Specifications

ManualsBrandsMotorola ManualsMobile PhonesMICROTAC DPC 650

MOTOROLA USERS AND PROGRAMMING GUIDES

Original author: Mike Larsen 01/23/95 03/26/95

Mike.Larsen@uti.com Stularsenmic@vax.colsf.edu

Additional information, graphics, other articles, and conversion to Word by Bob 03/20/95 v1.1 by Bob 3/21/95.

This is mainly a compilation of other peoples work. I, Bob, to not seek credit for something I did not do. I

however will be more then happy to take credit for what I did do. I compiled most of the data you see before you.

I took Mike Larsen’s manual, changed a few things, and added to it. I also turned a few documents into TIFs for

ease of reading. This manual was designed to make a nice printed copy of the data gathered by all parties

involved. Authors names remain intact throughout this document, and in most cases, the data has not be changed.

This manual may be altered to each users needs. Further, each user may add to this manual, and is encouraged to

do so. Further, each user may retransmit this manual in it’s altered state, provided the user credits all involved.

Further, the user may quote from this manual, provided the user credits the correct author, and makes a vague

reference to “Bob”. This manual may not be sold in any form for any amount of money, unless all authors

involved agree. Further, all data within this manual can not be sold in any for any amount of money unless the

appropriate author/s agree. However, learned procedures may be used to aid ones employment, or be used in the

gain of money, provided that such procedures are documented with this manual, or the information pertaining to

the procedure. In short: This information is to be shared with all who have an interested, and is ment to benefit

the users of the Motorola cellular phone, and the authors by being credited for the gathering of this information.

My special `contribularity` to Mike Larsen, Dr. Who, who compiled most of the hard data contained in this

manual. --bob

TABLE OF CONTENTS

BASIC COMMANDS 3

NAM PROGRAMMING 4

TEST MODE ACCESS: 6

INSTALLED MOBILE PHONES AND TRANSPORTABLE MODELS 6

HAND HELD PORTABLE MODELS: 6

8000 & ULTRA CLASSIC SERIES: 6

MICRO-TAC "FLIP" SERIES: 7

GENERAL NOTES: 7

NEWER 95xx PHONES (Thank you Motorola!!!) 7

ULTRA CLASSIC II SERIES: 7

LOCK/UNLOCK PROCEDURES: 7

SYSTEM SELECT PROCEDURES: 8

TEST MODE 8

TEST MODE PROGRAMMING: 9

TEST MODE PROGRAMING DATA: For AMPS and NAMPS Cellular Telephones 9

TEST MODE PROGRAMING DATA: For TDMA Cellular Telephones 10

NOTES: 10

TEST MODE COMMANDS: 12

Summary of content (27 pages)

PAGE 1
MOTOROLA USERS AND PROGRAMMING GUIDES Original author: Mike Larsen 01/23/95 03/26/95 Mike.Larsen@uti.com Stularsenmic@vax.colsf.edu Additional information, graphics, other articles, and conversion to Word by Bob 03/20/95 v1.1 by Bob 3/21/95. This is mainly a compilation of other peoples work. I, Bob, to not seek credit for something I did not do. I however will be more then happy to take credit for what I did do. I compiled most of the data you see before you.
PAGE 2
GSM INFO AND TEST MODES.
PAGE 3
Basic Commands Before going in to the programming of the cellular phone, it is important for the user to know the normal things necessary for day to day operation. While the majority of the stuff in the users manual is intended for people that have problems programming their VCR, their are a few things that are very important and are only mentioned in the users manual.
PAGE 4
NAM Programming Once the phone model and sequence number are identified, determine the program access sequence from this list. HAND HELD PORTABLE MODELS If the phone has a FCN button and no MENU button use sequence 1. If the phone has no FCN button use sequence 2. If the phone has a MENU button and a FCN button use sequence 4. INSTALLED MOBILE PHONES AND TRANSPORTABLE MODELS If the phone has no FCN button and no RCL button use sequence 3. If the phone has a FCN button use sequence 4.
PAGE 5
NAM programming: Step 3: PROGRAMMING SEQUENCE 1. Turn the power on. PHONE MUST BE UNLOCK BEFORE IT CAN BE PROGRAMED 2. Within ten seconds enter the access sequence as determined above. 3. The phone should now show "01" in the left of the display, this is the first programming entry step number. If it does not the security code is incorrect, or the programming lock-out counter has been exceeded. In either case you can still program the unit by following the steps under TEST MODE PROGRAMMING below. 4.
PAGE 6
TEST MODE ACCESS: INSTALLED MOBILE PHONES AND TRANSPORTABLE MODELS To enter test mode on units with software version 85 and higher you must short pins 20 and 21 of the transceiver data connector. An RS232 break out box is useful for this, or construct a test mode adapter from standard Radio Shack parts. For MINI TR or Silver Mini Tac transceivers (smaller data connector) you can either short pins 9 and 14 or simply use a paper clip to short the hands free microphone connector.
PAGE 7
MICRO-TAC "FLIP" SERIES: This phone follows similar methods as outlined for the 8000 series above. Remove the battery and locate the three contacts at the bottom of the phone, the two outer contacts are raised and connect with the battery. The center contact is recessed, this is the Manual Test Mode connector. Now look at the battery contacts, the two outer ones supply power to the phone, the center contact is an "extra" ground. This ground needs to be shorted to the test mode connector on the phone.
PAGE 8
SYSTEM SELECT PROCEDURES: Phones with a RCL button: Press RCL *, then * to select, STO to store. Phones with no RCL button: Press Control * then * to select, # to store. Options are: CSCAn Preferred/Non preferred with system lockout Std A/b, or Std b/A: Preferred/Non preferred. SCAn Ab, or SCAn bA: Non preferred/Preferred SCAn A: "A" ONLY SCAn b: "B" ONLY HOME: Home only (these are typical options, some phone's vary. C-Scan is only available on newer models and does not appear unless programmed, see below.
PAGE 9
NOTE: Not all commands work on all telephones. If a command is not valid the display will show "ErrOr." Not all numbers have been assigned. Not all numbers have been listed here. Some commands were intended only for Motorola factory applications. (This is the disclaimer in the technical training manual. I have included all of the other commands I have discovered one way or another. I do believe this is a complete list of the commands.
PAGE 10
TEST MODE PROGRAMING DATA: For TDMA Cellular Telephones STEP# #OF DIGITS/RANGE DESCRIPTION 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 00000 - 32767 8 DIGIT BINARY 10 DIGITS 2 DIGITS 2 DIGITS 2 DIGITS 6 DIGITS 3 DIGITS 3 DIGITS 8 DIGIT BINARY 8 DIGIT BINARY 0333 OR 0334 0333 0334 3 DIGITS 3 DIGITS 17 18 19 708 737 8 DIGITS SYSTEM ID OPTION PROGRAMING, SEE NOTE 1 BELOW MIN (AREA CODE & TEL#) STATION CLASS MARK, SEE NOTE 2 BELOW ACCESS OVERLOAD CLASS GROUP ID (10 IN USA) SECURITY CODE LOCK CODE SER
PAGE 11
3. Service Level Codes: 001 The telephone will only dial numbers in memory locations 01, 02 and 03. No keypad entries or memory storage is possible. Restrict ALL outgoing calls by clearing locations 01, 02, and 03 and place the phone in servicing level 001. In some phones this applies to memory locations 01 - 10. 002 The telephone will dial only numbers from memory locations. The keypad is disabled and super speed dialing is not enabled. 003 Keypad dial only; no memory recall allowed.
PAGE 12
TEST MODE COMMANDS: # 1# 2# 3# 4# 5# 6# 7# 8# no function Restart (Re-enter DC power start-up routine.) On TDMA phones, this command has the same effect as pressing PWR button. Display Current Telephone Status (This is a nonaltering version of the STATUS DISPLAY. On a 14 character display, all the information is shown. On a 7 character display only the information on the second line of a 14 character display is shown.
PAGE 13
27# 28# 29# 30# 31# 32# 33 34# 35# 35 36 37# 38# Transmit Data (Transmits continuous control channel data. All words will be "FF00AA55CC33." When the command starts, '27' will be displayed in the right side of the display. Entering a # key will terminate the command. The transmitter de-keys when finished.) Activate the high tone (1150 Hz +/- 55 Hz) De-activate the high tone Activate the low tone (770 Hz +/- 40 Hz) De-activate the low tone Clear (Sets non-volatile memory to zeroes or factory default.
PAGE 14
63.0 = 22 184.5 = 65 306.0 = 124 67.5 = 23 189.0 = 66 310.5 = 125 72.0 = 48 193.5 = 67 315.0 = 126 76.5 = 49 198.0 = 68 319.5 = 127 81.0 = 50 202.5 = 69 324.0 = 104 85.5 = 51 207.0 = 70 328.5 = 105 90.0 = 52 211.5 = 71 333.0 = 106 94.5 = 53 216.0 = 80 337.5 = 107 99.0 = 54 220.5 = 81 342.0 = 108 103.5 = 55 225.0 = 82 346.5 = 109 108.0 = 56 229.5 = 83 351.0 = 110 112.5 = 57 234.0 = 84 355.5 = 111 117.0 = 58 238.5 = 85 360.
PAGE 15
RxLev: The strength of the received signal (in dBm), normally between -55 and -90 - the signal drops at RxLevAm When comparing RxLev's, remember the logarithmic nature of the dB scale and that the signal intensity decays by a factor of 4 when the distance from the BST is doubled (assuming line of sight to the BST, the signal will drop 6 db when the distance is doubled.) Receive signal strength cut off point (around -100 dBm and -110 dBm).
PAGE 16
Security Codes on the GSM phones: The phones are protected by two codes: The UNLOCK code which consists of 4 digits (default 1234) This is changed by typing MENU 51 and providing the security code. You can type in wrong codes until you hit the right one. The SECURITY code which consists of 6 digits (default 000000) This is changed by typing MENU 54 and providing the old code. Again, you can keep hitting bogus codes all day until you get the right one (hope you got some time to kill).
PAGE 17
Test Mode Functions: 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 17 MENU-phone book MENU-messages mute on/off (menu during call) MENU-Call related features MENU-"arrows" select phone line last ten calls• restrict my phone number call diverting divert when available Detailed diverting Divert voice calls Divert ALL voice calls If Busy If no answer If not reachable Divert fax calls Divert Data cal
PAGE 18
HACKING THE FOVC Problem: When listening to something interesting (a conversation), just when that sexy sounding horny broad begins to give her phone number to some lucky guy, HANDOFF!!! then static... DAMN! Trick: Hack the FOVC.
PAGE 19
Assembling a _QUALITY_ Motorola Flip programming cable from a standard battery eliminator. Written by KG/Control Team/Umf 02/07/94 Word. It seems that alot of bad cables are being sold by some lame asses here on the west coast. The result, alot of _rare_ LO phonez are being fried. Welp, this file should clear things up. Even if you've never made anything but clay pots this should be easy for ya. Take your time and this, along with your phone will last a lifetime...
PAGE 20
This cable will work with the 6.6, 9.11 & 9.9 software. This means that without a) AMPS or b) The Trick Clip you'll need to find a Flip that has a firmware revision equal to or below 9122. A good sign that the phone is indeed a LO, is to check the ESN located on the back and look for any prefix below A2A. If you can't locate the ESN sticker, usually cause it's stolen, then look for a MCsquared printed along with the menu sticker. If the phone has the MC2 don't buy it.
PAGE 21
From: locke@dfw.net Date: Thu, 20 Oct 1994 09:53:54 GMT (altered Thu, 23 Mar 1995) Anyway, I hope this helps, you CANNOT program the phones without twisting/connecting the additional 19 & 20 DB25 connections.
PAGE 22
Pinouts for Motorola 8000 “brick” phone - “N” series numbering starts on top row left pin 1 2 3 4 5 6 Signal logic ground not used audio in to phone audio out (and on/off toggle) 4.75 Bias Manual test line 7 8 9 10 11 12 Ground for audio signals (common) TRU data line not used CMP data line RTN data line ignition sense 15 pin cable pinouts PIN 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 DESIGNATION/FUNCTION Battery A+, red wire Transmit Audio / ON-OFF Function, a shared line between Audio (AC) and ground.
PAGE 23
CVC BLOCK [ 1] [ 2] [ 3] [ 4] [ 5] [ 6] [ 7] [ 8] [ 9] [10] [11] [12] 1 2 3 4 5 6 VSP Enable SPKR Enable TX HI on/off RX HI RX HI OPT MAN TEST 7 8 9 10 11 12 GROUND S TRU AUX Alert SCMP S RTN IGN New External Connector for the Ultra Classic II CVC Pinblocks Pin 1 3 Designation/Function Regulated 8 volts ext. switched A+ enable ext.
PAGE 24
Flip Fones and all fones using the dpc/pt flip cable 12345678+G|||||||| ||| (looking at back of phone with battery removed) Pin 1 2 3 4 5 6 7 8 Function Logic Ground Ext. 7.5V TRU CMP RTN Audio Ground RX Audio OUT (spkr) (on/off) TX Audio IN (mic) Motorola / AMPS handset specifications: RJ-45 1 2 3 4 5 6 7 8 DB-25 23 8 11 12 18 24 1 6 Description ground 9.
PAGE 25
Cellular Frequency List Chan # 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 25 Tx Freq Mhz 870.03 870.06 870.09 870.12 870.15 870.18 870.21 870.24 870.27 870.30 870.33 870.36 870.39 870.42 870.45 870.48 870.51 870.54 870.57 870.60 870.63 870.66 870.69 870.72 870.75 870.78 870.81 870.84 870.87 870.90 870.93 870.96 870.99 871.02 871.05 871.08 871.11 871.
PAGE 26
143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 874.29 874.32 874.35 874.38 874.41 874.44 874.47 874.50 874.53 874.56 874.59 874.62 874.65 874.68 874.71 874.74 874.77 874.80 874.83 874.86 874.89 874.92 874.95 874.98 875.01 875.04 875.07 875.10 875.13 875.
PAGE 27
293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 27 878.79 878.82 878.85 878.88 878.91 878.94 878.97 879.00 879.03 879.06 879.09 879.12 879.15 879.18 879.21 879.24 879.27 879.30 879.33 879.36 879.39 879.42 879.45 879.48 879.51 879.54 879.57 879.60 879.63 879.