX2GO/RM502Q-AE build.
My NESX2GO/Quectel RM502Q-AE build is working with my T-Mobile 5G CALYX SIM. This is the SIM that CALYX sent out after Sprint merger.

When I switch the modem to (5G Only: SA Mode) I get a 5G band lock error that no bands are locked for 5G.
I even tried band locking to Band n71 and its not locking. I also tried removing all 4G bands and only leaving 5G bands locked but still not picking it up.

The thing I am confused about is I dont see any 5G bands in my Cell Scan now.....here's the output.

Cell Scanner Start ...

Band : B71 Signal : -80 (dBm) EARFCN : 68636 PCI : 124 (current)
Band : B71 Signal : -89 (dBm) EARFCN : 68636 PCI : 138 (current)
Band : B26 Signal : -87 (dBm) EARFCN : 8763 PCI : 384 (current)
Band : B41 Signal : - (dBm) EARFCN : 41094 PCI : -
Band : B41 Signal : - (dBm) EARFCN : 41490 PCI : -
Band : B25 Signal : - (dBm) EARFCN : 8665 PCI : -
Band : B12 Signal : -94 (dBm) EARFCN : 5035 PCI : 236
Band : B41 Signal : - (dBm) EARFCN : 40072 PCI : -

[mtl26637]

Glad you got things going. As for 5G, there are 2 modes that carriers use. SA and NSA mode. SA mode is 5G only and is not typically used (yet). NSA mode uses both 4G and 5G signals and is the mode typically used. 4G signals are used for 'control' and 5G only kicks in on larger data transfers. When you set mode to SA then I'm not surprised its not working. I'd set to 4G/5G or better yet leave on automatic and it 'should' connect NSA and you will see 4G and 5G stats. Give that a try and start a larger download and watch signal stats on rooter and see if 5G kicks in. If you still don't see 5G stats and you know for fact the sim is provisioned for 5G then it probably has to do with the modems antenna ports and which ports are assigned to certain frequencies and such. Typically T-mobile will connect NSA B66/n71 or better yet B66/n41 4G/5G combos.

[LTEWIZ]

According to WirelessHaven team the Rooter scan for 5G is still being worked on so not 100% accurate.
They suggested I run this command:

AT+QSCAN=3
+QSCAN: "LTE",311,480,5230,16,-105,-13,23,116
+QSCAN: "LTE",310,410,5780,238,-109,-10,11,19
+QSCAN: "LTE",313,100,5780,238,-109,-10,11,19
+QSCAN: "LTE",310,410,5330,478,-116,-15,8,12
+QSCAN: "LTE",313,100,5330,478,-116,-15,8,12
+QSCAN: "LTE",310,260,5035,488,-123,-17,1,111
+QSCAN: "LTE",311,490,5035,488,-123,-17,1,111
+QSCAN: "LTE",310,260,68636,124,-110,-15,15,20
+QSCAN: "LTE",311,490,68636,124,-110,-15,15,20
+QSCAN: "LTE",311,480,5230,16,-105,-12,23,117
+QSCAN: "LTE",310,260,68636,124,-110,-16,15,19
+QSCAN: "LTE",311,490,68636,124,-110,-16,15,19
+QSCAN: "LTE",310,260,5035,488,-,-,-,113
+QSCAN: "LTE",311,490,5035,488,-,-,-,113
+QSCAN: "LTE",310,410,5330,478,-115,-16,9,11
+QSCAN: "LTE",313,100,5330,478,-115,-16,9,11
+QSCAN: "LTE",310,410,5780,238,-110,-11,11,20
+QSCAN: "LTE",313,100,5780,238,-110,-11,11,20
+QSCAN: "LTE",311,480,5230,16,-105,-13,24,116
+QSCAN: "LTE",310,410,5330,478,-115,-15,9,12
+QSCAN: "LTE",313,100,5330,478,-115,-15,9,12
+QSCAN: "LTE",310,260,5035,488,-,-,-,106
+QSCAN: "LTE",311,490,5035,488,-,-,-,106
+QSCAN: "LTE",310,410,5780,427,-104,-12,26,15
+QSCAN: "LTE",313,100,5780,427,-104,-12,26,15
+QSCAN: "LTE",311,480,2561,378,-112,-10,12,108
+QSCAN: "LTE",310,260,5035,488,-111,-8,13,113
+QSCAN: "LTE",311,490,5035,488,-111,-8,13,113
+QSCAN: "LTE",311,480,5230,16,-101,-11,27,116
+QSCAN: "LTE",310,260,68886,314,-117,-19,7,13
+QSCAN: "LTE",311,490,68886,314,-117,-19,7,13
+QSCAN: "LTE",310,120,8763,384,-103,-12,19,8
+QSCAN: "LTE",310,830,8763,384,-103,-12,19,8
+QSCAN: "LTE",312,530,8763,384,-103,-12,19,8
+QSCAN: "LTE",311,882,8763,384,-103,-12,19,8
+QSCAN: "LTE",311,490,8763,384,-103,-12,19,8
+QSCAN: "LTE",312,250,8763,384,-103,-12,19,8
+QSCAN: "LTE",310,260,68636,124,-111,-11,13,17
+QSCAN: "LTE",311,490,68636,124,-111,-11,13,17
+QSCAN: "LTE",310,410,5330,367,-98,-17,26,13
+QSCAN: "LTE",313,100,5330,367,-98,-17,26,13
+QSCAN: "LTE",310,410,5330,367,-98,-15,27,16
+QSCAN: "LTE",313,100,5330,367,-98,-15,27,16
+QSCAN: "LTE",310,260,68636,124,-111,-10,13,17
+QSCAN: "LTE",311,490,68636,124,-111,-10,13,17
+QSCAN: "LTE",310,120,8763,384,-103,-11,19,10
+QSCAN: "LTE",310,830,8763,384,-103,-11,19,10
+QSCAN: "LTE",312,530,8763,384,-103,-11,19,10
+QSCAN: "LTE",311,882,8763,384,-103,-11,19,10
+QSCAN: "LTE",311,490,8763,384,-103,-11,19,10
+QSCAN: "LTE",312,250,8763,384,-103,-11,19,10
+QSCAN: "LTE",310,260,68886,314,-118,-18,6,11
+QSCAN: "LTE",311,490,68886,314,-118,-18,6,11
+QSCAN: "LTE",311,480,5230,16,-100,-11,28,115
+QSCAN: "LTE",310,260,5035,488,-112,-10,12,113
+QSCAN: "LTE",311,490,5035,488,-112,-10,12,113
+QSCAN: "LTE",311,480,2561,378,-111,-12,13,108

[LTEWIZ]

according to the output of "AT+QSCAN=3" there are no 5G bands it is seeing.
I know for a fact that I have Band n71 that is available to me.

Is the Quectel RM502Q-AE not working with Rooter firmware to see 5G yet?

[LTEWIZ]

More diagnostics data to share:

AT+COPS=?
+COPS: (2,"T-Mobile","T-Mobile","311490",7),(1,"Sprint","Sprint","310120",7),(1,"312 250","312 250","312250",7),(1,"AT&T","AT&T","310410",7),(1,"313 100","313 100","313100",7),(1,"311 882","311 882","311882",7),(1,"Verizon","Verizon","311480",7),(1,"312 530","312 530","312530",7),,(0-4),(0-2)

For this command it will disable 5G Mode (AT+QNWPREFCFG="nr5g_disable_mode") I want to enable 5G NR bands

AT+QNWPREFCFG="policy_band" output:
+QNWPREFCFG: "gw_band",1:2:3:4:5:6:8:9:19
+QNWPREFCFG: "lte_band",1:2:3:4:5:8:12:13:14:17:18:19:20:25:26:28:29:30:32:34:39:40:41:42:43:46:48:66:71
+QNWPREFCFG: "nsa_nr5g_band",1:2:3:5:7:8:12:14:20:25:28:38:40:41:48:66:71:77:78:79
+QNWPREFCFG: "nr5g_band",1:2:3:5:7:8:12:14:20:25:28:38:40:41:48:66:71:77:78:79

AT+QNWPREFCFG="mode_pref" output:
+QNWPREFCFG: "mode_pref",NR5G

Cell Scanner Start ...after enabling only NR5G

No Neighbouring cells were found
Done

[LTEWIZ]

Just to prove that I am not crazy and get a 5G signal,
I plugged in my Calyx M2000 MIFI and it is showing it is connected to Band n71 /5G without an external antenna.

I dont know if the RM502Q-AE supports 5G yet?????

[mtl26637]

It does. I have one. Did you switch back back to NSA mode as mentioned? It won't work in SA mode for most carriers. The 4G network is still used for the core network and control.

On the flip side of things. I checked my setup and ironically I'm having trouble getting the RM502Q-AE to work with 5G now. I have an RM500Q-AE working just fine however. Not sure what happen recently as it was working fine for most of this year at least. If I switch to 4G only it works but if set to automatic or 4G/5G it will not connect. This is something new it seems.

Anyone else using T-mobile (or T-mobile mvno) and the RM502Q-AE and having issues with 5G?

[LTEWIZ]

A user in Quectel forums made a post suggested to try R11A02 image.
I downloaded and tested the R11A02 image and I can now see Band n71 again and even ping 8.8.8.8 but I cannot run a speed test or connect to the Internet.

Ping statistics for 8.8.8.8:
Packets: Sent = 4429, Received = 2891, Lost = 1538 (34% loss),
Approximate round trip times in milli-seconds:
Minimum = 16ms, Maximum = 182ms, Average = 33ms


Any thoughts on next steps to make this work? Atleast I see 5G band n71 again.

[LTEWIZ]

Here is the diag output:

AT+QNWPREFCFG="mode_pref"
+QNWPREFCFG: "mode_pref",LTE:NR5G

AT+QENG="servingcell"
+QENG: "servingcell","NOCONN","NR5G-SA","FDD", 310,260,8371C002,310,7C1B00,126290,71,3,-102,-11,17,1919
OK

AT+QRSRP
+QRSRP: -100,-134,-44,-44,NR5G
OK

From the shell prompt:
/usr/lib/rooter/common/quecteldata.sh 1 /dev/ttyUSB2; cat /tmp/signal1.file
CSQ="-"
CSQ_PER="44%"
CSQ_RSSI="-"
ECIO="-12"
RSCP="-101 dBm<br />-44"
ECIO1=" "
RSCP1="RxD -44"
MODE="NR5G-SA "FDD""
MODTYPE="6"
NETMODE="8"
CHANNEL="126290"
LBAND="n71 (Bandwidth 20 MHz)"
PCI="310"
TEMP="36°C"
SINR="14 dB"

[LTEWIZ]

I am a noob to 5G.

When I set the modem to either of these commands isnt it supposed to only enable NR5G (NA) not (SA)?
AT+QNWPREFCFG= "mode_pref",NR5G
AT+QNWPREFCFG= "mode_pref",LTE:NR5G

This is the other command that I can run but it disables both (NA/SA) modes.
AT+QNWPREFCFG="nr5g_disable_mode",1 --disables all 5G modes on modem (NA/SA)

It appears to me the modem is by default designed to connect on 5G (SA) mode not (NA) mode like the RM500 modem but I dont see a way to disable just (SA) mode to get NR5G (NA) mode to only connect.

[mtl26637]

where are you getting "NA"? There are 2 modes of operation as I explained a few times here in this thread. The modes are SA (Stand Alone 5G) and NSA (non-standalone 5G) which NSA means that it uses 4G as the core backbone for control. I know of no carrier that uses SA mode in the USA. They all use NSA which is 4G/5G combined (ENDC). There may be places out there that have went full 5G only but I think that is rare at this time. You need to switch it to either automatic or LTE:NR5G to get it to work. Once it connects you will see at a minimum the 4G signal stats. 5G only kicks in when you are downloading larger chunks of data. You can start a large download and then check your stats and you should see both 4G and 5G stats. Your "servingcell" command will also indicate stats for both when running ENDC mode (dual carrier 4G/5G mode).

Give it a try at least and see what happens.

[mtl26637]

Did some more investigating today. It does seem that carriers are moving to 5G SA more than I had thought. 6 months ago it was virtually non-existent as far as I was aware, however, I put my Tmo sim into my note 20 today and it was showing connection to 5G SA n71 only. This is new to me and does suggest they have some of the 5G core network set up after all. I believe I would still set it to connect 'auto' or let it decide as in the past it has caused issues if the carrier/tower didn't like what the end user was trying to force related to settings.

[LTEWIZ]

I received a 4x4 MIMO antenna today and did some testing and was able to connect to Band n71 on 5G cellular.
I was also able to connect on to Band n71 on my single Long Ranger Antenna (Non-MIMO)

Only changes I made was to put the modem in Auto mode and enable all bands.
Then I removed the bands the modem was trying to connect to each time until it locked to Band n71.

In my testing however I wanted to make sure all 4 antennas were active and ran this command but with the same results. I ran the commands under load as well.

AT+QNWCFG=“dis_4mimo_enable”,0 or ,1 (I believe 1 turns 4x4 On and 0 turns it Off)

I have the 4x4 MIMO connected but seeing the same whether 4x4 MIMO is enabled or disabled:

Disabled = +QRSRP: -119,-104,-32768,-32768,NR5G
Enabled = +QRSRP: -113,-106,-32768,-32768,NR5G

I am assuming the -32768 reading should be reading -100 or so like the other correct?

Is that the correct command to enable the 4x4 MIMO antennas or is there another one I should be using.
This one does not seem to work.