Cellular LPWAN protocol

NB-IoT
Simulated cellular LPWAN

Understand 3GPP NB-IoT (Narrowband IoT) with a virtual eNB, network attach, CoAP/LwM2M and coverage computed by the radio engine — compared side by side with LoRaWAN in the same lab.

How it works

Cellular attach, LwM2M registration and CoAP telemetry — step by step.

NB-IoT · 3GPP Rel.13 · LwM2M / CoAP

1 — Attaching to the eNB

The NB-IoT module attaches to the virtual cell (eNB). The eNB assigns a C-RNTI, configures the NPUSCH channel and allocates the control RB. The device receives its EPS Bearer.

1 / 5

$ AT+CGDCONT=1,"IP","iot.lab"

OK

$ AT+CEREG=2

OK

+CEREG: 1,"0001","00000001",9

Terminal AT — NB-IoT Module
▶ AT+CGDCONT=1,"IP","iot.example.com"
OK
▶ AT+CEREG=2
OK
+CEREG: 1,"0001","00000001",9
▶ AT+CSCON?
+CSCON: 1
OK
▶ AT+NSOST=0,"10.0.0.1",5683,5,"48656C6C6F"
0,5
OK
+NSONMI: 0,4
▶ _

Simulated parameters

Standard
3GPP Release 13+
Band
Sub-GHz (700–900 MHz)
MCL
164 dB (extended coverage)
DL/UL rate
~26 kbps / ~62 kbps
Latency
1 – 10 seconds
Data protocols
CoAP (LwM2M), UDP
NB-IoT vs LoRaWAN
NB-IoT
LoRaWAN
Infrastructure
Carrier
Private / public
Data rate
~10 kbps
0.25–50 kbps
Latency
1–10 s
1–5 s
Coverage
164 dB MCL
157 dB MCL SF12
Roaming
Global (SIM)
Not native

What you simulate

NB-IoT 3GPP from A to Z — from network attach to CoAP transmission

📶

Network attach

AT+CFUN, AT+CGATT and AT+CGDCONT, with +CEREG URCs: follow every step of registering on the cell.

📡

Virtual eNB

Virtual base station placed on the map. Outside its coverage, the radio engine refuses to transmit.

📦

3GPP AT commands

Standard and Quectel AT commands: AT+CGDCONT (APN), AT+CEREG, AT+NBAND, AT+NCDP, AT+NSOST (UDP), AT+NSORF.

🔋

LwM2M with Leshan

The node registers on an Eclipse Leshan instance dedicated to the student, which observes it and writes to it.

🌍

CoAP / UDP

Send data over CoAP or raw UDP (AT+NSOST) across the virtual NB-IoT network.

📊

Link budget

RSSI and SNR computed by the radio engine from the distance to the eNB, read back with AT+CSQ and AT+NUESTATS.

🔁

Modem identity

IMEI, IMSI, operator and band readable as on a real module: AT+CGSN, AT+CIMI, AT+COPS?, AT+QNWINFO.

⏱️

Latency & throughput

NB-IoT: ~1-10 kbps, latency ~1-10 s. Perfect for comparing with LoRaWAN on identical use cases.

📶

Compare NB-IoT and LoRaWAN in real time

The same lab, both protocols — ideal for comparative LPWAN courses.

Open the Lab →