RG50xQ&RM5xxQ Series

5G Network Searching
Scheme Introduction
5G Module Series

Version: 1.0

Date: 2021-07-12

Status: Released
 5G Module Series

Our aim is to provide customers with timely and comprehensive service. For any assistance,
please contact our company headquarters:

Quectel Wireless Solutions Co., Ltd.

Building 5, Shanghai Business Park Phase III (Area B), No.1016 Tianlin Road, Minhang District, Shanghai
200233, China
Tel: +86 21 5108 6236
Email: [email protected]

Or our local office. For more information, please visit:

http://www.quectel.com/support/sales.htm.

For technical support, or to report documentation errors, please visit:

http://www.quectel.com/support/technical.htm
Or email to [email protected].

General Notes
Quectel offers the information as a service to its customers. The information provided is based upon
customers’ requirements. Quectel makes every effort to ensure the quality of the information it makes
available. Quectel does not make any warranty as to the information contained herein, and does not
accept any liability for any injury, loss or damage of any kind incurred by use of or reliance upon the
information. All information supplied herein is subject to change without prior notice.

Disclaimer
While Quectel has made efforts to ensure that the functions and features under development are free
from errors, it is possible that these functions and features could contain errors, inaccuracies and
omissions. Unless otherwise provided by valid agreement, Quectel makes no warranties of any kind,
implied or express, with respect to the use of features and functions under development. To the maximum
extent permitted by law, Quectel excludes all liability for any loss or damage suffered in connection with
the use of the functions and features under development, regardless of whether such loss or damage
may have been foreseeable.

Duty of Confidentiality
The Receiving Party shall keep confidential all documentation and information provided by Quectel,
except when the specific permission has been granted by Quectel. The Receiving Party shall not access
or use Quectel’s documentation and information for any purpose except as expressly provided herein.
Furthermore, the Receiving Party shall not disclose any of the Quectel's documentation and information
to any third party without the prior written consent by Quectel. For any noncompliance to the above
requirements, unauthorized use, or other illegal or malicious use of the documentation and information,
Quectel will reserve the right to take legal action.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 1 / 33
 5G Module Series

Copyright
The information contained here is proprietary technical information of Quectel. Transmitting, reproducing,
disseminating and editing this document as well as using the content without permission are forbidden.
Offenders will be held liable for payment of damages. All rights are reserved in the event of a patent grant
or registration of a utility model or design.

Copyright © Quectel Wireless Solutions Co., Ltd. 2021. All rights reserved.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 2 / 33
 5G Module Series

About the Document

Revision History

Version Date Author Description

- 2021-05-28 Spawn ZHANG Creation of the document

1.0 2021-07-12 Spawn ZHANG First official release

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 3 / 33
 5G Module Series

Contents

About the Document .................................................................................................................................. 3

Contents ...................................................................................................................................................... 4
Table Index .................................................................................................................................................. 5
Figure Index ................................................................................................................................................ 6

1 Introduction ......................................................................................................................................... 7
1.1. Applicable Modules .................................................................................................................... 7
1.2. Band Information ........................................................................................................................ 8

2 5G Network Registration Flow........................................................................................................... 9

2.1. NSA Network Registration Flow ................................................................................................ 9
2.2. SA Network Registration Flow ................................................................................................. 10

3 AT Command Introduction .............................................................................................................. 11

3.1. Network Searching Configuration Commands ........................................................................ 11
3.1.1. AT+C5GREG 5GS Network Registration Status ....................................................... 11
3.1.2. AT+QNWPREFCFG="nsa_nr5g_band" NSA 5G NR Band Configuration ................ 12
3.1.3. AT+QNWPREFCFG="nr5g_band" 5G NR Band Configuration ................................ 13
3.1.4. AT+QNWPREFCFG="mode_pref" Network Search Mode Configuration ................. 14
3.1.5. AT+QNWPREFCFG="policy_band" Read Carrier Policy Band................................. 15
3.1.6. AT+QNWPREFCFG="ue_capability_band" Query UE Capability Band ................... 17
3.1.7. AT+QNWPREFCFG="nr5g_disable_mode" Disable 5G NR Configuration .............. 18
3.2. Get Network Status .................................................................................................................. 19
3.2.1. AT+QNWCFG="nr5g_csi" Read 5G NR CSI information .......................................... 19
3.2.2. AT+QNWCFG="nr5g_cell_id" Get the Cell Identification under 5G SA .................... 20
3.2.3. AT+QENG Query Primary Serving Cell and Neighbour Cell Information .................. 20

4 Typical Cases Analysis .................................................................................................................... 27

4.1. Network Searching Failure in NSA .......................................................................................... 27
4.2. Network Searching Failure in SA ............................................................................................. 29

5 Appendix A References.................................................................................................................... 32

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 4 / 33
 5G Module Series

Table Index

Table 1: Applicable Modules ........................................................................................................................ 7

Table 2: Bands Supported by RG500Q-EA ................................................................................................. 8
Table 3: Related Documents...................................................................................................................... 32
Table 4: Terms and Abbreviations ............................................................................................................. 32

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 5 / 33
 5G Module Series

Figure Index

Figure 1: NSA Network Registration Flow ................................................................................................... 9

Figure 2: SA Network Registration Flow .................................................................................................... 10
Figure 3: Log of Registration Request ....................................................................................................... 31
Figure 4: Log of RRC Establishment Completed ....................................................................................... 31

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 6 / 33
 5G Module Series

1 Introduction
This document takes RG500Q-EA as an example to introduce 5G network searching scheme, including
network registration flow, FAQs and typical network searching failure cases analysis, as well as AT
commands related to network searching to obtain the network registration status and network service
quality parameters.

1.1. Applicable Modules

Table 1: Applicable Modules

Modules Series Model

RG500Q Series

RG50xQ RG501Q-EU

RG502Q-EA

RM500Q Series

RM502Q Series
RM5xxQ
RM505Q-AE

RM510Q-GL

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 7 / 33
 5G Module Series

1.2. Band Information

5G networking modes are divided into NSA and SA. Taking the RG500Q-EA module as an example, the
supported bands are shown in the following table.

Table 2: Bands Supported by RG500Q-EA

RATs Supported Bands

NSA n41/n77/n78/n79/n1/n3/n5/n7/n8/n20/n28/n38/n40

SA n41/n77/n78/n79/n1/n3/n5/n7/n8/n20/n28/n38/n40

⚫NOTE
For band information of other modules of Quectel RG50xQ and RM5xxQ series, see the specification of
the corresponding module.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 8 / 33
 5G Module Series

2 5G Network Registration Flow

This chapter introduces network registration flow of NSA and SA respectively.

2.1. NSA Network Registration Flow

In NSA network registration, LTE is registered first, and then 5G cell is added. See the figure below for
details.

UE initialization Read system messages

The network issues 5G cell

PLMN selection Cell selection
measurements

Band Scan: system scan 5G cell measurement

Camping
band scan report

Cell search and downlink

LTE Registration Add 5G cell
synchronization

Figure 1: NSA Network Registration Flow

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 9 / 33
 5G Module Series

2.2. SA Network Registration Flow

See the figure below for details about SA network registration.

UE initialization

PLMN selection

Band Scan: system scan

band scan

Cell search and downlink

synchronization

Read system messages

Cell selection

Camping

Network Registration

Figure 2: SA Network Registration Flow

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 10 / 33
 5G Module Series

3 AT Command Introduction

3.1. Network Searching Configuration Commands

3.1.1. AT+C5GREG 5GS Network Registration Status

This command queries the network registration status and controls the presentation of following URCs:

⚫ When <n>=1, +C5GREG: <stat> is presented. This URC indicates that there is a change in
the MT’s network registration status in 5GS.
⚫ When <n>=2 or the network provided an Allowed NSSAI, +C5GREG: <stat>[,[<tac>],[<ci>],
[<AcT>],[<Allowed_NSSAI_length>],[<Allowed_NSSAI>]] is presented. This URC indicates that
there is a change of the network cell in 5GS. The parameters <tac>, <ci>, <AcT>,
<Allowed_NSSAI_length> and <Allowed_NSSAI> are provided only if available.

AT+C5GREG 5GS Network Registration Status

Test Command Response
AT+C5GREG=? +C5GREG: (range of supported <n>s)

OK
Read Command Response
AT+C5GREG? +C5GREG: <n>,<stat>[,[<tac>],[<ci>],[<AcT>],[<Allowed
_NSSAI_length>],[<Allowed_NSSAI>]]

OK
Write Command Response
AT+C5GREG=[<n>] OK
Or
ERROR
Maximum Response Time 300 ms

Characteristics /
Reference
3GPP TS 27.007

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 11 / 33
 5G Module Series

Parameter

<n> Integer type.

0 Disable network registration unsolicited result code.
1 Enable network registration unsolicited result code
+C5GREG:<stat>.
2 Enable network registration and location information
unsolicited result code +C5GREG:<stat>[,[<tac>],[<ci>],
[<AcT>],[<Allowed_NSSAI_length>],[<Allowed_NSSAI>]].
<stat> Integer type. Indicate the NR registration status.
0 Not registered, MT is not currently searching an operator to
register to.
1 Registered, home network.
2 Not registered, but MT is currently trying to attach or searching
an operator to register to.
3 Registration denied.
4 Unknown.
5 Registered, roaming.
8 Registered for emergency services only.
<tac> String type. Three-byte tracking area code in hexadecimal format.
<ci> String type. Five-byte (NR) cell ID in hexadecimal format.
<AcT> Integer type. Access technology selected.
10 E-UTRAN connected to a 5GCN
11 NR connected to a 5GCN
<Allowed_NSSAI_length> Integer type. Indicates the number of octets of the <Allowed_NSSAI>
information element.
<Allowed_NSSAI> String type in hexadecimal format. Dependent of the form, the string can
be separated by dot(s), semicolon(s) and colon(s). This parameter
indicates the list of allowed S-NSSAIs received from the network. The
<Allowed_NSSAI> is coded as a list of <S-NSSAI>s separated by
colons. See <S-NSSAI> in 3GPP 27.007 subclause 10.1.1. This
parameter shall not be subject to conventional character conversion as
per AT+CSCS.

3.1.2. AT+QNWPREFCFG="nsa_nr5g_band" 5G NR NSA Band Configuration

This command specifies the preferred 5G NR NSA bands to be searched by UE.

AT+QNWPREFCFG="nsa_nr5g_band" 5G NR NSA Band Configuration

Write Command Response
AT+QNWPREFCFG="nsa_nr5g_band" If the optional parameter is omitted, query the current
[,<NSA_NR5G_band>] configuration:
+QNWPREFCFG: "nsa_nr5g_band",<NSA_NR5G_ban

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 12 / 33
 5G Module Series

d>

OK

If the optional parameter is specified, configure the preferred

5G NR NSA bands to be searched:
OK
Or
ERROR
Maximum Response Time 300 ms
The command takes effect immediately.
Characteristics
The configuration will be saved automatically.

Parameter

<NSA_NR5G_band> String type. Use the colon as a separator to list the 5G NR NSA bands to be
configured. The parameter format is n1:n2:…:nx .

NOTE

The configurable 5G NR NSA bands supported by the applicable modules for this command are: n1, n2,
n3, n5, n7, n8, n12, n20, n25, n28, n38, n40, n41, n48, n66, n71, n77, n78, n79, n257, n258, n260 and
n261.

Example
AT+QNWPREFCFG= "nsa_nr5g_band" //Query the currently configured 5G NR NSA bands of UE
+QNWPREFCFG: "nsa_nr5g_band",1:3:7:20:28:40:41:71:77:78:79

OK
AT+QNWPREFCFG= "nsa_nr5g_band",1:2 //Set 5G NR NSA n1 and 5G NR NSA n2.
OK

3.1.3. AT+QNWPREFCFG="nr5g_band" 5G NR SA Band Configuration

This command specifies the preferred 5G NR SA bands to be searched by UE.

AT+QNWPREFCFG="nr5g_band" 5G NR SA Band Configuration

Write Command Response
AT+QNWPREFCFG="nr5g_band"[,<N If the optional parameter is omitted, query the current
R5G_band>] configuration:
+QNWPREFCFG: "nr5g_band",<NR5G_band>

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 13 / 33
 5G Module Series

OK

If the optional parameter is specified, configure the preferred

5G NR SA bands to be searched:
OK
Or
ERROR
Maximum Response Time 300 ms
The command takes effect immediately.
Characteristics
The configuration will be saved automatically.

Parameter

<NR5G_band> String type. Use the colon as a separator to list the 5G NR SA bands to be
configured. The parameter format is n1:n2:…:nx .

NOTE

The configurable SA 5G NR bands supported by the applicable modules for this command are: n1, n2,
n3, n5, n7, n8, n12, n20, n25, n28, n38, n40, n41, n48, n66, n71, n77, n78, n79.

Example
AT+QNWPREFCFG= "nr5g_band" //Query the currently configured 5G NR SA bands of the UE.
+QNWPREFCFG: "nr5g_band",1:3:7:20:28:40:41:71:77:78:79

OK
AT+QNWPREFCFG= "nr5g_band",1:2 //Set 5G NR SA n1 and 5G NR SA n2.
OK

3.1.4. AT+QNWPREFCFG="mode_pref" Network Search Mode Configuration

This command specifies the network search mode.

AT+QNWPREFCFG="mode_pref" Network Search Mode Configuration

Write Command Response
AT+QNWPREFCFG="mode_pref"[,<m If the optional parameter is omitted, query the current
ode_pref>] configuration:
+QNWPREFCFG: "mode_pref",<mode_pref>

OK

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 14 / 33
 5G Module Series

If the optional parameter is specified, configure the network

search mode:
OK
Or
ERROR
Maximum Response Time 300 ms
The command takes effect immediately.
Characteristics
The configuration will be saved automatically.

Parameter

<mode_pref> String type. Use the colon as a separator to list the RATs to be configured. The
parameter format is: RAT1:RAT2:…RATN. The RATs supported by the module are as
follows:
AUTO WCDMA & LTE & 5G NR
WCDMA WCDMA only
LTE LTE only
NR5G 5G NR only

Example
AT+QNWPREFCFG= "mode_pref" //Query the current configuration.
+QNWPREFCFG: "mode_pref",AUTO

OK
AT+QNWPREFCFG= "mode_pref",LTE //Set RAT to LTE only.
OK
AT+QNWPREFCFG= "mode_pref",LTE:NR5G //Set RAT to LTE and 5G NR.
OK

3.1.5. AT+QNWPREFCFG="policy_band" Read Carrier Policy Band

This command reads the band configured in the carrier policy.

AT+QNWPREFCFG="policy_band" Read Carrier Policy Band

Write Command Response
AT+QNWPREFCFG="policy_band" +QNWPREFCFG: "gw_band",<gw_band>
+QNWPREFCFG: "lte_band",<LTE_band>
+QNWPREFCFG: "nsa_nr5g_band",<NSA_NR5G_ban
d>
+QNWPREFCFG: "nr5g_band",<NR5G_band>

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 15 / 33
 5G Module Series

OK

Maximum Response Time 300 ms

Characteristics /

Parameter

<gw_band> String type. Use the colon as a separator to list the WCDMA bands to be
configured. The parameter format is B1:B2:…:BN.
<LTE_band> String type. Use the colon as a separator to list the LTE bands to be configured.
The parameter format is B1:B2:…:BN.
<NSA_NR5G_band> String type. Use the colon as a separator to list the 5G NR NSA bands to be
configured. The parameter format is n1:n2:…:nx
<NR5G_band> String type. Use the colon as a separator to list the 5G NR SA bands to be
configured. The parameter format is n1:n2:…:nx .

NOTE

1. RG50xQ and RM5xxQ series support the following WCDMA bands:

B1 WCDMA 2100 band
B2 WCDMA 1900 band
B3 WCDMA 1800 band
B4 WCDMA 1700 band
B5 WCDMA 850 band
B6 WCDMA 800 band
B8 WCDMA 900 band
B19 WCDMA Japan 850 band
2. RG50xQ and RM5xxQ series support the following LTE bands:
B1, B2, B3, B4, B5, B7, B8, B12, B13, B14, B17, B18, B19, B20, B25, B26, B28, B29, B30, B32, B34,
B38, B39, B40, B41, B42, B43, B48, B66 and B71.
3. RG50xQ and RM5xxQ series support the following 5G NR NSA bands:
n1, n2, n3, n5, n7, n8, n12, n20, n25, n28, n38, n40, n41, n48, n66, n71, n77, n78, n79, n257, n258,
n260 and n261.
4. RG50xQ and RM5xxQ series support the following 5G NR SA bands:
n1, n2, n3, n5, n7, n8, n12, n20, n25, n28, n38, n40, n41, n48, n66, n71, n77, n78 and n79.

Example
AT+QNWPREFCFG="policy_band"
+QNWPREFCFG: "gw_band",1:8
+QNWPREFCFG: "lte_band",1:3:8
+QNWPREFCFG: "nsa_nr5g_band",78
+QNWPREFCFG: "nr5g_band",78

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 16 / 33
 5G Module Series

OK

3.1.6. AT+QNWPREFCFG="ue_capability_band" Query UE Capability Band

This command queries the band configured in the UE capability information.

AT+QNWPREFCFG="ue_capability_band" Query UE Capability Band

Write Command Response
AT+QNWPREFCFG="ue_capability_ba +QNWPREFCFG: "gw_band",<gw_band>
nd" +QNWPREFCFG: "lte_band",<LTE_band>
+QNWPREFCFG: "nsa_nr5g_band",<NSA_NR5G_ban
d>
+QNWPREFCFG: "nr5g_band",<NR5G_band>

OK
Maximum Response Time 300 ms

Characteristics /

Parameter

<gw_band> String type. Use the colon as a separator to list the WCDMA bands to be
configured. The parameter format is B1:B2:…:BN.
<LTE_band> String type. Use the colon as a separator to list the LTE bands to be configured.
The parameter format is B1:B2:…:BN.
<NSA_NR5G_band> String type. Use the colon as a separator to list the 5G NR NSA bands to be
configured. The parameter format is n1:n2:…:nx .
<NR5G_band> String type. Use the colon as a separator to list the 5G NR SA bands to be
configured. The parameter format is n1:n2:…:nx.

NOTE

1. RG50xQ and RM5xxQ series support the following WCDMA bands:

B1 WCDMA 2100 band
B2 WCDMA 1900 band
B3 WCDMA 1800 band
B4 WCDMA 1700 band
B5 WCDMA 850 band
B6 WCDMA 800 band
B8 WCDMA 900 band
B19 WCDMA Japan 850 band
2. RG50xQ and RM5xxQ series support the following LTE bands:

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 17 / 33
 5G Module Series

B1, B2, B3, B4, B5, B7, B8, B12, B13, B14, B17, B18, B19, B20, B25, B26, B28, B29, B30, B32, B34,
B38, B39, B40, B41, B42, B43, B48, B66 and B71.
3. RG50xQ and RM5xxQ series support the following 5G NR NSA bands:
n1, n2, n3, n5, n7, n8, n12, n20, n25, n28, n38, n40, n41, n48, n66, n71, n77, n78, n79, n257, n258,
n260 and n261.
4. RG50xQ and RM5xxQ series support the following 5G NR SA bands:
n1, n2, n3, n5, n7, n8, n12, n20, n25, n28, n38, n40, n41, n48, n66, n71, n77, n78 and n79.

Example
AT+QNWPREFCFG="ue_capability_band"
+QNWPREFCFG: "gw_band",1:8
+QNWPREFCFG: "lte_band",1:3:8
+QNWPREFCFG: "nsa_nr5g_band",78
+QNWPREFCFG: "nr5g_band",78

OK

3.1.7. AT+QNWPREFCFG="nr5g_disable_mode" Disable 5G NR Configuration

This command disables 5G NR.

AT+QNWPREFCFG="nr5g_disable_mode" Disable 5G NR Configuration

Write Command Response
AT+QNWPREFCFG="nr5g_disable_ If the optional parameter is omitted, query the current
mode"[,<disable_mode>] configuration:
+QNWPREFCFG: "nr5g_disable_mode",<disable_mode>

OK

If the optional parameter is specified, disable 5G NR

configuration:
OK
Or
ERROR
Maximum Response Time 300 ms
The command takes effect immediately.
Characteristics
The configuration will be saved automatically.

Parameter

<disable_mode> Integer type. Disable 5G NR SA/NSA.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 18 / 33
 5G Module Series

0 Neither is disabled
1 Disable SA
2 Disable NSA

Example
AT+QNWPREFCFG="nr5g_disable_mode" //Query the current configuration.
+QNWPREFCFG: "nr5g_disable_mode",0

OK
AT+QNWPREFCFG="nr5g_disable_mode",1 //Disable 5G NR SA.
OK

3.2. Get Network Status

3.2.1. AT+QNWCFG="nr5g_csi" Read 5G NR CSI information

This command reads 5G NR CSI information, including MCS, CQI, RI and PMI.

AT+QNWCFG="nr5g_csi" Read 5G NR CSI information

Write Command Response
AT+QNWCFG="nr5g_csi" +QNWCFG: "nr5g_csi",<mcs>,<ri>,<cqi>,<pmi>

OK
Or
ERROR

Maximum Response Time 300 ms

Characteristics /

Parameter

<mcs> Integer type. Modulation and coding scheme of PDSCH. Range: 0–31.
<ri> Integer type. Indicates the effective number of data layers of PDSCH.
<cqi> Integer type. Indicates the quality of the downlink channel.
<pmi> Integer type. Indicates the index of the codebook set.

Example
AT+QNWCFG="nr5g_csi" //Read 5G NR CSI information.
+QNWCFG: "nr5g_csi"0,1,15,0

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 19 / 33
 5G Module Series

OK

3.2.2. AT+QNWCFG="nr5g_cell_id" Get the Cell Identification under 5G NR SA

This command gets cell information under 5G NR SA, including NCGI, NCI, and gNodeB.

AT+QNWCFG="nr5g_cell_id" Get the Cell Identification under 5G SA

Write Command Response
AT+QNWCFG="nr5g_cell_id" +QNWCFG: "nr5g_cell_id",<NCGI>,<NCI>,<gNodeB_ID>

OK
Maximum Response Time 300 ms

Characteristics /

Parameter

<NCGI> Integer type. 5G NR Cell Global Identification (MCC + MNC + NCI)

<NCI> Integer type. 5G NR Cell Identification (gNodeB ID + cell ID).
<gNodeB_ID> Integer type. 5G NR base station ID.

Example
AT+QNWCFG="nr5g_cell_id" //Get NCGI, NCI, and gNodeB under 5G NR SA.
+QNWCFG: "nr5g_cell_id",64F000170C23000,170C23000,170C23

OK
AT+QNWCFG="nr5g_cell_id" //Execute this command under non-NR-5G-SA.
OK

3.2.3. AT+QENG Query Primary Serving Cell and Neighbour Cell Information

This command obtains the network information, such as primary serving cell and neighbour cells.

AT+QENG Query Primary Serving Cell and Neighbour Cell Information

Test Command Response
AT+QENG=? +QENG: (list of supported <cell_type>s)

OK
Write Command Response
Query the primary serving cell In SA mode:

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 20 / 33
 5G Module Series

information +QENG: "servingcell",<state>,"NR5G-SA",<duplex_mod

AT+QENG="servingcell" e>,<MCC>,<MNC>,<cellID>,<PCID>,<TAC>,<ARFCN>,<ba
nd>,<NR_DL_bandwidth>,<RSRP>,<RSRQ>,<SINR>,<sc
s>,<srxlev>

OK
In EN-DC mode:
+QENG: "servingcell",<state>
+QENG: "LTE",<is_tdd>,<MCC>,<MNC>,<cellID>,<PCI
D>,<earfcn>,<freq_band_ind>,<UL_bandwidth>,<DL_ban
dwidth>,<TAC>,<RSRP>,<RSRQ>,<RSSI>,<SINR>,<CQI>,
<tx_power>,<srxlev>
+QENG: "NR5G-NSA",<MCC>,<MNC>,<PCID>,<RSRP>,<
SINR>,<RSRQ>,<ARFCN>,<band>,<NR_DL_bandwidth>,
<scs>

OK
In LTE mode:
+QENG: "servingcell",<state>,"LTE",<is_tdd>,<MCC>,<
MNC>,<cellID>,<PCID>,<earfcn>,<freq_band_ind>,<UL_b
andwidth>,<DL_bandwidth>,<TAC>,<RSRP>,<RSRQ>,<R
SSI>,<SINR>,<CQI>,<tx_power>,<srxlev>

OK
In WCDMA mode:
+QENG: "servingcell",<state>,"WCDMA",<MCC>,<MN
C>,<LAC>,<cellID>,<uarfcn>,<PSC>,<RAC>,<RSCP>,<eci
o>,<phych>,<SF>,<slot>,<speech_code>,<comMod>

OK
Write Command Response
Query the information of neighbour cells In LTE mode:
AT+QENG="neighbourcell" [+QENG: "neighbourcell intra","LTE",<earfcn>,<PCID>,
<RSRQ>,<RSRP>,<RSSI>,<SINR>,<srxlev>,<cell_resel_p
riority>,<s_non_intra_search>,<thresh_serving_low>,<s
_intra_search>
…]
[+QENG: "neighbourcell inter","LTE",<earfcn>,<PCID>,
<RSRQ>,<RSRP>,<RSSI>,<SINR>,<srxlev>,<cell_resel_p
riority>,<threshX_low>,<threshX_high>
…]
[+QENG:"neighbourcell","WCDMA",<uarfcn>,<cell_resel
_priority>,<thresh_Xhigh>,<thresh_Xlow>,<PSC>,<RSC
P><ecno>,<srxlev>

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 21 / 33
 5G Module Series

…]

OK
In WCDMA mode:
[+QENG:"neighbourcell","WCDMA",<uarfcn>,<srxqual>,
<PSC>,<RSCP>,<ecno>,<set>,<rank>,<srxlev>
…]
[+QENG: "neighbourcell","LTE",<earfcn>,<PCID>,<RSR
P>,<RSRQ>,<s_rxlev>
…]

OK
Maximum Response Time 300 ms

Characteristics /

Parameter

<cell_type> String type. The information of different cells.

"servingcell" The information of 3G/4G/5G primary serving cells
"neighbourcell" The information of 3G/4G neighbor cells
<state> String type. UE state.
"SEARCH" UE is searching but could not (yet) find a suitable 3G/4G/5G
cell.
"LIMSRV" UE is camping on a cell but has not registered on the network.
"NOCONN" UE is camping on a cell and has registered on the network,
and it is in idle mode.
"CONNECT" UE is camping on a cell and has registered on the network,
and a call is in progress.
<duplex_mode> String type. The 5G NR SA network mode.
"TDD"
"FDD"
<is_tdd> String type. The LTE network mode.
"TDD"
"FDD"
<MCC> 16-bit unsigned integer. Mobile Country Code (first part of the PLMN code).
<MNC> 16-bit unsigned integer. Mobile Network Code (second part of the PLMN
code).
<ARFCN> Indicates the SA-ARFCN of the cell that was scanned.
<band> 32-bit unsigned integer. Frequency band of 5G NR SA network mode.
<NR_DL_bandwidth> Integer type. Downlink bandwidth. (The value is only valid in RRC
connected state.)
0 5 MHz
1 10 MHz

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 22 / 33
 5G Module Series

2 15 MHz
3 20 MHz
4 25 MHz
5 30 MHz
6 40 MHz
7 50 MHz
8 60 MHz
9 70 MHZ
10 80 MHz
11 90 MHz
12 100 MHz
13 200 MHz
14 400 MHz
<LAC> Integer type. Location Area Code. The parameter determines the two bytes
location area code in hexadecimal format (e.g. 00C1 equals 193 in decimal)
of the cell that was scanned. Range: 0–65535.
<cellID> Integer type. Cell ID. The parameter determines the 28-bit (UMTS and LTE)
or 36-bit (5G NR) cell ID. Range: 0–0xFFFFFFFFF.
<PCID> Number format. Physical cell ID.
<uarfcn> The parameter determines the UTRA-ARFCN of the cell that was scanned.
<earfcn> The parameter determines the E-UTRA-ARFCN of the cell that was
scanned.
<freq_band_ind> Integer type. E-UTRA frequency band (see 3GPP 36.101).
<UL_bandwidth> Integer type. Uplink bandwidth.
0 1.4 MHz
1 3 MHz
2 5 MHz
3 10 MHz
4 15 MHz
5 20 MHz
<DL_bandwidth> Integer type. Downlink bandwidth.
0 1.4 MHz
1 3 MHz
2 5 MHz
3 10 MHz
4 15 MHz
5 20 MHz
<TAC> Tracking Area Code (see 3GPP 23.003 Section 19.4.2.3).
<PSC> The parameter determines the primary scrambling code of the cell that was
scanned.
<RAC> Integer type. Routing Area Code. Range: 0–255.
<RSCP> The parameter determines the Received Signal Code Power level of the
cell that was scanned.
<ecio> Carrier to noise ratio in dB = measured Ec/Io value in dB.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 23 / 33
 5G Module Series

<RSRP> 16-bit signed integer.

In LTE mode:
It indicates the signal of LTE Reference Signal Received Power (see 3GPP
36.214). Range: -140 to -44. Unit: dBm. The closer to -44, the better the
signal is. The closer to -140, the worse the signal is.

In 5G NR mode:
It indicates the signal of 5G NR Reference Signal Received Power. Range:
-140 to -44. Unit: dBm. The closer to -44, the better the signal is. The closer
to -140, the worse the signal is.
<RSRQ> In LTE mode:
It indicates the signal of current LTE Reference Signal Received Quality
(see 3GPP 36.214). Range: -20 to -3. Unit: dB. The closer to -3, the better
the signal is. The closer to -20, the worse the signal is.

In 5G NR mode:
It indicates the signal of current 5G NR Reference Signal Received Quality.
Range: -20 to -3. Unit: dB. The closer to -3, the better the signal is. The
closer to -20, the worse the signal is.
<RSSI> LTE Received Signal Strength Indication.
<SINR> In LTE mode:
It indicates LTE Signal-to-Interface plus Noise Ratio. The conversion
formula for actual SINR is Y = (1/5) × X × 10 - 20 (X is the <SINR> value
queried by AT+QENG and Y is the actual value of LTE SINR after
calculating with the formula). Range: -20 to 30. Unit: dB.

In 5G NR mode:
It indicates the signal of 5G NR Signal-to-Interface plus Noise Ratio.
Range: -20 to 30. Unit: dB.
<CQI> Integer type. Channel Quality Indication. Range: 1–30.
<tx_power> The value of transmission power in 1/10 dBm. It is the maximum value of
transmission power of all Uplink channels. The <tx_power> value is only
meaningful when the device is in traffic.
<phych> Integer type. Physical channel.
0 DPCH
1 FDPCH
<SF> Integer type. Spreading factor.
0 SF_4
1 SF_8
2 SF_16
3 SF_32
4 SF_64
5 SF_128
6 SF_256

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 24 / 33
 5G Module Series

7 SF_512
8 UNKNOWN
<slot> Integer type.
0–16 Slot format for DPCH
0–9 Slot format for FDPCH
<speech_code> Destination number on which call is to be deflected.
<comMod> Integer type. Number format. Compress mode.
0 Compress mode is not supported
1 Compress mode is supported
<srxqual> Receiver automatic gain control on the camped frequency.
<ecno> Integer type. Carrier to noise ratio in dB = measured Ec/Io value in dB.
<set> Integer type. 3G neighbor cell set.
1 Active set
2 Synchronous neighbor set
3 Asynchronous neighbor set
<rank> Rank of this cell as neighbor for inter-RAT cell reselection.
<srxlev> Suitable reception level for inter frequency cell. Unit: dB.
<threshX_low> To be considered for re-selection. The suitable receive level value of an
evaluated lower priority cell must be greater than this value.
<threshX_high> To be considered for re-selection. The suitable receive level value of an
evaluated higher priority cell must be greater than this value.
<thresh_Xhigh> Reselection threshold for high priority layers.
<thresh_Xlow> Reselection threshold for low priority layers.
<s_rxlev> Select reception level value for base station (see 3GPP 25.304). Unit: dB.
<cell_resel_priority> Integer type. Cell reselection priority. Range: 0–7.
<s_non_intra_search> Threshold to control non-intra frequency searches.
<thresh_serving_low> Specifies the suitable reception level threshold used by the UE on the
serving cell when reselecting towards a lower priority RAT/frequency.
Unit: dB.
<s_intra_search> Cell selection parameter for the intra frequency cell.
<scs> Integer type. NR sub-carrier space.
0 15 kHz
1 30 kHz
2 60 kHz
3 120 kHz
4 240 kHz

NOTE

"-" or - indicates the parameter is invalid under current condition.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 25 / 33
 5G Module Series

Example
AT+QENG="servingcell"
+QENG: "servingcell","NOCONN","LTE","FDD",460,01,5F1EA15,12,1650,3,5,5,DE10,-100,-12,-68,1
1,0,-32768,27
AT+QENG="servingcell"
+QENG: "servingcell","NOCONN"
+QENG: "LTE","FDD",460,01,5F1EA15,12,1650,3,5,5,DE10,-99,-12,-67,11,9,230,-
+QENG:"NR5G-NSA",460,01,747,-71,13,-11,627264,78,12,1
AT+QENG="servingcell"
+QENG: "servingcell","NOCONN","NR5G-SA","TDD", 460,01,9013B004,299,690E0F,633984,78,12,
-107,-13,2,1,-

OK
AT+QENG="neighbourcell"
+QENG: "neighbourcell intra","LTE",38950,276,-3,-88,-65,0,37,7,16,6,44
+QENG: "neighbourcell inter","LTE",39148,-,-,-,-,-,37,0,30,7,-,-,-,-
+QENG: "neighbourcell inter","LTE",37900,-,-,-,-,-,0,0,30,6,-,-,-,-

OK

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 26 / 33
 5G Module Series

4 Typical Cases Analysis

4.1. Network Searching Failure in NSA

1. Problem Description

During the process of registering the RG500Q-EA module to China Unicom’s NSA network, SA cell may
not be added successfully, for example, repeated addition of cells resulting in RACH failure, as shown in
the log below:

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 27 / 33
 5G Module Series

2. Problem Analysis

1) After LTE registration, RRC reassigns messages to add SA cell measurement, as shown below.

2) After the module completes the cell measurement, it reports the cell with strongest signal 278, as
shown in the figure below.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 28 / 33
 5G Module Series

3) However, the network configures the cell with signal 277 for the module accessing to, as shown in
the figure below.

In MR, the module reports all cells that reach the threshold to the network, including the cell with strongest
signal 278. The cell with signal 277 reassigned by RRC is issued by the network. NR cell which is added
to is determined by the configuration and algorithm on the network. For example, if LTE does not
configure a cell with a stronger signal as an SN neighbor cell, it is necessary to contact the operator to
optimize the network.

4.2. Network Searching Failure in SA

1. Problem Description

RG500Q-EA module fails to register to China Unicom’s SA network, for example, after RRCSetup
Complete, the network performs RRC release immediately, resulting in unable to access to the network.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 29 / 33
 5G Module Series

As shown in the log below:

2. Problem Analysis

In network searching, HPLMN is 460-31. But, PLMN residing in the CM management unit of the NAS
layer is 460-11, as shown in the log below:

SIM card PLMN

Actual camped PLMN

This station is shared by China Unicom and China Telecom, China Telecom as primary PLMN, China
Unicom as secondary PLMN. In the OTA log below, PLMN on the NAS layer is 460-31, rrcSetupComplete
reports selectedPLMN-Identity 1 which represents primary PLMN. And selectedPLMN-Identity 2
represents secondary PLMN.

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 30 / 33
 5G Module Series

Figure 3: Log of Registration Request

Figure 4: Log of RRC Establishment Completed

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 31 / 33
 5G Module Series

5 Appendix References

Table 3: Related Documents

Document Name

[1] Quectel_RG50xQ&RM5xxQ_Series_AT_Commands_Manual

Table 4: Terms and Abbreviations

Abbreviation Description

5GCN 5G Core Network

5GS 5G System

CM Call Manager

CQI Channel Quality Indicator

CSI Channel State Information

EN-DC E-UTRA New Radio Dual Connectivity

EUTRAN Evolved Universal Terrestrial Radio Access Network

HPLMN Home Public Land Mobile Network

LTE Long-Term Evolution

MCC Mobile Country Code

MCS Modulation and Coding Scheme

MNC Mobile Network Code

MR Measure Report

MT Mobile Termination

NAS Non-Access Stratum

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 32 / 33
 5G Module Series

NCI NR Cell Identification

NCGI NR Cell Global Identification

NR New Radio

NSA Non-Standalone

OTA Over-The-Air Technology

PMI Precoding Matrix Indicator

PDSCH Physical Downlink Shared CHannel

PLMN Public Land Mobile Network

RACH Random Access Channel

RAT Radio Access Technology

RI Rank Indication

RRC Radio Resource Control

SA Standalone

SN Service Network

UE User Equipment

URC Unsolicited Result Code

WCDMA Wideband Code Division Multiple Access

RG50xQ&RM5xxQ_Series_5G_Network_Searching_Scheme_Introduction 33 / 33