home *** CD-ROM | disk | FTP | other *** search
/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / zines / phrack2 / p48_06.txt < prev    next >
Encoding:
Text File  |  2003-06-11  |  37.5 KB  |  598 lines
  1.  
  2.                               ==Phrack Magazine==
  3.  
  4.                  Volume Seven, Issue Forty-Eight, File 6 of 18
  5.  
  6.  
  7.                       Motorola Command Mode Information
  8.  
  9.                       Written and typed up by Cherokee
  10.  
  11.  
  12.  
  13. NOTE: The following text is only a few pages from an official Motorola
  14.       handbook that I received, thanks to Ob1.
  15.       
  16.                         THIS IS NOT A COMPLETE HANDBOOK 
  17.       
  18.       but it is very useful as a guide to learning how to use the self
  19.       test instructions on the Motorola series of cellular phones.
  20.  
  21.       To actually enter the self test modes, THERE ARE SEVERAL STAGES
  22.       BEFORE HAND THAT NEED TO BE DONE.  They depend upon what type of
  23.       Motorola mobile phone you possess.  To my knowledge, the self test
  24.       mode instructions are the same on every Motorola phone, the only
  25.       difference will be how you enter the test mode. That I leave up to
  26.       you to find out as there are lots of help files already out there,
  27.       unless, there is a great demand for it.
  28.  
  29.       I will now show you how easy it is to use the test mode to your
  30.       advantage.
  31.  
  32.       Say, your the average peeping Tom or Sally (what hacker isn't?),
  33.       this is how to listen in on other peoples mobile conversations.
  34.  
  35.       1.Enter the test mode.
  36.       2.Turn the speaker on (08#) also called un-muting the receive audio. 
  37.       3.Tune into a channel(11xxxx#) (where x can range from 0 to
  38.       600[TACS] and 1329 to 2047[ETACS].)... Although I'm not 100% sure
  39.       of the channel mapping, (theres conversations in the range between
  40.       600 to 1329), you'd do best to stick to playing around with these.
  41.  
  42.       You may have to try several different channels, to pick up a
  43.       conversation, not every channel is occupied with a user.  I
  44.       suggest you try 0 to 50, this is almost guaranteed to give you a
  45.       result. BTW, it is actually illegal to monitor mobile
  46.       communications without the consent of both parties, but hey, whose
  47.       going to know? :-)
  48.  
  49.       Displaying information - Some handsets only allow display 1 line,
  50.       and therefore you wont be able to see all of the information being
  51.       sent to you. There are 2 ways around this. 1. Is to go and get a
  52.       handset which can display 2 lines of information. 2. to send the
  53.       data to your computer to display on the screen, apparently the
  54.       data is sent and received in an unfamiliar packet format, and will
  55.       need to be decoded.
  56.  
  57.       FINAL NOTE: 
  58.       There are several conflicting sources for some commands, this is
  59.       because of different versions of the ROM, so I'm putting all of
  60.       the test codes bundled together in this file, and will update the
  61.       list if there are any significant changes, or I find out about a
  62.       new command in a later ROM version.
  63.  
  64.       Just one last final note to say hi to Davex[thanks for the NAM
  65.       guide], Ratscabies, Maelstrom, Hi.T.Moonweed and Ob1.
  66.  
  67.  ----------------------------------------------------------------------------
  68.  
  69.                      Motorola Self Test Mode Instructions
  70.                      ------------------------------------
  71.  
  72.  
  73. 1. INTRODUCTION
  74.  
  75. Portable radio telephones are equipped for self-test, allowing service
  76. personnel to control and monitor radiotelephone functions via the
  77. telephone keypad.  The self-test mode operates at two levels:
  78.  
  79. 1) a status display level, which allows the portable telephone to
  80. operate normally while providing status indications in the display and;
  81.  
  82. 2) the service level, which removes the portable telephone from normal
  83. service and allows commands to be entered through the keypad to
  84. 'manually' control the operation of the radiotelephone.
  85.  
  86. 2. OPERATING PROCEDURES
  87.  
  88. 2.1 STATUS DISPLAY LEVEL OF SELF-TEST
  89.  
  90. This level of self-test is entered by momentarily shorting pin 6 of J2
  91. to ground, while turning the radiotelephone on.  The self-test mode can
  92. also be entered using the portable radiotelephone test kit (RTL4228A and
  93. RTL4229A).
  94.  
  95. In this level of self-test mode the radiotelephone will place and
  96. receive calls as normal except the radiotelephone displays status
  97. information. The displayed status information alternates between the
  98. channel number and RSSI status information, and the primary status
  99. information (SAT frequency, carrier state, signaling tone state, power
  100. level, voice/data channel mode, and Rx and Tx audio states).  The format
  101. and explanation of this status information is given in Table 1 under 02#
  102. Radio Status Request.
  103.  
  104. When dialing a phone number, the display of the status in formation
  105. ceases when the first digit of the phone number is entered.  When the
  106. Snd button (or End or Clr) is pressed, the status information display
  107. resumes.
  108.  
  109. 2.2 SERVICING LEVEL OF SELF-TEST
  110.  
  111.   |-----------------------------------------------------------
  112.   |                             NOTE
  113.   |-----------------------------------------------------------
  114.   |     While in the servicing level mode of self-test, the
  115.   |     display does not alternate.  Only the primary status
  116.   |     information is displayed.
  117.   |-----------------------------------------------------------
  118.  
  119. The servicing level allows the servicing personnel to take control of
  120. the radio operation by entering the test commands through the telephone
  121. keypad.  Such parameters as operating channel, output power level
  122. muting, and data transmission can all be selected by entering the
  123. corresponding commands.  The servicing level is entered from the status
  124. display level by pressing the (#) button.  At this time the radio
  125. telephones cease to function automatically in the radiotelephone system.
  126. Table 1 shows the test commands and the corresponding results.
  127.  
  128.  
  129. INTERNATIONAL CELLULAR PORTABLE
  130.  
  131. Table 1. Test Commands For Self-Test Mode
  132.  
  133. |---------------------------------------------------------------------------
  134. | NOTES:
  135. | 1. Each command consists of at least two digits entered from the telephone
  136. |    keypad with the entry terminated using the (#) key.
  137. | 2. If the command relates to a test function with multiple data displays,
  138. |    the (#) key is used to pause at scanning data or to step through
  139. |    sequential test functions.  Entering the (#) key during a pause time
  140. |    resumes scanning.
  141. | 3. For commands that initiate an action that requires a response or that 
  142. |    accumulates error counts, the (#) key terminates the test.
  143. |---------------------------------------------------------------------------
  144. |Keypad Entry | Command Description | Status  |        Result
  145. |             |                     | Display |
  146. |-------------|-------------------------------------------------------------
  147. |       #     |Enter Test Command   |         |
  148. |             |Mode                 |         |
  149. |-------------|---------------------|---------|-----------------------------
  150. |      01#    |Restart (Re-enter DC |         |
  151. |             |power startup routine|         |
  152. |-------------|---------------------|---------|-----------------------------
  153. |      02#    |Radio Status Request | AAAA=BB | AAAA=Channel Number(decimal)
  154. |             |                     |         | BB=RSSI reading for channel
  155. |             |                     | CDEFGHI |   C=SAT Frequency
  156. |             |                     |         |      0=5970 Hz
  157. |             |                     |         |      1=6000 Hz
  158. |             |                     |         |      2=6030 Hz
  159. |             |                     |         |      3=No Lock
  160. |             |                     |         |   D=Carrier(1=ON)
  161. |             |                     |         |   E=Signaling Tone(1=ON)
  162. |             |                     |         |   F=Power Attention Level(0-7)
  163. |             |                     |         |   G=Mode(1=control channel
  164. |             |                     |         |     0=voice channel
  165. |             |                     |         |   H=Receive Audio Mute(1=muted)
  166. |             |                     |         |   I=Transmit Audio Mute(1=muted)
  167. |             |                     |         | When the radiotelephone is
  168. |             |                     |         | operating in the status display
  169. |             |                     |         | level of self-test, the
  170. |             |                     |         | information that is displayed
  171. |             |                     |         | alternates between AAAA BB
  172. |             |                     |         | and CDEFGHI.  In the servicing
  173. |             |                     |         | level of self-test, only the
  174. |             |                     |         | information designated by
  175. |             |                     |         | CDEFGHI is displayed.
  176. |-------------|---------------------|---------|-----------------------------
  177. |      03#    |  (NOT USED)         |         |
  178. |-------------|---------------------|---------|-----------------------------
  179. |      04#    | Initialize          |         | Carrier=OFF
  180. |             | Transceiver         |         | Power Level=0
  181. |             |                     |         | Receive Audio=MUTED
  182. |             |                     |         | Transmit Audio=MUTED
  183. |             |                     |         | Signaling Tone=OFF
  184. |             |                     |         | SAT=OFF
  185. |             |                     |         | DTMF & Audio Tones=OFF
  186. |             |                     |         | Audio Path=TO SPEAKER
  187. |-------------|---------------------|---------|-----------------------------
  188. |      05#    | Carrier On          |         | Turn carrier on
  189. |-------------|---------------------|---------|-----------------------------
  190. |      06#    | Carrier Off         |         | Turn carrier off
  191. |-------------|---------------------|---------|-----------------------------
  192. |  NOTE: Use the PATH command (35A#) to select the audio path to test before
  193. |  using commands 07# through 10#.
  194. |-------------|---------------------|---------|-----------------------------
  195. |      07#    | Rx Mute             |         | Mute the receive audio
  196. |-------------|---------------------|---------|-----------------------------
  197. |      08#    | Rx Un-mute          |         | Un-mute the receive audio
  198. |-------------|---------------------|---------|-----------------------------
  199. |      09#    | Tx Mute             |         | Mute the transmit audio
  200. |-------------|---------------------|---------|-----------------------------
  201. |      10#    | Tx Un-mute          |         | Un-mute the transmit audio
  202. |-------------|---------------------|---------|-----------------------------
  203. |    11ABCD#  | Load Synth          |         | Load synthesizer with ABCD
  204. |             |                     |         | where ABCD =  channel number
  205. |             |                     |         | in decimal (1329-2047, 0-600)
  206. |-------------|---------------------|---------|-----------------------------
  207. |      12#    | Set ATTN            |         | Set RF power attention to A
  208. |             |                     |         | where A=attention level(0-7;
  209. |             |                     |         | 0=maximum power)
  210. |-------------|---------------------|---------|-----------------------------
  211. |      13#    | RESET OFF           |         | This command should cause the
  212. |             |                     |         | Logic Unit to set WATCH DOG
  213. |             |                     |         | low and result in power-down
  214. |             |                     |         | of the radiotelephone.
  215. |-------------|---------------------|---------|-----------------------------
  216. |      14#    | STON                |         | Transmit signaling tone 10khz
  217. |-------------|---------------------|---------|-----------------------------
  218. |      15#    | STOFF               |         | Stop transmitting signaling 
  219. |             |                     |         | tone 10khz
  220. |-------------|---------------------|---------|-----------------------------
  221. |      16#    | SETUP               |         | Transmit a five word reverse
  222. |             |                     |         | control channel message; each
  223. |             |                     |         | of the five words will be
  224. |             |                     |         | "FF00AA55CC33".  The trans-
  225. |             |                     |         | mitter de-keys at end of 
  226. |             |                     |         | message
  227. |-------------|---------------------|---------|-----------------------------
  228. |      17#    | VOICE               |         | Transmit a two word reverse
  229. |             |                     |         | voice channel message; both
  230. |             |                     |         | words will be "FF00AA55CC33".
  231. |             |                     |         | The transmitter de-keys at end
  232. |             |                     |         | of message.
  233. |-------------|---------------------|---------|-----------------------------
  234. |      18#    | SEND NAM            |         | AA = Address    BB = Data
  235. |             |                     |         | Displays contents of NAM, one
  236. |             |                     |         | address at a time, advanced
  237. |             |                     |         | by pressing the (*) key.
  238. |             |                     |         | Note the address goes up to 1f
  239. |-------------|---------------------|---------|-----------------------------
  240. |      19#    | VERSION             |         | Displays software version
  241. |             |                     |         | number as "year, week"
  242. |-------------|---------------------|---------|-----------------------------
  243. |  NOTE: Entering commands 20# through 23# or 27# causes the transceiver to
  244. | begin a counting sequence or continuous transmission as described below.
  245. | In order to exit from the commands to enter another test command, the (#)
  246. | key must be depressed; all other key depressions are ineffectual.
  247. |---------------------------------------------------------------------------
  248. |      20#    | RCVS 1              |         | Receive control channel
  249. |             |                     |         | messages counting correctable
  250. |             |                     |         | and uncorrectable errors.
  251. |             |                     |         | When the command starts, the
  252. |             |                     |         | number of the command will be
  253. |             |                     |         | displayed in the right hand
  254. |             |                     |         | side of the display. Entering
  255. |             |                     |         | a # key will terminate the
  256. |             |                     |         | command and display a two
  257. |             |                     |         | three digit number in the
  258. |             |                     |         | display. The first number
  259. |             |                     |         | is the number of correctable
  260. |             |                     |         | errors and the second is the
  261. |             |                     |         | uncorrectable errors.
  262. |-------------|---------------------|---------|-----------------------------
  263. |      21#    | RCVV 1              |         | Receive voice channel
  264. |             |                     |         | messages counting correctable
  265. |             |                     |         | and uncorrectable errors.
  266. |             |                     |         | When the command starts, the
  267. |             |                     |         | number of the command will be
  268. |             |                     |         | displayed in the right hand
  269. |             |                     |         | side of the display. Entering
  270. |             |                     |         | a # key will terminate the
  271. |             |                     |         | command and display a two
  272. |             |                     |         | three digit number in the
  273. |             |                     |         | display. The first number
  274. |             |                     |         | is the number of correctable
  275. |             |                     |         | errors and the second is the
  276. |             |                     |         | uncorrectable errors.
  277. |-------------|---------------------|---------|-----------------------------
  278. |      22#    | WSTS                |         | Receive control channel
  279. |             |                     |         | messages counting word sync
  280. |             |                     |         | sequence. When the command
  281. |             |                     |         | starts, the number of the
  282. |             |                     |         | command will be displayed in
  283. |             |                     |         | the right side of the display.
  284. |             |                     |         | Entering a # key will 
  285. |             |                     |         | terminate the command and 
  286. |             |                     |         | display the number of word
  287. |             |                     |         | sync sequences in the display.
  288. |-------------|---------------------|---------|-----------------------------
  289. |      23#    | WSTV                |         | Receive voice channel
  290. |             |                     |         | messages counting word sync
  291. |             |                     |         | sequence. When the command
  292. |             |                     |         | starts, the number of the
  293. |             |                     |         | command will be displayed in
  294. |             |                     |         | the right side of the display.
  295. |             |                     |         | Entering a # key will 
  296. |             |                     |         | terminate the command and 
  297. |             |                     |         | display the number of word
  298. |             |                     |         | sync sequences in the display.
  299. |-------------|---------------------|---------|-----------------------------
  300. |      24#    |  (NOT USED)         |         |
  301. |-------------|---------------------|---------|-----------------------------
  302. |     25A#    | SATON               |         | Enable the transmission of
  303. |             |                     |         | SAT where A = SAT frequency.
  304. |             |                     |         | See chart below.
  305. |             |                     |         |        A     SAT Freq.
  306. |             |                     |         |        0      5970 Hz
  307. |             |                     |         |        1      6000 Hz
  308. |             |                     |         |        2      6030 Hz
  309. |-------------|---------------------|---------|-----------------------------
  310. |      26#    | SATOFF              |         | Disable the transmission of 
  311. |             |                     |         | SAT.
  312. |-------------|---------------------|---------|-----------------------------
  313. |      27#    | TRANSMIT DATA       |         | TX continuous control channel
  314. |             |                     |         | data.
  315. |-------------|---------------------|---------|-----------------------------
  316. |      32#    | CLEAR               |         | Clears non-volatile memory.
  317. |             |                     |         | Clears all stored numbers.
  318. |-------------|---------------------|---------|-----------------------------
  319. |      33#    | DTMF                |         | Turn DTMF on.
  320. |-------------|---------------------|---------|-----------------------------
  321. |      34#    | DTMF                |         | Turn DTMF off.
  322. |-------------|---------------------|---------|-----------------------------
  323. |      35#    | DISPLAY RSSI        |         | 'D' series portable only.
  324. |-------------|---------------------|---------|-----------------------------
  325. |     35A#    | SET AUDIO PATH      |         | Where A = the following...
  326. |             |                     |         | 1 = Speaker
  327. |             |                     |         | 2 = Microphone
  328. |             |                     |         | 3 = Earpiece
  329. |-------------|---------------------|---------|-----------------------------
  330. |      38#    | DISPLAY ESN         |         | Displays ESN in four steps,
  331. |             |                     |         | hit * till back at start.
  332. |-------------|---------------------|---------|-----------------------------
  333. |      41#    |  (NOT USED)         |         | Enables diversity.
  334. |-------------|---------------------|---------|-----------------------------
  335. |      42#    |  (NOT USED)         |         | Disables diversity.
  336. |-------------|---------------------|---------|-----------------------------
  337. |      43#    |  (NOT USED)         |         | Disables diversity.
  338. |-------------|---------------------|---------|-----------------------------
  339. |      44#    |  (NOT USED)         |         | Disables diversity.
  340. |-------------|---------------------|---------|-----------------------------
  341. |      45#    | READ RSSI           |         | Returns the RSSI reading
  342. |             |                     |         | taken on the current channel.
  343. |             |                     |         | The number is displayed as a
  344. |             |                     |         | three digit decimal number.
  345. |-------------|---------------------|---------|-----------------------------
  346. |      46#    |  (NOT USED)         |         |
  347. |-------------|---------------------|---------|-----------------------------
  348. |     47A#    | AUDLEV              |         | Set audio level where A=level
  349. |             |                     |         | (0=lowest, 15=highest). The
  350. |             |                     |         | normal level is 2.
  351. |             |                     |         | NOTE: Use 8 to 12 only for
  352. |             |                     |         | DTMF applications.
  353. |-------------|---------------------|---------|-----------------------------
  354. |      48#    | SIDETONE ON         |         | Enable sidetone(Command 05#
  355. |             |                     |         | must also be executed.
  356. |-------------|---------------------|---------|-----------------------------
  357. |      49#    | SIDETONE OFF        |         | Disable sidetone(Command 06#
  358. |             |                     |         | must also be executed.
  359. |-------------|---------------------|---------|-----------------------------
  360. |      50#    | MAINN               |         | Not normally used. Tests data
  361. |             |                     |         | transmission/reception with
  362. |             |                     |         | transmit path connected
  363. |             |                     |         | externally to receive path.
  364. |             |                     |         | Maintenance data is trans-
  365. |             |                     |         | mitted and test results 
  366. |             |                     |         | displayed:
  367. |             |                     |         | PASS= received data is correct
  368. |             |                     |         | FAIL=2-second timeout, no data
  369. |             |                     |         | received, or received data is
  370. |             |                     |         | incorrect.
  371. |-------------|---------------------|---------|-----------------------------
  372. |      51#    | MAINL               |         | Tests data paths internal to
  373. |             |                     |         | the logic unit, where
  374. |             |                     |         | maintenance data is trans-
  375. |             |                     |         | mitted and looped back. 
  376. |             |                     |         | Display is as follows:
  377. |             |                     |         | PASS= received data is correct
  378. |             |                     |         | FAIL=2-second timeout, no 
  379. |             |                     |         | looped-back data, or 
  380. |             |                     |         | looped-back data is incorrect.
  381. |-------------|---------------------|---------|-----------------------------
  382. |     52A#    |  (NOT USED)         |         |
  383. |-------------|---------------------|---------|-----------------------------
  384. |      53#    |  (NOT USED)         |         |
  385. |-------------|---------------------|---------|-----------------------------
  386. |      54#    |  (NOT USED)         |         |
  387. |-------------|---------------------|---------|-----------------------------
  388. |      55#    | DISPLAY/PROGRAM     | NAM     | Displays the contents of the
  389. |             |                     |         | NAM, one step at a time, ad-
  390. |             |                     |         | vanced by depressing the (*)
  391. |             |                     |         | key. Only the last 7 digits
  392. |             |                     |         | of data are displayed. Refer
  393. |             |                     |         | to NAM programming instruct-
  394. |             |                     |         | ions in this manual for progr-
  395. |             |                     |         | amming details.
  396. |
  397. | 01.  02051        - System ID umber. Vodaphone=02051 Cellnet=03600
  398. | 02.  xxxxxxxx     - A option byte (in binary)
  399. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  400. |      |            | Local use (bit A7) if set to 1 mobile will |
  401. |      |     0      | respond to local control orders in the home|
  402. |      |            | area. Assigned by system operator.         |
  403. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  404. |      |            | Preferred system (bit A6) applies to units  |
  405. |      |     0      | capable of operating on two service systems|
  406. |      |            | 0 = system B   1 = system A                |
  407. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  408. |      |            | End-to-end signaling (bit A5) when enabled|
  409. |      |     1      | indicates mobile is equipped for DTMF via  |
  410. |      |            | the keys after the landline connection is  |
  411. |      |            | made.  1 = enabled   0 = disabled          |
  412. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  413. |      |     0      | Bit not used (bit A4)                      |
  414. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  415. |      |            | Repertory (bit A3) indicates the mobile is |
  416. |      |     1      | equipped with speed-dialing storage.       |
  417. |      |            |  1 = enabled   0 = disabled                |
  418. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  419. |      |            | Aux alert (bit A2) when enabled, user can  |
  420. |      |     1      | place the mobile in aux alert mode and be  |
  421. |      |            | notified of incoming call via an aux device|
  422. |      |            |  1 = enabled   0 = disabled                |
  423. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  424. |      |            | H/F auto mute (bit A1) when enabled, mobile|
  425. |      |     0      | will automatically be in the mute mode when|
  426. |      |            | a call is made using the hands-free mode   |
  427. |      |            |  1 = enabled   0 = disabled                |
  428. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  429. |      |            | Minmark (bit A0)supplied by system operator|
  430. |      |     0      | when enabled the users MIN2 will be sent   |
  431. |      |            | with each call initiated or answered.      |
  432. |      |            |  1 = enabled   0 = disabled                |
  433. |      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  434. | 03.  xxxxxxxxxx   - Mobile phone number
  435. | 04.  xxxxxxxxxx   - 10 digit min
  436. | 05.  17           - Station class mark
  437. | 06.  09           - Access overload class (15 highest priority)
  438. | 07.  xxxxxx       - Security code
  439. | 08.  xxx          - Lock code
  440. | 09.  xxxxxxxx     - B option byte (in binary)
  441. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  442. |      |     0      | bit b7    not used                         |
  443. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  444. |      |     0      | bit b6    not used                         |
  445. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  446. |      |     0      | bit b5    not used                         |
  447. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  448. |      |            | Extended field (bit b4) when enabled, the  |
  449. |      |     0      | mobile would scan more than 32 paging ch.  |
  450. |      |            | currently not used in UK.                  |
  451. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  452. |      |            | Single system scan (bit b3) if set to 1    |
  453. |      |      1     | the mobile will scan only 1 system based   |
  454. |      |            | on the setting of option byte A bit 6      |
  455. |      |            |  1 = enabled   0 = disabled                |
  456. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  457. |      |            | Auto recall (bit b2) this option allows the|
  458. |      |      1     | user to access repertory by a 1 or 2 digit |
  459. |      |            | send sequence                              |
  460. |      |            |  1 = enabled   0 = disabled                |
  461. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  462. |      |            | Disable service levels (bit b1) if set to 1|
  463. |      |      0     | service levels couldn't be changed from the|
  464. |      |            | control unit.                              |
  465. |      |            |  0 = enabled   1 = disabled                |
  466. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  467. |      |            | Lock code (bit b0) when enabled, allows the|
  468. |      |      0     | user to lock and unlock the mobile using   |
  469. |      |            | the three digit lock code.                 |
  470. |      |            |  0 = enabled   1 = disabled                |
  471. |      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  472. | 10.  xxxxxxxx     - C option byte (in binary)
  473. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  474. |      |            | User NAM programming (bit c7) when enabled |
  475. |      |      0     | allows user to program NAM from handset    |
  476. |      |            |  0 = enabled   1 = disabled                |
  477. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  478. |      |      0     | Single/Dual system (bit c6) 0=single 1=dual|
  479. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  480. |      |            | Call timer (bit c5) when enabled, the user |
  481. |      |      0     | can access the call timer.                 |
  482. |      |            |  0 = enabled   1 = disabled                |
  483. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  484. |      |      1     | Auto re-dial (bit c4)                      |
  485. |      |            |  0 = enabled   1 = disabled                |
  486. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  487. |      |            | Speaker disable (bit c3) enable or disable |
  488. |      |      1     | handset speaker when fitting hands free    |
  489. |      |            |  0 = enabled   1 = disabled                |
  490. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  491. |      |      0     | bit c2    not used                         |
  492. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  493. |      |            | Selectable system (bit c1) allows user to  |
  494. |      |      1     | select primary system.                     |
  495. |      |            |  0 = enabled   1 = disabled                |
  496. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  497. |      |      0     | bit c0    not used                         |
  498. |      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  499. | 11.  xxxxxxxx     - D option byte (in binary)
  500. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  501. |      |      0     | Max volume (bit d7) sets max vol to step 4 |
  502. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  503. |      |      0     | Theft disable (bit d6) when set to 1, theft|
  504. |      |            | alarm is not accessible.                   |
  505. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  506. |      |      0     | Beeper disable (bit d5) 1=disable          |
  507. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  508. |      |      1     | EXT DTMF(bit d4) when clear, DTMF is routed|
  509. |      |            | directly through APC.                      |
  510. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  511. |      |      0     | Flashing roam (bit d3) if enabled, roam    |
  512. |      |            | light will flash when home area roaming.   |
  513. |      |            |  1 = enabled   0 = disabled                |
  514. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  515. |      |            | Audio convenience (bit d2) if disabled,    |
  516. |      |      0     | audio levels are re-centered on power up.  |
  517. |      |            |  0 = enabled   1 = disabled                |
  518. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  519. |      |            | Time rx calls (bit d1) call timers will    |
  520. |      |      0     | accumulate on incoming calls when enabled  |
  521. |      |            |  1 = enabled   0 = disabled                |
  522. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  523. |      |            | Charge rate (bit d0) when enabled,telephone|
  524. |      |      1     | will respond to charge rate information    |
  525. |      |            |  1 = enabled   0 = disabled                |
  526. |      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  527. | 12.  0023         - Initial paging system 0023=Vodaphone 0323=Cellnet   
  528. | 13.  0023         - Initial paging channel A 
  529. | 14.  0323         - Initial paging channel B
  530. | 15.  021          - Dedicated paging channels
  531. | 16.  xxxxxxxx     - E option bytes (in binary)
  532. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  533. |      |      0     | bit e7    not used                         |
  534. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  535. |      |      0     | bit e6    not used                         |
  536. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  537. |      |      0     | bit e5    not used                         |
  538. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  539. |      |      0     | bit e4    transportable speaker present    |
  540. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  541. |      |      0     | bit e3    not used                         |
  542. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  543. |      |      0     | bit e2    not used                         |
  544. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  545. |      |      0     | bit e1    not used                         |
  546. |      |~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
  547. |      |      1     | Word sync scan disable (bit e0) portable   |
  548. |      |            | use only.                                  |
  549. |      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  550. |-------------|---------------------|---------|-----------------------------
  551. |      56#    |  (NOT USED)         |         |
  552. |-------------|---------------------|---------|-----------------------------
  553. |      57#    |  (NOT USED)         |         |
  554. |-------------|---------------------|---------|-----------------------------
  555. |      58#    | COMPANDER ON        |         | Turn compander ON
  556. |-------------|---------------------|---------|-----------------------------
  557. |      59#    | COMPANDER OFF       |         | Turn compander OFF
  558. |-------------|---------------------|---------|-----------------------------
  559. | 60# and 61# |  (NOT USED)         |         |
  560. |-------------|---------------------|---------|-----------------------------
  561. |      61#    | ESN TRANSFER        |         | For series I or 1? and MINI
  562. |             |                     |         | TACS - Probably Micro TACS.
  563. |-------------|---------------------|---------|-----------------------------
  564. |      62#    | RNG-ON              |         | Turn the APC ringer audio
  565. |             |                     |         | path ON.
  566. |-------------|---------------------|---------|-----------------------------
  567. |      63#    | RNG-OFF             |         | Turn the APC ringer audio
  568. |             |                     |         | path OFF.
  569. |-------------|---------------------|---------|-----------------------------
  570. |      64#    | PLT-ON              |         | Turn the APC transmit pilot
  571. |             |                     |         | path on.
  572. |-------------|---------------------|---------|-----------------------------
  573. |      65#    | PLT-OFF             |         | Turn the APC transmit pilot
  574. |             |                     |         | path off.
  575. |-------------|---------------------|---------|-----------------------------
  576. | 66# thru 71#|  (NOT USED)         |         |
  577. |-------------|---------------------|---------|-----------------------------
  578. |      66#    | IDENTITY TRANSFER   |         | Series II and some current
  579. |             |                     |         | portables.
  580. |-------------|---------------------|---------|-----------------------------
  581. |      68#    | DISPLAY FLEX AND    |         |
  582. |             | MODEL INFO          |         |
  583. |-------------|---------------------|---------|-----------------------------
  584. |      69#    | USED WITH IDENTITY  |         |
  585. |             | TRANSFER            |         |
  586. |-------------|---------------------|---------|-----------------------------
  587. |      72#    | MODULATION GAIN     |         | Refer to the Portable 
  588. |             | ADJUST              |         | Telephone Phasing section for
  589. |             |                     |         | use of this command.
  590. |-------------|---------------------|---------|-----------------------------
  591. |      73#    | POWER OUTPUT ADJUST |         | Refer to the Portable
  592. |             |                     |         | Telephone Phasing section for
  593. |             |                     |         | use of this command.
  594. |             |                     |         | (0 to 7.)
  595. |-------------|---------------------|---------|-----------------------------
  596.  
  597.  
  598.