Key points

  • On a spec sheet, look for LTE Band 48 or 5G band n48. Both names mean 3550–3700 MHz, the range the FCC (Federal Communications Commission) authorizes for CBRS[1][2][3].
  • Recent iPhones, including the iPhone 17, 17e, Air, 18 Pro, and Duo, list both bands but take only eSIMs[8][9][10][5][6]. Your network must be able to issue eSIM profiles to use them.
  • Check the exact model number, not just the product name. Google's US Pixel 10a lists both bands, while its Japan and rest-of-world models list neither[7].
  • Band support alone does not put a device on your network. A device may transmit on CBRS only after it receives an authorization signal from one of the network's CBRS radios[11].
  • "Not listed" in our tables means the maker's page we checked does not show the band. It does not prove the device lacks it.

What are Band 48 and n48?

Band 48 and n48 are two names for the same spectrum: the CBRS band, 3550–3700 MHz. Band 48 is its name in the LTE (4G) standard[1]. n48 is its name in the 5G standard[2]. In the US, FCC rules authorize CBRS in 3550–3700 MHz[3]. So a phone or router that supports Band 48 or n48 can operate in CBRS spectrum.

Check a device's spec sheet for the band list. Look for 48 in the LTE list, often labeled TDD-LTE, and n48 in the 5G list. The exact standards and FCC rules are in the last section, For engineers.

What does a device need to work on your network?

A device works on a private LTE or 5G network on CBRS only when three things line up. It supports the band, it holds a SIM card or eSIM from your network, and the network lets it on. Each one can fail on its own, so check all three before you buy.

All three checks pass: the device joins the private network.

Three checks before a device joins a CBRS private network. Band 48 and n48 are the 3GPP names for 3550–3700 MHz.[1][2] Recent iPhones such as the iPhone 17 use only eSIMs,[8] and a CBRS end-user device may operate only after it receives an authorization signal from a CBSD, whose instructions it must follow within 10 seconds.[11]
  • The band is built in and switched on. The same phone can ship in regional versions with different bands. Google lists n48 for the US models of the Pixel 10 and Pixel 11 phones, but not for their Japan and rest-of-world models[7]. Google also says band support depends on the carrier, and adds: "Some bands supported by the device hardware may not be enabled."[7] Zebra's spec sheets say actual band support can vary by country or carrier[12].
  • A SIM card or eSIM from your network. An eSIM is a digital SIM built into the device. Apple's US spec pages say recent iPhones, such as the iPhone 17 and iPhone 18 Pro, use only eSIMs[8][5]. They do not work with physical SIM cards[8][5]. Celona's 2022 setup guide for iPhones on its network used the physical SIM slot for the CBRS line[13]. So confirm that your network vendor can issue eSIM profiles before you plan on eSIM-only phones.
  • Permission from the network. Under FCC rules, a CBRS device may transmit only when it can receive an authorization signal from one of the network's CBRS radios[11]. These radios are called CBSDs (Citizens Broadband Radio Service Devices). So a phone that supports Band 48 still needs a working CBRS radio nearby.
  • Room for two lines, if you need it. Some sites need a carrier line and a private-network line on one device. Zebra says the ET65 tablet's physical SIM and eSIM let it connect to a private 5G or CBRS network and to a public carrier network[14].

Our guide to CBRS, SAS, and DPAs covers the network side. That includes the radios, the core software, and the SAS (Spectrum Access System), the service that authorizes CBRS radios. The CBRS map adds planning context for a site, such as federal protection areas and Priority Access License counts by county.

Which phones support Band 48 and n48?

Among US models, every iPhone and Pixel in this table lists both bands, except one Pixel 8 Pro model. Rugged phones vary, so check each one. We opened each maker's spec page on October 1, 2026. The labels in this table and the tables below mean:

  • Yes: the page lists the band by number.
  • CBRS listed: the page mentions CBRS but gives no band number. So it does not say whether the device supports Band 48, n48, or both.
  • Not listed: the page does not show the band. That is not proof the device lacks it.
Phones: LTE Band 48 and 5G n48 on manufacturer spec pages (US models, checked October 1, 2026)
DeviceLTE Band 485G n48SourceNotes
Apple iPhone DuoYesYes[6]Model A3447
Apple iPhone 18 Pro and 18 Pro MaxYesYes[5]Both listed models (A3472, A3473) show both bands
Apple iPhone AirYesYes[10]Model A3260
Apple iPhone 17YesYes[8]Model A3258
Apple iPhone 17eYesYes[9]Model A3575
Apple iPhone 17 Pro and 17 Pro MaxYesYes[15][16]Separate Apple pages for each model
Apple iPhone 16eYesYes[17]Model A3212
Apple iPhone 16 and 16 PlusYesYes[18][19]Separate Apple pages for each model
Apple iPhone 16 Pro and 16 Pro MaxYesYes[20][21]Separate Apple pages for each model
Apple iPhone 15, 15 Plus, 15 Pro, and 15 Pro MaxYesYes[22][23][24][25]Separate Apple pages for each model
Apple iPhone 14, 14 Plus, 14 Pro, and 14 Pro MaxYesYes[4][26][27][28]Separate Apple pages for each model
Apple iPhone SE (3rd generation)YesYes[29]Takes a nano-SIM and an eSIM
Google Pixel 11, 11 Pro, and 11 Pro XLYesYes[7]US models GPQQ7, G7SWN, GBC0H. Rest-of-world models list Band 48 but not n48.
Google Pixel 11 Pro FoldYesYes[7]Google lists one global model, GZDQ6
Google Pixel 10, 10 Pro, and 10 Pro XLYesYes[7]US models GLBW0, G4QUR, GUL82. Japan and rest-of-world models do not list n48.
Google Pixel 10 Pro FoldYesYes[7]Model GU0NP (all regions except Japan)
Google Pixel 10aYesYes[7]US model GE1GQ. Japan and rest-of-world models list neither band.
Google Pixel 9, 9 Pro, and 9 Pro XLYesYes[7]US models G2YBB, GR83Y, GGX8B
Google Pixel 9 Pro FoldYesYes[7]Model GGH2X (outside Japan)
Google Pixel 9aYesYes[7]US model GXQ96
Google Pixel 8 and 8aYesYes[7]Pixel 8 North America models G9BQD and GKWS6; Pixel 8a models GKV4X and G8HHN
Google Pixel 8 ProYesModel G1MNW: Yes. Model GC3VE: Not listed.[7]Google's page does not label these two models by region
Samsung Galaxy XCover7 ProCBRS listedNot listed[30]Samsung's US business page calls it CBRS-ready but lists no bands
Sonim XP ProYesYes[31]Rugged phone
Sonim XP Pro ThermalYesYes[32]Rugged phone with thermal camera
Sonim XP10 for VerizonYesNot listed[33]Sonim's page lists LTE bands only
Kyocera DuraForce PRO 3YesYes[34]Rugged phone
Apple's US spec pages describe every iPhone in this table except the iPhone SE (3rd generation) as eSIM only, not compatible with physical SIM cards. Pixel model numbers are the ones Google's tech specs page shows for the US, North America, or all regions.
Why Samsung Galaxy S phones are not in the table

On October 1, 2026, Samsung's US product pages for the Galaxy S26 Ultra and Galaxy S25 Ultra did not list cellular bands[35][36]. We do not fill gaps with band lists from third parties. Ask Samsung or your network vendor for the band list for your exact model number before you buy.

Which rugged devices, routers, and cameras support CBRS?

Each product below shows Band 48, n48, or CBRS support on the maker's own page. The list includes rugged handhelds and tablets, routers, a USB modem, and a network camera. It comes from the Private5G.com equipment directory. We took every device and gateway whose directory record claims Band 48, n48, or CBRS support. Then we re-checked each claim against the maker's own page on October 1, 2026. Products we could not re-confirm that day are left out.

Rugged devices, routers, gateways, and cameras in our directory (checked October 1, 2026)
DeviceTypeLTE Band 485G n48SourceNotes
Zebra MC9450Rugged handheldYesYes[12]North America band list; Zebra says band support can vary by country or carrier
Zebra TC201Rugged handheldYesYes[37]Zebra also lists Band 48 under private cellular
Zebra TC27Rugged handheldYesYes[38]North America band list
Zebra TC58Rugged handheldYesYes[39]North America band list; Zebra says CBRS is US only
Zebra TC78Rugged handheldYesYes[40]North America band list
Zebra ET65Rugged tabletYesYes[14]Zebra says CBRS is available in the US only
RugGear RG440Push-to-talk radio and bodycamYesYes[41]RugGear describes it as data-only
RugGear RG540Rugged smartphoneYesYes[42]From RugGear's US data sheet
Horizon DG505GUSB-C modemYesYes[43]
Horizon CC1005GNetwork cameraYesYes[44]
Horizon HZ51Indoor routerYesNot listed[45]Horizon cites LTE-TDD Band 48 from its spec sheet
Ericsson Cradlepoint R920LTE routerYesNot listed[46]Ericsson lists it as 5G-ready with an RX20 add-on modem
Ericsson Cradlepoint R980RouterCBRS listedCBRS listed[47]Private cellular support listed for CBRS, 4G LTE, and 5G, without band numbers
Ericsson Cradlepoint W2255Indoor/outdoor 5G adapterCBRS listedCBRS listed[48]Same private cellular listing as the R980
Cradlepoint R1900Rugged mobile routerCBRS listedCBRS listed[49]Same private cellular listing as the R980
Cradlepoint R2100Rooftop vehicle routerCBRS listedCBRS listed[50]Same private cellular listing as the R980
Cradlepoint E300Branch routerCBRS listedCBRS listed[51]Same private cellular listing as the R980
Cradlepoint E3000Branch routerCBRS listedCBRS listed[52]Same private cellular listing as the R980
Inseego Wavemaker FW3000Outdoor 5G CPENot listedCBRS listed[53]Inseego's blog says it supports multiple 5G bands, including CBRS
Digi IX30Industrial LTE routerYesNot listed[54]Band 48 listed for model IX30-00P7
Digi IX25Industrial 5G routerYesYes[55]Listed for the 5G eMBB model (IX25-5A-1G) and the 5G RedCap models
Digi IX40Industrial 5G routerYesYes[56]Model IX40-05
Semtech AirLink XR90Vehicle routerYesYes[57]Semtech also lists CBRS under carrier certifications
Semtech AirLink XR80Modular routerYesYes[58]
Semtech AirLink XR60Compact rugged routerYesYes[59]
Semtech AirLink RX4005G RedCap routerYesYes[60]Semtech points to its hardware user guide for carrier-specific bands
Semtech AirLink MP70LTE vehicle routerYesNot listed[61]Listed as CBRS B48 in the North America band list
Semtech AirLink RX55Industrial LTE routerYesNot listed[62]North America band list
Links go to Private5G.com equipment records. Sources are the manufacturers' pages as of October 1, 2026. Ericsson Enterprise Wireless Solutions is the Cradlepoint business; Semtech's AirLink line was formerly Sierra Wireless.

Vendor profiles: Zebra Technologies, RugGear, Horizon, Ericsson Enterprise Wireless Solutions (Cradlepoint), Inseego, Digi International, and Semtech. The network's radios, the CBSDs that broadcast Band 48 or n48, are network equipment rather than devices. The equipment directory lists them separately.

Which cellular modules support Band 48 and n48?

Companies that build their own sensors, kiosks, or vehicle systems usually start from an embedded cellular module. A module is the small cellular radio board inside a finished product. A module that supports a band does not guarantee that a product built on it does. The product maker chooses the antennas, firmware, and regional version.

Embedded modules: band support on module makers' data sheets (checked October 1, 2026)
ModuleFormLTE Band 485G n48SourceNotes
Quectel RM520N-GLM.2 5G moduleYesYes (NSA and SA)[63]The RM520N-EU variant lists neither. Quectel says different regions use different software versions.
Semtech (Sierra Wireless) EM9191M.2 5G moduleYesYes[64]Semtech says it is certified by the FCC for CBRS private networks
Semtech (Sierra Wireless) EM7511M.2 LTE moduleYesNot listed[65]LTE Cat-12 module for the Americas
Telit Cinterion FN990A28 and FN990A40M.2 5G data cardYesYes[66]Telit labels Band 48 as CBRS

How to check a phone's band

First, confirm that the phone supports the band at all:

  1. Find the model number

    On an iPhone, open Settings, tap General, then About. Tap the part number next to Model Number to show the model number[67]. On a Pixel, open Settings, tap About phone, and scroll to Model[68].

  2. Look it up on the maker's spec page

    Match the exact model number to the maker's spec page. Look for 48 in the LTE band list and n48 in the 5G list.

  3. Check the SIM type

    Note whether the model takes a physical SIM card, an eSIM, or both. Then confirm that your network vendor can issue that type.

To see which band an iPhone is using right now, use Field Test Mode. According to private network vendor Celona, Apple does not publicly document it[69]. So these steps come from Celona's documentation.

  1. Dial the Field Test code

    Open the Phone app keypad and dial *3001#12345#*. Celona says you must type the code on the dialer, not use a saved contact[69].

  2. Leave only the private-network line active

    If the phone has a carrier line and a private-network line, turn the carrier line off. Celona says that with only its private network active, Field Test Mode shows the band, the bandwidth, the cell ID, and signal readings[69]. With both lines on, readings for the line not used for cellular data update less often[69]. They also have no timestamp, so they can be out of date[69].

  3. Read the band

    A band value of 48 means the phone is on LTE Band 48, which is CBRS spectrum[1][3]. We found no official documentation of how Field Test Mode labels 5G bands. So confirm n48 against your network's settings.

Android has no single documented field-test code that works on every phone. Two approaches have official documentation:

  • The Android testing menu. Standard Android has a testing menu that you open by dialing a code[70][71]. Its phone information screen lists the cells the phone can see, with a channel number for each[72][73]. The channel number tells you the band; the For engineers section gives the ranges. Phone makers ship their own builds of Android. We found no maker documentation that confirms the code on specific brands, so it may do nothing on some phones.
  • Apps that read the band. Since Android 11, Android lets apps read the bands of a cell the phone sees[74][75][76]. A network-information app built on this feature can show the band in use.

To check the band across a whole building rather than at one spot, use a walk-test app. On Android, WalkTest records the frequency band with each reading as you walk a floor plan[77]. WalkTest is made by Waveform; Private5G.com is operated by the team behind Waveform and RSRF.

What band support does not guarantee

A band on a spec sheet is a good start, not a promise. Check these points before you order devices in volume.

  • Unknown is not unsupported. Our tables record only what each maker's page says. A band marked Not listed may still be in the hardware. Ask the maker before you rule a device out.
  • Built in is not the same as switched on. Google says some bands its hardware supports may not be enabled[7]. Semtech sends buyers to its hardware user guide for band support by carrier[60]. Quectel says different regions use different software versions of the RM520N[63].
  • Model numbers matter more than product names. Quectel's RM520N-GL lists Band 48 and n48, while the RM520N-EU lists neither[63]. Google's Pixel 10a lists both bands for its US model and neither for its Japan and rest-of-world models[7].
  • The device needs your network's SIM card or eSIM. eSIM-only phones need an eSIM profile from your network. For locked iPhones, Celona's 2022 guide put the carrier line on the eSIM and kept the physical SIM slot for the CBRS network[13].
  • The network has to let the device on. A CBRS device may transmit only after it receives an authorization signal from a CBRS radio[11]. A Band 48 phone outside the coverage of a working CBRS radio has nothing to connect to.
  • Test before you buy in volume. Put one unit of each model on your actual network, with the planned SIM type and software version. Do this before you order a fleet.

For the rest of the network, see how to scope a private cellular network, or describe your site in the project planner.

For engineers: band definitions, channel numbers, and device rules

3GPP (3rd Generation Partnership Project), the body that writes LTE and 5G standards, names both bands. The LTE (Long Term Evolution) radio specification defines operating band 48 as 3550–3700 MHz for uplink and downlink[1]. Band 48 uses TDD (time-division duplex), where both directions share one channel and take turns[1]. The 5G NR (New Radio) specification defines band n48 over the same 3550–3700 MHz range, also TDD[2].

Under FCC rules, General Authorized Access users may operate across the whole 3550–3700 MHz range. Priority Access licensees may operate in 3550–3650 MHz[3].

Band 48 and n48 at a glance
ItemLTE Band 485G NR band n48
Frequency range3550–3700 MHz[1]3550–3700 MHz[2]
Duplex modeTDD[1]TDD[2]
Where 3GPP defines itTS 36.101, Table 5.5-1[1]TS 38.101-1, Table 5.2-1[2]
Channel numbers a phone reportsEARFCN 55240–56739[1]NR-ARFCN 636667–646666[2]
US rules47 CFR Part 96 (CBRS)[3]47 CFR Part 96 (CBRS)[3]
EARFCN (E-UTRA Absolute Radio Frequency Channel Number) and NR-ARFCN are the channel numbers that diagnostic screens show. E-UTRA is 3GPP's name for the LTE radio interface.
  • Device authorization. A CBSD (Citizens Broadband Radio Service Device) is a CBRS base station. Under 47 CFR 96.47, an end-user device may operate only when it can receive and decode an authorization signal from a CBSD[11]. It must stop, change frequency, or change power within 10 seconds when the CBSD tells it to[11].
  • iPhone Field Test Mode. The values Celona lists are the band, bandwidth, PCI (physical cell ID), RSRP (reference signal received power), and SINR (signal-to-interference-plus-noise ratio)[69].
  • Android testing menu. Android's developer documentation says dialer codes of the form *#*#<code>#*#* open developer menus[70]. The Android Open Source Project (AOSP) Settings app assigns code 4636 to its Testing menu[71]. Its phone information screen[72] lists cells with an EARFCN column for LTE and an NRARFCN column for 5G[73]. It marks registered cells with R and the primary serving cell with P[73]. An EARFCN from 55240 to 56739 is Band 48[1]. An NR-ARFCN from 636667 to 646666 falls in the range 3GPP lists for n48[2].
  • Android band API. Since API level 30 (Android 11), apps can read a cell's bands through CellIdentityLte.getBands() and CellIdentityNr.getBands()[74][75][76]. The call returns an empty list when the band is not available[74][75].

Common questions

Do iPhones support CBRS Band 48?

Yes, every model we checked. Apple's spec pages list LTE Band 48 and 5G n48 for the iPhone SE (3rd generation) and the iPhone 14 series[29][4]. They list both for each later model in our phone table too, through the iPhone 18 Pro and iPhone Duo[5][6]. Recent US models take only eSIMs, so your network must be able to issue an eSIM profile[8].

How do I know if my phone supports Band 48?

Find the exact model number in the phone's settings. Then look it up on the maker's spec page[67][68]. Look for 48 in the LTE band list (often labeled TDD-LTE) and n48 in the 5G list. Check the model number, not just the name: Google's US and non-US versions of the same Pixel can list different bands[7].

What is n48?

n48 is the 5G name for the 3550–3700 MHz band. It is the 5G counterpart of LTE Band 48[2][1]. In the US, that range is the CBRS band[3].

Can I use a regular phone on a private LTE network?

Often, if three things are true. The phone supports Band 48 or n48, it holds your network's SIM card or eSIM, and the network lets it on. Phones such as the iPhone 17 and the US Pixel 10 list both bands on their spec pages[8][7]. But Google notes that some bands the hardware supports may not be enabled[7]. Test your exact model and software version on the network before rollout.

How do I check the band in iPhone Field Test Mode?

Dial *3001#12345#* on the Phone keypad, not from a saved contact[69]. Celona's documentation says that with only the private-network line active, Field Test Mode shows the band, bandwidth, PCI, RSRP, and SINR[69]. A band value of 48 means the phone is on LTE Band 48.

Is Band 48 the same as CBRS?

They describe the same spectrum. Band 48 is the LTE standard's name for 3550–3700 MHz[1]. That is the range the FCC authorizes for CBRS[3]. CBRS is the US rule set for sharing that spectrum. Band 48 and n48 are the band numbers devices use for it.

Next in the reading path

Guide 5 of 7

How much does a private LTE or 5G network cost?

What should you budget, up front and every year?

20 min read

Sources

  1. ETSI TS 136 101 V19.6.0 (3GPP TS 36.101 Release 19): E-UTRA user equipment radio transmission and reception — ETSI / 3GPP. Accessed Oct 1, 2026.
  2. ETSI TS 138 101-1 V19.6.0 (3GPP TS 38.101-1 Release 19): NR user equipment radio transmission and reception, Part 1: Range 1 standalone — ETSI / 3GPP. Accessed Oct 1, 2026.
  3. 47 CFR 96.11, Frequencies (Citizens Broadband Radio Service) — eCFR, Office of the Federal Register. Accessed Oct 1, 2026.
  4. iPhone 14 - Tech Specs — Apple. Accessed Oct 1, 2026.
  5. iPhone 18 Pro and 18 Pro Max - Technical Specifications — Apple. Accessed Oct 1, 2026.
  6. iPhone Duo - Technical Specifications — Apple. Accessed Oct 1, 2026.
  7. Pixel phone hardware tech specs — Google (Pixel Phone Help). Accessed Oct 1, 2026.
  8. iPhone 17 - Technical Specifications — Apple. Accessed Oct 1, 2026.
  9. iPhone 17e - Technical Specifications — Apple. Accessed Oct 1, 2026.
  10. iPhone Air - Technical Specifications — Apple. Accessed Oct 1, 2026.
  11. 47 CFR 96.47, End user device additional requirements — eCFR, Office of the Federal Register. Accessed Oct 1, 2026.
  12. MC9400/MC9450 Mobile Computer Specification Sheet — Zebra Technologies. Accessed Oct 1, 2026.
  13. Apple iPhone / iPad on Celona — Celona Help Center, Mar 8, 2022. Accessed Oct 1, 2026.
  14. ET60/ET65 Enterprise Tablets Specification Sheet — Zebra Technologies. Accessed Oct 1, 2026.
  15. iPhone 17 Pro - Tech Specs — Apple. Accessed Oct 1, 2026.
  16. iPhone 17 Pro Max - Tech Specs — Apple. Accessed Oct 1, 2026.
  17. iPhone 16e - Tech Specs — Apple. Accessed Oct 1, 2026.
  18. iPhone 16 - Tech Specs — Apple. Accessed Oct 1, 2026.
  19. iPhone 16 Plus - Tech Specs — Apple. Accessed Oct 1, 2026.
  20. iPhone 16 Pro - Tech Specs — Apple. Accessed Oct 1, 2026.
  21. iPhone 16 Pro Max - Tech Specs — Apple. Accessed Oct 1, 2026.
  22. iPhone 15 - Tech Specs — Apple. Accessed Oct 1, 2026.
  23. iPhone 15 Plus - Tech Specs — Apple. Accessed Oct 1, 2026.
  24. iPhone 15 Pro - Tech Specs — Apple. Accessed Oct 1, 2026.
  25. iPhone 15 Pro Max - Tech Specs — Apple. Accessed Oct 1, 2026.
  26. iPhone 14 Plus - Tech Specs — Apple. Accessed Oct 1, 2026.
  27. iPhone 14 Pro - Technical Specifications — Apple. Accessed Oct 1, 2026.
  28. iPhone 14 Pro Max - Technical Specifications — Apple. Accessed Oct 1, 2026.
  29. iPhone SE (3rd generation) - Tech Specs — Apple. Accessed Oct 1, 2026.
  30. Galaxy XCover7 Pro | Rugged Phone for Business — Samsung. Accessed Oct 1, 2026.
  31. Sonim XP Pro specifications — Sonim Technologies. Accessed Oct 1, 2026.
  32. Sonim XP Pro Thermal specifications — Sonim Technologies. Accessed Oct 1, 2026.
  33. Rugged XP10 for Verizon — Sonim Technologies. Accessed Oct 1, 2026.
  34. Ultra-Rugged DuraForce PRO 3 — Kyocera. Accessed Oct 1, 2026.
  35. Galaxy S26 Ultra (US product page) — Samsung. Accessed Oct 1, 2026.
  36. Galaxy S25 Ultra | Features & Highlights (US product page) — Samsung. Accessed Oct 1, 2026.
  37. TC201 Mobile Computer Specification Sheet — Zebra Technologies. Accessed Oct 1, 2026.
  38. TC22/TC27 Mobile Computers Specification Sheet — Zebra Technologies. Accessed Oct 1, 2026.
  39. TC53/TC58 Mobile Computer Specification Sheet — Zebra Technologies. Accessed Oct 1, 2026.
  40. TC73/TC78 Mobile Computers Specification Sheet — Zebra Technologies. Accessed Oct 1, 2026.
  41. RG440 5G Radio — RugGear. Accessed Oct 1, 2026.
  42. RG540 data sheet (US version, B13/B14) — RugGear. Accessed Oct 1, 2026.
  43. Horizon DG505G Type-C USB Dongle — Horizon. Accessed Oct 1, 2026.
  44. Horizon CC1005G 5G CBRS Industrial Network Camera — Horizon. Accessed Oct 1, 2026.
  45. Horizon HZ51 5G Indoor Router — Horizon. Accessed Oct 1, 2026.
  46. Ericsson Cradlepoint R920 — Ericsson. Accessed Oct 1, 2026.
  47. Ericsson Cradlepoint R980 — Ericsson. Accessed Oct 1, 2026.
  48. Ericsson Cradlepoint W2255 — Ericsson. Accessed Oct 1, 2026.
  49. Ericsson Cradlepoint R1900 — Ericsson. Accessed Oct 1, 2026.
  50. Ericsson Cradlepoint R2100 — Ericsson. Accessed Oct 1, 2026.
  51. Ericsson Cradlepoint E300 — Ericsson. Accessed Oct 1, 2026.
  52. Ericsson Cradlepoint E3000 — Ericsson. Accessed Oct 1, 2026.
  53. Building Private 5G Networks Indoors with Outdoor Solutions — Inseego, Jul 17, 2023. Accessed Oct 1, 2026.
  54. Digi IX30 Industrial Cellular Router — Digi International. Accessed Oct 1, 2026.
  55. Digi IX25 5G Industrial Cellular Router — Digi International. Accessed Oct 1, 2026.
  56. Digi IX40 5G Edge Computing Industrial IoT Cellular Router Solution — Digi International. Accessed Oct 1, 2026.
  57. AirLink XR90 Dual 5G Vehicle Router — Semtech. Accessed Oct 1, 2026.
  58. AirLink XR80 5G LTE Cellular Router — Semtech. Accessed Oct 1, 2026.
  59. AirLink XR60 Rugged 5G Router — Semtech. Accessed Oct 1, 2026.
  60. AirLink RX400 5G RedCap Router — Semtech. Accessed Oct 1, 2026.
  61. AirLink MP70 LTE-Advanced Vehicle Router — Semtech. Accessed Oct 1, 2026.
  62. AirLink RX55 Rugged Industrial IoT Router — Semtech. Accessed Oct 1, 2026.
  63. Quectel RM520N Series 5G Module Specification V1.4 — Quectel. Accessed Oct 1, 2026.
  64. EM9191 5G NR Sub-6 Module — Semtech. Accessed Oct 1, 2026.
  65. EM7511 Public Safety Module — Semtech. Accessed Oct 1, 2026.
  66. FN990A40/A28 and FN990A40-HP/A28-HP 5G/LTE Product Description — Telit Cinterion. Accessed Oct 1, 2026.
  67. Find the model number of your iPhone, iPad, or iPod touch — Apple, Dec 9, 2025. Accessed Oct 1, 2026.
  68. Find your device serial number & model — Google Store Help. Accessed Oct 1, 2026.
  69. Apple iOS Field Test Mode — Celona Help Center, Apr 29, 2025. Accessed Oct 1, 2026.
  70. TelephonyManager: ACTION_SECRET_CODE — Android Developers. Accessed Oct 1, 2026.
  71. Settings app AndroidManifest.xml (TestingSettingsBroadcastReceiver, secret code 4636) — Android Open Source Project. Accessed Oct 1, 2026.
  72. Settings app testing_settings.xml (Testing menu: phone information screen) — Android Open Source Project. Accessed Oct 1, 2026.
  73. RadioInfo.java (phone information test screen) — Android Open Source Project. Accessed Oct 1, 2026.
  74. CellIdentityLte API reference — Android Developers. Accessed Oct 1, 2026.
  75. CellIdentityNr API reference — Android Developers. Accessed Oct 1, 2026.
  76. SDK Platform release notes — Android Developers. Accessed Oct 1, 2026.
  77. WalkTest - Indoor Cell Mapping (Google Play listing) — Waveform (affiliated with Private5G.com). Accessed Oct 2, 2026.