Wi-Fi & 802.11 · Study deck

Practice: Cellular Modem Bring-Up

Picture a field device that must send a small status report where no local network is available.

Radio Remi is your guide for this deck.

cellular-modemat-commandsmodem-bring-up
iotclass.org

After studying this chapter

Learning objectives

You will be able to:

  • run a cellular modem bring-up sequence without skipping dependency checks
  • read AT-command responses as evidence for serial, SIM, signal, registration, and data readiness
  • separate UART, SIM, antenna, coverage, power, registration, and data-session failures
  • capture a compact lab record that another reviewer can repeat
iotclass.org

Major section

Required Equipment And Service — Gather This First · Start With the Wireless Story

A cellular modem gives the device a path through a mobile network.

  • The lab is successful only when you can prove the whole path, not when one light turns green.
  • The simple test does not prove that every site or network will behave the same way.
  • Recheck after each change.
Cellular modem lab troubleshooting map.
Cellular modem lab troubleshooting map.
iotclass.org

Major section

In 60 Seconds · Phoebe's Field Notes: What "Correctly Matched" Costs in Decibels

A cellular modem lab should prove one layer at a time.

  • The lab is successful when it explains what was proven, what was not proven, and what evidence is needed before production use.
iotclass.org

Major section

Lab Scope · Bring-Up Evidence Flow

This lab is about bring-up evidence.

  • Most cellular modules support basic AT-style commands, but data-session, socket, power-saving, and diagnostic commands vary by module, firmware, network, and service type.
  • Each step should either produce evidence or stop with a clear failure note.

Key terms

If these checks
If these checks are not clean, higher-level MQTT, HTTP, TLS, or cloud debugging will waste time.
Cellular modem bring-up evidence flow.
Cellular modem bring-up evidence flow.

Try it: Lab Scope · Bring-Up Evidence Flow in the chapter

iotclass.org

Major section

Record The Equipment And Setup

The board alone does not prove a usable radio path: it must be paired with a band-matched antenna, an active service profile, and a supply that survives transmit bursts.

  • That ordered inspection leads directly to the setup record below, where each dependency is named without exposing credentials.

Why it matters

The photo is useful because antenna, supply, and host connections are separate evidence boundaries even when they share one small board.

A cellular modem module is the physical endpoint for the lab's AT-command bring-up. Pair it with a band-matched antenna and a supply sized for transmit current, not only MCU idle draw.
A cellular modem module is the physical endpoint for the lab's AT-command bring-up. Pair it with a band-matched antenna and a supply sized for transmit current, not only MCU idle draw.
iotclass.org

Major section

AT Command Evidence

The chapter's illustrative transcript below shows TX AT followed by RX OK; it was not run here.

  • If the modem does not answer, check power, UART level, port, rate, and cable before any radio diagnosis.
  • The chapter's example uses AT+CPIN? And shows +CPIN: READY; this is expected example text, not a captured response here.
  • The example below uses AT+CSQ and a placeholder +CSQ: <rssi>,<ber>; no signal value was measured here.
iotclass.org

Major section

AT Command Evidence (continued)

A searching modem remains provisional even if the serial and signal checks succeeded.

  • On your own hardware, use the module manual's packet-service or context query after registration is clean.
  • If attach fails, save the exact response and diagnose service, band, coverage, and profile before proceeding.
  • The expected result is an active context, but this chapter contains no captured attach response to quote.
  • Re-query context state after configuration rather than assuming the command was applied.
iotclass.org

Major section

AT Command Evidence (continued)

This step was not run here; the expected observation is a profile accepted by the module and service.

  • On your own hardware, send one small request to an approved endpoint only after context readiness is proven.
  • The expected observation is a completed transfer without reset; no live transfer was run here.
  • The lab record should explain what the response means for this module and network, not just paste the transcript.
iotclass.org

Major section

Registration State Review · Power And Antenna Evidence

Registration is a state, not a single instant.

  • A modem may respond to commands, have a valid SIM, and still be searching for a network.
  • Cellular modems can fail during active network work even when the serial interface appears healthy.
  • The lab does not need a large power-design calculation.
This LTE MIMO panel exposes two antenna connections; placement, cable loss, and nearby obstructions all affect the registration evidence.
This LTE MIMO panel exposes two antenna connections; placement, cable loss, and nearby obstructions all affect the registration evidence.
iotclass.org

Major section

Worked Review: Data Attempt Resets The Modem · Common Mistakes

Accepted answer: "A reset during active modem work is often a power, antenna, or coverage evidence problem before it is an application-code problem.".

  • starting with MQTT, HTTP, or cloud tests before proving registration.
  • treating one OK response as proof that the modem is ready for data.
  • assuming all vendors use the same data-session AT commands.
  • hiding command transcripts behind screenshots that cannot be searched.

Why it matters

Prompt: "The application code is broken because the modem resets when it sends data.".

iotclass.org

Major section

Review Checklist · A Cellular Modem Is an AT-Command Peripheral

This layered sequence connects AT-command success to actual application reachability.

  • Once registered, the module can open a data context and transmit; before that, application traffic simply fails.
  • Worked bring-up check: A reviewer should be able to read the transcript and identify the exact layer that passed.

Why it matters

A lab that preserves that boundary is useful because another engineer can repeat the same layer check without inheriting a vague "cloud publish failed" report.

Bring-up evidence advances one layer at a time. Verify the physical modem boundary, serial parser, SIM or profile, RF context, registration, data context and application reachability without skipping a failed stage.
Bring-up evidence advances one layer at a time. Verify the physical modem boundary, serial parser, SIM or profile, RF context, registration, data context and application reachability without skipping a failed stage.
iotclass.org

Major section

The Bring-Up Sequence and Reading Signal

Worked example: A device reports +CEREG: 0,2 — status 2 means “searching, not yet registered,” so a cellular data socket cannot be used yet.

  • A modem that answers AT on bench power but disappears from serial during registration may be exposing a power rail, cable, or antenna problem.
  • If the reset disappears outdoors or with a known-good antenna, the lab has found a propagation or antenna path; if it disappears with a stronger supply, the lab has found a power-design path.
  • A compact lab table can prevent false conclusions.
iotclass.org

Major section

PSM and eDRX Power-Saving Timers · Summary

The choice is a reachability-versus-battery decision, set by these timers.

  • PSM (Power Saving Mode) lets the modem power down almost completely while staying registered.
  • During PSM the device is unreachable for downlink until it wakes to send or to run its periodic TAU.
  • The important artifact is not a large code sample.

Why it matters

The lab should not claim battery behavior just because a command was accepted.

iotclass.org

Major section

Key Takeaway · Concept Relationships

Lab: Cellular Modem Bring-Up should produce deployment evidence for spectrum assumptions, coverage, antenna placement, link budget, modem behavior, fallback paths, and validation limits.

  • Cellular spectrum explains why supported bands, operator service, and region matter before the lab starts.
  • Propagation design explains why antenna placement, enclosure, location, and coverage affect modem results.
  • Coverage planning labs extend modem observations into deployment mapping and acceptance records.
  • Wi-Fi spectrum labs use similar evidence discipline for a different radio environment.
iotclass.org

Deck summary

Key takeaways

A cellular modem gives the device a path through a mobile network.

  • A cellular modem lab should prove one layer at a time.
  • This lab is about bring-up evidence.
  • The board alone does not prove a usable radio path: it must be paired with a band-matched antenna, an active service profile, and a supply that survives transmit bursts.
  • The chapter's illustrative transcript below shows TX AT followed by RX OK; it was not run here.
iotclass.org

Retrieval practice

Recall check 1 of 5

Radio Remi says: answer from memory, then check your reasoning.

Q1In a cellular modem bring-up lab, where should you start?

AProve modem layers before cloud publishing
BStart with cloud publishing and full application code
CStart by opening a TCP socket to the message broker
DStart by measuring long-term battery life over days
Show answer

Answer: A Cellular modem bring-up proves power, serial, SIM, signal, and registration before attempting data or cloud publishing.

iotclass.org

Retrieval practice

Recall check 2 of 5

Radio Remi says: answer from memory, then check your reasoning.

Q2A modem responds to AT and reports the SIM as ready, but the registration query still reports a searching state. What is the best lab decision?

APass the lab on its successful serial and SIM checks.
BKeep diagnosing registration before data tests.
CSkip directly to cloud publishing to test the application stack.
DReplace the microcontroller to resolve the registration search state.
Show answer

Answer: B A searching registration state means the modem is not yet ready for data; continue checking coverage, antenna, operator, supported band, and service configuration.

iotclass.org

Retrieval practice

Recall check 3 of 5

Radio Remi says: answer from memory, then check your reasoning.

Q3How is a typical cellular IoT module controlled by a host microcontroller?

ABy flashing new radio firmware for every message.
BBy connecting it as a USB display device.
CBy Wi-Fi alone, without any wired control link.
DBy AT commands over a wired UART interface.
Show answer

Answer: D The module is an AT-driven serial peripheral; the host powers the radio, checks SIM/profile state, registers, configures data, and then sends traffic.

iotclass.org

Retrieval practice

Recall check 4 of 5

Radio Remi says: answer from memory, then check your reasoning.

Q4Which AT command gives the most useful signal reading for an LTE/NB-IoT link, and what does it report?

AAT+CESQ; it reports RSRQ and RSRP.
BAT+CGMR, which returns the firmware version.
CAT+CPIN?, which returns signal quality.
DAT+COPS=0, which measures RSRP.
Show answer

Answer: A +CESQ exposes LTE reference-signal quality and power indices; +CSQ only gives a coarse legacy RSSI value.

iotclass.org

Retrieval practice

Recall check 5 of 5

Radio Remi says: answer from memory, then check your reasoning.

Q5A cellular sensor only sends data and never needs to receive commands promptly. Which power feature fits, and what is the catch?

APSM, with delayed downlink reachability.
BeDRX with the shortest possible cycle, to save the most power.
CKeeping RRC connected at all times to be safe.
DDisabling registration entirely between messages.
Show answer

Answer: A PSM uses T3324/T3412-style timers to keep an uplink-only device registered while sleeping deeply; the trade is downlink latency until it wakes.

iotclass.org

Print reference

Answers 1 of 2

Answer key.

  1. A · Cellular modem bring-up proves power, serial, SIM, signal, and registration before attempting data or cloud publishing.
  2. B · A searching registration state means the modem is not yet ready for data; continue checking coverage, antenna, operator, supported band, and service configuration.
  3. D · The module is an AT-driven serial peripheral; the host powers the radio, checks SIM/profile state, registers, configures data, and then sends traffic.
iotclass.org

Print reference

Answers 2 of 2

Answer key.

  1. A · +CESQ exposes LTE reference-signal quality and power indices; +CSQ only gives a coarse legacy RSSI value.
  2. A · PSM uses T3324/T3412-style timers to keep an uplink-only device registered while sleeping deeply; the trade is downlink latency until it wakes.
iotclass.org