Wiki

Clone wiki

ModemManager / FranklinU770

Posted by: Nate Pleasant nate.pleasant@accelerated.com 2013-03-20

FRANKLIN U770

  • Referred to in the Sprint store as the "Sprint Plug-in-Connect Tri-Mode USB"

  • Vid/Pid - 1fac:0232

The Franklin U770 uses the RNDIS kernel driver to bring up a usbx port. This is the interface you use to connect to the device's web GUI. You need to establish a DHCP network connection to the usbx interface in order to interact with the modem's HTTP interface.

note: the device's network interface appears, disappears, then reappears.

Once a local connection to the modem is established, we can start sending HTTP posts to it. Below are details on how to send a post and what information is contained in each post.

I obtained these post messages by interacting with the HTTP GUI of the modem with a Wireshark trace running in the background.

Send a post message to the modem to interact with it:

  wget -T 30 -q --post-data="$post_message" $gateway_ip/rpc.asp -O /tmp/post_response.txt

$post_message will vary depending on what you are trying to do or get from the modem.

$gateway_ip is the gateway IP address assigned by the DHCP routers option from the modem.

The resulting /tmp/post_response.txt file will contain the response message (if any).

Modeswitching

The following message will switch the modem to only connect on a 3G network

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_conn_mode_update&VALUE_1=1'

To specify a different network, change the VALUE_1 option. Valid values are:

  • 1 - 3G only
  • 2 - WiMAX only
  • 3 - LTE only
  • 12 - WiMAX and CDMA only
  • 8 - LTE and CDMA only
  • 4 - LTE, WiMAX and CDMA mode (i.e. all networks)

Auto-connect

The following message will enable auto-connection. When auto-connect is enabled, the U770 will connect to the highest available network. For example, if the U770 sees that the 4G LTE, WiMAX, and 3G networks are all available, then it will try connecting to the 4G LTE network.

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_autoconn_update&VALUE_1=1%7C1'

Disable auto-connection

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_autoconn_update&VALUE_1=0%7C1'

Airplane Mode

Enable airplane mode

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_enable_ap_update&VALUE_1=1'

Disable airplane mode

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_enable_ap_update&VALUE_1=0'

Current network statuses

The following message will return information on the current status of all three networks (3G, WiMAX, and LTE)

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_connobj_update&VALUE_1='

Sample response indicating available WiMAX network:

<root><result>3gmodem   o   x   0   0   down    0
wimax   o   x   1   3   down    0
lte o   x   0   0   down    0
</result><result>2, 0, 5</result><result>1</result><result></result><result>2</result><result>0,0,Roaming Indicator Off,3</result><result>0</result><result>0</result><result>1</result><result>2</result><result>4</result><result>1</result><result>0</result><result>0</result><result>1</result><result>0</result><result>0</result><result>0</result><result>0</result><result>0</result><result>0,0</result><result>1</result><result>1</result><result>1</result><result>1</result><result>0</result><result>0</result></root>

Establish a network connection

The following message will establish a connection on the 3G network

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_main_net_connect&VALUE_1=0'

To specify a different network, change the VALUE_1 option. Valid values are:

  • 0 - 3G
  • 1 - WiMAX
  • 2 - LTE

Disconnect from any network

Disconnect Message

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_main_net_disconnect&VALUE_1='

Modem Details

The following message will return information specific to the modem, such as phone number, IMEI, provider, firmware revision, etc.

  post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_3g_init_info&VALUE_1='

Sample response:

<root><result>U770S35.01.M799 </result><result>99000091234567</result><result>813952xxxx</result><result>Sprint</result><result>--</result><result>16012</result><result>813216xxxx</result><result>@sprintpcs.com</result><result>990000912345678</result></root>

The above response can be parsed to show the following values:
  Firmware revision: U770S35.01.M799
  IMEI:  990000912345678
  MEID:  99000091234567
  Phone number:  813952xxx
  Carrier:  Sprint
  PRL Version: 16012
  MSID:  813216xxxx

Signal Strength

The following messages will return information on the current signal strength, including dBm and Ec/Io

  • LTE - post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_ServLTEObj_update&VALUE_1='

  • WiMAX - post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_Serv4GObj_update&VALUE_1='

  • 3G - post_message='COUNT=1&WWW_SID=&ACTION_1=function&NAME_1=fti_3g_update_info&VALUE_1='

Sample response showing WiMAX signal strength of -85dBm, -9 Ec/Io, unknown (0) Tx, and Base Station ID 00:00:02:1B:27:4A

<root><result>-85, 9, 0</result><result>3</result><result>00:00:02:1B:27:4A</result></root>

A 3G signal strength query returns

<root><result>-89 dBm</result><result>-5.0 dB</result><result>Disconnected</result><result>eHRPD</result><result>accelecon44@sprintpcs.com</result></root>

Updated