D20-KS/D20S-KS/D22-KS/D23-KS – LTE CAT-1 Temperature Sensor User Manual

1. Introduction

1.1 What is D2x-KS LTE CAT-1 Temperature Sensor

The Dragino D2x-KS is a LTE CAT-1 Temperature Sensor for Internet of Things solution. D2x-KS has 1 ~ 3 temperature probes. D2x-KS will convert the Temperature reading to upload the sensor data send to IoT platform via CAT-1 network.

The temperature sensor used in D2x-KS can measure -55°C ~ 125°C with accuracy ±0.5°C (max ±2.0 °C).

D2x-KS supports temperature alarm feature, user can set temperature alarm for instant notice.

D2x-KS has max 3 probes which measure maximum 3 temperature points.

D2x-KS supports different uplink methods including **MQTT, MQTTs, UDP or TCP **for different application requirement, and support uplinks to various IoT Servers.

D2x-KS supports BLE configure and OTA update which make user easy to use.

D2x-KS is powered by 3000mAh Li-ion battery, it is designed for long-term use up to several years(Real-world battery life depends on the use environment, update period and uplink method. Please check related Power Analyze report).

D2x-KS has optional built-in SIM card and default IoT server connection version. Which makes it works with simple configuration.

1.2 Features

CAT-1 Bands: B1/B2/B3/B4/B5/B7/B8/B20/B28/B34/B27/B28/B38/B39/B40/B41/B66
Ultra-low power consumption
1 ~ 3 External Temperature Probes
Measure range -55°C ~ 125°C
Temperature alarm
Multiply Sampling and one uplink
Uplink via MQTT, MQTTs, TCP or UDP
Support Bluetooth v5.1 remote configure and update firmware
Uplink on periodically
Downlink to change configure
Charging Pad + 1000mAh Li-ion Battery (D2x-KN)
Solar panel + 3000mAh Li-ion Battery (D2x-KS)
Nano SIM card slot for CAT-1 SIM

1.3 Specification

Common DC Characteristics:

Supply Voltage: 2.6v ~ 3.6v
Operating Temperature: -40 ~ 85°C

Temperature Sensor:

Dallas DS18B20
Range: -55 to + 125°C
Accuracy ±0.5°C (max ±2.0 °C)

NB-IoT Spec:

NB-IoT Module: EG800-NGFF

Support Bands:

EU:

For European, Asia, Austrial, LTE-FDD: B1/3/5/7/8/20/28

B1 @FDD: 2100MHz
B3 @FDD: 1800MHz
B5 @FDD: 850MHz
B7 @FDD: 2600MHz
B8 @FDD: 900MHz
B20 @FDD: 800MHz
B28 @FDD: 700MHz

LA:

For Latin America, LTE-FDD: B2/3/4/5/7/8/28/66

B2 @FDD: 1900MHz
B3 @FDD: 1800MHz
B4 @FDD: 1700/2100MHz
B5 @FDD: 850MHz
B7 @FDD: 2600MHz
B8 @FDD: 900MHz
B28 @FDD: 700MHz
B66 @FDD: 1700/2100MHz

**NA: **

For North America, LTE-FDD: B2/4/5/12/13/66

B2 @FDD: 1900MHz
B4 @FDD: 1700/2100MHz
B5 @FDD: 850MHz
B12 @H-FDD: 720MHz
B13 @H-FDD: 740MHz
B66 @FDD: 1700/2100MHz

Battery:

Li-ion Battery
Capacity: 3000mAh & 1000mAh
Self Discharge: <1% / Year @ 25°C
Max continuously current: 130mA
Max boost current: 2A, 1 second

Power Consumption

STOP Mode: 10uA @ 3.3v
Max transmit power: 350mA@3.3v

1.4 Applications

Smart Buildings & Home Automation
Logistics and Supply Chain Management
Smart Metering
Smart Agriculture
Smart Cities
Smart Factory

1.5 Sleep mode and working mode

**Deep Sleep Mode: **Sensor doesn't have any LTE CAT-1 activate. This mode is used for storage and shipping to save battery life.

Working Mode: In this mode, Sensor will work as NB-IoT Sensor to Join NB-IoT network and send out sensor data to server. Between each sampling/tx/rx periodically, sensor will be in IDLE mode), in IDLE mode, sensor has the same power consumption as Deep Sleep mode.

1.6 Button & LEDs

Behavior on ACT	Function	Action
1~3s	Send an uplink	If sensor has already attached to LTE CAT-1 network, sensor will send an uplink packet, blue led will blink once. Meanwhile, BLE module will be active and user can connect via BLE to configure device.
>3s	Active Device	Green led will fast blink 5 times, device will enter OTA mode for 3 seconds. And then start to attach LTE CAT-1 network. Once sensor is active, BLE module will be active and user can connect via BLE to configure device, no matter if device attach LTE CAT-1 network or not.
x5	Deactivate Device	Red led will solid on for 5 seconds. Means device is in Deep Sleep Mode.

Note: When the device is executing a program, the buttons may become invalid. It is best to press the buttons after the device has completed the program execution.

1.7 BLE connection

D2x-KS support BLE remote configure and firmware update.

BLE can be used to configure the parameter of sensor or see the console output from sensor. BLE will be only activate on below case:

Press button to send an uplink
Press button to active device.
Device Power on or reset.

If there is no activity connection on BLE in 60 seconds, sensor will shut down BLE module to enter low power mode.

1.8 Pin Definitions , Switch & SIM Direction

D2x-KS use the mother board from D2x-KS which as below.

1.8.1 Jumper JP2

Power on Device when put this jumper.

1.8.2 BOOT MODE / SW1

1) ISP: upgrade mode, device won't have any signal in this mode. but ready for upgrade firmware. LED won't work. Firmware won't run.

2) Flash: work mode, device starts to work and send out console output for further debug

1.8.3 Reset Button

Press to reboot the device.

1.8.4 SIM Card Direction

See this link. How to insert SIM Card.

1.9 Hardware Variant

Model	Photo	Probe Info
D20-KS&D20-KN		1 x DS18B20 Probe Cable Length : 2 meters
D20S-KS&D20S-KN		1 x DS18B20 Probe (Suitable for bury in soil) Material: TPE, Cable Length: 2meters
D22-KS&D22-KS		2 x DS18B20 Probes Cable lengths total 1.5meters per probe Cable Drawing: See This Link
D23-KS&D23-KS		3 x DS18B20 Probes Cable lengths total 1.5meters per probe Cable Drawing: See This Link

2. Use D2x-KS to communicate with IoT Server

2.1 Send data to IoT server via LTE CAT-1 network

The D2x-KS is equipped with a NB-IoT module, the pre-loaded firmware in D2x-KS will get environment data from sensors and send the value to local NB-IoT network via the NB-IoT module. The NB-IoT network will forward this value to IoT server via the protocol defined by D2x-KS.

Below shows the network structure:

There are two version: -GE and -1T version of D2x-KS.

GE Version: This version doesn't include SIM card or point to any IoT server. User needs to use AT Commands to configure below two steps to set D2x-KS send data to IoT server.

Install NB-IoT SIM card and configure APN. See instruction of Attach Network.
Set up sensor to point to IoT Server. See instruction of Configure to Connect Different Servers.

Below shows result of different server as a glance.

Servers	Dash Board	Comments
Node-Red
DataCake
Tago.IO
General UDP	Raw Payload. Need Developer to design Dash Board
General MQTT	Raw Payload. Need Developer to design Dash Board
ThingSpeak
ThingsBoard

1T Version: This version has 1NCE SIM card pre-installed and configure to send value to ThingsEye. User Just need to select the sensor type in ThingsEyeand Activate D2x-KS and user will be able to see data in ThingsEye. See here for ThingsEye Config Instruction.

2.2 Payload Types

To meet different server requirement, D2x-KS supports different payload type.

Includes:

User can specify the payload type when choose the connection protocol. Example:

AT+PRO=2,0 // Use UDP Connection & hex Payload

AT+PRO=2,5 // Use UDP Connection & Json Payload

AT+PRO=3,0 // Use MQTT Connection & hex Payload

AT+PRO=3,5 // Use MQTT Connection & Json Payload

AT+PRO=4,0 // Use TCP Connection & hex Payload

**AT+PRO=4,5 ** // Use TCP Connection & Json Payload

2.2.1 General Json Format(Type=5)

**(D23-KS)**This is the General Json Format. As below:

{"IMEI":"867586073737165","IMSI":"454312901016115","Model":"D23-KS","temperature1":20.1,"temperature2":20.2,"temperature3":20.3,"interrupt":0,"interrupt_level":0,"battery":3.34,"signal":24,"time":"2026-01-08T02:38:14Z","1":[20.3,20.2,20.2,"2026-01-08T02:30:06Z"],"2":[19.8,19.8,19.9,"2026-01-08T02:15:06Z"],"3":[19.9,20.0,20.0,"2026-01-08T01:58:52Z"],"4":[19.6,19.7,19.6,"2026-01-08T01:43:52Z"],"5":[19.2,19.3,19.3,"2026-01-08T01:28:52Z"],"6":[18.7,18.8,18.7,"2026-01-08T01:13:52Z"],"7":[18.3,18.3,18.2,"2026-01-08T00:58:52Z"],"8":[19.2,19.3,19.1,"2026-01-08T00:43:52Z"]}

Notice, from above payload:

Temperature1 , Temperature2, Temperature3, Interrupt, Interrupt_level, Battery, Signal are the value at uplink time.
Json entry 1 ~ 8 are the last 1 ~ 8 sampling data as specify by **AT+CLOCKLOG=1,65535,15,8 ** Command. Each entry includes (from left to right): Temperature1, Temperature2, Temperature3, Sampling time.

2.2.2 HEX format Payload(Type=0)

This is the HEX Format. As below:

f867586073737165f45431290101611549640d021901000000000000cb00cb00cb695f19c700cb00cb00cb695f194c00ca00ca00cb695f191000c900c900ca695f18d400cb00ca00ca695f16ae00c600c600c7695f132a00c700c800c8695f0f5c00c400c500c4695f0bd800c000c100c1695f0854

If we use the MQTT client to subscribe to this MQTT topic, we can see the following information when the NB sensor uplink data.

Version:

These bytes include the hardware and software version.

Higher byte: Specify Sensor Model: 0x49 for D2x-KS

Lower byte: Specify the software version: 0x64=100, means firmware version 1.0.0

BAT (Battery Info):

Ex1: 0x0D02 = 3340mV

Signal Strength:

CAT-1 Network signal Strength.

Ex1: 0x19 = 25

0 -113dBm or less

1 -111dBm

2...30 -109dBm... -53dBm

31 -51dBm or greater

99 Not known or not detectable

ADC:

Ex1: 0x0000=0 /The error value is 50mV.

Ex2: 0x0b94 =2964= 2964.00mv

PA4_level:

Level of PA4 pin. (0: Low level 1: High level)

Interrupt:

This data field shows if this packet is generated by interrupt or not.

Example:

If byte[0]&0x01=0x00 : Normal uplink packet.

If byte[0]&0x01=0x01 : Interrupt Uplink Packet.

Interrupt_level:

This byte shows whether the interrupt is triggered by a high or low level.

Ex1: 0x00 Interrupt triggered by falling edge (low level)

**Ex2: **0x01 Interrupt triggered by rising edge (high level)

**Temperature1: **

If payload is: 00CBH: (00CB & 8000 == 0), temp = 00CBH /10 = 20.3 degree

If payload is: FF3FH : (FF3F & 8000 == 1) , temp = (FF3FH - 65536)/10 = -19.3 degrees.

(FF3F & 8000: Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

If payload is: FFFF(H): (FFFF & 8000 == 1), Fixed display temp = -409.5℃, Indicates that the DS18B20 sensor is not connected, or no data.

**Temperature2: **

If payload is: 00CBH: (00CB & 8000 == 0), temp = 00CBH /10 = 20.3 degree

If payload is: FF3FH : (FF3F & 8000 == 1) , temp = (FF3FH - 65536)/10 = -19.3 degrees.

(FF3F & 8000: Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

If payload is: FFFF(H): (FFFF & 8000 == 1), Fixed display temp = -409.5℃, Indicates that the DS18B20 sensor is not connected, or no data.

**Temperature3: **

If payload is: 00CBH: (00CB & 8000 == 0), temp = 00CBH /10 = 20.3 degree

If payload is: FF3FH : (FF3F & 8000 == 1) , temp = (FF3FH - 65536)/10 = -19.3 degrees.

(FF3F & 8000: Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

If payload is: FFFF(H): (FFFF & 8000 == 1), Fixed display temp = -409.5℃, Indicates that the DS18B20 sensor is not connected, or no data.

**TimeStamp **

Unit TimeStamp Example: 695f19c7(H) = 1767840199(D)

Put the decimal value into this link(https://www.epochconverter.com)) to get the time.

2.2.3 ThingsBoard Payload(Type=3)

Type3 payload special design for ThingsBoard, it will also configure other default server to ThingsBoard.

{ "topic": "002_CB", "payload": { "IMEI": "867586073737165", "IMSI": "454312901016115", "Model": "D23-KS", "temperature1": 20.3, "temperature2": 20.4, "temperature3": 20.4, "interrupt": 0, "interrupt_level": 0, "battery": 3.3, "signal": 29, "time": "2026-01-08T03:18:21Z", "1": [20.1,20.3,20.5,"2026-01-08T03:16:21Z"], "2": [20.1,20.3,20.5,"2026-01-08T03:15:21Z"], "3": [20.1,20.4,20.5,"2026-01-08T03:14:21Z"], "4": [20.3,20.5,20.6,"2026-01-08T03:13:21Z"], "5": [20.3,20.5,20.6,"2026-01-08T03:12:21Z"], "6": [20.3,20.5,20.6,"2026-01-08T03:11:21Z"], "7": [20.3,20.6,20.8,"2026-01-08T03:10:21Z"], "8": [20.5,20.7,20.8,"2026-01-08T03:09:21Z"] } }

2.2.4 ThingSpeak Payload(Type=1)

This payload meets ThingSpeak platform requirement. It includes only four fields. Form 1~5 are:

Temperature1, Temperature 2, Temperature 3,Battery & Signal. This payload type only valid for ThingsSpeak Platform

As below:

field1=temp1 value&field2=temp2 value&field3=temp3 value&field4=Battery value&field5=Signal value

2.3 Uplink Payload

D2x-KS will uplink payload via NB-IoT with below payload format:

Uplink payload includes in total 29 bytes.

Size(bytes)	8	2	2	1	1	2	1	1	1	2	2	2	4
Value	f+IMEI	Ver	BAT	Signal Strength	Mod	ADC	PA4_level	Interrupt	Interrupt _level	Temp1 (PC13)	Temp2 (PB9)	Temp3 (PB8)	Timestamp

If the cache upload mechanism is turned on, you will receive the payload shown in the figure below.


Frame header	Frame data(1)	Frame data(2)	F…	Frame data(X)

Decode corresponding probe color

D20:

Red <--> C1

D22:

White <--> C1 , Red <--> C2

D23:

White <-->C1 , Red <--> C2 , Black <--> C3

Temperature RED or Temperature White

This point to the Red probe in D20-CB or the probe of D22-KS/D23-KS White

When the cache upload mechanism is turned on and the sensor is not identified, the uploaded real-time data is FFFF and the uploaded historical data is F001.

Example:

Real-time data:

If payload is: 0105H: (0105 & 8000 == 0), temp = 0105H /10 = 26.1 degree

If payload is: FF3FH : (FF3F & 8000 == 1) , temp = (FF3FH - 65536)/10 = -19.3 degrees.

(FF3F & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

When no sensor is identified,payload is: FFFFH : (FFFF&8000 == 1),temp = (FFFFH-65536)/10=-409.5 degrees.

(FF3F & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

Caching data:

If payload is: 0109H: (0105 & 8000 == 0), temp = 0105H /10 = 26.5 degree

if payload is: F001H: (F001&8000 == 1),temp = (F001-65536)/10 = -409.5 degrees. // If a sensor is not connected, the value will be 0xF001.

(F001 & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

Temperature White

This point to the Red probe in D22-KS/D23-KS.

When the cache upload mechanism is turned on and the sensor is not identified, the uploaded real-time data is FFFF and the uploaded historical data is F001.

Example:

Real-time data:

If payload is: 0105H: (0105 & 8000 == 0), temp = 0105H /10 = 26.1 degree

If payload is: FF3FH : (FF3F & 8000 == 1) , temp = (FF3FH - 65536)/10 = -19.3 degrees.

(FF3F & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

When no sensor is identified,payload is: FFFFH : (FFFF&8000 == 1),temp = (FFFFH-65536)/10=-409.5 degrees.

(FF3F & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

Caching data:

If payload is: 0109H: (0105 & 8000 == 0), temp = 0105H /10 = 26.5 degree

if payload is: F001H: (F001&8000 == 1),temp = (F001-65536)/10 = -409.5 degrees. // If a sensor is not connected, the value will be 0xF001.

(F001 & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

Temperature Black

This point to the BLACK probe in D23-KS

When the cache upload mechanism is turned on and the sensor is not identified, the uploaded real-time data is FFFF and the uploaded historical data is F001.

Example:

Real-time data:

If payload is: 0105H: (0105 & 8000 == 0), temp = 0105H /10 = 26.1 degree

If payload is: FF3FH : (FF3F & 8000 == 1) , temp = (FF3FH - 65536)/10 = -19.3 degrees.

(FF3F & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

When no sensor is identified,payload is: FFFFH : (FFFF & 8000 == 1),temp = (FFFFH - 65536)/10=-409.5 degrees.

(FF3F & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

Caching data:

If payload is: 0109H: (0105 & 8000 == 0), temp = 0105H /10 = 26.5 degree

if payload is: F001H: (F001&8000 == 1),temp = (F001-65536)/10 = -409.5 degrees. // If a sensor is not connected, the value will be 0xF001.

(F001 & 8000：Judge whether the highest bit is 1, when the highest bit is 1, it is negative)

3. Configure D2x-KS

3.1 Configure Methods

D2x-KS supports below configure method:

AT Command via Bluetooth Connection (Recommended): BLE Configure Instruction.
AT Command via UART Connection : See UART Connection.

3.2 Serial Access Password

After the Bluetooth or UART connection is successful, use the Serial Access Password to enter the AT command window.

The label on the box of the node will print the initial password: AT+PIN=xxxxxx, and directly use the six-digit password to access the AT instruction window.

If you need to change the password, use AT+PWORD=xxxxxx (6 characters), -KS&KN nodes only support lowercase letters.

Note: After entering the command, you need to add a line break, and you can also set automatic line breaks in the Bluetooth tool or UART connection tool.

3.3 AT Commands Set

AT+<CMD>? : Help on <CMD>

AT+<CMD> : Run <CMD>

AT+<CMD>=<value> : Set the value

AT+<CMD>=? : Get the value

General Commands

AT : Attention

AT? : Short Help

AT+MODEL : Get module information

AT+CFGMOD : Working mode selection

AT+DEUI : Get or set the Device ID

AT+CFG : Print all settings

AT+SERVADDR: Get or Set the Server address

AT+TDC : Get or set the application data transmission interval in s

AT+INTMOD : Get or Set the trigger interrupt mode (0:input,1:falling or rising,2:falling,3:rising)

AT+APN : Get or set the APN

AT+5VT : Get or Set extend the time of 5V power

AT+PRO : Get or Set usage agreement (1:COAP,2:UDP,3:MQTT,4:TCP)

AT+RXDL : Get or Set the receiving time

AT+EXT : Get or Set Count value

AT+TEMPALARM1:Get or Set alarm of temp1

AT+TEMPALARM2:Get or Set alarm of temp2

AT+TEMPALARM3:Get or Set alarm of temp3

AT+GETSENSORVALUE : Returns the current sensor measurement

AT+DNSCFG : Get or Set DNS Server

AT+CSQTIME : Get or Set the time to join the network

AT+GDNS : Get or Set the DNS

AT+TLSMOD : Get or Set the TLS mode

AT+SLEEP : Get or Set the sleep mode

AT+MQOS : Set the QoS level of MQTT

AT+IPTYPE : Set the IPv4 or IPv6

AT+QSW : Power on and power off BG95 module

AT+GETLOG : Print serial port logs

AT+CLOCKLOG: Get or set SHT record time

AT+QBAND: Get or set Frequency Band

MQTT Management

AT+CLIENT : Get or Set the MQTT clientID

AT+UNAME : Get or Set the MQTT Username

AT+PWD : Get or Set the MQTT password

AT+PUBTOPIC: Get or set MQTT publishing topic

AT+SUBTOPIC: Get or set MQTT subscription topic

Information

AT+FDR1 : Reset parameters to factory default values except for passwords

AT+FDR : Reset Parameters to Factory Default

AT+PWORD : Get or set the System password

AT+CDP : Read or Clear cached data

AT+LDATA : Get the last upload data

AT+PDTA: Print the sector data from start page to stop page

AT+PLDTA: Print the last few sets of data

AT+CLRDTA: Clear the storage, record position back to 1st

AT+REDPT: Get or Set the function of reconnecting the network to send data

AT+NTP: Get or set NTP Server

ATZ : Trig a reset of the MCU

3.4 Test Uplink and Change Update Interval

By default, Sensor will send uplinks every 2 hours.

User can use below commands to change the uplink interval.

AT Command: AT+TDC

Example: AT+TDC=600 // Set Update Interval to 600 seconds

Downlink Commands: 0x01

Format: Command Code (0x01) followed by 3 bytes.

Example: 12 hours= 43200 seconds 43200(D)=0xA8C0(H)

                Downlink Payload: `01 00 A8 C0`          // AT+TDC=43200, Set Update Interval to 12 hours.

Note: User can also push the button for more than 1 seconds to activate an uplink.

3.5 Set the receiving time

Feature: Extend the receiving time

AT Command: AT+RXDL

Example: AT+RXDL=1000 // Set the receiving time delay to 1000ms

Downlink Commands: 0x03

Format: Command Code (0x03) followed by 3 bytes.

Example: Downlink Payload: 03 00 03 E8// AT+RXDL=1000

3.6 Reset

Feature: Trig a reset of the MCU.

AT Command: ATZ

Downlink Commands: 0x04FF

3.7 +5V

Feature: Set extend the time of 5V power.

AT Command: AT+5VT

Example: AT+5VT=2000 //Set extend the time of 5V power to 2000 ms

Downlink Commands: 0x05

Format: Command Code (0x05) followed by 3 bytes.

Example: Downlink Payload: 05 00 07 D0// AT+5VT=2000

3.8 Trigger an uplink by external interrupt

D2x-CB has an external trigger interrupt function. Users can use the PB15 pin to trigger the upload of data packets.

Note: Starting from firmware v1.3.3, the interrupt pin has been changed from pB15 to pA8.

AT command:

**AT+INTMOD ** // Set the trigger interrupt mode
**AT+INTMOD=0 ** // Disable Interrupt
**AT+INTMOD=1 ** // Trigger by rising and falling edge
**AT+INTMOD=2 ** // Trigger by falling edge
**AT+INTMOD=3 ** // Trigger by rising edge

Downlink Commands: 0x06

Format: Command Code (0x06) followed by 3 bytes.

Example1: Downlink Payload: 06 00 00 01//AT+INTMOD=1

Example2: Downlink Payload: 06 00 00 03//AT+INTMOD=3

3.9 Set the QoS level

This command is used to set the QoS level of MQTT.

AT command:

**AT+MQOS=xx **// 0~2

Downlink command: 0x07

Format: Command Code (0x07) followed by 1 byte.

Ex1: Downlink payload: 0x0700 // AT+MQOS=0

Ex2: Downlink payload: 0x0701 // AT+MQOS=1

3.10 Clock logging

Sometimes when we deploy lots of end nodes in field. We want all sensors sample data at the same time, and upload these data together for analyze. In such case, we can use clock loging feature.

We can use this command to set the start time of data recording and the time interval to meet the requirements of the specific collection time of data.

AT command: AT+CLOCKLOG=a,b,c,d

a: 0: Disable Clock logging. ** 1: **Enable Clock Logging

**b: **Specify First sampling start second: range **(0 ~ 3599, 65535) ** // **Note: **If parameter b is set to 65535, the log period starts after the node accesses the network and sends packets.

**c: **Specify the sampling interval: range (0 ~ 255 minutes)

**d: **How many entries should be uplink on every TDC (max 32)

Note: To disable clock recording, set the following parameters: AT+CLOCKLOG=1,65535,0,0

Example:

AT+CLOCKLOG=1,65535,1,5

After the node sends the first packet, data is recorded to the memory at intervals of 1 minute. For each TDC uplink, the uplink load will include: battery information + the last 5 memory records (payload + timestamp).

Note: Users need to synchronize the server time before configuring this command. If the server time is not synchronized before this command is configured, the command takes effect only after the node is reset.

Downlink command: 0x08

Format: Command Code (0x08) followed by 5 bytes.

Example 1: Downlink Payload:** 08 01 FFFF 0F 08** // Set SHT record time: AT+CLOCKLOG=1,65535,15,8
Example 2: Downlink Payload:** 08 01 04B0 0F 08** // Set SHT record time: AT+CLOCKLOG=1,1200,15,8

Note: When entering the downlink payload, there must be no Spaces between bytes.

3.11 Datalog Function

Unix TimeStamp

D23-KS uses Unix TimeStamp format based on

User can get this time from link: https://www.epochconverter.com/ :

Below is the converter example

So, 1725875962 means that the current time is Monday, September 9, 2024 at 9:59 AM.

Poll sensor value

User can poll sensor value based on timestamps from the server. Below is the downlink command.

1 byte	4 bytes	4 bytes
31	Timestamp start	Timestamp end

Timestamp start and Timestamp end use Unix TimeStamp format as mentioned above. Devices will reply with all data log during this time period.

For example, downlink command 31 695F 517C 695F 535C

Is to check 2026/1/8 06:41:00 to 2026/1/8 06:49:00's data

Datalog Uplink payload

The Datalog poll reply uplink will use below payload format.

Retrieval data payload:

Size(bytes)	2	2	2	4
Value	Temp1	Temp2	Temp3	Timestamp

**Function Description: **This feature is only used when the clock logging feature is turned on. one uplink packet can send 64 groups of stored data totaling 512 bytes, can only store up to 1504 sets of data.

Example(For MQTT.fx):

If user sends below downlink command:

Where : Start time: 695F517C = time 26/1/8 06:41:00

         Stop time: 695F535C = time 26/1/8 06:49:00

D23-KS will uplink this payload.

0x00d700d700d6695f51b400d700d700d6695f51f000d700d700d6695f522c00d700d700d6695f526800d700d700d6695f52a400d700d700d7695f52e000d700d700d7695f531c00d800d700d7695f5358

Temp1=0x00D7/10=21.5℃

Temp2=0x00D7/10=21.5℃

Temp3=0x00D6/10=21.4℃

Unix time is 0x695f51b4 =1767854516s=26/1/8 06:41:00

Datalog Retransmission Function

Description:

The D20-KS supports data retransmission after offline recovery. When the device is offline, it continues to store data locally based on the sampling interval configured by AT+CLOCKLOG. Once the network is reconnected, the device will retransmit the stored data, with a maximum capacity of 1504 data sets.

AT Command:

AT+REDPT – Get or Set the data retransmission function after reconnecting to the network.

Command Example	Function	Response
AT+REDPT=?	Query current retransmission status	0 (default) ok
AT+REDPT=0	Disable retransmission	ok
AT+REDPT=1	Enable retransmission (max 1504 sets)	ok

**Note: **

Retransmission applies only to data stored during offline periods.
The retransmitted data format is consistent with the Datalog Uplink payload format.

**Downlink Command: **

No downlink commands for this feature.

3.12 Set the TLS mode

Refer to this link (MQTT Connection to send data to Tago.io)to use the TLS mode.

AT Command: AT+TLSMOD

**Example 1: ** AT+TLSMOD=0,0 //Disable TLS Mode.

Example 2: AT+TLSMOD=1,0 //No authentication

                 AT+TLSMOD=1,1   //Perform server authentication

                 AT+TLSMOD=1,2   //Perform server and client authentication if requested by the remote server

Downlink command: 0x09

Format: Command Code (0x09) followed by 2 bytes.

Example1: Downlink Payload: 09 00 00//AT+TLSMOD=0,0

Example2: Downlink Payload: 09 01 02//AT+TLSMOD=1,2

3.13 Set the search network time

Feature: Get or Set the time to join the network(unit: minutes).

AT Command: AT+CSQTIME

Example: AT+CSQTIME=10 //Set the search time to 10 minutes.

Downlink command: 0x13

Format: Command Code (0x13) followed by 1 byte.

Example: Downlink Payload: 13 0A//AT+CSQTIME=10

3.14 Temperature Alarm Feature

D2x-CB work flow with Alarm feature.

Set Alarm Thredhold

Set for Separate Probes:

AT+TEMPALARM1 index=min,max

Index:

1: Temperature_Red
2: Temperature_White
3: Temperature_Black

min,max:

When min=max, Alarm is not enabled
When min=0, and max≠0, Alarm trigger when higher than max
When min≠0, and max=0, Alarm trigger when lower than min
When min≠0 and max≠0, Alarm trigger when higher than max or lower than min

Downlink command: 0x0A

Format: Command Code (0x0A) followed by 6 bytes.

The first and second bytes after 0x0A are min and max for temperature 1, the third and fourth bytes are min and max for temperature 2, and the fifth and sixth bytes are min and max for temperature 3.

Example:

AT+TEMPALARM1=-10,30 // Temperature 1 alarm when < -10 or higher than 30.

AT+TEMPALARM2=20,20 // The alarm for temperature 2 is disabled. --> Downlink payload: 0A F6 1E 14 14 00 23

AT+TEMPALARM3=0,35 // Temperature 3 alarm when higher than 30.

For the negative temperature x represented in the downlink payload, it can be calculated as follows: 256+x

Ex1: -10℃ 256+(-10)= 246(D) =0xF6(H)

Ex2: -25℃ 256+(-25)= 231(D) =0xE7(H)

3.15 Set the IPv4 or IPv6

This command is used to set IP version.

AT command:

**AT+IPTYPE=1 **// IPv4
**AT+IPTYPE=2 **// IPv6

3.16 Factory data reset

Two different restore factory Settings configurations.

AT command:

**AT+FDR **// Reset Parameters to Factory Default.
**AT+FDR1 **// Reset parameters to factory default values except for passwords.

3.17 Power on / power off EG800-NGFF module

This command is used to power on and power off EG800-NGFF module.

AT command: AT+QSW

The module is powered on after the command is sent for the first time, and powered off after the command is sent again.

3.18 Example Query saved historical records

AT command: AT+CDP

This command can be used to search the saved history, recording up to 32 groups of data, each group of historical data contains a maximum of 100 bytes.

3.19 Uplink log query

AT command: AT+GETLOG

This command can be used to query upstream logs of data packets.

3.20 Set the downlink debugging mode

Feature: Enable or disable downlink debugging mode. (Since TE platform update, the platform version selection is no longer needed; only downlink debugging can be toggled.)

AT command: AT+DOWNTE

Command Example	Function/Parameters	Response/Explanation
AT+DOWNTE=?	Get current Settings	0,0 (default) OK
AT+DOWNTE=0,a	a: Enable/Disable downlink debugging	0: Disable downlink debugging mode. 1: Enable downlink debugging mode (users can view original downlink messages).

(Note: The first parameter is fixed to 0 and only the second parameter is configurable.)

Example:

AT+DOWNTE=0,1 → Enable downlink debugging mode.
AT+DOWNTE=0,0 → Disable downlink debugging mode.

**Downlink Command: **

No downlink commands for feature

3.21 Domain name resolution settings

Feature: Set static DNS resolution IP address.

AT command: AT+BKDNS

Command Example	Function/Parameters	Response/Explanation
AT+BKDNS=?	Get current Settings	1,0,NULL (default) OK
AT+BKDNS=a,b,c	a: Enable/Disable static DNS resolution.	0: Disable static DNS resolution 1: Enable static DNS resolution. The ip address will be saved after the domain name is resolved, if the next domain name resolution fails, the last saved ip address will be used.
b: Meaningless.	Set to 0.
c: Set the IP address manually.	The format is the same as AT+SERVADDR. If domain name resolution fails, this ip address will be used directly, if domain name resolution succeeds, parameter c will be updated to the successfully resolved IP address.

Example:

AT+BKDNS=0,0,NULL // Disable static DNS resolution.
AT+BKDNS=1,0,NULL // Enable static DNS resolution.
AT+BKDNS=1,0,3.69.98.183,1883 // Enable static DNS resolution, if domain name resolution succeeds, the node uses the ip address successfully resolved and saves it to parameter c. If the domain name resolution fails, use the manually set ip address: 3.69.98.183 for communication.

**Downlink Command: **

No downlink commands for feature.

3.22 Print last few data entries

Feature: Print the last few data entries

AT command: AT+PLDTA

Command Example	Response
AT+PLDTA=5 Print last 5 entries	Stop Tx events when read sensor data 1 26/1/8 06:41:56 temp1=21.5 temp2=21.5 temp3=21.4 2 26/1/8 06:42:56 temp1=21.5 temp2=21.5 temp3=21.4 3 26/1/8 06:43:56 temp1=21.5 temp2=21.5 temp3=21.4 4 26/1/8 06:44:56 temp1=21.5 temp2=21.5 temp3=21.4 5 26/1/8 06:45:56 temp1=21.5 temp2=21.5 temp3=21.4 6 26/1/8 06:46:56 temp1=21.5 temp2=21.5 temp3=21.5 7 26/1/8 06:47:56 temp1=21.5 temp2=21.5 temp3=21.5 8 26/1/8 06:48:56 temp1=21.6 temp2=21.5 temp3=21.5 Start Tx events OK

Command Example

Response

AT+PLDTA=5
Print last 5 entries

Stop Tx events when read sensor data
1 26/1/8 06:41:56 temp1=21.5 temp2=21.5 temp3=21.4
2 26/1/8 06:42:56 temp1=21.5 temp2=21.5 temp3=21.4
3 26/1/8 06:43:56 temp1=21.5 temp2=21.5 temp3=21.4
4 26/1/8 06:44:56 temp1=21.5 temp2=21.5 temp3=21.4
5 26/1/8 06:45:56 temp1=21.5 temp2=21.5 temp3=21.4
6 26/1/8 06:46:56 temp1=21.5 temp2=21.5 temp3=21.5
7 26/1/8 06:47:56 temp1=21.5 temp2=21.5 temp3=21.5
8 26/1/8 06:48:56 temp1=21.6 temp2=21.5 temp3=21.5
Start Tx events
OK

**Downlink Command: **

No downlink commands for this feature.

3.23 Print data entries base on page

Feature: Print the sector data from start page to stop page.

AT command: AT+PDTA

Command Example	Response
AT+PDTA=1,1 Print page 1 to 1	Stop Tx events when read sensor data 8028B80 26/1/8 06:11:40 temp1=-409.5 temp2=-409.5 temp3=-409.5 8028B90 26/1/8 06:14:44 temp1=-409.5 temp2=-409.5 temp3=-409.5 8028BA0 26/1/8 06:15:44 temp1=-409.5 temp2=-409.5 temp3=-409.5 8028BB0 26/1/8 06:16:46 temp1=-409.5 temp2=-409.5 temp3=-409.5 8028BC0 26/1/8 06:17:44 temp1=-409.5 temp2=-409.5 temp3=-409.5 8028BD0 26/1/8 06:18:46 temp1=-409.5 temp2=-409.5 temp3=-409.5 8028BE0 26/1/8 06:19:44 temp1=-409.5 temp2=-409.5 temp3=-409.5 8028BF0 26/1/8 06:22:43 temp1=21.3 temp2=21.3 temp3=21.3 Start Tx events OK

Command Example

Response

AT+PDTA=1,1
Print page 1 to 1

Stop Tx events when read sensor data
8028B80 26/1/8 06:11:40 temp1=-409.5 temp2=-409.5 temp3=-409.5
8028B90 26/1/8 06:14:44 temp1=-409.5 temp2=-409.5 temp3=-409.5
8028BA0 26/1/8 06:15:44 temp1=-409.5 temp2=-409.5 temp3=-409.5
8028BB0 26/1/8 06:16:46 temp1=-409.5 temp2=-409.5 temp3=-409.5
8028BC0 26/1/8 06:17:44 temp1=-409.5 temp2=-409.5 temp3=-409.5
8028BD0 26/1/8 06:18:46 temp1=-409.5 temp2=-409.5 temp3=-409.5
8028BE0 26/1/8 06:19:44 temp1=-409.5 temp2=-409.5 temp3=-409.5
8028BF0 26/1/8 06:22:43 temp1=21.3 temp2=21.3 temp3=21.3
Start Tx events
OK

**Downlink Command: **

No downlink commands for this feature.

3.24 Clear Flash Record

Feature: Clear flash storage for data log feature.

AT command: AT+CLRDTA

Command Example	Function	Response
AT+CLRDTA	Clear date record	Stop Tx events,Please wait for the erase to complete Clear all stored sensor data... Start Tx events OK

Downlink Command: 0x32

Example: 0x32 00 // Same as AT+CLRDTA

4. Battery & Power Consumption

The D2x-KS uses a 3000mAh lithium battery and a solar panel. For battery information and details on how to replace the battery, see the following links:

AI Calculation Battery Life Instructions

5. Firmware update

User can change device firmware to:

Update with new features.
Fix bugs.

Firmware and changelog can be downloaded from : Firmware download link

Methods to Update Firmware:

(Recommended way) OTA firmware update via BLE: Instruction.
Update through UART TTL interface : Instruction.

6. FAQ

6.1 How can I access the EG800-NGFF AT Commands?

User can access to EG800-NGFF directly and send AT Commands.

See EG800-NGFF AT Command set

6.2 General Manual for -KN , -KS models

Users can follow the instructions in this link to see how to configure to connect to different servers.

6.3 Why is there no LED response when I press the button on the solar panel model?

If the LED does not light up when you press the button, it may be because the battery has entered protection mode.

Solution: To reactivate the battery, simply expose the solar panel to direct sunlight. For more details, please refer to: Battery Protection State (Apply to Solar Panel + Li-ion battery)

7. Order Info

Part Number: D20-KS-XX / D20S-KS (designed for used in Soil or Road)/D22-KS-XX / D23-KS-XX

XX:

GE: General version ( Exclude SIM card)
1T: with 1NCE* 10 years 500MB SIM card and Pre-configure to ThingsEye server

8. Packing Info

Package Includes:

D2x-KS LTE CAT-1 Temperature Sensor x 1
External antenna x 1

Dimension and weight:

Device Size: cm
Device Weight: g
Package Size / pcs : cm
Weight / pcs : g

9. Support

Support is provided Monday to Friday, from 09:00 to 18:00 GMT+8. Due to different timezones we cannot offer live support. However, your questions will be answered as soon as possible in the before-mentioned schedule.
Provide as much information as possible regarding your enquiry (product models, accurately describe your problem and steps to replicate it etc) and send a mail to Support@dragino.cc.