|
|
|
|
٭٭٭خانزورلڈ ميں خوش آمديد٭٭٭آپ کےلئے اردو اور انگلش کى منفرد ويب سائيٹ٭٭٭جس ميں مختلف قسم کى معلومات فراھم کى گئ ھيں٭٭٭ جس ميں شامل ھيں اسلام, سکول, کمپيوٹر, آڈيو ويڈيو, تصاوير, گيمز, طنزومزاح اور اس کے علاوه بهت کچه .........!٭٭٭
MOBILE SECRET CODES HOME
|
MOTOROLA SECRET CODES |
|
| MICRO-TAC "FLIP" SERIES This phone follows similar methods as outlined for the 8000 series above. Remove the battery and locate the three contacts at the bottom of the phone, the two outer contacts are raised and connect with the battery. The center contact is recessed, this is the Manual Test Mode connector. Now look at the battery contacts, the two outer ones supply power to the phone, the center contact is an "extra" ground. This ground needs to be shorted to the test mode connector on the phone. The easiest way to do this is to put a small piece of solder wick, wire, aluminum foil or any other conductive material into the recess on the phone. Having done this carefully replace the battery and turn on the power, if you have been successful the phone will wake up in test mode. TEST MODE PROGRAMING: Assuming you have completed one of the above steps correctly the phone will wake up in test mode when you turn the power on. When you first access test mode the phone's display will alternate between various status information that includes the received signal strength and channel number. The phone will operate normally in this mode. You can now access Service Mode by pressing the # key, the display will clear and a ' will appear. Use the following procedure to program the phone: 1. Enter 55# to access programing mode. 2. The * key advances to the next step. (NOTE that test mode programing does NOT have step numbers, each time you press the * key the phone will display the next data entry). 3. The CLR key will revert the display to the previously stored data. 4. The # key aborts programing at any time. 5. To complete programing you must scroll through ALL entries until a ' appears in the display. 6. Note that some entries contain more digits than can be displayed by the phone, in this case only the last part of the data can be seen. TEST MODE PROGRAMING DATA: STEP# #OF DIGITS/RANGE DESCRIPTION 01 00000 - 32767 SYSTEM ID 02 8 DIGIT BINARY OPTION PROGRAMING, SEE NOTE 1 BELOW 03 10 DIGITS MIN (AREA CODE & TEL#) 04 2 DIGITS STATION CLASS MARK 05 2 DIGITS ACCESS OVERLOAD CLASS 06 2 DIGITS GROUP ID (10 IN USA) 07 6 DIGITS SECURITY CODE 08 3 DIGITS LOCK CODE 09 3 DIGITS SERVICE LEVEL (LEAVE AT 004) 10 8 DIGIT BINARY OPTION PROGRAMING, SEE NOTE 2 BELOW 11 8 DIGIT BINARY OPTION PROGRAMING, SEE NOTE 3 BELOW 12 0333 OR 0334 INITIAL PAGING CHANNEL 13 0333 "A" SYSTEM IPCH 14 0334 "B" SYSTEM IPCH 15 3 DIGIT NUMBER PAGING CHANNEL (021 IN USA) 16 8 DIGIT BINARY OPTION PROGRAMING, SEE NOTE 4 BELOW Steps 01 through 06 and 12 will repeat for NAM 2 if the second phone number bit has been enabled in step 11. NOTES: Take care with Motorola's use of "0" and "1". Some options use "0" to enable, some use "1". These are eight digit binary fields used to select the following options: 1. (step 02 above, suggested entry is: 11101001 for "A" system, 10101001 for "B" sys) Digit 1: Local use mark, 0 or 1. Digit 2: Preferred system, 0 or 1. Digit 3: End to end (DTMF) dialing, 1 to enable. Digit 4: Not used, enter 0. Digit 5: Repertory (speed) dialing, 1 to enable. Digit 6: Auxiliary (horn) alert, 1 to enable. Digit 7: Hands free (VSP) auto mute, 1 to enable (mutes outgoing hands free audio until the MUTE key is pressed). Digit 8: Min mark, 0 or 1. 2. (step 10 above, suggested entry is: 00000100) Digits 1 - 4: Not used in USA, enter 0. Digit 5: Single system scan, 1 to enable (scan A or B system only, determined by bit 2 of step 02. Set to "0" to allow user the option). Digit 6: Super speed dial, 1 to enable (pressing N, or NN SND will dial the number stored in memory location NN). Digit 7: User selectable service level, 0 to enable (allows user to set long distance/memory access dialing restrictions). Digit 8: Lock function, 0 to enable (allows user to lock/un-lock the phone, if this is set to 1 the phone can not be locked). 3. (step 11 above, suggested entry is: 00000000) Digit 1: Handset programing, 0 to enable (allows access to programing mode without having to enter test mode). Digit 2: Second phone number (not all phones), 1 to enable. Digit 3: Call timer access, 0 to enable. Digit 4: Auto system busy redial, 0 to enable. Digit 5: Speaker disable, 1 to enable (use with select VSP units only, do not use with 2000 series mobiles). Digit 6: IMTS/Cellular, 1 to enable (rarely used). Digit 7: User selectable system registration, 0 to enable. Digit 8: Dual antennae (diversity), 1 to enable. 4. (step 16 above, suggested entry is: 0011010 for portable and 0011011for mobile units) Digit 1: Not used, 0 only. Digit 2: Not used, 0 only Digit 3: Continuous DTMF, 1 to enable (software version 8735 and later) Digit 4: 8 hour time-out, 0 to enable (software version 8735 and later) Digit 5: Not used, 0 only. Digit 6: Failed page indicator, 0 to enable (phone beeps when an incoming call is detected but signal conditions prevent completion of the call). Digit 7: Portable scan, 0 for portable, 1 for mobile units. C-SCAN OPTION: Newer Motorola phones are equipped with a feature called C-Scan, this is an option along with the standard A/B system selections. C-Scan allows the phone to be programed with up to five inhibited system ID's per NAM. This is designed to prevent the phone from roaming onto specified non-home systems and therefore reduce "accidental" roaming fees. 1. C-Scan can only be programed from test mode, power phone up with the relevant test mode contact grounded (see above). 2. Press # to access test mode. 3. Press 18#, the phone will display "0 40000". 4. Enter the first inhibited system ID and press *. Continue to enter additional system ID's if required. After the 5th entry the phone will display "N2". Press * to continue and add system ID's for NAM 2 as required. 5. If an incorrect entry is made (outside the range of 00000-32767) the display will not advance, press CLR and re-enter. Use a setting of 40000 for any un-needed locations. 6. When the last entry has been made press * to store and press # to exit, turn off power. LOCK/UNLOCK PROCEDURES: Phones with "LOCK" buttons: Press lock for at least 1/2 a second. Phones with a "FCN" button: Press FCN 5, note that 5 has the letter's "J,K, and L" for lock. Phones with no FCN or LOCK button: Press Control 5, control is the black volume button on the side of the handset. SYSTEM SELECT PROCEDURES: Phones with a RCL button: Press RCL *, then * to select, STO to store. Phones with no RCL button: Press Control * then * to select, # to store. Options are: CSCAn: Preferred/Non preferred with system lockout. Std A/b, or Std b/A: Preferred/Non preferred. SCAn Ab, or SCAn bA: Non preferred/Preferred SCAn A: "A" ONLY SCAn b: "B" ONLY HOME: Home only (these are typical options, some phone's vary. C-Scan only available on newer models and does not appear unless programed, see above GENERAL NOTES: HANDSETS: Most Motorola handsets are interchangeable, when a handset is used with a transceiver other than the one it was designed for the display will show "LOANER". Some features and buttons may not work, for instance if the original handset did not have a RCL or STO button, and the replacement does, you will have to use the control * or control # sequence to access memory and A/B system select procedures. MOTOROLA TEST MODE COMMANDS: 01# RESTART (POWER OFF THEN ON) 02# STATUS DISPLAY, ALTERNATES BETWEEN: ABC DEF where: ABC = Channel number DEF = Received sensitivity for that channel and: A B C D E F G where: A = SAT frequency (0=5970, 1=6000, 2=6030, 3=no channel lock) B = Carrier (0=off, 1=on) C = Signalling tone (0=off, 1=on) D = Power level (0 through 7) E = Channel mode (0=voice channel, 1=control channel) F = Receive audio mute (0=unmuted, 1=muted) G = Transmit audio mute (0=unmuted, 1=muted) Press * to hold display and # to end. 03# Reset call timers 04# Initialize Tranceiver to following settings: Carrier = OFF Receive Audio = MUTED Transmit Audio = MUTED Signaling Tone = OFF Call Timer RESET and peroiodic resetting ENABLED SAT = OFF DTMF & Audio Tones = OFF Audio Path = To SPEAKER 05# Turn Carrier ON 06# Turn Carrier OFF 07# Mute RECEIVE audio 08# Unmute RECEIVE audio 09# Mute TRANSMIT audio 10# Unmute TRANSMIT audio 11ABC# Load Synthesizer with ABC, where ABC=the channel number in decimal 12A# Set RF power level to A, where A=1 to 7 13# Power down phone 14# Transmit signaling tone 15# Stop transmit of signaling tone 16# Transmit a five word reverse voice channel message, all words will be: "FF00AA55CC33" 17# Transmit a two word reverse voice channel message, both words will be: "FF00AA55CC33" 18# Display contents of NAM one address at a time, press * to advance, press # to exit. (Two digit number to the left is the ADDRESS, to the right is the DATA) 19# Display software version 20# Receive control channel messages counting correctable and uncorrectable errors. When the command starts the number of the command will be displayed in the upper right hand corner of the display. Entering a # will terminate the test and display two three digit numbers. The first number is the number of correctable errors and the second is uncorredtable errors. 21# Receive voice channel messages counting correctable and uncorrectable errors. When the command starts the number of the command will be displayed in the upper right hand corner of the display. Entering a # will terminate the test and display two three digit numbers. The first number is the number of correctable errors and the second is uncorredtable errors. 22# Receive control channel messages counting word sync sequences. When the command starts the number of the command will be displayed in the upper right hand corner of the display. Entering a # will terminate the test and display the number of word sync sequences in the display. 23# Receive voice channel messages counting word sync sequences. When the command starts the number of the command will be displayed in the upper right hand corner of the display. Entering a # will terminate the test and display the number of word sync sequences in the display. 24# Turn SAT transmission ON 25# SAT OFF 27# Transmit continuous control channel data, all words are: "FF00AA55CC33". When the command starts the number of the command will be displayed in the upper right hand corner of the display. Press # to terminate the test. 28# Activate high tone (1150 Hz +/- 55 Hz) 29# Deactivate high tone 30# Activate low tone (770 Hz +/- 40 Hz) 31# Deactivate low tone 32# Initialize all non-volatile memory to zeros. Resets unit and makes it look "new". 33A# Activate DTMF tone where A = DTMF digit 0 thru 9 34# Deactivate DTMF 35A# Send audio path to A where A = 0 for handsfree, 1 for speaker, 2 for alert, 3 for Handset 36ABC# Activate channel scan, ABC is scan speed in milliseconds. Tunes from channel 1 to 666. Press * to pause scan and display RSSI, if scan speed is 300 milliseconds or greater the RSSI is displayed with each channel, if scan is less than 300 milliseconds the RSSI is only displayed when you press * 37# not used 38# Display serial number in hex (ESN). Displayes the byte number in the upper right side of the display and the data to the left, press * to step through the bytes, press # to exit. 39# Receive one control channel word, when the word is received it will be displayed in hex. Command terminates when the word has been received or when # is pressed. 40# Receive one voice channel word, when the word is received it will be displayed in hex. Command terminates when the word has been received or when # is pressed. 41# (F19CTA models only) Enables the diversity antenna option on mobiles so equipped. 42# Disable diversity. 43# Disable diversity and force the mobile to use the TRANSMIT antenna. 44# Disable diversity and force the mobile to use the RECEIVE antenna. 45# Display the RSSI reading taken on the current channel. 46# Display the cumulative call timer. 47A# Set audio level to A where A = 0 lowest, A = 6 highest, or A = 7 muted. 48# Turn sidetone on 49# Sidetone off 50# Maintenance data is transmitted and test results displayed: PASS =Received data is correct, FAIL1 = No data received within 2 seconds, FAIL2 = Received data is incorrect. 51# Maintenance data is transmitted and looped back and test results displayed: PASS = Looped back data is correct, FAIL1 = No data looped back within 2 seconds, FAIL2 = Looped back data is incorrect. 52A# Set phase adjustment. A decimal number thet corresponds to phase shift compensation in 4.5 degree increments. Compensation added to the inherant phase shift of the tranceiver to acheive a total phase shift of 0 (zero) degrees. Do not enter any value other than from the following list: # entered, Degree of shift 0 0 59 121.5 86 243.0 1 4.5 60 126.0 87 247.5 2 9.0 61 130.5 112 252.0 3 13.5 62 135.0 113 256.5 4 18.0 63 139.5 114 261.0 5 22.5 40 144.0 115 265.5 6 27.0 41 148.5 116 270.0 7 31.5 42 153.0 117 274.5 16 36.0 43 157.5 118 279.0 17 40.5 44 162.0 119 283.5 18 45.0 45 166.5 120 288.0 19 49.5 46 171.0 121 292.5 20 54.0 47 175.5 122 297.0 21 58.5 64 180.0 123 301.5 22 63.0 65 184.5 124 306.0 23 67.5 66 189.0 125 310.5 48 72.0 67 193.5 126 315.0 49 76.5 68 198.0 127 319.5 50 81.0 69 202.5 104 324.0 51 85.5 70 207.0 105 328.5 52 90.0 71 211.5 106 333.0 53 94.5 80 216.0 107 337.5 54 99.0 81 220.5 108 342.0 55 103.5 82 225.0 109 346.5 56 108.0 83 229.5 110 351.0 57 112.5 84 234.0 111 355.5 58 117.0 85 238.5 53# Enable scrambler option, if equipped. 54# Disable scrambler option, if equipped. 55# Test Mode programming. 58# Compandor on. Audio compressor and expandor on. 59# Compandor off. Audio compressor and expandor off. 61# Serial number transfer, not all models. 62# Turn on audio ringer path. 63# Turn off audio ringer path. 70# Abbreviated field transmitter audio deviation command for tranceivers with FCC ID: ABZ89FT5668. 71# Abbreviated field power adjustment command for tranceivers with FCC ID: ABZ89FT5668. 72# Field audio phasing command. 73# Field power adjustment command. GO TO TOP |
|
| Motorola 6200 Activate RBS (Note: pause means the * key held in until box appears) To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it. De-activate RBS To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] This only works with some versions of software. These countries has been reported working: UK (Orange) AU What's the use of RBS: Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters. Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected. Pin Outs Numbered left to right, keypad up, battery down 1. Audio Ground 2. V+ 3. True data (TD) (input) 4. Downlink - Complimentary data (CD) (input) 5. Uplink - Return data (RD) (output) 6. GND 7. Audio Out - on/off 8. Audio In 9. Manual Test - ??? 10. Battery Feedback 11. Antenna connector GO TO TOP |
|
| MOTOROLA 6200 / 7500 / 8200 / 8400 / 8700 To activate RBS (Engineering Menus): [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] (pause means the * key held in until box appears) You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the < or > keys, and enable it. To de-activate RBS (Engineering Menus): [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] (pause means the * key held in until box appears) Works on 6200's,8200's,1-888's,7500's,8400's and GSM StarTacs with later than version .27 software. Options under Eng Field Options Eng Field Options Active Cell RxLev -55Received powerlevel in dBm NCC 0National Colour Code, used for identifying channel BCC 7Broadcast Colour Code, also for identifying purposes MSTxPwr 35Max allowed transmit power 35dBm about 3.2W Time Adv xxxxxx is a number. Multiply this number by 550,and the result is the distance from the RBS (Radio Base Station), in meters. Adjacent Cells Adj Cell 1 Channel 0033Channel Number RxLev -65Received powerlevel in dBm BCCH DecodeI think it means it is able to decode thechannel information contained in the BCCH RxLevAM -104Min allowed reception, compare with RxLev -65 and you get the C1 value which is 39 and reported back to base asmeasure of field strength. MTxPwr 35 Aain max allowed powerlevel C1 003 ?? NCC 0 National Colour Code BCC 6 Broadcast Colour Code System Parameters Combined Off ?? AcsClas 0000 Allows different priorities - this network doesn't support it. MCC 505 Mobile Country Code, 505 for Australia, 240 for Swedes etc MNC 01Mobile Network Code, 01 for Mobilenet, 02 for Optus, 03 for Vodafone using MCC 505. MCC+MNC is often called Network Code LAC 08720Location Area Code, shows which exchange your're in CellID 00473Base Station Identity T3212 005Time between periodic network updates (either hours between or time remaing until update, not sure) BS-PA-MFRM 4 ?? XZQTY 14.3 ?? Motorola Flip Pinout: ANT- (O) | | | | | | | | | | 10 9 8 7 6 5 4 3 2 1 Top of phone (screen) 1) Audio Ground 2) Ext b+ 3) T Data 4) C Data 5) R Data 6) Logic Ground 7) Audio Out - on/off 8) Audio In 9) Manual Test 10) Battery Feedback GO TO TOP |
|
| Motorola 7500 Activate RBS (Note: pause means the * key held in until box appears) To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it. De-activate RBS To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] This only works with some versions of software. These countries has been reported working: IT (model: F16 HW: 5.2 SW: 2.1) What's the use of RBS: Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters. Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected. Pin Outs Numbered right to left, keypad up, battery down looking 1. Gnd 2. Pos 3. True data (TD) (input) 4. Complimentary data (CD) (input) 5. Return data (RD) (output) 6. Audio gnd 7. Audio out 8. Audio in |
|
| Motorola 8200 Activate RBS (Note: pause means the * key held in until box appears) To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it. De-activate RBS To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] This only works with some versions of software. These countries has been reported working: ES, AU, NL, BE What's the use of RBS: Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters. Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected. Pin Outs Numbered right to left, keypad up, battery down looking 1. Audio Ground 2. V+ 3. True data (TD) (input) 4. Downlink - Complimentary data (CD) (input) 5. Uplink - Return data (RD) (output) 6. GND 7. Audio Out - on/off 8. Audio In 9. Manual Test - ??? 10. Battery Feedback 11. Antenna connector GO TO TOP |
|
| Motorola 8400 Activate RBS (Note: pause means the * key held in until box appears) To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it. De-activate RBS To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] This only works with some versions of software. These countries has been reported working: IT, NL What's the use of RBS: Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters. Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected. Pin Outs Numbered left to right, keypad up, battery down 1. Audio Ground 2. V+ 3. True data (TD) (input) 4. Downlink - Complimentary data (CD) (input) 5. Uplink - Return data (RD) (output) 6. GND 7. Audio Out - on/off 8. Audio In 9. Manual Test - ??? 10. Battery Feedback 11. Antenna connector GO TO TOP |
|
| Motorola 8700 *#06# for checking the IMEI (International Mobile Equipment Identity) Activate RBS (Note: pause means the * key held in until box appears) To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it. De-activate RBS To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] This only works with some versions of software. These countries has been reported working: AU, IT, SG, DE, ES, ZA What's the use of RBS: Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters. Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected. GO TO TOP |
|
| Motorola CD 160, CD 520, 920, 930 Motorola CD 160 Press menu and type one of these numbers and press OK: 11 = Status Review 13 = Available Networks 14 = Preferred Networks 22 = Select Keypad Tones 25 = Require SIM Card PIN 26 = Language Selection 32 = Repetitive Timer 33 = Single Alert Timer 34 = Set IN-Call Display 35 = Show Call Timers 36 = Show Call Charges 37 = Call Charge Settings 38 = Reset All Timers 43 = Reset All Timers 45 = Show Last Call 46 = Total For All Calls 47 = Lifetime Timer 51 = Change Unlock Code 52 = Master Reset 53 = Master Clear (Warning!! May result in deleting the Message Editor!!!) 54 = New Security Code 55 = Automatic Lock 63 = Battery Saving Mode Free call tip 1 Enter the phone number 2 Enter OK 3 Type *#06# 4 Press Button C 5 And finally press the button for power off. You should now be able to talk without being billed. Motorola CD 520 Free call tip 1 Enter the phone number 2 Enter OK 3 Type *#06# 4 Press Button C 5 And finally press the button for power off. You should now be able to talk without being billed. Motorola 920/930 The 54# Tip: Type 1#, 2#........54# on the keypad (when you're not in the menu) to get the phone number used for with this key when speed dialing. |
|
| Motorola Analogue Phones MOTOROLA PROGRAMMING INSTRUCTIONS NOTES: Some units have dual NAM's. The ESN prefix is 130 decimal, 82 hex. Determine which access sequence to use: HAND HELD PORtable MODELS If the phone has a FCN button and no MENU button use sequence 1. If the phone has no FCN button use sequence 2. If the phone has a MENU button and a FCN button use sequence 4. INSTALLED MOBILE PHONES AND TRANSPORtable MODELS If the phone has no FCN button and no RCL button use sequence 3. If the phone has a FCN button use sequence 4. If the phone has a MEM button use sequence 5. If the phone has a RCL button and no FCN button use sequence 6. SEQUENCE# ACCESS CODE 1 FCN (SECURITY CODE TWICE) RCL 2 STO # (SECURITY CODE TWICE) RCL 3 CTL 0 (SECURITY CODE TWICE) * 4 FCN 0 (SECURITY CODE TWICE) RCL 5 FCN 0 (SECURITY CODE TWICE) MEM 6 CTL 0 (SECURITY CODE TWICE) RCL The default security code is 000000. The CTL (control) button is the single black button on the side of the handset. NAM programing: 1. Turn the power on. 2. Within ten seconds enter the access sequence as determined above. 3. The phone should now show "01" in the left of the display, this is the first programing entry step number. If it does not the security code is incorrect, or the programing lock-out counter has been exceeded. In either case you can still program the unit by following the steps under TEST MODE PROGRAMING below. 4. The * key is used to increment each step: Each time you press * the display will increment from the step number, displayed on the left, to the data stored in that step, displayed on the right. When the data is displayed make any necessary changes and press * to increment to the next step number. 5. The SND key is used to complete and exit programing when any STEP NUMBER is displayed. If you have enabled the second phone number bit in step 10 below then pressing SND will switch to NAM 2. Steps 01 thru 06, 09 and 10 will repeat for NAM 2, the step number will be followed by a "2" to indicate NAM two. 6. The CLR key will revert the display to the previously stored data. 7. The # key will abort programing at any time. PROGRAMING DATA: STEP# #OF DIGITS/RANGE DESCRIPTION 01 00000 - 32767 SYSTEM ID 02 3 DIGITS AREA CODE 03 7 DIGITS TEL NUMBER 04 2 DIGITS STATION CLASS MARK 05 2 DIGITS ACCESS OVERLOAD CLASS 06 2 DIGITS GROUP ID (10 IN USA) 07 6 DIGITS SECURITY CODE 08 3 DIGITS LOCK CODE 09 0333 OR 0334 INITIAL PAGING CHANNEL 10 6 DIGIT BINARY OPTION PROGRAMING (SEE NOTE 1) 11 3 DIGIT BINARY OPTION PROGRAMING (SEE NOTE 2) NOTES: Take care with Motorola's use of "0" and "1". Some options use "0" to enable, some use "1". 1. This is a 6 digit binary field used to select the following options: Digit 1: Internal handset speaker, 0 to enable. Digit 2: Local Use Mark, 0 or 1. Digit 3: MIN Mark, 0 or 1. Digit 4: Auto Recall, always set to 1 (enabled). Digit 5: Second phone number (not all phones), 1 to enable. Digit 6: Diversity (Two antennas, not all phones), 1 to enable. 2. This is a 3 digit binary field used to select the following options: Digit 1: Continuous DTMF, 1 to enable. Digit 2: Transportable Ringer/Speaker, 0=Transducer, 1=Handset. Digit 3: 8 hour time out in transportable mode, 0 to enable. TEST MODE ACCESS: INSTALLED MOBILE PHONES AND TRANSPORtable MODELS To enter test mode on units with software version 85 and higher you must short pins 20 and 21 of the transceiver data connector. An RS232 break out box is useful for this, or construct a test mode adaptor from standard Radio Shack parts. For MINI TR or Silver Mini Tac transceivers (smaller data connector) you can either short pins 9 and 14 or simply use a paper clip to short the hands free microphone connector. HAND HELD PORtable MODELS: There are two basic types of Motorola portable phones, the Micro-Tac series "Flip" phones, and the larger 8000 and Ultra Classic phones. Certain newer Motorola and Pioneer badged Micro-Tac phones do not have a "flip", but follow the same procedure as the Micro-Tac. 8000 & ULTRA CLASSIC SERIES: If you have an 8000 series phone determine the "type" before trying to enter test mode. On the back of the phone, or on the bottom in certain older models, locate the F09... number this is the series number. If the FOURTH digit of this number is a "D" you CAN NOT program the unit through test mode, a Motorola RTL4154/RTL4153 programer is required to make any changes to this unit. Having determined that you do not have a "D" series phone the following procedure is used to access test mode: Remove the battery from the phone and locate the 12 contacts at the top near the antenna connector. These contacts are numbered 1 through 12 from top left through bottom right. Pin 6, top right, is the Manual Test Mode Pin. You must ground this pin while powering up the phone. Pin 7 (lower left) or the antenna connector should be used for ground. Follow one of these procedures to gain access to pin 6: 1. The top section of the battery that covers the contacts contains nothing but air. By careful measuring you can drill a small hole in the battery to gain access to pin 6, alternately simply cut the top off the battery with a hack saw. Having gained access use a paper clip to short pin six to the antenna connector ground while powering up the phone. 2. If you do not want to "destroy" a battery you can apply an external 7.5 volts to the + and - connectors at the bottom of the phone, ground pin 6 while powering up the phone as above. 3. You can also try soldering or jamming a small jumper between pins 6 and 7 (top right to lower left), or between pin 6 and the antenna connector housing ground. Carefully replace the battery and power up the phone. Use caution with this method not to short out any other pin. 4. A cigarette lighter adaptor, if you have one, also makes a great test mode adaptor as it can be disassembled to give you easier access to pin 6. Many are pre marked, or even have holes in the right location. This is because they are often stamped from the same mold that the manufacturer uses for making hands free adaptor kits and these kits require access to the phone's connectors. GO TO TOP |
|
| Motorola d460 *#06# for checking the IMEI (International Mobile Equipment Identity) Activate RBS (Note: pause means the * key held in until box appears) To activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it. De-activate RBS To de-activate RBS type: [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] This only works with some versions of software. What's the use of RBS: Get Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters. Get Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected. |
|
| Motorola d460, 2500, 6200 (Flare), 7500, 8200, 8400 & 8700 IMEI *#06# displays IMEI on 8700, NOT on 6200, 7500, 8200 To activate RBS: (pause means the * key held in until box appears) [pause] [pause] [pause] 1 1 3 [pause] 1 [pause] [ok] You now have to press the [MENU] and scroll to the 'Eng Field Options' function with the keys, and enable it. To de-activate RBS, [pause] [pause] [pause] 1 1 3 [pause] 0 [pause] [ok] This only works with some versions of software. Please report what works and doesn't for you. Reported working, by country: d460: IT 6200 Flare: UK (Orange), AU 7500: IT (model: F16 HW: 5.2 SW: 2.1) 8200: ES, AU, NL, BE 8400: IT, NL 8700: AU, IT, SG, DE, ES, ZA Uses of RBS: Distance From Base Station - Place a call, when it is answered, press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'Time Adv xxx' appears, where xxx is a number. Multiply this number by 550, and the result is the distance from the RBS (Radio Base Station), in meters. Signal Quality - press [MENU] until 'Eng Field Option' is displayed, press [OK], select 'Active Cell', press [OK], press [MENU] until 'C1' appears. This is the signal quality. If it becomes negative for longer than 5 seconds, a new cell is selected. GO TO TOP |
|
| Motorola Elite Test Mode To enter in Nam programming Mode, press: [arrow up] 000000000000 (12 times zero) [MR] now display shows the first step of NAM programming; simply enter data and move to the next step using: * (the same key of [left arrow]) Software version To see software version of your phone you need to short-circuit antenna ground with the two nearest pin together in the connector located under the phone. then: Power ON the phone and type: #19# now display is showing software version of your phone. Serial Number To see the serial number of your phone you need to short-circuit antenna ground with the two nearest pin together in the connector located under the phone. then: Power ON the phone and type: #75# now display is showing the first pair of digits, then go ahead using * (the same key of [left arrow]) to show the second pair and so on. Pinout The pins are numbered 1 thru 10 from right to left ANT- (O) | | | | | | | | | | 1) Audio Ground 2) Ext b+ 3) T Data 4) C Data 5) R Data 6) Logic Ground 7) Audio Out - on/off 8) Audio In 9) Manual Test 10) Battery Feedback GO TO TOP |
|
| Motorola Flare Functionality Enablement Following you'll find the procedure in order to get more menu's from your phone. But you don't just get more menu's, you'll get 99 more memories available, giving a total of 198 memories! These memories are stored in the phone, not in the SIM, which means you can store many more characters and numbers for each name. Before you begin, take note that: Make a note of your voicemail number! You may lose it during this! (don't worry, you can reprogramme it later). You may need to use the master reset option to get outgoing DTMF going again after this. All the menu's seem to be dependant on others being available, so if you just activate one, it will say not available Lastly, p = a pause. ie, what you get when you hold down the * button for 3 seconds. And then .... let's go ! First of all, press ppp070p0p OK You have just turned off the code that disables further changes. This seems to have been set in some phones. Now enter: ppp000p1p OK ppp001p1p OK ppp002p1p OK all the way to ppp113p1p OK but AVOID ppp070p1p and ppp007p1p Don't worry, this only takes about 35 mins for all 111, but just don't lose count! Then go to phone setup menu, and select extended menu And finally .... You'd find some more menu items which wasn't there before and you got 99 more memory locations giving a total of 198 memories. Show IMEI code If you need to know what's the IMEI code of your phone, simply press: * # 06 # you'll read it on display. Pinout Numbered left to right, keypad up, battery down 1) Audio Ground 2) V+ 3) True data (TD) (input) 4) Downlink - Complimentary data (CD) (input) 5) Uplink - Return data (RD) (output) 6) GND 7) Audio Out - on/off 8) Audio In 9) Manual Test - ??? 10) Battery Feedback 11) Antenna connector To switch to the external antenna, a 2k2 resitor shout be placed in the coaxial antenna cable from shield to core. GO TO TOP |
|
| Motorola MicroTac Test Mode To enter in Nam programming Mode, you need to short-circuit the first and the third battery pin from the right, then: Power ON the phone display will show "Tacs5", type in: 55 now display shows the first step of NAM programming; simply enter data and move to the next step using: * (the same key of [left arrow]) Software version To enter in Nam programming Mode, you need to short-circuit the first and the third battery pin from the right, then: Power ON the phone display will show "Tacs5", type in: 19 now display is showing software version of your phone. GO TO TOP |
|
| Motorola StarTac Show IMEI code If you need to know what's the IMEI code of your phone, simply press: * # 06 # you'll read it on display. Pinout 1) Connected with 22pf to pin 3 2) RF out 3) Connected with 33 pf to pin 8, 33 pf to pin, 33 pf to pin 7 4) BAT_FDBAK 5) MAN_TEST connected with 10k to L275 6) RS232_TX - connected to MCU SPI bus 7) RS232_RX - connected to MCU SPI bus 8) AUDIO_IN 9) AUDIO_OUT 10) Connected with 33 pf to pin 13, 33 pf to pin 14 11) UPLINK -| 12) DOWNLINK -|- DSC bus connected to the BIC 13) DSC_EN_B -| 14) EXT_B+ 15) Gnd GO TO TOP |
|
| Motorola V3688 *#06# for checking the IMEI (International Mobile Equipment Identity) Enhanced Full Rate Codec (EFR): To Enable EFR press [][][] 119 [] 1 [] OK. To Disable EFR press [][][] 119 [] 0 [] OK NOTE: Nothing appears on Screen. |
|
| GO TO TOP | GO TO MAIN PAGE |
