Shenzhen Thingsend Communication Tech Co.

, Ltd

LTE-4G All Netcom Data Transmission Terminal

(DTU) XZ-DG4
1.Product Overview
1.1Features:
⚫ Support 4G/2G, Mobile, Telecom and China Unicom
⚫ Europe, America, Japan 4G version is different
⚫ Bidirectional data transparent transmission between
terminals TTL, RS485, RS232, and server
⚫ Support user-defined registration packet and heartbeat
⚫ Standard TCP/IP communication interface Socket in Server
⚫ Intelligent anti disconnection, support online testing and online
maintenance, disconnected then automatic redial, ensure the equipment is always online
⚫ Support configuration of the domain name, IP, port number, APN, serial port, baud rate and
other parameters through serial port
⚫ Support remote configuration, remote firmware upgrade
⚫ Support fixed IP and domain name DNS

1.2 Applications:
⚫ Environmental Monitoring
⚫ Energy, chemicals, warehouse, transportation, cold chain.
⚫ Military, police communications
⚫ Railway, power private network communication
⚫ Automatic Data Acquisition System
⚫ Industrial remote control, Telemetry

1.3 Descriptions
XZ-DG4 is a LTE-4G GSM wireless data transmission terminal (DTU) developed by
Thingsend Communication, which is small, flexible in configuration and easy to use. It
works at 4.75 ~ 36V DC power supply, and has TTL, RS232, RS485 various level
interface, it can achieve data transmission automatically. It has TCP/IP connection
function mode and short message working mode. For domestic user it supports mobile,
China Unicom, telecom operators at default, after inserting Nano SIM and it can
communicate; For foreign user, it configures APN parameters of the local operators,
insert Nano SIM and it can communicate.

2.Dimensions& Pin Definitions

XZ-DG4M-CN Dimension and DB9 definition

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 1 / 11

 Shenzhen Thingsend Communication Tech Co., Ltd

Pins Definition Input/output Function Description

1 VCC Input Positive power supply (4.75V-36V)

2 Rxd_RS232 Input Serial port Input of RS232 Level
3 Txd_RS232 Output Serial port Output of RS232 Level
4 GND Input GND
5 GND Input GND
6 A_RS485 Input, Output A port of RS485 Level
7 B_RS485 Input, Output B port of RS485 Level
8 NC NC
9 NC NC

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 2 / 11

 Shenzhen Thingsend Communication Tech Co., Ltd

XZ-DG4P-CN Dimension and definition

Pins Definition Input/output Function Description

1 VCC Input Positive power supply (4.75V-36V)

2 Rxd_TTL Input 3.3V Serial port Input of TTL Level
3 Txd_TTL Output Positive power supply (4.75V-36V)
4 NC
5 GND Input GND

3.Using Method
3.1TCP/IP connection
When XZ-DG4 works in the TCP/IP connection mode, data communication between
XZ-DG4 and server is fully transparent transmission, to keep XZ-DG4 always online,
users need to define the registered data frame and heartbeat data frame, and the server

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 3 / 11

 Shenzhen Thingsend Communication Tech Co., Ltd
needs to differentiate the registered data frame and heartbeat data frame from user data
frame. The server can also remotely set XZ-DG4's SDN or domain name.

3.1.1Registered data frame:

The registered packet data type is 0x00, with a minimum load of 16 bytes. Users can
freely add custom data, data is automatically added to the signal strength byte, and can
set 70 bytes at most.
Frame CRC16
Address Type Load Length Load
head Calibration
0x24 ID3 ID2 ID1 ID0 0x00 LEN_H LEN_L DATA CRC_H CRC_L
Frame head: 0x24
Address: HEX，high byte is in the front

Type: 0x00: reporting IMSI (15 bytes) +CSQ (1 bytes)

Length: part data length, high byte is in the front;
Load: data content: the first 15 bytes are IMSI (ascii code) of SIM card, then 1
byte is signal strength value RSSI (signed number) of GPRS, and the last one is user-
defined registered package information.
CRC16 Calibration: start from frame head to data content, CRC-16 ($1021) check of
all data;
1) CRCH: CRC16 checksum high 8 bits;
2) CRCL: CRC16 checksum high and low bit

3.1.2 Heartbeat data frame:

The heartbeat packet sends one-byte data by default, and the data is 0x04. If it’s user-
defined heartbeat packet, then one sends the user-defined heartbeat packet data, and the
transmission interval is 40 seconds.

3.2 Server Remote Setting Parameters

When the DTU is connected to the server, the DTU can perform IP read/set/delete
functions through the server.

3.2.1 Remotely setting the IP parameter data frame:

Frame
Address Type Payload length Payload CRC16 check
header
0x26 ID3 ID2 ID1 ID0 0x02 LEN_H LEN_L DATA CRC_H CRC_L

Frame header: 0x26 indicates the data sent by the server.

Address: HEX, high position first
Type: 0x02: Data type set by IP

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 4 / 11

 Shenzhen Thingsend Communication Tech Co., Ltd
Length: the length of the data part, the high position is in front;
Load: Data content:
Command Payload Example Description
Description length
Read all IP 0x00 26 55 AA 55 AA 02 00 The data content is empty, DTU
0x00 00 D5 61 returns all stored IP values, the
content is: "[ip/domain name,
port, priority]".
Add specified N 26 55 AA 55 AA 02 00 Length bits (0x00 0x1D ) is fixed
priority IP 1D 30 5b 76 76 31 38 36 to 0x30, which means write IP
37 32 32 34 33 2e 69 61 operation. The IP content format
73 6b 2e 69 6e 2c 31 36 is: "[ip/domain name, port,
31 33 37 2c 32 5d 95 88 priority]", the priority value is
1~5, where the red value is:
[vv18672243.iask.in , 16137, 2]
Delete the specified 0x00 26 55 AA 55 AA 02 00 The length bit (0x00 0x02) is
priority IP 0x02 02 31 31 E8 E3 fixed to 0x31, indicating the
deletion of the IP operation, the
specified priority IP
corresponding to red 0x31, and
the priority value is 1. ~5.

CRC16 check: CRC-16 ($1021) check from the beginning of the frame to all data of
the data content;
1) CRCH: the upper 8 bits of the CRC16 check;
2) CRCL: CRC16 checksum high and low

3.2.2 Remote Switching Connection Priority IP Parameter Data Frame:

Frame
Address Type Payload Length Payload CRC16check
header
0x26 ID3 ID2 ID1 ID0 0x03 LEN_H LEN_L DATA CRC_H CRC_L

Frame header: 0x26 indicates the data sent by the server.

Address: HEX, high position first
Type: 0x03: After the DTU connects to the server, this command can be used to switch
the DTU connection to the specified priority IP. If the IP of the specified priority cannot
be successfully connected, the DTU will automatically select a connectable IP to
establish a connection.
Length: the length of the data part, the high position is in front;
Load: Data content: Example: 26 55 AA 55 AA 03 00 01 32 A9 4C , set the DTU to the
IP address of the priority number 2.
CRC16 check: CRC-16 ($1021) check from the beginning of the frame to all data of
the data content;
1) CRCH: the upper 8 bits of the CRC16 check;
Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 5 / 11
 Shenzhen Thingsend Communication Tech Co., Ltd
2) CRCL: CRC16 checksum high and low

3.3 SMS function use

When XZ-DG4 works in SMS mode, XZ-DG4 can communicate with any mobile
phone by SMS. When the mobile phone sends any message to XZ-DG4, XZ-DG4 from
serial port sends out the current SMS content (only support up to 70 ASCII characters),
if the terminal equipment returns data from serial port (only a maximum of 70 ASCII
characters) XZ-DG4 will automatically reply the data to the mobile phone number from
which it receives text messages last time.

3.4 SMS modify server IP and port

When the format of the SMS sent to XZ-DG4 is: "SDN:xxx.xxx.xxx.xxx,xxx"
(example: SDN:192.168.0.0,8888), XZ-DG4 will automatically modify and save the
server IP, and The target server will be automatically reconnected immediately, and the
content of "SDN:xxx.xxx.xxx.xxx,xxx" supports domain name and IP.
Special customization requirements for SMS function is supported

4.AT Command Instruction

4.1Command List
Command Description Format Parameters
Enter the AT command None （ Enter and Return
+++
mode OK）
<SDN>：Domain Name
Set IP/SDN domain AT+SDN=1,[<SDN>,<port>,<num>][ <port>：Port No
<num>：Serial No. <1~5>
name …][…] Remark ： 1 is on highest
priority）
Delete IP/SDN < num >：Serial No. 1~5：
AT+SDN=0,< num> Specified Serial No.
domain name A： Delete All

Set ID Number AT+MODIDSET=1, <id> <id> ： DTU ID Decimal

system

<bau>：baud rate
0： 1200bps
1： 2400 bps
2： 4800 bps
3： 9600 bps (default)
4： 19200 bps
5： 38400 bps
Set Serial Port AT+IPR=1,<bau>,<length>,<parity>,< 6： 57600 bps
7： 115200 bps
Parameters stopbit> <length>：data bits
8： 8 data bits
<parity>：parity check
N： no parity
O： odd parity
E： even parity
<stopbit>：stop bit
1： 1 bit
<SN> ： Serial No.
Set(1~8)
Add APN AT+PROFILE=1,<SN>,<MCC+MNC MCC：Mobile Country
Code
Configuration Item >,<APN>,<Username>,<Password> MNC：Mobile Network
Code
<APN>：Access Point
Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 6 / 11
 Shenzhen Thingsend Communication Tech Co., Ltd
<Username>：user name
<Password>：password

Delete APN <SN>：Serial No. 1~8：

AT+PROFILE=0,<SN> Specified Serial No.
Configuration Item A： Delete All
<mode>：Mode Selection
0 ： don’t add ID before
transparent data
Set add ID function AT+ADDIDEN=1，<mode> transmission is the default
1 ： add ID before setting
transparent data
transmission
Set registered packet <text>： registered packet
AT+REGPKT=1，<text> content
function
<text> ： heartbeat packet
Set heartbeat packet content
AT+HBTPKT=1，<text> Send once every
format 40s
<mode>: Trigger Mode
Set SMS working 0: TCP/IP Mode
AT+SMSTMODE=1,<mode> 1: TXT transparent
mode transmission mode
+IMSI:460010000000001
Query SIM card IMSI
AT+IMSI=？ 15-digit SIM card imsih
number
number
Query firmware
AT+FWV=？ None
version number
Reboot DTU AT+REBOOT None
None（if serial port is no
Quit AT Command
AT+QUIT operation, then quit
Mode
automatically after 60s）

4.2Command Description

4.2.1Enter AT Command Mode

Format +++
Return OK

4.2.2 Set SDN and Port No.

Format AT+SDN=1,[<SDN>,<port>,<num>][…][…]
AT+SDN=0,<num>
AT+SDN=？
Explain <SDN>：Server domain name or IP
<port>：Server port No.
<num>: Priority Serial No.，set value 1-5，can set 5 个 domain name or IP，priority
is from high to low. That is：the domain name of SN 1 is on highest priority，if only use 1 domain
name，num is 1.
For Example, Set SDN and Port No.：

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 7 / 11

 Shenzhen Thingsend Communication Tech Co., Ltd
AT+SDN=1,[211.154.140.203,8006,1]
+SDN:OK (DTU return)
Delete SDN and port No.：
AT+SDN=0,1
+SDN:OK
Read SDN configuration：
AT+SDN=?
+SDN:[hham.vicp.net,8006,1]

4.2.3Set DTU ID
Format AT+MODIDSET=1, <id>
AT+MODIDSET=?
Explain <id>：set value 0～4294967295，ID of DTU.
For example Set ID：
AT+MODIDSET=1, 100
+MODIDSET:OK
Read ID：
AT+MODIDSET=?
+MODIDSET: 100

4.2.4Set Serial Port Parameters

Format AT+IPR=1,<bau>,<length>,<parity>,<stopbit>
AT+IPR=？
Explain <bau>：baud rate，set value 0～7,match accordingly baud rate 1200、2400、4800、
9600、19200、38400、57600、115200bps,baud rate by default is 9600bps.
<length>：data bits，set value 8.
<parity>：Parity bits，N-None Parity、O-Odd Parity、E-Even Parity
<stop bit>：stop bit，set value 1.
For example, Set serial port parameters:
AT+IPR=1,3,8,N,1
+IPR:OK (must restart power on then the parameters become effective)
Read serial port parameters：
AT+IPR=?
+IPR: 3,8,N,1

4.2.5Set APN Parameters

Format AT+PROFILE=1,<SN>,<MCC+MNC>,<APN>,<Username>,<Password>
AT+PROFILE=0,<SN>
AT+PROFILE=？
Explain <SN>：Set value 1～8，can set 8 APN item to fit various card。
<MCC+MNC>：Mobile Country Code+ Mobile Network Code
<APN>：Access point，For example China Mobile is CMNET
<Username>：User Name，Used in private networks, usually it’s empty
<Password>：Password，Used in private networks, usually it’s empty
Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 8 / 11
 Shenzhen Thingsend Communication Tech Co., Ltd
For example, Add APN Configuration:
AT+PROFILE=1,1,46000,cmnet,
+PROFILE:OK
Delete APN configuration
AT+PROFILE=0,1
+PROFILE:OK
Read APN configuration
AT+PROFILE=?
+PROFILE:1,46000,cmnet,

4.2.6. Setting the Registration Package Format

Format AT+REGPKT=1, <text>
AT+REGPKT=?
Explanation <text>: The contents of the registration package (1 to 30 ASCII codes), the string must
start with S
Example Set the registration package format (string):
AT+ REGPKT =1, SNum1DTUReg
+REGPKT:OK
Read the registration package format:
AT+ REGPKT =?
+REGPKT: SNum1DTUReg

4.2.7 Setting the Heartbeat Packet Format

Format AT+HBTPKT=1, < text >
AT+ HBTPKT =?
Explanation <text>: Heartbeat packet content (1~30 ASCII codes), string must start with H
Example Set the heartbeat packet format (string):
AT+ HBTPKT =1, HBeat
+HBTPKT: OK
Read the heartbeat package format:
AT+ HBTPKT =?
+HBTPKT:HBeat

4.2.8 Setting the working mode mode

Format AT+SMSTMODE=1, <mode>
AT+SMSTMODE=?
Explanation <mode>: 0-TCP/IP working mode, 1-message working mode
Example Set the trigger mode:
AT+ SMSTMODE =1,1
+SMSTMODE:OK
Read trigger mode:
AT+ SMSTMODE =?
+SMSTMODE:1

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 9 / 11

 Shenzhen Thingsend Communication Tech Co., Ltd

4.2.9 Reading the IMSI number of the SIM card

Format AT+IMSI=?
Example Read the IMSI number of the SIM card:
AT+IMSI=?
+IMSI: 460010000000001

4.2.10 Reading the firmware version number

Format AT+FWV=?
Example Read the firmware version number:
AT+FWV=?
XZ-DG4 Firmware V1.0

4.2.11 Restart DTU

Format AT+REBOOT
Example Software reset DTU:
AT+REBOOT
XZ-DG4 Firmware V1.0

4.2.12 Exit AT mode

Format AT+QUIT
Example Exit AT mode:
AT+QUIT
AT_quit!

5.Technical Parameters
Parameters
Type Unit
Minimum Typical Value Maximum
Electrical Property (25℃)
Mains Voltage 4.75 12 36 V
Working Current 70 150 250 mA
Peak Current - - 2000 mA
Wireless Performance (25℃)
Frequency Range 4G 2G -
Sensitivity -106dBm -
EGSM900：+33dBm (Power Class 4)…
Max. Emission Power -
LTE：+23dBm(Power Class 3) …
General
Performance
Interface Rate 1200 9600 115200 bps

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 10 / 11

 Shenzhen Thingsend Communication Tech Co., Ltd

Interface Level RS485，RS232，TTL

Working Temperature -40 80 ℃
52×35×10 (not including antenna and
Dimension mm
accessories)

6.XZ-DG4 Status indication and Fault Description

Indicator Status Status description (any Led lighting indicates power on)

RED LED Flash when there is data communication in Serial Port

BLUE LED Light or flash when XZ-DG4 is connected to the base station

When XZ-DG4 is successfully connected to the correct server

GREEN LED and it flashes once every 3 seconds. If it is connecting then flash
once every 0.5s

7.XZ-DG4 model description

XZ-DG4 covers the global 4G frequency and is divided into the following four
versions according to the frequency segment. The appropriate version of the
following frequency coverage can be selected according to the user's actual use.
Please confirm the frequency bands with our sales when ordering.

Website:www.thingsend.com/en Email：sales@thingsend.com Tel:0755-22675449 11 / 11