Problem Definition
A Siemens SINAUT MD720-3 GSM/GPRS terminal modem is operated in AT-command (terminal) mode and connected to a PC COM port over an RS-232 cable. The modem's front-panel status LEDs indicate nominal operation, yet the modem returns no response to any AT command issued from Windows HyperTerminal. Selecting 115200 bit/s on the PC side instead of the documented 19200 bit/s produces a continuous stream of unreadable ASCII characters that the user reports as "NaN". Disconnecting, reconnecting, or power cycling the modem does not restore communication.
This pattern - silence at the documented baud rate and garbled output at a higher one - is the textbook signature of a UART parameter mismatch combined with an incomplete or mis-wired RS-232 cable. Both conditions are present in this report.
Symptoms observed in the field:
- Power and status LEDs indicate nominal operation (steady green ON, slow-blinking STAT).
- HyperTerminal shows no echo of typed AT commands.
- No
OK,ERROR, orNO CARRIERreply toAT,ATZ, orAT&V. - Setting the PC COM port to 115200 bit/s produces ASCII garbage visually resembling "NaN".
- No
RINGor unsolicited result codes appear after the modem is power-cycled.
Root Cause Analysis
The MD720-3 powers up with its serial service port fixed at 19200 bit/s, 8 data bits, no parity, 1 stop bit (19200 8N1) with hardware flow control on the RTS/CTS pair, as documented in the Siemens MODEM MD720 operating manual (PDF). Two independent failures must be cleared to bring the link up:
-
Serial parameter mismatch. The PC terminal is set to 115200 bit/s while the modem transmits at 19200 bit/s. The receiver oversamples each 19200 bit/s bit six times, producing groups of six identical ASCII characters. Where the underlying frame happens to be
N(0x4E)a(0x61)N(0x4E), the terminal renders "NaN". The user is therefore not seeing a corruption bug - they are seeing correctly transmitted 19200 bit/s frames being mis-decoded at 115200 bit/s. - Incomplete RS-232 cable. The cable in the report is missing pin 1 (DCD) and pin 9 (RI). The MD720-3 firmware gates its service channel on the DTR/DSR/DCD handshake. A cable that does not carry those signals leaves the modem in a quiescent state where it neither echoes typed commands nor transmits unsolicited result codes.
UART Bit Timing - Why "NaN" Appears at 115200 bit/s
The bit period of the two rates is:
- t_bit(19200) = 1 / 19200 = 52.083 microseconds
- t_bit(115200) = 1 / 115200 = 8.681 microseconds
The ratio is exactly 6.000. A receiver sampling a 19200 bit/s line at 115200 bit/s reads the same logic level six times per transmitted bit, so each transmitted byte is decoded as a sequence of six replicated ASCII characters. The mapping that produces "NaN" from the modem's idle / banner frames is:
| Source byte (hex) | ASCII | 6x repetition at 115200 |
|---|---|---|
| 0x4E | N | NNNNNN |
| 0x61 | a | aaaaaa |
| 0x4E | N | NNNNNN |
The three-byte sequence 0x4E 0x61 0x4E thus renders as the visible string "NaN" once each source byte is repeated six times by the over-sampling receiver. The same mechanism explains other reported garbled strings such as "aaa", "NNN", or any repeated block of identical characters.
Required Serial Parameters
| Parameter | Required Value | HyperTerminal / PuTTY Field | Notes |
|---|---|---|---|
| Bit rate | 19200 bit/s | Speed / Bits per second | Modem factory default; do not auto-detect |
| Data bits | 8 | Data bits | Matches the MD720-3 UART word length |
| Parity | None | Parity | Even / odd parity corrupts every frame |
| Stop bits | 1 | Stop bits | 2 stop bits are not supported by the modem |
| Flow control | Hardware (RTS/CTS) | Flow control -> Hardware | Equivalent to "Full duplex" in the Siemens manual |
| Duplex | Full | (implicit in terminal session) | Modem-side parameter; HyperTerminal does not expose it |
| COM port | The port the cable is plugged into | Connect using | Verify in Windows Device Manager |
| Local echo | On (for manual typing) | File -> Properties -> Settings -> ASCII -> "Echo typed characters locally" | Disable when scripting |
| Line ending | CR ("\r") | ASCII Setup -> "Append line feeds to incoming line ends" | Modem expects CR terminator |
The "Full duplex" setting named in the MODEM MD720 manual corresponds to enabling the hardware handshake in the terminal program. HyperTerminal does not expose an explicit "Duplex" field; selecting "Hardware" flow control enables the same RTS/CTS handshake the modem expects.
MD720-3 DB9 Connector Pinout (Male, Front View)
| Pin | EIA/TIA-574 Signal | Direction (Modem ↔ DTE) | Must be Carried by Cable |
|---|---|---|---|
| 1 | DCD - Data Carrier Detect | Modem -> DTE | Required |
| 2 | RXD - Receive Data | Modem -> DTE | Required |
| 3 | TXD - Transmit Data | DTE -> Modem | Required |
| 4 | DTR - Data Terminal Ready | DTE -> Modem | Required |
| 5 | GND - Signal Ground | Common reference | Required |
| 6 | DSR - Data Set Ready | Modem -> DTE | Required |
| 7 | RTS - Request To Send | DTE -> Modem | Required |
| 8 | CTS - Clear To Send | Modem -> DTE | Required |
| 9 | RI - Ring Indicator | Modem -> DTE | Required (carried, not asserted in service mode) |
Inline Pinout Diagram (SVG)
Null-Modem (Crossover) Cable Wiring
The MD720-3 is a DTE device, electrically identical to the PC COM port in this respect. To connect two DTEs back-to-back, the cable must perform the standard null-modem crossover on the data and handshake pairs, plus DTR/DSR-DCD loopbacks that satisfy the modem's "terminal ready" detection. The pin map below is the wiring documented for service access to Siemens SINAUT modems:
| PC DB9 (DTE) Pin | Signal | MD720-3 DB9 (DTE) Pin | Connection Type |
|---|---|---|---|
| 2 RXD | RXD | 3 TXD | Crossover |
| 3 TXD | TXD | 2 RXD | Crossover |
| 5 GND | GND | 5 GND | Straight |
| 7 RTS | RTS | 8 CTS | Crossover |
| 8 CTS | CTS | 7 RTS | Crossover |
| 4 DTR | DTR | 6 DSR + 1 DCD | Y-split to modem |
| 1 DCD | DCD | 4 DTR | Loopback to PC |
| 6 DSR | DSR | 4 DTR | Loopback to PC |
| 9 RI | RI | n/c | Optional, carried through |
Decision Flow: From "No Response" to "OK"
HyperTerminal Configuration Steps
- Open HyperTerminal (Start -> Programs -> Accessories -> Communications -> HyperTerminal). Name the session (e.g. "MD720_Service").
- Set "Connect using" to the COM port the RS-232 cable is plugged into. Verify the assignment in Windows Device Manager -> Ports (COM & LPT).
- Set "Bits per second" to
19200. - Set "Data bits" to
8, "Parity" toNone, "Stop bits" to1. - Set "Flow control" to
Hardware. - Open File -> Properties -> Settings -> ASCII Setup. Tick "Echo typed characters locally" and "Append line feeds to incoming line ends".
- Click OK and connect.
- Type
ATfollowed by Enter. The modem must respond withOKwithin 1 second.
PuTTY Configuration Steps (Modern Replacement for HyperTerminal)
- Open PuTTY, select "Connection type: Serial".
- Set "Serial line" to the COM port (e.g.
COM3) and "Speed" to19200. - In Category -> Connection -> Serial, configure: Data bits = 8, Stop bits = 1, Parity = None, Flow control = RTS/CTS.
- In Category -> Terminal, tick "Implicit CR in every LF" and "Local echo: Force on" for manual typing.
- Click Open and issue
AT.
AT Command Verification Sequence
Once the link is up, run the following commands to confirm modem health. Each line is terminated with Enter (\r). Expected responses are shown after the arrow.
AT <-- OK
ATI <-- Siemens MD720-3
AT+CGMI <-- Siemens
AT+CGMM <-- MD720-3
AT+CGMR <-- firmware version, e.g. 04.10
AT+CSQ <-- +CSQ: 12,99 (RSSI 0-31; 99 = unknown)
AT+CREG? <-- +CREG: 0,1 (registered, home network)
AT+CPIN? <-- +CPIN: READY (SIM accepted)
AT&V <-- active profile dump
If AT does not return OK, repeat the cable and baud rate checks. If AT returns ERROR, the SIM is missing or locked, the antenna is disconnected, or the modem is in firmware-update mode (STAT LED pattern will be a fast red blink).
LED Status Indicators
| LED | Function | Normal State in Terminal Mode | Fault Indication |
|---|---|---|---|
| ON | Power | Steady green | Off -> no DC supply |
| STAT | Operating status | Slow blink green | Red or off -> firmware fault |
| NET | Network registration | Solid green when registered | Blink -> searching; off -> no service |
| SIG | Signal strength (3-bar) | >= 1 bar | All off -> no antenna or no signal |
| DATA | Serial activity | Flicker on TX/RX | Solid -> UART stuck |
Step-by-Step Recovery Procedure
- Power down the MD720-3 and the PC.
- Inspect the RS-232 cable with a continuity tester. Confirm every one of the nine DB9 pins has continuity end-to-end and that the crossover pairs (2-3, 4-6+1, 7-8) match the table above.
- Replace the cable if any pin is open. Recommended: a generic DB9 female-to-female null-modem cable rated for full handshake (e.g. L-com CSNULL9F-9F or equivalent).
- Reconnect the cable. Power up the modem first; wait for the STAT LED to settle to a slow green blink (typically 10-20 s after power-up).
- Launch HyperTerminal on the PC. Apply the 19200 8N1 settings with hardware flow control per the table above.
- Issue
AT. ConfirmOKwithin 1 second. - Issue
AT&Fto reset to factory defaults, thenAT&Wto persist the change. - If the modem still does not respond, swap TX/RX pairs in case a straight-through cable was substituted for a null-modem cable.
Verification Checklist
-
ATreturnsOKwithin 1 second. -
ATIreturns "Siemens MD720-3". -
AT+CSQreports a numeric RSSI (0-31), not 99. -
AT+CREG?returns+CREG: 0,1or+CREG: 0,5(registered, home or roaming). - HyperTerminal echoes typed commands locally; incoming characters appear without manual carriage return.
- Hardware flow control is observed by toggling RTS at the PC; the modem's CTS line must follow.
Troubleshooting Matrix
| Symptom | Likely Cause | Corrective Action |
|---|---|---|
| No response at any baud rate | Cable missing DCD/DTR or TX/RX not crossed | Replace with full 9-pin null-modem cable |
| Garbage at 115200, silence at 19200 | Baud rate mismatch | Lock PC COM port to 19200 |
| "NaN" repeated at 115200 | 19200 bit/s stream oversampled 6x | Switch PC to 19200 8N1 |
| OK returned, but AT+CMGS fails | SIM PIN not entered or no network | Run AT+CPIN="1234"; check AT+CREG?
|
| OK returned, ATD fails with NO CARRIER | No antenna or poor signal | Check antenna; AT+CSQ; relocate |
| Characters appear doubled | Local echo on AND remote echo on | Disable ATE1 with ATE0
|
| One-way communication only | TX or RX pair open | Continuity-test pins 2 and 3 |
| AT returns ERROR | Wrong terminal mode or firmware update in progress | Power cycle; check STAT LED pattern |
| OK returned but no further response | Command terminator missing | Append \r (carriage return) to each AT line |
| OK returned, characters interleaved with garbage | Two terminal sessions on the same COM port | Close other COM port clients (PuTTY, Tera Term, etc.) |
Compatibility with Predecessor SINAUT MD720
The MD720-3 is functionally largely compatible with the predecessor SINAUT MD720 module, as stated in the MD720 operating manual. The serial service port defaults (19200 8N1, hardware flow control) and DB9 pinout are preserved. Existing MD720 service cables can be reused on the MD720-3 without rewiring, provided every pin (including pin 1 and pin 9) is wired straight through. Any deviation from the 9-pin wiring must be corrected per the null-modem map above before the service channel will respond.
Common AT Command Reference
| Command | Function | Typical Response |
|---|---|---|
| AT | Attention / presence check | OK |
| ATE0 / ATE1 | Disable / enable command echo | OK |
| ATQ0 / ATQ1 | Enable / disable result codes | OK (no reply from ATQ1) |
| ATV0 / ATV1 | Numeric / verbose result codes | 0 / OK |
| AT&F | Factory default reset | OK |
| AT&W | Write profile to NVRAM | OK |
| AT+CSQ | Signal quality report | +CSQ: <rssi>,<ber> |
| AT+CREG? | Network registration status | +CREG: <n>,<stat> |
| AT+CPIN? | SIM PIN status | +CPIN: READY |
| AT+CGMI / +CGMM / +CGMR | Manufacturer / model / revision | Siemens / MD720-3 / <fw> |
| AT+COPS? | Operator selection | +COPS: 0,0,"<operator>" |
| AT+CGSN | IMEI | <15-digit IMEI> |
SINAUT ST7 Integration Notes
When the MD720-3 is mounted on a SINAUT ST7 station, the service port is multiplexed with the central station (SINAUT ST7cc) link. Closing HyperTerminal without first sending +++ and waiting for OK may leave the modem in online data mode and break the SCADA connection. The recommended exit sequence is:
+++ <-- wait 1 s --> OK
ATH <-- OK (on-hook)
Configuration changes that affect the GPRS APN, login, or central station IP must be written to the SINAUT project (TIM 4V module) and downloaded via STEP 7 rather than via the AT service port.
Safety and Field Notes
+++ then ATH before restoring online mode. Leaving HyperTerminal open will block the SCADA heartbeat.FAQ
What is the default baud rate of the MD720-3 service port?
19200 bit/s, 8 data bits, no parity, 1 stop bit, with hardware RTS/CTS flow control. The settings must be entered manually in HyperTerminal because auto-detection is not supported.
Why does the modem return "NaN" at 115200 bit/s?
Because the modem actually transmits at 19200 bit/s. Decoding that stream at 115200 bit/s oversamples every bit six times and renders the data as groups of repeated ASCII characters. "NaN" is the visual artefact of 0x4E 0x61 0x4E frames.
Which cable is required between the PC and the MD720-3?
A fully wired DB9 female-to-female null-modem (crossover) cable with all nine EIA/TIA-574 signals connected. 3-wire cables are insufficient because the modem gates its service channel on the DTR/DSR/DCD handshake.
Can the original SINAUT MD720 service cable be reused on the MD720-3?
Yes, provided every pin including pin 1 and pin 9 is wired through. The default serial parameters are unchanged between the two modules.
What is the first command to issue once the modem answers "OK"?
Issue AT&F to revert to factory defaults, then AT&W to persist the change. After that, ATI, AT+CSQ, and AT+CREG? confirm the modem identity, signal strength, and network registration.